Active Unknown Program running

[Active] Unknown Program running

I got a window xp Gate way.
The problem i got is that when ever i open Window task Manager there are tons of 220K+ program running even when i delete it, it still keep coming up but there are nothing in my screen.
Plz help me remove them for good if can.


Attach File

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-07-30.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 2/14/2009 9:08:28 PM
System Uptime: 9/4/2009 1:24:35 PM (127 hours ago)

Motherboard: First International Computer, Inc. | | KTBC51G
Processor: AMD Athlon(tm) 64 Processor 3700+ | Socket 939 | 2210/201mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 182 GiB total, 72.453 GiB free.
D: is FIXED (FAT32) - 4 GiB total, 0.949 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP198: 9/3/2009 5:38:35 PM - Removed Acme Elite Online
RP199: 9/3/2009 5:45:44 PM - Removed Acme Elite Online
RP200: 9/3/2009 6:20:40 PM - Installed Acme Elite Online
RP201: 9/4/2009 7:29:12 PM - System Checkpoint
RP202: 9/5/2009 11:15:25 PM - System Checkpoint
RP203: 9/7/2009 3:32:50 AM - System Checkpoint
RP204: 9/8/2009 4:08:59 AM - System Checkpoint
RP205: 9/9/2009 5:38:55 AM - System Checkpoint

==== Installed Programs ======================

'Full Speed' Internet Booster + Performance Tests
Acme Elite Online
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 7.0
Advanced WindowsCare Pro 2.7.0
AlienGUIse Theme Manager
America Online (Choose which version to remove)
AOL Coach Version 2.0(Build:20041026.5 en)
AOL Connectivity Services
AOL Spyware Protection
AOL You've Got Pictures Screensaver
Apple Mobile Device Support
Apple Software Update
AviSynth 2.5
Bonjour
Browser Address Error Redirector
CA Yahoo! Anti-Spy (remove only)
Choice Guard
Critical Update for Windows Media Player 11 (KB959772)
CubeDesktop 1.3.1
DarkNight-Online
Digital Media Reader
DivX Web Player
DVD Solution
Free Download Manager 3.0
GhostsOfDeception EO
GIMP 2.6.7
High Definition Audio Driver Package - KB888111
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 10 (KB910393)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
ips XP 1.11.2600
iTunes
J2SE Runtime Environment 5.0 Update 2
Java(TM) 6 Update 14
LogonStudio
McAfee Firewall
McAfee SecurityCenter
McAfee VirusScan Professional Edition
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Digital Image Library 9 - Blocker
Microsoft Digital Image Starter Edition 2006
Microsoft Digital Image Starter Edition 2006 Editor
Microsoft Digital Image Starter Edition 2006 Library
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2006
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mozilla Firefox (3.0.11)
Mozilla Firefox (3.5)
MSN
MSVCRT
MSXML 4.0
MSXML 4.0 SP2 (KB954430)
MSXML 6.0 Parser (KB933579)
Multimedia Keyboard Driver
Napster
Napster Burn Engine
NVIDIA Drivers
NVIDIA Photoshop Plug-ins
Power2Go 4.0
PowerDVD
PSP ISO Compressor
Pure Networks Port Magic
QuickTime
RealPlayer
Realtek High Definition Audio Driver
Recovery Software Suite Gateway
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Segoe UI
SkinStudio
Software Informer 1.0 BETA
Sonic Encoders
TopDesk 1.4.2
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Media Player 10 (KB913800)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955839)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
VC80CRTRedist - 8.0.50727.762
Viewpoint Media Player
Visual C++ 8.0 CRT (x86) WinSXS MSM
WebFldrs XP
Windows Backup Utility
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows Movie Maker 2.0
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
WinRAR archiver
WinZip 12.0
Yahoo! Anti-Spy
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar

==== End Of File ===========================

 

DDS (Ver_09-07-30.01) - NTFSx86
Run by Owner at 20:45:48.90 on Wed 09/09/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.894.226 [GMT -4:00]

FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\zHotkey.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\Program Files\Digital Media Reader\readericon45G.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\My Music\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Software Informer\softinfo.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Owner\My Documents\IDM.v5.17.Build.5-hardal\IDM.v5.17.Build.5-hardal\HardaL\IDMan.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\COMMON~1\AOL\123466~1\EE\AOLHOS~1.EXE
C:\PROGRA~1\COMMON~1\AOL\123466~1\EE\AOLServiceHost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\proquota.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winfnst.exe
C:\Program Files\IObit\Advanced WindowsCare V2 Pro\Awc.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winqxan.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\djwehe.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\oowlqn.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\qdpobo.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winkfbst.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\khugi.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winnixxg.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winxrnp.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winkhrc.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winhadiy.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winwyqob.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winbpytd.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winjentvf.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\orcjb.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wingbkoiv.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\bqnkt.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wintrjgi.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\efcags.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winyrcef.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winqqyt.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winvavcgq.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\yueegb.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winlcgj.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\bjys.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winggede.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winwxcqe.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winsdvfgl.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\antd.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wintdcy.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winqfyyu.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winefyjr.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\uvidll.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winwuhs.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\joowng.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winxaowo.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\nnjim.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\vduuae.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wingeva.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winmauu.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winatnpu.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winuypxuc.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wingiay.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\texs.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wbvddp.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winsbroao.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\windiykmi.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winylrrnf.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wingxwvp.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\xgli.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winbqxtke.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\bilr.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winmqdupg.exe
C:\WINDOWS\system32\taskmgr.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\gfkj.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winyabv.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\mlemo.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winvtjjqm.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\opgna.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winapmij.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winatwemt.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winaxde.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\atsd.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winrnyjg.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winuhnl.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winsfgi.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\lndtg.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wingmjr.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winofpldb.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\moljjk.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wingvkouw.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winnyxw.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wintdbgqm.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wingjoqnt.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winbxnefg.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\yrrjj.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winkvsowv.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winlexc.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winkoeo.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winncxlf.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\gepkhm.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\pjin.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winygwrmu.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\yoyi.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wincfdjpj.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winswkt.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winxydaw.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\fqmbq.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winlaqs.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\fcaauc.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\aswys.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winaqmgfy.exe
C:\My Backup -- 09-02-14 0433PM\Program Files\Safari\Safari.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winhbpx.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\ahifgd.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\bkktw.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\krny.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wincdywmh.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\wejs.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\fiqdmi.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\winylfk.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\Saf16FB.tmp\dds.pif

============== Pseudo HJT Report ===============

uSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
uStart Page = hxxp://www.yahoo.com/?.home=ytie
uSearch Page = hxxp://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
mStart Page = hxxp://www.yahoo.com/?.home=ytie
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uInternet Connection Wizard,ShellNext = hxxp://www.winzip.com/instcmplt.cgi?pid=WNZP&ver=12.0.8252.0&lang=EN&vid=xklm&3pa=unbl:0
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
mWinlogon: UIHost=c:\windows\system32\logonuiX.exe
BHO: IDMIEHlprObj Class: {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\documents and settings\owner\my documents\idm.v5.17.build.5-hardal\idm.v5.17.build.5-hardal\hardal\IDMIECC.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: McAfee Phishing Filter: {27b4851a-3207-45a2-b947-be8afe6163ab} - c:\progra~1\mcafee\msk\mskapbho.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\windows\system32\BAE.dll
BHO: FDMIECookiesBHO Class: {cc59e0f9-7e43-44fa-9faa-8377850bf205} - c:\program files\free download manager\iefdm2.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
TB: McAfee VirusScan: {acb1e670-3217-45c4-a021-6b829a8a27cb} - c:\program files\mcafee\mcafee virusscan\VSCShellExtension.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [Free Download Manager] "c:\program files\free download manager\fdm.exe" -autorun
uRun: [Software Informer] "c:\program files\software informer\softinfo.exe" -autorun
uRun: [fsm]
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [McAfee.InstantUpdate.Monitor] "c:\program files\mcafee\mcafee shared components\instant updater\RuLaunch.exe" /STARTMONITOR
uRun: [CubeDesktop]
uRun: [IDMan] c:\documents and settings\owner\my documents\idm.v5.17.build.5-hardal\idm.v5.17.build.5-hardal\hardal\IDMan.exe /onboot
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [CHotkey] zHotkey.exe
mRun: [High Definition Audio Property Page Shortcut] HDAShCut.exe
mRun: [HostManager] c:\program files\common files\aol\1234660972\ee\AOLHostManager.exe
mRun: [AOL Spyware Protection] "c:\progra~1\common~1\aol\aolspy~1\AOLSP Scheduler.exe "
mRun: [readericon] c:\program files\digital media reader\readericon45G.exe
mRun: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [MSKDetectorExe] c:\program files\mcafee\spamkiller\MSKDetct.exe /uninstall
mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe "
mRun: [McAfee Guardian] "c:\program files\mcafee\mcafee shared components\guardian\CMGrdian.exe" /SU
mRun: [TopDesk] c:\program files\topdesk\topdesk.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\my music\iTunesHelper.exe "
dRun: [Power2GoExpress] NA
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
uPolicies-explorer: NoSetActiveDesktop = 1 (0x1)
uPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
uPolicies-system: EnableProfileQuota = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
IE: Download all links with IDM - c:\documents and settings\owner\my documents\idm.v5.17.build.5-hardal\idm.v5.17.build.5-hardal\hardal\IEGetAll.htm
IE: Download all with Free Download Manager - file://c:\program files\free download manager\dlall.htm
IE: Download FLV video content with IDM - c:\documents and settings\owner\my documents\idm.v5.17.build.5-hardal\idm.v5.17.build.5-hardal\hardal\IEGetVL.htm
IE: Download selected with Free Download Manager - file://c:\program files\free download manager\dlselected.htm
IE: Download video with Free Download Manager - file://c:\program files\free download manager\dlfvideo.htm
IE: Download with Free Download Manager - file://c:\program files\free download manager\dllink.htm
IE: Download with IDM - c:\documents and settings\owner\my documents\idm.v5.17.build.5-hardal\idm.v5.17.build.5-hardal\hardal\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\owner\applic~1\mozilla\firefox\profiles\1u5q1m5i.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - component: c:\documents and settings\owner\application data\idm\idmmzcc3\components\idmmzcc.dll
FF - component: c:\program files\free download manager\firefox\extension\components\vmsfdmff.dll
FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll
FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\np-mswmp.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\np32dsw.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npdeploytk.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npdivx32.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npnul32.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\NPOFFICE.DLL
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\nppl3260.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npqtplugin.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npqtplugin2.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npqtplugin3.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npqtplugin4.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npqtplugin5.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npqtplugin6.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npqtplugin7.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\nprjplug.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\nprpjplug.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npunagi2.dll
FF - plugin: c:\my backup -- 09-02-14 0433pm\program files\mozilla firefox\plugins\npViewpoint.dll
FF - plugin: c:\my music\mozilla plugins\npitunes.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref( "media.enforce_same_site_origin ", false);
c:\program files\mozilla firefox\greprefs\all.js - pref( "media.cache_size ", 51200);
c:\program files\mozilla firefox\greprefs\all.js - pref( "media.ogg.enabled ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "media.wave.enabled ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "media.autoplay.enabled ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "browser.urlbar.autocomplete.enabled ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "capability.policy.mailnews.*.wholeText ", "noAccess ");
c:\program files\mozilla firefox\greprefs\all.js - pref( "dom.storage.default_quota ", 5120);
c:\program files\mozilla firefox\greprefs\all.js - pref( "content.sink.event_probe_rate ", 3);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.http.prompt-temp-redirect ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "layout.css.dpi ", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref( "layout.css.devPixelsPerPx ", -1);
c:\program files\mozilla firefox\greprefs\all.js - pref( "gestures.enable_single_finger_input ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "dom.max_chrome_script_run_time ", 0);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.tcp.sendbuffer ", 131072);
c:\program files\mozilla firefox\greprefs\all.js - pref( "geo.enabled ", true);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.remember_cert_checkbox_default_setting ", true);
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref( "browser.search.param.yahoo-fr ", "moz35 ");
c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref( "browser.search.param.yahoo-fr-cjkt ", "moz35 ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "extensions.blocklist.level ", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.urlbar.restrict.typed ", "~ ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.urlbar.default.behavior ", 0);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.history ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.formdata ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.passwords ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.downloads ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.cookies ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.cache ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.sessions ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.offlineApps ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.clearOnShutdown.siteSettings ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.history ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.formdata ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.passwords ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.downloads ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.cookies ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.cache ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.sessions ", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.offlineApps ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.cpd.siteSettings ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "privacy.sanitize.migrateFx3Prefs ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.ssl_override_behavior ", 2);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "security.alternate_certificate_error_page ", "certerror ");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.privatebrowsing.autostart ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "browser.privatebrowsing.dont_prompt_on_enter ", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref( "geo.wifi.uri ", "https://www.google.com/loc/json ");

============= SERVICES / DRIVERS ===============

R1 HMFAxCore37a7c6c102aa9e16cdcdde3d497854dc;HMFAxCore37a7c6c102aa9e16cdcdde3d497854dc;c:\windows\system32\drivers\HMFAxCore37a7c6c102aa9e16cdcdde3d497854dc.sys [2009-8-19 22304]
R1 HMFAxCoref13b0a90b075b919e719987243ee533e;HMFAxCoref13b0a90b075b919e719987243ee533e;c:\windows\system32\drivers\HMFAxCoref13b0a90b075b919e719987243ee533e.sys [2009-8-19 22304]
R1 is-6BDA8drv;is-6BDA8drv;c:\windows\system32\drivers\37014691.sys [2009-6-19 148496]
R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-1-9 214024]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2009-2-14 210216]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2009-2-14 353280]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-6 99328]
R2 YahooAUService;Yahoo! Updater;c:\program files\yahoo!\softwareupdate\YahooAUService.exe [2008-11-9 602392]
R3 asc3360pr;asc3360pr;\??\c:\windows\system32\drivers\epvjhj.sys --> c:\windows\system32\drivers\epvjhj.sys [?]
R3 McAfeePF;McAfee Firewall Network Filter Miniport;c:\windows\system32\drivers\fw220.sys [2002-8-5 33280]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-2-14 681984]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2009-2-14 79880]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-2-14 35272]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-2-14 34216]
S3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-2-14 40552]

=============== Created Last 30 ================

2009-08-29 16:06 <DIR> --d----- c:\docume~1\owner\applic~1\IDM
2009-08-29 16:06 <DIR> --d----- c:\docume~1\owner\applic~1\DMCache
2009-08-28 12:54 <DIR> --d----- c:\program files\danny_kay1710
2009-08-25 13:23 5,632 a------- c:\windows\system32\ptpusb.dll
2009-08-25 13:23 15,104 ac------ c:\windows\system32\dllcache\usbscan.sys
2009-08-25 13:23 159,232 a------- c:\windows\system32\ptpusd.dll
2009-08-25 13:23 15,104 a------- c:\windows\system32\drivers\usbscan.sys
2009-08-21 22:54 <DIR> --d----- c:\program files\iPod
2009-08-21 18:27 107,368 a------- c:\windows\system32\GEARAspi.dll
2009-08-21 18:27 23,400 a------- c:\windows\system32\drivers\GEARAspiWDM.sys
2009-08-21 18:27 <DIR> --d----- c:\docume~1\alluse~1\applic~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-08-21 18:26 <DIR> --d----- c:\program files\Bonjour
2009-08-21 18:25 2,060,288 a------- c:\windows\system32\usbaaplrc.dll
2009-08-21 18:25 39,424 a------- c:\windows\system32\drivers\usbaapl.sys
2009-08-20 13:48 2,560 a------- c:\windows\_MSRSTRT.EXE
2009-08-19 19:54 0 a------- C:\9454a
2009-08-19 19:50 0 a------- C:\60e89
2009-08-19 18:36 921,654 a------- c:\windows\stones6865E094.bmp
2009-08-19 18:36 94 a------- c:\windows\system32\run.bat
2009-08-19 18:36 22 a------- c:\windows\system32\VideoEA560DEADrivers.dll
2009-08-19 18:36 19 a------- c:\windows\CTDChannels_Version.6865E094.cdf
2009-08-19 18:36 244 a------- c:\windows\wlistHMFAxCoref13b0a90b075b919e719987243ee533e
2009-08-19 18:36 0 a------- c:\windows\hlistHMFAxCoref13b0a90b075b919e719987243ee533e
2009-08-19 18:36 22,304 a------- c:\windows\system32\drivers\HMFAxCoref13b0a90b075b919e719987243ee533e.sys
2009-08-19 18:35 1,940 a------- c:\windows\system32\fv2.lic
2009-08-19 18:35 135,168 a------- c:\windows\system32\Lock.dll
2009-08-19 18:35 757,760 a------- c:\windows\system32\help.dll
2009-08-19 18:35 608,448 a------- c:\windows\system32\comctl32.ocx
2009-08-19 18:35 368 a------- c:\windows\wlistHMFAxCore37a7c6c102aa9e16cdcdde3d497854dc
2009-08-19 18:35 0 a------- c:\windows\hlistHMFAxCore37a7c6c102aa9e16cdcdde3d497854dc
2009-08-19 18:35 22,304 a------- c:\windows\system32\drivers\HMFAxCore37a7c6c102aa9e16cdcdde3d497854dc.sys
2009-08-19 18:34 713,504 a------- c:\windows\system32\HMFAx.dll
2009-08-19 18:22 <DIR> --d----- c:\program files\RocketDock
2009-08-19 15:39 <DIR> --d----- c:\docume~1\owner\applic~1\Thinstall
2009-08-19 13:59 <DIR> --d----- c:\docume~1\owner\applic~1\Thinking Minds Budiling Bytes
2009-08-19 13:59 <DIR> --d----- c:\program files\CubeDesktop
2009-08-19 13:50 5,760,056 a------- c:\windows\Darkstar.bmp
2009-08-19 11:41 1,168 a------- C:\error.reg
2009-08-18 17:47 <DIR> --d----- c:\program files\AlienGUIse
2009-08-18 15:54 <DIR> --d----- c:\docume~1\owner\applic~1\MozillaControl
2009-08-18 15:54 <DIR> --d----- c:\windows\'Full Speed' Internet Booster + Performance Tests
2009-08-18 15:53 <DIR> --d----- C:\aidualc3
2009-08-18 15:01 42,672 -------- c:\windows\system32\wbsys.dll
2009-08-18 15:01 <DIR> --d----- c:\program files\Stardock
2009-08-18 14:06 <DIR> --d----- c:\program files\TopDesk
2009-08-18 13:45 10,049 a------- c:\windows\msvrc20.dll
2009-08-18 13:45 <DIR> --d----- c:\program files\IObit
2009-08-16 20:09 <DIR> --d----- c:\documents and settings\owner\.thumbnails
2009-08-16 20:07 <DIR> --d----- c:\program files\GIMP-2.0
2009-08-11 14:22 128,512 -c------ c:\windows\system32\dllcache\dhtmled.ocx
2009-08-11 14:21 1,315,328 -c------ c:\windows\system32\dllcache\msoe.dll

==================== Find3M ====================

2009-09-09 20:46 635,795,488 a--sh--- c:\windows\system32\drivers\fidbox.dat
2009-09-04 12:53 7,116,932 a--sh--- c:\windows\system32\drivers\fidbox.idx
2009-09-02 13:20 47,720 a---h--- c:\windows\system32\mlfcache.dat
2009-08-15 00:38 25,280 a------- c:\windows\system32\drivers\hamachi.sys
2009-08-05 05:01 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-07-17 15:01 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
2009-06-29 12:12 827,392 a------- c:\windows\system32\wininet.dll
2009-06-29 12:12 78,336 a------- c:\windows\system32\ieencode.dll
2009-06-29 12:12 17,408 -------- c:\windows\system32\corpol.dll
2009-06-25 04:25 730,112 a------- c:\windows\system32\lsasrv.dll
2009-06-25 04:25 301,568 a------- c:\windows\system32\kerberos.dll
2009-06-25 04:25 147,456 a------- c:\windows\system32\schannel.dll
2009-06-25 04:25 136,192 a------- c:\windows\system32\msv1_0.dll
2009-06-25 04:25 56,832 a------- c:\windows\system32\secur32.dll
2009-06-25 04:25 54,272 a------- c:\windows\system32\wdigest.dll
2009-06-19 19:33 139,776 a------- c:\windows\system32\HdAShCut.exe
2009-06-19 19:33 1,601,536 a------- c:\windows\system32\nwiz.exe
2009-06-16 10:36 119,808 a------- c:\windows\system32\t2embed.dll
2009-06-16 10:36 81,920 a------- c:\windows\system32\fontsub.dll
2009-06-12 08:31 80,896 a------- c:\windows\system32\tlntsess.exe
2009-06-12 08:31 76,288 a------- c:\windows\system32\telnet.exe
2009-04-09 21:23 124,928 a--sh--- c:\windows\system32\zogonaha.exe
2009-06-01 22:04 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009060120090602\index.dat

============= FINISH: 20:47:03.75 ===============