1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved No Internet Connectivity, No sound, Task Bar Grey

Discussion in 'Malware and Virus Removal Archive' started by JusticeNY, 2010/05/27.

  1. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    [Resolved] No Internet Connectivity, No sound, Task Bar Grey

    last night apparently norton was blocking numerous attacks but i guess a few got through.. tried to do a system restore got blue screen a few times then was able to launch windows run a full scan with malwarebites and norton found a few threats removed them but still internet didnt come back and still no sound and still taskbar grey'd out

    here are my logs

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 5:23:55 PM, on 2010-05-27
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.17023)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
    C:\Program Files\Dell Photo AIO Printer 942\dlbubmgr.exe
    C:\Program Files\Dell Photo AIO Printer 942\memcard.exe
    C:\Program Files\Dell Photo AIO Printer 942\dlbubmon.exe
    C:\Documents and Settings\family\Desktop\iexplore.exe
    C:\Program Files\trend micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
    O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Black III\Orbitdownloader\orbitcth.dll
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: (no name) - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - C:\PROGRA~1\FRESHD~1\FRESHD~1\fdcatch.dll (file missing)
    O2 - BHO: Nick Aracde Toolbar - {4E7BD74F-2B8D-469E-9EB4-FE6FA694B13E} - C:\PROGRA~1\NICKAR~1\NICKAR~1.DLL (file missing)
    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\3.8.0.41\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\3.8.0.41\IPSBHO.DLL
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~4\Office12\GRA8E1~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
    O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\PROGRA~1\SOFTOM~1\TOOLBA~1\bin\tbcore3U.dll (file missing)
    O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - (no file)
    O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - C:\PROGRA~1\VOL_TO~1\VOL_TO~1.DLL (file missing)
    O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
    O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll (file missing)
    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\3.8.0.41\coIEPlg.dll
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe "
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe "
    O4 - HKLM\..\Run: [Dell Photo AIO Printer 942] "C:\Program Files\Dell Photo AIO Printer 942\dlbubmgr.exe "
    O4 - HKLM\..\Run: [DellMCM] "C:\Program Files\Dell Photo AIO Printer 942\memcard.exe "
    O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
    O8 - Extra context menu item: &Download by Orbit - res://C:\Black III\Orbitdownloader\orbitmxt.dll/201
    O8 - Extra context menu item: &Grab video by Orbit - res://C:\Black III\Orbitdownloader\orbitmxt.dll/204
    O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Black III\Orbitdownloader\orbitmxt.dll/203
    O8 - Extra context menu item: Down&load all by Orbit - res://C:\Black III\Orbitdownloader\orbitmxt.dll/202
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
    O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemyfios.verizon.net/sdcCommon/download/FIOS/Verizon FiOS Installer.cab
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
    O16 - DPF: {3D3DBC64-0D21-4EA4-94EE-86D6D9B31C0C} (MoneyList Control) - http://www.worldwinner.com/games/v45/moneylist/moneylist.cab
    O16 - DPF: {42FDC231-A411-45F8-B8B6-3B5026111DA8} (SolitaireRush Control) - http://www.worldwinner.com/games/v47/solitairerush/solitairerush.cab
    O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab
    O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
    O16 - DPF: {58FC4C77-71C2-4972-A8CD-78691AD85158} (BJA Control) - http://www.worldwinner.com/games/v63/bjattack/bja.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://verizon.exent.com/vzfamily/classes/ExentCtl.ocx
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://www.nick.com/common/groove/gx/GrooveAX27.cab
    O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
    O16 - DPF: {97438FE9-D361-4279-BA82-98CC0877A717} (Cubis Control) - http://www.worldwinner.com/games/v57/cubis/cubis.cab
    O16 - DPF: {A021A215-6CDC-44B4-8C16-90491CED9605} (Clue Control) - http://www.worldwinner.com/games/v59/clue/clue.cab
    O16 - DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} (WoF Control) - http://www.worldwinner.com/games/v57/wof/wof.cab
    O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://www.worldwinner.com/games/v67/swapit/swapit.cab
    O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
    O16 - DPF: {BA94245D-2AA0-4953-9D9F-B0EE4CC02C43} (Tilecity Control) - http://www.worldwinner.com/games/v42/tilecity/tilecity.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} (FamilyFeud Control) - http://www.worldwinner.com/games/v47/familyfeud/familyfeud.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~4\Office12\GR99D3~1.DLL
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton 360\Engine\3.8.0.41\coIEPlg.dll
    O18 - Filter hijack: text/html - {2709aaca-98b7-4b11-9a3b-05507d7412ff} - C:\WINDOWS\msv1_0.dll
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: COM+ System Application (COMSysApp) - Unknown owner - C:\WINDOWS\system32\dllhost.exe (file missing)
    O23 - Service: dlbu_device - Dell - C:\WINDOWS\system32\dlbucoms.exe
    O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
    O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
    O23 - Service: Radialpoint Unicorn Update Service (RPSUpdaterR) - Radialpoint Inc. - C:\Program Files\Verizon\PC Security Checkup\rpsupdaterR.exe
    O23 - Service: MS Software Shadow Copy Provider (SwPrv) - Unknown owner - C:\WINDOWS\system32\dllhost.exe (file missing)
    O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)
    O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

    --
    End of file - 11924 bytes
     
  2. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    Malwarebytes' Anti-Malware 1.45
    www.malwarebytes.org

    Database version: 3983

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 7.0.5730.13

    2010-05-27 3:11:42 AM
    mbam-log-2010-05-27 (03-11-42).txt

    Scan type: Full scan (C:\|)
    Objects scanned: 221058
    Time elapsed: 2 hour(s), 51 minute(s), 25 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 4
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
     

  3. to hide this advert.

  4. 2010/05/27
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,890
    Likes Received:
    387
    Please read this as indicated at the head of the forum and post the logs requested in this thread.
     
  5. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    DDS (Ver_10-03-17.01) - NTFSx86
    Run by Family at 17:51:23.82 on 2010-05-27
    Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1534.938 [GMT -4:00]

    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89E5C8EC-FFA4-00EF-0D24-347CA8A3377C}

    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A0E7AAC-FFA4-0100-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89E1365C-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89D369BC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89DA7DDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {894E3DDC-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89D77DDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8952F214-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89D565E4-FFA4-0100-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89BA73A4-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {81F62824-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89BE03FC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89BD9DDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89537AB4-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {81FEE824-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {821299C4-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A04E1AC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89D2CDDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89EBD354-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {81FB09EC-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89C81054-FFA4-00EF-0D24-347CA8A3377C}
    FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\svchost.exe -k netsvcs
    C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\system32\svchost.exe -k netsvcs
    C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
    C:\Program Files\Dell Photo AIO Printer 942\dlbubmgr.exe
    C:\Program Files\Dell Photo AIO Printer 942\memcard.exe
    C:\Program Files\Dell Photo AIO Printer 942\dlbubmon.exe
    C:\Documents and Settings\family\Desktop\iexplore.exe
    C:\Documents and Settings\family\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uInternet Connection Wizard,ShellNext = iexplore
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    mWinlogon: Userinit=c:\windows\system32\Userinit.exe
    BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - c:\black iii\orbitdownloader\orbitcth.dll
    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: : {206e52e0-d52e-11d4-ad54-0000e86c26f6} - c:\progra~1\freshd~1\freshd~1\fdcatch.dll
    BHO: Nick Aracde Toolbar: {4e7bd74f-2b8d-469e-9eb4-fe6fa694b13e} - c:\progra~1\nickar~1\NICKAR~1.DLL
    BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360\engine\3.8.0.41\coIEPlg.dll
    BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360\engine\3.8.0.41\IPSBHO.DLL
    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~4\office12\GRA8E1~1.DLL
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0\bin\ssv.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
    BHO: XBTBPos00 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\progra~1\softom~1\toolba~1\bin\tbcore3U.dll
    TB: {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - No File
    TB: Verizon Broadband Toolbar: {4e7bd74f-2b8d-469e-8cb0-ab60bb9aae22} - c:\progra~1\vol_to~1\VOL_TO~1.DLL
    TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
    TB: StylerToolBar: {d2f8f919-690b-4ea2-9fa7-a203d1e04f75} - c:\program files\styler\tb\StylerTB.dll
    TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360\engine\3.8.0.41\coIEPlg.dll
    TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
    TB: {C70E30C7-140A-4166-A2E8-43557E62B41A} - No File
    TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File
    TB: {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - No File
    TB: {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
    mRun: [Dell Photo AIO Printer 942] "c:\program files\dell photo aio printer 942\dlbubmgr.exe "
    mRun: [DellMCM] "c:\program files\dell photo aio printer 942\memcard.exe "
    dRunOnce: [RunNarrator] Narrator.exe
    IE: &Download by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
    IE: {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C}
    IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0\bin\ssv.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
    DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
    DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemyfios.verizon.net/sdcCommon/download/FIOS/Verizon%20FiOS%20Installer.cab
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader5.cab
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/9/b/d/9bdc68ef-6a9f-4505-8fb8-d0d2d160e512/LegitCheckControl.cab
    DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {3D3DBC64-0D21-4EA4-94EE-86D6D9B31C0C} - hxxp://www.worldwinner.com/games/v45/moneylist/moneylist.cab
    DPF: {42FDC231-A411-45F8-B8B6-3B5026111DA8} - hxxp://www.worldwinner.com/games/v47/solitairerush/solitairerush.cab
    DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab
    DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
    DPF: {58FC4C77-71C2-4972-A8CD-78691AD85158} - hxxp://www.worldwinner.com/games/v63/bjattack/bja.cab
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} - hxxp://verizon.exent.com/vzfamily/classes/ExentCtl.ocx
    DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - hxxp://www.nick.com/common/groove/gx/GrooveAX27.cab
    DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
    DPF: {97438FE9-D361-4279-BA82-98CC0877A717} - hxxp://www.worldwinner.com/games/v57/cubis/cubis.cab
    DPF: {A021A215-6CDC-44B4-8C16-90491CED9605} - hxxp://www.worldwinner.com/games/v59/clue/clue.cab
    DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} - hxxp://www.worldwinner.com/games/v57/wof/wof.cab
    DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} - hxxp://www.worldwinner.com/games/v67/swapit/swapit.cab
    DPF: {B49C4597-8721-4789-9250-315DFBD9F525} - hxxp://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
    DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
    DPF: {BA94245D-2AA0-4953-9D9F-B0EE4CC02C43} - hxxp://www.worldwinner.com/games/v42/tilecity/tilecity.cab
    DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
    DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} - hxxp://www.worldwinner.com/games/v47/familyfeud/familyfeud.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    Filter: text/html - {2709aaca-98b7-4b11-9a3b-05507d7412ff} -
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~4\office12\GR99D3~1.DLL
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - c:\program files\norton 360\engine\3.8.0.41\CoIEPlg.dll
    Notify: AtiExtEvent - Ati2evxx.dll
    Notify: igfxcui - igfxsrvc.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~4\office12\GRA8E1~1.DLL

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\family\applic~1\mozilla\firefox\profiles\0iyqlche.default\
    FF - prefs.js: browser.search.selectedEngine - DAEMON Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.blackle.com/
    FF - component: c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\coffplgn\components\coFFPlgn.dll
    FF - component: c:\documents and settings\family\application data\mozilla\firefox\profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\FFExternalAlert.dll
    FF - component: c:\documents and settings\family\application data\mozilla\firefox\profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\RadioWMPCore.dll
    FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll
    FF - plugin: c:\documents and settings\family\application data\move networks\plugins\npqmp071503000010.dll
    FF - plugin: c:\documents and settings\family\application data\mozilla\plugins\npgoogletalk.dll
    FF - plugin: c:\documents and settings\family\local settings\application data\google\update\1.2.183.23\npGoogleOneClick8.dll
    FF - plugin: c:\program files\java\jre1.6.0\bin\npjpi160.dll
    FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
    FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
    FF - plugin: c:\program files\mzilla\plugins\npCouponPrinter.dll
    FF - plugin: c:\program files\mzilla\plugins\npGoogleGadgetPluginFirefoxWin.dll
    FF - plugin: c:\program files\mzilla\plugins\npwachk.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npdsplay.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\opera 10 beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\opera 10 beta\program\plugins\NPOFFICE.DLL
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin2.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin3.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin4.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin5.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin6.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin7.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin8.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npwmsdrm.dll
    FF - plugin: c:\program files\quicktime\plugins\npqtplugin8.dll
    FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mzilla\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

    ---- FIREFOX POLICIES ----
    FF - user.js: network.http.max-persistent-connections-per-server - 4
    FF - user.js: content.max.tokenizing.time - 200000
    FF - user.js: content.notify.interval - 100000
    FF - user.js: content.switch.threshold - 650000
    FF - user.js: nglayout.initialpaint.delay - 300
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.homepage.dontask, true);user_pref(yahoo.ytff.general.dontshowhpoffer, true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, falsec:\program files\mzilla\greprefs\all.js - pref( "ui.use_native_colors ", true);
    c:\program files\mzilla\greprefs\all.js - pref( "ui.use_native_popup_windows ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.enable_click_image_resizing ", true);
    c:\program files\mzilla\greprefs\all.js - pref( "accessibility.browsewithcaret_shortcut.enabled ", true);
    c:\program files\mzilla\greprefs\all.js - pref( "javascript.options.mem.high_water_mark ", 32);
    c:\program files\mzilla\greprefs\all.js - pref( "javascript.options.mem.gc_frequency ", 1600);
    c:\program files\mzilla\greprefs\all.js - pref( "network.auth.force-generic-ntlm ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "svg.smil.enabled ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "ui.trackpoint_hack.enabled ", -1);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.debug ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.agedWeight ", 2);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.bucketSize ", 1);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.maxTimeGroupings ", 25);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.timeGroupingSize ", 604800);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.boundaryWeight ", 25);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.prefixWeight ", 5);
    c:\program files\mzilla\greprefs\all.js - pref( "html5.enable ", false);
    c:\program files\mzilla\greprefs\security-prefs.js - pref( "security.ssl3.rsa_seed_sha ", true);
    c:\program files\mzilla\defaults\pref\firefox-branding.js - pref( "app.update.download.backgroundInterval ", 600);
    c:\program files\mzilla\defaults\pref\firefox-branding.js - pref( "app.update.url.manual ", "http://www.firefox.com ");
    c:\program files\mzilla\defaults\pref\firefox-branding.js - pref( "browser.search.param.yahoo-fr-ja ", "mozff ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name ", "chrome://browser/locale/browser.properties ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description ", "chrome://browser/locale/browser.properties ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add ", "addons.mozilla.org ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add.36 ", "getpersonas.com ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "lightweightThemes.update.enabled ", true);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.allTabs.previews ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "plugins.hide_infobar_for_outdated_plugin ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "plugins.update.notifyUser ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "toolbar.customization.usesheet ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.taskbar.previews.enable ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.taskbar.previews.max ", 20);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.taskbar.previews.cachetime ", 20);

    ============= SERVICES / DRIVERS ===============

    R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0308000.029\SymEFA.sys [2010-4-13 310320]
    R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\n360\0308000.029\BHDrvx86.sys [2010-4-13 259632]
    R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\n360\0308000.029\cchpx86.sys [2010-4-13 482432]
    R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20100518.002\IDSXpx86.sys [2010-5-24 331640]
    R2 N360;Norton 360;c:\program files\norton 360\engine\3.8.0.41\ccSvcHst.exe [2010-4-13 117640]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-5-26 102448]
    R3 JakNDisMP;JakNDisMP;c:\windows\system32\drivers\JakNDis.sys [2009-5-11 21504]
    R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam.sys [2008-1-14 21632]
    R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20100526.006\NAVENG.SYS [2010-5-26 85552]
    R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20100526.006\NAVEX15.SYS [2010-5-26 1347504]
    S2 sbbotdi;sbbotdi; [x]
    S2 Viewpoint Manager Service;Viewpoint Manager Service; "c:\program files\viewpoint\common\viewpointservice.exe" --> c:\program files\viewpoint\common\ViewpointService.exe [?]
    S3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\drivers\gan_adapter.sys [2006-10-19 10664]
    S3 JakNDis;Jaksta Service;c:\windows\system32\drivers\JakNDis.sys [2009-5-11 21504]
    S3 NTProcDrv;Process creation detector for NT.; [x]
    S3 PortTalk;PortTalk;c:\windows\system32\drivers\PortTalk.sys [2007-7-4 3567]
    S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\windows\system32\drivers\scsiprnt.sys [2004-11-30 11648]
    S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [2007-6-3 223128]

    =============== Created Last 30 ================

    2010-05-15 04:38:23 0 d-----w- c:\program files\common files\Software Update Utility
    2010-05-13 11:35:40 31363 ---ha-w- c:\windows\system32\dlbuma.GID
    2010-05-13 10:57:30 0 d-----w- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}
    2010-05-13 10:57:30 0 d-----w- C:\Temp
    2010-05-03 20:03:47 0 d-----w- c:\program files\ooVoo

    ==================== Find3M ====================

    2010-05-23 18:12:50 140824 -c-ha-w- c:\windows\system32\mlfcache.dat
    2010-04-13 02:45:26 806 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
    2010-04-13 02:45:26 7456 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
    2010-04-13 02:45:26 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
    2010-04-13 02:45:26 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
    2010-04-13 02:45:05 36400 ----a-r- c:\windows\system32\drivers\SymIM.sys
    2010-04-13 02:45:05 26600 ----a-r- c:\windows\system32\drivers\GEARAspiWDM.sys
    2010-04-13 02:44:47 107368 ----a-r- c:\windows\system32\GEARAspi.dll
    2010-03-30 04:46:30 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-03-30 04:45:52 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-03-10 13:18:21 13824 ----a-w- c:\windows\system32\dllcache\ieudinit.exe
    2010-03-10 13:18:20 70656 ----a-w- c:\windows\system32\dllcache\ie4uinit.exe
    2010-03-09 11:09:18 430080 ----a-w- c:\windows\system32\vbscript.dll
    2010-03-09 11:09:18 430080 ----a-w- c:\windows\system32\dllcache\vbscript.dll
    2005-11-04 19:34:42 518 ----a-w- c:\program files\Shortcut to Internet Explorer.lnk
    2008-09-02 04:10:27 32768 -csha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008090220080903\index.dat

    ============= FINISH: 17:52:50.48 ===============
    *On-access scanning enabled* (Updated) {89E83054-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89A657CC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8954BDDC-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89D318D4-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {81636AA4-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {81DBE8BC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8934B824-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89EEFDDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89A9EDDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89E51DDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89CFF98C-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89DB0DDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {81E12B64-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89E2A204-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89B5F76C-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8996F474-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89C5ADDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89CB4D3C-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89939C4C-FFA4-00EF-0D24-347CA8A3377C}
    }
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8955E4AC-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89DE0414-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89E0B40C-FFA4-00EF-0D24-347CA8A3377C}
    (Updated) {81FB09EC-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {89C81054-FFA4-00EF-0D24-347CA8A3377C}
    FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\svchost.exe -k netsvcs
    C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\system32\svchost.exe -k netsvcs
    C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    C:\Program Files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe
    C:\Program Files\Dell Photo AIO Printer 942\dlbubmgr.exe
    C:\Program Files\Dell Photo AIO Printer 942\memcard.exe
    C:\Program Files\Dell Photo AIO Printer 942\dlbubmon.exe
    C:\Documents and Settings\family\Desktop\iexplore.exe
    C:\Documents and Settings\family\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uInternet Connection Wizard,ShellNext = iexplore
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    mWinlogon: Userinit=c:\windows\system32\Userinit.exe
    BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - c:\black iii\orbitdownloader\orbitcth.dll
    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: : {206e52e0-d52e-11d4-ad54-0000e86c26f6} - c:\progra~1\freshd~1\freshd~1\fdcatch.dll
    BHO: Nick Aracde Toolbar: {4e7bd74f-2b8d-469e-9eb4-fe6fa694b13e} - c:\progra~1\nickar~1\NICKAR~1.DLL
    BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360\engine\3.8.0.41\coIEPlg.dll
    BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360\engine\3.8.0.41\IPSBHO.DLL
    BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~4\office12\GRA8E1~1.DLL
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0\bin\ssv.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
    BHO: XBTBPos00 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\progra~1\softom~1\toolba~1\bin\tbcore3U.dll
    TB: {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - No File
    TB: Verizon Broadband Toolbar: {4e7bd74f-2b8d-469e-8cb0-ab60bb9aae22} - c:\progra~1\vol_to~1\VOL_TO~1.DLL
    TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
    TB: StylerToolBar: {d2f8f919-690b-4ea2-9fa7-a203d1e04f75} - c:\program files\styler\tb\StylerTB.dll
    TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360\engine\3.8.0.41\coIEPlg.dll
    TB: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
    TB: {C70E30C7-140A-4166-A2E8-43557E62B41A} - No File
    TB: {724D43A0-0D85-11D4-9908-00400523E39A} - No File
    TB: {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - No File
    TB: {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe "
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe "
    mRun: [Dell Photo AIO Printer 942] "c:\program files\dell photo aio printer 942\dlbubmgr.exe "
    mRun: [DellMCM] "c:\program files\dell photo aio printer 942\memcard.exe "
    dRunOnce: [RunNarrator] Narrator.exe
    IE: &Download by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - c:\black iii\orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office12\EXCEL.EXE/3000
    IE: {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C}
    IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0\bin\ssv.dll
    IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
    DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
    DPF: {01113300-3E00-11D2-8470-0060089874ED} - hxxps://activatemyfios.verizon.net/sdcCommon/download/FIOS/Verizon%20FiOS%20Installer.cab
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader5.cab
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/9/b/d/9bdc68ef-6a9f-4505-8fb8-d0d2d160e512/LegitCheckControl.cab
    DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {3D3DBC64-0D21-4EA4-94EE-86D6D9B31C0C} - hxxp://www.worldwinner.com/games/v45/moneylist/moneylist.cab
    DPF: {42FDC231-A411-45F8-B8B6-3B5026111DA8} - hxxp://www.worldwinner.com/games/v47/solitairerush/solitairerush.cab
    DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab
    DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
    DPF: {58FC4C77-71C2-4972-A8CD-78691AD85158} - hxxp://www.worldwinner.com/games/v63/bjattack/bja.cab
    DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
    DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} - hxxp://verizon.exent.com/vzfamily/classes/ExentCtl.ocx
    DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - hxxp://www.nick.com/common/groove/gx/GrooveAX27.cab
    DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
    DPF: {97438FE9-D361-4279-BA82-98CC0877A717} - hxxp://www.worldwinner.com/games/v57/cubis/cubis.cab
    DPF: {A021A215-6CDC-44B4-8C16-90491CED9605} - hxxp://www.worldwinner.com/games/v59/clue/clue.cab
    DPF: {A52FBD2B-7AB3-4F6B-90E3-91C772C5D00F} - hxxp://www.worldwinner.com/games/v57/wof/wof.cab
    DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} - hxxp://www.worldwinner.com/games/v67/swapit/swapit.cab
    DPF: {B49C4597-8721-4789-9250-315DFBD9F525} - hxxp://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
    DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab
    DPF: {BA94245D-2AA0-4953-9D9F-B0EE4CC02C43} - hxxp://www.worldwinner.com/games/v42/tilecity/tilecity.cab
    DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
    DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} - hxxp://www.worldwinner.com/games/v47/familyfeud/familyfeud.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    Filter: text/html - {2709aaca-98b7-4b11-9a3b-05507d7412ff} -
    Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~4\office12\GR99D3~1.DLL
    Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - c:\program files\norton 360\engine\3.8.0.41\CoIEPlg.dll
    Notify: AtiExtEvent - Ati2evxx.dll
    Notify: igfxcui - igfxsrvc.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
    SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~4\office12\GRA8E1~1.DLL

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\family\applic~1\mozilla\firefox\profiles\0iyqlche.default\
    FF - prefs.js: browser.search.selectedEngine - DAEMON Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.blackle.com/
    FF - component: c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\coffplgn\components\coFFPlgn.dll
    FF - component: c:\documents and settings\family\application data\mozilla\firefox\profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\FFExternalAlert.dll
    FF - component: c:\documents and settings\family\application data\mozilla\firefox\profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\RadioWMPCore.dll
    FF - plugin: c:\documents and settings\all users\application data\nexonus\ngm\npNxGameUS.dll
    FF - plugin: c:\documents and settings\family\application data\move networks\plugins\npqmp071503000010.dll
    FF - plugin: c:\documents and settings\family\application data\mozilla\plugins\npgoogletalk.dll
    FF - plugin: c:\documents and settings\family\local settings\application data\google\update\1.2.183.23\npGoogleOneClick8.dll
    FF - plugin: c:\program files\java\jre1.6.0\bin\npjpi160.dll
    FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
    FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
    FF - plugin: c:\program files\mzilla\plugins\npCouponPrinter.dll
    FF - plugin: c:\program files\mzilla\plugins\npGoogleGadgetPluginFirefoxWin.dll
    FF - plugin: c:\program files\mzilla\plugins\npwachk.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npdsplay.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\opera 10 beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\opera 10 beta\program\plugins\NPOFFICE.DLL
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin2.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin3.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin4.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin5.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin6.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin7.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npqtplugin8.dll
    FF - plugin: c:\program files\opera 10 beta\program\plugins\npwmsdrm.dll
    FF - plugin: c:\program files\quicktime\plugins\npqtplugin8.dll
    FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mzilla\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

    ---- FIREFOX POLICIES ----
    FF - user.js: network.http.max-persistent-connections-per-server - 4
    FF - user.js: content.max.tokenizing.time - 200000
    FF - user.js: content.notify.interval - 100000
    FF - user.js: content.switch.threshold - 650000
    FF - user.js: nglayout.initialpaint.delay - 300
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.homepage.dontask, true);user_pref(yahoo.ytff.general.dontshowhpoffer, true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, falsec:\program files\mzilla\greprefs\all.js - pref( "ui.use_native_colors ", true);
    c:\program files\mzilla\greprefs\all.js - pref( "ui.use_native_popup_windows ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.enable_click_image_resizing ", true);
    c:\program files\mzilla\greprefs\all.js - pref( "accessibility.browsewithcaret_shortcut.enabled ", true);
    c:\program files\mzilla\greprefs\all.js - pref( "javascript.options.mem.high_water_mark ", 32);
    c:\program files\mzilla\greprefs\all.js - pref( "javascript.options.mem.gc_frequency ", 1600);
    c:\program files\mzilla\greprefs\all.js - pref( "network.auth.force-generic-ntlm ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "svg.smil.enabled ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "ui.trackpoint_hack.enabled ", -1);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.debug ", false);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.agedWeight ", 2);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.bucketSize ", 1);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.maxTimeGroupings ", 25);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.timeGroupingSize ", 604800);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.boundaryWeight ", 25);
    c:\program files\mzilla\greprefs\all.js - pref( "browser.formfill.prefixWeight ", 5);
    c:\program files\mzilla\greprefs\all.js - pref( "html5.enable ", false);
    c:\program files\mzilla\greprefs\security-prefs.js - pref( "security.ssl3.rsa_seed_sha ", true);
    c:\program files\mzilla\defaults\pref\firefox-branding.js - pref( "app.update.download.backgroundInterval ", 600);
    c:\program files\mzilla\defaults\pref\firefox-branding.js - pref( "app.update.url.manual ", "http://www.firefox.com ");
    c:\program files\mzilla\defaults\pref\firefox-branding.js - pref( "browser.search.param.yahoo-fr-ja ", "mozff ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name ", "chrome://browser/locale/browser.properties ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description ", "chrome://browser/locale/browser.properties ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add ", "addons.mozilla.org ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "xpinstall.whitelist.add.36 ", "getpersonas.com ");
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "lightweightThemes.update.enabled ", true);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.allTabs.previews ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "plugins.hide_infobar_for_outdated_plugin ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "plugins.update.notifyUser ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "toolbar.customization.usesheet ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.taskbar.previews.enable ", false);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.taskbar.previews.max ", 20);
    c:\program files\mzilla\defaults\pref\firefox.js - pref( "browser.taskbar.previews.cachetime ", 20);

    ============= SERVICES / DRIVERS ===============

    R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0308000.029\SymEFA.sys [2010-4-13 310320]
    R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\n360\0308000.029\BHDrvx86.sys [2010-4-13 259632]
    R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\n360\0308000.029\cchpx86.sys [2010-4-13 482432]
    R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20100518.002\IDSXpx86.sys [2010-5-24 331640]
    R2 N360;Norton 360;c:\program files\norton 360\engine\3.8.0.41\ccSvcHst.exe [2010-4-13 117640]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-5-26 102448]
    R3 JakNDisMP;JakNDisMP;c:\windows\system32\drivers\JakNDis.sys [2009-5-11 21504]
    R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\drivers\ManyCam.sys [2008-1-14 21632]
    R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20100526.006\NAVENG.SYS [2010-5-26 85552]
    R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20100526.006\NAVEX15.SYS [2010-5-26 1347504]
    S2 sbbotdi;sbbotdi; [x]
    S2 Viewpoint Manager Service;Viewpoint Manager Service; "c:\program files\viewpoint\common\viewpointservice.exe" --> c:\program files\viewpoint\common\ViewpointService.exe [?]
    S3 hamachi_oem;PlayLinc Adapter;c:\windows\system32\drivers\gan_adapter.sys [2006-10-19 10664]
    S3 JakNDis;Jaksta Service;c:\windows\system32\drivers\JakNDis.sys [2009-5-11 21504]
    S3 NTProcDrv;Process creation detector for NT.; [x]
    S3 PortTalk;PortTalk;c:\windows\system32\drivers\PortTalk.sys [2007-7-4 3567]
    S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\windows\system32\drivers\scsiprnt.sys [2004-11-30 11648]
    S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [2007-6-3 223128]

    =============== Created Last 30 ================

    2010-05-15 04:38:23 0 d-----w- c:\program files\common files\Software Update Utility
    2010-05-13 11:35:40 31363 ---ha-w- c:\windows\system32\dlbuma.GID
    2010-05-13 10:57:30 0 d-----w- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}
    2010-05-13 10:57:30 0 d-----w- C:\Temp
    2010-05-03 20:03:47 0 d-----w- c:\program files\ooVoo

    ==================== Find3M ====================

    2010-05-23 18:12:50 140824 -c-ha-w- c:\windows\system32\mlfcache.dat
    2010-04-13 02:45:26 806 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
    2010-04-13 02:45:26 7456 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
    2010-04-13 02:45:26 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
    2010-04-13 02:45:26 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
    2010-04-13 02:45:05 36400 ----a-r- c:\windows\system32\drivers\SymIM.sys
    2010-04-13 02:45:05 26600 ----a-r- c:\windows\system32\drivers\GEARAspiWDM.sys
    2010-04-13 02:44:47 107368 ----a-r- c:\windows\system32\GEARAspi.dll
    2010-03-30 04:46:30 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-03-30 04:45:52 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-03-10 13:18:21 13824 ----a-w- c:\windows\system32\dllcache\ieudinit.exe
    2010-03-10 13:18:20 70656 ----a-w- c:\windows\system32\dllcache\ie4uinit.exe
    2010-03-09 11:09:18 430080 ----a-w- c:\windows\system32\vbscript.dll
    2010-03-09 11:09:18 430080 ----a-w- c:\windows\system32\dllcache\vbscript.dll
    2005-11-04 19:34:42 518 ----a-w- c:\program files\Shortcut to Internet Explorer.lnk
    2008-09-02 04:10:27 32768 -csha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008090220080903\index.dat

    ============= FINISH: 17:52:50.48 ===============
     
  6. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_10-03-17.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume2
    Install Date: 2004-11-22 8:27:35 PM
    System Uptime: 2010-05-27 2:39:08 PM (3 hours ago)

    Motherboard: Dell Inc. | | 0M3918
    Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz

    ==== Disk Partitions =========================

    A: is Removable
    C: is FIXED (NTFS) - 71 GiB total, 1.756 GiB free.
    D: is CDROM ()
    E: is Removable
    G: is Removable

    ==== Disabled Device Manager Items =============

    Class GUID: {4658EE7E-F050-11D1-B6BD-00C04FA372A7}
    Description: Generic Printer
    Device ID: USBPRINT\DELLDELL_PHOTO_AIO_942\7&44CC761&0&USB001
    Manufacturer: Printer Vendor
    Name: Generic Printer
    PNP Device ID: USBPRINT\DELLDELL_PHOTO_AIO_942\7&44CC761&0&USB001
    Service: scsiprnt

    Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    Description: Unimodem Half-Duplex Audio Device
    Device ID: MODEMWAVE\0\{214BC608-66E4-48C3-9575-5F2B5E90A128}
    Manufacturer: Microsoft
    Name: Unimodem Half-Duplex Audio Device
    PNP Device ID: MODEMWAVE\0\{214BC608-66E4-48C3-9575-5F2B5E90A128}
    Service: MODEMCSA

    ==== System Restore Points ===================

    RP1726: 2010-04-20 5:48:40 PM - System Checkpoint
    RP1727: 2010-04-30 10:00:41 AM - System Checkpoint
    RP1728: 2010-05-03 2:00:28 PM - System Checkpoint
    RP1729: 2010-05-03 4:03:45 PM - Installed ooVoo
    RP1730: 2010-05-04 4:19:46 PM - Removed Adobe Reader 9.2.
    RP1731: 2010-05-04 4:21:27 PM - Installed Adobe Reader 9.3.
    RP1732: 2010-05-05 4:33:46 PM - System Checkpoint
    RP1733: 2010-05-07 11:31:35 AM - System Checkpoint
    RP1734: 2010-05-08 3:47:07 PM - System Checkpoint
    RP1735: 2010-05-11 1:24:08 PM - System Checkpoint
    RP1736: 2010-05-12 3:00:54 AM - Software Distribution Service 3.0
    RP1737: 2010-05-13 1:09:31 PM - System Checkpoint
    RP1738: 2010-05-15 4:24:39 PM - System Checkpoint
    RP1739: 2010-05-19 4:52:07 AM - System Checkpoint
    RP1740: 2010-05-20 10:55:29 AM - System Checkpoint
    RP1741: 2010-05-22 9:33:41 AM - System Checkpoint
    RP1742: 2010-05-24 1:44:32 PM - System Checkpoint
    RP1743: 2010-05-25 3:35:52 PM - System Checkpoint
    RP1744: 2010-05-27 12:00:30 AM - Restore Operation
    RP1745: 2010-05-27 3:56:42 AM - Restore Operation

    ==== Installed Programs ======================

    7-Zip 4.65
    Acrobat.com
    Ad Muncher
    Adobe AIR
    Adobe Anchor Service CS3
    Adobe Asset Services CS3
    Adobe Bridge CS3
    Adobe Bridge Start Meeting
    Adobe Camera Raw 4.0
    Adobe CMaps CS4
    Adobe Color - Photoshop Specific
    Adobe Color Common Settings
    Adobe Color EU Extra Settings
    Adobe Color JA Extra Settings
    Adobe Color NA Recommended Settings
    Adobe Default Language CS4
    Adobe Device Central CS3
    Adobe Download Manager
    Adobe Dreamweaver CS3
    Adobe ExtendScript Toolkit 2
    Adobe Extension Manager CS3
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Fonts All
    Adobe Help Viewer CS3
    Adobe Linguistics CS3
    Adobe PDF Library Files CS4
    Adobe Photoshop CS3
    Adobe Reader 9.3.2
    Adobe Setup
    Adobe Shockwave Player 11.5
    Adobe Stock Photos CS3
    Adobe Type Support CS4
    Adobe Update Manager CS3
    Adobe Version Cue CS3 Client
    Adobe WinSoft Linguistics Plugin
    Adobe XMP Panels CS3
    AIM 7
    Any Video Converter 3.0.4
    AOL Uninstaller (Choose which Products to Remove)
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Ask Toolbar
    ATI - Software Uninstall Utility
    ATI AVIVO Codecs
    ATI Catalyst Control Center
    ATI Display Driver
    Audacity 1.2.6
    Authentium AntiVirus SDK - 2
    Bonjour
    Call of Duty(R) 4 - Modern Warfare(TM) 1.1 Patch
    Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch
    Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch
    Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch
    Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
    Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
    Camtasia Studio 6
    Catalyst Control Center - Branding
    Catalyst Control Center Core Implementation
    Catalyst Control Center Graphics Full Existing
    Catalyst Control Center Graphics Full New
    Catalyst Control Center Graphics Light
    Catalyst Control Center Graphics Previews Common
    Catalyst Control Center HydraVision Full
    ccc-core-preinstall
    ccc-core-static
    ccc-utility
    CCC Help English
    Conexant D850 56K V.9x DFVc Modem
    Coupon Printer for Windows
    Critical Update for Windows Media Player 11 (KB959772)
    Default
    Dell Digital Jukebox Driver
    Dell Driver Reset Tool
    Dell Photo AIO Printer 942
    Dell ResourceCD
    Dell Support 5.0.0 (630)
    Digital Line Detect
    DIGOpt
    DIGReqEx
    Download Updater (AOL LLC)
    EarthLink MDAC
    EarthLink TAR
    EasyCleaner
    ebgcInfra
    ebgcRes
    ebgcSDK
    Foxit Reader
    Garmin Communicator Plugin
    Garmin USB Drivers
    GIMP 2.4.5
    Google Talk (remove only)
    Google Talk Plugin
    GTactix
    HijackThis 2.0.2
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB970653-v3)
    Hotfix for Windows XP (KB976098-v2)
    Hotfix for Windows XP (KB979306)
    Hotfix for Windows XP (KB981793)
    Intel RSX 3D
    Intel(R) Graphics Media Accelerator Driver
    Intel(R) PRO Network Adapters and Drivers
    Intel(R) PROSet for Wired Connections
    Internet Explorer Default Page
    iTunes
    Java(TM) SE Runtime Environment 6
    K-Lite Mega Codec Pack 4.8.5
    Macromedia Extension Manager
    Macromedia Flash 8 Video Encoder
    Malwarebytes' Anti-Malware
    Managed DirectX (0901)
    ManyCam 2.4 (remove only)
    McAfee Shredder
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB953297)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Choice Guard
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2007 Service Pack 2 (SP2)
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Enterprise 2007
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Groove MUI (English) 2007
    Microsoft Office Groove Setup Metadata MUI (English) 2007
    Microsoft Office InfoPath MUI (English) 2007
    Microsoft Office OneNote MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Word MUI (English) 2007
    Microsoft Plus! Digital Media Edition Installer
    Microsoft Plus! Photo Story 2 LE
    Microsoft Software Update for Web Folders (English) 12
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft VC9 runtime libraries
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft XML Parser
    mIRC
    Mouse Suite
    Move Media Player
    Mozilla ActiveX Control v1.7.12
    Mozilla Firefox (3.6)
    MSN
    MSN Encarta Plus Support Files
    MSN Music Assistant
    MSSoap
    MSVCRT
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 4.0 SP2 Parser and SDK
    MSXML4 Parser
    NetWaiting
    Norton 360
    Nvu 1.0
    Octoshape add-in for Adobe Flash Player
    ooVoo
    Opera 10.10
    Orbit Downloader
    PDF Settings
    POM for Windows (Version 3)
    PPSDKRedistributables
    QQ Hearts
    QQ Puzzle Dasher
    QuickTime
    Radialpoint Security Services
    Recover Files 2.1
    Recuva (remove only)
    Security Update for 2007 Microsoft Office System (KB951550)
    Security Update for 2007 Microsoft Office System (KB951944)
    Security Update for 2007 Microsoft Office System (KB960003)
    Security Update for CAPICOM (KB931906)
    Security Update for Microsoft Office Excel 2007 (KB959997)
    Security Update for Microsoft Office OneNote 2007 (KB950130)
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)
    Security Update for Microsoft Office Publisher 2007 (KB950114)
    Security Update for Microsoft Office system 2007 (KB954326)
    Security Update for Microsoft Office system 2007 (KB956828)
    Security Update for Microsoft Office Word 2007 (KB956358)
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB953838)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Internet Explorer 7 (KB963027)
    Security Update for Windows Internet Explorer 7 (KB969897)
    Security Update for Windows Internet Explorer 7 (KB972260)
    Security Update for Windows Internet Explorer 7 (KB974455)
    Security Update for Windows Internet Explorer 7 (KB976325)
    Security Update for Windows Internet Explorer 7 (KB978207)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951376)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961371)
    Security Update for Windows XP (KB961373)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969898)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971486)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB971961)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973346)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973525)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977165)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978251)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB981349)
    Segoe UI
    Skins
    Skype Toolbars
    Skype™ 4.2
    SopCast 3.2.4
    Streaming Media Recorder
    Styler
    System Requirements Lab
    Tweak UI
    Ulead GIF Animator
    Universal Document Converter (Demo)
    Unlocker 1.8.8
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Microsoft Office Outlook 2007 (KB952142)
    Update for Office 2007 (KB932080)
    Update for Office 2007 (KB934391)
    Update for Outlook 2007 Junk Email Filter (kb981726)
    Update for Windows Internet Explorer 7 (KB976749)
    Update for Windows Internet Explorer 7 (KB980182)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB961503)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    VC 9.0 Runtime
    VDownloader 0.74
    Verizon Broadband Toolbar
    Verizon Online Help and Support
    Verizon PC Security Checkup
    Video Thumbnails Maker by Scorp (remove only)
    Video to iPod MP4 PSP 3GP Converter
    VideoAvatar
    Viewpoint Media Player
    Viewpoint Toolbar
    Vista Anthracite Pack - UltraLite 1.31
    VLC media player 0.9.8a
    WebFldrs XP
    Winamp
    Winamp Application Detect
    Windows Defender Signatures
    Windows Genuine Advantage Notifications (KB905474)
    Windows Imaging Component
    Windows Internet Explorer 7
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Messenger
    Windows Live Sign-in Assistant
    Windows Live Upload Tool
    Windows Media Format 11 runtime
    Windows Media Player 10
    Windows Media Player 11
    Windows Resource Kit Tools - SubInAcl.exe
    Windows XP Service Pack 3
    WinRAR archiver
    WinZip 11.2
    WordPerfect Office 12
    XML Paper Specification Shared Components Pack 1.0
    Yahoo! Messenger
    Yahoo! Software Update
    Zilla Data Nuker 2.0.0.0

    ==== Event Viewer Messages From Past Week ========

    2010-05-27 3:46:21 AM, error: Service Control Manager [7034] - The DNS Client service terminated unexpectedly. It has done this 1 time(s).
    2010-05-27 3:46:17 AM, error: Service Control Manager [7031] - The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
    2010-05-27 12:09:22 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the System Restore Service service to connect.
    2010-05-27 12:09:22 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Secondary Logon service to connect.
    2010-05-27 12:09:22 AM, error: Service Control Manager [7000] - The System Restore Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-27 12:06:19 AM, error: Service Control Manager [7031] - The Windows Driver Foundation - User-mode Driver Framework service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service.
    2010-05-26 11:43:47 PM, error: Service Control Manager [7034] - The IMAPI CD-Burning COM Service service terminated unexpectedly. It has done this 1 time(s).
    2010-05-26 11:43:02 PM, error: Service Control Manager [7022] - The Windows Image Acquisition (WIA) service hung on starting.
    2010-05-26 11:41:44 PM, error: Ftdisk [49] - Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory.
    2010-05-26 11:41:44 PM, error: Ftdisk [45] - The system could not sucessfully load the crash dump driver.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Workstation service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Wireless Zero Configuration service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Windows Audio service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Themes service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Task Scheduler service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Shell Hardware Detection service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Server service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Network Connections service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Logical Disk Manager service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Help and Support service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Error Reporting Service service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the DHCP Client service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the CryptSvc service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the COM+ Event System service to connect.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7001] - The Windows Firewall/Internet Connection Sharing (ICS) service depends on the Network Connections service which failed to start because of the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7001] - The System Event Notification service depends on the COM+ Event System service which failed to start because of the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7001] - The Computer Browser service depends on the Workstation service which failed to start because of the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Workstation service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Wireless Zero Configuration service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Windows Audio service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Themes service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Task Scheduler service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Server service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Network Connections service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Logical Disk Manager service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The Help and Support service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The DHCP Client service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The CryptSvc service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:41:38 PM, error: Service Control Manager [7000] - The COM+ Event System service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    2010-05-26 11:33:34 PM, error: Service Control Manager [7034] - The dlbu_device service terminated unexpectedly. It has done this 1 time(s).
    2010-05-25 5:54:11 AM, error: Print [6161] - The document http://www.msn.com/ owned by Family failed to print on printer Dell Photo AIO Printer 942. Data type: LEMF. Size of the spool file in bytes: 1624372. Number of bytes printed: 1624372. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\FAM. Win32 error code returned by the print processor: 535 (0x217).
    2010-05-23 6:17:03 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
    2010-05-23 2:11:46 PM, error: DCOM [10000] - Unable to start a DCOM Server: {91A9E6A9-3935-4A37-AFBA-F0904B166364}. The error: "%2" Happened while starting this command: C:\WINDOWS\system32\DllHost.exe /Processid:{16D99191-6280-4B33-A2F5-04805A0FC582}
    2010-05-23 2:11:20 PM, error: DCOM [10000] - Unable to start a DCOM Server: {BB46F03E-7CD2-489F-8F95-BB950F395FDB}. The error: "%2" Happened while starting this command: C:\WINDOWS\system32\DllHost.exe /Processid:{16D99191-6280-4B33-A2F5-04805A0FC582}
    2010-05-23 2:08:10 AM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments " " in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56}
    2010-05-23 11:20:51 AM, error: Service Control Manager [7000] - The X4HSX32 service failed to start due to the following error: The system cannot find the path specified.
    2010-05-23 11:20:51 AM, error: Service Control Manager [7000] - The Viewpoint Manager Service service failed to start due to the following error: The system cannot find the path specified.
    2010-05-23 11:20:28 AM, error: Dhcp [1002] - The IP address lease 192.168.0.2 for the Network Card with network address 0011115E3115 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
    2010-05-22 8:45:39 AM, error: Print [6161] - The document https://lb21.resources.hewitt.com/ybr5dgp3cl2/ybr5dgp3cl2r4a/Dc owned by Family failed to print on printer Dell Photo AIO Printer 942. Data type: LEMF. Size of the spool file in bytes: 1815050. Number of bytes printed: 1815050. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\FAM. Win32 error code returned by the print processor: 126 (0x7e).
    2010-05-22 8:44:35 AM, error: Print [6161] - The document https://lb21.resources.hewitt.com/ybr5dgp3cl2/ybr5dgp3cl2r4a/Hm owned by Family failed to print on printer Dell Photo AIO Printer 942. Data type: LEMF. Size of the spool file in bytes: 1106749. Number of bytes printed: 1106749. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\FAM. Win32 error code returned by the print processor: 126 (0x7e).
    2010-05-22 3:15:06 PM, error: Service Control Manager [7034] - The LexBce Server service terminated unexpectedly. It has done this 1 time(s).
    2010-05-22 3:15:04 PM, error: Service Control Manager [7034] - The Machine Debug Manager service terminated unexpectedly. It has done this 1 time(s).
    2010-05-22 3:14:53 PM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
    2010-05-22 3:14:47 PM, error: Service Control Manager [7034] - The Yahoo! Updater service terminated unexpectedly. It has done this 1 time(s).
    2010-05-22 10:54:21 PM, error: Print [6161] - The document http://maps.google.com/maps?f=q&source=s_q&hl=en&geocode=&q=wat owned by Family failed to print on printer Dell Photo AIO Printer 942. Data type: LEMF. Size of the spool file in bytes: 633827. Number of bytes printed: 633827. Total number of pages in the document: 1. Number of pages printed: 0. Client machine: \\FAM. Win32 error code returned by the print processor: 535 (0x217).
    2010-05-21 7:01:24 AM, error: Print [6161] - The document Microsoft Word - Document1 owned by Family failed to print on printer Dell Photo AIO Printer 942. Data type: LEMF. Size of the spool file in bytes: 983220. Number of bytes printed: 983220. Total number of pages in the document: 2. Number of pages printed: 0. Client machine: \\FAM. Win32 error code returned by the print processor: 535 (0x217).
    2010-05-21 3:14:12 AM, error: Service Control Manager [7034] - The Machine Debug Manager service terminated unexpectedly. It has done this 3 time(s).
    2010-05-20 9:08:56 PM, error: Service Control Manager [7034] - The Machine Debug Manager service terminated unexpectedly. It has done this 2 time(s).
    2010-05-20 1:42:49 PM, error: Service Control Manager [7034] - The dvpapi service terminated unexpectedly. It has done this 1 time(s).
     
  7. 2010/05/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt" .
    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
  8. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    ComboFix 10-05-27.01 - Family 2010-05-27 21:51:53.6.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1534.1067 [GMT -4:00]
    Running from: c:\documents and settings\family\Desktop\ComboFix.exe
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated) {815F7464-FFA4-00DE-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Updated) {81704054-FFA4-00DE-0D24-347CA8A3377C}

    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A24A9D4-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A2624B4-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {BADB0D00-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {FFFFFFFF-FFA4-00EF-0D24-347CA8A3377C}
    AV: Norton 360 *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\family\Application Data\kctmon
    c:\documents and settings\family\Application Data\kctmon\Winw35.ini
    c:\documents and settings\family\slsk157test5.exe
    c:\windows\dbxesellerate.exe

    Infected copy of c:\windows\system32\drivers\ipsec.sys was found and disinfected
    Restored copy from - Kitty had a snack :p
    .
    ((((((((((((((((((((((((( Files Created from 2010-04-28 to 2010-05-28 )))))))))))))))))))))))))))))))
    .

    2010-05-28 02:00 . 2010-05-28 02:00 -------- d-----w- c:\documents and settings\family\Local Settings\Application Data\Symantec
    2010-05-15 04:38 . 2010-05-15 04:38 -------- d-----w- c:\program files\Common Files\Software Update Utility
    2010-05-13 10:57 . 2010-05-13 10:57 -------- d-----w- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}
    2010-05-13 10:57 . 2010-05-13 10:57 -------- d-----w- C:\Temp
    2010-05-07 16:55 . 2010-05-07 16:55 255472 ----a-w- c:\documents and settings\family\Application Data\Mozilla\plugins\npgoogletalk.dll
    2010-05-04 20:21 . 2010-05-04 20:23 -------- d-----w- c:\program files\Common Files\Adobe
    2010-05-03 20:03 . 2010-05-03 20:03 -------- d-----w- c:\program files\ooVoo

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-05-26 21:02 . 2007-02-13 23:58 -------- d-----w- c:\documents and settings\family\Application Data\Skype
    2010-05-26 08:14 . 2008-05-21 17:54 -------- d-----w- c:\program files\MZILLA
    2010-05-26 06:38 . 2008-04-12 18:13 -------- d-----w- c:\documents and settings\family\Application Data\Orbit
    2010-05-26 04:06 . 2009-12-20 00:41 -------- d-----w- c:\documents and settings\family\Application Data\skypePM
    2010-05-25 22:41 . 2009-10-15 07:40 -------- d-----r- c:\program files\Skype
    2010-05-23 18:12 . 2007-06-25 18:24 140824 -c-ha-w- c:\windows\system32\mlfcache.dat
    2010-05-15 06:25 . 2009-06-27 01:09 -------- d-----w- c:\program files\ManyCam 2.4
    2010-05-13 00:30 . 2004-11-30 00:43 -------- d-----w- c:\program files\Dell Photo AIO Printer 942
    2010-05-12 07:02 . 2007-08-11 15:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2010-05-09 22:44 . 2008-03-23 23:16 664 ----a-w- c:\windows\system32\d3d9caps.dat
    2010-05-04 20:16 . 2009-09-20 10:24 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
    2010-05-03 20:03 . 2004-11-18 04:29 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-04-23 11:35 . 2009-10-06 02:57 -------- d-----w- c:\program files\AIM7
    2010-04-23 10:55 . 2009-05-12 06:19 -------- d-----w- c:\documents and settings\family\Application Data\gtk-2.0
    2010-04-13 20:21 . 2010-04-13 20:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
    2010-04-13 03:36 . 2008-12-11 03:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Rosetta Stone
    2010-04-13 03:30 . 2009-07-27 05:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-04-13 02:53 . 2010-04-13 02:45 -------- d-----w- c:\program files\Common Files\Symantec Shared
    2010-04-13 02:45 . 2010-04-13 02:45 -------- d-----w- c:\program files\Symantec
    2010-04-13 02:45 . 2010-04-13 02:45 806 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
    2010-04-13 02:45 . 2010-04-13 02:45 7456 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
    2010-04-13 02:45 . 2010-04-13 02:45 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
    2010-04-13 02:45 . 2010-04-13 02:45 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
    2010-04-13 02:45 . 2010-04-13 08:04 217136 ----a-w- c:\windows\system32\drivers\symtdi.sys
    2010-04-13 02:45 . 2010-04-13 08:04 43696 ----a-w- c:\windows\system32\drivers\srtspx.sys
    2010-04-13 02:45 . 2010-04-13 08:04 310320 ----a-w- c:\windows\system32\drivers\SymEFA.sys
    2010-04-13 02:45 . 2010-04-13 02:45 36400 ----a-r- c:\windows\system32\drivers\SymIM.sys
    2010-04-13 02:45 . 2008-01-29 16:01 26600 ----a-r- c:\windows\system32\drivers\GEARAspiWDM.sys
    2010-04-13 02:45 . 2010-04-13 08:04 482432 ----a-w- c:\windows\system32\drivers\cchpx86.sys
    2010-04-13 02:45 . 2010-04-13 08:04 259632 ----a-w- c:\windows\system32\drivers\BHDrvx86.sys
    2010-04-13 02:44 . 2008-01-29 16:02 107368 ----a-r- c:\windows\system32\GEARAspi.dll
    2010-04-13 02:44 . 2010-04-13 02:44 -------- d-----w- c:\program files\Norton 360
    2010-04-13 02:44 . 2010-04-13 02:44 -------- d-----w- c:\program files\Windows Sidebar
    2010-04-13 02:44 . 2010-04-13 02:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
    2010-04-13 02:41 . 2010-04-13 02:35 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
    2010-04-13 02:35 . 2010-04-13 02:35 -------- d-----w- c:\program files\NortonInstaller
    2010-04-12 14:33 . 2009-11-18 20:22 33872743 ----a-w- c:\windows\Internet Logs\tvDebug.Zip
    2010-04-05 05:53 . 2009-06-08 23:21 -------- d-----w- c:\program files\Opera 10 Beta
    2010-04-04 23:30 . 2005-06-15 23:08 -------- d-----w- c:\documents and settings\family\Application Data\Apple Computer
    2010-03-30 21:23 . 2010-03-30 21:23 -------- d-----w- c:\documents and settings\family\Application Data\Foxit Software
    2010-03-30 04:46 . 2009-07-27 05:45 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-03-30 04:45 . 2009-07-27 05:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-03-29 10:37 . 2010-03-29 10:37 319488 ----a-w- c:\documents and settings\family\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe
    2010-03-11 12:38 . 2004-08-04 11:00 832512 ----a-w- c:\windows\system32\wininet.dll
    2010-03-11 12:38 . 2009-08-29 07:36 78336 ----a-w- c:\windows\system32\ieencode.dll
    2010-03-11 12:38 . 2004-08-04 11:00 17408 ----a-w- c:\windows\system32\corpol.dll
    2010-03-09 11:09 . 2004-08-04 11:00 430080 ----a-w- c:\windows\system32\vbscript.dll
    2005-11-04 19:34 . 2005-11-04 19:34 518 ----a-w- c:\program files\Shortcut to Internet Explorer.lnk
    2008-04-07 06:59 . 2008-05-21 17:52 67696 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
    2008-04-07 06:59 . 2008-05-21 17:52 54376 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
    2008-04-07 06:59 . 2008-05-21 17:52 34952 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
    2008-04-07 06:59 . 2008-05-21 17:52 46720 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
    2008-04-07 06:59 . 2008-05-21 17:52 172144 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-11-18_01.16.27 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-07-12 01:54 . 2009-07-12 01:54 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
    - 2006-12-02 04:08 . 2006-12-02 04:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
    + 2009-07-12 01:32 . 2009-07-12 01:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
    - 2006-12-02 04:26 . 2006-12-02 04:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
    - 2006-12-02 04:25 . 2006-12-02 04:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
    + 2009-07-12 06:07 . 2009-07-12 06:07 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
    + 2009-07-12 06:19 . 2009-07-12 06:19 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
    - 2006-12-02 02:56 . 2006-12-02 02:56 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
    + 2010-05-28 01:50 . 2010-05-28 01:50 16384 c:\windows\temp\Perflib_Perfdata_204.dat
    + 2007-01-21 23:35 . 2008-04-26 20:14 42672 c:\windows\SYSTEM32\wbsys.dll
    + 2004-05-20 07:00 . 2009-04-28 20:20 96752 c:\windows\SYSTEM32\VXBLOCK.dll
    - 2009-05-17 00:26 . 2008-04-14 00:12 53760 c:\windows\SYSTEM32\vfwwdm32.dll
    + 2009-05-17 00:26 . 2008-04-14 01:12 53760 c:\windows\SYSTEM32\vfwwdm32.dll
    + 2006-07-24 15:50 . 2006-07-24 15:50 47920 c:\windows\SYSTEM32\VBAME.DLL
    + 2010-01-24 18:56 . 2009-09-04 20:09 34680 c:\windows\SYSTEM32\udcpm.dll
    - 2007-01-29 08:58 . 2009-07-14 11:03 46080 c:\windows\SYSTEM32\tzchange.exe
    + 2007-01-29 08:58 . 2010-04-21 13:28 46080 c:\windows\SYSTEM32\tzchange.exe
    + 2004-08-04 11:00 . 2009-10-21 05:38 75776 c:\windows\SYSTEM32\strmfilt.dll
    - 2004-08-04 11:00 . 2008-04-14 00:12 75776 c:\windows\SYSTEM32\strmfilt.dll
    + 2009-12-08 18:46 . 1998-05-06 20:59 72192 c:\windows\SYSTEM32\ssprn32.dll
    + 2009-12-08 18:46 . 1998-10-26 17:07 72192 c:\windows\SYSTEM32\SSMEDT32.DLL
    + 2010-01-24 18:56 . 2010-01-24 18:56 96768 c:\windows\SYSTEM32\SPOOL\DRIVERS\x64\3\MemHandler.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 96768 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\MemHandler.dll
    + 2005-05-04 15:30 . 2010-05-27 07:53 12004 c:\windows\SYSTEM32\Restore\rstrlog.dat
    + 2004-08-04 11:00 . 2009-10-12 13:38 79872 c:\windows\SYSTEM32\raschap.dll
    - 2004-08-04 11:00 . 2008-04-14 00:12 79872 c:\windows\SYSTEM32\raschap.dll
    + 2006-01-17 00:31 . 2009-04-28 20:20 66032 c:\windows\SYSTEM32\pxinsa64.exe
    + 2006-01-17 00:31 . 2009-04-28 20:20 72176 c:\windows\SYSTEM32\pxhpinst.exe
    + 2006-01-17 00:31 . 2009-04-28 20:20 66544 c:\windows\SYSTEM32\pxcpya64.exe
    + 2004-08-04 11:00 . 2010-03-11 12:38 44544 c:\windows\SYSTEM32\pngfilt.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 44544 c:\windows\SYSTEM32\pngfilt.dll
    + 2004-11-18 04:21 . 2010-03-14 15:41 71732 c:\windows\SYSTEM32\PERFC009.DAT
    - 2004-11-18 04:21 . 2009-11-01 19:16 71732 c:\windows\SYSTEM32\PERFC009.DAT
    + 2004-08-04 11:00 . 2009-11-27 17:11 17920 c:\windows\SYSTEM32\msyuv.dll
    + 2004-08-04 11:00 . 2009-11-27 16:07 28672 c:\windows\SYSTEM32\msvidc32.dll
    - 2004-08-04 11:00 . 2008-04-14 00:12 11264 c:\windows\SYSTEM32\msrle32.dll
    + 2004-08-04 11:00 . 2009-11-27 16:07 11264 c:\windows\SYSTEM32\msrle32.dll
    - 2007-08-13 23:54 . 2009-08-29 07:36 52224 c:\windows\SYSTEM32\msfeedsbs.dll
    + 2007-08-13 23:54 . 2010-03-11 12:38 52224 c:\windows\SYSTEM32\msfeedsbs.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 27648 c:\windows\SYSTEM32\jsproxy.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 27648 c:\windows\SYSTEM32\jsproxy.dll
    + 2004-08-04 11:00 . 2009-11-27 16:07 48128 c:\windows\SYSTEM32\iyuv_32.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 44544 c:\windows\SYSTEM32\iernonce.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 44544 c:\windows\SYSTEM32\iernonce.dll
    + 2004-08-04 11:00 . 2010-03-10 13:18 70656 c:\windows\SYSTEM32\ie4uinit.exe
    - 2004-08-04 11:00 . 2009-08-28 10:28 70656 c:\windows\SYSTEM32\ie4uinit.exe
    + 2007-08-13 23:36 . 2010-03-11 12:38 63488 c:\windows\SYSTEM32\icardie.dll
    - 2007-08-13 23:36 . 2009-08-29 07:36 63488 c:\windows\SYSTEM32\icardie.dll
    + 2004-08-04 11:00 . 2009-10-21 05:38 25088 c:\windows\SYSTEM32\httpapi.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 72192 c:\windows\SYSTEM32\fxscom.dll
    - 2004-08-04 11:00 . 2009-06-16 14:36 81920 c:\windows\SYSTEM32\fontsub.dll
    + 2004-08-04 11:00 . 2009-10-15 16:28 81920 c:\windows\SYSTEM32\fontsub.dll
    + 2006-10-26 19:10 . 2006-10-26 19:10 33088 c:\windows\SYSTEM32\FM20ENU.DLL
    + 2010-03-20 11:34 . 2009-08-28 23:42 40448 c:\windows\SYSTEM32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaapl.sys
    + 2010-03-20 11:46 . 2010-04-13 02:45 26600 c:\windows\SYSTEM32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
    + 2009-07-10 19:21 . 2009-06-05 15:42 39424 c:\windows\SYSTEM32\DRIVERS\usbaapl.sys
    + 1980-01-01 06:00 . 2008-04-13 19:45 49408 c:\windows\SYSTEM32\DRIVERS\stream.sys
    - 1980-01-01 06:00 . 2008-04-13 18:45 49408 c:\windows\SYSTEM32\DRIVERS\stream.sys
    + 2004-08-02 08:03 . 2009-04-28 20:20 44944 c:\windows\SYSTEM32\DRIVERS\pxhelp20.sys
    + 2010-04-13 08:04 . 2010-04-13 02:45 48688 c:\windows\SYSTEM32\DRIVERS\N360\0308000.029\symndisv.sys
    + 2010-04-13 08:04 . 2010-04-13 02:45 36400 c:\windows\SYSTEM32\DRIVERS\N360\0308000.029\symndis.sys
    + 2010-04-13 08:04 . 2010-04-13 02:45 33072 c:\windows\SYSTEM32\DRIVERS\N360\0308000.029\symids.sys
    + 2010-04-13 08:04 . 2010-04-13 02:45 89904 c:\windows\SYSTEM32\DRIVERS\N360\0308000.029\symfw.sys
    + 2009-05-11 18:53 . 2009-05-11 18:53 21504 c:\windows\SYSTEM32\DRIVERS\JakNDis.sys
    + 2004-08-04 11:00 . 2008-04-14 00:12 11776 c:\windows\SYSTEM32\DLLCACHE\xolehlp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 50176 c:\windows\SYSTEM32\DLLCACHE\xmlprovi.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 30720 c:\windows\SYSTEM32\DLLCACHE\xcopy.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 91648 c:\windows\SYSTEM32\DLLCACHE\xactsrv.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 32256 c:\windows\SYSTEM32\DLLCACHE\wupdmgr.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 41984 c:\windows\SYSTEM32\DLLCACHE\wsnmp32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 11264 c:\windows\SYSTEM32\DLLCACHE\wshrm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 14336 c:\windows\SYSTEM32\DLLCACHE\wship6.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 36864 c:\windows\SYSTEM32\DLLCACHE\wshcon.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 13824 c:\windows\SYSTEM32\DLLCACHE\wscntfy.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 11264 c:\windows\SYSTEM32\DLLCACHE\wpnpinst.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 32256 c:\windows\SYSTEM32\DLLCACHE\wpabaln.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 13824 c:\windows\SYSTEM32\DLLCACHE\wowfaxui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 10368 c:\windows\SYSTEM32\DLLCACHE\wowexec.exe
    + 2004-08-04 11:00 . 2005-01-28 17:44 20480 c:\windows\SYSTEM32\DLLCACHE\wmpui.dll
    + 2004-08-04 11:00 . 2005-01-28 17:44 20480 c:\windows\SYSTEM32\DLLCACHE\wmpcore.dll
    + 2004-08-04 11:00 . 2005-01-28 17:44 20480 c:\windows\SYSTEM32\DLLCACHE\wmpcd.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 52224 c:\windows\SYSTEM32\DLLCACHE\wmitimep.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 55808 c:\windows\SYSTEM32\DLLCACHE\wmiscmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 41472 c:\windows\SYSTEM32\DLLCACHE\wmipsess.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 18944 c:\windows\SYSTEM32\DLLCACHE\wmiprop.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 62464 c:\windows\SYSTEM32\DLLCACHE\wmipjobj.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 61952 c:\windows\SYSTEM32\DLLCACHE\wmipiprt.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 61440 c:\windows\SYSTEM32\DLLCACHE\wmimsg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 60928 c:\windows\SYSTEM32\DLLCACHE\wmicookr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 88576 c:\windows\SYSTEM32\DLLCACHE\wmiaprpl.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 51200 c:\windows\SYSTEM32\DLLCACHE\wmerrenu.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 33792 c:\windows\SYSTEM32\DLLCACHE\wmdmlog.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 25088 c:\windows\SYSTEM32\DLLCACHE\wisc10.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 18944 c:\windows\SYSTEM32\DLLCACHE\winstrm.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 11776 c:\windows\SYSTEM32\DLLCACHE\winmsd.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 16384 c:\windows\SYSTEM32\DLLCACHE\winmgmtr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 13312 c:\windows\SYSTEM32\DLLCACHE\winmgmt.exe
    + 2004-11-24 04:35 . 2004-08-04 11:00 35328 c:\windows\SYSTEM32\DLLCACHE\winchat.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 13600 c:\windows\SYSTEM32\DLLCACHE\wfwnet.drv
    + 2004-08-04 11:00 . 2008-04-14 00:12 65024 c:\windows\SYSTEM32\DLLCACHE\wextract.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 40448 c:\windows\SYSTEM32\DLLCACHE\webhits.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 43008 c:\windows\SYSTEM32\DLLCACHE\wbemperf.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\wbemads.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\wb32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 30208 c:\windows\SYSTEM32\DLLCACHE\wabmig.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 85504 c:\windows\SYSTEM32\DLLCACHE\wabimp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 46080 c:\windows\SYSTEM32\DLLCACHE\wab.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 22016 c:\windows\SYSTEM32\DLLCACHE\w32topl.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 49664 c:\windows\SYSTEM32\DLLCACHE\w32tm.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 19456 c:\windows\SYSTEM32\DLLCACHE\vwipxspx.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 33792 c:\windows\SYSTEM32\DLLCACHE\vssadmin.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 16896 c:\windows\SYSTEM32\DLLCACHE\vss_ps.dll
    + 2005-06-30 04:52 . 2008-04-14 00:11 86073 c:\windows\SYSTEM32\DLLCACHE\voicesub.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 18176 c:\windows\SYSTEM32\DLLCACHE\vga64k.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 51456 c:\windows\SYSTEM32\DLLCACHE\vga256.dll
    - 2009-05-17 00:26 . 2008-04-14 00:12 53760 c:\windows\SYSTEM32\DLLCACHE\vfwwdm32.dll
    + 2009-05-17 00:26 . 2008-04-14 01:12 53760 c:\windows\SYSTEM32\DLLCACHE\vfwwdm32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 98304 c:\windows\SYSTEM32\DLLCACHE\verifier.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 26624 c:\windows\SYSTEM32\DLLCACHE\verifier.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 51712 c:\windows\SYSTEM32\DLLCACHE\vdmredir.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 30749 c:\windows\SYSTEM32\DLLCACHE\vbajet32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 50176 c:\windows\SYSTEM32\DLLCACHE\utilman.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 49211 c:\windows\SYSTEM32\DLLCACHE\usrvpa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 45116 c:\windows\SYSTEM32\DLLCACHE\usrvoica.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 49209 c:\windows\SYSTEM32\DLLCACHE\usrv80a.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 41019 c:\windows\SYSTEM32\DLLCACHE\usrsvpia.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 69700 c:\windows\SYSTEM32\DLLCACHE\usrshuta.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 49211 c:\windows\SYSTEM32\DLLCACHE\usrsdpia.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 77883 c:\windows\SYSTEM32\DLLCACHE\usrrtosa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 61508 c:\windows\SYSTEM32\DLLCACHE\usrprbda.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 77891 c:\windows\SYSTEM32\DLLCACHE\usrmlnka.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 53305 c:\windows\SYSTEM32\DLLCACHE\usrlbva.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 86073 c:\windows\SYSTEM32\DLLCACHE\usrfaxa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 77890 c:\windows\SYSTEM32\DLLCACHE\usrdpa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 69699 c:\windows\SYSTEM32\DLLCACHE\usrcoina.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 61500 c:\windows\SYSTEM32\DLLCACHE\usrcntra.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 17920 c:\windows\SYSTEM32\DLLCACHE\ureg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 16896 c:\windows\SYSTEM32\DLLCACHE\upnpcont.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 16896 c:\windows\SYSTEM32\DLLCACHE\unsecapp.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 13312 c:\windows\SYSTEM32\DLLCACHE\umdmxfrm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 35840 c:\windows\SYSTEM32\DLLCACHE\umandlg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 82432 c:\windows\SYSTEM32\DLLCACHE\ufat.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 26624 c:\windows\SYSTEM32\DLLCACHE\udhisapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 36352 c:\windows\SYSTEM32\DLLCACHE\typeperf.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 16896 c:\windows\SYSTEM32\DLLCACHE\tsshutdn.exe
    + 2008-08-30 02:17 . 2008-04-14 00:12 50688 c:\windows\SYSTEM32\DLLCACHE\tspkg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 16384 c:\windows\SYSTEM32\DLLCACHE\tskill.exe
    + 2008-08-30 02:17 . 2008-04-14 00:12 53248 c:\windows\SYSTEM32\DLLCACHE\tsgqec.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 14848 c:\windows\SYSTEM32\DLLCACHE\tsdiscon.exe
    + 2004-08-04 11:00 . 2008-04-14 00:13 12168 c:\windows\SYSTEM32\DLLCACHE\tsddd.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 14848 c:\windows\SYSTEM32\DLLCACHE\tscon.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 52224 c:\windows\SYSTEM32\DLLCACHE\tsappcmp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 59904 c:\windows\SYSTEM32\DLLCACHE\trnsprov.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 31744 c:\windows\SYSTEM32\DLLCACHE\tracert6.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 12288 c:\windows\SYSTEM32\DLLCACHE\tracert.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 61952 c:\windows\SYSTEM32\DLLCACHE\tmplprov.dll
    - 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\SYSTEM32\DLLCACHE\tlntsess.exe
    + 2004-08-04 11:00 . 2009-06-12 12:31 80896 c:\windows\SYSTEM32\DLLCACHE\tlntsess.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 61440 c:\windows\SYSTEM32\DLLCACHE\tlntadmn.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 16896 c:\windows\SYSTEM32\DLLCACHE\tftp.exe
    - 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\SYSTEM32\DLLCACHE\telnet.exe
    + 2004-08-04 11:00 . 2009-06-12 12:31 76288 c:\windows\SYSTEM32\DLLCACHE\telnet.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 19456 c:\windows\SYSTEM32\DLLCACHE\tcpsvcs.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 45568 c:\windows\SYSTEM32\DLLCACHE\tcpmonui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 14848 c:\windows\SYSTEM32\DLLCACHE\tcpmib.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\tcmsetup.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 77824 c:\windows\SYSTEM32\DLLCACHE\tasklist.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 76288 c:\windows\SYSTEM32\DLLCACHE\taskkill.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 78848 c:\windows\SYSTEM32\DLLCACHE\tapiui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 19200 c:\windows\SYSTEM32\DLLCACHE\tapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 36864 c:\windows\SYSTEM32\DLLCACHE\syskey.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 15872 c:\windows\SYSTEM32\DLLCACHE\sysinv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 71680 c:\windows\SYSTEM32\DLLCACHE\sysinfo.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 18896 c:\windows\SYSTEM32\DLLCACHE\sysedit.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 57856 c:\windows\SYSTEM32\DLLCACHE\synceng.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 51200 c:\windows\SYSTEM32\DLLCACHE\syncapp.exe
    + 2004-08-04 11:00 . 2009-10-21 05:38 75776 c:\windows\SYSTEM32\DLLCACHE\strmfilt.dll
    + 1980-01-01 06:00 . 2008-04-13 19:45 49408 c:\windows\SYSTEM32\DLLCACHE\stream.sys
    - 1980-01-01 06:00 . 2008-04-13 18:45 49408 c:\windows\SYSTEM32\DLLCACHE\stream.sys
    + 2004-08-04 11:00 . 2008-04-14 00:12 14848 c:\windows\SYSTEM32\DLLCACHE\stimon.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 59392 c:\windows\SYSTEM32\DLLCACHE\stclient.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 33280 c:\windows\SYSTEM32\DLLCACHE\sstub.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 14336 c:\windows\SYSTEM32\DLLCACHE\ssstars.scr
    + 2004-08-04 11:00 . 2008-04-14 00:12 18944 c:\windows\SYSTEM32\DLLCACHE\ssmyst.scr
    + 2004-08-04 11:00 . 2008-04-14 00:12 47104 c:\windows\SYSTEM32\DLLCACHE\ssmypics.scr
    + 2004-08-04 11:00 . 2008-04-14 00:12 20992 c:\windows\SYSTEM32\DLLCACHE\ssmarque.scr
    + 2004-08-04 11:00 . 2008-04-14 00:12 34816 c:\windows\SYSTEM32\DLLCACHE\ssdpapi.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 19968 c:\windows\SYSTEM32\DLLCACHE\ssbezier.scr
    + 2004-08-04 11:00 . 2004-08-04 11:00 47104 c:\windows\SYSTEM32\DLLCACHE\srdiag.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 72192 c:\windows\SYSTEM32\DLLCACHE\sprio800.dll
    + 2004-08-04 11:00 . 2008-04-14 09:42 11264 c:\windows\SYSTEM32\DLLCACHE\spnpinst.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 69632 c:\windows\SYSTEM32\DLLCACHE\spnike.dll
    + 2004-08-04 11:00 . 2008-04-13 18:43 12800 c:\windows\SYSTEM32\DLLCACHE\spiisupd.exe
    + 2004-08-04 11:00 . 2008-04-13 16:43 62976 c:\windows\SYSTEM32\DLLCACHE\spgrmr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 61440 c:\windows\SYSTEM32\DLLCACHE\spcplui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 77824 c:\windows\SYSTEM32\DLLCACHE\spcommon.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 24576 c:\windows\SYSTEM32\DLLCACHE\sort.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 18944 c:\windows\SYSTEM32\DLLCACHE\snmpapi.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 34816 c:\windows\SYSTEM32\DLLCACHE\sniffpol.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 40960 c:\windows\SYSTEM32\DLLCACHE\smtpcons.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 73796 c:\windows\SYSTEM32\DLLCACHE\slserv.exe
    + 2008-08-30 02:16 . 2008-04-14 00:12 73832 c:\windows\SYSTEM32\DLLCACHE\slcoinst.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 26112 c:\windows\SYSTEM32\DLLCACHE\skeys.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 13824 c:\windows\SYSTEM32\DLLCACHE\sisbkup.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 70144 c:\windows\SYSTEM32\DLLCACHE\sigverif.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 13312 c:\windows\SYSTEM32\DLLCACHE\sigtab.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 19456 c:\windows\SYSTEM32\DLLCACHE\shutdown.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 77824 c:\windows\SYSTEM32\DLLCACHE\shrpubw.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 14848 c:\windows\SYSTEM32\DLLCACHE\shadow.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 23552 c:\windows\SYSTEM32\DLLCACHE\sfmapi.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 32768 c:\windows\SYSTEM32\DLLCACHE\setupn.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 23040 c:\windows\SYSTEM32\DLLCACHE\setup.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 56320 c:\windows\SYSTEM32\DLLCACHE\servdeps.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 14336 c:\windows\SYSTEM32\DLLCACHE\serialui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 13824 c:\windows\SYSTEM32\DLLCACHE\senscfg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 29184 c:\windows\SYSTEM32\DLLCACHE\sendcmsg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 18944 c:\windows\SYSTEM32\DLLCACHE\secedit.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 29184 c:\windows\SYSTEM32\DLLCACHE\sdhcinst.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 77312 c:\windows\SYSTEM32\DLLCACHE\sdbinst.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 10240 c:\windows\SYSTEM32\DLLCACHE\scriptpw.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 26624 c:\windows\SYSTEM32\DLLCACHE\scredir.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 36352 c:\windows\SYSTEM32\DLLCACHE\scrcons.exe
    + 2004-08-04 11:00 . 2009-02-06 10:39 35328 c:\windows\SYSTEM32\DLLCACHE\sc.exe
    - 2009-04-15 14:23 . 2009-02-06 10:39 35328 c:\windows\SYSTEM32\DLLCACHE\sc.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 36864 c:\windows\SYSTEM32\DLLCACHE\sapisvr.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 45568 c:\windows\SYSTEM32\DLLCACHE\safrslv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 29696 c:\windows\SYSTEM32\DLLCACHE\safrdm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 43520 c:\windows\SYSTEM32\DLLCACHE\safrcdlg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 15872 c:\windows\SYSTEM32\DLLCACHE\rwinsta.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 16384 c:\windows\SYSTEM32\DLLCACHE\runas.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 98304 c:\windows\SYSTEM32\DLLCACHE\rtm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 31744 c:\windows\SYSTEM32\DLLCACHE\rtipxmib.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 77312 c:\windows\SYSTEM32\DLLCACHE\rtcshare.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 23552 c:\windows\SYSTEM32\DLLCACHE\rsvpmsg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 62976 c:\windows\SYSTEM32\DLLCACHE\rsopprov.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 49152 c:\windows\SYSTEM32\DLLCACHE\rsmui.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 24576 c:\windows\SYSTEM32\DLLCACHE\rsmsink.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 18944 c:\windows\SYSTEM32\DLLCACHE\rsmps.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 49152 c:\windows\SYSTEM32\DLLCACHE\rsm.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 14848 c:\windows\SYSTEM32\DLLCACHE\rsh.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 28672 c:\windows\SYSTEM32\DLLCACHE\rsfsaps.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 61440 c:\windows\SYSTEM32\DLLCACHE\rrcm.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 22016 c:\windows\SYSTEM32\DLLCACHE\rpcns4.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 25600 c:\windows\SYSTEM32\DLLCACHE\routemon.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 19968 c:\windows\SYSTEM32\DLLCACHE\route.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 13824 c:\windows\SYSTEM32\DLLCACHE\rexec.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 12800 c:\windows\SYSTEM32\DLLCACHE\replace.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 32768 c:\windows\SYSTEM32\DLLCACHE\relog.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 33792 c:\windows\SYSTEM32\DLLCACHE\regini.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 50176 c:\windows\SYSTEM32\DLLCACHE\reg.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 13824 c:\windows\SYSTEM32\DLLCACHE\rdsaddin.exe
    + 2004-08-04 11:00 . 2008-04-14 00:13 87176 c:\windows\SYSTEM32\DLLCACHE\rdpwsx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 19968 c:\windows\SYSTEM32\DLLCACHE\rdpsnd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:13 92424 c:\windows\SYSTEM32\DLLCACHE\rdpdd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 21504 c:\windows\SYSTEM32\DLLCACHE\rcp.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 35840 c:\windows\SYSTEM32\DLLCACHE\rcimlby.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 12800 c:\windows\SYSTEM32\DLLCACHE\rasser.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 16384 c:\windows\SYSTEM32\DLLCACHE\rassapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 23552 c:\windows\SYSTEM32\DLLCACHE\rasrad.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 56832 c:\windows\SYSTEM32\DLLCACHE\rasphone.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 22528 c:\windows\SYSTEM32\DLLCACHE\rasmxs.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 11776 c:\windows\SYSTEM32\DLLCACHE\rasctrs.dll
    + 2009-10-12 13:38 . 2009-10-12 13:38 79872 c:\windows\SYSTEM32\DLLCACHE\raschap.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 11776 c:\windows\SYSTEM32\DLLCACHE\rasautou.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 43520 c:\windows\SYSTEM32\DLLCACHE\racpldlg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 22016 c:\windows\SYSTEM32\DLLCACHE\qwinsta.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 19968 c:\windows\SYSTEM32\DLLCACHE\qprocess.exe
    + 2008-08-30 02:16 . 2008-04-14 00:12 62464 c:\windows\SYSTEM32\DLLCACHE\qcliprov.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 16896 c:\windows\SYSTEM32\DLLCACHE\qappsrv.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 10752 c:\windows\SYSTEM32\DLLCACHE\pschdprf.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 50176 c:\windows\SYSTEM32\DLLCACHE\proquota.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 15860 c:\windows\SYSTEM32\DLLCACHE\prnqctl.vbs
    + 2004-08-04 11:00 . 2004-08-04 11:00 29454 c:\windows\SYSTEM32\DLLCACHE\prnport.vbs
    + 2004-08-04 11:00 . 2004-08-04 11:00 32546 c:\windows\SYSTEM32\DLLCACHE\prnmngr.vbs
    + 2004-08-04 11:00 . 2004-08-04 11:00 21527 c:\windows\SYSTEM32\DLLCACHE\prnjobs.vbs
    + 2004-08-04 11:00 . 2004-08-04 11:00 25415 c:\windows\SYSTEM32\DLLCACHE\prndrvr.vbs
    + 2004-08-04 11:00 . 2004-08-04 11:00 35755 c:\windows\SYSTEM32\DLLCACHE\prncnfg.vbs
    + 2004-08-04 11:00 . 2004-08-04 11:00 16384 c:\windows\SYSTEM32\DLLCACHE\prflbmsg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 49152 c:\windows\SYSTEM32\DLLCACHE\powercfg.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 92672 c:\windows\SYSTEM32\DLLCACHE\policman.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 58880 c:\windows\SYSTEM32\DLLCACHE\pnrpnsp.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 44544 c:\windows\SYSTEM32\DLLCACHE\pngfilt.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 44544 c:\windows\SYSTEM32\DLLCACHE\pngfilt.dll
    + 2005-06-30 04:52 . 2008-04-14 00:10 67584 c:\windows\SYSTEM32\DLLCACHE\pmigrate.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 30720 c:\windows\SYSTEM32\DLLCACHE\plustab.dll
    + 2005-06-30 04:52 . 2008-04-13 16:43 70144 c:\windows\SYSTEM32\DLLCACHE\pintlphr.exe
    + 2005-06-30 04:52 . 2008-04-14 00:10 53760 c:\windows\SYSTEM32\DLLCACHE\pintlcsd.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 33280 c:\windows\SYSTEM32\DLLCACHE\ping6.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 17920 c:\windows\SYSTEM32\DLLCACHE\ping.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 35328 c:\windows\SYSTEM32\DLLCACHE\pifmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 35328 c:\windows\SYSTEM32\DLLCACHE\pid.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\perfts.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 17920 c:\windows\SYSTEM32\DLLCACHE\perfnet.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 15872 c:\windows\SYSTEM32\DLLCACHE\perfmon.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 39936 c:\windows\SYSTEM32\DLLCACHE\perfctrs.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 15360 c:\windows\SYSTEM32\DLLCACHE\pentnt.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 67584 c:\windows\SYSTEM32\DLLCACHE\pautoenr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 21504 c:\windows\SYSTEM32\DLLCACHE\pathping.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 10240 c:\windows\SYSTEM32\DLLCACHE\panmap.dll
    + 2005-06-30 04:52 . 2008-04-14 00:10 15360 c:\windows\SYSTEM32\DLLCACHE\padrs804.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 58368 c:\windows\SYSTEM32\DLLCACHE\packager.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 40448 c:\windows\SYSTEM32\DLLCACHE\osuninst.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 67584 c:\windows\SYSTEM32\DLLCACHE\opnfiles.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 51200 c:\windows\SYSTEM32\DLLCACHE\oobebaln.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 24064 c:\windows\SYSTEM32\DLLCACHE\olesvr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 82944 c:\windows\SYSTEM32\DLLCACHE\olecli.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 16896 c:\windows\SYSTEM32\DLLCACHE\oleaccrc.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 35328 c:\windows\SYSTEM32\DLLCACHE\oemiglib.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 60416 c:\windows\SYSTEM32\DLLCACHE\oemig50.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 20511 c:\windows\SYSTEM32\DLLCACHE\odtext32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 20510 c:\windows\SYSTEM32\DLLCACHE\odpdx32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 20510 c:\windows\SYSTEM32\DLLCACHE\odfox32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 20510 c:\windows\SYSTEM32\DLLCACHE\odexl32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 20511 c:\windows\SYSTEM32\DLLCACHE\oddbse32.dll
    + 2004-08-04 11:00 . 2008-04-13 17:26 12288 c:\windows\SYSTEM32\DLLCACHE\odbcp32r.dll
    + 2004-08-04 11:00 . 2008-04-14 00:10 53279 c:\windows\SYSTEM32\DLLCACHE\odbcji32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 65536 c:\windows\SYSTEM32\DLLCACHE\odbccu32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 65536 c:\windows\SYSTEM32\DLLCACHE\odbccr32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 69632 c:\windows\SYSTEM32\DLLCACHE\odbcconf.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 32768 c:\windows\SYSTEM32\DLLCACHE\odbcad32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 16384 c:\windows\SYSTEM32\DLLCACHE\odbc32gt.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 26224 c:\windows\SYSTEM32\DLLCACHE\odbc16gt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 65536 c:\windows\SYSTEM32\DLLCACHE\nwwks.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 20480 c:\windows\SYSTEM32\DLLCACHE\nwcfg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 64000 c:\windows\SYSTEM32\DLLCACHE\nwapi32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 17408 c:\windows\SYSTEM32\DLLCACHE\nwapi16.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 15360 c:\windows\SYSTEM32\DLLCACHE\ntvdmd.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 36864 c:\windows\SYSTEM32\DLLCACHE\ntmsevt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 40960 c:\windows\SYSTEM32\DLLCACHE\ntmsapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 57856 c:\windows\SYSTEM32\DLLCACHE\ntlanui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 35424 c:\windows\SYSTEM32\DLLCACHE\ntio412.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 35648 c:\windows\SYSTEM32\DLLCACHE\ntio411.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 34560 c:\windows\SYSTEM32\DLLCACHE\ntio404.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 33840 c:\windows\SYSTEM32\DLLCACHE\ntio.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 29146 c:\windows\SYSTEM32\DLLCACHE\ntdos804.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 29274 c:\windows\SYSTEM32\DLLCACHE\ntdos412.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 29370 c:\windows\SYSTEM32\DLLCACHE\ntdos411.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 29146 c:\windows\SYSTEM32\DLLCACHE\ntdos404.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 27866 c:\windows\SYSTEM32\DLLCACHE\ntdos.sys
    + 2004-08-04 11:00 . 2008-04-14 00:12 76800 c:\windows\SYSTEM32\DLLCACHE\nslookup.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 54784 c:\windows\SYSTEM32\DLLCACHE\npptools.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 15360 c:\windows\SYSTEM32\DLLCACHE\nppagent.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 35328 c:\windows\SYSTEM32\DLLCACHE\notiflag.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 28672 c:\windows\SYSTEM32\DLLCACHE\nmmkcert.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\nmevtmsg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 77824 c:\windows\SYSTEM32\DLLCACHE\nmcom.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 81920 c:\windows\SYSTEM32\DLLCACHE\nmchat.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 28672 c:\windows\SYSTEM32\DLLCACHE\nmasnt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 98304 c:\windows\SYSTEM32\DLLCACHE\nlhtml.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 36864 c:\windows\SYSTEM32\DLLCACHE\netstat.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 86016 c:\windows\SYSTEM32\DLLCACHE\netsh.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 42496 c:\windows\SYSTEM32\DLLCACHE\net.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 57344 c:\windows\SYSTEM32\DLLCACHE\ndisnpp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 18944 c:\windows\SYSTEM32\DLLCACHE\nddenb32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 20480 c:\windows\SYSTEM32\DLLCACHE\nbtstat.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 35840 c:\windows\SYSTEM32\DLLCACHE\narrhook.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 30208 c:\windows\SYSTEM32\DLLCACHE\napipsec.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 90624 c:\windows\SYSTEM32\DLLCACHE\muisetup.exe
    + 2004-08-04 11:00 . 2008-06-12 14:23 91648 c:\windows\SYSTEM32\DLLCACHE\mtxoci.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 91648 c:\windows\SYSTEM32\DLLCACHE\mtxoci.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 34304 c:\windows\SYSTEM32\DLLCACHE\mtxlegih.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 30720 c:\windows\SYSTEM32\DLLCACHE\mtxdm.dll
    + 2004-08-04 11:00 . 2009-11-27 17:11 17920 c:\windows\SYSTEM32\DLLCACHE\msyuv.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 26624 c:\windows\SYSTEM32\DLLCACHE\msxmlr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 37916 c:\windows\SYSTEM32\DLLCACHE\msxml2r.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 24576 c:\windows\SYSTEM32\DLLCACHE\msxactps.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 72704 c:\windows\SYSTEM32\DLLCACHE\msw3prt.dll
    + 2009-11-27 16:07 . 2009-11-27 16:07 28672 c:\windows\SYSTEM32\DLLCACHE\msvidc32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 12288 c:\windows\SYSTEM32\DLLCACHE\mstinit.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 57344 c:\windows\SYSTEM32\DLLCACHE\mst123.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 13312 c:\windows\SYSTEM32\DLLCACHE\msswch.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 23552 c:\windows\SYSTEM32\DLLCACHE\mssoapr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 35840 c:\windows\SYSTEM32\DLLCACHE\mssign32.dll
    + 2008-08-30 02:16 . 2008-04-13 18:14 76800 c:\windows\SYSTEM32\DLLCACHE\msshamsg.dll
    + 2009-11-27 16:07 . 2009-11-27 16:07 11264 c:\windows\SYSTEM32\DLLCACHE\msrle32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 60416 c:\windows\SYSTEM32\DLLCACHE\msratelc.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 69632 c:\windows\SYSTEM32\DLLCACHE\msr2c.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 41984 c:\windows\SYSTEM32\DLLCACHE\msports.dll
    + 2004-08-04 11:00 . 2008-04-13 17:24 20480 c:\windows\SYSTEM32\DLLCACHE\msorc32r.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 29184 c:\windows\SYSTEM32\DLLCACHE\msoobe.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 19456 c:\windows\SYSTEM32\DLLCACHE\msobweb.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 30720 c:\windows\SYSTEM32\DLLCACHE\msobshel.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 33280 c:\windows\SYSTEM32\DLLCACHE\msobjs.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 16384 c:\windows\SYSTEM32\DLLCACHE\msobdl.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 39936 c:\windows\SYSTEM32\DLLCACHE\mslwvtts.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 25088 c:\windows\SYSTEM32\DLLCACHE\mslbui.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 60192 c:\windows\SYSTEM32\DLLCACHE\msjter40.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 39936 c:\windows\SYSTEM32\DLLCACHE\msinfo32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 60416 c:\windows\SYSTEM32\DLLCACHE\msimn.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 14848 c:\windows\SYSTEM32\DLLCACHE\msidntld.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 51712 c:\windows\SYSTEM32\DLLCACHE\msident.dll
    + 2004-08-04 11:00 . 2007-08-13 23:01 48128 c:\windows\SYSTEM32\DLLCACHE\mshtmler.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 20992 c:\windows\SYSTEM32\DLLCACHE\msg.exe
    - 2007-05-09 21:48 . 2009-08-29 07:36 52224 c:\windows\SYSTEM32\DLLCACHE\msfeedsbs.dll
    + 2007-05-09 21:48 . 2010-03-11 12:38 52224 c:\windows\SYSTEM32\DLLCACHE\msfeedsbs.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 58880 c:\windows\SYSTEM32\DLLCACHE\msdtclog.dll
    + 2004-08-04 11:00 . 2008-06-12 14:23 58880 c:\windows\SYSTEM32\DLLCACHE\msdtclog.dll
     
  9. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    + 2004-08-04 11:00 . 2008-04-14 00:11 20480 c:\windows\SYSTEM32\DLLCACHE\msdatt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 94208 c:\windows\SYSTEM32\DLLCACHE\msdatl3.dll
    + 2004-08-04 11:00 . 2008-04-13 17:26 16384 c:\windows\SYSTEM32\DLLCACHE\msdasqlr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 77824 c:\windows\SYSTEM32\DLLCACHE\msdaosp.dll
    + 2004-08-04 11:00 . 2008-04-13 17:24 16384 c:\windows\SYSTEM32\DLLCACHE\msdaorar.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 68608 c:\windows\SYSTEM32\DLLCACHE\msctfp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 36864 c:\windows\SYSTEM32\DLLCACHE\mscpxl32.dll
    + 2004-08-04 11:00 . 2008-04-13 17:26 12288 c:\windows\SYSTEM32\DLLCACHE\mscpx32r.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 69632 c:\windows\SYSTEM32\DLLCACHE\msconf.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 65024 c:\windows\SYSTEM32\DLLCACHE\msaudite.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 57344 c:\windows\SYSTEM32\DLLCACHE\msadrh15.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 57344 c:\windows\SYSTEM32\DLLCACHE\msador15.dll
    + 2004-08-04 11:00 . 2008-04-13 17:26 24576 c:\windows\SYSTEM32\DLLCACHE\msader15.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12800 c:\windows\SYSTEM32\DLLCACHE\mrinfo.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 49152 c:\windows\SYSTEM32\DLLCACHE\mqupgrd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 89088 c:\windows\SYSTEM32\DLLCACHE\mqlogmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 16896 c:\windows\SYSTEM32\DLLCACHE\mqise.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 60928 c:\windows\SYSTEM32\DLLCACHE\mqgentr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 47616 c:\windows\SYSTEM32\DLLCACHE\mqdscli.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 10752 c:\windows\SYSTEM32\DLLCACHE\mqcertui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 19968 c:\windows\SYSTEM32\DLLCACHE\mqbkup.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 47104 c:\windows\SYSTEM32\DLLCACHE\mprui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 99840 c:\windows\SYSTEM32\DLLCACHE\mprmsg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 69120 c:\windows\SYSTEM32\DLLCACHE\mprddm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 16384 c:\windows\SYSTEM32\DLLCACHE\mofcomp.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 10112 c:\windows\SYSTEM32\DLLCACHE\modex.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 34560 c:\windows\SYSTEM32\DLLCACHE\mnmdd.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 68768 c:\windows\SYSTEM32\DLLCACHE\mmsystem.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 17408 c:\windows\SYSTEM32\DLLCACHE\mmfutil.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\mmdrv.dll
    + 2008-08-30 02:15 . 2008-04-14 00:12 33792 c:\windows\SYSTEM32\DLLCACHE\mmcperf.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 29696 c:\windows\SYSTEM32\DLLCACHE\mimefilt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 60928 c:\windows\SYSTEM32\DLLCACHE\miglibnt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 14848 c:\windows\SYSTEM32\DLLCACHE\mgmtapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 39274 c:\windows\SYSTEM32\DLLCACHE\mem.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 50176 c:\windows\SYSTEM32\DLLCACHE\mdhcp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 28160 c:\windows\SYSTEM32\DLLCACHE\mciwave.drv
    + 2004-08-04 11:00 . 2004-08-04 11:00 25264 c:\windows\SYSTEM32\DLLCACHE\mciseq.drv
    + 2004-08-04 11:00 . 2008-04-14 00:11 23040 c:\windows\SYSTEM32\DLLCACHE\mciseq.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 84480 c:\windows\SYSTEM32\DLLCACHE\mciavi32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 73376 c:\windows\SYSTEM32\DLLCACHE\mciavi.drv
    + 2004-08-04 11:00 . 2004-08-04 11:00 10496 c:\windows\SYSTEM32\DLLCACHE\mcdsrv32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 14336 c:\windows\SYSTEM32\DLLCACHE\mcastmib.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 57344 c:\windows\SYSTEM32\DLLCACHE\makecab.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 72704 c:\windows\SYSTEM32\DLLCACHE\magnify.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 10240 c:\windows\SYSTEM32\DLLCACHE\lprhelp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 15360 c:\windows\SYSTEM32\DLLCACHE\logoff.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 59392 c:\windows\SYSTEM32\DLLCACHE\logman.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 50176 c:\windows\SYSTEM32\DLLCACHE\loghours.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 19968 c:\windows\SYSTEM32\DLLCACHE\log.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 11776 c:\windows\SYSTEM32\DLLCACHE\localui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 25088 c:\windows\SYSTEM32\DLLCACHE\lnkstub.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 29696 c:\windows\SYSTEM32\DLLCACHE\lights.exe
    + 2004-08-04 11:00 . 2007-08-13 23:44 40960 c:\windows\SYSTEM32\DLLCACHE\licmgr10.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 11264 c:\windows\SYSTEM32\DLLCACHE\laprxy.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 89600 c:\windows\SYSTEM32\DLLCACHE\langwrbk.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 37376 c:\windows\SYSTEM32\DLLCACHE\l2store.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 24576 c:\windows\SYSTEM32\DLLCACHE\krnlprov.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 92224 c:\windows\SYSTEM32\DLLCACHE\krnl386.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 42537 c:\windows\SYSTEM32\DLLCACHE\keyboard.sys
    + 2004-08-04 11:00 . 2004-08-04 11:00 42809 c:\windows\SYSTEM32\DLLCACHE\key01.sys
    + 2009-02-10 19:28 . 2010-03-11 12:38 27648 c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 27648 c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 47952 c:\windows\SYSTEM32\DLLCACHE\jobexec.dll
    + 2004-08-04 11:00 . 2009-11-27 16:07 48128 c:\windows\SYSTEM32\DLLCACHE\iyuv_32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 54272 c:\windows\SYSTEM32\DLLCACHE\ixsso.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 32768 c:\windows\SYSTEM32\DLLCACHE\isrdbg32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 81920 c:\windows\SYSTEM32\DLLCACHE\isign32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 13312 c:\windows\SYSTEM32\DLLCACHE\irclass.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 66560 c:\windows\SYSTEM32\DLLCACHE\ipxsap.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 39936 c:\windows\SYSTEM32\DLLCACHE\ipxrtmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 23552 c:\windows\SYSTEM32\DLLCACHE\ipxroute.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 21504 c:\windows\SYSTEM32\DLLCACHE\ipxrip.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 69120 c:\windows\SYSTEM32\DLLCACHE\ipxpromn.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 83968 c:\windows\SYSTEM32\DLLCACHE\ipxmontr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 59904 c:\windows\SYSTEM32\DLLCACHE\ipv6mon.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 53248 c:\windows\SYSTEM32\DLLCACHE\ipv6.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 44032 c:\windows\SYSTEM32\DLLCACHE\ipsec6.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 55808 c:\windows\SYSTEM32\DLLCACHE\ipconfig.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 30720 c:\windows\SYSTEM32\DLLCACHE\iologmsg.dll
    + 2004-08-04 11:00 . 2007-08-13 23:39 92672 c:\windows\SYSTEM32\DLLCACHE\inseng.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 15872 c:\windows\SYSTEM32\DLLCACHE\inetppui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 32768 c:\windows\SYSTEM32\DLLCACHE\inetmib1.dll
    + 2005-06-30 04:52 . 2004-08-04 11:00 59392 c:\windows\SYSTEM32\DLLCACHE\imscinst.exe
    + 2005-06-30 04:52 . 2008-04-14 00:09 81976 c:\windows\SYSTEM32\DLLCACHE\imjpdct.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 36921 c:\windows\SYSTEM32\DLLCACHE\imeshare.dll
    + 2005-06-30 04:52 . 2008-04-14 00:09 86016 c:\windows\SYSTEM32\DLLCACHE\imekrmbx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 81920 c:\windows\SYSTEM32\DLLCACHE\ils.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 70656 c:\windows\SYSTEM32\DLLCACHE\ifsutil.dll
    - 2007-05-09 21:48 . 2009-08-28 10:28 13824 c:\windows\SYSTEM32\DLLCACHE\ieudinit.exe
    + 2007-05-09 21:48 . 2010-03-10 13:18 13824 c:\windows\SYSTEM32\DLLCACHE\ieudinit.exe
    + 2004-08-04 11:00 . 2007-08-13 23:39 55296 c:\windows\SYSTEM32\DLLCACHE\iesetup.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 44544 c:\windows\SYSTEM32\DLLCACHE\iernonce.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 44544 c:\windows\SYSTEM32\DLLCACHE\iernonce.dll
    - 2009-08-29 07:36 . 2009-08-29 07:36 78336 c:\windows\SYSTEM32\DLLCACHE\ieencode.dll
    + 2009-08-29 07:36 . 2010-03-11 12:38 78336 c:\windows\SYSTEM32\DLLCACHE\ieencode.dll
    + 2009-02-10 19:28 . 2010-03-10 13:18 70656 c:\windows\SYSTEM32\DLLCACHE\ie4uinit.exe
    - 2009-02-10 19:28 . 2009-08-28 10:28 70656 c:\windows\SYSTEM32\DLLCACHE\ie4uinit.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 65536 c:\windows\SYSTEM32\DLLCACHE\icwphbk.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 73728 c:\windows\SYSTEM32\DLLCACHE\icwdial.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 16384 c:\windows\SYSTEM32\DLLCACHE\icfgnt5.dll
    + 2007-08-20 10:04 . 2010-03-11 12:38 63488 c:\windows\SYSTEM32\DLLCACHE\icardie.dll
    - 2007-08-20 10:04 . 2009-08-29 07:36 63488 c:\windows\SYSTEM32\DLLCACHE\icardie.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 59392 c:\windows\SYSTEM32\DLLCACHE\iassvcs.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 86528 c:\windows\SYSTEM32\DLLCACHE\iassam.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 17920 c:\windows\SYSTEM32\DLLCACHE\iaspolcy.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 62464 c:\windows\SYSTEM32\DLLCACHE\iasnap.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 32256 c:\windows\SYSTEM32\DLLCACHE\iashlpr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 41472 c:\windows\SYSTEM32\DLLCACHE\iasads.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 23552 c:\windows\SYSTEM32\DLLCACHE\iasacct.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 41984 c:\windows\SYSTEM32\DLLCACHE\htui.dll
    + 2004-08-04 11:00 . 2009-10-21 05:38 25088 c:\windows\SYSTEM32\DLLCACHE\httpapi.dll
    + 2007-07-12 21:17 . 2004-08-04 11:00 13312 c:\windows\SYSTEM32\DLLCACHE\htrn_jis.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 32285 c:\windows\SYSTEM32\DLLCACHE\hsfcisp2.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 18432 c:\windows\SYSTEM32\DLLCACHE\hscupd.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 14848 c:\windows\SYSTEM32\DLLCACHE\hnetmon.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 87552 c:\windows\SYSTEM32\DLLCACHE\hhctrlui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 15872 c:\windows\SYSTEM32\DLLCACHE\help.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 57344 c:\windows\SYSTEM32\DLLCACHE\h323cc.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 57344 c:\windows\SYSTEM32\DLLCACHE\gpupdate.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 59904 c:\windows\SYSTEM32\DLLCACHE\getmac.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 24576 c:\windows\SYSTEM32\DLLCACHE\gdi.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 76800 c:\windows\SYSTEM32\DLLCACHE\gcdef.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 72192 c:\windows\SYSTEM32\DLLCACHE\fxscom.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 53248 c:\windows\SYSTEM32\DLLCACHE\fwdprov.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 60416 c:\windows\SYSTEM32\DLLCACHE\fwcfg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 42496 c:\windows\SYSTEM32\DLLCACHE\ftp.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 56320 c:\windows\SYSTEM32\DLLCACHE\fsutil.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 81408 c:\windows\SYSTEM32\DLLCACHE\fsusd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 20992 c:\windows\SYSTEM32\DLLCACHE\fontview.exe
    - 2009-06-16 14:36 . 2009-06-16 14:36 81920 c:\windows\SYSTEM32\DLLCACHE\fontsub.dll
    + 2004-08-04 11:00 . 2009-10-15 16:28 81920 c:\windows\SYSTEM32\DLLCACHE\fontsub.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 16384 c:\windows\SYSTEM32\DLLCACHE\fmifs.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 23040 c:\windows\SYSTEM32\DLLCACHE\fltmc.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 16896 c:\windows\SYSTEM32\DLLCACHE\fltlib.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 87552 c:\windows\SYSTEM32\DLLCACHE\fldrclnr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 27136 c:\windows\SYSTEM32\DLLCACHE\findstr.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 73728 c:\windows\SYSTEM32\DLLCACHE\fdeploy.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 14848 c:\windows\SYSTEM32\DLLCACHE\fc.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 24064 c:\windows\SYSTEM32\DLLCACHE\extrac32.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 15872 c:\windows\SYSTEM32\DLLCACHE\expand.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 82944 c:\windows\SYSTEM32\DLLCACHE\evtrig.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 97965 c:\windows\SYSTEM32\DLLCACHE\evtquery.vbs
    + 2004-08-04 11:00 . 2008-04-14 00:11 45056 c:\windows\SYSTEM32\DLLCACHE\evtgprov.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 21504 c:\windows\SYSTEM32\DLLCACHE\evntrprv.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 33280 c:\windows\SYSTEM32\DLLCACHE\eventcls.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 50688 c:\windows\SYSTEM32\DLLCACHE\evcreate.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 39424 c:\windows\SYSTEM32\DLLCACHE\esentutl.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 17408 c:\windows\SYSTEM32\DLLCACHE\esentprf.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 20480 c:\windows\SYSTEM32\DLLCACHE\encapi.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 26624 c:\windows\SYSTEM32\DLLCACHE\efsadu.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12642 c:\windows\SYSTEM32\DLLCACHE\edlin.exe
    + 2008-08-30 02:15 . 2008-04-14 00:11 59392 c:\windows\SYSTEM32\DLLCACHE\eapqec.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 94208 c:\windows\SYSTEM32\DLLCACHE\eappgnui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 17920 c:\windows\SYSTEM32\DLLCACHE\dvdupgrd.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 55296 c:\windows\SYSTEM32\DLLCACHE\dvdplay.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 19456 c:\windows\SYSTEM32\DLLCACHE\dswave.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 71680 c:\windows\SYSTEM32\DLLCACHE\dsdmoprp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 62976 c:\windows\SYSTEM32\DLLCACHE\dsauth.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 16384 c:\windows\SYSTEM32\DLLCACHE\ds32gt.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 28112 c:\windows\SYSTEM32\DLLCACHE\drwatson.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 62976 c:\windows\SYSTEM32\DLLCACHE\drvqry.exe
    + 2004-08-04 11:00 . 2005-01-28 17:44 96768 c:\windows\SYSTEM32\DLLCACHE\drmstor.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 57344 c:\windows\SYSTEM32\DLLCACHE\dpwsockx.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 42768 c:\windows\SYSTEM32\DLLCACHE\dpwsock.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 83456 c:\windows\SYSTEM32\DLLCACHE\dpvsetup.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 21504 c:\windows\SYSTEM32\DLLCACHE\dpvacm.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 53520 c:\windows\SYSTEM32\DLLCACHE\dpserial.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 61952 c:\windows\SYSTEM32\DLLCACHE\dpnwsock.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 17920 c:\windows\SYSTEM32\DLLCACHE\dpnsvr.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 62464 c:\windows\SYSTEM32\DLLCACHE\dpnmodem.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 35328 c:\windows\SYSTEM32\DLLCACHE\dpnhpast.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 23552 c:\windows\SYSTEM32\DLLCACHE\dpmodemx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 29696 c:\windows\SYSTEM32\DLLCACHE\dplaysvr.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 33040 c:\windows\SYSTEM32\DLLCACHE\dplay.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 56320 c:\windows\SYSTEM32\DLLCACHE\dot3msm.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 39936 c:\windows\SYSTEM32\DLLCACHE\dot3clnt.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 57856 c:\windows\SYSTEM32\DLLCACHE\dot3cfg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 53840 c:\windows\SYSTEM32\DLLCACHE\dosx.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 10752 c:\windows\SYSTEM32\DLLCACHE\doskey.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 52224 c:\windows\SYSTEM32\DLLCACHE\dmutil.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 82432 c:\windows\SYSTEM32\DLLCACHE\dmscript.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 15872 c:\windows\SYSTEM32\DLLCACHE\dmremote.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 19456 c:\windows\SYSTEM32\DLLCACHE\dmocx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 35840 c:\windows\SYSTEM32\DLLCACHE\dmloader.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 18432 c:\windows\SYSTEM32\DLLCACHE\dmintf.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 61440 c:\windows\SYSTEM32\DLLCACHE\dmcompos.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 28672 c:\windows\SYSTEM32\DLLCACHE\dmband.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 17920 c:\windows\SYSTEM32\DLLCACHE\diskperf.exe
    + 2008-08-30 02:15 . 2008-04-14 00:11 39936 c:\windows\SYSTEM32\DLLCACHE\dimsroam.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 44032 c:\windows\SYSTEM32\DLLCACHE\dimap.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 87040 c:\windows\SYSTEM32\DLLCACHE\diantz.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 74240 c:\windows\SYSTEM32\DLLCACHE\dhcpsapi.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 48640 c:\windows\SYSTEM32\DLLCACHE\dhcpqec.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 85020 c:\windows\SYSTEM32\DLLCACHE\dgsetup.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 39424 c:\windows\SYSTEM32\DLLCACHE\dfrgsnap.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 82944 c:\windows\SYSTEM32\DLLCACHE\dfrgfat.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 20634 c:\windows\SYSTEM32\DLLCACHE\debug.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 30208 c:\windows\SYSTEM32\DLLCACHE\ddeshare.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 40960 c:\windows\SYSTEM32\DLLCACHE\dcap32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 47616 c:\windows\SYSTEM32\DLLCACHE\d3dxof.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 34816 c:\windows\SYSTEM32\DLLCACHE\d3dpmesh.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 27136 c:\windows\SYSTEM32\DLLCACHE\ctl3d32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 15360 c:\windows\SYSTEM32\DLLCACHE\ctfmon.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 73728 c:\windows\SYSTEM32\DLLCACHE\csseqchk.dll
    + 2009-12-14 07:08 . 2009-12-14 07:08 33280 c:\windows\SYSTEM32\DLLCACHE\csrsrv.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 12800 c:\windows\SYSTEM32\DLLCACHE\credssp.dll
    + 2005-06-30 04:52 . 2004-08-04 11:00 57399 c:\windows\SYSTEM32\DLLCACHE\cplexe.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 27097 c:\windows\SYSTEM32\DLLCACHE\country.sys
    + 2004-08-04 11:00 . 2010-03-11 12:38 17408 c:\windows\SYSTEM32\DLLCACHE\corpol.dll
    - 2009-06-29 16:12 . 2009-08-29 07:36 17408 c:\windows\SYSTEM32\DLLCACHE\corpol.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 13824 c:\windows\SYSTEM32\DLLCACHE\convert.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 66560 c:\windows\SYSTEM32\DLLCACHE\console.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 27648 c:\windows\SYSTEM32\DLLCACHE\conime.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 45056 c:\windows\SYSTEM32\DLLCACHE\confmrsl.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 97792 c:\windows\SYSTEM32\DLLCACHE\comrepl.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 17408 c:\windows\SYSTEM32\DLLCACHE\compact.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 15872 c:\windows\SYSTEM32\DLLCACHE\comp.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 32816 c:\windows\SYSTEM32\DLLCACHE\commdlg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 28160 c:\windows\SYSTEM32\DLLCACHE\comaddin.dll
    + 2008-08-30 02:15 . 2008-04-13 16:44 17920 c:\windows\SYSTEM32\DLLCACHE\cobramsg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 26624 c:\windows\SYSTEM32\DLLCACHE\cnvfat.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 32768 c:\windows\SYSTEM32\DLLCACHE\cnetcfg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 39424 c:\windows\SYSTEM32\DLLCACHE\cmutil.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 63488 c:\windows\SYSTEM32\DLLCACHE\cmstp.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 13312 c:\windows\SYSTEM32\DLLCACHE\cmsetacl.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 14336 c:\windows\SYSTEM32\DLLCACHE\cmpbk32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 39936 c:\windows\SYSTEM32\DLLCACHE\cmmon32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 25600 c:\windows\SYSTEM32\DLLCACHE\cmdl32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 15872 c:\windows\SYSTEM32\DLLCACHE\cmcfg32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 10752 c:\windows\SYSTEM32\DLLCACHE\clb.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 56832 c:\windows\SYSTEM32\DLLCACHE\cipher.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 69120 c:\windows\SYSTEM32\DLLCACHE\ciodm.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 11264 c:\windows\SYSTEM32\DLLCACHE\chkntfs.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 11776 c:\windows\SYSTEM32\DLLCACHE\chkdsk.exe
    + 2004-11-24 04:27 . 2004-08-04 11:00 80384 c:\windows\SYSTEM32\DLLCACHE\charmap.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 38912 c:\windows\SYSTEM32\DLLCACHE\cfgbkend.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 15872 c:\windows\SYSTEM32\DLLCACHE\cdmodem.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 27648 c:\windows\SYSTEM32\DLLCACHE\ccfgnt.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\cb32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 85504 c:\windows\SYSTEM32\DLLCACHE\catsrvps.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 50688 c:\windows\SYSTEM32\DLLCACHE\camocx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 19968 c:\windows\SYSTEM32\DLLCACHE\cacls.exe
    + 2010-01-13 14:01 . 2010-01-13 14:01 86016 c:\windows\SYSTEM32\DLLCACHE\cabview.dll
    + 2009-12-26 11:39 . 2004-08-04 11:00 10752 c:\windows\SYSTEM32\DLLCACHE\c_iscii.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 50688 c:\windows\SYSTEM32\DLLCACHE\btpanui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 30208 c:\windows\SYSTEM32\DLLCACHE\bthserv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 20992 c:\windows\SYSTEM32\DLLCACHE\bthci.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 21504 c:\windows\SYSTEM32\DLLCACHE\brpinfo.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 78336 c:\windows\SYSTEM32\DLLCACHE\browsewm.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 12288 c:\windows\SYSTEM32\DLLCACHE\bootvid.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 71680 c:\windows\SYSTEM32\DLLCACHE\blastcln.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 17408 c:\windows\SYSTEM32\DLLCACHE\bidispl.dll
    + 2004-11-24 04:27 . 2004-08-04 11:00 73216 c:\windows\SYSTEM32\DLLCACHE\avwav.dll
    + 2004-11-24 04:27 . 2004-08-04 11:00 16384 c:\windows\SYSTEM32\DLLCACHE\avmeter.dll
    - 2009-06-10 14:13 . 2009-06-10 14:13 84992 c:\windows\SYSTEM32\DLLCACHE\avifil32.dll
    + 2009-06-10 14:13 . 2009-11-27 16:07 84992 c:\windows\SYSTEM32\DLLCACHE\avifil32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 69584 c:\windows\SYSTEM32\DLLCACHE\avicap.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 11264 c:\windows\SYSTEM32\DLLCACHE\autolfn.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 80384 c:\windows\SYSTEM32\DLLCACHE\autodisc.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 14336 c:\windows\SYSTEM32\DLLCACHE\auditusr.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 12288 c:\windows\SYSTEM32\DLLCACHE\attrib.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 11264 c:\windows\SYSTEM32\DLLCACHE\atrace.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 34816 c:\windows\SYSTEM32\DLLCACHE\atmpvcno.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 30208 c:\windows\SYSTEM32\DLLCACHE\atmlib.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 11264 c:\windows\SYSTEM32\DLLCACHE\atmadm.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 13312 c:\windows\SYSTEM32\DLLCACHE\atkctrs.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 32768 c:\windows\SYSTEM32\DLLCACHE\ativtmxx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 25088 c:\windows\SYSTEM32\DLLCACHE\at.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 32768 c:\windows\SYSTEM32\DLLCACHE\asr_pfu.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 32256 c:\windows\SYSTEM32\DLLCACHE\asr_ldm.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 30208 c:\windows\SYSTEM32\DLLCACHE\asr_fmt.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 19456 c:\windows\SYSTEM32\DLLCACHE\arp.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 12498 c:\windows\SYSTEM32\DLLCACHE\append.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 70656 c:\windows\SYSTEM32\DLLCACHE\amstream.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 98304 c:\windows\SYSTEM32\DLLCACHE\ahui.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 24064 c:\windows\SYSTEM32\DLLCACHE\agtintl.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 20480 c:\windows\SYSTEM32\DLLCACHE\agt0c0a.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 20992 c:\windows\SYSTEM32\DLLCACHE\agt0816.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 19456 c:\windows\SYSTEM32\DLLCACHE\agt041f.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 19456 c:\windows\SYSTEM32\DLLCACHE\agt041d.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 19456 c:\windows\SYSTEM32\DLLCACHE\agt0419.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 20480 c:\windows\SYSTEM32\DLLCACHE\agt0416.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 19456 c:\windows\SYSTEM32\DLLCACHE\agt0415.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 19456 c:\windows\SYSTEM32\DLLCACHE\agt0414.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 20992 c:\windows\SYSTEM32\DLLCACHE\agt0413.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 20992 c:\windows\SYSTEM32\DLLCACHE\agt0410.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 19968 c:\windows\SYSTEM32\DLLCACHE\agt040e.dll
    + 2008-08-30 02:14 . 2007-04-02 18:26 19456 c:\windows\SYSTEM32\DLLCACHE\agt040d.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 21504 c:\windows\SYSTEM32\DLLCACHE\agt040c.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 19456 c:\windows\SYSTEM32\DLLCACHE\agt040b.dll
    + 2004-08-04 11:00 . 2008-04-13 17:32 19968 c:\windows\SYSTEM32\DLLCACHE\agt0409.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 22016 c:\windows\SYSTEM32\DLLCACHE\agt0408.dll
    + 2004-08-04 11:00 . 2007-04-02 18:26 21504 c:\windows\SYSTEM32\DLLCACHE\agt0407.dll
    + 2004-08-04 11:00 . 2007-04-02 18:25 19456 c:\windows\SYSTEM32\DLLCACHE\agt0406.dll
    + 2004-08-04 11:00 . 2007-04-02 18:25 19456 c:\windows\SYSTEM32\DLLCACHE\agt0405.dll
    + 2008-08-30 02:14 . 2007-04-02 18:25 19456 c:\windows\SYSTEM32\DLLCACHE\agt0401.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 44032 c:\windows\SYSTEM32\DLLCACHE\agentsr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 49152 c:\windows\SYSTEM32\DLLCACHE\agentmpx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 57344 c:\windows\SYSTEM32\DLLCACHE\agentdpv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 24064 c:\windows\SYSTEM32\DLLCACHE\agentanm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 68096 c:\windows\SYSTEM32\DLLCACHE\adsmsext.dll
    + 2004-08-04 11:00 . 2007-08-13 23:39 71680 c:\windows\SYSTEM32\DLLCACHE\admparse.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 64512 c:\windows\SYSTEM32\DLLCACHE\acctres.dll
    + 2004-08-04 11:00 . 2009-12-14 07:08 33280 c:\windows\SYSTEM32\csrsrv.dll
    + 2004-08-04 11:00 . 2010-01-13 14:01 86016 c:\windows\SYSTEM32\cabview.dll
    + 2009-12-26 11:39 . 2004-08-04 11:00 10752 c:\windows\SYSTEM32\c_iscii.dll
    - 2004-08-04 11:00 . 2009-06-10 14:13 84992 c:\windows\SYSTEM32\avifil32.dll
    + 2004-08-04 11:00 . 2009-11-27 16:07 84992 c:\windows\SYSTEM32\avifil32.dll
    + 2010-05-14 23:01 . 2010-05-14 23:01 87702 c:\windows\SYSTEM32\Adobe\Shockwave 11\uninstaller.exe
    - 2008-10-15 04:24 . 2008-08-06 20:21 94208 c:\windows\SYSTEM32\Adobe\Shockwave 11\SwMenu.dll
    + 2010-05-05 14:05 . 2010-05-05 14:05 94208 c:\windows\SYSTEM32\Adobe\Shockwave 11\SwMenu.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11 79488 c:\windows\SYSTEM32\Adobe\Shockwave 11\gtapi.dll
    + 2010-05-05 14:38 . 2010-05-05 14:38 65816 c:\windows\SYSTEM32\Adobe\Director\SWDNLD.EXE
    + 2008-08-30 02:14 . 2007-04-02 18:26 19456 c:\windows\MSAGENT\INTL\agt040d.dll
    + 2008-08-30 02:14 . 2007-04-02 18:25 19456 c:\windows\MSAGENT\INTL\agt0401.dll
    + 2010-01-08 02:57 . 2010-01-08 02:57 48128 c:\windows\Installer\c621f9.msi
    + 2009-11-24 22:07 . 2009-11-24 22:07 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2010-03-20 07:17 . 2010-03-20 07:17 13942 c:\windows\Installer\{3AA6F296-FD15-443F-B9B4-A09BD2D42489}\_DD0AF207D4A874420901D8.exe
    + 2010-03-20 07:17 . 2010-03-20 07:17 13942 c:\windows\Installer\{3AA6F296-FD15-443F-B9B4-A09BD2D42489}\_99314CAFC9219F21107B7E.exe
    + 2010-03-20 07:17 . 2010-03-20 07:17 10134 c:\windows\Installer\{3AA6F296-FD15-443F-B9B4-A09BD2D42489}\_8EBCB89061DF2505A18BE4.exe
    + 2010-03-20 07:17 . 2010-03-20 07:17 13942 c:\windows\Installer\{3AA6F296-FD15-443F-B9B4-A09BD2D42489}\_6FEFF9B68218417F98F549.exe
    + 2010-03-20 07:17 . 2010-03-20 07:17 13942 c:\windows\Installer\{3AA6F296-FD15-443F-B9B4-A09BD2D42489}\_449FB465BCB9E2B5E5ABB5.exe
    + 2009-12-22 00:09 . 2009-12-22 00:09 16832 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\ViewerPS.dll
    + 2009-12-22 05:57 . 2009-12-22 05:57 35760 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\reader_sl.exe
    + 2009-12-22 00:02 . 2009-12-22 00:02 79280 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\PDFPrevHndlr.dll
    + 2009-12-22 03:21 . 2009-12-22 03:21 99776 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\eula.exe
    + 2009-12-22 03:37 . 2009-12-22 03:37 27048 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\acrotextextractor.exe
    + 2009-12-21 22:39 . 2009-12-21 22:39 15288 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRd32Info.exe
    + 2009-12-21 22:27 . 2009-12-21 22:27 75200 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\acroiehelpershim.dll
    + 2009-12-21 22:27 . 2009-12-21 22:27 61888 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroIEHelper.dll
    + 2006-10-27 02:17 . 2006-10-27 02:17 11072 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XLCALL32.DLL
    + 2010-03-31 07:03 . 2010-01-05 10:00 44544 c:\windows\ie7updates\KB980182-IE7\pngfilt.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 52224 c:\windows\ie7updates\KB980182-IE7\msfeedsbs.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 27648 c:\windows\ie7updates\KB980182-IE7\jsproxy.dll
    + 2010-03-31 07:03 . 2009-12-31 15:33 13824 c:\windows\ie7updates\KB980182-IE7\ieudinit.exe
    + 2010-03-31 07:03 . 2010-01-05 10:00 44544 c:\windows\ie7updates\KB980182-IE7\iernonce.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 78336 c:\windows\ie7updates\KB980182-IE7\ieencode.dll
    + 2010-03-31 07:03 . 2009-12-31 15:33 70656 c:\windows\ie7updates\KB980182-IE7\ie4uinit.exe
    + 2010-03-31 07:03 . 2010-01-05 10:00 63488 c:\windows\ie7updates\KB980182-IE7\icardie.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 17408 c:\windows\ie7updates\KB980182-IE7\corpol.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 44544 c:\windows\ie7updates\KB978207-IE7\pngfilt.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 52224 c:\windows\ie7updates\KB978207-IE7\msfeedsbs.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 27648 c:\windows\ie7updates\KB978207-IE7\jsproxy.dll
    + 2010-01-22 08:02 . 2009-10-28 14:36 13824 c:\windows\ie7updates\KB978207-IE7\ieudinit.exe
    + 2010-01-22 08:02 . 2009-10-29 07:46 44544 c:\windows\ie7updates\KB978207-IE7\iernonce.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 78336 c:\windows\ie7updates\KB978207-IE7\ieencode.dll
    + 2010-01-22 08:02 . 2009-10-28 14:36 70656 c:\windows\ie7updates\KB978207-IE7\ie4uinit.exe
    + 2010-01-22 08:02 . 2009-10-29 07:46 63488 c:\windows\ie7updates\KB978207-IE7\icardie.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 17408 c:\windows\ie7updates\KB978207-IE7\corpol.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 44544 c:\windows\ie7updates\KB976325-IE7\pngfilt.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 52224 c:\windows\ie7updates\KB976325-IE7\msfeedsbs.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 27648 c:\windows\ie7updates\KB976325-IE7\jsproxy.dll
    + 2009-12-09 08:06 . 2009-08-28 10:28 13824 c:\windows\ie7updates\KB976325-IE7\ieudinit.exe
    + 2009-12-09 08:06 . 2009-08-29 07:36 44544 c:\windows\ie7updates\KB976325-IE7\iernonce.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 78336 c:\windows\ie7updates\KB976325-IE7\ieencode.dll
    + 2009-12-09 08:06 . 2009-08-28 10:28 70656 c:\windows\ie7updates\KB976325-IE7\ie4uinit.exe
    + 2009-12-09 08:06 . 2009-08-29 07:36 63488 c:\windows\ie7updates\KB976325-IE7\icardie.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 17408 c:\windows\ie7updates\KB976325-IE7\corpol.dll
    + 2009-11-27 17:11 . 2009-11-27 17:11 17920 c:\windows\Driver Cache\I386\msyuv.dll
    + 2009-11-27 16:07 . 2009-11-27 16:07 48128 c:\windows\Driver Cache\I386\iyuv_32.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 16384 c:\windows\ASSEMBLY\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
    - 2005-11-11 22:03 . 2005-11-11 22:03 16384 c:\windows\ASSEMBLY\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 11544 c:\windows\ASSEMBLY\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 12080 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 12096 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 12104 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 12104 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Publisher.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 12112 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 12096 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
    + 2010-01-08 03:00 . 2010-01-08 03:00 12096 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
    + 2010-01-08 03:00 . 2010-01-08 03:00 12104 c:\windows\ASSEMBLY\GAC\Policy.11.0.Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Access.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 64288 c:\windows\ASSEMBLY\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 13312 c:\windows\ASSEMBLY\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll
    + 2010-01-08 03:01 . 2010-01-08 03:01 20280 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
    + 2010-01-08 03:00 . 2010-01-08 03:00 80696 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.Access.Dao\12.0.0.0__71e9bce111e9429c\Microsoft.Office.interop.access.dao.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 65536 c:\windows\ASSEMBLY\GAC\dao\10.0.4504.0__31bf3856ad364e35\DAO.DLL
    - 2005-11-11 22:03 . 2005-11-11 22:03 65536 c:\windows\ASSEMBLY\GAC\dao\10.0.4504.0__31bf3856ad364e35\DAO.DLL
    + 2010-04-14 07:02 . 2008-04-14 00:11 84480 c:\windows\$NtUninstallKB979309$\cabview.dll
    + 2010-02-24 11:59 . 2009-10-28 15:07 46080 c:\windows\$NtUninstallKB979306$\tzchange.exe
    + 2010-02-24 11:59 . 2010-01-23 10:40 16896 c:\windows\$NtUninstallKB979306$\spuninst\tzchange.dll
    + 2010-02-10 08:08 . 2008-04-14 00:11 32256 c:\windows\$NtUninstallKB978037$\csrsrv.dll
    + 2010-02-10 08:04 . 2004-08-04 11:00 25600 c:\windows\$NtUninstallKB977914$\msvidc32.dll
    + 2010-02-10 08:04 . 2008-04-14 00:12 11264 c:\windows\$NtUninstallKB977914$\msrle32.dll
    + 2010-02-10 08:04 . 2008-04-14 01:11 47616 c:\windows\$NtUninstallKB977914$\iyuv_32.dll
    + 2010-02-10 08:04 . 2009-06-10 14:13 84992 c:\windows\$NtUninstallKB977914$\avifil32.dll
    + 2009-11-24 22:09 . 2009-07-14 11:03 46080 c:\windows\$NtUninstallKB976098-v2$\tzchange.exe
    + 2009-11-24 22:09 . 2009-10-29 02:03 16896 c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll
    + 2010-02-10 08:07 . 2008-04-14 01:12 16896 c:\windows\$NtUninstallKB975560$\msyuv.dll
    + 2009-12-09 08:08 . 2008-04-14 00:12 79872 c:\windows\$NtUninstallKB974318$\raschap.dll
    + 2010-01-13 08:06 . 2009-06-16 14:36 81920 c:\windows\$NtUninstallKB972270$\fontsub.dll
    + 2009-12-09 08:08 . 2008-04-14 00:12 75776 c:\windows\$NtUninstallKB970430$\strmfilt.dll
    + 2009-12-09 08:08 . 2008-04-14 00:11 24576 c:\windows\$NtUninstallKB970430$\httpapi.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981349\update\spcustom.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981349\spmsg.dll
    + 2010-03-31 07:03 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB980182-IE7\update\spcustom.dll
    + 2010-03-31 07:03 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB980182-IE7\spmsg.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 44544 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\pngfilt.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 52224 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\msfeedsbs.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 27648 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\jsproxy.dll
    + 2010-03-10 14:05 . 2010-03-10 14:05 13824 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieudinit.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 44544 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iernonce.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 78336 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieencode.dll
    + 2010-03-10 14:05 . 2010-03-10 14:05 70656 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ie4uinit.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 63488 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\icardie.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 17408 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\corpol.dll
    + 2010-04-15 07:10 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB979683\update\spcustom.dll
    + 2010-04-15 01:19 . 2010-03-05 14:54 16896 c:\windows\$hf_mig$\KB979683\update\mpsyschk.dll
    + 2010-04-15 07:10 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB979683\spmsg.dll
    + 2010-04-14 07:02 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB979309\update\spcustom.dll
    + 2010-04-14 07:02 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB979309\spmsg.dll
    + 2010-01-13 13:48 . 2010-01-13 13:48 86016 c:\windows\$hf_mig$\KB979309\SP3QFE\cabview.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978706\update\spcustom.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978706\spmsg.dll
    + 2010-04-14 07:03 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB978601\update\spcustom.dll
    + 2010-04-14 07:03 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB978601\spmsg.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978338\update\spcustom.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978338\spmsg.dll
    + 2010-02-10 08:16 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978262\update\spcustom.dll
    + 2010-02-10 08:16 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978262\spmsg.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978251\update\spcustom.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978251\spmsg.dll
    + 2010-01-22 08:03 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978207-IE7\update\spcustom.dll
    + 2010-01-22 08:03 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978207-IE7\spmsg.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 44544 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\pngfilt.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 52224 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\msfeedsbs.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 27648 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\jsproxy.dll
    + 2010-01-01 06:55 . 2010-01-01 06:55 13824 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieudinit.exe
    + 2010-01-05 09:57 . 2010-01-05 09:57 44544 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\iernonce.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 78336 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieencode.dll
    + 2010-01-01 06:55 . 2010-01-01 06:55 70656 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ie4uinit.exe
    + 2010-01-05 09:57 . 2010-01-05 09:57 63488 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\icardie.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 17408 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\corpol.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB978037\update\spcustom.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB978037\spmsg.dll
    + 2009-12-14 07:10 . 2009-12-14 07:10 33280 c:\windows\$hf_mig$\KB978037\SP3QFE\csrsrv.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977914\update\spcustom.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977914\spmsg.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28 28672 c:\windows\$hf_mig$\KB977914\SP3QFE\msvidc32.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28 11264 c:\windows\$hf_mig$\KB977914\SP3QFE\msrle32.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28 48128 c:\windows\$hf_mig$\KB977914\SP3QFE\iyuv_32.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28 84992 c:\windows\$hf_mig$\KB977914\SP3QFE\avifil32.dll
    + 2010-04-15 07:06 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977816\update\spcustom.dll
    + 2010-04-15 07:06 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977816\spmsg.dll
    + 2010-02-10 08:03 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB977165\update\spcustom.dll
    + 2010-02-10 08:03 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB977165\spmsg.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB976325-IE7\update\spcustom.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB976325-IE7\spmsg.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 44544 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\pngfilt.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 52224 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\msfeedsbs.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 27648 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\jsproxy.dll
    + 2009-10-28 14:05 . 2009-10-28 14:05 13824 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieudinit.exe
    + 2009-10-29 07:45 . 2009-10-29 07:45 44544 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\iernonce.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 78336 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieencode.dll
    + 2009-10-28 14:05 . 2009-10-28 14:05 70656 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ie4uinit.exe
    + 2009-10-29 07:45 . 2009-10-29 07:45 63488 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\icardie.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 17408 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\corpol.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975713\update\spcustom.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975713\spmsg.dll
    + 2010-03-11 08:09 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB975561\update\spcustom.dll
    + 2010-03-11 08:09 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB975561\spmsg.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975560\update\spcustom.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975560\spmsg.dll
    + 2009-11-27 17:23 . 2009-11-27 17:23 17920 c:\windows\$hf_mig$\KB975560\SP3QFE\msyuv.dll
    + 2009-12-09 08:05 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974392\update\spcustom.dll
    + 2009-12-09 08:05 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB974392\spmsg.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974318\update\spcustom.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB974318\spmsg.dll
    + 2009-10-12 13:28 . 2009-10-12 13:28 79872 c:\windows\$hf_mig$\KB974318\SP3QFE\raschap.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973904\update\spcustom.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973904\spmsg.dll
    + 2009-11-24 22:09 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973687\update\spcustom.dll
    + 2009-11-24 22:09 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973687\spmsg.dll
    + 2010-01-13 08:06 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB972270\update\spcustom.dll
    + 2010-01-13 08:06 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB972270\spmsg.dll
    + 2010-01-13 07:07 . 2009-10-15 16:39 81920 c:\windows\$hf_mig$\KB972270\SP3QFE\fontsub.dll
    + 2009-12-09 08:05 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971737\update\spcustom.dll
    + 2009-12-09 08:05 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971737\spmsg.dll
    + 2010-02-10 08:15 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971468\update\spcustom.dll
    + 2010-02-10 08:15 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971468\spmsg.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB970430\update\spcustom.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB970430\spmsg.dll
    + 2009-10-21 05:40 . 2009-10-21 05:40 75776 c:\windows\$hf_mig$\KB970430\SP3QFE\strmfilt.dll
    + 2009-10-21 05:40 . 2009-10-21 05:40 25088 c:\windows\$hf_mig$\KB970430\SP3QFE\httpapi.dll
    + 2010-01-13 08:06 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB955759\update\spcustom.dll
    + 2010-01-13 08:06 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB955759\spmsg.dll
    + 2004-08-04 11:00 . 2009-11-27 16:07 8704 c:\windows\SYSTEM32\tsbyuv.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 8560 c:\windows\SYSTEM32\SPOOL\DRIVERS\x64\3\udchlp.exe
    + 2010-01-24 18:56 . 2010-01-24 18:56 8560 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\udchlp.exe
    + 2009-12-31 11:59 . 2009-06-19 23:51 9728 c:\windows\SYSTEM32\PCCLPFR.DLL
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdvntc.dll
    + 2009-12-26 11:39 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdusa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdurdu.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\kbdth3.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\kbdth2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdth1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdth0.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdsyr2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdsyr1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdintel.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdintam.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\kbdinpun.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdinmar.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdinkan.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdinhin.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdinguj.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdindev.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdheb.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\kbdgeo.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbdfa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbddiv2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbddiv1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\kbdarmw.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\kbdarme.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbda3.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbda2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\kbda1.dll
    + 2009-12-26 11:39 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\ftlx041e.dll
     
  10. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    + 2004-08-04 11:00 . 2004-08-04 11:00 7168 c:\windows\SYSTEM32\DLLCACHE\wshnetbs.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\wshatm.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3200 c:\windows\SYSTEM32\DLLCACHE\wowfax.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 4096 c:\windows\SYSTEM32\DLLCACHE\wmvdmoe2.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 4096 c:\windows\SYSTEM32\DLLCACHE\wmvdmod.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 4096 c:\windows\SYSTEM32\DLLCACHE\wmsdmoe2.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 4096 c:\windows\SYSTEM32\DLLCACHE\wmsdmod.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 5632 c:\windows\SYSTEM32\DLLCACHE\wmm2res2.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 7680 c:\windows\SYSTEM32\DLLCACHE\wmm2ext.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 4096 c:\windows\SYSTEM32\DLLCACHE\wmm2eres.dll
    + 2004-08-04 11:00 . 2008-04-13 17:10 6656 c:\windows\SYSTEM32\DLLCACHE\wmiapres.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 5632 c:\windows\SYSTEM32\DLLCACHE\winver.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\winnls.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\winhstb.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\winfax.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\wifeman.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 4608 c:\windows\SYSTEM32\DLLCACHE\vjoy.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 2176 c:\windows\SYSTEM32\DLLCACHE\vga.drv
    + 2004-08-04 11:00 . 2004-08-04 11:00 9008 c:\windows\SYSTEM32\DLLCACHE\ver.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7680 c:\windows\SYSTEM32\DLLCACHE\vcdex.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 4096 c:\windows\SYSTEM32\DLLCACHE\unlodctr.exe
    + 2004-08-04 11:00 . 2009-11-27 16:07 8704 c:\windows\SYSTEM32\DLLCACHE\tsbyuv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 7168 c:\windows\SYSTEM32\DLLCACHE\tlntsvrp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 4048 c:\windows\SYSTEM32\DLLCACHE\timer.drv
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\tapiperf.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3072 c:\windows\SYSTEM32\DLLCACHE\systray.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 3360 c:\windows\SYSTEM32\DLLCACHE\system.drv
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\svcpack.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\subst.exe
    + 2001-08-18 04:36 . 2001-08-18 04:36 8192 c:\windows\SYSTEM32\DLLCACHE\streamci.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9728 c:\windows\SYSTEM32\DLLCACHE\sprestrt.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 1744 c:\windows\SYSTEM32\DLLCACHE\sound.drv
    + 2004-08-04 11:00 . 2008-04-14 00:12 8192 c:\windows\SYSTEM32\DLLCACHE\smbinst.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\skdll.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\shell.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9728 c:\windows\SYSTEM32\DLLCACHE\sfc.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 4569 c:\windows\SYSTEM32\DLLCACHE\secupd.dat
    + 2004-08-04 11:00 . 2008-04-14 00:12 9216 c:\windows\SYSTEM32\DLLCACHE\scrnsave.scr
    + 2004-08-04 11:00 . 2004-08-04 11:00 9728 c:\windows\SYSTEM32\DLLCACHE\rsvpperf.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\routetab.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3072 c:\windows\SYSTEM32\DLLCACHE\rnr20.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9728 c:\windows\SYSTEM32\DLLCACHE\reset.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 4608 c:\windows\SYSTEM32\DLLCACHE\regwiz.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 3584 c:\windows\SYSTEM32\DLLCACHE\regedt32.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 3338 c:\windows\SYSTEM32\DLLCACHE\redir.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 7168 c:\windows\SYSTEM32\DLLCACHE\recover.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 4096 c:\windows\SYSTEM32\DLLCACHE\rdpcfgex.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\qosname.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3708 c:\windows\SYSTEM32\DLLCACHE\pubprn.vbs
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\psnppagn.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 9216 c:\windows\SYSTEM32\DLLCACHE\proxycfg.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\print.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\perfnw.dll
    + 2004-08-11 16:31 . 2004-08-11 16:31 4627 c:\windows\SYSTEM32\DLLCACHE\oembios.dat
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\nwevent.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3252 c:\windows\SYSTEM32\DLLCACHE\nw16.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 7052 c:\windows\SYSTEM32\DLLCACHE\nlsfunc.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 4096 c:\windows\SYSTEM32\DLLCACHE\nddeapir.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 7680 c:\windows\SYSTEM32\DLLCACHE\ncxpnt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 4096 c:\windows\SYSTEM32\DLLCACHE\mtxex.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\msswchx.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 7168 c:\windows\SYSTEM32\DLLCACHE\msr2cenu.dll
    + 2004-08-04 11:00 . 2008-04-14 00:10 4126 c:\windows\SYSTEM32\DLLCACHE\msdxmlc.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 4096 c:\windows\SYSTEM32\DLLCACHE\msdaurl.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 4096 c:\windows\SYSTEM32\DLLCACHE\msdasc.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 4096 c:\windows\SYSTEM32\DLLCACHE\msdaer.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 4096 c:\windows\SYSTEM32\DLLCACHE\msdaenum.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 4096 c:\windows\SYSTEM32\DLLCACHE\msdadc.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7168 c:\windows\SYSTEM32\DLLCACHE\mscat32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 4608 c:\windows\SYSTEM32\DLLCACHE\mqsvc.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\mqperf.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 4096 c:\windows\SYSTEM32\DLLCACHE\mpg4dmod.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 4096 c:\windows\SYSTEM32\DLLCACHE\mp4sdmod.dll
    + 2006-05-10 02:26 . 2006-10-19 02:47 4096 c:\windows\SYSTEM32\DLLCACHE\mp43dmod.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 2032 c:\windows\SYSTEM32\DLLCACHE\mouse.drv
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\mountvol.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\mll_qic.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7680 c:\windows\SYSTEM32\DLLCACHE\mll_mtf.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3584 c:\windows\SYSTEM32\DLLCACHE\mll_hp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7680 c:\windows\SYSTEM32\DLLCACHE\mciole32.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\mciole16.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 4608 c:\windows\SYSTEM32\DLLCACHE\mchgrcoi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\mag_hook.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9936 c:\windows\SYSTEM32\DLLCACHE\lzexpand.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\lprmonui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\lpr.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\lpq.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\lodctr.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 9728 c:\windows\SYSTEM32\DLLCACHE\label.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 2000 c:\windows\SYSTEM32\DLLCACHE\keyboard.drv
    + 2004-08-04 11:00 . 2004-08-04 11:00 7040 c:\windows\SYSTEM32\DLLCACHE\kdcom.dll
    + 2004-08-04 11:00 . 2008-04-13 18:31 7424 c:\windows\SYSTEM32\DLLCACHE\kd1394.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdycl.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdycc.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdvntc.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbduzb.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdusx.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdusr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdusl.dll
    + 2009-12-26 11:39 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdusa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdurdu.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdur.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 7168 c:\windows\SYSTEM32\DLLCACHE\kbdukx.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbduk.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdtuq.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdtuf.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdth3.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdth2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdth1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdth0.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdsyr2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdsyr1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdsw.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 7680 c:\windows\SYSTEM32\DLLCACHE\kbdsmsno.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 7680 c:\windows\SYSTEM32\DLLCACHE\kbdsmsfi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdsl1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdsl.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdsg.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdsf.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdru1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdru.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdro.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdpo.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdpl1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdpl.dll
    + 2008-08-30 02:15 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdpash.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 7168 c:\windows\SYSTEM32\DLLCACHE\kbdno1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdno.dll
    + 2008-08-30 02:15 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdnepr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 7168 c:\windows\SYSTEM32\DLLCACHE\kbdnec.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdne.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdmon.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdmlt48.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdmlt47.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 5632 c:\windows\SYSTEM32\DLLCACHE\kbdmaori.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdmac.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdlv1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdlv.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdlt1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdlt.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdla.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdkyr.dll
    + 2005-06-30 04:52 . 2001-08-18 02:36 8192 c:\windows\SYSTEM32\DLLCACHE\kbdkor.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdkaz.dll
    + 2005-06-30 04:52 . 2001-08-18 02:36 8704 c:\windows\SYSTEM32\DLLCACHE\kbdjpn.dll
    + 2008-08-30 02:15 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdiultn.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdit142.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdit.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdir.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdintel.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdintam.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdinpun.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdinmar.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 6656 c:\windows\SYSTEM32\DLLCACHE\kbdinmal.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdinkan.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdinhin.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdinguj.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdindev.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdinben.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdinbe1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdic.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdhu1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdhu.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\kbdhept.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdhela3.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdhela2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdheb.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdhe319.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdhe220.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdhe.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdgr1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdgr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdgkl.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\kbdgeo.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdgae.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdfr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdfo.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 7168 c:\windows\SYSTEM32\DLLCACHE\kbdfi1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdfi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdfc.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdfa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdest.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdes.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\kbddv.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbddiv2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbddiv1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdda.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdcz2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdcz1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7168 c:\windows\SYSTEM32\DLLCACHE\kbdcz.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdcr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7680 c:\windows\SYSTEM32\DLLCACHE\kbdcan.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdca.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdbu.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdbr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdblr.dll
    + 2008-08-30 02:15 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbdbhc.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdbene.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\kbdbe.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdazel.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbdaze.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\kbdarmw.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\kbdarme.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6656 c:\windows\SYSTEM32\DLLCACHE\kbdal.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbda3.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbda2.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 5632 c:\windows\SYSTEM32\DLLCACHE\kbda1.dll
    + 2005-06-30 04:52 . 2008-04-14 00:09 6144 c:\windows\SYSTEM32\DLLCACHE\kbd106.dll
    + 2005-06-30 04:52 . 2001-08-17 18:55 5632 c:\windows\SYSTEM32\DLLCACHE\kbd103.dll
    + 2005-06-30 04:52 . 2001-08-17 18:55 6144 c:\windows\SYSTEM32\DLLCACHE\kbd101c.dll
    + 2005-06-30 04:52 . 2001-08-17 18:55 6144 c:\windows\SYSTEM32\DLLCACHE\kbd101b.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 4096 c:\windows\SYSTEM32\DLLCACHE\iprtprio.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3584 c:\windows\SYSTEM32\DLLCACHE\iprop.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\iissuba.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 8192 c:\windows\SYSTEM32\DLLCACHE\igmpagnt.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7680 c:\windows\SYSTEM32\DLLCACHE\hostname.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 4768 c:\windows\SYSTEM32\DLLCACHE\himem.sys
    + 2004-08-04 11:00 . 2008-04-14 00:11 7168 c:\windows\SYSTEM32\DLLCACHE\hccoin.dll
    + 2004-08-04 11:00 . 2006-12-31 01:26 9728 c:\windows\SYSTEM32\DLLCACHE\gpkrsrc.dll
    + 2009-12-26 11:39 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\ftlx041e.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 6144 c:\windows\SYSTEM32\DLLCACHE\fsconins.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 9344 c:\windows\SYSTEM32\DLLCACHE\framebuf.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 7680 c:\windows\SYSTEM32\DLLCACHE\forcedos.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 3072 c:\windows\SYSTEM32\DLLCACHE\fixmapi.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\finger.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 9216 c:\windows\SYSTEM32\DLLCACHE\find.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 8424 c:\windows\SYSTEM32\DLLCACHE\exe2bin.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 8704 c:\windows\SYSTEM32\DLLCACHE\eventvwr.exe
    + 2004-08-04 11:00 . 2008-04-13 17:09 4096 c:\windows\SYSTEM32\DLLCACHE\dsprpres.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 4656 c:\windows\SYSTEM32\DLLCACHE\ds16gt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 3072 c:\windows\SYSTEM32\DLLCACHE\dpnlobby.dll
    + 2004-08-04 11:00 . 2008-04-14 00:09 3072 c:\windows\SYSTEM32\DLLCACHE\dpnaddr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 4608 c:\windows\SYSTEM32\DLLCACHE\dllhst3g.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 6144 c:\windows\SYSTEM32\DLLCACHE\dcomcnfg.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 6144 c:\windows\SYSTEM32\DLLCACHE\comrereg.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 9728 c:\windows\SYSTEM32\DLLCACHE\comrepl.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 3584 c:\windows\SYSTEM32\DLLCACHE\comcat.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 7680 c:\windows\SYSTEM32\DLLCACHE\ckcnv.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 8192 c:\windows\SYSTEM32\DLLCACHE\cidaemon.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 5120 c:\windows\SYSTEM32\DLLCACHE\bootvrfy.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 4608 c:\windows\SYSTEM32\DLLCACHE\bootok.exe
    + 2008-08-30 02:15 . 2008-04-14 00:11 7168 c:\windows\SYSTEM32\DLLCACHE\bitsprx4.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 8704 c:\windows\SYSTEM32\DLLCACHE\batt.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 7168 c:\windows\SYSTEM32\DLLCACHE\asferror.dll
    - 2006-05-15 13:18 . 2006-10-19 02:47 7168 c:\windows\SYSTEM32\DLLCACHE\asferror.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 9029 c:\windows\SYSTEM32\DLLCACHE\ansi.sys
    + 2004-08-04 11:00 . 2008-04-14 00:12 4096 c:\windows\SYSTEM32\DLLCACHE\actmovie.exe
    - 2008-10-15 04:24 . 2008-08-06 20:22 9216 c:\windows\SYSTEM32\Adobe\Shockwave 11\DynaPlayer.dll
    + 2010-05-05 14:07 . 2010-05-05 14:07 9216 c:\windows\SYSTEM32\Adobe\Shockwave 11\DynaPlayer.dll
    + 2009-11-27 16:07 . 2009-11-27 16:07 8704 c:\windows\Driver Cache\I386\tsbyuv.dll
    - 2005-11-11 22:03 . 2005-11-11 22:03 4096 c:\windows\ASSEMBLY\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 4096 c:\windows\ASSEMBLY\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 4608 c:\windows\ASSEMBLY\GAC\Extensibility\7.0.3300.0__b03f5f7f11d50a3a\extensibility.dll
    + 2010-02-10 08:04 . 2001-08-18 03:36 8192 c:\windows\$NtUninstallKB977914$\tsbyuv.dll
    + 2009-11-27 16:28 . 2009-11-27 16:28 8704 c:\windows\$hf_mig$\KB977914\SP3QFE\tsbyuv.dll
    + 2009-07-12 06:12 . 2009-07-12 06:12 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
    + 2009-07-12 06:09 . 2009-07-12 06:09 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
    + 2009-07-12 06:08 . 2009-07-12 06:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
    + 2006-10-26 18:45 . 2006-10-26 18:45 293376 c:\windows\SYSTEM32\WISPTIS.EXE
    + 2004-08-04 11:00 . 2009-12-24 06:59 177664 c:\windows\SYSTEM32\wintrust.dll
    + 2004-08-04 11:00 . 2009-08-25 09:17 354816 c:\windows\SYSTEM32\winhttp.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 233472 c:\windows\SYSTEM32\webcheck.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 233472 c:\windows\SYSTEM32\webcheck.dll
    + 2004-11-28 22:24 . 1998-04-24 06:00 368912 c:\windows\SYSTEM32\VBAR332.DLL
    - 2004-11-28 22:24 . 1998-05-18 07:06 368912 c:\windows\SYSTEM32\VBAR332.DLL
    - 2004-08-04 11:00 . 2009-08-29 07:36 105984 c:\windows\SYSTEM32\url.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 105984 c:\windows\SYSTEM32\url.dll
    + 2009-12-31 11:59 . 2009-11-11 19:50 311296 c:\windows\SYSTEM32\TubeFinder.exe
    + 2009-12-26 11:39 . 2004-08-04 11:00 185344 c:\windows\SYSTEM32\Thawbrkr.dll
    - 2004-08-04 11:00 . 2009-06-16 14:36 119808 c:\windows\SYSTEM32\t2embed.dll
    + 2004-08-04 11:00 . 2009-10-15 16:28 119808 c:\windows\SYSTEM32\t2embed.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 459632 c:\windows\SYSTEM32\SPOOL\DRIVERS\x64\3\udcdrv.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 177552 c:\windows\SYSTEM32\SPOOL\DRIVERS\x64\3\udc_inst.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 391024 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\udcdrv.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 177552 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\udc_inst.dll
    + 2010-01-24 19:05 . 2010-01-19 22:12 544456 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\dopdfui7.dll
    + 2010-01-24 19:05 . 2010-01-19 22:12 596680 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\dopdfpr7.dll
    + 2010-01-24 19:05 . 2010-01-19 22:12 770760 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\dopdfcl7.exe
    - 2004-08-04 11:00 . 2008-04-14 00:12 474112 c:\windows\SYSTEM32\shlwapi.dll
    + 2004-08-04 11:00 . 2009-12-08 09:23 474112 c:\windows\SYSTEM32\shlwapi.dll
    + 2009-11-29 04:57 . 2010-02-18 08:18 237568 c:\windows\SYSTEM32\rmc_rtspdl.dll
    + 2009-11-29 04:57 . 2010-02-18 08:18 156672 c:\windows\SYSTEM32\rmc_fixasf.exe
    + 2004-08-04 11:00 . 2009-10-12 13:38 149504 c:\windows\SYSTEM32\rastls.dll
    + 2004-08-24 21:04 . 2009-04-28 20:20 436720 c:\windows\SYSTEM32\PxWave.dll
    + 2004-08-24 21:04 . 2009-04-28 20:20 219632 c:\windows\SYSTEM32\pxmas.dll
    + 2004-09-07 07:01 . 2009-04-28 20:20 551408 c:\windows\SYSTEM32\pxdrv.dll
    + 2008-12-15 21:50 . 2009-04-28 20:20 129520 c:\windows\SYSTEM32\pxafs.dll
    + 2004-08-24 21:05 . 2009-04-28 20:20 670192 c:\windows\SYSTEM32\Px.dll
    + 2004-11-18 04:21 . 2010-03-14 15:41 442466 c:\windows\SYSTEM32\PERFH009.DAT
    - 2004-11-18 04:21 . 2009-11-01 19:16 442466 c:\windows\SYSTEM32\PERFH009.DAT
    + 2004-08-04 11:00 . 2010-03-11 12:38 102912 c:\windows\SYSTEM32\occache.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 102912 c:\windows\SYSTEM32\occache.dll
    + 2004-08-04 11:00 . 2009-10-13 10:30 270336 c:\windows\SYSTEM32\oakley.dll
    - 2004-08-04 11:00 . 2008-04-14 00:12 270336 c:\windows\SYSTEM32\oakley.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 671232 c:\windows\SYSTEM32\mstime.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 671232 c:\windows\SYSTEM32\mstime.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 193024 c:\windows\SYSTEM32\msrating.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 193024 c:\windows\SYSTEM32\msrating.dll
    - 2004-11-24 04:31 . 2008-04-14 00:12 343040 c:\windows\SYSTEM32\mspaint.exe
    + 2004-11-24 04:31 . 2009-12-16 18:43 343040 c:\windows\SYSTEM32\mspaint.exe
    + 2004-08-04 11:00 . 2010-03-11 12:38 477696 c:\windows\SYSTEM32\mshtmled.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 477696 c:\windows\SYSTEM32\mshtmled.dll
    - 2004-08-04 11:00 . 2008-04-14 00:12 294912 c:\windows\SYSTEM32\msh263.drv
    + 2004-08-04 11:00 . 2008-04-14 01:12 294912 c:\windows\SYSTEM32\msh263.drv
    - 2007-08-13 23:54 . 2009-08-29 07:36 459264 c:\windows\SYSTEM32\msfeeds.dll
    + 2007-08-13 23:54 . 2010-03-11 12:38 459264 c:\windows\SYSTEM32\msfeeds.dll
    + 2004-08-04 11:00 . 2003-03-31 13:00 924432 c:\windows\SYSTEM32\MFC40.DLL
    - 2004-08-04 11:00 . 2004-08-04 11:00 924432 c:\windows\SYSTEM32\MFC40.DLL
    + 2006-10-26 18:45 . 2006-10-26 18:45 207360 c:\windows\SYSTEM32\INKED.DLL
    + 2004-08-04 11:00 . 2010-01-29 15:01 691712 c:\windows\SYSTEM32\inetcomm.dll
    - 2004-08-04 11:00 . 2008-04-11 19:04 691712 c:\windows\SYSTEM32\inetcomm.dll
    + 2007-08-13 23:34 . 2010-03-11 12:38 268288 c:\windows\SYSTEM32\iertutil.dll
    - 2007-08-13 23:34 . 2009-08-29 07:36 268288 c:\windows\SYSTEM32\iertutil.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 192512 c:\windows\SYSTEM32\iepeers.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 385024 c:\windows\SYSTEM32\iedkcs32.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 385024 c:\windows\SYSTEM32\iedkcs32.dll
     
  11. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    - 2007-07-11 17:27 . 2009-08-29 07:36 380928 c:\windows\SYSTEM32\ieapfltr.dll
    + 2007-07-11 17:27 . 2010-03-11 12:38 380928 c:\windows\SYSTEM32\ieapfltr.dll
    - 2004-08-04 11:00 . 2009-08-27 05:18 161792 c:\windows\SYSTEM32\ieakui.dll
    + 2004-08-04 11:00 . 2010-02-23 05:18 161792 c:\windows\SYSTEM32\ieakui.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 230400 c:\windows\SYSTEM32\ieaksie.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 230400 c:\windows\SYSTEM32\ieaksie.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 153088 c:\windows\SYSTEM32\ieakeng.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 153088 c:\windows\SYSTEM32\ieakeng.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 285184 c:\windows\SYSTEM32\fxscomex.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 451584 c:\windows\SYSTEM32\fxsapi.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 133120 c:\windows\SYSTEM32\extmgr.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 133120 c:\windows\SYSTEM32\extmgr.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 214528 c:\windows\SYSTEM32\dxtrans.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 214528 c:\windows\SYSTEM32\dxtrans.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 347136 c:\windows\SYSTEM32\dxtmsft.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 347136 c:\windows\SYSTEM32\dxtmsft.dll
    + 2010-03-20 11:46 . 2010-04-13 02:44 107368 c:\windows\SYSTEM32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
    + 2004-08-04 11:00 . 2010-02-11 12:02 226880 c:\windows\SYSTEM32\DRIVERS\tcpip6.sys
    + 2004-08-04 11:00 . 2009-12-31 16:50 353792 c:\windows\SYSTEM32\DRIVERS\srv.sys
    + 2010-04-13 08:04 . 2010-04-13 02:45 308272 c:\windows\SYSTEM32\DRIVERS\N360\0308000.029\srtsp.sys
    + 2004-08-04 11:00 . 2009-12-04 18:22 455424 c:\windows\SYSTEM32\DRIVERS\mrxsmb.sys
    - 1980-01-01 06:00 . 2008-04-13 19:16 141056 c:\windows\SYSTEM32\DRIVERS\ks.sys
    + 1980-01-01 06:00 . 2008-04-13 20:16 141056 c:\windows\SYSTEM32\DRIVERS\ks.sys
    + 2004-08-04 11:00 . 2009-10-20 16:20 265728 c:\windows\SYSTEM32\DRIVERS\http.sys
    + 2005-05-17 00:25 . 2008-04-13 17:39 689152 c:\windows\SYSTEM32\DLLCACHE\xpsp3res.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 174200 c:\windows\SYSTEM32\DLLCACHE\xenroll.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 108032 c:\windows\SYSTEM32\DLLCACHE\wshbth.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 604160 c:\windows\SYSTEM32\DLLCACHE\wsecedit.dll
    - 2008-12-15 22:58 . 2008-05-08 11:24 155648 c:\windows\SYSTEM32\DLLCACHE\wscript.exe
    + 2004-08-04 11:00 . 2008-05-08 11:24 155648 c:\windows\SYSTEM32\DLLCACHE\wscript.exe
    - 2009-04-15 14:23 . 2008-04-21 12:08 215552 c:\windows\SYSTEM32\DLLCACHE\wordpad.exe
    + 2007-05-12 23:15 . 2008-04-21 12:08 215552 c:\windows\SYSTEM32\DLLCACHE\wordpad.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 303616 c:\windows\SYSTEM32\DLLCACHE\wmstream.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 115200 c:\windows\SYSTEM32\DLLCACHE\wmsdmoe.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 325632 c:\windows\SYSTEM32\DLLCACHE\wmm2fxb.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 502272 c:\windows\SYSTEM32\DLLCACHE\wmm2fxa.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 402432 c:\windows\SYSTEM32\DLLCACHE\wmm2filt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 167936 c:\windows\SYSTEM32\DLLCACHE\wmm2ae.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 132096 c:\windows\SYSTEM32\DLLCACHE\wmipdskq.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 157184 c:\windows\SYSTEM32\DLLCACHE\wmidx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 140800 c:\windows\SYSTEM32\DLLCACHE\wmidcprv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 358912 c:\windows\SYSTEM32\DLLCACHE\wmic.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 196608 c:\windows\SYSTEM32\DLLCACHE\wmiadap.exe
    + 2009-12-24 06:59 . 2009-12-24 06:59 177664 c:\windows\SYSTEM32\DLLCACHE\wintrust.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 146432 c:\windows\SYSTEM32\DLLCACHE\winspool.drv
    + 2004-08-04 11:00 . 2008-04-14 00:11 756224 c:\windows\SYSTEM32\DLLCACHE\winntbbu.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 832512 c:\windows\SYSTEM32\DLLCACHE\wininet.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 832512 c:\windows\SYSTEM32\DLLCACHE\wininet.dll
    + 2008-12-16 12:30 . 2009-08-25 09:17 354816 c:\windows\SYSTEM32\DLLCACHE\winhttp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 145408 c:\windows\SYSTEM32\DLLCACHE\wiavusd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 111104 c:\windows\SYSTEM32\DLLCACHE\wiavideo.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 124416 c:\windows\SYSTEM32\DLLCACHE\wiadss.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 433664 c:\windows\SYSTEM32\DLLCACHE\wiaacmgr.exe
    - 2009-02-10 19:28 . 2009-08-29 07:36 233472 c:\windows\SYSTEM32\DLLCACHE\webcheck.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 233472 c:\windows\SYSTEM32\DLLCACHE\webcheck.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 197120 c:\windows\SYSTEM32\DLLCACHE\wbemupgd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 116224 c:\windows\SYSTEM32\DLLCACHE\wbemtest.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 196608 c:\windows\SYSTEM32\DLLCACHE\wbemcntl.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 215552 c:\windows\SYSTEM32\DLLCACHE\wavemsp.dll
    + 2005-06-30 04:52 . 2008-04-14 00:11 426041 c:\windows\SYSTEM32\DLLCACHE\voicepad.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 131584 c:\windows\SYSTEM32\DLLCACHE\viewprov.dll
    - 2004-08-04 11:00 . 2008-05-09 10:53 430080 c:\windows\SYSTEM32\DLLCACHE\vbscript.dll
    + 2004-08-04 11:00 . 2010-03-09 11:09 430080 c:\windows\SYSTEM32\DLLCACHE\vbscript.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 102457 c:\windows\SYSTEM32\DLLCACHE\usrv42a.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 323641 c:\windows\SYSTEM32\DLLCACHE\usrdtea.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 105984 c:\windows\SYSTEM32\DLLCACHE\url.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 105984 c:\windows\SYSTEM32\DLLCACHE\url.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 133632 c:\windows\SYSTEM32\DLLCACHE\upnp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 150528 c:\windows\SYSTEM32\DLLCACHE\uploadm.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 116224 c:\windows\SYSTEM32\DLLCACHE\updprov.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 316416 c:\windows\SYSTEM32\DLLCACHE\untfs.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 101376 c:\windows\SYSTEM32\DLLCACHE\txflog.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 279040 c:\windows\SYSTEM32\DLLCACHE\tshoot.dll
    + 2004-08-04 11:00 . 2009-06-21 21:44 153088 c:\windows\SYSTEM32\DLLCACHE\triedit.dll
    - 2009-09-09 15:57 . 2009-06-21 21:44 153088 c:\windows\SYSTEM32\DLLCACHE\triedit.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 259584 c:\windows\SYSTEM32\DLLCACHE\tracerpt.exe
    + 2009-12-26 11:39 . 2004-08-04 11:00 185344 c:\windows\SYSTEM32\DLLCACHE\thawbrkr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 358400 c:\windows\SYSTEM32\DLLCACHE\termmgr.dll
    + 2009-01-13 18:51 . 2010-02-11 12:02 226880 c:\windows\SYSTEM32\DLLCACHE\tcpip6.sys
    + 2004-08-04 11:00 . 2008-04-14 00:12 858624 c:\windows\SYSTEM32\DLLCACHE\tapi3.dll
    - 2009-06-16 14:36 . 2009-06-16 14:36 119808 c:\windows\SYSTEM32\DLLCACHE\t2embed.dll
    + 2009-06-16 14:36 . 2009-10-15 16:28 119808 c:\windows\SYSTEM32\DLLCACHE\t2embed.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 106496 c:\windows\SYSTEM32\DLLCACHE\sysocmgr.exe
    + 2008-08-30 02:17 . 2008-04-14 00:12 173568 c:\windows\SYSTEM32\DLLCACHE\sysmoda.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 193024 c:\windows\SYSTEM32\DLLCACHE\sysmod.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 138752 c:\windows\SYSTEM32\DLLCACHE\swprv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 679936 c:\windows\SYSTEM32\DLLCACHE\sstext3d.scr
    + 2004-08-04 11:00 . 2008-04-14 00:12 610304 c:\windows\SYSTEM32\DLLCACHE\sspipes.scr
    + 2004-08-04 11:00 . 2008-04-14 00:12 393216 c:\windows\SYSTEM32\DLLCACHE\ssflwbox.scr
    + 2004-08-04 11:00 . 2008-04-14 00:12 704512 c:\windows\SYSTEM32\DLLCACHE\ss3dfo.scr
    + 2009-01-13 18:51 . 2009-12-31 16:50 353792 c:\windows\SYSTEM32\DLLCACHE\srv.sys
    + 2004-08-04 11:00 . 2008-04-14 00:12 239104 c:\windows\SYSTEM32\DLLCACHE\srrstr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 217088 c:\windows\SYSTEM32\DLLCACHE\sqlxmlx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 180800 c:\windows\SYSTEM32\DLLCACHE\sqlunirl.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 110592 c:\windows\SYSTEM32\DLLCACHE\sqlse20.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 462848 c:\windows\SYSTEM32\DLLCACHE\sqlqp20.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 151552 c:\windows\SYSTEM32\DLLCACHE\sqldb20.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 774144 c:\windows\SYSTEM32\DLLCACHE\spttseng.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 250368 c:\windows\SYSTEM32\DLLCACHE\sptip.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 648704 c:\windows\SYSTEM32\DLLCACHE\sprc0C0A.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 639488 c:\windows\SYSTEM32\DLLCACHE\sprc0816.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 322560 c:\windows\SYSTEM32\DLLCACHE\sprc0804.dll
    + 2008-08-30 02:16 . 2008-04-13 18:40 576512 c:\windows\SYSTEM32\DLLCACHE\sprc0424.dll
    + 2008-08-30 02:15 . 2008-04-13 18:40 592896 c:\windows\SYSTEM32\DLLCACHE\sprc041f.dll
    + 2008-08-30 02:15 . 2008-04-13 18:40 590848 c:\windows\SYSTEM32\DLLCACHE\sprc041D.dll
    + 2008-08-30 02:16 . 2008-04-13 18:40 577536 c:\windows\SYSTEM32\DLLCACHE\sprc041b.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 627200 c:\windows\SYSTEM32\DLLCACHE\sprc0419.dll
    + 2008-08-30 02:15 . 2008-04-13 18:38 620032 c:\windows\SYSTEM32\DLLCACHE\sprc0416.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 641024 c:\windows\SYSTEM32\DLLCACHE\sprc0415.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 591872 c:\windows\SYSTEM32\DLLCACHE\sprc0414.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 645120 c:\windows\SYSTEM32\DLLCACHE\sprc0413.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 392704 c:\windows\SYSTEM32\DLLCACHE\sprc0412.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 412672 c:\windows\SYSTEM32\DLLCACHE\sprc0411.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 658432 c:\windows\SYSTEM32\DLLCACHE\sprc0410.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 645120 c:\windows\SYSTEM32\DLLCACHE\sprc040e.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 620544 c:\windows\SYSTEM32\DLLCACHE\sprc040D.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 663040 c:\windows\SYSTEM32\DLLCACHE\sprc040C.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 604672 c:\windows\SYSTEM32\DLLCACHE\sprc040b.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 679936 c:\windows\SYSTEM32\DLLCACHE\sprc0408.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 663552 c:\windows\SYSTEM32\DLLCACHE\sprc0407.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 605696 c:\windows\SYSTEM32\DLLCACHE\sprc0406.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 601088 c:\windows\SYSTEM32\DLLCACHE\sprc0405.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 327680 c:\windows\SYSTEM32\DLLCACHE\sprc0404.dll
    + 2008-08-30 02:15 . 2008-04-13 18:39 656896 c:\windows\SYSTEM32\DLLCACHE\sprc0401.dll
    + 2004-08-04 11:00 . 2008-04-13 18:36 773632 c:\windows\SYSTEM32\DLLCACHE\sprb0C0A.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 751616 c:\windows\SYSTEM32\DLLCACHE\sprb0816.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 470016 c:\windows\SYSTEM32\DLLCACHE\sprb0804.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 732160 c:\windows\SYSTEM32\DLLCACHE\sprb0424.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 724480 c:\windows\SYSTEM32\DLLCACHE\sprb041f.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 724480 c:\windows\SYSTEM32\DLLCACHE\sprb041D.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 757248 c:\windows\SYSTEM32\DLLCACHE\sprb041b.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 736768 c:\windows\SYSTEM32\DLLCACHE\sprb0419.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 752128 c:\windows\SYSTEM32\DLLCACHE\sprb0416.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 759808 c:\windows\SYSTEM32\DLLCACHE\sprb0415.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 716288 c:\windows\SYSTEM32\DLLCACHE\sprb0414.dll
    + 2004-08-04 11:00 . 2008-04-13 18:38 769024 c:\windows\SYSTEM32\DLLCACHE\sprb0413.dll
    + 2004-08-04 11:00 . 2008-04-13 18:37 543744 c:\windows\SYSTEM32\DLLCACHE\sprb0412.dll
    + 2004-08-04 11:00 . 2008-04-13 18:37 562688 c:\windows\SYSTEM32\DLLCACHE\sprb0411.dll
    + 2004-08-04 11:00 . 2008-04-13 18:37 769536 c:\windows\SYSTEM32\DLLCACHE\sprb0410.dll
    + 2004-08-04 11:00 . 2008-04-13 18:37 769536 c:\windows\SYSTEM32\DLLCACHE\sprb040e.dll
    + 2004-08-04 11:00 . 2008-04-13 18:36 793088 c:\windows\SYSTEM32\DLLCACHE\sprb040C.dll
    + 2004-08-04 11:00 . 2008-04-13 18:36 729088 c:\windows\SYSTEM32\DLLCACHE\sprb040b.dll
    + 2004-08-04 11:00 . 2008-04-13 18:36 801280 c:\windows\SYSTEM32\DLLCACHE\sprb0408.dll
    + 2004-08-04 11:00 . 2008-04-13 18:37 788480 c:\windows\SYSTEM32\DLLCACHE\sprb0407.dll
    + 2004-08-04 11:00 . 2008-04-13 18:36 742912 c:\windows\SYSTEM32\DLLCACHE\sprb0406.dll
    + 2004-08-04 11:00 . 2008-04-13 18:36 734720 c:\windows\SYSTEM32\DLLCACHE\sprb0405.dll
    + 2004-08-04 11:00 . 2008-04-13 18:36 477696 c:\windows\SYSTEM32\DLLCACHE\sprb0404.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 196096 c:\windows\SYSTEM32\DLLCACHE\spra0C0A.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 194560 c:\windows\SYSTEM32\DLLCACHE\spra0816.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 161280 c:\windows\SYSTEM32\DLLCACHE\spra0804.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 189952 c:\windows\SYSTEM32\DLLCACHE\spra0427.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 188928 c:\windows\SYSTEM32\DLLCACHE\spra0426.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 186880 c:\windows\SYSTEM32\DLLCACHE\spra0425.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 192512 c:\windows\SYSTEM32\DLLCACHE\spra0424.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 188928 c:\windows\SYSTEM32\DLLCACHE\spra041f.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 188416 c:\windows\SYSTEM32\DLLCACHE\spra041e.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 188928 c:\windows\SYSTEM32\DLLCACHE\spra041D.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 192512 c:\windows\SYSTEM32\DLLCACHE\spra041b.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 188928 c:\windows\SYSTEM32\DLLCACHE\spra041a.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 192512 c:\windows\SYSTEM32\DLLCACHE\spra0419.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 190464 c:\windows\SYSTEM32\DLLCACHE\spra0418.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 192512 c:\windows\SYSTEM32\DLLCACHE\spra0416.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 194560 c:\windows\SYSTEM32\DLLCACHE\spra0415.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 189440 c:\windows\SYSTEM32\DLLCACHE\spra0414.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 196096 c:\windows\SYSTEM32\DLLCACHE\spra0413.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 167936 c:\windows\SYSTEM32\DLLCACHE\spra0412.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 171008 c:\windows\SYSTEM32\DLLCACHE\spra0411.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 195072 c:\windows\SYSTEM32\DLLCACHE\spra0410.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 195584 c:\windows\SYSTEM32\DLLCACHE\spra040e.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 181760 c:\windows\SYSTEM32\DLLCACHE\spra040D.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 197632 c:\windows\SYSTEM32\DLLCACHE\spra040C.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 186368 c:\windows\SYSTEM32\DLLCACHE\spra040b.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 197632 c:\windows\SYSTEM32\DLLCACHE\spra0408.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 199680 c:\windows\SYSTEM32\DLLCACHE\spra0407.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 192000 c:\windows\SYSTEM32\DLLCACHE\spra0406.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 188928 c:\windows\SYSTEM32\DLLCACHE\spra0405.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 161280 c:\windows\SYSTEM32\DLLCACHE\spra0404.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 189440 c:\windows\SYSTEM32\DLLCACHE\spra0402.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 186880 c:\windows\SYSTEM32\DLLCACHE\spra0401.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 130048 c:\windows\SYSTEM32\DLLCACHE\softkbd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 182272 c:\windows\SYSTEM32\DLLCACHE\snmpsnap.dll
    + 2004-11-24 04:33 . 2008-04-14 00:12 131584 c:\windows\SYSTEM32\DLLCACHE\sndrec32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 362496 c:\windows\SYSTEM32\DLLCACHE\smlogcfg.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 188508 c:\windows\SYSTEM32\DLLCACHE\slgen.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 286792 c:\windows\SYSTEM32\DLLCACHE\slextspk.dll
    + 2009-12-08 09:23 . 2009-12-08 09:23 474112 c:\windows\SYSTEM32\DLLCACHE\shlwapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 414208 c:\windows\SYSTEM32\DLLCACHE\setupdll.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 130048 c:\windows\SYSTEM32\DLLCACHE\sdpblb.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 121856 c:\windows\SYSTEM32\DLLCACHE\sctasks.exe
    + 2008-08-30 02:16 . 2008-04-14 00:12 199680 c:\windows\SYSTEM32\DLLCACHE\scripta.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 215552 c:\windows\SYSTEM32\DLLCACHE\script.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 118784 c:\windows\SYSTEM32\DLLCACHE\scardssp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 159232 c:\windows\SYSTEM32\DLLCACHE\sbeio.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 270848 c:\windows\SYSTEM32\DLLCACHE\sbe.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 741376 c:\windows\SYSTEM32\DLLCACHE\sapi.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 397056 c:\windows\SYSTEM32\DLLCACHE\s3gnb.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 107520 c:\windows\SYSTEM32\DLLCACHE\rsnotify.exe
    + 2008-08-30 02:16 . 2008-04-14 00:12 290304 c:\windows\SYSTEM32\DLLCACHE\rhttpaa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 107520 c:\windows\SYSTEM32\DLLCACHE\rend.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 397824 c:\windows\SYSTEM32\DLLCACHE\regwizc.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 147968 c:\windows\SYSTEM32\DLLCACHE\rdchost.dll
    + 2009-10-12 13:38 . 2009-10-12 13:38 149504 c:\windows\SYSTEM32\DLLCACHE\rastls.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 143360 c:\windows\SYSTEM32\DLLCACHE\rasmontr.dll
    + 2004-08-04 11:00 . 2008-04-13 17:21 733696 c:\windows\SYSTEM32\DLLCACHE\qedwipes.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 150528 c:\windows\SYSTEM32\DLLCACHE\qagent.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 105472 c:\windows\SYSTEM32\DLLCACHE\polstore.dll
    + 2005-06-30 04:52 . 2008-04-14 00:10 175104 c:\windows\SYSTEM32\DLLCACHE\pintlcsa.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 157696 c:\windows\SYSTEM32\DLLCACHE\paqsp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 167219 c:\windows\SYSTEM32\DLLCACHE\pagefile.vbs
    + 2004-08-04 11:00 . 2008-04-14 00:12 554496 c:\windows\SYSTEM32\DLLCACHE\p2psvc.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 115712 c:\windows\SYSTEM32\DLLCACHE\p2pnetsh.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 313856 c:\windows\SYSTEM32\DLLCACHE\p2pgraph.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 105472 c:\windows\SYSTEM32\DLLCACHE\p2pgasvc.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 153600 c:\windows\SYSTEM32\DLLCACHE\p2p.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 215552 c:\windows\SYSTEM32\DLLCACHE\osk.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 192000 c:\windows\SYSTEM32\DLLCACHE\offfilt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 104448 c:\windows\SYSTEM32\DLLCACHE\oeimport.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 147456 c:\windows\SYSTEM32\DLLCACHE\odbctrac.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 278559 c:\windows\SYSTEM32\DLLCACHE\odbcjt32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 106496 c:\windows\SYSTEM32\DLLCACHE\odbccp32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 135168 c:\windows\SYSTEM32\DLLCACHE\odbcconf.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 102912 c:\windows\SYSTEM32\DLLCACHE\occache.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 102912 c:\windows\SYSTEM32\DLLCACHE\occache.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 446464 c:\windows\SYSTEM32\DLLCACHE\obrb0C0A.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 435200 c:\windows\SYSTEM32\DLLCACHE\obrb0816.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 270336 c:\windows\SYSTEM32\DLLCACHE\obrb0804.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 408576 c:\windows\SYSTEM32\DLLCACHE\obrb0424.dll
    + 2004-08-04 11:00 . 2008-04-13 18:41 390144 c:\windows\SYSTEM32\DLLCACHE\obrb041f.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 363008 c:\windows\SYSTEM32\DLLCACHE\obrb041D.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 405504 c:\windows\SYSTEM32\DLLCACHE\obrb041b.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 427008 c:\windows\SYSTEM32\DLLCACHE\obrb0419.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 409600 c:\windows\SYSTEM32\DLLCACHE\obrb0416.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 391680 c:\windows\SYSTEM32\DLLCACHE\obrb0415.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 353792 c:\windows\SYSTEM32\DLLCACHE\obrb0414.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 401920 c:\windows\SYSTEM32\DLLCACHE\obrb0413.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 306688 c:\windows\SYSTEM32\DLLCACHE\obrb0412.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 275456 c:\windows\SYSTEM32\DLLCACHE\obrb0411.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 413696 c:\windows\SYSTEM32\DLLCACHE\obrb0410.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 434176 c:\windows\SYSTEM32\DLLCACHE\obrb040e.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 384000 c:\windows\SYSTEM32\DLLCACHE\obrb040D.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 410624 c:\windows\SYSTEM32\DLLCACHE\obrb040C.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 405504 c:\windows\SYSTEM32\DLLCACHE\obrb040b.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 419328 c:\windows\SYSTEM32\DLLCACHE\obrb0408.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 403456 c:\windows\SYSTEM32\DLLCACHE\obrb0407.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 418816 c:\windows\SYSTEM32\DLLCACHE\obrb0406.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 428032 c:\windows\SYSTEM32\DLLCACHE\obrb0405.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 212480 c:\windows\SYSTEM32\DLLCACHE\obrb0404.dll
    + 2004-08-04 11:00 . 2008-04-13 18:40 393728 c:\windows\SYSTEM32\DLLCACHE\obrb0401.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 286208 c:\windows\SYSTEM32\DLLCACHE\objsel.dll
    + 2009-10-13 10:30 . 2009-10-13 10:30 270336 c:\windows\SYSTEM32\DLLCACHE\oakley.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 126464 c:\windows\SYSTEM32\DLLCACHE\nwscript.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 488448 c:\windows\SYSTEM32\DLLCACHE\ntmsmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 179200 c:\windows\SYSTEM32\DLLCACHE\ntmsdba.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 212992 c:\windows\SYSTEM32\DLLCACHE\ntevt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 172032 c:\windows\SYSTEM32\DLLCACHE\nmoldwb.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 151552 c:\windows\SYSTEM32\DLLCACHE\nmft.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 229376 c:\windows\SYSTEM32\DLLCACHE\nmas.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 308224 c:\windows\SYSTEM32\DLLCACHE\netui2.dll
    + 2004-08-04 11:00 . 2008-04-14 00:16 329728 c:\windows\SYSTEM32\DLLCACHE\netsetup.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 139264 c:\windows\SYSTEM32\DLLCACHE\netid.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 253952 c:\windows\SYSTEM32\DLLCACHE\neth.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 214016 c:\windows\SYSTEM32\DLLCACHE\netevent.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 124928 c:\windows\SYSTEM32\DLLCACHE\net1.exe
    + 2008-08-30 02:16 . 2008-04-14 00:12 176640 c:\windows\SYSTEM32\DLLCACHE\napstat.exe
    + 2008-08-30 02:16 . 2008-04-14 00:12 193024 c:\windows\SYSTEM32\DLLCACHE\napmontr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 221184 c:\windows\SYSTEM32\DLLCACHE\nac.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 701440 c:\windows\SYSTEM32\DLLCACHE\msxml2.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 355104 c:\windows\SYSTEM32\DLLCACHE\msxbde40.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 621344 c:\windows\SYSTEM32\DLLCACHE\mswstr10.dll
    - 2009-08-05 09:01 . 2009-08-05 09:01 204800 c:\windows\SYSTEM32\DLLCACHE\mswebdvd.dll
    + 2004-08-04 11:00 . 2009-08-05 09:01 204800 c:\windows\SYSTEM32\DLLCACHE\mswebdvd.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 838432 c:\windows\SYSTEM32\DLLCACHE\mswdat10.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 126912 c:\windows\SYSTEM32\DLLCACHE\msvideo.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 253952 c:\windows\SYSTEM32\DLLCACHE\msvcrt20.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 565760 c:\windows\SYSTEM32\DLLCACHE\msvcp50.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 671232 c:\windows\SYSTEM32\DLLCACHE\mstime.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 671232 c:\windows\SYSTEM32\DLLCACHE\mstime.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 264992 c:\windows\SYSTEM32\DLLCACHE\mstext40.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 274432 c:\windows\SYSTEM32\DLLCACHE\mst120.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 235520 c:\windows\SYSTEM32\DLLCACHE\mssoap1.dll
    + 2008-08-30 02:16 . 2008-04-14 00:12 155136 c:\windows\SYSTEM32\DLLCACHE\mssha.dll
    + 2004-08-04 11:00 . 2006-12-04 19:21 414720 c:\windows\SYSTEM32\DLLCACHE\msscp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 134656 c:\windows\SYSTEM32\DLLCACHE\mssap.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 559904 c:\windows\SYSTEM32\DLLCACHE\msrepl40.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 322336 c:\windows\SYSTEM32\DLLCACHE\msrd3x40.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 432928 c:\windows\SYSTEM32\DLLCACHE\msrd2x40.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 193024 c:\windows\SYSTEM32\DLLCACHE\msrating.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 193024 c:\windows\SYSTEM32\DLLCACHE\msrating.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 355104 c:\windows\SYSTEM32\DLLCACHE\mspbde40.dll
    + 2009-12-16 18:43 . 2009-12-16 18:43 343040 c:\windows\SYSTEM32\DLLCACHE\mspaint.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 143360 c:\windows\SYSTEM32\DLLCACHE\msorcl32.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 252928 c:\windows\SYSTEM32\DLLCACHE\msoeacct.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 565248 c:\windows\SYSTEM32\DLLCACHE\msobmain.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 122368 c:\windows\SYSTEM32\DLLCACHE\msobcomm.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 219936 c:\windows\SYSTEM32\DLLCACHE\msltus40.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 248608 c:\windows\SYSTEM32\DLLCACHE\msjtes40.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 102400 c:\windows\SYSTEM32\DLLCACHE\msjro.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 151583 c:\windows\SYSTEM32\DLLCACHE\msjint40.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 355112 c:\windows\SYSTEM32\DLLCACHE\msjetol1.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 273920 c:\windows\SYSTEM32\DLLCACHE\msiprov.dll
    + 2004-08-04 11:00 . 2008-04-13 15:39 884736 c:\windows\SYSTEM32\DLLCACHE\msimsg.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 271360 c:\windows\SYSTEM32\DLLCACHE\msihnd.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 477696 c:\windows\SYSTEM32\DLLCACHE\mshtmled.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 477696 c:\windows\SYSTEM32\DLLCACHE\mshtmled.dll
    - 2007-05-09 21:48 . 2009-08-29 07:36 459264 c:\windows\SYSTEM32\DLLCACHE\msfeeds.dll
    + 2007-05-09 21:48 . 2010-03-11 12:38 459264 c:\windows\SYSTEM32\DLLCACHE\msfeeds.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 326432 c:\windows\SYSTEM32\DLLCACHE\msexcl40.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 518944 c:\windows\SYSTEM32\DLLCACHE\msexch40.dll
    + 2004-08-04 11:00 . 2008-06-12 14:23 161792 c:\windows\SYSTEM32\DLLCACHE\msdtcuiu.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 161792 c:\windows\SYSTEM32\DLLCACHE\msdtcuiu.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 956928 c:\windows\SYSTEM32\DLLCACHE\msdtctm.dll
    + 2004-08-04 11:00 . 2008-06-12 14:23 956928 c:\windows\SYSTEM32\DLLCACHE\msdtctm.dll
    - 2008-06-12 14:23 . 2008-06-12 14:23 428032 c:\windows\SYSTEM32\DLLCACHE\msdtcprx.dll
    + 2004-08-04 11:00 . 2008-06-12 14:23 428032 c:\windows\SYSTEM32\DLLCACHE\msdtcprx.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 315392 c:\windows\SYSTEM32\DLLCACHE\msdasql.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 204800 c:\windows\SYSTEM32\DLLCACHE\msdaps.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 233472 c:\windows\SYSTEM32\DLLCACHE\msdaora.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 118784 c:\windows\SYSTEM32\DLLCACHE\msdadiag.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 169984 c:\windows\SYSTEM32\DLLCACHE\msconfig.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 220160 c:\windows\SYSTEM32\DLLCACHE\mscandui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 180224 c:\windows\SYSTEM32\DLLCACHE\msadomd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 536576 c:\windows\SYSTEM32\DLLCACHE\msado15.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 102912 c:\windows\SYSTEM32\DLLCACHE\msaatext.dll
    + 2010-02-09 22:01 . 2009-12-04 18:22 455424 c:\windows\SYSTEM32\DLLCACHE\mrxsmb.sys
    + 2004-08-04 11:00 . 2008-04-14 00:11 187392 c:\windows\SYSTEM32\DLLCACHE\mqtrig.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 117248 c:\windows\SYSTEM32\DLLCACHE\mqtgsvc.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 517632 c:\windows\SYSTEM32\DLLCACHE\mqsnap.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 123904 c:\windows\SYSTEM32\DLLCACHE\mqrtdep.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 177152 c:\windows\SYSTEM32\DLLCACHE\mqrt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 663040 c:\windows\SYSTEM32\DLLCACHE\mqqm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 225280 c:\windows\SYSTEM32\DLLCACHE\mqoa.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 138240 c:\windows\SYSTEM32\DLLCACHE\mqad.dll
    + 2004-11-24 04:31 . 2008-04-14 00:12 123392 c:\windows\SYSTEM32\DLLCACHE\mplay32.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 123904 c:\windows\SYSTEM32\DLLCACHE\mofd.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 143360 c:\windows\SYSTEM32\DLLCACHE\mobsync.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 207360 c:\windows\SYSTEM32\DLLCACHE\mobsync.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 119808 c:\windows\SYSTEM32\DLLCACHE\mmutilse.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 106496 c:\windows\SYSTEM32\DLLCACHE\Mmcfxc.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 397312 c:\windows\SYSTEM32\DLLCACHE\mmcex.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 184320 c:\windows\SYSTEM32\DLLCACHE\mmc30.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 673088 c:\windows\SYSTEM32\DLLCACHE\mlang.dat
    + 2008-08-30 02:15 . 2008-04-14 00:12 241152 c:\windows\SYSTEM32\DLLCACHE\migwiza.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 103936 c:\windows\SYSTEM32\DLLCACHE\migload.exe
    + 2008-08-30 02:15 . 2008-04-14 00:11 261120 c:\windows\SYSTEM32\DLLCACHE\migisma.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 274432 c:\windows\SYSTEM32\DLLCACHE\migism.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 927504 c:\windows\SYSTEM32\DLLCACHE\mfc40u.dll
    + 2004-08-04 11:00 . 2003-03-31 13:00 924432 c:\windows\SYSTEM32\DLLCACHE\mfc40.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 362496 c:\windows\SYSTEM32\DLLCACHE\metal_ss.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 147968 c:\windows\SYSTEM32\DLLCACHE\mdwmdmsp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 118272 c:\windows\SYSTEM32\DLLCACHE\mdminst.dll
    + 2004-08-04 11:00 . 2008-06-18 06:09 100864 c:\windows\SYSTEM32\DLLCACHE\logagent.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 221696 c:\windows\SYSTEM32\DLLCACHE\localsec.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 399872 c:\windows\SYSTEM32\DLLCACHE\lmrt.dll
    - 1980-01-01 06:00 . 2008-04-13 19:16 141056 c:\windows\SYSTEM32\DLLCACHE\ks.sys
    + 1980-01-01 06:00 . 2008-04-13 20:16 141056 c:\windows\SYSTEM32\DLLCACHE\ks.sys
    + 2004-08-04 11:00 . 2008-04-14 00:11 150528 c:\windows\SYSTEM32\DLLCACHE\keymgr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 362496 c:\windows\SYSTEM32\DLLCACHE\jet500.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 155136 c:\windows\SYSTEM32\DLLCACHE\itircl.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 384000 c:\windows\SYSTEM32\DLLCACHE\ipsmsnap.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 349696 c:\windows\SYSTEM32\DLLCACHE\ipsecsnp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 177152 c:\windows\SYSTEM32\DLLCACHE\iprtrmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 330752 c:\windows\SYSTEM32\DLLCACHE\ippromon.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 161280 c:\windows\SYSTEM32\DLLCACHE\ipmontr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 123392 c:\windows\SYSTEM32\DLLCACHE\input.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 450560 c:\windows\SYSTEM32\DLLCACHE\infosoft.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 110592 c:\windows\SYSTEM32\DLLCACHE\inetcplc.dll
    + 2010-01-29 15:01 . 2010-01-29 15:01 691712 c:\windows\SYSTEM32\DLLCACHE\inetcomm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 274432 c:\windows\SYSTEM32\DLLCACHE\inetcfg.dll
    + 2005-06-30 04:52 . 2008-04-14 00:09 102456 c:\windows\SYSTEM32\DLLCACHE\imlang.dll
    + 2005-06-30 04:52 . 2008-04-14 00:09 274489 c:\windows\SYSTEM32\DLLCACHE\imjputyc.dll
    + 2005-06-30 04:52 . 2004-08-04 11:00 262200 c:\windows\SYSTEM32\DLLCACHE\imjputy.exe
    + 2005-06-30 04:52 . 2004-08-04 11:00 233527 c:\windows\SYSTEM32\DLLCACHE\imjprw.exe
    + 2005-06-30 04:52 . 2004-08-04 11:00 208952 c:\windows\SYSTEM32\DLLCACHE\imjpmig.exe
    + 2005-06-30 04:52 . 2004-08-04 11:00 196665 c:\windows\SYSTEM32\DLLCACHE\imjpinst.exe
    + 2005-06-30 04:52 . 2004-08-04 11:00 155705 c:\windows\SYSTEM32\DLLCACHE\imjpdsvr.exe
    + 2005-06-30 04:52 . 2004-08-04 11:00 307257 c:\windows\SYSTEM32\DLLCACHE\imjpdct.exe
    + 2005-06-30 04:52 . 2008-04-14 00:09 716856 c:\windows\SYSTEM32\DLLCACHE\imjpcus.dll
    + 2005-06-30 04:52 . 2008-04-14 00:09 368696 c:\windows\SYSTEM32\DLLCACHE\imjpcic.dll
    + 2005-06-30 04:52 . 2008-04-14 00:09 811064 c:\windows\SYSTEM32\DLLCACHE\imjp81k.dll
    + 2005-06-30 04:52 . 2008-04-14 00:09 106496 c:\windows\SYSTEM32\DLLCACHE\imekrcic.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 135680 c:\windows\SYSTEM32\DLLCACHE\ifmon.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 114688 c:\windows\SYSTEM32\DLLCACHE\iexpress.exe
    + 2009-02-10 19:27 . 2010-02-23 05:20 634648 c:\windows\SYSTEM32\DLLCACHE\iexplore.exe
    - 2009-02-10 19:27 . 2009-08-27 05:18 634648 c:\windows\SYSTEM32\DLLCACHE\iexplore.exe
    + 2007-05-09 21:48 . 2010-03-11 12:38 268288 c:\windows\SYSTEM32\DLLCACHE\iertutil.dll
    - 2007-05-09 21:48 . 2009-08-29 07:36 268288 c:\windows\SYSTEM32\DLLCACHE\iertutil.dll
    + 2010-01-05 10:00 . 2010-03-11 12:38 192512 c:\windows\SYSTEM32\DLLCACHE\iepeers.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 385024 c:\windows\SYSTEM32\DLLCACHE\iedkcs32.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 385024 c:\windows\SYSTEM32\DLLCACHE\iedkcs32.dll
    + 2007-05-09 21:48 . 2010-03-11 12:38 380928 c:\windows\SYSTEM32\DLLCACHE\ieapfltr.dll
    - 2007-05-09 21:48 . 2009-08-29 07:36 380928 c:\windows\SYSTEM32\DLLCACHE\ieapfltr.dll
    - 2009-02-10 19:28 . 2009-08-27 05:18 161792 c:\windows\SYSTEM32\DLLCACHE\ieakui.dll
    + 2004-08-04 11:00 . 2010-02-23 05:18 161792 c:\windows\SYSTEM32\DLLCACHE\ieakui.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 230400 c:\windows\SYSTEM32\DLLCACHE\ieaksie.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 230400 c:\windows\SYSTEM32\DLLCACHE\ieaksie.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 153088 c:\windows\SYSTEM32\DLLCACHE\ieakeng.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 153088 c:\windows\SYSTEM32\DLLCACHE\ieakeng.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 120832 c:\windows\SYSTEM32\DLLCACHE\idq.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 247808 c:\windows\SYSTEM32\DLLCACHE\iassdo.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 141312 c:\windows\SYSTEM32\DLLCACHE\iasrecst.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 119808 c:\windows\SYSTEM32\DLLCACHE\iasrad.dll
    + 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\SYSTEM32\DLLCACHE\http.sys
    + 2004-08-04 11:00 . 2008-04-14 00:11 144896 c:\windows\SYSTEM32\DLLCACHE\hotplug.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 362496 c:\windows\SYSTEM32\DLLCACHE\home_ss.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 614912 c:\windows\SYSTEM32\DLLCACHE\h323msp.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 115200 c:\windows\SYSTEM32\DLLCACHE\guitrna.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 133120 c:\windows\SYSTEM32\DLLCACHE\guitrn.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 199680 c:\windows\SYSTEM32\DLLCACHE\gptext.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 120832 c:\windows\SYSTEM32\DLLCACHE\gprslt.exe
    + 2004-08-04 11:00 . 2008-04-14 00:09 566784 c:\windows\SYSTEM32\DLLCACHE\gpedit.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 285184 c:\windows\SYSTEM32\DLLCACHE\glmf32.dll
    + 2004-11-24 04:30 . 2004-08-04 11:00 605696 c:\windows\SYSTEM32\DLLCACHE\getuname.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 285184 c:\windows\SYSTEM32\DLLCACHE\fxscomex.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 451584 c:\windows\SYSTEM32\DLLCACHE\fxsapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 176128 c:\windows\SYSTEM32\DLLCACHE\ftsrch.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 193024 c:\windows\SYSTEM32\DLLCACHE\fsquirt.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 337920 c:\windows\SYSTEM32\DLLCACHE\filemgmt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 124928 c:\windows\SYSTEM32\DLLCACHE\fde.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 133120 c:\windows\SYSTEM32\DLLCACHE\extmgr.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 133120 c:\windows\SYSTEM32\DLLCACHE\extmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 380445 c:\windows\SYSTEM32\DLLCACHE\expsrv.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 193024 c:\windows\SYSTEM32\DLLCACHE\eudcedit.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 103424 c:\windows\SYSTEM32\DLLCACHE\eqnclass.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 183296 c:\windows\SYSTEM32\DLLCACHE\els.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 180224 c:\windows\SYSTEM32\DLLCACHE\eapphost.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 184832 c:\windows\SYSTEM32\DLLCACHE\eapp3hst.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 214528 c:\windows\SYSTEM32\DLLCACHE\dxtrans.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 214528 c:\windows\SYSTEM32\DLLCACHE\dxtrans.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 347136 c:\windows\SYSTEM32\DLLCACHE\dxtmsft.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 347136 c:\windows\SYSTEM32\DLLCACHE\dxtmsft.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 619008 c:\windows\SYSTEM32\DLLCACHE\dx7vb.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 120320 c:\windows\SYSTEM32\DLLCACHE\dsprov.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 142848 c:\windows\SYSTEM32\DLLCACHE\dsprop.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 181248 c:\windows\SYSTEM32\DLLCACHE\dsdmo.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 991744 c:\windows\SYSTEM32\DLLCACHE\drmv2clt.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 116736 c:\windows\SYSTEM32\DLLCACHE\dpvvox.dll
     
  12. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    + 2004-08-04 11:00 . 2008-04-14 00:11 212480 c:\windows\SYSTEM32\DLLCACHE\dpvoice.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 650752 c:\windows\SYSTEM32\DLLCACHE\dot3ui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 104448 c:\windows\SYSTEM32\DLLCACHE\dmusic.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 103424 c:\windows\SYSTEM32\DLLCACHE\dmsynth.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 105984 c:\windows\SYSTEM32\DLLCACHE\dmstyle.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 181248 c:\windows\SYSTEM32\DLLCACHE\dmime.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 118784 c:\windows\SYSTEM32\DLLCACHE\dmdskres.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 200704 c:\windows\SYSTEM32\DLLCACHE\dmdskmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 285184 c:\windows\SYSTEM32\DLLCACHE\dmdlgs.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 330752 c:\windows\SYSTEM32\DLLCACHE\dmconfig.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 163840 c:\windows\SYSTEM32\DLLCACHE\diskpart.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 181760 c:\windows\SYSTEM32\DLLCACHE\dinput8.dll
    + 2007-05-12 23:15 . 2008-04-14 00:12 539136 c:\windows\SYSTEM32\DLLCACHE\dialer.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 394240 c:\windows\SYSTEM32\DLLCACHE\diactfrm.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 379904 c:\windows\SYSTEM32\DLLCACHE\dhcpmon.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 176157 c:\windows\SYSTEM32\DLLCACHE\dgrpsetu.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 111104 c:\windows\SYSTEM32\DLLCACHE\dgnet.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 124416 c:\windows\SYSTEM32\DLLCACHE\dfrgui.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 110592 c:\windows\SYSTEM32\DLLCACHE\dbnetlib.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 165376 c:\windows\SYSTEM32\DLLCACHE\datime.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 554008 c:\windows\SYSTEM32\DLLCACHE\dao360.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 350208 c:\windows\SYSTEM32\DLLCACHE\d3drm.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 590336 c:\windows\SYSTEM32\DLLCACHE\d3dramp.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 436224 c:\windows\SYSTEM32\DLLCACHE\d3dim.dll
    + 2004-08-04 11:00 . 2008-05-07 09:07 135168 c:\windows\SYSTEM32\DLLCACHE\cscript.exe
    - 2008-12-15 22:58 . 2008-05-07 09:07 135168 c:\windows\SYSTEM32\DLLCACHE\cscript.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 357888 c:\windows\SYSTEM32\DLLCACHE\confmsp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 539648 c:\windows\SYSTEM32\DLLCACHE\comuid.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 167424 c:\windows\SYSTEM32\DLLCACHE\comsnap.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 195072 c:\windows\SYSTEM32\DLLCACHE\comadmin.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 185344 c:\windows\SYSTEM32\DLLCACHE\cmprops.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 344064 c:\windows\SYSTEM32\DLLCACHE\cmdial32.dll
    + 2004-11-24 04:27 . 2008-04-14 00:12 102912 c:\windows\SYSTEM32\DLLCACHE\clipbrd.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 110592 c:\windows\SYSTEM32\DLLCACHE\clbcatex.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 435712 c:\windows\SYSTEM32\DLLCACHE\class_ss.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 148480 c:\windows\SYSTEM32\DLLCACHE\cic.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 163328 c:\windows\SYSTEM32\DLLCACHE\ciadmin.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 457728 c:\windows\SYSTEM32\DLLCACHE\certmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 151040 c:\windows\SYSTEM32\DLLCACHE\cdfview.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 359936 c:\windows\SYSTEM32\DLLCACHE\cards.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 150016 c:\windows\SYSTEM32\DLLCACHE\capesnpn.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 385024 c:\windows\SYSTEM32\DLLCACHE\callcont.dll
    + 2004-11-24 04:27 . 2004-08-04 11:00 114688 c:\windows\SYSTEM32\DLLCACHE\calc.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 142848 c:\windows\SYSTEM32\DLLCACHE\bootcfg.exe
    + 2004-08-04 11:00 . 2004-08-04 11:00 152576 c:\windows\SYSTEM32\DLLCACHE\bnts.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 361472 c:\windows\SYSTEM32\DLLCACHE\blue_ss.dll
    + 2004-08-04 11:00 . 2006-10-19 02:47 542720 c:\windows\SYSTEM32\DLLCACHE\blackbox.dll
    + 2008-08-30 02:15 . 2008-04-14 00:11 233472 c:\windows\SYSTEM32\DLLCACHE\azroles.dll
    + 2004-11-24 04:27 . 2004-08-04 11:00 227840 c:\windows\SYSTEM32\DLLCACHE\avtapi.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 109456 c:\windows\SYSTEM32\DLLCACHE\avifile.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 580608 c:\windows\SYSTEM32\DLLCACHE\autofmt.exe
    + 2004-08-04 11:00 . 2008-04-14 00:12 602624 c:\windows\SYSTEM32\DLLCACHE\autoconv.exe
    + 2008-08-30 02:14 . 2008-04-14 00:11 870784 c:\windows\SYSTEM32\DLLCACHE\ati3d1ag.dll
    + 2008-08-30 02:14 . 2008-04-14 00:11 377984 c:\windows\SYSTEM32\DLLCACHE\ati2dvaa.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 295936 c:\windows\SYSTEM32\DLLCACHE\appmgr.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 102912 c:\windows\SYSTEM32\DLLCACHE\apcups.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 256512 c:\windows\SYSTEM32\DLLCACHE\agentsvr.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 214016 c:\windows\SYSTEM32\DLLCACHE\agentctl.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 124928 c:\windows\SYSTEM32\DLLCACHE\advpack.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 124928 c:\windows\SYSTEM32\DLLCACHE\advpack.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 123392 c:\windows\SYSTEM32\DLLCACHE\adsnw.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 263680 c:\windows\SYSTEM32\DLLCACHE\adsnt.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 161792 c:\windows\SYSTEM32\DLLCACHE\adsnds.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 175616 c:\windows\SYSTEM32\DLLCACHE\adsldp.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 115712 c:\windows\SYSTEM32\DLLCACHE\aclui.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 129536 c:\windows\SYSTEM32\DLLCACHE\acledit.dll
    + 2010-01-13 07:07 . 2009-11-21 15:51 471552 c:\windows\SYSTEM32\DLLCACHE\aclayers.dll
    + 2010-02-12 04:33 . 2010-02-12 04:33 100864 c:\windows\SYSTEM32\DLLCACHE\6to4svc.dll
    + 2009-11-29 04:44 . 2009-11-29 04:55 323584 c:\windows\SYSTEM32\AUDIOGENIE2.DLL
    + 2004-08-04 11:00 . 2010-03-11 12:38 124928 c:\windows\SYSTEM32\advpack.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 124928 c:\windows\SYSTEM32\advpack.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11 136568 c:\windows\SYSTEM32\Adobe\Shockwave 11\SYMCCHECKER.DLL
    - 2008-10-15 04:24 . 2008-08-06 20:24 114688 c:\windows\SYSTEM32\Adobe\Shockwave 11\SwInit.exe
    + 2010-05-05 14:05 . 2010-05-05 14:05 114688 c:\windows\SYSTEM32\Adobe\Shockwave 11\SwInit.exe
    + 2010-05-05 14:36 . 2010-05-05 14:36 467224 c:\windows\SYSTEM32\Adobe\Shockwave 11\SwHelper_1157609.exe
    + 2010-05-05 14:08 . 2010-05-05 14:08 446464 c:\windows\SYSTEM32\Adobe\Shockwave 11\Proj.dll
    - 2008-10-15 04:24 . 2008-08-06 20:24 446464 c:\windows\SYSTEM32\Adobe\Shockwave 11\Proj.dll
    + 2010-05-05 14:06 . 2010-05-05 14:06 372736 c:\windows\SYSTEM32\Adobe\Shockwave 11\Plugin.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11 753152 c:\windows\SYSTEM32\Adobe\Shockwave 11\gi.dll
    + 2010-05-05 14:05 . 2010-05-05 14:05 503808 c:\windows\SYSTEM32\Adobe\Shockwave 11\Control.dll
    + 2010-05-05 14:37 . 2010-05-05 14:37 213272 c:\windows\SYSTEM32\Adobe\Director\SwDir.dll
    + 2010-05-05 14:07 . 2010-05-05 14:07 131072 c:\windows\SYSTEM32\Adobe\Director\np32dsw.dll
    + 2004-08-04 11:00 . 2010-02-12 04:33 100864 c:\windows\SYSTEM32\6to4svc.dll
    + 2009-12-25 03:07 . 2009-12-25 03:07 473600 c:\windows\Replay Video Capture\uninstall.exe
    + 2009-11-29 04:43 . 2010-02-12 02:10 473600 c:\windows\Replay Media Catcher\uninstall.exe
    + 2009-11-24 22:07 . 2009-11-24 22:07 429568 c:\windows\Installer\e452a6.msi
    + 2010-01-08 02:59 . 2010-01-08 02:59 501248 c:\windows\Installer\c62232.msi
    + 2010-01-08 02:58 . 2010-01-08 02:58 501248 c:\windows\Installer\c6221e.msi
    + 2010-01-08 02:58 . 2010-01-08 02:58 506880 c:\windows\Installer\c62219.msi
    + 2010-01-08 02:58 . 2010-01-08 02:58 516608 c:\windows\Installer\c62213.msi
    + 2010-01-08 02:58 . 2010-01-08 02:58 513024 c:\windows\Installer\c6220d.msi
    + 2010-01-08 02:57 . 2010-01-08 02:57 501248 c:\windows\Installer\c62203.msi
    + 2010-01-08 02:56 . 2010-01-08 02:56 501248 c:\windows\Installer\c621e1.msi
    + 2009-11-21 09:27 . 2009-11-21 09:27 424960 c:\windows\Installer\2d22a01.msi
    + 2010-03-20 07:17 . 2010-03-20 07:17 677888 c:\windows\Installer\171928.msi
    + 2010-05-25 22:41 . 2010-05-25 22:41 700416 c:\windows\Installer\1660626.msi
    + 2009-11-18 07:42 . 2009-11-18 07:42 109568 c:\windows\Installer\13f9609.msi
    + 2010-05-26 22:21 . 2010-05-26 22:21 305664 c:\windows\Installer\12ead27.msi
    + 2010-03-20 11:32 . 2010-03-20 11:32 796672 c:\windows\Installer\1080530.msi
    - 2009-10-15 07:40 . 2009-10-15 07:40 371272 c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
    + 2010-05-25 22:41 . 2010-05-25 22:41 371272 c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe
    + 2010-01-30 08:05 . 2010-01-30 08:05 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    + 2010-03-20 11:47 . 2010-03-20 11:47 102400 c:\windows\Installer\{81063354-9060-42B2-A000-1EBE96778AA9}\iTunesIco.exe
    + 2009-12-21 22:35 . 2009-12-21 22:35 378264 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\pdfshell.dll
    + 2009-12-22 00:05 . 2009-12-22 00:05 116168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\PDFPrevHndlrShim.exe
    + 2009-12-21 22:34 . 2009-12-21 22:34 103864 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\nppdf32.dll
    + 2009-11-09 23:18 . 2009-11-09 23:18 684032 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\JP2KLib.dll
    + 2009-12-22 00:02 . 2009-12-22 00:02 542168 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AdobeCollabSync.exe
    + 2009-12-21 22:43 . 2009-12-21 22:43 120240 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRdIF.dll
    + 2009-12-22 05:57 . 2009-12-22 05:57 349616 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRd32.exe
    + 2009-12-21 22:15 . 2009-12-21 22:15 660912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroPDF.dll
    + 2009-12-21 23:32 . 2009-12-21 23:32 280024 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\acrobroker.exe
    + 2009-12-21 23:15 . 2009-12-21 23:15 251296 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\a3dutility.exe
    + 2006-10-27 20:23 . 2006-10-27 20:23 347432 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WINWORD.EXE
    + 2006-10-27 01:09 . 2006-10-27 01:09 590144 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PUBCONV.DLL
    + 2006-10-27 20:04 . 2006-10-27 20:04 624456 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PTXT9.DLL
    + 2006-10-27 01:09 . 2006-10-27 01:09 136008 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PRTF9.DLL
    + 2010-01-08 03:02 . 2010-01-08 03:02 248632 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTPIA.DLL
    + 2006-10-27 20:04 . 2006-10-27 20:04 465200 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\POWERPNT.EXE
    + 2006-10-27 20:04 . 2006-10-27 20:04 497504 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MORPH9.DLL
    + 2006-10-27 00:49 . 2006-10-27 00:49 970528 c:\windows\Installer\$PatchCache$\Managed\00002109010090400000000000F01FEC\12.0.4518\MSONSEXT.DLL
    + 2010-03-31 07:03 . 2010-01-05 10:00 832512 c:\windows\ie7updates\KB980182-IE7\wininet.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 233472 c:\windows\ie7updates\KB980182-IE7\webcheck.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 105984 c:\windows\ie7updates\KB980182-IE7\url.dll
    + 2010-03-31 07:03 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB980182-IE7\spuninst\updspapi.dll
    + 2010-03-31 07:03 . 2009-05-26 11:40 231288 c:\windows\ie7updates\KB980182-IE7\spuninst\spuninst.exe
    + 2010-03-31 07:03 . 2010-01-05 10:00 102912 c:\windows\ie7updates\KB980182-IE7\occache.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 671232 c:\windows\ie7updates\KB980182-IE7\mstime.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 193024 c:\windows\ie7updates\KB980182-IE7\msrating.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 477696 c:\windows\ie7updates\KB980182-IE7\mshtmled.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 459264 c:\windows\ie7updates\KB980182-IE7\msfeeds.dll
    + 2010-03-31 07:03 . 2009-12-18 13:05 634648 c:\windows\ie7updates\KB980182-IE7\iexplore.exe
    + 2010-03-31 07:03 . 2010-01-05 10:00 268288 c:\windows\ie7updates\KB980182-IE7\iertutil.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 192512 c:\windows\ie7updates\KB980182-IE7\iepeers.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 385024 c:\windows\ie7updates\KB980182-IE7\iedkcs32.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 380928 c:\windows\ie7updates\KB980182-IE7\ieapfltr.dll
    + 2010-03-31 07:03 . 2009-12-18 13:04 161792 c:\windows\ie7updates\KB980182-IE7\ieakui.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 230400 c:\windows\ie7updates\KB980182-IE7\ieaksie.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 153088 c:\windows\ie7updates\KB980182-IE7\ieakeng.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 133120 c:\windows\ie7updates\KB980182-IE7\extmgr.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 214528 c:\windows\ie7updates\KB980182-IE7\dxtrans.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 347136 c:\windows\ie7updates\KB980182-IE7\dxtmsft.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 124928 c:\windows\ie7updates\KB980182-IE7\advpack.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 832512 c:\windows\ie7updates\KB978207-IE7\wininet.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 233472 c:\windows\ie7updates\KB978207-IE7\webcheck.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 105984 c:\windows\ie7updates\KB978207-IE7\url.dll
    + 2010-01-22 08:03 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB978207-IE7\spuninst\updspapi.dll
    + 2010-01-22 08:03 . 2009-05-26 11:40 231288 c:\windows\ie7updates\KB978207-IE7\spuninst\spuninst.exe
    + 2010-01-22 08:02 . 2009-10-29 07:46 102912 c:\windows\ie7updates\KB978207-IE7\occache.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 671232 c:\windows\ie7updates\KB978207-IE7\mstime.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 193024 c:\windows\ie7updates\KB978207-IE7\msrating.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 477696 c:\windows\ie7updates\KB978207-IE7\mshtmled.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 459264 c:\windows\ie7updates\KB978207-IE7\msfeeds.dll
    + 2010-01-22 08:02 . 2009-10-28 06:54 634632 c:\windows\ie7updates\KB978207-IE7\iexplore.exe
    + 2010-01-22 08:02 . 2009-10-29 07:46 268288 c:\windows\ie7updates\KB978207-IE7\iertutil.dll
    + 2010-01-22 08:02 . 2007-08-13 23:54 191488 c:\windows\ie7updates\KB978207-IE7\iepeers.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 385024 c:\windows\ie7updates\KB978207-IE7\iedkcs32.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 380928 c:\windows\ie7updates\KB978207-IE7\ieapfltr.dll
    + 2010-01-22 08:02 . 2009-10-28 06:52 161792 c:\windows\ie7updates\KB978207-IE7\ieakui.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 230400 c:\windows\ie7updates\KB978207-IE7\ieaksie.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 153088 c:\windows\ie7updates\KB978207-IE7\ieakeng.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 133120 c:\windows\ie7updates\KB978207-IE7\extmgr.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 214528 c:\windows\ie7updates\KB978207-IE7\dxtrans.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 347136 c:\windows\ie7updates\KB978207-IE7\dxtmsft.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 124928 c:\windows\ie7updates\KB978207-IE7\advpack.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 832512 c:\windows\ie7updates\KB976325-IE7\wininet.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 233472 c:\windows\ie7updates\KB976325-IE7\webcheck.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 105984 c:\windows\ie7updates\KB976325-IE7\url.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB976325-IE7\spuninst\updspapi.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 231288 c:\windows\ie7updates\KB976325-IE7\spuninst\spuninst.exe
    + 2009-12-09 08:06 . 2009-08-29 07:36 102912 c:\windows\ie7updates\KB976325-IE7\occache.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 671232 c:\windows\ie7updates\KB976325-IE7\mstime.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 193024 c:\windows\ie7updates\KB976325-IE7\msrating.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 477696 c:\windows\ie7updates\KB976325-IE7\mshtmled.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 459264 c:\windows\ie7updates\KB976325-IE7\msfeeds.dll
    + 2009-12-09 08:06 . 2009-08-27 05:18 634648 c:\windows\ie7updates\KB976325-IE7\iexplore.exe
    + 2009-12-09 08:06 . 2009-08-29 07:36 268288 c:\windows\ie7updates\KB976325-IE7\iertutil.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 385024 c:\windows\ie7updates\KB976325-IE7\iedkcs32.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 380928 c:\windows\ie7updates\KB976325-IE7\ieapfltr.dll
    + 2009-12-09 08:06 . 2009-08-27 05:18 161792 c:\windows\ie7updates\KB976325-IE7\ieakui.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 230400 c:\windows\ie7updates\KB976325-IE7\ieaksie.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 153088 c:\windows\ie7updates\KB976325-IE7\ieakeng.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 133120 c:\windows\ie7updates\KB976325-IE7\extmgr.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 214528 c:\windows\ie7updates\KB976325-IE7\dxtrans.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 347136 c:\windows\ie7updates\KB976325-IE7\dxtmsft.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 124928 c:\windows\ie7updates\KB976325-IE7\advpack.dll
    + 2008-11-12 18:25 . 2009-12-04 18:22 455424 c:\windows\Driver Cache\I386\mrxsmb.sys
    + 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\Driver Cache\I386\http.sys
    + 2010-01-08 03:01 . 2010-01-08 03:01 416544 c:\windows\ASSEMBLY\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
    - 2005-11-11 22:03 . 2005-11-11 22:03 229376 c:\windows\ASSEMBLY\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
    + 2010-01-08 03:03 . 2010-01-08 03:03 229376 c:\windows\ASSEMBLY\GAC\mscomctl\10.0.4504.0__31bf3856ad364e35\MSCOMCTL.DLL
    + 2010-01-08 03:01 . 2010-01-08 03:01 371496 c:\windows\ASSEMBLY\GAC\Microsoft.Vbe.Interop.Forms\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.Forms.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 781104 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
    + 2010-01-08 03:02 . 2010-01-08 03:02 232248 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.Publisher\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Publisher.dll
    + 2010-01-08 08:17 . 2010-01-08 08:17 250928 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
    + 2010-01-08 03:01 . 2010-01-08 03:01 150320 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 110592 c:\windows\ASSEMBLY\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
    - 2007-08-11 15:20 . 2007-08-11 15:20 110592 c:\windows\ASSEMBLY\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll
    + 2004-08-04 11:00 . 2009-11-21 15:51 471552 c:\windows\AppPatch\aclayers.dll
    + 2010-02-12 02:11 . 2010-02-12 02:11 473600 c:\windows\Applian Director\uninstall.exe
    + 2010-04-15 07:07 . 2008-05-09 10:53 430080 c:\windows\$NtUninstallKB981349$\vbscript.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB981349$\spuninst\updspapi.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB981349$\spuninst\spuninst.exe
    + 2010-04-15 07:10 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979683$\spuninst\updspapi.dll
    + 2010-04-15 07:10 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB979683$\spuninst\spuninst.exe
    + 2010-04-14 07:02 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979309$\spuninst\updspapi.dll
    + 2010-04-14 07:02 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB979309$\spuninst\spuninst.exe
    + 2010-02-24 11:59 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB979306$\spuninst\updspapi.dll
    + 2010-02-24 11:59 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB979306$\spuninst\spuninst.exe
    + 2010-02-10 08:04 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978706$\spuninst\updspapi.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB978706$\spuninst\spuninst.exe
    + 2010-02-10 08:04 . 2008-04-14 00:12 343040 c:\windows\$NtUninstallKB978706$\mspaint.exe
    + 2010-04-14 07:03 . 2008-04-14 00:12 176640 c:\windows\$NtUninstallKB978601$\wintrust.dll
    + 2010-04-14 07:03 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978601$\spuninst\updspapi.dll
    + 2010-04-14 07:03 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB978601$\spuninst\spuninst.exe
    + 2010-04-15 07:07 . 2008-06-20 11:08 225856 c:\windows\$NtUninstallKB978338$\tcpip6.sys
    + 2010-04-15 07:07 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978338$\spuninst\updspapi.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB978338$\spuninst\spuninst.exe
    + 2010-04-15 07:07 . 2008-04-14 00:11 100352 c:\windows\$NtUninstallKB978338$\6to4svc.dll
    + 2010-02-10 08:16 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978262$\spuninst\updspapi.dll
    + 2010-02-10 08:16 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB978262$\spuninst\spuninst.exe
    + 2010-02-10 08:07 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978251$\spuninst\updspapi.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB978251$\spuninst\spuninst.exe
    + 2010-02-10 08:07 . 2008-10-24 11:21 455296 c:\windows\$NtUninstallKB978251$\mrxsmb.sys
    + 2010-02-10 08:08 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB978037$\spuninst\updspapi.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB978037$\spuninst\spuninst.exe
    + 2010-02-10 08:04 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB977914$\spuninst\updspapi.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB977914$\spuninst\spuninst.exe
    + 2010-04-15 07:06 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB977816$\spuninst\updspapi.dll
    + 2010-04-15 07:06 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB977816$\spuninst\spuninst.exe
    + 2010-02-10 08:02 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB977165$\spuninst\updspapi.dll
    + 2010-02-10 08:02 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB977165$\spuninst\spuninst.exe
    + 2009-11-24 22:09 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB976098-v2$\spuninst\updspapi.dll
    + 2009-11-24 22:09 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB976098-v2$\spuninst\spuninst.exe
    + 2010-02-10 08:07 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB975713$\spuninst\updspapi.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB975713$\spuninst\spuninst.exe
    + 2010-02-10 08:07 . 2008-04-14 00:12 474112 c:\windows\$NtUninstallKB975713$\shlwapi.dll
    + 2010-03-11 08:09 . 2009-05-26 22:10 382840 c:\windows\$NtUninstallKB975561$\spuninst\updspapi.dll
    + 2010-03-11 08:09 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB975561$\spuninst\spuninst.exe
    + 2010-02-10 08:07 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB975560$\spuninst\updspapi.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB975560$\spuninst\spuninst.exe
    + 2009-12-09 08:05 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB974392$\spuninst\updspapi.dll
    + 2009-12-09 08:05 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB974392$\spuninst\spuninst.exe
    + 2009-12-09 08:05 . 2008-04-14 00:12 270336 c:\windows\$NtUninstallKB974392$\oakley.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB974318$\spuninst\updspapi.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB974318$\spuninst\spuninst.exe
    + 2009-12-09 08:08 . 2008-04-14 00:12 150016 c:\windows\$NtUninstallKB974318$\rastls.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB973904$\spuninst\updspapi.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB973904$\spuninst\spuninst.exe
    + 2009-11-24 22:09 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB973687$\spuninst\updspapi.dll
    + 2009-11-24 22:09 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB973687$\spuninst\spuninst.exe
    + 2010-01-13 08:06 . 2009-06-16 14:36 119808 c:\windows\$NtUninstallKB972270$\t2embed.dll
    + 2010-01-13 08:06 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB972270$\spuninst\updspapi.dll
    + 2010-01-13 08:06 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB972270$\spuninst\spuninst.exe
    + 2009-12-09 08:05 . 2008-12-16 12:30 354304 c:\windows\$NtUninstallKB971737$\winhttp.dll
    + 2009-12-09 08:05 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB971737$\spuninst\updspapi.dll
    + 2009-12-09 08:05 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971737$\spuninst\spuninst.exe
    + 2010-02-10 08:15 . 2008-12-11 10:57 333952 c:\windows\$NtUninstallKB971468$\srv.sys
    + 2010-02-10 08:15 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB971468$\spuninst\updspapi.dll
    + 2010-02-10 08:15 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971468$\spuninst\spuninst.exe
    + 2009-12-09 08:08 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB970430$\spuninst\updspapi.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB970430$\spuninst\spuninst.exe
    + 2009-12-09 08:08 . 2008-04-13 18:53 264832 c:\windows\$NtUninstallKB970430$\http.sys
    + 2010-01-13 08:06 . 2009-05-26 22:10 382840 c:\windows\$NtUninstallKB955759$\spuninst\updspapi.dll
    + 2010-01-13 08:06 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB955759$\spuninst\spuninst.exe
    + 2010-01-13 08:06 . 2008-04-14 00:11 451072 c:\windows\$NtUninstallKB955759$\aclayers.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981349\update\updspapi.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981349\update\update.exe
    + 2010-04-15 07:07 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981349\spuninst.exe
    + 2010-03-09 11:06 . 2010-03-09 11:06 430080 c:\windows\$hf_mig$\KB981349\SP3QFE\vbscript.dll
    + 2010-03-31 07:03 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB980182-IE7\update\updspapi.dll
    + 2010-03-31 07:03 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB980182-IE7\update\update.exe
    + 2010-03-31 07:03 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB980182-IE7\spuninst.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 841216 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\wininet.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 233472 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\webcheck.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 105984 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\url.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 102912 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\occache.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 671232 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mstime.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 193024 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\msrating.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 477696 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtmled.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 459264 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\msfeeds.dll
    + 2010-02-23 05:19 . 2010-02-23 05:19 634648 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iexplore.exe
    + 2010-03-11 11:49 . 2010-03-11 11:49 268288 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iertutil.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 193024 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iepeers.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 388608 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\iedkcs32.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 380928 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieapfltr.dll
    + 2010-02-23 05:18 . 2010-02-23 05:18 161792 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieakui.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 230400 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieaksie.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 153088 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieakeng.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 132608 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\extmgr.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 214528 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\dxtrans.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 347136 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\dxtmsft.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 124928 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\advpack.dll
    + 2010-04-15 07:10 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979683\update\updspapi.dll
    + 2010-04-15 07:10 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979683\update\update.exe
    + 2010-04-15 07:10 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB979683\spuninst.exe
    + 2010-04-14 07:02 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB979309\update\updspapi.dll
    + 2010-04-14 07:02 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB979309\update\update.exe
    + 2010-04-14 07:02 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB979309\spuninst.exe
    + 2010-02-10 08:04 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978706\update\updspapi.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978706\update\update.exe
    + 2010-02-10 08:04 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978706\spuninst.exe
    + 2009-12-16 18:27 . 2009-12-16 18:27 343040 c:\windows\$hf_mig$\KB978706\SP3QFE\mspaint.exe
    + 2010-04-14 07:03 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978601\update\updspapi.dll
    + 2010-04-14 07:03 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978601\update\update.exe
    + 2010-04-14 07:03 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB978601\spuninst.exe
    + 2009-12-24 06:42 . 2009-12-24 06:42 178176 c:\windows\$hf_mig$\KB978601\SP3QFE\wintrust.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978338\update\updspapi.dll
    + 2010-04-15 07:07 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978338\update\update.exe
    + 2010-04-15 07:07 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978338\spuninst.exe
    + 2010-02-11 11:36 . 2010-02-11 11:36 226880 c:\windows\$hf_mig$\KB978338\SP3QFE\tcpip6.sys
     
  13. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    + 2010-02-12 04:27 . 2010-02-12 04:27 100864 c:\windows\$hf_mig$\KB978338\SP3QFE\6to4svc.dll
    + 2010-02-10 08:16 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978262\update\updspapi.dll
    + 2010-02-10 08:16 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978262\update\update.exe
    + 2010-02-10 08:16 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978262\spuninst.exe
    + 2010-02-10 08:07 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978251\update\updspapi.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978251\update\update.exe
    + 2010-02-10 08:07 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978251\spuninst.exe
    + 2010-02-09 22:01 . 2009-12-04 17:25 456832 c:\windows\$hf_mig$\KB978251\SP3QFE\mrxsmb.sys
    + 2010-01-22 08:03 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978207-IE7\update\updspapi.dll
    + 2010-01-22 08:03 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978207-IE7\update\update.exe
    + 2010-01-22 08:03 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978207-IE7\spuninst.exe
    + 2010-01-05 09:57 . 2010-01-05 09:57 841216 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\wininet.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 233472 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\webcheck.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 105984 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\url.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 102912 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\occache.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 671232 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\mstime.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 193024 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\msrating.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 477696 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\mshtmled.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 459264 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\msfeeds.dll
    + 2009-12-18 07:00 . 2009-12-18 07:00 634632 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\iexplore.exe
    + 2010-01-05 09:57 . 2010-01-05 09:57 268288 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\iertutil.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 193024 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\iepeers.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 388608 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\iedkcs32.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 380928 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieapfltr.dll
    + 2009-12-18 06:58 . 2009-12-18 06:58 161792 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieakui.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 230400 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieaksie.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 153088 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieakeng.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 132608 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\extmgr.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 214528 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\dxtrans.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 347136 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\dxtmsft.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 124928 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\advpack.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB978037\update\updspapi.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB978037\update\update.exe
    + 2010-02-10 08:08 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB978037\spuninst.exe
    + 2010-02-10 08:04 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB977914\update\updspapi.dll
    + 2010-02-10 08:04 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB977914\update\update.exe
    + 2010-02-10 08:04 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB977914\spuninst.exe
    + 2010-04-15 07:06 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB977816\update\updspapi.dll
    + 2010-04-15 07:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB977816\update\update.exe
    + 2010-04-15 07:06 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB977816\spuninst.exe
    + 2010-02-10 08:03 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB977165\update\updspapi.dll
    + 2010-02-10 08:03 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB977165\update\update.exe
    + 2010-02-10 08:03 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB977165\spuninst.exe
    + 2009-12-09 08:06 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB976325-IE7\update\updspapi.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB976325-IE7\update\update.exe
    + 2009-12-09 08:06 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB976325-IE7\spuninst.exe
    + 2009-10-29 07:45 . 2009-10-29 07:45 841216 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\wininet.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 233472 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\webcheck.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 105984 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\url.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 102912 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\occache.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 671232 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\mstime.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 193024 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\msrating.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 477696 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\mshtmled.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 459264 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\msfeeds.dll
    + 2009-10-28 06:54 . 2009-10-28 06:54 634632 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\iexplore.exe
    + 2009-10-29 07:45 . 2009-10-29 07:45 268288 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\iertutil.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 388608 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\iedkcs32.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 380928 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieapfltr.dll
    + 2009-10-28 06:52 . 2009-10-28 06:52 161792 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieakui.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 230400 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieaksie.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 153088 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieakeng.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 132608 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\extmgr.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 214528 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\dxtrans.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 347136 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\dxtmsft.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 124928 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\advpack.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB975713\update\updspapi.dll
    + 2010-02-10 08:08 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB975713\update\update.exe
    + 2010-02-10 08:08 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB975713\spuninst.exe
    + 2009-12-08 09:01 . 2009-12-08 09:01 474112 c:\windows\$hf_mig$\KB975713\SP3QFE\shlwapi.dll
    + 2010-03-11 08:09 . 2009-05-26 22:10 382840 c:\windows\$hf_mig$\KB975561\update\updspapi.dll
    + 2010-03-11 08:09 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB975561\update\update.exe
    + 2010-03-11 08:09 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB975561\spuninst.exe
    + 2010-02-10 08:07 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB975560\update\updspapi.dll
    + 2010-02-10 08:07 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB975560\update\update.exe
    + 2010-02-10 08:07 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB975560\spuninst.exe
    + 2009-12-09 08:05 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB974392\update\updspapi.dll
    + 2009-12-09 08:05 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB974392\update\update.exe
    + 2009-12-09 08:05 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB974392\spuninst.exe
    + 2009-10-13 10:38 . 2009-10-13 10:38 270336 c:\windows\$hf_mig$\KB974392\SP3QFE\oakley.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB974318\update\updspapi.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB974318\update\update.exe
    + 2009-12-09 08:08 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB974318\spuninst.exe
    + 2009-10-12 13:28 . 2009-10-12 13:28 150016 c:\windows\$hf_mig$\KB974318\SP3QFE\rastls.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB973904\update\updspapi.dll
    + 2009-12-09 08:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB973904\update\update.exe
    + 2009-12-09 08:06 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB973904\spuninst.exe
    + 2009-12-09 07:56 . 2009-07-29 14:01 119648 c:\windows\$hf_mig$\KB973904\SP3QFE\msconv97.dll
    + 2009-11-24 22:09 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB973687\update\updspapi.dll
    + 2009-11-24 22:09 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB973687\update\update.exe
    + 2009-11-24 22:09 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB973687\spuninst.exe
    + 2010-01-13 08:06 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB972270\update\updspapi.dll
    + 2010-01-13 08:06 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB972270\update\update.exe
    + 2010-01-13 08:06 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB972270\spuninst.exe
    + 2010-01-13 07:07 . 2009-10-15 16:39 119808 c:\windows\$hf_mig$\KB972270\SP3QFE\t2embed.dll
    + 2009-12-09 08:05 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971737\update\updspapi.dll
    + 2009-12-09 08:05 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971737\update\update.exe
    + 2009-12-09 08:05 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971737\spuninst.exe
    + 2009-08-25 09:27 . 2009-08-25 09:27 354816 c:\windows\$hf_mig$\KB971737\SP3QFE\winhttp.dll
    + 2010-02-10 08:15 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB971468\update\updspapi.dll
    + 2010-02-10 08:15 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB971468\update\update.exe
    + 2010-02-10 08:15 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971468\spuninst.exe
    + 2010-02-09 22:02 . 2010-01-01 07:58 353792 c:\windows\$hf_mig$\KB971468\SP3QFE\srv.sys
    + 2009-12-09 08:08 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB970430\update\updspapi.dll
    + 2009-12-09 08:08 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB970430\update\update.exe
    + 2009-12-09 08:08 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB970430\spuninst.exe
    + 2009-10-20 15:21 . 2009-10-20 15:21 265728 c:\windows\$hf_mig$\KB970430\SP3QFE\http.sys
    + 2010-01-13 08:06 . 2009-05-26 22:10 382840 c:\windows\$hf_mig$\KB955759\update\updspapi.dll
    + 2010-01-13 08:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB955759\update\update.exe
    + 2010-01-13 08:06 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB955759\spuninst.exe
    + 2010-01-13 07:07 . 2009-11-21 15:40 471552 c:\windows\$hf_mig$\KB955759\SP3QFE\aclayers.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
    - 2006-12-02 04:25 . 2006-12-02 04:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
    - 2006-12-02 04:25 . 2006-12-02 04:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
    + 2007-08-23 05:18 . 2007-08-23 05:18 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
    + 2009-07-12 01:46 . 2009-07-12 01:46 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80u.dll
    + 2009-07-12 01:46 . 2009-07-12 01:46 1105920 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll
    + 2009-07-21 05:03 . 2009-07-21 05:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
    + 2009-07-10 19:21 . 2009-06-05 15:42 2060288 c:\windows\SYSTEM32\usbaaplrc.dll
    - 2004-08-04 11:00 . 2009-08-29 07:36 1168384 c:\windows\SYSTEM32\urlmon.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 1168384 c:\windows\SYSTEM32\urlmon.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 8890752 c:\windows\SYSTEM32\SPOOL\DRIVERS\x64\3\udceng.exe
    + 2010-01-24 18:56 . 2010-01-24 18:56 1706800 c:\windows\SYSTEM32\SPOOL\DRIVERS\x64\3\gdiplus.dll
    + 2010-01-24 18:56 . 2010-01-24 18:56 8890752 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\udceng.exe
    + 2010-01-24 18:56 . 2010-01-24 18:56 1706800 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\gdiplus.dll
    + 2004-08-04 11:00 . 2009-11-27 17:11 1291776 c:\windows\SYSTEM32\quartz.dll
    + 2006-07-31 16:01 . 2009-04-28 20:20 1858032 c:\windows\SYSTEM32\pxsfs.dll
    + 1980-01-01 06:00 . 2010-02-16 14:08 2146304 c:\windows\SYSTEM32\ntoskrnl.exe
    + 1980-01-01 06:00 . 2010-02-16 13:25 2024448 c:\windows\SYSTEM32\ntkrnlpa.exe
    + 2008-08-30 02:16 . 2009-07-31 15:05 1372672 c:\windows\SYSTEM32\msxml6.dll
    + 2009-07-21 05:05 . 2009-07-21 05:05 1348432 c:\windows\SYSTEM32\msxml4.dll
    + 2004-08-04 11:00 . 2009-07-31 04:35 1172480 c:\windows\SYSTEM32\msxml3.dll
    + 2004-08-04 11:00 . 2010-03-11 12:38 3599872 c:\windows\SYSTEM32\mshtml.dll
    + 2007-08-13 23:54 . 2010-03-11 12:38 6067200 c:\windows\SYSTEM32\ieframe.dll
    - 2007-08-13 23:54 . 2009-08-29 07:36 6067200 c:\windows\SYSTEM32\ieframe.dll
    + 2004-08-11 23:20 . 2010-01-08 21:10 2636728 c:\windows\SYSTEM32\FNTCACHE.DAT
    + 2010-03-20 11:34 . 2009-08-28 23:42 2065696 c:\windows\SYSTEM32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaaplrc.dll
    + 2009-02-10 19:28 . 2010-03-11 12:38 1168384 c:\windows\SYSTEM32\DLLCACHE\urlmon.dll
    - 2009-02-10 19:28 . 2009-08-29 07:36 1168384 c:\windows\SYSTEM32\DLLCACHE\urlmon.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 3374640 c:\windows\SYSTEM32\DLLCACHE\tourW.exe
    + 2004-08-04 11:00 . 2008-04-13 18:37 2842112 c:\windows\SYSTEM32\DLLCACHE\sprb040D.dll
    + 2004-08-04 11:00 . 2008-04-13 18:35 2869248 c:\windows\SYSTEM32\DLLCACHE\sprb0401.dll
    + 2008-08-30 02:15 . 2008-04-14 00:12 2134528 c:\windows\SYSTEM32\DLLCACHE\smtpsnap.dll
    - 2009-07-17 16:22 . 2009-07-17 16:22 1435648 c:\windows\SYSTEM32\DLLCACHE\query.dll
    + 2004-08-04 11:00 . 2009-07-17 16:22 1435648 c:\windows\SYSTEM32\DLLCACHE\query.dll
    + 2008-12-20 22:14 . 2009-11-27 17:11 1291776 c:\windows\SYSTEM32\DLLCACHE\quartz.dll
    + 2004-08-04 06:56 . 2008-04-14 00:12 4274816 c:\windows\SYSTEM32\DLLCACHE\nv4_disp.dll
    + 2009-04-15 14:23 . 2010-02-17 13:10 2189952 c:\windows\SYSTEM32\DLLCACHE\ntoskrnl.exe
    + 2009-04-15 14:23 . 2010-02-16 13:25 2024448 c:\windows\SYSTEM32\DLLCACHE\ntkrpamp.exe
    + 2009-02-07 23:02 . 2010-02-16 13:25 2066816 c:\windows\SYSTEM32\DLLCACHE\ntkrnlpa.exe
    + 2009-04-15 14:23 . 2010-02-16 14:08 2146304 c:\windows\SYSTEM32\DLLCACHE\ntkrnlmp.exe
    + 2008-08-30 02:16 . 2008-04-14 00:12 1737856 c:\windows\SYSTEM32\DLLCACHE\mtxparhd.dll
    + 2009-07-31 15:05 . 2009-07-31 15:05 1372672 c:\windows\SYSTEM32\DLLCACHE\msxml6.dll
    + 2009-11-24 21:03 . 2009-07-31 04:35 1172480 c:\windows\SYSTEM32\DLLCACHE\msxml3.dll
    + 2004-08-04 11:00 . 2008-04-13 16:23 2479616 c:\windows\SYSTEM32\DLLCACHE\msoeres.dll
    + 2004-08-04 11:00 . 2010-01-29 15:01 1315328 c:\windows\SYSTEM32\DLLCACHE\msoe.dll
    - 2009-08-11 18:11 . 2009-07-10 13:27 1315328 c:\windows\SYSTEM32\DLLCACHE\msoe.dll
    + 2004-08-04 11:00 . 2008-03-25 04:50 1516568 c:\windows\SYSTEM32\DLLCACHE\msjet40.dll
    + 2008-12-18 09:48 . 2010-03-11 12:38 3599872 c:\windows\SYSTEM32\DLLCACHE\mshtml.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 3166208 c:\windows\SYSTEM32\DLLCACHE\msgr3en.dll
    + 2010-03-10 21:46 . 2009-10-23 15:28 3558912 c:\windows\SYSTEM32\DLLCACHE\moviemk.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 1872896 c:\windows\SYSTEM32\DLLCACHE\mmcndmgr.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 1414656 c:\windows\SYSTEM32\DLLCACHE\mmc.exe
    + 2007-05-09 21:48 . 2010-03-11 12:38 6067200 c:\windows\SYSTEM32\DLLCACHE\ieframe.dll
    - 2007-05-09 21:48 . 2009-08-29 07:36 6067200 c:\windows\SYSTEM32\DLLCACHE\ieframe.dll
    + 2004-08-04 11:00 . 2004-08-04 11:00 1114896 c:\windows\SYSTEM32\DLLCACHE\esent97.dll
    + 2004-08-04 11:00 . 2008-04-14 00:12 1298432 c:\windows\SYSTEM32\DLLCACHE\dxdiag.exe
    + 2004-08-04 11:00 . 2008-04-14 00:11 1227264 c:\windows\SYSTEM32\DLLCACHE\dx8vb.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 1293824 c:\windows\SYSTEM32\DLLCACHE\dsound3d.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 1054208 c:\windows\SYSTEM32\DLLCACHE\danim.dll
    + 2004-08-04 11:00 . 2008-04-14 00:11 2091520 c:\windows\SYSTEM32\DLLCACHE\cdosys.dll
    + 2010-05-05 13:40 . 2010-05-05 13:40 1011712 c:\windows\SYSTEM32\Adobe\Shockwave 11\iml32.dll
    + 2010-04-29 10:11 . 2010-04-29 10:11 1975408 c:\windows\SYSTEM32\Adobe\Shockwave 11\gt.exe
    - 2008-10-15 04:24 . 2008-08-06 19:45 1798144 c:\windows\SYSTEM32\Adobe\Shockwave 11\dirapi.dll
    + 2010-05-05 13:44 . 2010-05-05 13:44 1798144 c:\windows\SYSTEM32\Adobe\Shockwave 11\dirapi.dll
    + 2009-11-18 07:39 . 2009-03-14 22:07 1550848 c:\windows\Resources\Themes\SevenVG Black\Shell\NormalColor\Shellstyle.dll
    + 2009-11-18 07:39 . 2009-03-14 22:07 1550848 c:\windows\Resources\Themes\SevenVG Black\Shell\Aero48\Shellstyle.dll
    + 2009-11-18 07:44 . 2009-03-14 22:07 1550848 c:\windows\Resources\Themes\SevenVG Black Normal\Shell\NormalColor\Shellstyle.dll
    + 2009-11-18 07:44 . 2009-03-14 22:07 1550848 c:\windows\Resources\Themes\SevenVG Black Normal\Shell\Aero48\Shellstyle.dll
    + 2010-01-08 02:59 . 2010-01-08 02:59 1640960 c:\windows\Installer\c62237.msi
    + 2010-01-08 02:59 . 2010-01-08 02:59 1652736 c:\windows\Installer\c6222d.msi
    + 2010-01-08 02:59 . 2010-01-08 02:59 1652736 c:\windows\Installer\c62228.msi
    + 2010-01-08 02:58 . 2010-01-08 02:58 1652736 c:\windows\Installer\c62223.msi
    + 2010-01-08 02:57 . 2010-01-08 02:57 2319872 c:\windows\Installer\c62208.msi
    + 2010-01-08 02:57 . 2010-01-08 02:57 1647616 c:\windows\Installer\c621fe.msi
    + 2010-01-08 02:57 . 2010-01-08 02:57 1640960 c:\windows\Installer\c621f0.msi
    + 2010-01-08 02:57 . 2010-01-08 02:57 2022912 c:\windows\Installer\c621eb.msi
    + 2010-01-08 02:56 . 2010-01-08 02:56 1713152 c:\windows\Installer\c621e6.msi
    + 2010-01-08 02:56 . 2010-01-08 02:56 2397184 c:\windows\Installer\c621dc.msi
    + 2009-12-03 19:15 . 2009-12-03 19:15 5004288 c:\windows\Installer\4c6729.msp
    + 2010-02-07 09:08 . 2010-02-07 09:08 2226688 c:\windows\Installer\35a3090.msi
    + 2010-04-09 19:21 . 2010-04-09 19:21 5025792 c:\windows\Installer\320668b.msp
    + 2010-01-15 02:26 . 2010-01-15 02:26 5027840 c:\windows\Installer\2bc0026.msp
    + 2010-02-04 05:59 . 2010-02-04 05:59 5031936 c:\windows\Installer\29eb5ad.msp
    + 2010-03-12 03:59 . 2010-03-12 03:59 5031424 c:\windows\Installer\240cac5.msp
    + 2009-11-21 04:36 . 2009-11-21 04:36 5002752 c:\windows\Installer\1dec501.msp
    + 2008-04-11 23:08 . 2008-04-11 23:08 6302720 c:\windows\Installer\1dec4eb.msp
    + 2008-04-11 23:48 . 2008-04-11 23:48 6774272 c:\windows\Installer\1dec4ba.msp
    + 2009-02-26 00:08 . 2009-02-26 00:08 8311808 c:\windows\Installer\1dec4a2.msp
    + 2008-05-21 05:45 . 2008-05-21 05:45 5246976 c:\windows\Installer\1dec3f0.msp
    + 2009-04-04 15:14 . 2009-04-04 15:14 1094656 c:\windows\Installer\1c164b6.msp
    + 2010-05-04 20:24 . 2010-05-04 20:24 3940352 c:\windows\Installer\166919f.msi
    + 2010-05-25 22:41 . 2010-05-25 22:41 1575936 c:\windows\Installer\1660620.msi
    + 2007-03-27 21:14 . 2007-03-27 21:14 5566464 c:\windows\Installer\157512c.msp
    + 2007-03-31 03:20 . 2007-03-31 03:20 5800960 c:\windows\Installer\1405de4.msp
    + 2007-06-01 20:54 . 2007-06-01 20:54 9626624 c:\windows\Installer\1405da5.msp
    + 2008-10-20 15:18 . 2008-10-20 15:18 6474240 c:\windows\Installer\1405d90.msp
    + 2010-03-20 11:47 . 2010-03-20 11:47 4449280 c:\windows\Installer\1080c70.msi
    + 2010-03-20 11:40 . 2010-03-20 11:40 9473024 c:\windows\Installer\108092b.msi
    + 2010-03-20 11:35 . 2010-03-20 11:35 3310592 c:\windows\Installer\108069d.msi
    + 2010-01-08 08:03 . 2010-05-12 07:02 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    + 2010-01-08 08:03 . 2010-05-12 07:02 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-12-21 22:29 . 2009-12-21 22:29 2409880 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\rt3d.dll
    + 2009-10-28 00:34 . 2009-10-28 00:34 5009408 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\authplay.dll
    + 2009-12-22 03:31 . 2009-12-22 03:31 5713920 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AGM.dll
    + 2006-10-27 20:04 . 2006-10-27 20:04 7980848 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPCORE.DLL
    + 2006-09-15 21:25 . 2006-09-15 21:25 3611416 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLFLTR.DAT
    + 2006-10-27 20:04 . 2006-10-27 20:04 9581360 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSPUB.EXE
    + 2006-10-27 00:49 . 2006-10-27 00:49 1011488 c:\windows\Installer\$PatchCache$\Managed\00002109010090400000000000F01FEC\12.0.4518\MSDAIPP.DLL
    + 2010-03-31 07:03 . 2010-01-05 10:00 1168384 c:\windows\ie7updates\KB980182-IE7\urlmon.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 3599360 c:\windows\ie7updates\KB980182-IE7\mshtml.dll
    + 2010-03-31 07:03 . 2010-01-05 10:00 6067200 c:\windows\ie7updates\KB980182-IE7\ieframe.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 1168384 c:\windows\ie7updates\KB978207-IE7\urlmon.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 3598336 c:\windows\ie7updates\KB978207-IE7\mshtml.dll
    + 2010-01-22 08:02 . 2009-10-29 07:46 6067200 c:\windows\ie7updates\KB978207-IE7\ieframe.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 1168384 c:\windows\ie7updates\KB976325-IE7\urlmon.dll
    + 2009-12-09 08:06 . 2009-10-21 04:08 3598336 c:\windows\ie7updates\KB976325-IE7\mshtml.dll
    + 2009-12-09 08:06 . 2009-08-29 07:36 6067200 c:\windows\ie7updates\KB976325-IE7\ieframe.dll
    + 2008-10-16 03:00 . 2010-02-17 13:10 2189952 c:\windows\Driver Cache\I386\ntoskrnl.exe
    + 2008-10-16 02:59 . 2010-02-16 13:25 2024448 c:\windows\Driver Cache\I386\ntkrpamp.exe
    + 2008-10-16 02:59 . 2010-02-16 13:25 2066816 c:\windows\Driver Cache\I386\ntkrnlpa.exe
    + 2008-10-16 03:00 . 2010-02-16 14:08 2146304 c:\windows\Driver Cache\I386\ntkrnlmp.exe
    + 2010-01-08 03:01 . 2010-01-08 03:01 1276720 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
    + 2010-01-08 03:01 . 2010-01-08 03:01 1612592 c:\windows\ASSEMBLY\GAC\Microsoft.Office.Interop.Access\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Access.dll
    + 2010-01-08 03:03 . 2010-01-08 03:03 8007680 c:\windows\ASSEMBLY\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
    + 2010-04-15 07:10 . 2009-12-08 19:26 2145280 c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
    + 2010-04-15 07:10 . 2009-12-08 18:43 2023936 c:\windows\$NtUninstallKB979683$\ntkrpamp.exe
    + 2010-04-15 07:10 . 2009-12-08 18:43 2023936 c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
    + 2010-04-15 07:10 . 2009-12-08 19:26 2145280 c:\windows\$NtUninstallKB979683$\ntkrnlmp.exe
    + 2010-02-10 08:02 . 2009-08-04 15:13 2145280 c:\windows\$NtUninstallKB977165$\ntoskrnl.exe
    + 2010-02-10 08:02 . 2009-08-04 14:20 2023936 c:\windows\$NtUninstallKB977165$\ntkrpamp.exe
    + 2010-02-10 08:02 . 2009-08-04 14:20 2023936 c:\windows\$NtUninstallKB977165$\ntkrnlpa.exe
    + 2010-02-10 08:02 . 2009-08-04 15:13 2145280 c:\windows\$NtUninstallKB977165$\ntkrnlmp.exe
    + 2010-03-11 08:09 . 2008-04-14 00:12 3558912 c:\windows\$NtUninstallKB975561$\moviemk.exe
    + 2010-02-10 08:07 . 2009-06-03 19:09 1291264 c:\windows\$NtUninstallKB975560$\quartz.dll
    + 2009-11-24 22:09 . 2008-09-10 01:14 1307648 c:\windows\$NtUninstallKB973687$\msxml6.dll
    + 2009-11-24 22:09 . 2008-09-04 17:15 1106944 c:\windows\$NtUninstallKB973687$\msxml3.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 1171968 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\urlmon.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 3602944 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtml.dll
    + 2010-03-11 11:49 . 2010-03-11 11:49 6070784 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieframe.dll
    + 2010-03-30 19:28 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB980182-IE7\SP3QFE\ieapfltr.dat
    + 2010-04-15 01:18 . 2010-02-16 12:52 2190080 c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
    + 2010-04-15 01:18 . 2010-02-16 12:12 2024448 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrpamp.exe
    + 2010-04-15 01:18 . 2010-02-16 12:12 2066944 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
    + 2010-04-15 01:18 . 2010-02-16 12:50 2146304 c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlmp.exe
    + 2010-01-05 09:57 . 2010-01-05 09:57 1170944 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\urlmon.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 3602944 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\mshtml.dll
    + 2010-01-05 09:57 . 2010-01-05 09:57 6071296 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieframe.dll
    + 2010-01-21 20:58 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB978207-IE7\SP3QFE\ieapfltr.dat
    + 2009-12-09 04:52 . 2009-12-09 04:52 2189312 c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
    + 2010-02-09 22:00 . 2009-12-08 17:40 2023936 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrpamp.exe
    + 2009-12-09 04:10 . 2009-12-09 04:10 2066176 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
    + 2010-02-09 22:00 . 2009-12-08 18:20 2145280 c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlmp.exe
    + 2009-10-29 07:45 . 2009-10-29 07:45 1170944 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\urlmon.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 3602432 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\mshtml.dll
    + 2009-10-29 07:45 . 2009-10-29 07:45 6070784 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieframe.dll
    + 2009-12-09 07:57 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB976325-IE7\SP3QFE\ieapfltr.dat
    + 2010-03-10 21:46 . 2009-10-23 14:53 3558912 c:\windows\$hf_mig$\KB975561\SP3QFE\moviemk.exe
    + 2009-11-27 17:23 . 2009-11-27 17:23 1291776 c:\windows\$hf_mig$\KB975560\SP3QFE\quartz.dll
    + 2009-11-24 21:03 . 2009-07-31 04:24 1447424 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml6.dll
    + 2009-11-24 21:03 . 2009-07-31 04:24 1172480 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml3.dll
    + 2005-05-12 21:41 . 2010-04-30 18:51 32058312 c:\windows\SYSTEM32\MRT.exe
    + 2010-01-08 03:06 . 2010-01-08 03:06 18181632 c:\windows\Installer\c62243.msi
    + 2010-04-04 06:54 . 2010-04-04 06:54 11850240 c:\windows\Installer\3dc1f.msp
    + 2008-09-24 17:05 . 2008-09-24 17:05 16381440 c:\windows\Installer\2c34b93.msp
    + 2008-09-24 17:05 . 2008-09-24 17:05 16381440 c:\windows\Installer\1dec530.msp
    + 2008-10-20 15:16 . 2008-10-20 15:16 13211648 c:\windows\Installer\1dec52e.msp
    + 2008-08-11 16:49 . 2008-08-11 16:49 22457344 c:\windows\Installer\1dec516.msp
    + 2009-02-26 00:05 . 2009-02-26 00:05 11840000 c:\windows\Installer\1dec4d1.msp
    + 2008-05-21 06:30 . 2008-05-21 06:30 14308864 c:\windows\Installer\1dec3db.msp
    + 2009-04-04 22:09 . 2009-04-04 22:09 15190016 c:\windows\Installer\1c164d4.msp
    + 2009-04-04 16:36 . 2009-04-04 16:36 21390848 c:\windows\Installer\1c164b7.msp
    + 2008-08-11 16:51 . 2008-08-11 16:51 15916544 c:\windows\Installer\1405dcf.msp
    + 2009-02-26 00:07 . 2009-02-26 00:07 11646464 c:\windows\Installer\1405dba.msp
    + 2009-12-22 03:21 . 2009-12-22 03:21 20436408 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B7449A0300000010\9.3.0\AcroRd32.dll
    + 2006-10-27 20:23 . 2006-10-27 20:23 17483560 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WWLIB.DLL
    + 2006-10-27 20:07 . 2006-10-27 20:07 17891112 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXCEL.EXE
    + 2007-10-15 04:43 . 2007-10-15 04:43 229852160 c:\windows\Installer\2c34b71.msp
    + 2007-10-15 04:43 . 2007-10-15 04:43 229852160 c:\windows\Installer\1dec3f2.msp
    .
    -- Snapshot reset to current date --
     
  14. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    Code:
    (((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown 
    REGEDIT4
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
     "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
     "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
     "Dell Photo AIO Printer 942 "= "c:\program files\Dell Photo AIO Printer 942\dlbubmgr.exe" [2004-08-31 294912]
     "DellMCM "= "c:\program files\Dell Photo AIO Printer 942\memcard.exe" [2004-07-27 262144]
    
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
     "RunNarrator "= "Narrator.exe" [2008-04-14 53760]
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]
    @= "FSFilter Activity Monitor "
    
    [HKLM\~\startupfolder\C:^Documents and Settings^family^Start Menu^Programs^Startup^Styler.lnk]
    path=c:\documents and settings\family\Start Menu\Programs\Startup\Styler.lnk
    backup=c:\windows\pss\Styler.lnkStartup
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2010-03-24 18:17	952768	----a-w-	c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2010-04-04 05:42	36272	----a-w-	c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
    2010-03-02 06:09	135664	----atw-	c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
    2006-10-27 05:47	31016	----a-w-	c:\program files\Microsoft Office\Office12\GrooveMonitor.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
    2004-05-06 21:48	118784	-c--a-w-	c:\windows\SYSTEM32\hkcmd.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    2004-05-06 21:52	155648	-c--a-w-	c:\windows\SYSTEM32\igfxtray.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    2010-02-15 22:07	141608	----a-w-	c:\program files\iTunes\iTunesHelper.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mouse Suite 98 Daemon]
    2001-01-12 21:36	73728	-c--a-w-	c:\windows\SYSTEM32\PELMICED.EXE
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2009-11-11 03:08	417792	----a-w-	c:\program files\QuickTime\QTTask.exe
    
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
     "iPod Service "=3 (0x3)
     "PnkBstrB "=2 (0x2)
     "PnkBstrA "=2 (0x2)
     "ATI Smart "=2 (0x2)
     "Ati HotKey Poller "=2 (0x2)
     "Apple Mobile Device "=2 (0x2)
    
    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
     "AntiVirusOverride "=dword:00000001
     "FirewallOverride "=dword:00000001
    
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
     "DisableMonitoring "=dword:00000001
    
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
     "EnableFirewall "= 0 (0x0)
     "DisableNotifications "= 1 (0x1)
    
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
     "%windir%\\system32\\sessmgr.exe "=
     "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe "=
     "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe "=
     "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE "=
     "c:\\Program Files\\AIM7\\aim.exe "=
     "c:\\Program Files\\Opera 10 Beta\\opera.exe "=
     "c:\\Program Files\\Google\\Google Talk\\googletalk.exe "=
     "c:\\Documents and Settings\\family\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.dll "=
     "c:\\Documents and Settings\\family\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe "=
     "c:\\Program Files\\iTunes\\iTunes.exe "=
     "c:\\Black III\\Orbitdownloader\\orbitdm.exe "=
     "c:\\Black III\\Orbitdownloader\\orbitnet.exe "=
     "c:\\Program Files\\Skype\\Phone\\Skype.exe "=
    
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
     "3389:TCP "= 3389:TCP:@xpsp2res.dll,-22009
     "443:TCP "= 443:TCP:*:Disabled:ooVoo TCP port 443
     "443:UDP "= 443:UDP:*:Disabled:ooVoo UDP port 443
     "37674:TCP "= 37674:TCP:*:Disabled:ooVoo TCP port 37674
     "37674:UDP "= 37674:UDP:*:Disabled:ooVoo UDP port 37674
     "37675:UDP "= 37675:UDP:*:Disabled:ooVoo UDP port 37675
    
    R2 N360;Norton 360;c:\program files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe [2010-04-13 4:03 AM 117640]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-05-26 8:03 PM 102448]
    R3 JakNDisMP;JakNDisMP;c:\windows\SYSTEM32\DRIVERS\JakNDis.sys [2009-05-11 2:53 PM 21504]
    R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\SYSTEM32\DRIVERS\ManyCam.sys [2008-01-14 6:06 AM 21632]
    S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0308000.029\SYMEFA.SYS --> c:\windows\system32\drivers\N360\0308000.029\SYMEFA.SYS [?]
    S1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\Drivers\N360\0308000.029\BHDrvx86.sys --> c:\windows\system32\Drivers\N360\0308000.029\BHDrvx86.sys [?]
    S1 ccHP;Symantec Hash Provider;c:\windows\system32\Drivers\N360\0308000.029\ccHPx86.sys --> c:\windows\system32\Drivers\N360\0308000.029\ccHPx86.sys [?]
    S1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20100518.002\IDSXpx86.sys [2010-05-24 8:39 PM 331640]
    S2 sbbotdi;sbbotdi; [x]
    S2 Viewpoint Manager Service;Viewpoint Manager Service; "c:\program files\Viewpoint\Common\ViewpointService.exe" --> c:\program files\Viewpoint\Common\ViewpointService.exe [?]
    S3 hamachi_oem;PlayLinc Adapter;c:\windows\SYSTEM32\DRIVERS\gan_adapter.sys [2006-10-19 10664]
    S3 JakNDis;Jaksta Service;c:\windows\SYSTEM32\DRIVERS\JakNDis.sys [2009-05-11 2:53 PM 21504]
    S3 NTProcDrv;Process creation detector for NT.; [x]
    S3 PortTalk;PortTalk;c:\windows\SYSTEM32\DRIVERS\PortTalk.sys [2007-07-04 2:14 PM 3567]
    S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\windows\SYSTEM32\DRIVERS\scsiprnt.sys [2004-11-30 7:28 PM 11648]
    S3 vaxscsi;vaxscsi;c:\windows\SYSTEM32\DRIVERS\vaxscsi.sys [2007-06-03 223128]
    S4 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [2007-06-03 717296]
    
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    getPlusHelper	REG_MULTI_SZ   	getPlusHelper
    .
    Contents of the 'Scheduled Tasks' folder
    
    2010-05-17 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 16:34]
    
    2010-05-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2271019165-553755714-499774489-1005Core.job
    - c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 06:09]
    
    2010-05-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2271019165-553755714-499774489-1005UA.job
    - c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 06:09]
    .
    .
    ------- Supplementary Scan -------
    .
    uInternet Connection Wizard,ShellNext = iexplore
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    IE: &Download by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
    IE: {{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    FF - ProfilePath - c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\
    FF - prefs.js: browser.search.selectedEngine - DAEMON Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.blackle.com/
    FF - component: c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\components\coFFPlgn.dll
    FF - component: c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\FFExternalAlert.dll
    FF - component: c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\RadioWMPCore.dll
    FF - plugin: c:\documents and settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
    FF - plugin: c:\documents and settings\family\Application Data\Move Networks\plugins\npqmp071503000010.dll
    FF - plugin: c:\documents and settings\family\Application Data\Mozilla\plugins\npgoogletalk.dll
    FF - plugin: c:\documents and settings\family\Local Settings\Application Data\Google\Update\1.2.183.23\npGoogleOneClick8.dll
    FF - plugin: c:\program files\Java\jre1.6.0\bin\npjpi160.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
    FF - plugin: c:\program files\MZILLA\plugins\npCouponPrinter.dll
    FF - plugin: c:\program files\MZILLA\plugins\npGoogleGadgetPluginFirefoxWin.dll
    FF - plugin: c:\program files\MZILLA\plugins\npwachk.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npdsplay.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin2.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin3.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin4.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin5.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin6.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin7.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin8.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npwmsdrm.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    
    ---- FIREFOX POLICIES ----
    FF - user.js: network.http.max-persistent-connections-per-server - 4
    FF - user.js: content.max.tokenizing.time - 200000
    FF - user.js: content.notify.interval - 100000
    FF - user.js: content.switch.threshold - 650000
    FF - user.js: nglayout.initialpaint.delay - 300
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.homepage.dontask, true);user_pref(yahoo.ytff.general.dontshowhpoffer, true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, falsec:\program files\MZILLA\greprefs\all.js - pref( "ui.use_native_colors ", true);
    c:\program files\MZILLA\greprefs\all.js - pref( "network.auth.force-generic-ntlm ", false);
    c:\program files\MZILLA\greprefs\all.js - pref( "svg.smil.enabled ", false);
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name ",  "chrome://browser/locale/browser.properties ");
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description ",  "chrome://browser/locale/browser.properties ");
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "plugins.update.notifyUser ", false);
    .
    - - - - ORPHANS REMOVED - - - -
    
    BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
    Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
    MSConfigStartUp-Aim6 - c:\program files\AIM6\aim6.exe
    MSConfigStartUp-ewpeplvj - c:\documents and settings\family\Local Settings\Application Data\ewoopd\rwhksftav.exe
    MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre1.6.0_07\bin\jusched.exe
    MSConfigStartUp-Vidalia - c:\program files\Vidalia Bundle\Vidalia\vidalia.exe
    AddRemove-Adobe AIR - c:\program files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe
    AddRemove-Adobe_2ac78060bc5856b0c1cf873bb919b58 - c:\program files\Common Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb919b58\Setup.exe
    AddRemove-Adobe_3e054d2218e7aa282c2369d939e58ff - c:\program files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
    AddRemove-Adobe_6c8e2cb4fd241c55406016127a6ab2e - c:\program files\Common Files\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe
    AddRemove-Adobe_7328fdfcb73660ec8b11d5a3d5c6232 - c:\program files\Common Files\Adobe\Installers\7328fdfcb73660ec8b11d5a3d5c6232\Setup.exe
    AddRemove-QQ Hearts - c:\program files\Tencent\QQ Games\QQ Hearts\Uninstall.EXE
    AddRemove-QQ Puzzle Dasher - c:\program files\Tencent\QQ Games\QQ PuzzleDasher\Uninstall.EXE
    AddRemove-Universal Document Converter_is1 - c:\program files\Universal Document Converter\unins000.exe
    AddRemove-Viewpoint Toolbar - c:\program files\Viewpoint\Viewpoint Toolbar\3.8.0\Uninstaller.exe
    AddRemove-ViewpointMediaPlayer - c:\program files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe
    AddRemove-vol_toolbar - c:\program files\vol_toolbar\uninstall.exe
    AddRemove-Winamp - c:\program files\Winamp\UninstWA.exe
    AddRemove-{CA567AD5-33A4-403D-86D1-EE2D38251951}_is1 - c:\program files\VDOWNLOADER\unins000.exe
    AddRemove-Winamp Detect - c:\program files\Winamp Detect\UninstWaDetect.exe
    
    
    
    **************************************************************************
    
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [url]http://www.gmer.net[/url]
    Rootkit scan 2010-05-27 22:02
    Windows 5.1.2600 Service Pack 3 NTFS
    
    scanning hidden processes ...  
    
    scanning hidden autostart entries ... 
    
    scanning hidden files ...  
    
    scan completed successfully
    hidden files: 0
    
    **************************************************************************
    
    [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\N360]
     "ImagePath "= "\ "c:\program files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe\" /s \ "N360\" /m \ "c:\program files\Norton 360\Engine\3.8.0.41\diMaster.dll\" /prefetch:1 "
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------
    
    [HKEY_USERS\S-1-5-21-2271019165-553755714-499774489-1005\¬ ³*]
    @Allowed: (Read) (RestrictedCode)
     "verticalChoices "= "weatherV "
     "firstLaunch "= "false "
    DUMPHIVE0.003 (REGF)
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    
    - - - - - - - > 'winlogon.exe'(824)
    c:\windows\system32\Ati2evxx.dll
    .
    Completion time: 2010-05-27  22:06:42
    ComboFix-quarantined-files.txt  2010-05-28 02:06
    ComboFix2.txt  2009-11-18 01:31
    ComboFix3.txt  2009-07-28 02:19
    
    Pre-Run: 1,825,804,288 bytes free
    Post-Run: 1,789,530,112 bytes free
    
    Current=3 Default=3 Failed=4 LastKnownGood=1 Sets=1,2,3,4
    - - End Of File - - 8B83E0B3933AC438A5B432DA762B26E6
     
  15. 2010/05/27
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    everything seems to be back to normal
    except norton doesnt seem to work now
    had to post logs in parts because it exceeded character limits
     
  16. 2010/05/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I'm glad to hear better news :)
    I'm still reviewing Combofix log.
    Please, don't post logs in code box, because they're harder to read.

    ((((( Reg Loading Points ))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
    "Dell Photo AIO Printer 942 "= "c:\program files\Dell Photo AIO Printer 942\dlbubmgr.exe" [2004-08-31 294912]
    "DellMCM "= "c:\program files\Dell Photo AIO Printer 942\memcard.exe" [2004-07-27 262144]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "RunNarrator "= "Narrator.exe" [2008-04-14 53760]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]
    @= "FSFilter Activity Monitor "

    [HKLM\~\startupfolder\C:^Documents and Settings^family^Start Menu^Programs^Startup^Styler.lnk]
    path=c:\documents and settings\family\Start Menu\Programs\Startup\Styler.lnk
    backup=c:\windows\pss\Styler.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2010-03-24 18:17 952768 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2010-04-04 05:42 36272 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
    2010-03-02 06:09 135664 ----atw- c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
    2006-10-27 05:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
    2004-05-06 21:48 118784 -c--a-w- c:\windows\SYSTEM32\hkcmd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    2004-05-06 21:52 155648 -c--a-w- c:\windows\SYSTEM32\igfxtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    2010-02-15 22:07 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mouse Suite 98 Daemon]
    2001-01-12 21:36 73728 -c--a-w- c:\windows\SYSTEM32\PELMICED.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2009-11-11 03:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
     
  17. 2010/05/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "iPod Service "=3 (0x3)
    "PnkBstrB "=2 (0x2)
    "PnkBstrA "=2 (0x2)
    "ATI Smart "=2 (0x2)
    "Ati HotKey Poller "=2 (0x2)
    "Apple Mobile Device "=2 (0x2)

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride "=dword:00000001
    "FirewallOverride "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
    "DisableMonitoring "=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall "= 0 (0x0)
    "DisableNotifications "= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe "=
    "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe "=
    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE "=
    "c:\\Program Files\\AIM7\\aim.exe "=
    "c:\\Program Files\\Opera 10 Beta\\opera.exe "=
    "c:\\Program Files\\Google\\Google Talk\\googletalk.exe "=
    "c:\\Documents and Settings\\family\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.dll "=
    "c:\\Documents and Settings\\family\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe "=
    "c:\\Program Files\\iTunes\\iTunes.exe "=
    "c:\\Black III\\Orbitdownloader\\orbitdm.exe "=
    "c:\\Black III\\Orbitdownloader\\orbitnet.exe "=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe "=
     
  18. 2010/05/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Code:
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
     "3389:TCP "= 3389:TCP:@xpsp2res.dll,-22009
     "443:TCP "= 443:TCP:*:Disabled:ooVoo TCP port 443
     "443:UDP "= 443:UDP:*:Disabled:ooVoo UDP port 443
     "37674:TCP "= 37674:TCP:*:Disabled:ooVoo TCP port 37674
     "37674:UDP "= 37674:UDP:*:Disabled:ooVoo UDP port 37674
     "37675:UDP "= 37675:UDP:*:Disabled:ooVoo UDP port 37675
     
  19. 2010/05/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    R2 N360;Norton 360;c:\program files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe [2010-04-13 4:03 AM 117640]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-05-26 8:03 PM 102448]
    R3 JakNDisMP;JakNDisMP;c:\windows\SYSTEM32\DRIVERS\JakNDis.sys [2009-05-11 2:53 PM 21504]
    R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\SYSTEM32\DRIVERS\ManyCam.sys [2008-01-14 6:06 AM 21632]
    S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\0308000.029\SYMEFA.SYS --> c:\windows\system32\drivers\N360\0308000.029\SYMEFA.SYS [?]
    S1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\Drivers\N360\0308000.029\BHDrvx86.sys --> c:\windows\system32\Drivers\N360\0308000.029\BHDrvx86.sys [?]
    S1 ccHP;Symantec Hash Provider;c:\windows\system32\Drivers\N360\0308000.029\ccHPx86.sys --> c:\windows\system32\Drivers\N360\0308000.029\ccHPx86.sys [?]
    S1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20100518.002\IDSXpx86.sys [2010-05-24 8:39 PM 331640]
    S2 sbbotdi;sbbotdi; [x]
    S2 Viewpoint Manager Service;Viewpoint Manager Service; "c:\program files\Viewpoint\Common\ViewpointService.exe" --> c:\program files\Viewpoint\Common\ViewpointService.exe [?]
    S3 hamachi_oem;PlayLinc Adapter;c:\windows\SYSTEM32\DRIVERS\gan_adapter.sys [2006-10-19 10664]
    S3 JakNDis;Jaksta Service;c:\windows\SYSTEM32\DRIVERS\JakNDis.sys [2009-05-11 2:53 PM 21504]
    S3 NTProcDrv;Process creation detector for NT.; [x]
    S3 PortTalk;PortTalk;c:\windows\SYSTEM32\DRIVERS\PortTalk.sys [2007-07-04 2:14 PM 3567]
    S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\windows\SYSTEM32\DRIVERS\scsiprnt.sys [2004-11-30 7:28 PM 11648]
    S3 vaxscsi;vaxscsi;c:\windows\SYSTEM32\DRIVERS\vaxscsi.sys [2007-06-03 223128]
    S4 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [2007-06-03 717296]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    getPlusHelper REG_MULTI_SZ getPlusHelper
    .
    Contents of the 'Scheduled Tasks' folder

    2010-05-17 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 16:34]

    2010-05-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2271019165-553755714-499774489-1005Core.job
    - c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 06:09]

    2010-05-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2271019165-553755714-499774489-1005UA.job
    - c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 06:09]
    .
    .
    ------- Supplementary Scan -------
    .
    uInternet Connection Wizard,ShellNext = iexplore
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    IE: &Download by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
    IE: {{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    FF - ProfilePath - c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\
    FF - prefs.js: browser.search.selectedEngine - DAEMON Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.blackle.com/
    FF - component: c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\components\coFFPlgn.dll
    FF - component: c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\FFExternalAlert.dll
    FF - component: c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\RadioWMPCore.dll
    FF - plugin: c:\documents and settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
    FF - plugin: c:\documents and settings\family\Application Data\Move Networks\plugins\npqmp071503000010.dll
    FF - plugin: c:\documents and settings\family\Application Data\Mozilla\plugins\npgoogletalk.dll
    FF - plugin: c:\documents and settings\family\Local Settings\Application Data\Google\Update\1.2.183.23\npGoogleOneClick8.dll
    FF - plugin: c:\program files\Java\jre1.6.0\bin\npjpi160.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
    FF - plugin: c:\program files\MZILLA\plugins\npCouponPrinter.dll
    FF - plugin: c:\program files\MZILLA\plugins\npGoogleGadgetPluginFirefoxWin.dll
    FF - plugin: c:\program files\MZILLA\plugins\npwachk.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npdsplay.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin2.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin3.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin4.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin5.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin6.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin7.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin8.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npwmsdrm.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

    ---- FIREFOX POLICIES ----
    FF - user.js: network.http.max-persistent-connections-per-server - 4
    FF - user.js: content.max.tokenizing.time - 200000
    FF - user.js: content.notify.interval - 100000
    FF - user.js: content.switch.threshold - 650000
    FF - user.js: nglayout.initialpaint.delay - 300
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.homepage.dontask, true);user_pref(yahoo.ytff.general.dontshowhpoffer, true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, falsec:\program files\MZILLA\greprefs\all.js - pref( "ui.use_native_colors ", true);
    c:\program files\MZILLA\greprefs\all.js - pref( "network.auth.force-generic-ntlm ", false);
    c:\program files\MZILLA\greprefs\all.js - pref( "svg.smil.enabled ", false);
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name ", "chrome://browser/locale/browser.properties ");
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description ", "chrome://browser/locale/browser.properties ");
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "plugins.update.notifyUser ", false);
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
    Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
    MSConfigStartUp-Aim6 - c:\program files\AIM6\aim6.exe
    MSConfigStartUp-ewpeplvj - c:\documents and settings\family\Local Settings\Application Data\ewoopd\rwhksftav.exe
    MSConfigStartUp-SunJavaUpdateSched - c:\program files\Java\jre1.6.0_07\bin\jusched.exe
    MSConfigStartUp-Vidalia - c:\program files\Vidalia Bundle\Vidalia\vidalia.exe
    AddRemove-Adobe AIR - c:\program files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe
    AddRemove-Adobe_2ac78060bc5856b0c1cf873bb919b58 - c:\program files\Common Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb919b58\Setup.exe
    AddRemove-Adobe_3e054d2218e7aa282c2369d939e58ff - c:\program files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
    AddRemove-Adobe_6c8e2cb4fd241c55406016127a6ab2e - c:\program files\Common Files\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe
    AddRemove-Adobe_7328fdfcb73660ec8b11d5a3d5c6232 - c:\program files\Common Files\Adobe\Installers\7328fdfcb73660ec8b11d5a3d5c6232\Setup.exe
    AddRemove-QQ Hearts - c:\program files\Tencent\QQ Games\QQ Hearts\Uninstall.EXE
    AddRemove-QQ Puzzle Dasher - c:\program files\Tencent\QQ Games\QQ PuzzleDasher\Uninstall.EXE
    AddRemove-Universal Document Converter_is1 - c:\program files\Universal Document Converter\unins000.exe
    AddRemove-Viewpoint Toolbar - c:\program files\Viewpoint\Viewpoint Toolbar\3.8.0\Uninstaller.exe
    AddRemove-ViewpointMediaPlayer - c:\program files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe
    AddRemove-vol_toolbar - c:\program files\vol_toolbar\uninstall.exe
    AddRemove-Winamp - c:\program files\Winamp\UninstWA.exe
    AddRemove-{CA567AD5-33A4-403D-86D1-EE2D38251951}_is1 - c:\program files\VDOWNLOADER\unins000.exe
    AddRemove-Winamp Detect - c:\program files\Winamp Detect\UninstWaDetect.exe



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-05-27 22:02
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet003\Services\N360]
    "ImagePath "= "\ "c:\program files\Norton 360\Engine\3.8.0.41\ccSvcHst.exe\" /s \ "N360\" /m \ "c:\program files\Norton 360\Engine\3.8.0.41\diMaster.dll\" /prefetch:1 "
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-2271019165-553755714-499774489-1005\¬ ³*]
    @Allowed: (Read) (RestrictedCode)
    "verticalChoices "= "weatherV "
    "firstLaunch "= "false "
    DUMPHIVE0.003 (REGF)
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'winlogon.exe'(824)
    c:\windows\system32\Ati2evxx.dll
    .
    Completion time: 2010-05-27 22:06:42
    ComboFix-quarantined-files.txt 2010-05-28 02:06
    ComboFix2.txt 2009-11-18 01:31
    ComboFix3.txt 2009-07-28 02:19

    Pre-Run: 1,825,804,288 bytes free
    Post-Run: 1,789,530,112 bytes free

    Current=3 Default=3 Failed=4 LastKnownGood=1 Sets=1,2,3,4
    - - End Of File - - 8B83E0B3933AC438A5B432DA762B26E6
     
  20. 2010/05/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Judging from Combofix log, some Norton files got corrupted and you'll have to reinstall Norton.

    Unless you installed Viewpoint Manager knowledgeably...
    Go Start>Control Panel>Add\Remove (Programs and Features in Vista), and...
    Uninstall any of the following programs associated with Viewpoint:
    * Viewpoint Manager
    * Viewpoint Media Player
    * Viewpoint Toolbar
    This program does not do anything bad such as deliver ads or spy on you, but it is considered foistware ( "drive-by-install ") as it is installed without your consent through programs like AOl, AIM, Compuserve, etc.

    ==============================================================

    1. Please open Notepad
    • Click Start , then Run
    • Type notepad .exe in the Run Box.

    2. Now copy/paste the entire content of the codebox below into the Notepad window:

    Code:
    File::
    
    Folder::
    
    DirLook::
    c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}
    
    Driver::
    
    Registry::
    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
     "AntiVirusOverride "=-
     "FirewallOverride "=-
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
     "3389:TCP "=-
    
    
    RegLockDel::
    
    SecCenter::
    {815F7464-FFA4-00DE-0D24-347CA8A3377C}
    {81704054-FFA4-00DE-0D24-347CA8A3377C}
    {8A24A9D4-FFA4-00EF-0D24-347CA8A3377C}
    {8A2624B4-FFA4-00EF-0D24-347CA8A3377C}
    {BADB0D00-FFA4-00EF-0D24-347CA8A3377C}
    {FFFFFFFF-FFA4-00EF-0D24-347CA8A3377C}
    
    

    3. Save the above as CFScript.txt

    4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

    [​IMG]


    5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    • Combofix.txt
    • A new HijackThis log.
     
  21. 2010/05/28
    JusticeNY

    JusticeNY Well-Known Member Thread Starter

    Joined:
    2008/12/14
    Messages:
    160
    Likes Received:
    0
    i have to code because when i try to post it gives me the error

    1. You have included 10 images in your message. You are limited to using 8 images so please go back and correct the problem and then continue again.

    Images include use of smilies, the BB code tag and HTML <img> tags. The use of these is all subject to them being enabled by the administrator.

    [code]ComboFix 10-05-27.01 - Family 2010-05-28 3:10.7.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1534.995 [GMT -4:00]
    Running from: c:\documents and settings\family\Desktop\ComboFix.exe
    Command switches used :: c:\documents and settings\family\Desktop\CFScript.txt
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled*
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A11EDDC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A1307F4-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A138054-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A14F4EC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A154824-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A156354-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A1618EC-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A1673F4-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A16949C-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A16DC44-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A1757F4-FFA4-00EF-0D24-347CA8A3377C}
    AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {8A17C51C-FFA4-00EF-0D24-347CA8A3377C}
    FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
    .

    ((((((((((((((((((((((((( Files Created from 2010-04-28 to 2010-05-28 )))))))))))))))))))))))))))))))
    .

    2010-05-28 04:43 . 2010-05-28 04:43 -------- d-----w- c:\documents and settings\family\Application Data\CheckPoint
    2010-05-28 04:43 . 2010-05-28 04:43 -------- d-----w- c:\program files\Conduit
    2010-05-28 04:43 . 2010-05-28 04:43 -------- d-----w- c:\documents and settings\family\Local Settings\Application Data\ZoneAlarm
    2010-05-28 04:43 . 2010-05-28 04:43 -------- d-----w- c:\documents and settings\family\Local Settings\Application Data\Conduit
    2010-05-28 04:42 . 2010-05-28 04:42 -------- d-----w- c:\program files\ZoneAlarm
    2010-05-28 04:42 . 2010-05-28 04:42 -------- d-----w- c:\program files\CheckPoint
    2010-05-28 04:42 . 2010-05-20 22:10 69120 ----a-w- c:\windows\system32\zlcomm.dll
    2010-05-28 04:42 . 2010-05-20 22:10 103936 ----a-w- c:\windows\system32\zlcommdb.dll
    2010-05-28 04:42 . 2010-05-20 22:10 1238528 ----a-w- c:\windows\system32\zpeng25.dll
    2010-05-28 02:00 . 2010-05-28 02:00 -------- d-----w- c:\documents and settings\family\Local Settings\Application Data\Symantec
    2010-05-15 04:38 . 2010-05-15 04:38 -------- d-----w- c:\program files\Common Files\Software Update Utility
    2010-05-13 10:57 . 2010-05-13 10:57 -------- d-----w- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}
    2010-05-13 10:57 . 2010-05-13 10:57 -------- d-----w- C:\Temp
    2010-05-07 16:55 . 2010-05-07 16:55 255472 ----a-w- c:\documents and settings\family\Application Data\Mozilla\plugins\npgoogletalk.dll
    2010-05-04 20:21 . 2010-05-04 20:23 -------- d-----w- c:\program files\Common Files\Adobe
    2010-05-03 20:03 . 2010-05-03 20:03 -------- d-----w- c:\program files\ooVoo

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-05-28 06:59 . 2007-02-13 23:58 -------- d-----w- c:\documents and settings\family\Application Data\Skype
    2010-05-28 05:06 . 2010-04-13 02:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
    2010-05-28 04:42 . 2008-12-15 06:53 4212 ---ha-w- c:\windows\system32\zllictbl.dat
    2010-05-28 02:41 . 2008-05-21 17:54 -------- d-----w- c:\program files\MZILLA
    2010-05-26 06:38 . 2008-04-12 18:13 -------- d-----w- c:\documents and settings\family\Application Data\Orbit
    2010-05-26 04:06 . 2009-12-20 00:41 -------- d-----w- c:\documents and settings\family\Application Data\skypePM
    2010-05-25 22:41 . 2009-10-15 07:40 -------- d-----r- c:\program files\Skype
    2010-05-23 18:12 . 2007-06-25 18:24 140824 -c-ha-w- c:\windows\system32\mlfcache.dat
    2010-05-15 06:25 . 2009-06-27 01:09 -------- d-----w- c:\program files\ManyCam 2.4
    2010-05-13 00:30 . 2004-11-30 00:43 -------- d-----w- c:\program files\Dell Photo AIO Printer 942
    2010-05-12 07:02 . 2007-08-11 15:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2010-05-09 22:44 . 2008-03-23 23:16 664 ----a-w- c:\windows\system32\d3d9caps.dat
    2010-05-04 20:16 . 2009-09-20 10:24 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
    2010-05-03 20:03 . 2004-11-18 04:29 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-04-23 11:35 . 2009-10-06 02:57 -------- d-----w- c:\program files\AIM7
    2010-04-23 10:55 . 2009-05-12 06:19 -------- d-----w- c:\documents and settings\family\Application Data\gtk-2.0
    2010-04-13 20:21 . 2010-04-13 20:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
    2010-04-13 03:36 . 2008-12-11 03:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Rosetta Stone
    2010-04-13 03:30 . 2009-07-27 05:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-04-13 02:45 . 2010-04-13 08:04 217136 ----a-w- c:\windows\system32\drivers\symtdi.sys
    2010-04-13 02:45 . 2010-04-13 08:04 43696 ----a-w- c:\windows\system32\drivers\srtspx.sys
    2010-04-13 02:45 . 2010-04-13 08:04 310320 ----a-w- c:\windows\system32\drivers\SymEFA.sys
    2010-04-13 02:45 . 2008-01-29 16:01 26600 ----a-r- c:\windows\system32\drivers\GEARAspiWDM.sys
    2010-04-13 02:45 . 2010-04-13 08:04 482432 ----a-w- c:\windows\system32\drivers\cchpx86.sys
    2010-04-13 02:45 . 2010-04-13 08:04 259632 ----a-w- c:\windows\system32\drivers\BHDrvx86.sys
    2010-04-13 02:44 . 2008-01-29 16:02 107368 ----a-r- c:\windows\system32\GEARAspi.dll
    2010-04-13 02:41 . 2010-04-13 02:35 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
    2010-04-12 14:33 . 2009-11-18 20:22 33872743 ----a-w- c:\windows\Internet Logs\tvDebug.Zip
    2010-04-05 05:53 . 2009-06-08 23:21 -------- d-----w- c:\program files\Opera 10 Beta
    2010-04-04 23:30 . 2005-06-15 23:08 -------- d-----w- c:\documents and settings\family\Application Data\Apple Computer
    2010-03-30 21:23 . 2010-03-30 21:23 -------- d-----w- c:\documents and settings\family\Application Data\Foxit Software
    2010-03-30 04:46 . 2009-07-27 05:45 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-03-30 04:45 . 2009-07-27 05:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-03-29 10:37 . 2010-03-29 10:37 319488 ----a-w- c:\documents and settings\family\Application Data\Macromedia\Flash Player\[url]www.macromedia.com\bin\octoshape\octoshape.exe[/url]
    2010-03-11 12:38 . 2004-08-04 11:00 832512 ----a-w- c:\windows\system32\wininet.dll
    2010-03-11 12:38 . 2009-08-29 07:36 78336 ----a-w- c:\windows\system32\ieencode.dll
    2010-03-11 12:38 . 2004-08-04 11:00 17408 ----a-w- c:\windows\system32\corpol.dll
    2010-03-09 11:09 . 2004-08-04 11:00 430080 ----a-w- c:\windows\system32\vbscript.dll
    2005-11-04 19:34 . 2005-11-04 19:34 518 ----a-w- c:\program files\Shortcut to Internet Explorer.lnk
    2008-04-07 06:59 . 2008-05-21 17:52 67696 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
    2008-04-07 06:59 . 2008-05-21 17:52 54376 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
    2008-04-07 06:59 . 2008-05-21 17:52 34952 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
    2008-04-07 06:59 . 2008-05-21 17:52 46720 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
    2008-04-07 06:59 . 2008-05-21 17:52 172144 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
    .

    (((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    ---- Directory of c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15} ----

    2010-05-13 10:57 . 2004-06-02 18:43 676307 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbulpa.hlp
    2010-05-13 10:57 . 2004-08-06 18:23 237568 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbuinsr.dll
    2010-05-13 10:57 . 2004-08-06 18:22 557056 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbujswr.dll
    2010-05-13 10:57 . 2002-12-19 13:19 6841 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbueula.txt
    2010-05-13 10:57 . 2004-08-06 18:01 401408 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbuutil.dll
    2010-05-13 10:57 . 2004-08-23 14:39 180224 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbuunst.exe
    2010-05-13 10:57 . 2004-06-25 20:02 1710 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbuprod.ini
    2010-05-13 10:57 . 2004-08-06 18:07 110592 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbuins.dll
    2010-05-13 10:57 . 2004-08-23 14:39 212992 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbuinst.exe
    2010-05-13 10:57 . 2003-10-21 22:40 983101 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbugf.dll
    2010-05-13 10:57 . 2004-08-23 14:38 122880 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbufire.exe
    2010-05-13 10:57 . 2004-07-01 15:52 49152 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\dlbucfg.dll
    2010-05-13 10:57 . 2004-08-23 14:43 139264 ----a-r- c:\temp\{9F5FBC24-EFE2-4f90-B498-EC0FB7D47D15}\dlbu\DLBUadv.exe


    ((((((((((((((((((((((((((((( SnapShot_2010-05-28_02.02.29 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2010-05-28 04:42 . 2010-05-20 22:10 99328 c:\windows\SYSTEM32\ZoneLabs\zlquarantine.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 70656 c:\windows\SYSTEM32\ZoneLabs\zatray.exe
    + 2010-05-28 04:42 . 2010-05-20 22:10 21504 c:\windows\SYSTEM32\ZoneLabs\lib\zsys.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 14336 c:\windows\SYSTEM32\ZoneLabs\lib\zmenu.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 45568 c:\windows\SYSTEM32\ZoneLabs\lib\zfde.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 85504 c:\windows\SYSTEM32\ZoneLabs\lib\ZAlert.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 37376 c:\windows\SYSTEM32\ZoneLabs\lib\UpdateUI.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 12800 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1488.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 12800 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1487.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 12800 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1486.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 20992 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1466.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 12800 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1460.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 10240 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1454.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 11264 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1445.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 14336 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1440.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 12288 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1413.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 11264 c:\windows\SYSTEM32\ZoneLabs\lib\oem_1010.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 29184 c:\windows\SYSTEM32\ZoneLabs\lib\NavBar.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 13312 c:\windows\SYSTEM32\ZoneLabs\lib\MainLoop.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 35840 c:\windows\SYSTEM32\ZoneLabs\lib\Alert.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:09 38912 c:\windows\SYSTEM32\ZoneLabs\featuremap.dll
    + 2010-05-28 04:42 . 2010-05-20 22:09 75776 c:\windows\SYSTEM32\ZoneLabs\camupd.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 43008 c:\windows\SYSTEM32\vswmi.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 58368 c:\windows\SYSTEM32\vsregexp.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 141824 c:\windows\SYSTEM32\ZoneLabs\zlupdate.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 173056 c:\windows\SYSTEM32\ZoneLabs\vsvault.dll
    + 2010-05-28 04:41 . 2010-05-20 22:10 211456 c:\windows\SYSTEM32\ZoneLabs\vsdb.dll
    + 2010-05-28 04:42 . 2007-10-11 20:51 832984 c:\windows\SYSTEM32\ZoneLabs\updating.dll
    + 2010-05-28 04:42 . 2010-05-20 22:09 434688 c:\windows\SYSTEM32\ZoneLabs\ssleay32.dll
    + 2010-05-28 04:42 . 2010-05-20 22:09 135680 c:\windows\SYSTEM32\ZoneLabs\scheduler.dll
    + 2010-05-28 04:42 . 2009-07-14 03:58 722392 c:\windows\SYSTEM32\ZoneLabs\qrbase.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 126976 c:\windows\SYSTEM32\ZoneLabs\lib\zui.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 279040 c:\windows\SYSTEM32\ZoneLabs\lib\TrayTest.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 220672 c:\windows\SYSTEM32\ZoneLabs\lib\Overview.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 368640 c:\windows\SYSTEM32\ZoneLabs\lib\LicenseUI.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 184832 c:\windows\SYSTEM32\ZoneLabs\lib\DashBoard.zip.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 376320 c:\windows\SYSTEM32\ZoneLabs\lib\ConfigWizard.zip.dll
    + 2010-05-28 04:41 . 2010-02-08 12:41 595432 c:\windows\SYSTEM32\ZoneLabs\icslta.dll
    + 2010-05-28 04:43 . 2010-05-04 18:04 284136 c:\windows\SYSTEM32\ZoneLabs\ffapi.dll
    + 2010-05-28 04:42 . 2010-05-20 22:09 169984 c:\windows\SYSTEM32\ZoneLabs\fbl.dll
    + 2010-05-28 04:42 . 2008-03-17 20:52 813568 c:\windows\SYSTEM32\ZoneLabs\dbghelp.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 110080 c:\windows\SYSTEM32\vsxml.dll
    + 2010-05-28 04:41 . 2010-05-20 22:10 712192 c:\windows\SYSTEM32\vsutil.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 302592 c:\windows\SYSTEM32\vspubapi.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 107520 c:\windows\SYSTEM32\vsmonapi.dll
    + 2010-05-28 04:41 . 2010-05-20 22:10 228352 c:\windows\SYSTEM32\vsinit.dll
    + 2010-05-28 04:42 . 2010-05-13 14:02 532224 c:\windows\SYSTEM32\vsdatant.sys
    + 2010-05-28 04:41 . 2010-05-20 22:10 112128 c:\windows\SYSTEM32\vsdata.dll
    + 2010-05-28 04:42 . 2010-05-20 22:10 1789952 c:\windows\SYSTEM32\ZoneLabs\vsruledb.dll
    + 2010-05-28 04:42 . 2010-05-20 22:11 2437176 c:\windows\SYSTEM32\ZoneLabs\vsmon.exe
    + 2010-05-28 04:42 . 2010-05-20 22:10 1536512 c:\windows\SYSTEM32\ZoneLabs\lib\zpy.zip.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{66f2e20d-0da8-4c11-a9c8-dd8477b88acd} "= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088]

    [HKEY_CLASSES_ROOT\clsid\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]
    2010-05-09 15:50 2517088 ----a-w- c:\program files\ZoneAlarm\tbZone.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{66f2e20d-0da8-4c11-a9c8-dd8477b88acd} "= "c:\program files\ZoneAlarm\tbZone.dll" [2010-05-09 2517088]

    [HKEY_CLASSES_ROOT\clsid\{66f2e20d-0da8-4c11-a9c8-dd8477b88acd}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
    "Dell Photo AIO Printer 942 "= "c:\program files\Dell Photo AIO Printer 942\dlbubmgr.exe" [2004-08-31 294912]
    "DellMCM "= "c:\program files\Dell Photo AIO Printer 942\memcard.exe" [2004-07-27 262144]
    "ZoneAlarm Client "= "c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2010-05-20 1043968]
    "ISW "= "c:\program files\CheckPoint\ZAForceField\ForceField.exe" [2010-05-18 730600]
    "googletalk "= "c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
    "iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-02-15 141608]
    "QuickTime Task "= "c:\program files\QuickTime\qttask.exe" [2009-11-11 417792]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "RunNarrator "= "Narrator.exe" [2008-04-14 53760]

    [HKLM\~\startupfolder\C:^Documents and Settings^family^Start Menu^Programs^Startup^Styler.lnk]
    path=c:\documents and settings\family\Start Menu\Programs\Startup\Styler.lnk
    backup=c:\windows\pss\Styler.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2010-03-24 18:17 952768 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2010-04-04 05:42 36272 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
    2010-03-02 06:09 135664 ----atw- c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
    2006-10-27 05:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
    2004-05-06 21:48 118784 -c--a-w- c:\windows\SYSTEM32\hkcmd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    2004-05-06 21:52 155648 -c--a-w- c:\windows\SYSTEM32\igfxtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    2010-02-15 22:07 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mouse Suite 98 Daemon]
    2001-01-12 21:36 73728 -c--a-w- c:\windows\SYSTEM32\PELMICED.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    2009-11-11 03:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "iPod Service "=3 (0x3)
    "PnkBstrB "=2 (0x2)
    "PnkBstrA "=2 (0x2)
    "ATI Smart "=2 (0x2)
    "Ati HotKey Poller "=2 (0x2)
    "Apple Mobile Device "=2 (0x2)

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
    "DisableMonitoring "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
    "DisableMonitoring "=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "DisableNotifications "= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe "=
    "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe "=
    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE "=
    "c:\\Program Files\\AIM7\\aim.exe "=
    "c:\\Program Files\\Opera 10 Beta\\opera.exe "=
    "c:\\Program Files\\Google\\Google Talk\\googletalk.exe "=
    "c:\\Documents and Settings\\family\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.dll "=
    "c:\\Documents and Settings\\family\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe "=
    "c:\\Program Files\\iTunes\\iTunes.exe "=
    "c:\\Black III\\Orbitdownloader\\orbitdm.exe "=
    "c:\\Black III\\Orbitdownloader\\orbitnet.exe "=
    "c:\\WINDOWS\\SYSTEM32\\ZoneLabs\\vsmon.exe "=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe "=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "443:TCP "= 443:TCP:*:Disabled:eek:oVoo TCP port 443
    "443:UDP "= 443:UDP:*:Disabled:eek:oVoo UDP port 443
    "37674:TCP "= 37674:TCP:*:Disabled:eek:oVoo TCP port 37674
    "37674:UDP "= 37674:UDP:*:Disabled:eek:oVoo UDP port 37674
    "37675:UDP "= 37675:UDP:*:Disabled:eek:oVoo UDP port 37675

    R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [2010-05-18 26352]
    R2 IswSvc;ZoneAlarm Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\ISWSVC.exe [2010-05-18 493032]
    R3 JakNDisMP;JakNDisMP;c:\windows\SYSTEM32\DRIVERS\JakNDis.sys [2009-05-11 2:53 PM 21504]
    R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\SYSTEM32\DRIVERS\ManyCam.sys [2008-01-14 6:06 AM 21632]
    S2 sbbotdi;sbbotdi; [x]
    S2 Viewpoint Manager Service;Viewpoint Manager Service; "c:\program files\Viewpoint\Common\ViewpointService.exe" --> c:\program files\Viewpoint\Common\ViewpointService.exe [?]
    S3 hamachi_oem;PlayLinc Adapter;c:\windows\SYSTEM32\DRIVERS\gan_adapter.sys [2006-10-19 10664]
    S3 JakNDis;Jaksta Service;c:\windows\SYSTEM32\DRIVERS\JakNDis.sys [2009-05-11 2:53 PM 21504]
    S3 NTProcDrv;Process creation detector for NT.; [x]
    S3 PortTalk;PortTalk;c:\windows\SYSTEM32\DRIVERS\PortTalk.sys [2007-07-04 2:14 PM 3567]
    S3 scsiprnt;Microsoft SCSI/1394 Generic Printer Class;c:\windows\SYSTEM32\DRIVERS\scsiprnt.sys [2004-11-30 7:28 PM 11648]
    S3 vaxscsi;vaxscsi;c:\windows\SYSTEM32\DRIVERS\vaxscsi.sys [2007-06-03 223128]
    S4 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [2007-06-03 717296]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    getPlusHelper REG_MULTI_SZ getPlusHelper
    .
    Contents of the 'Scheduled Tasks' folder

    2010-05-17 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 16:34]

    2010-05-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2271019165-553755714-499774489-1005Core.job
    - c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 06:09]

    2010-05-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2271019165-553755714-499774489-1005UA.job
    - c:\documents and settings\family\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-02 06:09]
    .
    .
    ------- Supplementary Scan -------
    .
    uInternet Connection Wizard,ShellNext = iexplore
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    IE: &Download by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/201
    IE: &Grab video by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/204
    IE: Do&wnload selected by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/203
    IE: Down&load all by Orbit - c:\black iii\Orbitdownloader\orbitmxt.dll/202
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
    IE: {{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    FF - ProfilePath - c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\
    FF - prefs.js: browser.search.selectedEngine - DAEMON Search
    FF - prefs.js: browser.startup.homepage - hxxp://www.blackle.com/
    FF - component: c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\FFExternalAlert.dll
    FF - component: c:\documents and settings\family\Application Data\Mozilla\Firefox\Profiles\0iyqlche.default\extensions\{2ac337b3-fc9c-4d51-bed1-1ac1c48c63ea}\components\RadioWMPCore.dll
    FF - component: c:\program files\CheckPoint\ZAForceField\TrustChecker\components\TrustCheckerMozillaPlugin.dll
    FF - plugin: c:\documents and settings\All Users\Application Data\NexonUS\NGM\npNxGameUS.dll
    FF - plugin: c:\documents and settings\family\Application Data\Move Networks\plugins\npqmp071503000010.dll
    FF - plugin: c:\documents and settings\family\Application Data\Mozilla\plugins\npgoogletalk.dll
    FF - plugin: c:\documents and settings\family\Local Settings\Application Data\Google\Update\1.2.183.23\npGoogleOneClick8.dll
    FF - plugin: c:\program files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll
    FF - plugin: c:\program files\Java\jre1.6.0\bin\npjpi160.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
    FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
    FF - plugin: c:\program files\MZILLA\plugins\npCouponPrinter.dll
    FF - plugin: c:\program files\MZILLA\plugins\npGoogleGadgetPluginFirefoxWin.dll
    FF - plugin: c:\program files\MZILLA\plugins\npViewpoint.dll
    FF - plugin: c:\program files\MZILLA\plugins\npwachk.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\np_gp.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npdsplay.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npMozCouponPrinter.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin2.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin3.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin4.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin5.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin6.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin7.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npqtplugin8.dll
    FF - plugin: c:\program files\Opera 10 Beta\program\plugins\npwmsdrm.dll
    FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

    ---- FIREFOX POLICIES ----
    FF - user.js: network.http.max-persistent-connections-per-server - 4
    FF - user.js: content.max.tokenizing.time - 200000
    FF - user.js: content.notify.interval - 100000
    FF - user.js: content.switch.threshold - 650000
    FF - user.js: nglayout.initialpaint.delay - 300
    FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(yahoo.homepage.dontask, true);user_pref(yahoo.ytff.general.dontshowhpoffer, true);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, false);user_pref(network.protocol-handler.warn-external.dnupdate, falsec:\program files\MZILLA\greprefs\all.js - pref( "ui.use_native_colors ", true);
    c:\program files\MZILLA\greprefs\all.js - pref( "network.auth.force-generic-ntlm ", false);
    c:\program files\MZILLA\greprefs\all.js - pref( "svg.smil.enabled ", false);
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name ", "chrome://browser/locale/browser.properties ");
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description ", "chrome://browser/locale/browser.properties ");
    c:\program files\MZILLA\defaults\pref\firefox.js - pref( "plugins.update.notifyUser ", false);
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [url]http://www.gmer.net[/url]
    Rootkit scan 2010-05-28 03:18
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-2271019165-553755714-499774489-1005\¬ ³*]
    @Allowed: (Read) (RestrictedCode)
    "verticalChoices "= "weatherV "
    "firstLaunch "= "false "
    DUMPHIVE0.003 (REGF)
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'winlogon.exe'(300)
    c:\windows\system32\Ati2evxx.dll
    c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

    - - - - - - - > 'lsass.exe'(364)
    c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

    - - - - - - - > 'explorer.exe'(2572)
    c:\windows\system32\WININET.dll
    c:\program files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    Completion time: 2010-05-28 03:22:53
    ComboFix-quarantined-files.txt 2010-05-28 07:22
    ComboFix2.txt 2010-05-28 02:06
    ComboFix3.txt 2009-11-18 01:31
    ComboFix4.txt 2009-07-28 02:19

    Pre-Run: 1,137,893,376 bytes free
    Post-Run: 1,088,135,168 bytes free

    Current=3 Default=3 Failed=4 LastKnownGood=1 Sets=1,2,3,4
    - - End Of File - - 9F80E7C8EE38FE370422EFA9E96A46CA[/code]
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.