1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Active Win 32 errors and more

Discussion in 'Malware and Virus Removal Archive' started by keyurdesai, 2008/12/01.

  1. 2008/12/01
    keyurdesai

    keyurdesai Inactive Thread Starter

    Joined:
    2008/12/01
    Messages:
    5
    Likes Received:
    0
    [Active] Win 32 errors and more

    Hey i am getting an ERROR called " Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience. "

    1.)The ERROR reprot contains this :-
    szAppName : svchost.exe szAppVer: 5.1.2600.2180
    szModName: netapi32.dll szModVer: 5.1.2600.2180 offset: 000187ad

    While going into techinal deatils i found this :_
    C:\DOCUME~1\KEYUR\LOCALS~1\Temp\WER48dc.dir00\svchost.exe.mdmp
    C:\DOCUME~1\KEYUR\LOCALS~1\Temp\WER48dc.dir00\appcompat.tx

    Repoting Details :-
    This error includes information regarding the condition of Generic Host Process for Win32 Services when the

    problem occured, the operating system version and computer hardware in use, and the Internet Protocol (IP)

    address of your computer.

    Now this error always comes after i connect the internet. It shows error after 10 to 15 min and when i click on

    send report the system doesn't work anymore and have to restart it.

    2.) Another problem ERROR i got is :- " Update Scheduer has encountered a problem and needs to close. We are sorry for the inconvenience ".

    aa.. i forgot to take the error details... SORRRY..!!
    But i hav taken all the error's print screen. if u want to info me.

    3.) ERROR :- UPSCHID.EXE Application Error
    The instruction at " 0x7c910f29 referenced memory at "0x00000000 ". The memory could not be

    "read ". Click on OK to terminate the program.

    4.)ERROR :- svchost.exe Application Error
    The exception unkown software exception (0xc0000409) occurred in the application at location

    0x5b86a3c0.

    Now SAME ERROR with DIFFERENT FIGURES :- svchost.exe Application Error
    The instuction at "0x7ffa4512" referenced memory at "0x81f48b90 ". The memory could not be

    "written ".

    Another SAME ERROR with DIFFERENT FIGURES :- svchost.exe Application error
    The instruction at "0x001f1cb0" referenced memory at "0x48544950 ". The memory could not be

    "written ".


    This are all my ERRORS of which i am fed up. 1 more thing i have formated my PC just 2 days ago and after that it has started all this. PLZZZZZZ HELPPPPPP i hav come here with GREAT HOPE.....!!
     
    Last edited: 2008/12/01
  2. 2008/12/01
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,680
    Likes Received:
    104

  3. to hide this advert.

  4. 2008/12/01
    keyurdesai

    keyurdesai Inactive Thread Starter

    Joined:
    2008/12/01
    Messages:
    5
    Likes Received:
    0
    Hey here is what you want as per you sir.

    INFO FILE:-


    info.txt logfile of random's system information tool 1.04 2008-12-02 10:52:19

    ======Uninstall list======

    -->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    -->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
    -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
    ACDSee 10 Photo Manager-->MsiExec.exe /I{F8B98EB6-FC06-45BF-87D4-9784E0408611}
    Acrobat.com-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe -uninstall com.adobe.mauby 4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
    Acrobat.com-->MsiExec.exe /I{77DCDCE3-2DED-62F3-8154-05E745472D07}
    Adobe AIR-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Updater.exe -arp:uninstall
    Adobe AIR-->MsiExec.exe /I{00203668-8170-44A0-BE44-B632FA4D780F}
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Photoshop 7.0-->C:\WINDOWS\ISUNINST.EXE -f "C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c "C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll "
    Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A90000000001}
    CyberLink PowerDVD 8--> "C:\Program Files\InstallShield Installation Information\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}\setup.exe" /z-uninstall
    DivX Free Codec--> "C:\Program Files\DivX Free Codec\Uninstall.exe "
    Google Talk (remove only)--> "C:\Program Files\Google\Google Talk\uninstall.exe "
    High Definition Audio Driver Package - KB888111--> "C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe "
    HijackThis 2.0.2--> "C:\Program Files\trend micro\HijackThis.exe" /uninstall
    Intel(R) Graphics Media Accelerator Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2776 PCI\VEN_8086&DEV_2772
    Intel(R) PRO Network Connections-->MsiExec.exe /I{E6C48B74-26ED-4EF8-A04C-42AFDE5E1CA3}
    K-Lite Codec Pack 3.9.0 Full--> "C:\Program Files\K-Lite Codec Pack\unins000.exe "
    Lock My PC 4.7.1--> "D:\APPLICATION\Lock My PC 4\unins000.exe "
    Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    PowerISO--> "C:\Program Files\PowerISO\uninstall.exe "
    Quick Heal AntiVirus Plus-->C:\PROGRA~1\QUICKH~1\QUICKH~1\Uninst.exe
    RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x9 -removeonly
    RegistryFix v7.0--> "C:\Program Files\RegistryFix7\unins000.exe "
    Winamp--> "C:\Program Files\Winamp\UninstWA.exe "
    WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
    Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
    Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

    ======Security center information======

    AV: Quick Heal 9.50

    ======Environment variables======

    "ComSpec "=%SystemRoot%\system32\cmd.exe
    "Path "=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Intel\DMIX
    "windir "=%SystemRoot%
    "FP_NO_HOST_CHECK "=NO
    "OS "=Windows_NT
    "PROCESSOR_ARCHITECTURE "=x86
    "PROCESSOR_LEVEL "=6
    "PROCESSOR_IDENTIFIER "=x86 Family 6 Model 15 Stepping 6, GenuineIntel
    "PROCESSOR_REVISION "=0f06
    "NUMBER_OF_PROCESSORS "=2
    "PATHEXT "=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP "=%SystemRoot%\TEMP
    "TMP "=%SystemRoot%\TEMP

    -----------------EOF-----------------


    LOG FILE:-

    Logfile of random's system information tool 1.04 (written by random/random)
    Run by KEYUR at 2008-12-02 10:50:16
    Microsoft Windows XP Professional Service Pack 2
    System drive C: has 11 GB (55%) free of 19 GB
    Total RAM: 503 MB (19% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:52:16 AM, on 12/2/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    D:\APPLICATION\Lock My PC 4\lockpc.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\PROGRA~1\QUICKH~1\QUICKH~1\EMLPROUI.EXE
    C:\PROGRA~1\QUICKH~1\QUICKH~1\UPSCHD.EXE
    C:\PROGRA~1\QUICKH~1\QUICKH~1\SCANMSG.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\QUICKH~1\QUICKH~1\OnlineNT.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\PROGRA~1\QUICKH~1\QUICKH~1\ONLNSVC.EXE
    C:\PROGRA~1\QUICKH~1\QUICKH~1\EMLPROXY.EXE
    C:\PROGRA~1\QUICKH~1\QUICKH~1\quhlpsvc.exe
    C:\PROGRA~1\QUICKH~1\QUICKH~1\scanwscs.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\dwwin.exe
    C:\Documents and Settings\KEYUR\Desktop\RSIT.exe
    C:\Program Files\trend micro\KEYUR.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe "
    O4 - HKLM\..\Run: [Email Protection] C:\PROGRA~1\QUICKH~1\QUICKH~1\EMLPROUI.EXE
    O4 - HKLM\..\Run: [Update Scheduler] C:\PROGRA~1\QUICKH~1\QUICKH~1\UPSCHD.EXE /CHECK
    O4 - HKLM\..\Run: [On-Line Protection] C:\PROGRA~1\QUICKH~1\QUICKH~1\CATEYE.EXE
    O4 - HKLM\..\Run: [Messenger] C:\PROGRA~1\QUICKH~1\QUICKH~1\SCANMSG.EXE
    O4 - HKLM\..\Run: [Startup Scan] C:\PROGRA~1\QUICKH~1\QUICKH~1\sensor.exe /loadrun
    O4 - HKLM\..\RunOnce: [Startup Scan] C:\PROGRA~1\QUICKH~1\QUICKH~1\sensor.exe /check
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\RunOnce: [iolo 3rd Party Reboot] C:\Documents and Settings\All Users\Application Data\iolo\IRestartStub.exe /t "System Mechanic Professional" /i "fromreg" /v "iolo 3rd Party Reboot" /av "fromreg "
    O8 - Extra context menu item: &D&ownload &with BitComet - res://D:\APPLICATION\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: &D&ownload all video with BitComet - res://D:\APPLICATION\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: &D&ownload all with BitComet - res://D:\APPLICATION\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E304B6EC-4B4A-4AC4-BCAD-96333D43B356}: NameServer = 59.144.127.16 59.144.127.17
    O20 - Winlogon Notify: fsp_lmwl - C:\WINDOWS\SYSTEM32\fsp_lmwl.dll
    O23 - Service: NT Online Protection - Quick Heal Technologies (P) Ltd. - C:\PROGRA~1\QUICKH~1\QUICKH~1\ONLNSVC.EXE
    O23 - Service: Quick Heal AntiVirus Plus Mail Protection - Quick Heal Technologies (P) Ltd. - C:\PROGRA~1\QUICKH~1\QUICKH~1\EMLPROXY.EXE
    O23 - Service: Quick Update Service - Quick Heal Technologies (P) Ltd. - C:\PROGRA~1\QUICKH~1\QUICKH~1\quhlpsvc.exe
    O23 - Service: Quick Heal Helper Service WSC (ScanWscS) - Quick Heal Technologies (P) Ltd. - C:\PROGRA~1\QUICKH~1\QUICKH~1\scanwscs.exe

    --
    End of file - 4631 bytes

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
    Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
    RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-11-29 308856]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "igfxhkcmd "=C:\WINDOWS\system32\hkcmd.exe [2006-03-23 77824]
    "igfxpers "=C:\WINDOWS\system32\igfxpers.exe [2006-03-23 118784]
    "RTHDCPL "=C:\WINDOWS\RTHDCPL.EXE [2006-04-04 16120832]
    "Alcmtr "=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
    "PDVD8LanguageShortcut "=C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe [2007-12-14 50472]
    "Email Protection "=C:\PROGRA~1\QUICKH~1\QUICKH~1\EMLPROUI.EXE [2008-12-01 275832]
    "Update Scheduler "=C:\PROGRA~1\QUICKH~1\QUICKH~1\UPSCHD.EXE [2008-12-01 95608]
    "On-Line Protection "=C:\PROGRA~1\QUICKH~1\QUICKH~1\CATEYE.EXE [2008-12-01 206200]
    "Messenger "=C:\PROGRA~1\QUICKH~1\QUICKH~1\SCANMSG.EXE [2008-12-01 116088]
    "Startup Scan "=C:\PROGRA~1\QUICKH~1\QUICKH~1\sensor.exe [2008-12-01 144760]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "Startup Scan "=C:\PROGRA~1\QUICKH~1\QUICKH~1\sensor.exe [2008-12-01 144760]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe "=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "iolo 3rd Party Reboot "=C:\Documents and Settings\All Users\Application Data\iolo\IRestartStub.exe [2008-05-22 451432]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
    C:\Program Files\Cyberlink\Shared Files\brs.exe [2008-03-21 91432]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Free Codec]
    C:\Program Files\DivX Free Codec\Divx Free Update.exe [2007-03-30 274432]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
    C:\Program Files\Google\Google Talk\googletalk.exe [2007-01-02 3739648]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray]
    C:\WINDOWS\system32\igfxtray.exe [2006-03-23 94208]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]
    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2008-11-05 4347120]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
    C:\Program Files\PowerISO\PWRISOVM.EXE [2008-07-07 167936]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8]
    C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2008-03-20 83240]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-11-29 185896]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\fsp_lmwl]
    C:\WINDOWS\system32\fsp_lmwl.dll [2008-06-13 45184]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    C:\WINDOWS\system32\igfxdev.dll [2006-03-23 139264]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername "=0
    "legalnoticecaption "=
    "legalnoticetext "=
    "shutdownwithoutlogon "=1
    "undockwithoutlogon "=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun "=145

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\Program Files\Google\Google Talk\googletalk.exe "= "C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk "
    "C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe "= "C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0 "
    "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe "= "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger "

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe "= "C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0 "

    ======List of files/folders created in the last 3 months======

    2008-12-02 10:50:17 ----D---- C:\Program Files\trend micro
    2008-12-02 10:50:16 ----D---- C:\rsit
    2008-12-02 09:27:02 ----A---- C:\WINDOWS\system32\suppdll.dll
    2008-12-01 19:54:49 ----A---- C:\WINDOWS\system32\mfc45.dll
    2008-12-01 19:54:31 ----D---- C:\Documents and Settings\KEYUR\Application Data\iolo
    2008-12-01 19:54:31 ----D---- C:\Documents and Settings\All Users\Application Data\iolo
    2008-12-01 13:00:26 ----A---- C:\WINDOWS\QH32.INI
    2008-12-01 11:18:08 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
    2008-12-01 11:05:49 ----D---- C:\Documents and Settings\KEYUR\Application Data\DAEMON Tools Pro
    2008-12-01 11:04:57 ----A---- C:\WINDOWS\Folder Lock 6 Uninstall Log.txt
    2008-12-01 09:43:52 ----A---- C:\WINDOWS\system32\fsp_lmwl.dll
    2008-12-01 09:38:58 ----SHD---- C:\Documents and Settings\KEYUR\Application Data\.#
    2008-12-01 09:38:24 ----A---- C:\WINDOWS\Folder Lock 6 Setup Log.txt
    2008-11-30 13:53:40 ----D---- C:\Documents and Settings\KEYUR\Application Data\Mozilla
    2008-11-29 21:08:35 ----D---- C:\Program Files\RegistryFix7
    2008-11-29 20:56:26 ----D---- C:\WINDOWS\pss
    2008-11-29 20:27:04 ----A---- C:\WINDOWS\'Full Speed' Internet Booster + Performance Tests Uninstall Log.txt
    2008-11-29 20:00:27 ----A---- C:\WINDOWS\system32\h323log.txt
    2008-11-29 19:58:15 ----A---- C:\WINDOWS\system32\usbui.dll
    2008-11-29 19:57:19 ----A---- C:\WINDOWS\imsins.BAK
    2008-11-29 19:57:16 ----SHD---- C:\WINDOWS\Installer
    2008-11-29 19:57:16 ----D---- C:\Program Files\Common Files\ODBC
    2008-11-29 19:57:16 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2008-11-29 19:57:16 ----A---- C:\WINDOWS\ODBCINST.INI
    2008-11-29 19:57:13 ----D---- C:\Program Files\Common Files\SpeechEngines
    2008-11-29 19:57:13 ----D---- C:\Program Files\Common Files\Microsoft Shared
    2008-11-29 19:57:12 ----RD---- C:\Program Files
    2008-11-29 19:57:12 ----D---- C:\Program Files\Common Files
    2008-11-29 19:57:11 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
    2008-11-29 19:57:11 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
    2008-11-29 19:57:11 ----RA---- C:\WINDOWS\system32\kbdazel.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdycc.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbduzb.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdur.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdtat.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdru1.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdru.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdmon.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdbu.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdblr.dll
    2008-11-29 19:57:09 ----RA---- C:\WINDOWS\system32\kbdaze.dll
    2008-11-29 19:57:08 ----RA---- C:\WINDOWS\system32\kbdhept.dll
    2008-11-29 19:57:08 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
    2008-11-29 19:57:08 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
    2008-11-29 19:57:08 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
    2008-11-29 19:57:08 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
    2008-11-29 19:57:08 ----RA---- C:\WINDOWS\system32\kbdhe.dll
    2008-11-29 19:57:08 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
    2008-11-29 19:57:07 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
    2008-11-29 19:57:07 ----RA---- C:\WINDOWS\system32\kbdlv.dll
    2008-11-29 19:57:07 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
    2008-11-29 19:57:07 ----RA---- C:\WINDOWS\system32\kbdlt.dll
    2008-11-29 19:57:07 ----RA---- C:\WINDOWS\system32\kbdest.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdycl.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdsl.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdro.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdpl.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdhu.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdcz.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\kbdcr.dll
    2008-11-29 19:57:05 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
    2008-11-29 19:57:03 ----A---- C:\WINDOWS\system32\spxcoins.dll
    2008-11-29 19:57:03 ----A---- C:\WINDOWS\system32\irclass.dll
    2008-11-29 19:57:03 ----A---- C:\WINDOWS\system32\EqnClass.Dll
    2008-11-29 19:57:03 ----A---- C:\WINDOWS\system32\dgsetup.dll
    2008-11-29 19:57:03 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
    2008-11-29 19:57:01 ----N---- C:\WINDOWS\system32\CONFIG.TMP
    2008-11-29 19:57:01 ----A---- C:\WINDOWS\TASKMAN.EXE
    2008-11-29 19:57:01 ----A---- C:\WINDOWS\system32\batt.dll
    2008-11-29 19:57:00 ----A---- C:\WINDOWS\system32\storprop.dll
    2008-11-29 19:57:00 ----A---- C:\WINDOWS\NOTEPAD.EXE
    2008-11-29 19:56:52 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
    2008-11-29 19:56:50 ----RA---- C:\WINDOWS\SET8.tmp
    2008-11-29 19:56:48 ----RA---- C:\WINDOWS\SET4.tmp
    2008-11-29 19:56:46 ----RA---- C:\WINDOWS\SET3.tmp
    2008-11-29 19:56:41 ----D---- C:\WINDOWS\system32\CatRoot2
    2008-11-29 19:56:41 ----D---- C:\WINDOWS\system32\CatRoot
    2008-11-29 19:56:36 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
    2008-11-29 19:56:21 ----A---- C:\WINDOWS\setuplog.txt
    2008-11-29 19:56:17 ----D---- C:\Documents and Settings
    2008-11-29 19:56:16 ----SHD---- C:\System Volume Information
    2008-11-29 19:55:41 ----RASH---- C:\boot.ini
    2008-11-29 19:52:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2008-11-29 19:52:14 ----RSD---- C:\WINDOWS\Fonts
    2008-11-29 19:52:14 ----RD---- C:\WINDOWS\Web
    2008-11-29 19:52:14 ----HD---- C:\WINDOWS\inf
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\WinSxS
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\twain_32
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Temp
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\wins
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\wbem
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\usmt
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\spool
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\ShellExt
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\Setup
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\ras
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\oobe
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\npp
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\mui
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\inetsrv
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\IME
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\icsxml
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\ias
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\export
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\drivers
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\dhcp
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\config
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\3com_dmi
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\3076
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\2052
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1054
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1042
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1041
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1037
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1033
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1031
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1028
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32\1025
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system32
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\system
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\security
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Resources
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\repair
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Provisioning
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\PeerNet
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\pchealth
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\mui
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\msapps
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\msagent
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Media
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\java
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\ime
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Help
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\ehome
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Driver Cache
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Debug
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Cursors
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Connection Wizard
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\Config
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\AppPatch
    2008-11-29 19:52:14 ----D---- C:\WINDOWS\addins
    2008-11-29 19:52:14 ----D---- C:\WINDOWS
    2008-11-29 19:03:40 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
    2008-11-29 19:03:39 ----D---- C:\Program Files\Yahoo!
    2008-11-29 18:29:19 ----N---- C:\WINDOWS\system32\spmsg.dll
    2008-11-29 18:29:10 ----A---- C:\WINDOWS\system32\msisip.dll
    2008-11-29 18:29:10 ----A---- C:\WINDOWS\system32\msimsg.dll
    2008-11-29 18:29:10 ----A---- C:\WINDOWS\system32\msihnd.dll
    2008-11-29 18:29:10 ----A---- C:\WINDOWS\system32\msiexec.exe
    2008-11-29 18:29:10 ----A---- C:\WINDOWS\system32\msi.dll
    2008-11-29 18:19:23 ----D---- C:\WINDOWS\'Full Speed' Internet Booster + Performance Tests
    2008-11-29 18:18:48 ----A---- C:\WINDOWS\'Full Speed' Internet Booster + Performance Tests Setup Log.txt
    2008-11-29 18:05:54 ----D---- C:\Documents and Settings\KEYUR\Application Data\vlc
    2008-11-29 18:03:38 ----SHD---- C:\Config.Msi
    2008-11-29 17:38:39 ----D---- C:\Documents and Settings\All Users\Application Data\WinZip
    2008-11-29 17:35:03 ----D---- C:\Documents and Settings\KEYUR\Application Data\Sun
    2008-11-29 17:33:20 ----D---- C:\Program Files\Common Files\xing shared
    2008-11-29 17:33:15 ----A---- C:\WINDOWS\system32\rmoc3260.dll
    2008-11-29 17:33:11 ----A---- C:\WINDOWS\system32\pndx5032.dll
    2008-11-29 17:33:11 ----A---- C:\WINDOWS\system32\pndx5016.dll
    2008-11-29 17:33:09 ----A---- C:\WINDOWS\system32\pncrt.dll
    2008-11-29 17:33:08 ----D---- C:\Program Files\Common Files\Real
    2008-11-29 17:33:06 ----D---- C:\Program Files\Real
    2008-11-29 17:32:41 ----D---- C:\Documents and Settings\KEYUR\Application Data\Real
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\vxblock.dll
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxwave.dll
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxsfs.dll
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxmas.dll
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxinsa64.exe
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxhpinst.exe
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxdrv.dll
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxcpya64.exe
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\pxafs.dll
    2008-11-29 17:31:32 ----N---- C:\WINDOWS\system32\px.dll
    2008-11-29 17:31:28 ----D---- C:\Program Files\Winamp
    2008-11-29 17:31:28 ----D---- C:\Documents and Settings\KEYUR\Application Data\Winamp
    2008-11-29 17:30:40 ----D---- C:\Program Files\PowerISO
    2008-11-29 17:21:08 ----D---- C:\WINDOWS\system32\appmgmt
    2008-11-29 17:16:28 ----D---- C:\Program Files\Common Files\CyberLink
    2008-11-29 17:04:08 ----D---- C:\Program Files\Common Files\Adobe AIR
    2008-11-29 17:03:30 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
    2008-11-29 16:58:56 ----D---- C:\Documents and Settings\KEYUR\Application Data\Macromedia
    2008-11-29 16:58:52 ----D---- C:\Program Files\Google
    2008-11-29 15:35:52 ----D---- C:\Documents and Settings\KEYUR\Application Data\Ahead
    2008-11-29 15:33:58 ----A---- C:\WINDOWS\sensor.INI
    2008-11-29 15:33:36 ----D---- C:\Program Files\Quick Heal
    2008-11-29 15:29:41 ----D---- C:\Program Files\Mozilla Firefox
    2008-11-29 15:25:59 ----D---- C:\Documents and Settings\KEYUR\Application Data\WinRAR
    2008-11-29 15:25:05 ----D---- C:\Program Files\WinRAR
    2008-11-29 15:17:29 ----HD---- C:\WINDOWS\PIF
    2008-11-29 15:07:59 ----D---- C:\Documents and Settings\KEYUR\Application Data\Media Player Classic
    2008-11-29 15:07:39 ----D---- C:\Program Files\DivX Free Codec
    2008-11-29 15:07:08 ----A---- C:\WINDOWS\system32\unrar.dll
    2008-11-29 15:07:05 ----A---- C:\WINDOWS\system32\yv12vfw.dll
    2008-11-29 15:07:05 ----A---- C:\WINDOWS\system32\xvidvfw.dll
    2008-11-29 15:07:05 ----A---- C:\WINDOWS\system32\xvidcore.dll
    2008-11-29 15:07:05 ----A---- C:\WINDOWS\system32\qt-dx331.dll
    2008-11-29 15:07:05 ----A---- C:\WINDOWS\system32\dpl100.dll
    2008-11-29 15:07:04 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
    2008-11-29 15:07:04 ----A---- C:\WINDOWS\system32\ff_vfw.dll
    2008-11-29 15:07:04 ----A---- C:\WINDOWS\system32\divx.dll
    2008-11-29 15:07:03 ----D---- C:\Program Files\K-Lite Codec Pack
    2008-11-29 15:05:40 ----D---- C:\Documents and Settings\KEYUR\Application Data\CyberLink
    2008-11-29 15:05:05 ----A---- C:\WINDOWS\system32\mdimon.dll
    2008-11-29 15:04:50 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
    2008-11-29 15:03:57 ----D---- C:\Program Files\Common Files\L&H
    2008-11-29 15:03:45 ----D---- C:\Program Files\Microsoft.NET
    2008-11-29 15:03:31 ----D---- C:\Program Files\Microsoft ActiveSync
    2008-11-29 15:03:25 ----A---- C:\WINDOWS\NeroDigital.ini
    2008-11-29 15:02:48 ----D---- C:\Program Files\Common Files\DESIGNER
    2008-11-29 15:02:42 ----D---- C:\Program Files\Microsoft Works
    2008-11-29 15:02:35 ----D---- C:\Program Files\Microsoft Visual Studio
    2008-11-29 15:02:14 ----D---- C:\WINDOWS\SHELLNEW
    2008-11-29 15:01:06 ----D---- C:\Program Files\Microsoft Office
    2008-11-29 14:59:33 ----A---- C:\WINDOWS\ODBC.INI
    2008-11-29 14:59:13 ----D---- C:\Tally
    2008-11-29 14:58:54 ----SHD---- C:\RECYCLER
    2008-11-29 14:56:38 ----A---- C:\WINDOWS\IsUninst.exe
    2008-11-29 14:56:27 ----D---- C:\Documents and Settings\KEYUR\Application Data\ACD Systems
    2008-11-29 14:56:06 ----D---- C:\Program Files\Common Files\ACD Systems
    2008-11-29 14:56:06 ----D---- C:\Program Files\ACD Systems
    2008-11-29 14:56:06 ----D---- C:\Documents and Settings\All Users\Application Data\ACD Systems
    2008-11-29 14:55:51 ----D---- C:\WINDOWS\Downloaded Installations
    2008-11-29 14:55:36 ----A---- C:\WINDOWS\system32\jit.dll
    2008-11-29 14:55:36 ----A---- C:\WINDOWS\system32\javaee.dll
    2008-11-29 14:55:36 ----A---- C:\WINDOWS\system32\dx3j.dll
    2008-11-29 14:55:36 ----A---- C:\WINDOWS\setdebug.exe
    2008-11-29 14:55:33 ----A---- C:\WINDOWS\system32\wjview.exe
    2008-11-29 14:55:33 ----A---- C:\WINDOWS\system32\vmhelper.dll
    2008-11-29 14:55:33 ----A---- C:\WINDOWS\system32\msjdbc10.dll
    2008-11-29 14:55:33 ----A---- C:\WINDOWS\system32\msjava.dll
    2008-11-29 14:55:33 ----A---- C:\WINDOWS\system32\msawt.dll
    2008-11-29 14:55:32 ----A---- C:\WINDOWS\system32\jview.exe
    2008-11-29 14:55:32 ----A---- C:\WINDOWS\system32\jdbgmgr.exe
    2008-11-29 14:55:32 ----A---- C:\WINDOWS\system32\javart.dll
    2008-11-29 14:55:32 ----A---- C:\WINDOWS\system32\javaprxy.dll
    2008-11-29 14:55:32 ----A---- C:\WINDOWS\system32\javacypt.dll
    2008-11-29 14:55:31 ----A---- C:\WINDOWS\system32\clspack.exe
    2008-11-29 14:55:11 ----D---- C:\Program Files\WinZip
    2008-11-29 14:52:33 ----D---- C:\Program Files\Nero
    2008-11-29 14:52:33 ----D---- C:\Program Files\Common Files\Ahead
    2008-11-29 14:49:20 ----D---- C:\WINDOWS\system32\Lang
    2008-11-29 14:48:13 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll
    2008-11-29 14:48:13 ----R---- C:\WINDOWS\system32\ChCfg.exe
    2008-11-29 14:47:49 ----R---- C:\WINDOWS\SoundMan.exe
    2008-11-29 14:47:49 ----R---- C:\WINDOWS\RtlUpd.exe
    2008-11-29 14:47:49 ----R---- C:\WINDOWS\RTLCPL.exe
    2008-11-29 14:47:49 ----R---- C:\WINDOWS\MicCal.exe
    2008-11-29 14:47:49 ----R---- C:\WINDOWS\alcwzrd.exe
    2008-11-29 14:47:49 ----R---- C:\WINDOWS\Alcmtr.exe
    2008-11-29 14:47:49 ----D---- C:\WINDOWS\system32\RTCOM
    2008-11-29 14:47:48 ----R---- C:\WINDOWS\RTHDCPL.exe
    2008-11-29 14:47:47 ----A---- C:\WINDOWS\system32\ksuser.dll
    2008-11-29 14:47:26 ----A---- C:\WINDOWS\system32\spupdsvc.exe
    2008-11-29 14:47:24 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
    2008-11-29 14:47:03 ----D---- C:\Program Files\Realtek
    2008-11-29 14:46:58 ----R---- C:\WINDOWS\RtlExUpd.dll
    2008-11-29 14:45:09 ----RA---- C:\WINDOWS\system32\igfxres.dll
    2008-11-29 14:44:28 ----RA---- C:\WINDOWS\system32\Prounstl.exe
    2008-11-29 14:44:28 ----RA---- C:\WINDOWS\system32\NicIn32.dll
    2008-11-29 14:44:28 ----RA---- C:\WINDOWS\system32\NicCo32.dll
    2008-11-29 14:44:28 ----RA---- C:\WINDOWS\system32\EtCo32.dll
    2008-11-29 14:44:28 ----RA---- C:\WINDOWS\system32\e1000msg.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\igldev32.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuTRK.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuTHA.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuSVE.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuRUS.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuPTG.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuPTB.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuPLK.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuNOR.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuNLD.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuKOR.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuJPN.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuITA.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuHUN.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuHEB.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuFRC.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuFRA.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuFIN.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuESP.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuENG.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuELL.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmudlg.exe
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuDEU.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuDAN.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuCSY.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuCHT.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuCHS.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuARB.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\ialmuARA.dll
    2008-11-29 14:43:48 ----RA---- C:\WINDOWS\system32\iAlmCoIn_v4543.dll
    2008-11-29 14:43:47 ----RA---- C:\WINDOWS\system32\iglicd32.dll
    2008-11-29 14:43:47 ----RA---- C:\WINDOWS\system32\ialmrem.dll
    2008-11-29 14:43:46 ----RA---- C:\WINDOWS\system32\igfxext.exe
    2008-11-29 14:43:46 ----RA---- C:\WINDOWS\system32\igfxexps.dll
    2008-11-29 14:43:44 ----RA---- C:\WINDOWS\system32\igfxzoom.exe
    2008-11-29 14:43:44 ----RA---- C:\WINDOWS\system32\igfxtray.exe
    2008-11-29 14:43:44 ----RA---- C:\WINDOWS\system32\igfxress.dll
    2008-11-29 14:43:44 ----RA---- C:\WINDOWS\system32\igfxpers.exe
    2008-11-29 14:43:44 ----RA---- C:\WINDOWS\system32\igfxdo.dll
    2008-11-29 14:43:44 ----RA---- C:\WINDOWS\system32\igfxdev.dll
    2008-11-29 14:43:44 ----RA---- C:\WINDOWS\system32\hkcmd.exe
    2008-11-29 14:43:43 ----RA---- C:\WINDOWS\system32\igfxsrvc.exe
    2008-11-29 14:43:43 ----RA---- C:\WINDOWS\system32\igfxsrvc.dll
    2008-11-29 14:43:43 ----RA---- C:\WINDOWS\system32\igfxpph.dll
    2008-11-29 14:43:43 ----RA---- C:\WINDOWS\system32\igfxcfg.exe
    2008-11-29 14:43:43 ----RA---- C:\WINDOWS\system32\hccutils.dll
    2008-11-29 14:43:42 ----RA---- C:\WINDOWS\system32\ialmrnt5.dll
    2008-11-29 14:43:42 ----RA---- C:\WINDOWS\system32\ialmdnt5.dll
    2008-11-29 14:43:42 ----RA---- C:\WINDOWS\system32\ialmdev5.dll
    2008-11-29 14:43:42 ----RA---- C:\WINDOWS\system32\ialmdd5.dll
    2008-11-29 14:43:03 ----D---- C:\WINDOWS\system32\ReinstallBackups
    2008-11-29 14:43:02 ----D---- C:\Program Files\Intel
    2008-11-29 14:42:58 ----A---- C:\WINDOWS\AS_Debug.txt
    2008-11-29 14:42:51 ----A---- C:\WINDOWS\Ascd_tmp.ini
    2008-11-29 14:42:20 ----D---- C:\Documents and Settings\KEYUR\Application Data\AdobeUM
    2008-11-29 14:42:13 ----D---- C:\Documents and Settings\KEYUR\Application Data\Adobe
    2008-11-29 14:42:11 ----D---- C:\Program Files\Common Files\Adobe
    2008-11-29 14:41:55 ----D---- C:\Program Files\Adobe
    2008-11-29 14:41:42 ----D---- C:\WINDOWS\Cache
    2008-11-29 14:40:53 ----A---- C:\WINDOWS\system32\msxml3a.dll
    2008-11-29 14:40:19 ----HD---- C:\Program Files\InstallShield Installation Information
    2008-11-29 14:40:19 ----A---- C:\WINDOWS\system32\msvcr71.dll
    2008-11-29 14:40:19 ----A---- C:\WINDOWS\system32\msvcp71.dll
    2008-11-29 14:40:18 ----D---- C:\Program Files\CyberLink
    2008-11-29 14:40:13 ----D---- C:\Program Files\Common Files\InstallShield
    2008-11-29 14:38:47 ----D---- C:\Documents and Settings\KEYUR\Application Data\Identities
    2008-11-29 14:38:46 ----HD---- C:\Program Files\Uninstall Information
    2008-11-29 14:38:41 ----ASH---- C:\Documents and Settings\KEYUR\Application Data\desktop.ini
    2008-11-29 14:38:40 ----SD---- C:\Documents and Settings\KEYUR\Application Data\Microsoft
    2008-11-29 14:38:11 ----D---- C:\WINDOWS\SoftwareDistribution
    2008-11-29 14:38:09 ----SD---- C:\WINDOWS\system32\Microsoft
    2008-11-29 14:38:09 ----D---- C:\WINDOWS\Prefetch
    2008-11-29 14:38:09 ----A---- C:\WINDOWS\SchedLgU.Txt
    2008-11-29 14:35:00 ----D---- C:\WINDOWS\system32\xircom
    2008-11-29 14:35:00 ----D---- C:\Program Files\xerox
    2008-11-29 14:34:59 ----D---- C:\Program Files\microsoft frontpage
    2008-11-29 14:34:48 ----A---- C:\WINDOWS\control.ini
    2008-11-29 14:34:48 ----A---- C:\AUTOEXEC.BAT
    2008-11-29 14:34:39 ----A---- C:\WINDOWS\OEWABLog.txt
    2008-11-29 14:34:34 ----A---- C:\WINDOWS\system32\mapi32.dll
    2008-11-29 14:33:46 ----SD---- C:\WINDOWS\Downloaded Program Files
    2008-11-29 14:33:46 ----RD---- C:\WINDOWS\Offline Web Pages
    2008-11-29 14:33:46 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
    2008-11-29 14:33:41 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
    2008-11-29 14:33:36 ----HD---- C:\Program Files\WindowsUpdate
    2008-11-29 14:33:22 ----D---- C:\WINDOWS\system32\DirectX
    2008-11-29 14:33:08 ----A---- C:\WINDOWS\system32\atrace.dll
    2008-11-29 14:33:06 ----A---- C:\WINDOWS\system32\desktop.ini
    2008-11-29 14:33:06 ----A---- C:\WINDOWS\desktop.ini
    2008-11-29 14:33:00 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
    2008-11-29 14:32:59 ----D---- C:\Program Files\Common Files\Services
    2008-11-29 14:32:59 ----A---- C:\WINDOWS\system32\acctres.dll
    2008-11-29 14:32:57 ----SD---- C:\WINDOWS\Tasks
    2008-11-29 14:32:57 ----A---- C:\WINDOWS\system32\icfgnt5.dll
    2008-11-29 14:32:56 ----D---- C:\Program Files\Common Files\MSSoap
    2008-11-29 14:32:53 ----D---- C:\WINDOWS\system32\Macromed
    2008-11-29 14:32:53 ----D---- C:\WINDOWS\srchasst
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wuweb.dll
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wups.dll
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wucltui.dll
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wuauserv.dll
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wuaueng1.dll
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wuaueng.dll
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wuauclt1.exe
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wuauclt.exe
    2008-11-29 14:32:50 ----A---- C:\WINDOWS\system32\wuapi.dll
    2008-11-29 14:32:49 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
    2008-11-29 14:32:49 ----A---- C:\WINDOWS\system32\qmgr.dll
    2008-11-29 14:32:49 ----A---- C:\WINDOWS\system32\bitsprx3.dll
    2008-11-29 14:32:49 ----A---- C:\WINDOWS\system32\bitsprx2.dll
    2008-11-29 14:32:46 ----D---- C:\Program Files\Movie Maker
    2008-11-29 14:32:43 ----A---- C:\WINDOWS\system32\safrslv.dll
    2008-11-29 14:32:43 ----A---- C:\WINDOWS\system32\safrdm.dll
    2008-11-29 14:32:43 ----A---- C:\WINDOWS\system32\safrcdlg.dll
    2008-11-29 14:32:43 ----A---- C:\WINDOWS\system32\racpldlg.dll
    2008-11-29 14:32:40 ----D---- C:\WINDOWS\system32\Restore
    2008-11-29 14:32:40 ----A---- C:\WINDOWS\system32\srsvc.dll
    2008-11-29 14:32:40 ----A---- C:\WINDOWS\system32\srrstr.dll
    2008-11-29 14:32:40 ----A---- C:\WINDOWS\system32\srclient.dll
    2008-11-29 14:32:40 ----A---- C:\WINDOWS\system32\fltMc.exe
    2008-11-29 14:32:40 ----A---- C:\WINDOWS\system32\fltlib.dll
    2008-11-29 14:32:39 ----A---- C:\WINDOWS\system32\nmmkcert.dll
    2008-11-29 14:32:39 ----A---- C:\WINDOWS\system32\msconf.dll
    2008-11-29 14:32:39 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
    2008-11-29 14:32:39 ----A---- C:\WINDOWS\system32\mnmdd.dll
    2008-11-29 14:32:39 ----A---- C:\WINDOWS\system32\isrdbg32.dll
    2008-11-29 14:32:39 ----A---- C:\WINDOWS\system32\ils.dll
    2008-11-29 14:32:36 ----D---- C:\Program Files\NetMeeting
    2008-11-29 14:32:36 ----A---- C:\WINDOWS\system32\msoert2.dll
    2008-11-29 14:32:36 ----A---- C:\WINDOWS\system32\msoeacct.dll
    2008-11-29 14:32:36 ----A---- C:\WINDOWS\system32\inetres.dll
    2008-11-29 14:32:35 ----A---- C:\WINDOWS\system32\inetcomm.dll
    2008-11-29 14:32:34 ----D---- C:\Program Files\Outlook Express
    2008-11-29 14:32:34 ----A---- C:\WINDOWS\system32\schedsvc.dll
    2008-11-29 14:32:34 ----A---- C:\WINDOWS\system32\mstinit.exe
    2008-11-29 14:32:34 ----A---- C:\WINDOWS\system32\mstask.dll
    2008-11-29 14:32:34 ----A---- C:\WINDOWS\system32\isign32.dll
    2008-11-29 14:32:34 ----A---- C:\WINDOWS\system32\icwphbk.dll
    2008-11-29 14:32:34 ----A---- C:\WINDOWS\system32\icwdial.dll
    2008-11-29 14:32:33 ----A---- C:\WINDOWS\system32\inetcfg.dll
    2008-11-29 14:32:29 ----D---- C:\Program Files\Common Files\System
    2008-11-29 14:32:27 ----D---- C:\Program Files\Internet Explorer
    2008-11-29 14:32:02 ----D---- C:\Program Files\ComPlus Applications
    2008-11-29 14:32:00 ----A---- C:\WINDOWS\vbaddin.ini
    2008-11-29 14:32:00 ----A---- C:\WINDOWS\vb.ini
    2008-11-29 14:31:56 ----D---- C:\WINDOWS\Registration
    2008-11-29 14:31:50 ----D---- C:\Program Files\Windows Media Player
    2008-11-29 14:31:50 ----D---- C:\Program Files\Online Services
    2008-11-29 14:31:46 ----D---- C:\Program Files\Messenger
    2008-11-29 14:31:43 ----D---- C:\Program Files\MSN Gaming Zone
    2008-11-29 14:31:43 ----A---- C:\WINDOWS\system32\write.exe
    2008-11-29 14:31:36 ----A---- C:\WINDOWS\system32\sndvol32.exe
    2008-11-29 14:31:36 ----A---- C:\WINDOWS\system32\hticons.dll
    2008-11-29 14:31:36 ----A---- C:\WINDOWS\system32\avwav.dll
    2008-11-29 14:31:36 ----A---- C:\WINDOWS\system32\avtapi.dll
    2008-11-29 14:31:36 ----A---- C:\WINDOWS\system32\avmeter.dll
    2008-11-29 14:31:35 ----A---- C:\WINDOWS\system32\winchat.exe
    2008-11-29 14:31:31 ----A---- C:\WINDOWS\system32\getuname.dll
    2008-11-29 14:31:30 ----A---- C:\WINDOWS\system32\winmine.exe
    2008-11-29 14:31:30 ----A---- C:\WINDOWS\system32\sol.exe
    2008-11-29 14:31:30 ----A---- C:\WINDOWS\system32\mshearts.exe
    2008-11-29 14:31:30 ----A---- C:\WINDOWS\system32\charmap.exe
    2008-11-29 14:31:30 ----A---- C:\WINDOWS\system32\calc.exe
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\usrlogon.cmd
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\tsshutdn.exe
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\tslabels.ini
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\tskill.exe
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\tsdiscon.exe
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\tscon.exe
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\shadow.exe
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\reset.exe
    2008-11-29 14:31:29 ----A---- C:\WINDOWS\system32\freecell.exe
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\rwinsta.exe
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\regini.exe
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\qwinsta.exe
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\qappsrv.exe
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\msg.exe
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\msdtcprf.ini
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\logoff.exe
    2008-11-29 14:31:28 ----A---- C:\WINDOWS\system32\cdmodem.dll
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\stclient.dll
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\mtxlegih.dll
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\mtxex.dll
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\mtxdm.dll
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\comsnap.dll
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\comrepl.dll
    2008-11-29 14:31:27 ----A---- C:\WINDOWS\system32\comaddin.dll
    2008-11-29 14:31:23 ----A---- C:\WINDOWS\system32\wmimgmt.msc
    2008-11-29 14:31:14 ----D---- C:\Program Files\MSN
    2008-11-29 14:31:13 ----D---- C:\Program Files\Windows NT
    2008-11-29 14:31:13 ----A---- C:\WINDOWS\system32\sndrec32.exe
    2008-11-29 14:31:13 ----A---- C:\WINDOWS\system32\mspaint.exe
    2008-11-29 14:31:13 ----A---- C:\WINDOWS\system32\mplay32.exe
    2008-11-29 14:31:13 ----A---- C:\WINDOWS\system32\hypertrm.dll
    2008-11-29 14:31:13 ----A---- C:\WINDOWS\system32\accwiz.exe
    2008-11-29 14:31:12 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
    2008-11-29 14:31:12 ----A---- C:\WINDOWS\system32\spider.exe
    2008-11-29 14:31:12 ----A---- C:\WINDOWS\system32\clipbrd.exe
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\tscupgrd.exe
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\termsrv.dll
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\sessmgr.exe
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\remotepg.dll
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\rdshost.exe
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\rdsaddin.exe
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\rdpwsx.dll
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\rdchost.dll
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\mstscax.dll
    2008-11-29 14:31:11 ----A---- C:\WINDOWS\system32\mstsc.exe
    2008-11-29 14:31:10 ----D---- C:\WINDOWS\system32\MsDtc
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\rdpsnd.dll
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\rdpclip.exe
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\qprocess.exe
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\mtxoci.dll
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\msdtctm.dll
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\msdtcprx.dll
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\icaapi.dll
    2008-11-29 14:31:10 ----A---- C:\WINDOWS\system32\cfgbkend.dll
    2008-11-29 14:31:09 ----D---- C:\WINDOWS\system32\Com
    2008-11-29 14:31:09 ----A---- C:\WINDOWS\system32\xolehlp.dll
    2008-11-29 14:31:09 ----A---- C:\WINDOWS\system32\msdtclog.dll
    2008-11-29 14:31:09 ----A---- C:\WINDOWS\system32\msdtc.exe
    2008-11-29 14:31:09 ----A---- C:\WINDOWS\system32\colbact.dll
    2008-11-29 14:31:09 ----A---- C:\WINDOWS\system32\catsrvps.dll
    2008-11-29 14:31:08 ----A---- C:\WINDOWS\system32\comuid.dll
    2008-11-29 14:31:08 ----A---- C:\WINDOWS\system32\comsvcs.dll
    2008-11-29 14:31:08 ----A---- C:\WINDOWS\system32\clbcatq.dll
    2008-11-29 14:31:08 ----A---- C:\WINDOWS\system32\clbcatex.dll
    2008-11-29 14:31:08 ----A---- C:\WINDOWS\system32\catsrvut.dll
    2008-11-29 14:31:08 ----A---- C:\WINDOWS\system32\catsrv.dll
    2008-11-29 14:31:03 ----A---- C:\WINDOWS\system32\servdeps.dll
    2008-11-29 14:31:03 ----A---- C:\WINDOWS\system32\mmfutil.dll
    2008-11-29 14:31:03 ----A---- C:\WINDOWS\system32\licwmi.dll
    2008-11-29 14:31:02 ----A---- C:\WINDOWS\system32\cmprops.dll

    ======List of files/folders modified in the last 3 months======

    2008-12-01 13:27:13 ----A---- C:\WINDOWS\win.ini
    2008-12-01 13:27:13 ----A---- C:\WINDOWS\system.ini

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 36096]
    R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-07-07 56108]
    R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; \??\C:\Program Files\CyberLink\PowerDVD8\000.fcl []
    R2 EMLSS;EMLSS; C:\WINDOWS\system32\drivers\emltdi.sys [2008-12-01 12160]
    R2 OnlineNT;OnlineNT; \??\C:\PROGRA~1\QUICKH~1\QUICKH~1\ONLINENT.SYS []
    R2 windrvNT;windrvNT; \??\C:\WINDOWS\system32\windrvNT.sys []
    R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2005-09-14 179200]
    R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
    R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2006-03-23 1166972]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-04-06 4258816]
    R3 LMPC4;LMPC4; C:\WINDOWS\system32\drivers\LMPC4.sys [2007-10-08 10096]
    R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
    R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
    R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
    R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
    S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
    S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
    R2 NT Online Protection;NT Online Protection; C:\PROGRA~1\QUICKH~1\QUICKH~1\ONLNSVC.EXE [2008-12-01 99704]
    R2 Quick Heal AntiVirus Plus Mail Protection;Quick Heal AntiVirus Plus Mail Protection; C:\PROGRA~1\QUICKH~1\QUICKH~1\EMLPROXY.EXE [2008-12-01 50552]
    R2 Quick Update Service;Quick Update Service; C:\PROGRA~1\QUICKH~1\QUICKH~1\quhlpsvc.exe [2008-12-01 58744]
    R2 ScanWscS;Quick Heal Helper Service WSC; C:\PROGRA~1\QUICKH~1\QUICKH~1\scanwscs.exe [2008-12-01 91512]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

    -----------------EOF-----------------
     
  5. 2008/12/05
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi keyurdesai
    Welcome to WindowsBBS

    This could be a malware problem or not.

    If it is not then it could be very hard to isolate.

    So please do the following.

    Download ATF Cleaner by Atribune and save it to your Desktop.
    This is a good tool to get rid of the temporary garbage you pick up while surfing the net.
    Double click ATF-Cleaner.exe to run the program.
    Check the boxes to the left of:

    Windows Temp
    Current User Temp
    All Users Temp
    Cookies
    Temporary Internet Files
    Prefetch
    Java Cache
    Recycle bin


    The rest are optional - if you want it to remove everything check "Select All ".
    Finally, click Empty Selected. When you get the "Done Cleaning" message, click OK.


    Now do this.

    Please go HERE to run Panda's ActiveScan
    • Once you are on the Panda site click the Scan your PC button
    • A new window will open...click the Check Now button
    • Enter your Country
    • Enter your State/Province
    • Enter your e-mail address and click send
    • Select either Home User or Company
    • Click the big Scan Now button
    • If it wants to install an ActiveX component allow it
    • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
    • When download is complete, click on My Computer to start the scan
    • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report

    Thanks
    Geri
     
    Geri,
    #4
  6. 2008/12/17
    keyurdesai

    keyurdesai Inactive Thread Starter

    Joined:
    2008/12/01
    Messages:
    5
    Likes Received:
    0
    NO Sucess

    Still i havn't got anything.. still the error is coming plzzz somebody help me
     
  7. 2008/12/17
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    I'm trying to help you.
    Please post the Panda log.

    Geri
     
    Geri,
    #6
  8. 2008/12/27
    keyurdesai

    keyurdesai Inactive Thread Starter

    Joined:
    2008/12/01
    Messages:
    5
    Likes Received:
    0
    ;***********************************************************************************************************************************************************************************
    ANALYSIS: 2008-12-27 21:08:32
    PROTECTIONS: 1
    MALWARE: 28
    SUSPECTS: 7
    ;***********************************************************************************************************************************************************************************
    PROTECTIONS
    Description Version Active Updated
    ;===================================================================================================================================================================================
    Quick Heal 10.00 10.00 Yes Yes
    ;===================================================================================================================================================================================
    MALWARE
    Id Description Type Active Severity Disinfectable Disinfected Location
    ;===================================================================================================================================================================================
    00047467 Trj/Qhost.gen Virus/Trojan No 0 Yes No C:\WINDOWS\system32\drivers\etc\hosts
    00055522 Eicar.Mod Virus No 0 No No D:\MY STUFF\1000_Hacker_Tutorials_2008\1000 Hacker Tutorials 2008\How do I Test My VirusScan Installation.txt
    00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\KEYUR\Cookies\keyur@doubleclick[1].txt
    00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\KEYUR\Cookies\keyur@atdmt[2].txt
    00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\KEYUR\Cookies\keyur@tribalfusion[2].txt
    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\KEYUR\Cookies\keyur@ad.yieldmanager[1].txt
    00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\KEYUR\Cookies\keyur@serving-sys[2].txt
    00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\KEYUR\Cookies\keyur@bs.serving-sys[1].txt
    00185663 HackTool/NetCat.A HackTools No 0 Yes No D:\APPLICATION\Cryptload\router\FRITZ!Box\nc.exe
    00431764 W32/Socks.AH Virus/Worm No 0 No No D:\MY STUFF\INTERNET DOWNLOADERS\Lime Wire Pro 4.17.3.rar[Lime Wire Pro 4.17.3\Patch.EXE][Lime Wire Pro 4.17.3\Patch.EXE][WINUPD~1.EXE]
    00475627 Bck/Bifrose.BHN Virus/Trojan No 1 Yes No D:\MY STUFF\Softwares\Wnidows_Blinds_THEMES\Wnidows Blinds_THEMES\Keygen.exe
    01076542 Generic Trojan Virus/Trojan No 0 Yes No D:\GAMES\red aleart 2\ra2_1006_tr104.exe
    01080620 Generic Trojan Virus/Trojan No 0 Yes No D:\MY STUFF\CONVERTERS\Sound Forge v9.0\Serial & patch\PATCH.exe
    03257826 Trj/Lineage.BZE Virus/Trojan No 1 No No D:\MY STUFF\INTERNET DOWNLOADERS\Lime Wire Pro 4.17.3.rar[Lime Wire Pro 4.17.3\Patch.EXE][Lime Wire Pro 4.17.3\Patch.EXE][Patch.exe]
    03262537 W32/Gaobot.OXI.worm Virus/Worm No 0 Yes No D:\MY STUFF\NEW STUFFS\FDN_complete_www.dl4all.com\Proxy Finder\Crack\ProxyFinder.exe
    03602872 Trj/Downloader.MDW Virus/Trojan No 0 Yes No D:\MY STUFF\Softwares\ytc2008dl4all\Yahoo New Sounds\y! messenger sounds.exe
    03639684 Trj/Lineage.BZE Virus/Trojan No 1 Yes No D:\MY STUFF\CONVERTERS\Star Video Converter V 1.2.19\Keygen.exe
    03738741 Generic Malware Virus/Trojan No 0 Yes No D:\APPLICATION\Cryptload\ocr\netload.in\asmCaptcha\test.exe
    03767617 Generic Trojan Virus/Trojan No 0 Yes No D:\MY STUFF\CONVERTERS\Xilisoft DVD to 3GP Converter v4.0.43.0317b\keygen\keygen.exe
    03782220 Generic Trojan Virus/Trojan No 0 Yes No D:\MY STUFF\CONVERTERS\Xilisoft.WMA.MP3.Converter.v2.1.47.0327\keygen\keygen.exe
    03883576 Generic Trojan Virus/Trojan No 0 Yes No D:\GAMES\red aleart 2\Red Alert 2_tr12Trainer.exe
    04011665 Generic Trojan Virus/Trojan No 0 Yes No D:\MY STUFF\Softwares\ACDSee.10.0.238.0-patch_CiM\ACDSee.10.0.238.0-patch_CiM\cim.nfo.viewer.exe
    04277833 Generic Trojan Virus/Trojan No 0 Yes No D:\MY STUFF\CONVERTERS\Advanced Sound Recorder 6.0\Patch.exe
    04302152 Generic Trojan Virus/Trojan No 0 Yes No C:\WINDOWS\system32\senekadf.dll
    04413507 Generic Trojan Virus/Trojan No 0 No No D:\MY STUFF\NEW STUFFS\Pearl.Mountain.Soft.Picture.Collage.Maker.v2.0.3.1976.WinAll.Incl.Keygen-CRD\cnx0677a.zip[cnx0677a.rar][Keygen.zip][Keygen/keygen.exe]
    04444116 Adware/GoodSearchNow Adware No 1 Yes No C:\WINDOWS\system32\suppdll.dll
    04454615 Generic Trojan Virus/Trojan No 0 Yes No C:\WINDOWS\system32\senekalight.dll
    04467213 Generic Trojan Virus/Trojan No 0 Yes No C:\WINDOWS\system32\senekawi.dll
    ;===================================================================================================================================================================================
    SUSPECTS
    Sent Location 5
    ;===================================================================================================================================================================================
    No C:\Tally\tally72.exe 5
    No D:\APPLICATION\Folder Lock 5.95\Folder Lock\Locked\ⁿ▒╖░╥ⁿ\450 Celeb Babes Wallpaper 1024x768\Sexy Girl Striptease Desktop Screensaver\Read Me Bonus.exe
    No D:\APPLICATION\Folder Lock 5.95\Folder Lock\Locked\ⁿ▒╖░╥ⁿ\450 Celeb Babes Wallpaper 1024x768\Sexy Girl Striptease Desktop Screensaver\Stripsaver.exe
    No D:\MY STUFF\INTERNET DOWNLOADERS\frostwire-4.13.5.windows.exe[²ÃœÃ‡\apbarSp.FrostWire.exe] 5
    No D:\MY STUFF\Themes & Icons\THEMES\30 Windows XP Gadgets 2008\Vista_XP_Crystal_Gadgets\BL Clock.exe 5
    No D:\MY STUFF\Themes & Icons\THEMES\30 Windows XP Gadgets 2008\Vista_XP_Crystal_Gadgets\BL_Weather_by adni18.exe
    No D:\MY STUFF\Themes & Icons\THEMES\30 Windows XP Gadgets 2008\Vista_XP_Crystal_Gadgets\Hyalo-ToDo gadget by adni18.exe
    ;===================================================================================================================================================================================
    VULNERABILITIES
    Id Severity Description 5
    ;===================================================================================================================================================================================
    184380 MEDIUM MS08-002 5
    184379 MEDIUM MS08-001 5
    182048 HIGH MS07-069 5
    182046 HIGH MS07-067 5
    182043 HIGH MS07-064 5
    179553 HIGH MS07-061 5
    176382 HIGH MS07-057 5
    176383 HIGH MS07-058 5
    170911 HIGH MS07-050 5
    170907 HIGH MS07-046 5
    170906 HIGH MS07-045 5
    170904 HIGH MS07-043 5
    164915 HIGH MS07-035 5
    164913 HIGH MS07-033 5
    164911 HIGH MS07-031 5
    160623 HIGH MS07-027 5
    157262 HIGH MS07-022 5
    157261 HIGH MS07-021 5
    157260 HIGH MS07-020 5
    157259 HIGH MS07-019 5
    156477 HIGH MS07-017 5
    150253 HIGH MS07-016 5
    150249 HIGH MS07-013 5
    150248 HIGH MS07-012 5
    150247 HIGH MS07-011 5
    150243 HIGH MS07-008 5
    150242 HIGH MS07-007 5
    150241 MEDIUM MS07-006 5
    141034 HIGH MS06-076 5
    141033 MEDIUM MS06-075 5
    141030 HIGH MS06-072 5
    137571 HIGH MS06-070 5
    137568 HIGH MS06-067 5
    133387 MEDIUM MS06-065 5
    133386 MEDIUM MS06-064 5
    133385 MEDIUM MS06-063 5
    133379 HIGH MS06-057 5
    131654 HIGH MS06-055 5
    129977 MEDIUM MS06-053 5
    129976 MEDIUM MS06-052 5
    126093 HIGH MS06-051 5
    126092 MEDIUM MS06-050 5
    126087 HIGH MS06-046 5
    126086 MEDIUM MS06-045 5
    126083 HIGH MS06-042 5
    126082 HIGH MS06-041 5
    126081 HIGH MS06-040 5
    123421 HIGH MS06-036 5
    123420 HIGH MS06-035 5
    120825 MEDIUM MS06-032 5
    120823 MEDIUM MS06-030 5
    120818 HIGH MS06-025 5
    120815 HIGH MS06-022 5
    120814 HIGH MS06-021 5
    117384 MEDIUM MS06-018 5
    114666 HIGH MS06-015 5
    114664 HIGH MS06-013 5
    108744 MEDIUM MS06-008 5
    108743 MEDIUM MS06-007 5
    108742 MEDIUM MS06-006 5
    104567 HIGH MS06-002 5
    104237 HIGH MS06-001 5
    96574 HIGH MS05-053 5
    93395 HIGH MS05-051 5
    93394 HIGH MS05-050 5
    93454 MEDIUM MS05-049 5
    ;===================================================================================================================================================================================
     
  9. 2008/12/27
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK, first you need to get rid of Limewire and any other P2P applacations you have installed.
    Delete all cracked or hacked software, music and any other applacations you have downloaded using P2P.

    You need to update your Windows updates.

    Let me know when this is done and we'll go from there.

    Geri
     
    Geri,
    #8
  10. 2008/12/28
    keyurdesai

    keyurdesai Inactive Thread Starter

    Joined:
    2008/12/01
    Messages:
    5
    Likes Received:
    0
    erm.... sir whatever i have downloaded from P2P is only movies and 1 or 2 softwares. And i have scanned it thoroughly & no virus found for sure. I have deleted all the hack & crack softwares. And sir i am from India & here i don't have the genuine Windows Xp.

    So now what step should i take?
     
  11. 2008/12/28
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK please do this,

    Download ComboFix from Here to your Desktop.

    It's best to disable realtime protection applications as they sometimes interfere with the tool.
    Check this link for any applicable programs you may have.
    • Close all open programs and windows
    • Double click combofix.exe and follow the prompts.
    • Vista users right click Combofix.exe and select Run As Administrator.
    • When finished, it shall produce a log for you. Post the Combofix log
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

    **NOTE - Allow ComboFix to update if prompted.

    Thanks
    Geri
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.