Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

Заразена ми е машината [VIRUT - приключена]

29 юни 201115 г.

Здравейте, надявам се да можете да ми помогнете да разчистя вирусите без да се налага да форматирам целия хард.Проблема ми се появи преди седмица - форматирах С-то и направих нова инсталация на win ХР с SP 3(това ползвам имам инсталационен диск).На другия ден се оказа, че от някъде се е самоинсталирал Profesional Shield Pro (мисля че така беше),последва нова преинсталация,като този път си инсталирах Malwarebytes anti-malware pro и преди да направя каквото и да било го пуснах да сканира.Каквото имаше по другите дялове го намери и премахна,но явно само кагато е включена няма проблем,защото вчера я бях изключила програмката,а днес,същите вируси пак са на линия.Дано съм писала на правилното място.Благодаря Ви предварително.Ето log файловете: . DDS (Ver_2011-06-23.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 Run by Veni at 9:57:04 on 2011-06-29 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.447.201 [GMT 3:00] . . ============== Running Processes =============== . C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE svchost.exe C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe C:\Program Files\D-Tools\daemon.exe C:\Program Files\uTorrent\uTorrent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe C:\Program Files\Datecs\FlexType 2K\FType2K.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Genius\ioCentre\GMouseService.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\DOCUME~1\Veni\LOCALS~1\Temp\qtfcyyp.exe C:\DOCUME~1\Veni\LOCALS~1\Temp\qtfcyyp.exe C:\WINDOWS\TEMP\VRT5.tmp C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe . ============== Pseudo HJT Report =============== . uStart Page = about:blank uInternet Settings,ProxyOverride = *.local mWinlogon: Userinit=Userinit.exe, BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" /MINIMIZED uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [Advanced SystemCare 4] c:\program files\iobit\advanced systemcare 4\ASCTray.exe mRun: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd mRun: [DAEMON Tools-1033] "c:\program files\d-tools\daemon.exe" -lang 1033 mRun: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent mRun: [wi5jb] c:\documents and settings\veni\application data\t1tvgqb.exe mRun: [input Manager] c:\documents and settings\veni\application data\conima.exe dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE dRun: [engel] c:\documents and settings\veni\application data\updates\updates.exe dRun: [office] "c:\windows\system32\rundll32.exe" c:\windows\temp\88203.dll,S dRun: [pj6vi7wlh9] c:\documents and settings\veni\pj6vi7wlh9.exe mExplorerRun: [60xu9] c:\windows\temp\qtfcyyp.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\flexty~1.lnk - c:\program files\datecs\flextype 2k\FType2K.exe IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL Trusted Zone: municipalbank.bg\mwb DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} - hxxps://mwb.municipalbank.bg/CSWebBankASP/capicom.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{1A7F4FAE-198E-4F20-9EE1-8460CCC59799} : DhcpNameServer = 192.168.1.1 . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\veni\application data\mozilla\firefox\profiles\v71c9opq.default\ FF - prefs.js: browser.startup.homepage - about:blank FF - prefs.js: network.proxy.type - 0 . ============= SERVICES / DRIVERS =============== . R0 d343bus;d343bus;c:\windows\system32\drivers\d343bus.sys [2011-6-27 136832] R0 d343port;d343port;c:\windows\system32\drivers\d343port.sys [2011-6-27 5632] R2 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-6-28 352656] R2 GeniusMouseService;GeniusMouseService;c:\genius\iocentre\GMouseService.exe [2011-6-27 39936] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-6-27 366640] R3 gHidPnp;USB Device Enhanced Function Driver;c:\windows\system32\drivers\gHidPnp.sys [2011-6-27 20480] R3 gMouPS2;PS2 Scroll Mouse Device;c:\windows\system32\drivers\gMouPS2.sys [2011-6-27 17408] R3 gMouUsb;USB Mouse Device Drv;c:\windows\system32\drivers\gMouUsb.sys [2011-6-27 11520] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-6-27 22712] R3 SiS7012;Service for AC'97 Sample Driver (WDM);c:\windows\system32\drivers\sis7012.sys [2004-11-3 267136] S2 MouseDriver;MouseDriver;c:\documents and settings\veni\application data\MouseDriver.bat [2011-6-29 106] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-6-27 39984] . =============== Created Last 30 ================ . 2011-06-29 06:57:08 25600 ----a-w- c:\documents and settings\veni\application data\1k08i5h8.exe 2011-06-29 06:57:01 91648 ----a-w- c:\documents and settings\veni\application data\t1tvgqb.exe 2011-06-29 06:56:34 25088 ----a-w- c:\documents and settings\veni\pj6vi7wlh9.exe 2011-06-29 06:02:14 106 ---h--w- c:\documents and settings\veni\application data\MouseDriver.bat 2011-06-29 05:59:38 311296 ----a-w- c:\windows\system32\avtapi.exe 2011-06-29 05:54:18 -------- d-----w- c:\documents and settings\veni\application data\engel 2011-06-29 05:54:15 135168 ----a-w- c:\documents and settings\veni\application data\D.tmp 2011-06-29 05:54:10 393 ----a-w- c:\documents and settings\veni\application data\B.tmp 2011-06-29 05:53:39 64 --sha-w- c:\documents and settings\veni\application data\svchost.tmp 2011-06-28 14:30:48 -------- d-----w- c:\documents and settings\veni\application data\SolSuite 2011-06-28 14:30:48 -------- d-----w- c:\documents and settings\all users\application data\TreeCardGames 2011-06-28 09:17:53 -------- d-----w- c:\documents and settings\veni\local settings\application data\Mozilla 2011-06-28 08:41:37 -------- d-----w- c:\documents and settings\veni\local settings\application data\Apple Computer 2011-06-28 08:41:10 -------- d-----w- c:\program files\Bonjour 2011-06-28 08:40:36 -------- d-----w- c:\documents and settings\veni\local settings\application data\Apple 2011-06-28 07:54:45 -------- d-----w- c:\documents and settings\veni\application data\IObit 2011-06-28 07:54:32 -------- d-----w- c:\windows\system32\appmgmt 2011-06-28 07:38:02 -------- d-----w- c:\program files\IObit 2011-06-28 06:51:16 -------- d-----w- c:\documents and settings\veni\application data\123 Free Solitaire 2011-06-27 17:15:33 -------- d-----w- c:\documents and settings\veni\application data\Switchball 2011-06-27 17:15:32 -------- d-----w- c:\documents and settings\all users\application data\Trymedia 2011-06-27 16:09:57 -------- d-----w- c:\program files\sisagp 2011-06-27 16:09:55 65536 ------w- c:\windows\system32\SiSHook.dll 2011-06-27 16:09:55 110592 ------w- c:\windows\system32\TVMode.dll 2011-06-27 16:09:54 192512 ------w- c:\windows\system32\SiSUninstall.exe 2011-06-27 16:09:54 -------- d-----w- c:\program files\SiSUnin 2011-06-27 16:09:51 86016 ----a-w- c:\windows\InstFunc.exe 2011-06-27 16:09:51 53248 ----a-w- c:\windows\system32\SiSPower.dll 2011-06-27 16:09:51 337320 ----a-w- c:\windows\difxapi.dll 2011-06-27 16:09:51 237568 ----a-w- c:\windows\Progress.exe 2011-06-27 16:09:51 12288 ----a-w- c:\windows\InstFunc.dll 2011-06-27 16:09:39 -------- d-----w- c:\program files\SiS VGA Utilities V3.93 2011-06-27 16:06:45 -------- d-----w- c:\program files\SiS7012 2011-06-27 15:51:11 49024 ----a-w- c:\windows\system32\drivers\sisidex.sys 2011-06-27 15:51:10 9472 ----a-w- c:\windows\system32\drivers\sisperf.sys 2011-06-27 15:51:10 139264 ----a-w- c:\windows\system32\IDEproperty.dll 2011-06-27 15:43:21 20480 ----a-w- c:\windows\system32\drivers\gHidPnp.sys 2011-06-27 15:43:21 17408 ----a-w- c:\windows\system32\drivers\gMouPS2.sys 2011-06-27 15:43:21 11520 ----a-w- c:\windows\system32\drivers\gMouUsb.sys 2011-06-27 15:42:15 -------- d-----w- C:\Genius 2011-06-27 15:33:12 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-06-27 15:29:28 -------- d-----w- c:\windows\system32\Adobe 2011-06-27 15:27:30 -------- d-----w- c:\program files\sms 2011-06-27 15:27:19 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2 2011-06-27 15:22:28 -------- d-----r- c:\program files\Skype 2011-06-27 15:10:38 -------- d-----w- c:\program files\Driver-Soft 2011-06-27 15:10:17 -------- d-----w- c:\documents and settings\all users\application data\ACD Systems 2011-06-27 15:10:01 -------- d-----w- c:\program files\common files\ACD Systems 2011-06-27 15:10:01 -------- d-----w- c:\program files\ACD Systems 2011-06-27 15:08:23 -------- d-----w- c:\documents and settings\veni\local settings\application data\Downloaded Installations 2011-06-27 15:07:13 -------- d-----w- c:\documents and settings\veni\application data\Ashampoo 2011-06-27 15:06:33 -------- d-----w- c:\documents and settings\veni\local settings\application data\ashampoo 2011-06-27 15:06:33 -------- d-----w- c:\documents and settings\all users\application data\ashampoo 2011-06-27 15:06:03 -------- d-----w- c:\program files\Ashampoo 2011-06-27 14:59:14 -------- d-----w- c:\documents and settings\veni\local settings\application data\Google 2011-06-27 14:56:33 -------- d-----w- c:\documents and settings\veni\local settings\application data\Adobe 2011-06-27 14:50:40 -------- d-----w- c:\program files\The KMPlayer 2011-06-27 14:44:52 847872 ----a-w- c:\program files\windows media player\wmsetsdk.exe 2011-06-27 14:44:52 47616 ----a-w- c:\program files\windows media player\msoobci.dll 2011-06-27 14:44:16 -------- d-----w- c:\windows\RegisteredPackages 2011-06-27 14:42:59 18944 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll 2011-06-27 14:42:59 17920 ----a-w- c:\windows\system32\mdimon.dll 2011-06-27 14:42:54 -------- d-----w- c:\program files\Mv2Player 2011-06-27 14:41:58 -------- d-----w- c:\program files\Microsoft ActiveSync 2011-06-27 14:41:41 -------- d-----w- c:\windows\SHELLNEW 2011-06-27 14:37:06 5632 ----a-w- c:\windows\system32\drivers\d343port.sys 2011-06-27 14:37:06 136832 ----a-w- c:\windows\system32\drivers\d343bus.sys 2011-06-27 14:37:05 -------- d-----w- c:\program files\D-Tools 2011-06-27 14:36:51 -------- d-----w- c:\windows\Downloaded Installations 2011-06-27 14:18:23 -------- d-----w- c:\windows\system32\scripting 2011-06-27 14:18:22 -------- d-----w- c:\windows\system32\en 2011-06-27 14:18:22 -------- d-----w- c:\windows\system32\bits 2011-06-27 14:18:22 -------- d-----w- c:\windows\l2schemas 2011-06-27 14:15:28 -------- d-----w- c:\windows\network diagnostic 2011-06-27 14:07:40 -------- d-sh--w- c:\documents and settings\veni\IECompatCache 2011-06-27 14:07:22 -------- d-sh--w- c:\documents and settings\veni\PrivacIE 2011-06-27 13:50:14 -------- d-sh--w- c:\documents and settings\veni\IETldCache 2011-06-27 13:39:11 -------- d-----w- c:\windows\ie8updates 2011-06-27 13:39:00 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll 2011-06-27 13:39:00 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll 2011-06-27 13:39:00 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll 2011-06-27 13:39:00 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll 2011-06-27 13:39:00 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll 2011-06-27 13:38:59 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll 2011-06-27 13:38:59 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll 2011-06-27 13:38:03 -------- dc-h--w- c:\windows\ie8 2011-06-27 13:30:11 -------- d-----w- c:\windows\pss 2011-06-27 13:30:00 -------- d-----w- c:\windows\ServicePackFiles 2011-06-27 13:17:42 -------- d-----w- c:\program files\ReflexiveArcade 2011-06-27 12:05:02 -------- d-----w- c:\documents and settings\all users\application data\GoBit Games 2011-06-27 10:48:41 73216 ------w- c:\windows\system32\drivers\atintuxx.sys 2011-06-27 10:37:20 272128 -c----w- c:\windows\system32\dllcache\bthport.sys 2011-06-27 10:37:20 272128 ------w- c:\windows\system32\drivers\bthport.sys 2011-06-27 10:37:14 353792 -c----w- c:\windows\system32\dllcache\srv.sys 2011-06-27 10:37:07 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys 2011-06-27 10:37:04 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll 2011-06-27 10:37:00 772096 -c----w- c:\windows\system32\dllcache\helpsvc.exe 2011-06-27 10:36:50 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll 2011-06-27 10:36:50 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll 2011-06-27 10:35:03 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll 2011-06-27 10:34:03 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys 2011-06-27 10:33:47 321024 ------w- c:\windows\system32\browserchoice.exe 2011-06-27 10:32:45 284160 -c----w- c:\windows\system32\dllcache\pdh.dll 2011-06-27 10:32:44 730112 -c----w- c:\windows\system32\dllcache\lsasrv.dll 2011-06-27 10:32:44 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll 2011-06-27 10:32:44 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll 2011-06-27 10:32:44 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll 2011-06-27 10:32:44 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll 2011-06-27 10:32:44 255488 -c----w- c:\windows\system32\dllcache\wmiprvse.exe 2011-06-27 10:32:44 138240 -c----w- c:\windows\system32\dllcache\services.exe 2011-06-27 10:32:43 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll 2011-06-27 10:32:43 2146304 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe 2011-06-27 10:32:42 2189952 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe 2011-06-27 10:32:41 2024448 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe 2011-06-27 10:30:20 2560 ------w- c:\windows\system32\xpsp4res.dll 2011-06-27 10:30:19 243200 -c----w- c:\windows\system32\dllcache\wordpad.exe 2011-06-27 10:26:26 -------- d-----w- c:\windows\system32\PreInstall 2011-06-27 10:26:25 26144 ----a-w- c:\windows\system32\spupdsvc.exe 2011-06-27 10:21:50 -------- d-----w- c:\windows\system32\SoftwareDistribution 2011-06-27 10:04:02 3072 ----a-w- c:\windows\system32\drivers\audstub.sys 2011-06-27 10:03:35 57600 ----a-w- c:\windows\system32\drivers\redbook.sys 2011-06-27 10:03:10 44672 -c--a-w- c:\windows\system32\dllcache\uagp35.sys 2011-06-27 10:03:10 44672 ----a-w- c:\windows\system32\drivers\UAGP35.SYS 2011-06-27 10:03:03 32256 ----a-r- c:\windows\system32\drivers\sisnic.sys 2011-06-27 10:02:56 74240 ----a-w- c:\windows\system32\usbui.dll 2011-06-27 10:02:54 10624 ----a-w- c:\windows\system32\drivers\gameenum.sys 2011-06-27 10:00:59 69584 ----a-w- c:\windows\system\AVICAP.DLL . ==================== Find3M ==================== . 2011-06-29 06:57:22 105 ---h--w- c:\documents and settings\veni\application data\Input.bat 2011-06-27 07:38:17 0 ----a-w- c:\windows\system32\ConduitEngine.tmp 2011-05-29 06:11:30 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-05-29 06:11:20 22712 ----a-w- c:\windows\system32\drivers\mbam.sys . ============= FINISH: 9:57:57,59 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-06-23.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 27.06.2011 г. 10:18:17 System Uptime: 29.06.2011 г. 09:55:22 (0 hours ago) . Motherboard: | | K7S41GX Processor: AMD Duron | Socket-A | 1604/133mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 39 GiB total, 30,847 GiB free. D: is FIXED (NTFS) - 98 GiB total, 9,006 GiB free. E: is FIXED (NTFS) - 98 GiB total, 5,906 GiB free. F: is FIXED (NTFS) - 98 GiB total, 9,381 GiB free. G: is FIXED (NTFS) - 134 GiB total, 33,106 GiB free. H: is CDROM () I: is CDROM (CDFS) . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP1: 27.06.2011 г. 10:21:42 - System Checkpoint RP2: 27.06.2011 г. 13:26:21 - Software Distribution Service 3.0 RP3: 27.06.2011 г. 16:27:17 - Software Distribution Service 3.0 RP4: 27.06.2011 г. 17:08:28 - Software Distribution Service 3.0 RP5: 27.06.2011 г. 17:34:49 - Installed Пакет за езиков интерфейс на Windows RP6: 27.06.2011 г. 17:37:03 - Installed DAEMON Tools RP7: 27.06.2011 г. 17:41:28 - Installed Microsoft Office Professional Edition 2003 RP8: 27.06.2011 г. 17:44:16 - Installed Windows Media Format Runtime RP9: 27.06.2011 г. 17:49:29 - Installed K-Lite Codec Pack RP10: 27.06.2011 г. 17:55:57 - Installed Adobe Reader 8.1.1 RP11: 27.06.2011 г. 18:09:45 - Installed ACDSee Pro 4. RP12: 27.06.2011 г. 18:27:19 - Installed Security Update for CAPICOM (KB931906) RP13: 27.06.2011 г. 18:41:50 - Before installing new drivers - 27.06.2011 г. 18:41:45 RP14: 27.06.2011 г. 18:42:14 - Installed ioCentre RP15: 27.06.2011 г. 18:43:35 - Installed Microsoft Visual C++ 2005 Redistributable RP16: 27.06.2011 г. 18:47:06 - Before installing new drivers - 27.06.2011 г. 18:47:03 RP17: 27.06.2011 г. 18:50:51 - Before installing new drivers - 27.06.2011 г. 18:50:48 RP18: 27.06.2011 г. 19:06:22 - Before installing new drivers - 27.06.2011 г. 19:06:20 RP19: 27.06.2011 г. 19:09:12 - Before installing new drivers - 27.06.2011 г. 19:09:09 RP20: 27.06.2011 г. 19:10:00 - Installed SiSAGP driver RP21: 27.06.2011 г. 19:12:17 - Before installing new drivers - 27.06.2011 г. 19:12:12 RP22: 28.06.2011 г. 10:54:19 - Removed IObit Toolbar v4.4. RP23: 28.06.2011 г. 10:59:33 - IObit Uninstaller restore point RP24: 28.06.2011 г. 11:32:11 - IObit Uninstaller restore point RP25: 28.06.2011 г. 11:41:18 - Installed Safari . ==== Installed Programs ====================== . П°єµт ·° µ·ёєѕІ ёЅтµрфµ№с Ѕ° Windows ACDSee Pro 4 Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 8.1.1 Adobe Shockwave Player 11.5 Advanced SystemCare 4 Apple Application Support Apple Software Update Ashampoo Burning Studio 8.02 Bonjour Burger Shop 2 1.00 C-Media 3D Audio Cooking Academy 2 World Cuisine DAEMON Tools Driver Genius Professional Edition FlexType 2K Hotfix for Windows XP (KB952287) Hotfix for Windows XP (KB976002-v5) Hotfix for Windows XP (KB981793) ioCentre K-Lite Codec Pack 3.01 Full Malwarebytes' Anti-Malware version 1.51.0.1200 Microsoft Office Professional Edition 2003 Microsoft Visual C++ 2005 Redistributable Mozilla Firefox 5.0 (x86 bg) MV2Player (remove only) Safari Security Update for CAPICOM (KB931906) Security Update for Windows Internet Explorer 8 (KB982381) Security Update for Windows Media Player (KB952069) Security Update for Windows Media Player (KB954155) Security Update for Windows Media Player (KB973540) Security Update for Windows Media Player (KB978695) Security Update for Windows Media Player (KB979402) Security Update for Windows XP (KB2229593) Security Update for Windows XP (KB923561) Security Update for Windows XP (KB923789) Security Update for Windows XP (KB946648) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB950974) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951748) Security Update for Windows XP (KB952004) Security Update for Windows XP (KB952954) Security Update for Windows XP (KB955069) Security Update for Windows XP (KB956572) Security Update for Windows XP (KB956802) Security Update for Windows XP (KB956803) Security Update for Windows XP (KB956844) Security Update for Windows XP (KB958644) Security Update for Windows XP (KB958869) Security Update for Windows XP (KB959426) Security Update for Windows XP (KB960225) Security Update for Windows XP (KB960803) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB969059) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB971468) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB972270) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Security Update for Windows XP (KB973904) Security Update for Windows XP (KB974112) Security Update for Windows XP (KB974318) Security Update for Windows XP (KB974392) Security Update for Windows XP (KB974571) Security Update for Windows XP (KB975025) Security Update for Windows XP (KB975467) Security Update for Windows XP (KB975560) Security Update for Windows XP (KB975561) Security Update for Windows XP (KB975562) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB977816) Security Update for Windows XP (KB977914) Security Update for Windows XP (KB978037) Security Update for Windows XP (KB978338) Security Update for Windows XP (KB978542) Security Update for Windows XP (KB978601) Security Update for Windows XP (KB978706) Security Update for Windows XP (KB979309) Security Update for Windows XP (KB979482) Security Update for Windows XP (KB979559) Security Update for Windows XP (KB979683) Security Update for Windows XP (KB980195) Security Update for Windows XP (KB980218) Security Update for Windows XP (KB980232) Security Update for Windows XP (KB982381) SiS 661FX_760_741_M661FX_M760_M741 SiS 900 PCI Fast Ethernet Adapter Driver SiS Audio Driver SiS VGA Utilities SiSAGP driver Skype™ 5.3 SMS version 3.0.4.6 The KMPlayer Update for Windows XP (KB955759) Update for Windows XP (KB967715) Update for Windows XP (KB968389) Update for Windows XP (KB973687) Update for Windows XP (KB973815) WebFldrs XP Winamp Windows Internet Explorer 8 Windows Media Format Runtime Windows XP Service Pack 3 WinRAR archiver µTorrent . ==== Event Viewer Messages From Past Week ======== . 29.06.2011 і. 09:57:23, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde 29.06.2011 і. 09:57:23, error: Service Control Manager [7023] - The Client Service for NetWare service terminated with the following error: The specified module could not be found. 29.06.2011 і. 09:57:23, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the MouseDriver service to connect. 29.06.2011 і. 09:55:57, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 29.06.2011 і. 09:07:55, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 29.06.2011 і. 09:02:57, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde 29.06.2011 і. 09:01:32, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 29.06.2011 і. 08:52:48, error: Dhcp [1002] - The IP address lease 192.168.1.4 for the Network Card with network address 00138F03C34C has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message). 28.06.2011 і. 17:02:33, error: Service Control Manager [7034] - The Advanced SystemCare Service service terminated unexpectedly. It has done this 1 time(s). 28.06.2011 і. 11:11:14, error: Dhcp [1002] - The IP address lease 192.168.1.2 for the Network Card with network address 00138F03C34C has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message). 28.06.2011 і. 10:54:46, error: Service Control Manager [7034] - The Advanced SystemCare Service service terminated unexpectedly. It has done this 2 time(s). 28.06.2011 і. 10:49:27, error: Service Control Manager [7034] - The Advanced SystemCare Service service terminated unexpectedly. It has done this 1 time(s). 28.06.2011 і. 09:21:54, error: Dhcp [1002] - The IP address lease 192.168.1.3 for the Network Card with network address 00138F03C34C has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message). 27.06.2011 і. 19:21:24, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Print Spooler service to connect. 27.06.2011 і. 19:21:24, error: Service Control Manager [7000] - The Print Spooler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 27.06.2011 і. 19:20:31, error: Service Control Manager [7034] - The Windows User Mode Driver Framework service terminated unexpectedly. It has done this 1 time(s). 27.06.2011 і. 19:20:28, error: d343port [9] - The device, \Device\Scsi\d343port1, did not respond within the timeout period. 27.06.2011 і. 19:20:24, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service. 27.06.2011 і. 19:19:37, error: Service Control Manager [7034] - The GeniusMouseService service terminated unexpectedly. It has done this 1 time(s). 27.06.2011 і. 19:19:27, error: d343port [9] - The device, \Device\Scsi\d343port1, did not respond within the timeout period. 27.06.2011 і. 19:19:25, error: d343port [9] - The device, \Device\Scsi\d343port1, did not respond within the timeout period. 27.06.2011 і. 19:18:37, error: d343port [9] - The device, \Device\Scsi\d343port1, did not respond within the timeout period. 27.06.2011 і. 19:18:35, error: d343port [9] - The device, \Device\Scsi\d343port1, did not respond within the timeout period. 27.06.2011 і. 13:20:19, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: uagp35 27.06.2011 і. 10:06:49, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 00138F03C34C. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. . ==== End Of File ===========================

29 юни 201115 г.

Здравейте,

Да не сте имали Virut, защото от логовете има някакви индикации затова ?

Да започнем с още една проверка:

Изтеглете OTL.exe и го запазете на десктопа.
Стартирайте файла с двукратен клик на мишката.
Сложете отметка пред Scan All Users
Под менюто File Age => изберете 90 days
Под менюто Standard Registry => променете на ALL
Сложете отметки пред LOP и Purity Check

Под с Copy/ Paste въведете следната текстова информация:

netsvcs
msconfig
%SYSTEMDRIVE%\*.*
%USERPROFILE%\*.*
%USERPROFILE%\Application Data\*.*
%USERPROFILE%\Local Settings\Application Data\*.*
%AllUsersProfile%\*.*
%AllUsersProfile%\Application Data\*.*
%USERPROFILE%\My Documents\*.*
%CommonProgramFiles%\*.*
%PROGRAMFILES%\*.*
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /90
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
/md5start
hlp.dat
winlogon.exe
wininit.exe
userinit.exe
explorer.exe
volsnap.sys
/md5stop

Натиснете маркираният в синьо бутон: .
Като приключи проверката, ще се създадат два файла - OTL.Txt и Extras.Txt.
Публикувайте съдържанието на лог файловете в следващия си коментар.

29 юни 201115 г.

Автор

Ето ги резултатите,а за Virut не съм сигурна:

OTL logfile created on: 29.06.2011 г. 10:26:58 - Run 1

OTL by OldTimer - Version 3.2.24.1 Folder = C:\Documents and Settings\Veni\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000402 | Country: Bulgaria | Language: BGR | Date Format: dd.MM.yyyy 'г.'

447,48 Mb Total Physical Memory | 148,55 Mb Available Physical Memory | 33,20% Memory free

1,03 Gb Paging File | 0,71 Gb Available in Paging File | 68,32% Paging File free

Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 39,06 Gb Total Space | 30,84 Gb Free Space | 78,96% Space Free | Partition Type: NTFS

Drive D: | 97,65 Gb Total Space | 9,01 Gb Free Space | 9,22% Space Free | Partition Type: NTFS

Drive E: | 97,65 Gb Total Space | 5,91 Gb Free Space | 6,05% Space Free | Partition Type: NTFS

Drive F: | 97,65 Gb Total Space | 9,38 Gb Free Space | 9,61% Space Free | Partition Type: NTFS

Drive G: | 133,73 Gb Total Space | 33,11 Gb Free Space | 24,76% Space Free | Partition Type: NTFS

Drive I: | 321,02 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: ROOT-EAD7A2146A | User Name: Veni | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

========== Processes (SafeList) ==========

PRC - [2011.06.29 10:25:44 | 000,609,280 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Veni\Desktop\OTL.exe

PRC - [2011.06.29 10:01:15 | 000,089,088 | ---- | M] ( ) -- C:\Documents and Settings\Veni\Local Settings\Temp\etuj4wjebe.exe

PRC - [2011.06.29 09:57:00 | 000,091,648 | ---- | M] ( ) -- C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe

PRC - [2011.06.29 09:56:32 | 000,025,088 | ---- | M] () -- C:\WINDOWS\Temp\VRT5.tmp

PRC - [2011.06.29 09:02:12 | 000,068,608 | ---- | M] () -- C:\Documents and Settings\Veni\Local Settings\Temp\qtfcyyp.exe

PRC - [2011.05.29 09:11:28 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2011.04.21 16:54:40 | 000,402,832 | ---- | M] (IObit) -- C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe

PRC - [2011.04.21 16:54:38 | 000,352,656 | ---- | M] (IObit) -- C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe

PRC - [2010.03.11 11:33:12 | 000,039,936 | ---- | M] () -- C:\Genius\ioCentre\GMouseService.exe

PRC - [2008.04.14 03:12:36 | 000,100,864 | -H-- | M] ( ) -- C:\Documents and Settings\Veni\Application Data\conima.exe

PRC - [2008.04.14 03:12:36 | 000,064,512 | -H-- | M] () -- C:\WINDOWS\Fonts\services.exe

PRC - [2008.04.14 03:12:19 | 001,061,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

PRC - [2003.12.16 22:28:30 | 000,110,592 | ---- | M] (DAEMON'S HOME) -- C:\Program Files\D-Tools\daemon.exe

PRC - [2002.05.19 09:24:00 | 000,128,000 | ---- | M] () -- C:\Program Files\Datecs\FlexType 2K\FType2K.exe

========== Modules (SafeList) ==========

MOD - [2011.06.29 10:25:44 | 000,609,280 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Veni\Desktop\OTL.exe

MOD - [2011.06.29 10:02:23 | 000,010,240 | ---- | M] () -- C:\Documents and Settings\Veni\Local Settings\Temp\421500.dll

MOD - [2008.04.14 03:12:51 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll

MOD - [2002.04.23 00:17:06 | 000,045,056 | ---- | M] () -- C:\WINDOWS\system32\newdll.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)

SRV - [2011.06.29 09:57:22 | 000,000,105 | -H-- | M] () [Auto | Stopped] -- C:\Documents and Settings\Veni\Application Data\Input.bat -- (Input Manager)

SRV - [2011.06.29 09:02:14 | 000,000,106 | -H-- | M] () [Auto | Stopped] -- C:\Documents and Settings\Veni\Application Data\MouseDriver.bat -- (MouseDriver)

SRV - [2011.05.29 09:11:28 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2011.04.21 16:54:38 | 000,352,656 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe -- (AdvancedSystemCareService)

SRV - [2010.03.11 11:33:12 | 000,039,936 | ---- | M] () [Auto | Running] -- C:\Genius\ioCentre\GMouseService.exe -- (GeniusMouseService)

SRV - [2009.02.06 14:11:05 | 000,008,192 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\system32\nwcwks.dll -- (NWCWorkstation)

========== Driver Services (SafeList) ==========

DRV - [2011.05.29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2010.10.26 12:12:36 | 000,019,200 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srvkp.sys -- (SiSkp)

DRV - [2010.10.26 11:39:24 | 000,325,120 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisgrp.sys -- (SiS315)

DRV - [2009.11.02 17:47:58 | 000,011,520 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gMouUsb.sys -- (gMouUsb)

DRV - [2009.11.02 17:43:26 | 000,020,480 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gHidPnp.sys -- (gHidPnp)

DRV - [2009.06.30 12:13:12 | 000,017,408 | ---- | M] ( Mouse Upfilter Driver ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gMouPS2.sys -- (gMouPS2)

DRV - [2008.04.13 21:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)

DRV - [2004.11.03 14:14:26 | 000,267,136 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sis7012.sys -- (SiS7012) Service for AC'97 Sample Driver (WDM)

DRV - [2004.06.30 14:01:12 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisnicxp.sys -- (SISNICXP)

DRV - [2003.12.17 15:48:08 | 000,136,832 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d343bus.sys -- (d343bus)

DRV - [2003.12.17 13:48:44 | 000,005,632 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\d343port.sys -- (d343port)

DRV - [2003.03.25 17:50:46 | 000,004,096 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\siside.sys -- (SiSide)

DRV - [2002.10.17 15:14:46 | 000,049,024 | ---- | M] (Windows ® 2000 DDK provider) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\sisidex.sys -- (sisidex)

DRV - [2002.08.20 17:19:08 | 000,009,472 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sisperf.sys -- (sisperf)

DRV - [2002.07.10 18:39:34 | 000,032,256 | R--- | M] (SiS Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)

========== Standard Registry (All) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-220523388-492894223-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm

IE - HKU\S-1-5-21-220523388-492894223-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

IE - HKU\S-1-5-21-220523388-492894223-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-21-220523388-492894223-682003330-1003\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-21-220523388-492894223-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-220523388-492894223-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "about:blank"

FF - prefs.js..network.proxy.no_proxies_on: "*.local"

FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.06.27 18:01:40 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2011.06.28 12:18:11 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Veni\Application Data\Mozilla\Extensions

[2011.06.28 12:20:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Veni\Application Data\Mozilla\Firefox\Profiles\v71c9opq.default\extensions

[2011.06.27 18:01:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2011.06.27 18:01:39 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

File not found (No name found) --

() (No name found) -- C:\DOCUMENTS AND SETTINGS\VENI\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V71C9OPQ.DEFAULT\EXTENSIONS\[email protected]

[2011.06.16 07:29:42 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll

[2010.01.01 11:00:00 | 000,001,083 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\911bg.xml

[2010.01.01 11:00:00 | 000,001,394 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom.xml

[2010.01.01 11:00:00 | 000,002,442 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\diribg.xml

[2010.01.01 11:00:00 | 000,002,364 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml

[2010.01.01 11:00:00 | 000,001,515 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pe-bg.xml

[2010.01.01 11:00:00 | 000,001,857 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\portalbgdict.xml

[2010.01.01 11:00:00 | 000,001,220 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-bg.xml

O1 HOSTS File: ([2011.06.29 10:01:34 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O3 - HKU\S-1-5-21-220523388-492894223-682003330-1003\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O3 - HKU\S-1-5-21-220523388-492894223-682003330-1003\..\Toolbar\WebBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O3 - HKU\S-1-5-21-220523388-492894223-682003330-1003\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

O4 - HKLM..\Run: [Cmaudio] File not found

O4 - HKLM..\Run: [DAEMON Tools-1033] C:\Program Files\D-Tools\daemon.exe (DAEMON'S HOME)

O4 - HKLM..\Run: [input Manager] C:\Documents and Settings\Veni\Application Data\conima.exe ( )

O4 - HKLM..\Run: [siSPower] C:\WINDOWS\System32\SiSPower.dll (Silicon Integrated Systems Corporation)

O4 - HKLM..\Run: [wi5jb] C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe ( )

O4 - HKU\.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)

O4 - HKU\.DEFAULT..\Run: [engel] File not found

O4 - HKU\.DEFAULT..\Run: [office] C:\WINDOWS\TEMP\152187.dll ()

O4 - HKU\.DEFAULT..\Run: [pj6vi7wlh9] C:\Documents and Settings\Veni\pj6vi7wlh9.exe ()

O4 - HKU\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)

O4 - HKU\S-1-5-18..\Run: [engel] File not found

O4 - HKU\S-1-5-18..\Run: [office] C:\WINDOWS\TEMP\152187.dll ()

O4 - HKU\S-1-5-18..\Run: [pj6vi7wlh9] C:\Documents and Settings\Veni\pj6vi7wlh9.exe ()

O4 - HKU\S-1-5-19..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-220523388-492894223-682003330-1003..\Run: [Advanced SystemCare 4] C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe (IObit)

O4 - HKU\S-1-5-21-220523388-492894223-682003330-1003..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-220523388-492894223-682003330-1003..\Run: [office] C:\Documents and Settings\Veni\Local Settings\Temp\421500.dll ()

O4 - HKU\S-1-5-21-220523388-492894223-682003330-1003..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)

O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk = C:\Program Files\Datecs\FlexType 2K\FType2K.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: 60xu9 = C:\WINDOWS\TEMP\qtfcyyp.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: apps = C:\WINDOWS\fonts\services.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-220523388-492894223-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)

O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)

O15 - HKU\S-1-5-21-220523388-492894223-682003330-1003\..Trusted Domains: municipalbank.bg ([mwb] https in Trusted sites)

O16 - DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} https://mwb.municipalbank.bg/CSWebBankASP/capicom.cab (Settings Class)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)

O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp - No CLSID value found

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)

O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)

O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp - No CLSID value found

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)

O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)

O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)

O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)

O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)

O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (Userinit.exe) - C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)

O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)

O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)

O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)

O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)

O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)

O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)

O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)

O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)

O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)

O24 - Desktop Components:0 (My Current Home Page) - About:Home

O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp

O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp

O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)

O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)

O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)

O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)

O31 - SafeBoot: AlternateShell - cmd.exe

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2011.06.27 10:14:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2009.08.08 10:02:59 | 000,011,594 | ---- | M] () - G:\autorunsettings.zip -- [ NTFS ]

O32 - AutoRun File - [1857.01.01 05:00:00 | 000,630,784 | R--- | M] () - I:\Autorun.exe -- [ CDFS ]

O32 - AutoRun File - [1857.01.01 05:00:00 | 000,000,054 | R--- | M] () - I:\autorun.inf -- [ CDFS ]

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found

NetSvcs: HidServ - File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - File not found

NetSvcs: Irmon - File not found

NetSvcs: NWCWorkstation - C:\WINDOWS\system32\nwcwks.dll (Microsoft Corporation)

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Utility Tray.lnk - - File not found

MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)

MsConfig - StartUpReg: Google Update - hkey= - key= - File not found

MsConfig - StartUpReg: ioCentre - hkey= - key= - C:\Genius\ioCentre\gTaskBar.exe ()

MsConfig - StartUpReg: kiie - hkey= - key= - C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe ( )

MsConfig - StartUpReg: Malwarebytes' Anti-Malware - hkey= - key= - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

MsConfig - StartUpReg: Malwarebytes' Anti-Malware (reboot) - hkey= - key= - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)

MsConfig - StartUpReg: Odruri - hkey= - key= - File not found

MsConfig - StartUpReg: SiS Windows KeyHook - hkey= - key= - File not found

MsConfig - StartUpReg: SiSUSBRG - hkey= - key= - C:\WINDOWS\SiSUSBrg.exe (Silicon Integrated Systems Corp.)

MsConfig - State: "system.ini" - 0

MsConfig - State: "win.ini" - 0

MsConfig - State: "bootini" - 0

MsConfig - State: "services" - 0

MsConfig - State: "startup" - 2

========== Files/Folders - Created Within 90 Days ==========

[2011.06.29 10:25:36 | 000,609,280 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Veni\Desktop\OTL.exe

[2011.06.29 10:03:32 | 000,159,744 | ---- | C] (-) -- C:\Documents and Settings\Veni\Application Data\r2461isn.exe

[2011.06.29 10:01:41 | 000,100,864 | ---- | C] ( ) -- C:\Documents and Settings\Veni\Application Data\a1saqz9w.exe

[2011.06.29 09:59:26 | 000,062,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWINSCK.OCX

[2011.06.29 09:59:05 | 000,159,744 | ---- | C] (-) -- C:\Documents and Settings\Veni\Application Data\94thixgkt.exe

[2011.06.29 09:57:01 | 000,091,648 | ---- | C] ( ) -- C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe

[2011.06.29 09:44:13 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\My Documents\My Videos

[2011.06.29 09:44:12 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\Start Menu\Programs\Administrative Tools

[2011.06.29 09:24:33 | 000,607,017 | R--- | C] (Swearware) -- C:\Documents and Settings\Veni\Desktop\dds.scr

[2011.06.29 08:54:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\engel

[2011.06.28 17:30:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TreeCardGames

[2011.06.28 17:30:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\SolSuite

[2011.06.28 12:17:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Mozilla

[2011.06.28 12:17:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Mozilla

[2011.06.28 11:41:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Apple Computer

[2011.06.28 11:41:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Apple Computer

[2011.06.28 11:41:21 | 000,000,000 | ---D | C] -- C:\Program Files\Safari

[2011.06.28 11:41:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Apple Computer

[2011.06.28 11:41:10 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour

[2011.06.28 11:40:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple

[2011.06.28 11:40:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Apple

[2011.06.28 11:40:33 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update

[2011.06.28 11:40:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Apple

[2011.06.28 11:39:46 | 035,624,744 | ---- | C] (Apple Inc.) -- C:\Documents and Settings\Veni\Desktop\SafariSetup.exe

[2011.06.28 10:55:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Advanced SystemCare 4

[2011.06.28 10:54:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\IObit

[2011.06.28 10:54:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt

[2011.06.28 10:38:02 | 000,000,000 | ---D | C] -- C:\Program Files\IObit

[2011.06.28 09:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\123 Free Solitaire

[2011.06.28 09:30:06 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\Desktop\СТЕФАН

[2011.06.28 09:29:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Desktop\ДЯДО

[2011.06.28 09:29:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Desktop\БАБА

[2011.06.28 09:29:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Desktop\МАМА

[2011.06.27 21:05:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Skype

[2011.06.27 20:15:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Switchball

[2011.06.27 20:15:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Trymedia

[2011.06.27 19:09:57 | 000,000,000 | ---D | C] -- C:\Program Files\sisagp

[2011.06.27 19:09:55 | 000,110,592 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\TVMode.dll

[2011.06.27 19:09:55 | 000,065,536 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\SiSHook.dll

[2011.06.27 19:09:54 | 000,000,000 | ---D | C] -- C:\Program Files\SiSUnin

[2011.06.27 19:09:51 | 000,337,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\difxapi.dll

[2011.06.27 19:09:51 | 000,053,248 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\SiSPower.dll

[2011.06.27 19:09:51 | 000,012,288 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\InstFunc.dll

[2011.06.27 19:09:39 | 000,000,000 | ---D | C] -- C:\Program Files\SiS VGA Utilities V3.93

[2011.06.27 19:06:45 | 000,000,000 | ---D | C] -- C:\Program Files\SiS7012

[2011.06.27 18:51:11 | 000,049,024 | ---- | C] (Windows ® 2000 DDK provider) -- C:\WINDOWS\System32\drivers\sisidex.sys

[2011.06.27 18:51:10 | 000,009,472 | ---- | C] (Silicon Integrated Systems Corp.) -- C:\WINDOWS\System32\drivers\sisperf.sys

[2011.06.27 18:51:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\IDEUtil

[2011.06.27 18:43:21 | 000,017,408 | ---- | C] ( Mouse Upfilter Driver ) -- C:\WINDOWS\System32\drivers\gMouPS2.sys

[2011.06.27 18:43:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ioCentre

[2011.06.27 18:42:15 | 000,000,000 | ---D | C] -- C:\Genius

[2011.06.27 18:42:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\InstallShield

[2011.06.27 18:33:12 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl

[2011.06.27 18:29:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe

[2011.06.27 18:27:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SMS

[2011.06.27 18:27:30 | 000,000,000 | ---D | C] -- C:\Program Files\sms

[2011.06.27 18:27:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2

[2011.06.27 18:22:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Skype

[2011.06.27 18:22:28 | 000,000,000 | R--D | C] -- C:\Program Files\Skype

[2011.06.27 18:22:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Skype

[2011.06.27 18:18:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Datecs Applications

[2011.06.27 18:18:35 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlk41a.dll

[2011.06.27 18:18:35 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41a.dll

[2011.06.27 18:18:35 | 000,006,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdinori.Dll

[2011.06.27 18:18:35 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlk41j.dll

[2011.06.27 18:18:35 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41j.dll

[2011.06.27 18:18:33 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdibm02.dll

[2011.06.27 18:18:33 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdibm02.dll

[2011.06.27 18:18:33 | 000,006,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhebx.Dll

[2011.06.27 18:18:33 | 000,006,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdinasa.Dll

[2011.06.27 18:18:32 | 000,008,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbphz.dLL

[2011.06.27 18:18:32 | 000,008,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDBPH.dLL

[2011.06.27 18:18:32 | 000,007,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Kbddll.dll

[2011.06.27 18:18:32 | 000,006,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbp.Dll

[2011.06.27 18:18:32 | 000,006,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbds.Dll

[2011.06.27 18:18:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdax2.dll

[2011.06.27 18:18:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdax2.dll

[2011.06.27 18:18:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd106n.dll

[2011.06.27 18:18:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106n.dll

[2011.06.27 18:18:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101.dll

[2011.06.27 18:18:31 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101.dll

[2011.06.27 18:18:25 | 000,000,000 | ---D | C] -- C:\Program Files\Datecs

[2011.06.27 18:18:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\My Documents\DriverGenius

[2011.06.27 18:10:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Driver Genius Professional Edition

[2011.06.27 18:10:38 | 000,000,000 | ---D | C] -- C:\Program Files\Driver-Soft

[2011.06.27 18:10:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ACD Systems

[2011.06.27 18:10:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ACD Systems

[2011.06.27 18:10:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ACD Systems

[2011.06.27 18:10:01 | 000,000,000 | ---D | C] -- C:\Program Files\ACD Systems

[2011.06.27 18:08:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Downloaded Installations

[2011.06.27 18:07:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Ashampoo

[2011.06.27 18:06:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\ashampoo

[2011.06.27 18:06:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ashampoo

[2011.06.27 18:06:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Ashampoo

[2011.06.27 18:06:03 | 000,000,000 | ---D | C] -- C:\Program Files\Ashampoo

[2011.06.27 18:01:28 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox

[2011.06.27 18:01:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Macromedia

[2011.06.27 18:01:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Adobe

[2011.06.27 17:59:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Google

[2011.06.27 17:56:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Adobe

[2011.06.27 17:56:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe

[2011.06.27 17:56:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe

[2011.06.27 17:56:03 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe

[2011.06.27 17:53:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Start Menu\Programs\WinRAR

[2011.06.27 17:53:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR

[2011.06.27 17:53:30 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR

[2011.06.27 17:50:40 | 000,000,000 | ---D | C] -- C:\Program Files\The KMPlayer

[2011.06.27 17:49:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\K-Lite Codec Pack

[2011.06.27 17:49:33 | 000,287,744 | ---- | C] (Kristal StudioDFileDescription) -- C:\WINDOWS\System32\divxa32.acm

[2011.06.27 17:49:33 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll

[2011.06.27 17:49:33 | 000,118,784 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm

[2011.06.27 17:49:32 | 001,565,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmv9vcm.dll

[2011.06.27 17:49:32 | 001,044,480 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\libdivx.dll

[2011.06.27 17:49:32 | 000,200,704 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\ssldivx.dll

[2011.06.27 17:49:32 | 000,196,608 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dtu100.dll

[2011.06.27 17:49:32 | 000,073,728 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll

[2011.06.27 17:49:31 | 000,639,066 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx.dll

[2011.06.27 17:49:29 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack

[2011.06.27 17:44:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages

[2011.06.27 17:43:51 | 001,628,920 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll

[2011.06.27 17:43:51 | 000,547,576 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll

[2011.06.27 17:43:51 | 000,510,712 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll

[2011.06.27 17:43:51 | 000,379,640 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll

[2011.06.27 17:43:51 | 000,187,128 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll

[2011.06.27 17:43:51 | 000,129,784 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll

[2011.06.27 17:43:51 | 000,072,440 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe

[2011.06.27 17:43:51 | 000,064,760 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe

[2011.06.27 17:43:51 | 000,064,760 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe

[2011.06.27 17:43:51 | 000,039,672 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll

[2011.06.27 17:43:51 | 000,009,464 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys

[2011.06.27 17:43:51 | 000,009,336 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys

[2011.06.27 17:43:48 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp

[2011.06.27 17:43:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Winamp

[2011.06.27 17:42:59 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll

[2011.06.27 17:42:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Start Menu\Programs\MV2Player

[2011.06.27 17:42:54 | 000,000,000 | ---D | C] -- C:\Program Files\Mv2Player

[2011.06.27 17:42:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office

[2011.06.27 17:41:58 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft ActiveSync

[2011.06.27 17:41:54 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER

[2011.06.27 17:41:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW

[2011.06.27 17:41:39 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office

[2011.06.27 17:39:20 | 000,000,000 | RH-D | C] -- C:\MSOCache

[2011.06.27 17:37:06 | 000,136,832 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d343bus.sys

[2011.06.27 17:37:06 | 000,005,632 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\d343port.sys

[2011.06.27 17:37:05 | 000,000,000 | ---D | C] -- C:\Program Files\D-Tools

[2011.06.27 17:36:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations

[2011.06.27 17:32:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch

[2011.06.27 17:18:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting

[2011.06.27 17:18:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas

[2011.06.27 17:18:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en

[2011.06.27 17:18:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits

[2011.06.27 17:15:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic

[2011.06.27 17:11:41 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$

[2011.06.27 17:07:40 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Veni\IECompatCache

[2011.06.27 17:07:22 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Veni\PrivacIE

[2011.06.27 16:50:14 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Veni\IETldCache

[2011.06.27 16:39:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates

[2011.06.27 16:39:00 | 001,985,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll

[2011.06.27 16:39:00 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll

[2011.06.27 16:39:00 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll

[2011.06.27 16:38:59 | 011,076,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll

[2011.06.27 16:38:59 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll

[2011.06.27 16:38:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM

[2011.06.27 16:38:03 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8

[2011.06.27 16:38:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US

[2011.06.27 16:30:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss

[2011.06.27 16:30:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles

[2011.06.27 16:18:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Cooking Academy 2 World Cuisine

[2011.06.27 16:17:42 | 000,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade

[2011.06.27 15:05:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\GoBit Games

[2011.06.27 13:49:29 | 000,025,471 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys

[2011.06.27 13:49:29 | 000,022,271 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys

[2011.06.27 13:49:29 | 000,011,935 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys

[2011.06.27 13:49:29 | 000,011,871 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys

[2011.06.27 13:49:29 | 000,011,807 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys

[2011.06.27 13:49:29 | 000,011,295 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys

[2011.06.27 13:49:27 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys

[2011.06.27 13:49:27 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys

[2011.06.27 13:49:27 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys

[2011.06.27 13:49:27 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys

[2011.06.27 13:49:27 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys

[2011.06.27 13:49:27 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys

[2011.06.27 13:49:26 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys

[2011.06.27 13:49:26 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys

[2011.06.27 13:49:25 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys

[2011.06.27 13:49:25 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys

[2011.06.27 13:48:41 | 000,701,440 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys

[2011.06.27 13:48:41 | 000,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys

[2011.06.27 13:48:41 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys

[2011.06.27 13:48:41 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys

[2011.06.27 13:48:41 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys

[2011.06.27 13:48:41 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys

[2011.06.27 13:48:41 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys

[2011.06.27 13:48:41 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys

[2011.06.27 13:48:41 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys

[2011.06.27 13:48:41 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys

[2011.06.27 13:48:41 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys

[2011.06.27 13:48:41 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys

[2011.06.27 13:48:41 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys

[2011.06.27 13:48:41 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys

[2011.06.27 13:48:41 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys

[2011.06.27 13:48:41 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys

[2011.06.27 13:48:41 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys

[2011.06.27 13:48:41 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys

[2011.06.27 13:48:41 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys

[2011.06.27 13:48:41 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys

[2011.06.27 13:48:41 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys

[2011.06.27 13:48:41 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys

[2011.06.27 13:37:20 | 000,272,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys

[2011.06.27 13:37:14 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys

[2011.06.27 13:37:07 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys

[2011.06.27 13:37:04 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll

[2011.06.27 13:37:00 | 000,772,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe

[2011.06.27 13:36:50 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll

[2011.06.27 13:36:50 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll

[2011.06.27 13:35:03 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll

[2011.06.27 13:34:03 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys

[2011.06.27 13:33:47 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe

[2011.06.27 13:32:44 | 000,730,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll

[2011.06.27 13:32:43 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe

[2011.06.27 13:32:42 | 002,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe

[2011.06.27 13:32:41 | 002,024,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe

[2011.06.27 13:26:47 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$

[2011.06.27 13:26:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall

[2011.06.27 13:26:25 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe

[2011.06.27 13:21:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution

[2011.06.27 13:03:10 | 000,044,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uagp35.sys

[2011.06.27 13:03:03 | 000,032,256 | R--- | C] (SiS Corporation) -- C:\WINDOWS\System32\drivers\sisnic.sys

[2011.06.27 13:02:56 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll

[2011.06.27 13:02:54 | 000,010,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\gameenum.sys

[2011.06.27 13:01:30 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer

[2011.06.27 13:01:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC

[2011.06.27 13:01:28 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll

[2011.06.27 13:01:28 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll

[2011.06.27 13:01:27 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll

[2011.06.27 13:01:25 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe

[2011.06.27 13:01:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines

[2011.06.27 13:01:24 | 000,000,000 | R--D | C] -- C:\Program Files

[2011.06.27 13:01:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared

[2011.06.27 13:01:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files

[2011.06.27 13:01:20 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll

[2011.06.27 13:01:20 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuq.dll

[2011.06.27 13:01:20 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll

[2011.06.27 13:01:20 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuf.dll

[2011.06.27 13:01:20 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll

[2011.06.27 13:01:20 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll

[2011.06.27 13:01:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll

[2011.06.27 13:01:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll

[2011.06.27 13:01:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll

[2011.06.27 13:01:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll

[2011.06.27 13:01:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll

[2011.06.27 13:01:17 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll

[2011.06.27 13:01:16 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll

[2011.06.27 13:01:13 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll

[2011.06.27 13:01:13 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll

[2011.06.27 13:01:13 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll

[2011.06.27 13:01:13 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll

[2011.06.27 13:01:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll

[2011.06.27 13:01:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll

[2011.06.27 13:01:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll

[2011.06.27 13:01:13 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll

[2011.06.27 13:01:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll

[2011.06.27 13:01:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll

[2011.06.27 13:01:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll

[2011.06.27 13:01:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll

[2011.06.27 13:01:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll

[2011.06.27 13:01:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll

[2011.06.27 13:01:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll

[2011.06.27 13:01:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll

[2011.06.27 13:01:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll

[2011.06.27 13:01:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll

[2011.06.27 13:01:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll

[2011.06.27 13:01:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll

[2011.06.27 13:01:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll

[2011.06.27 13:01:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll

[2011.06.27 13:01:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll

[2011.06.27 13:01:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll

[2011.06.27 13:01:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll

[2011.06.27 13:01:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL

[2011.06.27 13:01:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll

[2011.06.27 13:01:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll

[2011.06.27 13:01:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll

[2011.06.27 13:01:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll

[2011.06.27 13:01:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll

[2011.06.27 13:01:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll

[2011.06.27 13:01:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll

[2011.06.27 13:01:04 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll

[2011.06.27 13:01:04 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll

[2011.06.27 13:01:03 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll

[2011.06.27 13:01:03 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll

[2011.06.27 13:01:03 | 000,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgsetup.dll

[2011.06.27 13:01:03 | 000,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll

[2011.06.27 13:01:03 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll

[2011.06.27 13:01:03 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll

[2011.06.27 13:01:02 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll

[2011.06.27 13:01:02 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll

[2011.06.27 13:01:02 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV

[2011.06.27 13:01:02 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL

[2011.06.27 13:01:02 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV

[2011.06.27 13:01:02 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV

[2011.06.27 13:01:01 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL

[2011.06.27 13:01:01 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL

[2011.06.27 13:01:01 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL

[2011.06.27 13:01:01 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL

[2011.06.27 13:01:01 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL

[2011.06.27 13:01:01 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV

[2011.06.27 13:01:01 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV

[2011.06.27 13:01:00 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV

[2011.06.27 13:01:00 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV

[2011.06.27 13:01:00 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV

[2011.06.27 13:01:00 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL

[2011.06.27 13:01:00 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV

[2011.06.27 13:01:00 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV

[2011.06.27 13:01:00 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK

[2011.06.27 13:00:59 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL

[2011.06.27 13:00:59 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL

[2011.06.27 13:00:59 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE

[2011.06.27 13:00:59 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskman.exe

[2011.06.27 13:00:59 | 000,032,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL

[2011.06.27 13:00:58 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\winspool.drv

[2011.06.27 13:00:58 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll

[2011.06.27 13:00:57 | 000,068,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL

[2011.06.27 13:00:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll

[2011.06.27 13:00:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup

[2011.06.27 13:00:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu

[2011.06.27 13:00:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents

[2011.06.27 13:00:48 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates

[2011.06.27 13:00:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites

[2011.06.27 13:00:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop

[2011.06.27 13:00:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2

[2011.06.27 13:00:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot

[2011.06.27 13:00:27 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft

[2011.06.27 13:00:27 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data

[2011.06.27 13:00:02 | 000,000,000 | -HSD | C] -- C:\System Volume Information

[2011.06.27 13:00:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings

[2011.06.27 12:49:22 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts

[2011.06.27 12:49:22 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache

[2011.06.27 12:49:22 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web

[2011.06.27 12:49:22 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\system

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\security

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\java

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028

[2011.06.27 12:49:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025

[2011.06.27 11:00:35 | 000,000,000 | -HSD | C] -- C:\RECYCLER

[2011.06.27 10:40:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\PriceGong

[2011.06.27 10:39:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Malwarebytes

[2011.06.27 10:39:41 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2011.06.27 10:39:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware

[2011.06.27 10:39:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes

[2011.06.27 10:39:37 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2011.06.27 10:39:37 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware

[2011.06.27 10:38:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\My Documents\Downloads

[2011.06.27 10:38:18 | 000,000,000 | ---D | C] -- C:\extensions

[2011.06.27 10:38:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Temp

[2011.06.27 10:38:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Conduit

[2011.06.27 10:38:04 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent

[2011.06.27 10:37:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\uTorrent

[2011.06.27 10:37:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\uTorrent

[2011.06.27 10:31:40 | 000,000,000 | ---D | C] -- C:\Program Files\SiSLan

[2011.06.27 10:29:32 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys

[2011.06.27 10:29:32 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\portcls.sys

[2011.06.27 10:29:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll

[2011.06.27 10:29:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksuser.dll

[2011.06.27 10:29:31 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax

[2011.06.27 10:29:31 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksproxy.ax

[2011.06.27 10:29:31 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys

[2011.06.27 10:29:31 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\drmk.sys

[2011.06.27 10:29:23 | 000,032,768 | ---- | C] (C-Media Corporation) -- C:\WINDOWS\System32\udaprop.dll

[2011.06.27 10:29:22 | 001,482,752 | ---- | C] (C-Media Electronics Inc.) -- C:\WINDOWS\System\SmWizard.exe

[2011.06.27 10:29:22 | 000,114,688 | ---- | C] (C-Media) -- C:\WINDOWS\System32\cmuda.dll

[2011.06.27 10:29:21 | 000,917,504 | ---- | C] (C-Media Electronics Inc.) -- C:\WINDOWS\System\cmids3d.dll

[2011.06.27 10:29:20 | 002,301,952 | ---- | C] (C-Media Corporation) -- C:\WINDOWS\System\cmicnfg.cpl

[2011.06.27 10:29:19 | 000,712,704 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System32\Audio3D.dll

[2011.06.27 10:29:19 | 000,115,864 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\a3d.dll

[2011.06.27 10:29:19 | 000,115,864 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\a3d.dll

[2011.06.27 10:29:16 | 000,000,000 | ---D | C] -- C:\Program Files\C-Media 3D Audio

[2011.06.27 10:26:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SiS VGA Utilities

[2011.06.27 10:26:16 | 000,106,496 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\TVModeLib.dll

[2011.06.27 10:26:15 | 000,135,168 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\SiSApCom.dll

[2011.06.27 10:25:47 | 000,278,528 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\Keyhook.exe

[2011.06.27 10:25:44 | 000,290,816 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\sistray.exe

[2011.06.27 10:25:43 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information

[2011.06.27 10:25:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\SiS

[2011.06.27 10:25:38 | 000,258,048 | R--- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\_SiSParse.dll

[2011.06.27 10:25:38 | 000,258,048 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\SiSParse.dll

[2011.06.27 10:25:38 | 000,172,032 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\SiSInst.dll

[2011.06.27 10:25:38 | 000,049,152 | R--- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\_SiSBase.dll

[2011.06.27 10:25:38 | 000,049,152 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\SiSBase.dll

[2011.06.27 10:25:38 | 000,019,200 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\srvkp.sys

[2011.06.27 10:25:38 | 000,005,632 | R--- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\instFunc.dll

[2011.06.27 10:25:37 | 001,571,001 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\sisgl.dll

[2011.06.27 10:25:36 | 003,468,288 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\sisgrv.dll

[2011.06.27 10:25:36 | 001,118,720 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrv.dll

[2011.06.27 10:25:35 | 000,325,120 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\sisgrp.sys

[2011.06.27 10:25:35 | 000,325,120 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrp.sys

[2011.06.27 10:25:32 | 000,000,000 | ---D | C] -- C:\Program Files\Multimedia V3.54

[2011.06.27 10:25:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\trayres

[2011.06.27 10:25:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield

[2011.06.27 10:23:19 | 000,135,168 | ---- | C] (Silicon Integrated Systems Corp.) -- C:\WINDOWS\SiSUSBrg.exe

[2011.06.27 10:23:19 | 000,003,583 | ---- | C] (Windows ® 2000 DDK provider) -- C:\WINDOWS\SiSport.sys

[2011.06.27 10:23:15 | 000,036,992 | R--- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\SISAGPX.SYS

[2011.06.27 10:23:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups

[2011.06.27 10:23:09 | 000,334,336 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUninst.exe

[2011.06.27 10:23:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\WINDOWS

[2011.06.27 10:21:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Application Data\Identities

[2011.06.27 10:21:26 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information

[2011.06.27 10:21:24 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\My Documents\My Pictures

[2011.06.27 10:21:24 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\My Documents\My Music

[2011.06.27 10:21:21 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Veni\Application Data\Microsoft

[2011.06.27 10:21:21 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Veni\SendTo

[2011.06.27 10:21:21 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Veni\Recent

[2011.06.27 10:21:21 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Veni\Application Data

[2011.06.27 10:21:21 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\Start Menu\Programs\Startup

[2011.06.27 10:21:21 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\Start Menu

[2011.06.27 10:21:21 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\My Documents

[2011.06.27 10:21:21 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\Favorites

[2011.06.27 10:21:21 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Veni\Start Menu\Programs\Accessories

[2011.06.27 10:21:21 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Veni\Cookies

[2011.06.27 10:21:21 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Veni\Templates

[2011.06.27 10:21:21 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Veni\PrintHood

[2011.06.27 10:21:21 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Veni\NetHood

[2011.06.27 10:21:21 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Veni\Local Settings

[2011.06.27 10:21:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Local Settings\Application Data\Microsoft

[2011.06.27 10:21:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Veni\Desktop

[2011.06.27 10:19:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution

[2011.06.27 10:19:36 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft

[2011.06.27 10:19:35 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft

[2011.06.27 10:19:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft

[2011.06.27 10:19:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft

[2011.06.27 10:19:01 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft

[2011.06.27 10:18:06 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime

[2011.06.27 10:18:06 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime

[2011.06.27 10:18:05 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime

[2011.06.27 10:18:05 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime

[2011.06.27 10:18:05 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime

[2011.06.27 10:18:04 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime

[2011.06.27 10:18:03 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll

[2011.06.27 10:18:03 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys

[2011.06.27 10:18:02 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll

[2011.06.27 10:18:00 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll

[2011.06.27 10:18:00 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll

[2011.06.27 10:18:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll

[2011.06.27 10:18:00 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll

[2011.06.27 10:17:59 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll

[2011.06.27 10:17:59 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll

[2011.06.27 10:17:57 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll

[2011.06.27 10:17:57 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime

[2011.06.27 10:17:56 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe

[2011.06.27 10:17:54 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe

[2011.06.27 10:17:54 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe

[2011.06.27 10:17:54 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll

[2011.06.27 10:17:53 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime

[2011.06.27 10:17:53 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll

[2011.06.27 10:17:52 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys

[2011.06.27 10:17:52 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys

[2011.06.27 10:17:52 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys

[2011.06.27 10:17:50 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll

[2011.06.27 10:17:49 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll

[2011.06.27 10:17:47 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll

[2011.06.27 10:17:47 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll

[2011.06.27 10:17:46 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll

[2011.06.27 10:17:44 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll

[2011.06.27 10:17:43 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll

[2011.06.27 10:17:43 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll

[2011.06.27 10:17:43 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll

[2011.06.27 10:17:42 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll

[2011.06.27 10:17:42 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll

[2011.06.27 10:17:42 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll

[2011.06.27 10:17:42 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll

[2011.06.27 10:17:42 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll

[2011.06.27 10:17:41 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll

[2011.06.27 10:17:41 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll

[2011.06.27 10:17:41 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll

[2011.06.27 10:17:41 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll

[2011.06.27 10:17:40 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll

[2011.06.27 10:17:40 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll

[2011.06.27 10:17:40 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll

[2011.06.27 10:17:40 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll

[2011.06.27 10:17:39 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll

[2011.06.27 10:17:37 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll

[2011.06.27 10:17:36 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll

[2011.06.27 10:17:34 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll

[2011.06.27 10:17:34 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll

[2011.06.27 10:17:32 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime

[2011.06.27 10:17:31 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe

[2011.06.27 10:17:31 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe

[2011.06.27 10:17:30 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe

[2011.06.27 10:17:29 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime

[2011.06.27 10:17:29 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe

[2011.06.27 10:17:27 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll

[2011.06.27 10:17:26 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe

[2011.06.27 10:17:26 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll

[2011.06.27 10:17:26 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll

[2011.06.27 10:17:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll

[2011.06.27 10:17:25 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime

[2011.06.27 10:17:25 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll

[2011.06.27 10:17:24 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime

[2011.06.27 10:17:24 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll

[2011.06.27 10:17:23 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll

[2011.06.27 10:17:23 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll

[2011.06.27 10:17:23 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll

[2011.06.27 10:17:23 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll

[2011.06.27 10:17:22 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll

[2011.06.27 10:17:20 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll

[2011.06.27 10:17:19 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll

[2011.06.27 10:17:17 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll

[2011.06.27 10:17:13 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex

[2011.06.27 10:17:13 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll

[2011.06.27 10:17:07 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys

[2011.06.27 10:17:06 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll

[2011.06.27 10:17:06 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll

[2011.06.27 10:17:04 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll

[2011.06.27 10:17:03 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll

[2011.06.27 10:17:01 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll

[2011.06.27 10:17:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdvntc.dll

[2011.06.27 10:17:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll

[2011.06.27 10:17:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdusa.dll

[2011.06.27 10:17:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll

[2011.06.27 10:17:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll

[2011.06.27 10:16:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdth3.dll

[2011.06.27 10:16:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll

[2011.06.27 10:16:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdth2.dll

[2011.06.27 10:16:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll

[2011.06.27 10:16:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdth1.dll

[2011.06.27 10:16:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll

[2011.06.27 10:16:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdth0.dll

[2011.06.27 10:16:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll

[2011.06.27 10:16:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll

[2011.06.27 10:16:58 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnecat.dll

[2011.06.27 10:16:58 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll

[2011.06.27 10:16:58 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnecnt.dll

[2011.06.27 10:16:58 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll

[2011.06.27 10:16:58 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnec95.dll

[2011.06.27 10:16:58 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll

[2011.06.27 10:16:58 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll

[2011.06.27 10:16:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdinpun.dll

[2011.06.27 10:16:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll

[2011.06.27 10:16:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdintel.dll

[2011.06.27 10:16:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll

[2011.06.27 10:16:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdintam.dll

[2011.06.27 10:16:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdinmar.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdinkan.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdinhin.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdinguj.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdindev.dll

[2011.06.27 10:16:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll

[2011.06.27 10:16:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdheb.dll

[2011.06.27 10:16:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll

[2011.06.27 10:16:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdfa.dll

[2011.06.27 10:16:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll

[2011.06.27 10:16:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll

[2011.06.27 10:16:55 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgeo.dll

[2011.06.27 10:16:55 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll

[2011.06.27 10:16:54 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll

[2011.06.27 10:16:54 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdarmw.dll

[2011.06.27 10:16:54 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll

[2011.06.27 10:16:54 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdarme.dll

[2011.06.27 10:16:54 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll

[2011.06.27 10:16:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbd101a.dll

[2011.06.27 10:16:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll

[2011.06.27 10:16:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbda3.dll

[2011.06.27 10:16:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll

[2011.06.27 10:16:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbda2.dll

[2011.06.27 10:16:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll

[2011.06.27 10:16:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbda1.dll

[2011.06.27 10:16:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll

[2011.06.27 10:16:52 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll

[2011.06.27 10:16:52 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll

[2011.06.27 10:16:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll

[2011.06.27 10:16:50 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll

[2011.06.27 10:16:49 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll

[2011.06.27 10:16:48 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll

[2011.06.27 10:16:48 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll

[2011.06.27 10:16:48 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe

[2011.06.27 10:16:47 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe

[2011.06.27 10:16:47 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll

[2011.06.27 10:16:47 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe

[2011.06.27 10:16:47 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe

[2011.06.27 10:16:46 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe

[2011.06.27 10:16:46 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe

[2011.06.27 10:16:46 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe

[2011.06.27 10:16:45 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll

[2011.06.27 10:16:45 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll

[2011.06.27 10:16:45 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe

[2011.06.27 10:16:45 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll

[2011.06.27 10:16:44 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll

[2011.06.27 10:16:44 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime

[2011.06.27 10:16:44 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe

[2011.06.27 10:16:43 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll

[2011.06.27 10:16:43 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll

[2011.06.27 10:16:43 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime

[2011.06.27 10:16:43 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll

[2011.06.27 10:16:43 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe

[2011.06.27 10:16:42 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe

[2011.06.27 10:16:42 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll

[2011.06.27 10:16:41 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll

[2011.06.27 10:16:41 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll

[2011.06.27 10:16:35 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll

[2011.06.27 10:16:26 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll

[2011.06.27 10:16:23 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll

[2011.06.27 10:16:20 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe

[2011.06.27 10:16:20 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll

[2011.06.27 10:16:18 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll

[2011.06.27 10:16:18 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll

[2011.06.27 10:16:17 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll

[2011.06.27 10:16:17 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll

[2011.06.27 10:16:14 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe

[2011.06.27 10:16:13 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll

[2011.06.27 10:16:11 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll

[2011.06.27 10:16:11 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys

[2011.06.27 10:16:10 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll

[2011.06.27 10:16:10 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll

[2011.06.27 10:16:09 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll

[2011.06.27 10:16:04 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime

[2011.06.27 10:16:03 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe

[2011.06.27 10:16:02 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe

[2011.06.27 10:16:02 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\counters.dll

[2011.06.27 10:16:01 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\convlog.exe

[2011.06.27 10:16:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\controt.dll

[2011.06.27 10:15:59 | 000,507,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe

[2011.06.27 10:15:59 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime

[2011.06.27 10:15:58 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll

[2011.06.27 10:15:58 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll

[2011.06.27 10:15:58 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll

[2011.06.27 10:15:57 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll

[2011.06.27 10:15:56 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll

[2011.06.27 10:15:56 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe

[2011.06.27 10:15:56 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe

[2011.06.27 10:15:55 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime

[2011.06.27 10:15:55 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe

[2011.06.27 10:15:55 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe

[2011.06.27 10:15:54 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys

[2011.06.27 10:15:53 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll

[2011.06.27 10:15:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll

[2011.06.27 10:15:41 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browscap.dll

[2011.06.27 10:15:39 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\authfilt.dll

[2011.06.27 10:15:38 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asptxn.dll

[2011.06.27 10:15:38 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aspperf.dll

[2011.06.27 10:15:37 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll

[2011.06.27 10:15:34 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adrot.dll

[2011.06.27 10:15:34 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admxprox.dll

[2011.06.27 10:15:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll

[2011.06.27 10:15:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamregps.dll

[2011.06.27 10:15:22 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.exe

[2011.06.27 10:15:22 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetsloc.dll

[2011.06.27 10:15:21 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisui.dll

[2011.06.27 10:15:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstap.dll

[2011.06.27 10:15:20 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisreset.exe

[2011.06.27 10:15:20 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsapi2.dll

[2011.06.27 10:15:14 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certmap.ocx

[2011.06.27 10:15:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom

[2011.06.27 10:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\xerox

[2011.06.27 10:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage

[2011.06.27 10:14:49 | 000,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll

[2011.06.27 10:14:47 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$

[2011.06.27 10:14:46 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsp3res.dll

[2011.06.27 10:14:16 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll

[2011.06.27 10:13:12 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM

[2011.06.27 10:13:00 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files

[2011.06.27 10:13:00 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages

[2011.06.27 10:12:48 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate

[2011.06.27 10:12:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX

[2011.06.27 10:11:49 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll

[2011.06.27 10:11:49 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll

[2011.06.27 10:11:48 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe

[2011.06.27 10:11:48 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe

[2011.06.27 10:11:48 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll

[2011.06.27 10:11:48 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll

[2011.06.27 10:11:31 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe

[2011.06.27 10:11:30 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wb32.exe

[2011.06.27 10:11:30 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll

[2011.06.27 10:11:30 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll

[2011.06.27 10:11:29 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinfo32.exe

[2011.06.27 10:11:29 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll

[2011.06.27 10:11:29 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll

[2011.06.27 10:11:29 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cb32.exe

[2011.06.27 10:11:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services

[2011.06.27 10:11:23 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe

[2011.06.27 10:11:23 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll

[2011.06.27 10:11:23 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll

[2011.06.27 10:11:23 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll

[2011.06.27 10:11:23 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll

[2011.06.27 10:11:23 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks

[2011.06.27 10:11:22 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoap1.dll

[2011.06.27 10:11:22 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe

[2011.06.27 10:11:22 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wisc10.dll

[2011.06.27 10:11:22 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoapr.dll

[2011.06.27 10:11:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap

[2011.06.27 10:11:20 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieinfo5.ocx

[2011.06.27 10:11:16 | 000,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\VGX.dll

[2011.06.27 10:11:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst

[2011.06.27 10:11:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed

[2011.06.27 10:11:14 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpband.dll

[2011.06.27 10:11:13 | 000,802,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup_wm.exe

[2011.06.27 10:11:12 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpvis.dll

[2011.06.27 10:11:12 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpns.dll

[2011.06.27 10:11:12 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\custsat.dll

[2011.06.27 10:11:11 | 000,815,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migrate.exe

[2011.06.27 10:11:11 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll

[2011.06.27 10:11:11 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll

[2011.06.27 10:11:11 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmplayer.exe

[2011.06.27 10:11:11 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll

[2011.06.27 10:11:10 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll

[2011.06.27 10:11:10 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll

[2011.06.27 10:11:10 | 000,209,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll

[2011.06.27 10:11:10 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe

[2011.06.27 10:11:09 | 001,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll

[2011.06.27 10:11:09 | 000,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl

[2011.06.27 10:11:09 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe

[2011.06.27 10:11:09 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll

[2011.06.27 10:11:09 | 000,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe

[2011.06.27 10:11:09 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll

[2011.06.27 10:11:09 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll

[2011.06.27 10:11:08 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll

[2011.06.27 10:11:08 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll

[2011.06.27 10:11:08 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll

[2011.06.27 10:11:08 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll

[2011.06.27 10:11:07 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll

[2011.06.27 10:11:00 | 003,586,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe

[2011.06.27 10:11:00 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker

[2011.06.27 10:10:54 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll

[2011.06.27 10:10:54 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll

[2011.06.27 10:10:54 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll

[2011.06.27 10:10:54 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll

[2011.06.27 10:10:49 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltmc.exe

[2011.06.27 10:10:48 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll

[2011.06.27 10:10:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore

[2011.06.27 10:10:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll

[2011.06.27 10:10:47 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll

[2011.06.27 10:10:46 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll

[2011.06.27 10:10:46 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll

[2011.06.27 10:10:46 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll

[2011.06.27 10:10:41 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll

[2011.06.27 10:10:41 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll

[2011.06.27 10:10:41 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting

[2011.06.27 10:10:39 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll

[2011.06.27 10:10:36 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe

[2011.06.27 10:10:36 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express

[2011.06.27 10:10:35 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll

[2011.06.27 10:10:35 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll

[2011.06.27 10:10:35 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll

[2011.06.27 10:10:35 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll

[2011.06.27 10:10:26 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll

[2011.06.27 10:10:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System

[2011.06.27 10:10:24 | 000,638,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe

[2011.06.27 10:10:24 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hmmapi.dll

[2011.06.27 10:10:23 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer

[2011.06.27 10:10:22 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures

[2011.06.27 10:09:50 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Games

[2011.06.27 10:09:41 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications

[2011.06.27 10:09:35 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools

[2011.06.27 10:09:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration

[2011.06.27 10:09:30 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music

[2011.06.27 10:09:30 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player

[2011.06.27 10:09:30 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services

[2011.06.27 10:09:20 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger

[2011.06.27 10:09:19 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgzm.exe

[2011.06.27 10:09:18 | 001,817,687 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgres.dll

[2011.06.27 10:09:18 | 000,780,885 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrres.dll

[2011.06.27 10:09:18 | 000,753,236 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvseres.dll

[2011.06.27 10:09:18 | 000,082,501 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckg.dll

[2011.06.27 10:09:18 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvsezm.exe

[2011.06.27 10:09:18 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrzm.exe

[2011.06.27 10:09:18 | 000,048,706 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvse.dll

[2011.06.27 10:09:17 | 002,178,131 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlres.dll

[2011.06.27 10:09:17 | 001,175,635 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzres.dll

[2011.06.27 10:09:17 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlzm.exe

[2011.06.27 10:09:17 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzzm.exe

[2011.06.27 10:09:17 | 000,066,113 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvl.dll

[2011.06.27 10:09:17 | 000,057,409 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtz.dll

[2011.06.27 10:09:17 | 000,040,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkr.dll

[2011.06.27 10:09:17 | 000,004,677 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zeeverm.dll

[2011.06.27 10:09:16 | 001,039,955 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnresm.dll

[2011.06.27 10:09:16 | 000,041,029 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zcorem.dll

[2011.06.27 10:09:16 | 000,032,339 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniansi.dll

[2011.06.27 10:09:16 | 000,013,894 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zonelibm.dll

[2011.06.27 10:09:15 | 000,217,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnclim.dll

[2011.06.27 10:09:15 | 000,113,222 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zoneclim.dll

[2011.06.27 10:09:15 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zclientm.exe

[2011.06.27 10:09:15 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe

[2011.06.27 10:09:15 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe

[2011.06.27 10:09:15 | 000,029,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\znetm.dll

[2011.06.27 10:09:15 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone

[2011.06.27 10:08:58 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe

[2011.06.27 10:08:58 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe

[2011.06.27 10:08:57 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avtapi.dll

[2011.06.27 10:08:57 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll

[2011.06.27 10:08:57 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avwav.dll

[2011.06.27 10:08:57 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll

[2011.06.27 10:08:57 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll

[2011.06.27 10:08:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avmeter.dll

[2011.06.27 10:08:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll

[2011.06.27 10:08:57 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll

[2011.06.27 10:08:55 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe

[2011.06.27 10:08:55 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winchat.exe

[2011.06.27 10:08:42 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll

[2011.06.27 10:08:42 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\getuname.dll

[2011.06.27 10:08:41 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe

[2011.06.27 10:08:41 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\charmap.exe

[2011.06.27 10:08:41 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe

[2011.06.27 10:08:40 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe

[2011.06.27 10:08:40 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmine.exe

[2011.06.27 10:08:40 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe

[2011.06.27 10:08:40 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sol.exe

[2011.06.27 10:08:39 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe

[2011.06.27 10:08:39 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshearts.exe

[2011.06.27 10:08:39 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe

[2011.06.27 10:08:39 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\freecell.exe

[2011.06.27 10:08:39 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe

[2011.06.27 10:08:39 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\reset.exe

[2011.06.27 10:08:38 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe

[2011.06.27 10:08:38 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\regini.exe

[2011.06.27 10:08:38 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe

[2011.06.27 10:08:38 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsshutdn.exe

[2011.06.27 10:08:38 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe

[2011.06.27 10:08:38 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tskill.exe

[2011.06.27 10:08:38 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe

[2011.06.27 10:08:38 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwinsta.exe

[2011.06.27 10:08:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe

[2011.06.27 10:08:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsdiscon.exe

[2011.06.27 10:08:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe

[2011.06.27 10:08:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscon.exe

[2011.06.27 10:08:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe

[2011.06.27 10:08:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shadow.exe

[2011.06.27 10:08:37 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe

[2011.06.27 10:08:37 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qwinsta.exe

[2011.06.27 10:08:37 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe

[2011.06.27 10:08:37 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msg.exe

[2011.06.27 10:08:37 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe

[2011.06.27 10:08:37 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qappsrv.exe

[2011.06.27 10:08:37 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe

[2011.06.27 10:08:37 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logoff.exe

[2011.06.27 10:08:37 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdmodem.dll

[2011.06.27 10:08:37 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll

[2011.06.27 10:08:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll

[2011.06.27 10:08:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpcfgex.dll

[2011.06.27 10:08:36 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtsadmin.tlb

[2011.06.27 10:08:35 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll

[2011.06.27 10:08:35 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe

[2011.06.27 10:08:35 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll

[2011.06.27 10:08:35 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll

[2011.06.27 10:08:34 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll

[2011.06.27 10:08:34 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll

[2011.06.27 10:08:34 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll

[2011.06.27 10:08:34 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmi2xml.dll

[2011.06.27 10:08:34 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll

[2011.06.27 10:08:28 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipicmp.dll

[2011.06.27 10:08:28 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmimsg.dll

[2011.06.27 10:08:28 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmitimep.dll

[2011.06.27 10:08:28 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmt.exe

[2011.06.27 10:08:28 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmtr.dll

[2011.06.27 10:08:27 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\updprov.dll

[2011.06.27 10:08:27 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmplprov.dll

[2011.06.27 10:08:27 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.tlb

[2011.06.27 10:08:27 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trnsprov.dll

[2011.06.27 10:08:27 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unsecapp.exe

[2011.06.27 10:08:27 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.tlb

[2011.06.27 10:08:27 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.dll

[2011.06.27 10:08:26 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiprov.dll

[2011.06.27 10:08:26 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpcons.dll

[2011.06.27 10:08:25 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsprov.dll

[2011.06.27 10:08:25 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fwdprov.dll

[2011.06.27 10:08:10 | 000,000,000 | ---D | C] -- C:\Program Files\MSN

[2011.06.27 10:08:09 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe

[2011.06.27 10:08:09 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl

[2011.06.27 10:08:08 | 000,347,136 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll

[2011.06.27 10:08:08 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe

[2011.06.27 10:08:08 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe

[2011.06.27 10:08:08 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe

[2011.06.27 10:08:07 | 000,370,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe

[2011.06.27 10:08:07 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT

[2011.06.27 10:08:06 | 000,566,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe

[2011.06.27 10:08:06 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe

[2011.06.27 10:08:05 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll

[2011.06.27 10:08:04 | 000,655,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll

[2011.06.27 10:08:04 | 000,435,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstsc.exe

[2011.06.27 10:08:04 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll

[2011.06.27 10:08:04 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe

[2011.06.27 10:08:04 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe

[2011.06.27 10:08:03 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe

[2011.06.27 10:08:03 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll

[2011.06.27 10:08:03 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe

[2011.06.27 10:08:03 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe

[2011.06.27 10:08:03 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe

[2011.06.27 10:08:03 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll

[2011.06.27 10:08:03 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll

[2011.06.27 10:08:02 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll

[2011.06.27 10:08:02 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll

[2011.06.27 10:08:02 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll

[2011.06.27 10:08:02 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll

[2011.06.27 10:08:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc

[2011.06.27 10:08:01 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll

[2011.06.27 10:08:01 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll

[2011.06.27 10:08:01 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll

[2011.06.27 10:07:59 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll

[2011.06.27 10:07:59 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll

[2011.06.27 10:07:59 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll

[2011.06.27 10:07:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com

[2011.06.27 10:07:58 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll

[2011.06.27 10:07:58 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll

[2011.06.27 10:07:58 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll

[2011.06.27 10:07:57 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll

[2011.06.27 10:07:47 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll

[2011.06.27 10:07:47 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll

[2011.06.27 10:07:47 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll

[2011.06.27 10:07:47 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll

[2011.06.27 10:07:44 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos

[2011.06.27 10:07:06 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Accessories

[2006.02.28 15:00:00 | 000,100,864 | -H-- | C] ( ) -- C:\Documents and Settings\Veni\Application Data\conima.exe

[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[3 C:\Documents and Settings\Veni\Application Data\*.tmp files -> C:\Documents and Settings\Veni\Application Data\*.tmp -> ]

[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 90 Days ==========

[2011.06.29 10:25:44 | 000,609,280 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Veni\Desktop\OTL.exe

[2011.06.29 10:03:56 | 000,159,744 | ---- | M] (-) -- C:\Documents and Settings\Veni\Application Data\r2461isn.exe

[2011.06.29 10:01:50 | 000,100,864 | ---- | M] ( ) -- C:\Documents and Settings\Veni\Application Data\a1saqz9w.exe

[2011.06.29 10:01:34 | 000,000,734 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts

[2011.06.29 09:59:26 | 000,062,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MSWINSCK.OCX

[2011.06.29 09:59:19 | 000,159,744 | ---- | M] (-) -- C:\Documents and Settings\Veni\Application Data\94thixgkt.exe

[2011.06.29 09:57:22 | 000,000,105 | -H-- | M] () -- C:\Documents and Settings\Veni\Application Data\Input.bat

[2011.06.29 09:57:00 | 000,091,648 | ---- | M] ( ) -- C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe

[2011.06.29 09:56:32 | 000,052,736 | ---- | M] () -- C:\Documents and Settings\Veni\pj6vi7wlh9.exe

[2011.06.29 09:55:52 | 000,000,288 | ---- | M] () -- C:\WINDOWS\tasks\ASC4_AutoSweep.job

[2011.06.29 09:55:44 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011.06.29 09:53:36 | 000,000,211 | -HS- | M] () -- C:\boot.ini

[2011.06.29 09:24:33 | 000,607,017 | R--- | M] (Swearware) -- C:\Documents and Settings\Veni\Desktop\dds.scr

[2011.06.29 09:11:24 | 000,002,187 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Safari.lnk

[2011.06.29 09:02:14 | 000,000,106 | -H-- | M] () -- C:\Documents and Settings\Veni\Application Data\MouseDriver.bat

[2011.06.29 08:59:54 | 000,311,296 | ---- | M] () -- C:\WINDOWS\System32\avtapi.exe

[2011.06.29 08:52:45 | 000,539,232 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011.06.28 21:54:51 | 000,014,848 | ---- | M] () -- C:\Documents and Settings\Veni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.06.28 17:02:25 | 000,000,290 | ---- | M] () -- C:\WINDOWS\tasks\ASC4_AutoUpdate.job

[2011.06.28 16:24:32 | 000,000,804 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk

[2011.06.28 13:25:18 | 000,000,762 | ---- | M] () -- C:\WINDOWS\go.ini

[2011.06.28 12:50:44 | 000,000,010 | ---- | M] () -- C:\WINDOWS\popcinfo.dat

[2011.06.28 12:17:55 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat

[2011.06.28 11:42:35 | 000,051,132 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat

[2011.06.28 11:40:37 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[2011.06.28 11:39:50 | 035,624,744 | ---- | M] (Apple Inc.) -- C:\Documents and Settings\Veni\Desktop\SafariSetup.exe

[2011.06.28 10:55:19 | 000,000,896 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Quick Care.lnk

[2011.06.28 10:55:18 | 000,000,874 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Advanced SystemCare 4.lnk

[2011.06.28 10:47:55 | 000,000,286 | ---- | M] () -- C:\WINDOWS\tasks\ASC4_AutoCare.job

[2011.06.27 21:56:59 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2011.06.27 19:10:17 | 000,183,791 | ---- | M] () -- C:\WINDOWS\System32\VGAunistlog.ini

[2011.06.27 18:33:12 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl

[2011.06.27 18:18:37 | 000,000,729 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk

[2011.06.27 18:10:42 | 000,000,776 | ---- | M] () -- C:\Documents and Settings\Veni\Desktop\Driver Genius Professional Edition.lnk

[2011.06.27 18:10:29 | 000,002,034 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\ACDSee Pro 4.lnk

[2011.06.27 18:09:57 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx

[2011.06.27 18:06:32 | 000,000,831 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Ashampoo Burning Studio 8.lnk

[2011.06.27 18:02:01 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

[2011.06.27 18:02:01 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk

[2011.06.27 17:56:14 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 8.lnk

[2011.06.27 17:52:19 | 000,000,650 | ---- | M] () -- C:\Documents and Settings\Veni\Desktop\KMPlayer.lnk

[2011.06.27 17:49:35 | 000,000,940 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Media Player Classic.lnk

[2011.06.27 17:44:52 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk

[2011.06.27 17:44:52 | 000,000,664 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk

[2011.06.27 17:43:04 | 000,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI

[2011.06.27 17:42:56 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\Veni\Desktop\MV2Player.lnk

[2011.06.27 17:38:25 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011.06.27 17:34:02 | 000,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2011.06.27 17:34:02 | 000,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2011.06.27 17:15:15 | 000,250,048 | RHS- | M] () -- C:\ntldr

[2011.06.27 16:50:15 | 000,001,503 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Browser Choice.lnk

[2011.06.27 11:54:54 | 000,000,187 | ---- | M] () -- C:\WINDOWS\System\CmiCnfg.ini

[2011.06.27 10:39:41 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2011.06.27 10:38:04 | 000,000,648 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk

[2011.06.27 10:31:14 | 000,002,562 | ---- | M] () -- C:\WINDOWS\Ascd_tmp.ini

[2011.06.27 10:29:25 | 000,000,092 | ---- | M] () -- C:\WINDOWS\CMISETUP.INI

[2011.06.27 10:29:25 | 000,000,026 | ---- | M] () -- C:\WINDOWS\CMCDPLAY.INI

[2011.06.27 10:29:23 | 000,000,000 | ---- | M] () -- C:\WINDOWS\Wininit.ini

[2011.06.27 10:21:36 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

[2011.06.27 10:21:04 | 000,013,588 | ---- | M] () -- C:\WINDOWS\System32\wpa.bak

[2011.06.27 10:19:04 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD

[2011.06.27 10:18:22 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf

[2011.06.27 10:14:35 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT

[2011.06.27 10:14:35 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2011.06.27 10:14:35 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2011.06.27 10:14:35 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS

[2011.06.27 10:14:35 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT

[2011.06.27 10:14:25 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb

[2011.06.27 10:14:25 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb

[2011.06.27 10:14:16 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI

[2011.06.27 10:09:49 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat

[2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2011.05.29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[3 C:\Documents and Settings\Veni\Application Data\*.tmp files -> C:\Documents and Settings\Veni\Application Data\*.tmp -> ]

[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.06.29 09:57:22 | 000,000,105 | -H-- | C] () -- C:\Documents and Settings\Veni\Application Data\Input.bat

[2011.06.29 09:56:34 | 000,052,736 | ---- | C] () -- C:\Documents and Settings\Veni\pj6vi7wlh9.exe

[2011.06.29 09:02:14 | 000,000,106 | -H-- | C] () -- C:\Documents and Settings\Veni\Application Data\MouseDriver.bat

[2011.06.29 08:59:38 | 000,311,296 | ---- | C] () -- C:\WINDOWS\System32\avtapi.exe

[2011.06.28 16:24:32 | 000,000,804 | ---- | C] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk

[2011.06.28 12:50:44 | 000,000,010 | ---- | C] () -- C:\WINDOWS\popcinfo.dat

[2011.06.28 12:17:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2011.06.28 11:42:35 | 000,051,132 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat

[2011.06.28 11:41:29 | 000,002,187 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Safari.lnk

[2011.06.28 11:41:29 | 000,001,854 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk

[2011.06.28 11:40:37 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job

[2011.06.28 11:40:34 | 000,001,830 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Apple Software Update.lnk

[2011.06.28 10:55:19 | 000,000,896 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Quick Care.lnk

[2011.06.28 10:55:18 | 000,000,874 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Advanced SystemCare 4.lnk

[2011.06.28 10:47:55 | 000,000,290 | ---- | C] () -- C:\WINDOWS\tasks\ASC4_AutoUpdate.job

[2011.06.28 10:47:55 | 000,000,288 | ---- | C] () -- C:\WINDOWS\tasks\ASC4_AutoSweep.job

[2011.06.28 10:47:55 | 000,000,286 | ---- | C] () -- C:\WINDOWS\tasks\ASC4_AutoCare.job

[2011.06.28 09:51:10 | 000,000,762 | ---- | C] () -- C:\WINDOWS\go.ini

[2011.06.28 09:30:13 | 000,000,593 | ---- | C] () -- C:\Documents and Settings\Veni\Desktop\WinMM.lnk

[2011.06.27 19:22:59 | 000,014,848 | ---- | C] () -- C:\Documents and Settings\Veni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.06.27 19:09:54 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\SiSUninstall.exe

[2011.06.27 19:09:51 | 000,237,568 | ---- | C] () -- C:\WINDOWS\Progress.exe

[2011.06.27 19:09:51 | 000,086,016 | ---- | C] () -- C:\WINDOWS\InstFunc.exe

[2011.06.27 18:51:10 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\IDEproperty.dll

[2011.06.27 18:43:21 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\drivers\gHidPnp.sys

[2011.06.27 18:43:21 | 000,011,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\gMouUsb.sys

[2011.06.27 18:18:37 | 000,000,729 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\FlexType 2K.lnk

[2011.06.27 18:18:28 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\newdll.dll

[2011.06.27 18:10:42 | 000,000,776 | ---- | C] () -- C:\Documents and Settings\Veni\Desktop\Driver Genius Professional Edition.lnk

[2011.06.27 18:10:29 | 000,002,034 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\ACDSee Pro 4.lnk

[2011.06.27 18:06:32 | 000,000,831 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Ashampoo Burning Studio 8.lnk

[2011.06.27 18:02:01 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk

[2011.06.27 18:02:01 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk

[2011.06.27 18:02:00 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk

[2011.06.27 17:56:14 | 000,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader 8.lnk

[2011.06.27 17:56:14 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 8.lnk

[2011.06.27 17:52:19 | 000,000,650 | ---- | C] () -- C:\Documents and Settings\Veni\Desktop\KMPlayer.lnk

[2011.06.27 17:49:35 | 000,000,940 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Media Player Classic.lnk

[2011.06.27 17:49:32 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll

[2011.06.27 17:49:32 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll

[2011.06.27 17:49:32 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll

[2011.06.27 17:49:31 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll

[2011.06.27 17:44:52 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk

[2011.06.27 17:44:52 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk

[2011.06.27 17:43:03 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2011.06.27 17:42:56 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\Veni\Desktop\MV2Player.lnk

[2011.06.27 16:50:15 | 000,001,503 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Browser Choice.lnk

[2011.06.27 13:49:29 | 000,613,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm

[2011.06.27 13:49:29 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav

[2011.06.27 13:49:29 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav

[2011.06.27 13:49:29 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav

[2011.06.27 13:49:29 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv

[2011.06.27 13:49:29 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav

[2011.06.27 13:49:29 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav

[2011.06.27 13:49:29 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav

[2011.06.27 13:49:29 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav

[2011.06.27 13:49:29 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav

[2011.06.27 13:49:29 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav

[2011.06.27 13:49:29 | 000,067,374 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm

[2011.06.27 13:49:29 | 000,023,195 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm

[2011.06.27 13:49:29 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif

[2011.06.27 13:49:29 | 000,017,272 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf

[2011.06.27 13:49:29 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta

[2011.06.27 13:49:29 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif

[2011.06.27 13:49:29 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif

[2011.06.27 13:49:29 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif

[2011.06.27 13:49:29 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif

[2011.06.27 13:49:29 | 000,006,769 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf

[2011.06.27 13:49:29 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif

[2011.06.27 13:49:29 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif

[2011.06.27 13:49:29 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif

[2011.06.27 13:49:29 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif

[2011.06.27 13:49:29 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif

[2011.06.27 13:49:29 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif

[2011.06.27 13:49:29 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css

[2011.06.27 13:49:29 | 000,000,855 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf

[2011.06.27 13:49:29 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js

[2011.06.27 13:49:28 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif

[2011.06.27 13:49:28 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js

[2011.06.27 13:49:28 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif

[2011.06.27 13:49:28 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif

[2011.06.27 13:49:28 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif

[2011.06.27 13:49:28 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif

[2011.06.27 13:49:28 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif

[2011.06.27 13:49:28 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif

[2011.06.27 13:49:28 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif

[2011.06.27 13:49:28 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif

[2011.06.27 13:49:27 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv

[2011.06.27 13:49:27 | 000,077,307 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm

[2011.06.27 13:49:27 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm

[2011.06.27 13:49:27 | 000,000,908 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf

[2011.06.27 13:49:26 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv

[2011.06.27 13:49:26 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img

[2011.06.27 13:49:26 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip

[2011.06.27 13:49:26 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip

[2011.06.27 13:49:25 | 000,018,286 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf

[2011.06.27 13:49:25 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif

[2011.06.27 13:49:25 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif

[2011.06.27 13:49:24 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv

[2011.06.27 13:49:23 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js

[2011.06.27 13:49:20 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty

[2011.06.27 13:49:19 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv

[2011.06.27 13:49:19 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css

[2011.06.27 13:49:19 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm

[2011.06.27 13:49:19 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js

[2011.06.27 13:49:19 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif

[2011.06.27 13:49:19 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif

[2011.06.27 13:49:19 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif

[2011.06.27 13:49:19 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif

[2011.06.27 13:49:19 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif

[2011.06.27 13:49:19 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif

[2011.06.27 13:48:41 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod

[2011.06.27 13:01:29 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2011.06.27 13:01:27 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd

[2011.06.27 13:01:27 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf

[2011.06.27 13:01:26 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa

[2011.06.27 13:01:25 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa

[2011.06.27 13:00:58 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT

[2011.06.27 13:00:47 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT

[2011.06.27 13:00:47 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT

[2011.06.27 13:00:47 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT

[2011.06.27 13:00:47 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT

[2011.06.27 13:00:47 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT

[2011.06.27 13:00:47 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat

[2011.06.27 13:00:46 | 001,042,903 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT

[2011.06.27 13:00:46 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT

[2011.06.27 13:00:01 | 000,539,232 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011.06.27 12:59:23 | 000,000,211 | -HS- | C] () -- C:\boot.ini

[2011.06.27 12:59:20 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf

[2011.06.27 10:39:41 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2011.06.27 10:38:04 | 000,000,648 | ---- | C] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk

[2011.06.27 10:29:25 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI

[2011.06.27 10:29:25 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI

[2011.06.27 10:29:23 | 000,000,187 | ---- | C] () -- C:\WINDOWS\System\CmiCnfg.ini

[2011.06.27 10:29:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Wininit.ini

[2011.06.27 10:29:21 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe

[2011.06.27 10:29:21 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll

[2011.06.27 10:29:16 | 000,294,912 | ---- | C] () -- C:\WINDOWS\CMIUninstall.exe

[2011.06.27 10:29:16 | 000,253,952 | ---- | C] () -- C:\WINDOWS\CmiRmRedundDir.exe

[2011.06.27 10:29:16 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll

[2011.06.27 10:25:41 | 000,093,813 | ---- | C] () -- C:\WINDOWS\VGAsetup.ini

[2011.06.27 10:25:37 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\sis660.bin

[2011.06.27 10:25:22 | 000,183,791 | ---- | C] () -- C:\WINDOWS\System32\VGAunistlog.ini

[2011.06.27 10:23:19 | 000,032,768 | ---- | C] () -- C:\WINDOWS\SIS_LIB.DLL

[2011.06.27 10:22:49 | 000,002,562 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini

[2011.06.27 10:22:46 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS

[2011.06.27 10:21:36 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

[2011.06.27 10:21:28 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\Veni\Start Menu\Programs\Outlook Express.lnk

[2011.06.27 10:21:26 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Veni\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2011.06.27 10:21:26 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Veni\Start Menu\Programs\Internet Explorer.lnk

[2011.06.27 10:21:21 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\Veni\Start Menu\Programs\Remote Assistance.lnk

[2011.06.27 10:21:21 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\Veni\Start Menu\Programs\Windows Media Player.lnk

[2011.06.27 10:21:05 | 000,013,588 | ---- | C] () -- C:\WINDOWS\System32\wpa.bak

[2011.06.27 10:19:04 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD

[2011.06.27 10:18:22 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2011.06.27 10:17:25 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll

[2011.06.27 10:17:01 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex

[2011.06.27 10:16:48 | 000,094,720 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe

[2011.06.27 10:16:46 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe

[2011.06.27 10:16:42 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex

[2011.06.27 10:16:30 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll

[2011.06.27 10:16:23 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex

[2011.06.27 10:15:58 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll

[2011.06.27 10:14:35 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT

[2011.06.27 10:14:35 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS

[2011.06.27 10:14:35 | 000,000,000 | RHS- | C] () -- C:\IO.SYS

[2011.06.27 10:14:35 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS

[2011.06.27 10:14:35 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT

[2011.06.27 10:14:25 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb

[2011.06.27 10:14:25 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb

[2011.06.27 10:14:23 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx

[2011.06.27 10:12:47 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk

[2011.06.27 10:12:34 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex

[2011.06.27 10:11:45 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp

[2011.06.27 10:11:45 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp

[2011.06.27 10:11:31 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf

[2011.06.27 10:09:51 | 000,000,609 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk

[2011.06.27 10:09:49 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2011.06.27 10:09:30 | 000,001,986 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk

[2011.06.27 10:08:46 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp

[2011.06.27 10:08:45 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp

[2011.06.27 10:08:45 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp

[2011.06.27 10:08:45 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp

[2011.06.27 10:08:45 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp

[2011.06.27 10:08:44 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp

[2011.06.27 10:08:44 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp

[2011.06.27 10:08:43 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp

[2011.06.27 10:08:43 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp

[2011.06.27 10:08:43 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp

[2011.06.27 10:08:43 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp

[2011.06.27 10:08:39 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd

[2011.06.27 10:08:38 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h

[2011.06.27 10:08:36 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h

[2011.06.27 10:08:25 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc

[2006.02.28 15:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2006.02.28 15:00:00 | 000,755,200 | ---- | C] () -- C:\WINDOWS\System32\ir50_32.dll

[2006.02.28 15:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2006.02.28 15:00:00 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcx.dll

[2006.02.28 15:00:00 | 000,311,604 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2006.02.28 15:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2006.02.28 15:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2006.02.28 15:00:00 | 000,200,192 | ---- | C] () -- C:\WINDOWS\System32\ir50_qc.dll

[2006.02.28 15:00:00 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\ir50_qcx.dll

[2006.02.28 15:00:00 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\ir41_qc.dll

[2006.02.28 15:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2006.02.28 15:00:00 | 000,039,992 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2006.02.28 15:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2006.02.28 15:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2006.02.28 15:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2006.02.28 15:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin

[2006.02.28 15:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

[2005.10.07 15:13:36 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\sis760.bin

[2005.10.07 15:13:36 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\sis741.bin

[2003.12.17 19:57:18 | 000,068,608 | ---- | C] () -- C:\WINDOWS\daemon.dll

========== LOP Check ==========

[2011.06.27 18:10:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems

[2011.06.27 18:06:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ashampoo

[2011.06.27 15:05:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GoBit Games

[2011.06.28 17:30:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TreeCardGames

[2011.06.28 09:53:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\123 Free Solitaire

[2011.06.27 18:07:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\Ashampoo

[2011.06.29 08:54:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\engel

[2011.06.28 10:58:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\IObit

[2011.06.27 16:27:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\PriceGong

[2011.06.28 17:38:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\SolSuite

[2011.06.27 20:15:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\Switchball

[2011.06.29 10:14:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Veni\Application Data\uTorrent

[2011.06.28 10:47:55 | 000,000,286 | ---- | M] () -- C:\WINDOWS\Tasks\ASC4_AutoCare.job

[2011.06.29 09:55:52 | 000,000,288 | ---- | M] () -- C:\WINDOWS\Tasks\ASC4_AutoSweep.job

[2011.06.28 17:02:25 | 000,000,290 | ---- | M] () -- C:\WINDOWS\Tasks\ASC4_AutoUpdate.job

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >

[2011.06.27 10:14:35 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT

[2011.06.29 09:53:36 | 000,000,211 | -HS- | M] () -- C:\boot.ini

[2011.06.27 10:14:35 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS

[2011.06.27 10:14:35 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2011.06.27 10:14:35 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2006.02.28 15:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM

[2011.06.27 17:15:15 | 000,250,048 | RHS- | M] () -- C:\ntldr

[2011.06.29 09:55:42 | 704,643,072 | -HS- | M] () -- C:\pagefile.sys

< %USERPROFILE%\*.* >

[2011.06.29 09:54:56 | 001,835,008 | -H-- | M] () -- C:\Documents and Settings\Veni\NTUSER.DAT

[2011.06.29 10:28:26 | 000,001,024 | -H-- | M] () -- C:\Documents and Settings\Veni\NTUSER.DAT.LOG

[2011.06.29 09:54:56 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Veni\ntuser.ini

[2011.06.29 09:56:32 | 000,052,736 | ---- | M] () -- C:\Documents and Settings\Veni\pj6vi7wlh9.exe

< %USERPROFILE%\Application Data\*.* >

[2011.06.29 09:59:19 | 000,159,744 | ---- | M] (-) -- C:\Documents and Settings\Veni\Application Data\94thixgkt.exe

[2011.06.29 10:01:50 | 000,100,864 | ---- | M] ( ) -- C:\Documents and Settings\Veni\Application Data\a1saqz9w.exe

[2008.04.14 03:12:36 | 000,100,864 | -H-- | M] ( ) -- C:\Documents and Settings\Veni\Application Data\conima.exe

[2011.06.27 13:00:48 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\Veni\Application Data\desktop.ini

[2011.06.29 09:57:22 | 000,000,105 | -H-- | M] () -- C:\Documents and Settings\Veni\Application Data\Input.bat

[2011.06.29 09:42:04 | 000,002,498 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\ljpbc.log

[2011.06.29 09:02:14 | 000,000,106 | -H-- | M] () -- C:\Documents and Settings\Veni\Application Data\MouseDriver.bat

[2011.06.29 10:03:56 | 000,159,744 | ---- | M] (-) -- C:\Documents and Settings\Veni\Application Data\r2461isn.exe

[2011.06.29 09:57:00 | 000,091,648 | ---- | M] ( ) -- C:\Documents and Settings\Veni\Application Data\t1tvgqb.exe

[2011.06.29 10:31:35 | 000,002,722 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\yzo3k.log

[2011.06.29 10:31:56 | 000,002,722 | ---- | M] () -- C:\Documents and Settings\Veni\Application Data\z30m5.log

[3 C:\Documents and Settings\Veni\Application Data\*.tmp files -> C:\Documents and Settings\Veni\Application Data\*.tmp -> ]

< %USERPROFILE%\Local Settings\Application Data\*.* >

[2011.06.28 21:54:51 | 000,014,848 | ---- | M] () -- C:\Documents and Settings\Veni\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.06.27 23:00:21 | 000,072,400 | ---- | M] () -- C:\Documents and Settings\Veni\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

[2011.06.29 09:54:43 | 003,765,856 | -H-- | M] () -- C:\Documents and Settings\Veni\Local Settings\Application Data\IconCache.db

< %AllUsersProfile%\*.* >

< %AllUsersProfile%\Application Data\*.* >

[2011.06.27 13:00:48 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini

< %USERPROFILE%\My Documents\*.* >

[2011.06.27 16:50:16 | 000,000,075 | -HS- | M] () -- C:\Documents and Settings\Veni\My Documents\desktop.ini

< %CommonProgramFiles%\*.* >

< %PROGRAMFILES%\*.* >

< %systemroot%\system32\*.dll /lockedfiles >

[2 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /90 >

[2011.05.29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbam.sys

[2011.05.29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >

[2003.06.18 17:31:48 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll

< MD5 for: EXPLORER.EXE >

[2006.02.28 15:00:00 | 001,059,840 | ---- | M] (Microsoft Corporation) MD5=0D976DD61C3C4E0A783C2E951D396693 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

[2008.04.14 03:12:19 | 001,061,376 | ---- | M] (Microsoft Corporation) MD5=1C3DC7ED6F73448B248DA04617C376CF -- C:\WINDOWS\explorer.exe

[2008.04.14 03:12:19 | 001,061,376 | ---- | M] (Microsoft Corporation) MD5=6553C8EEE34D141091D06B4E80B502B4 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe

[2008.04.14 03:12:19 | 001,061,376 | ---- | M] (Microsoft Corporation) MD5=72E4DC3CA202E91C78063B818B58BF58 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\explorer.exe

< MD5 for: USERINIT.EXE >

[2008.04.14 03:12:38 | 000,053,760 | ---- | M] (Microsoft Corporation) MD5=874F1B9949EC7C2EAEAAF8AB51D8FFC7 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe

[2008.04.14 03:12:38 | 000,053,760 | ---- | M] (Microsoft Corporation) MD5=89957891CCD3072CBB2C9C36004FF13B -- C:\WINDOWS\system32\userinit.exe

[2008.04.14 03:12:38 | 000,053,760 | ---- | M] (Microsoft Corporation) MD5=9FCDF1A2DD2175719C04E7F1F51F75E9 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\userinit.exe

[2006.02.28 15:00:00 | 000,052,224 | ---- | M] (Microsoft Corporation) MD5=DED6263DD097379111E811EAFFED0777 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: VOLSNAP.SYS >

[2008.04.13 21:41:01 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\ServicePackFiles\i386\volsnap.sys

[2008.04.13 21:41:01 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\volsnap.sys

[2008.04.13 21:41:01 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=4C8FCB5CC53AAB716D810740FE59D025 -- C:\WINDOWS\system32\drivers\volsnap.sys

[2006.02.28 15:00:00 | 000,052,352 | ---- | M] (Microsoft Corporation) MD5=EE4660083DEBA849FF6C485D944B379B -- C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys

< MD5 for: WINLOGON.EXE >

[2008.04.14 03:12:39 | 000,535,552 | ---- | M] (Microsoft Corporation) MD5=29BE66FBFCDEB77F0BB3C63371E7F718 -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

[2006.02.28 15:00:00 | 000,529,920 | ---- | M] (Microsoft Corporation) MD5=C6369C325EAA470522E12EB406A3508C -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

[2008.04.14 03:12:39 | 000,535,552 | ---- | M] (Microsoft Corporation) MD5=D324FB0CA7B941D9FE10408BAA9EB343 -- C:\WINDOWS\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\winlogon.exe

[2008.04.14 03:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\winlogon.exe

< End of report >

OTL Extras logfile created on: 29.06.2011 г. 10:26:59 - Run 1