1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Spyware.RemoteSpy [B-Type] Popup from Vista Secuity Alert

Discussion in 'Malware and Virus Removal Archive' started by BlickDot, 2008/11/11.

Page 1 of 2
  1. 2008/11/11
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    [Resolved] Spyware.RemoteSpy [B-Type] Popup from Vista Secuity Alert

    Hello,

    I have "Windows Vista Business" SP1 and I am constantly getting a popup supposedly from "Vista Security Alert "

    It says I have "Spyware.RemoteSpy [B-Type]" that has a "High" risk.

    It states that "Windows Firewall has blocked some features of this Program. "

    But I have Windows Firewall turned off!

    I'm using CA Security Center.

    Everything is updated.

    My "CA Security Center - Anti Spyware" does not find anything. And I did a scan online with McAfee. And still nothing.

    So did a scan with "RogueRemover" again nothing.

    And now I am giving HJT a try.

    So if someone could give me a hand analyzing this log I would appreciate it.

    Thanks,

    Log below

    ===================================================
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:15:26 AM, on 11/11/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
    C:\Windows\cfgmng32.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\cavrid.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
    C:\Windows\sttray.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\DellSupport\DSAgnt.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
    C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
    C:\Program Files\TiVo\Desktop\TiVoNotify.exe
    C:\Users\Ashley\AppData\Roaming\Google\visfdw.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Internet Explorer\ieuser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\CA\CA Internet Security Suite\ccprovep.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Windows\system32\mdmcls32.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\CA\CA Internet Security Suite\casecuritycenter.exe
    C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://v11.www.msn.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?

    LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat

    7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O2 - BHO: CA Toolbar Helper - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - C:\Program Files\CA\CA Internet Security

    Suite\CA Website Inspector\Toolbar\CallingIDIE.dll
    O3 - Toolbar: CA Toolbar - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - C:\Program Files\CA\CA Internet Security

    Suite\CA Website Inspector\Toolbar\CallingIDIE.dll
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe "
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [ISUSPM Startup] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" -startup
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe "
    O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe "
    O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
    O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe "
    O4 - HKLM\..\Run: [dvHighMem] C:\Windows\cfgmng32.exe
    O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe "
    O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33

    \QOELoader.exe "
    O4 - HKLM\..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
    O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [CaPPcl] C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAAntiSpyware.exe /scan

    /startup
    O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe "
    O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe "

    /ScheduleSweep=User_Feed_Synchronization-{D596C828-B284-49F8-AE7E-85522E5B3EB0}
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service

    /registry /auto:TivoTransfer
    O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
    O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
    O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL

    SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [WindowsWelcomeCenter] "rundll32.exe "

    oobefldr.dll,ShowWelcomeCenter (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support

    Center\bin\sprtcmd.exe" /P DellSupportCenter (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [WMPNSCFG] C:\Program Files\Windows Media

    Player\WMPNSCFG.exe (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo

    Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoServer] "C:\Program

    Files\TiVo\Desktop\TiVoServer.exe" /service /registry (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoNotify] "C:\Program

    Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [winlogone]

    "C:\Users\Ashley\AppData\Roaming\Google\visfdw.exe" (User 'Ashley')
    O4 - S-1-5-21-1243134545-562782869-3649009219-1001 Startup: OneNote 2007 Screen Clipper and Launcher.lnk =

    C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Ashley')
    O4 - S-1-5-21-1243134545-562782869-3649009219-1001 User Startup: OneNote 2007 Screen Clipper and Launcher.lnk =

    C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Ashley')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program

    Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12

    \ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1

    \Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) -

    http://www.costcophotocenter.com/CostcoActivia.cab
    O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) -

    http://lads.myspace.com/upload/MySpaceUploader1006.cab
    O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) -

    http://support.dell.com/systemprofiler/SysProExe.CAB
    O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) -

    http://www.ca.com/us/securityadvisor/pestscan/pestscan.cab
    O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) -

    http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
    O16 - DPF: {C9E2242D-DC05-4C54-9483-A5C90653F7BC} (TIClientControl Object) -

    https://techinline.net/Client/TIClient.cab
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device

    Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
    O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security

    Suite\CA Anti-Virus\ISafe.exe
    O23 - Service: dlcc_device - - C:\Windows\system32\dlcccoms.exe
    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision

    Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel

    Matrix Storage Manager\Iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common

    Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program

    Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
    O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0

    \SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio

    Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. -

    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major

    Audio\WDM\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing

    Shared\stllssvr.exe
    O23 - Service: TiVo Beacon (TivoBeacon2) - TiVo Inc. - C:\Program Files\Common Files\TiVo

    Shared\Beacon\TiVoBeacon.exe
    O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
    O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program

    Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
    O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
    O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
    O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-

    Virus\VetMsg.exe
    O23 - Service: WinSock Svchost Manager (WinSvchostManager) - Unknown owner - C:\Windows\System32\svcprs32.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 13212 bytes
     
    BlickDot,
    #1
  2. 2008/11/12
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi BlickDot

    Please open "Note Pad" click on the Format tab and uncheck "Word Wrap "
    Thanks

    Now do this.

    Download Malwarebytes' Anti-Malware (MBAM) from here or here and save the file to your desktop.

    Double click mbam-setup.exe to install the application.
    • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select 'Perform Quick Scan', then click Scan.
    • The scan may take some time to finish,so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked, and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note below)
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Post the entire report in your next reply.

    Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

    Thanks
    Geri
     
    Geri,
    #2


  3. to hide this advert.

  4. 2008/11/13
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    Hello Geri,

    Thanks and sorry for the Word-wrap.

    Right after Malwarebytes finished deleting the CA-AntiSpyware said it found and removed 135 items.

    Malwarebytes log bellow:
    ------------------------------------------------
    Malwarebytes' Anti-Malware 1.30
    Database version: 1396
    Windows 6.0.6001 Service Pack 1

    11/13/2008 6:13:29 PM
    mbam-log-2008-11-13 (18-13-29).txt

    Scan type: Quick Scan
    Objects scanned: 54334
    Time elapsed: 7 minute(s), 6 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 5
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522b3fb-7a2b-4646-8af6-36e7f593073c} (Adware.Coupons) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{62960d20-6d0d-1ab4-4bf1-95b0b5b8783a} (Adware.BHO) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\The Weather Channel (Adware.Hotbar) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
     
    Last edited: 2008/11/13
    BlickDot,
    #3
  5. 2008/11/13
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Are you still getting the warning about Spyware.RemoteSpy?
     
    Geri,
    #4
  6. 2008/11/14
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    Wow! It just popped up again.

    So the answer is an unfortunate yes.
     
    BlickDot,
    #5
  7. 2008/11/14
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Ok please do this.

    • Download RSIT by random/random and save it to your desktop.
    • Double click RSIT.exe to start the tool.
    • At the disclaimer, please use the drop down box to select 3 months for the file/folder search, then click Continue.
    • If prompted by your firewall to allow RSIT to access the internet, please allow it. It will be updating yourr version of HijackThis.
    • When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
    • Please post the contents of log.txt and the Info.txt log here in your next reply.

    Thanks
    Geri
     
    Geri,
    #6
  8. 2008/11/15
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    Hello

    Ok I clicked a little to fast. Rist was on 1 month instaed of 3 months. So I have a lreport fot the first 1 month try and I did it again for 3 months. I am posting the reports for the 3 Month run.

    Ok Sending in multiple posts length is to long.
    ========================================
    log.txt
    -------------------------------
    Logfile of random's system information tool 1.04 (written by random/random)
    Run by Adam at 2008-11-15 07:22:41
    Microsoft® Windows Vistaâ„¢ Business Service Pack 1
    System drive C: has 246 GB (83%) free of 295 GB
    Total RAM: 1021 MB (22% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:22:54 AM, on 11/15/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
    C:\Windows\cfgmng32.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\cavrid.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
    C:\Windows\sttray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAAntiSpyware.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\DellSupport\DSAgnt.exe
    C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
    C:\Program Files\TiVo\Desktop\TiVoNotify.exe
    C:\Users\Ashley\AppData\Roaming\Google\visfdw.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Internet Explorer\ieuser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Users\Ashley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AV2B7U4O\RSIT[1].exe
    C:\Program Files\Trend Micro\HijackThis\Adam.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://v11.www.msn.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O2 - BHO: CA Toolbar Helper - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\Toolbar\CallingIDIE.dll
    O3 - Toolbar: CA Toolbar - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\Toolbar\CallingIDIE.dll
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe "
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [ISUSPM Startup] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" -startup
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe "
    O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe "
    O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
    O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe "
    O4 - HKLM\..\Run: [dvHighMem] C:\Windows\cfgmng32.exe
    O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe "
    O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe "
    O4 - HKLM\..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
    O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [CaPPcl] C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAAntiSpyware.exe /scan /startup
    O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
    O4 - HKLM\..\Run: [UniUploader] C:\Program Files\UniUploader\UniUploader.exe
    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe "
    O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{D596C828-B284-49F8-AE7E-85522E5B3EB0}
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer
    O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
    O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [WindowsWelcomeCenter] "rundll32.exe" oobefldr.dll,ShowWelcomeCenter (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [winlogone] "C:\Users\Ashley\AppData\Roaming\Google\visfdw.exe" (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe (User 'Ashley')
    O4 - S-1-5-21-1243134545-562782869-3649009219-1001 Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Ashley')
    O4 - S-1-5-21-1243134545-562782869-3649009219-1001 User Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Ashley')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
    O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
    O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.dell.com/systemprofiler/SysProExe.CAB
    O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.ca.com/us/securityadvisor/pestscan/pestscan.cab
    O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
    O16 - DPF: {C9E2242D-DC05-4C54-9483-A5C90653F7BC} (TIClientControl Object) - https://techinline.net/Client/TIClient.cab
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
    O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
    O23 - Service: dlcc_device - - C:\Windows\system32\dlcccoms.exe
    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
    O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: TiVo Beacon (TivoBeacon2) - TiVo Inc. - C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
    O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
    O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
    O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
    O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
    O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
    O23 - Service: WinSock Svchost Manager (WinSvchostManager) - Unknown owner - C:\Windows\System32\svcprs32.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 13481 bytes

    ======Scheduled tasks folder======

    C:\Windows\tasks\CAAntiSpywareScan_Daily as Adam at 8 50 PM.job
    C:\Windows\tasks\rpc.job
    C:\Windows\tasks\User_Feed_Synchronization-{D596C828-B284-49F8-AE7E-85522E5B3EB0}.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    SSVHelper Class - c:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-02-12 501384]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FBF2401B-7447-4727-BE5D-C19B2075CA84}]
    CA Toolbar Helper - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\Toolbar\CallingIDIE.dll [2008-06-23 275896]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - CA Toolbar - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\Toolbar\CallingIDIE.dll [2008-06-23 275896]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    " "= []
    "Windows Defender "=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
    "QuickTime Task "=C:\Program Files\QuickTime\QTTask.exe [2008-01-10 385024]
    "PDVDDXSrv "=C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe [2006-10-20 118784]
    "iTunesHelper "=C:\Program Files\iTunes\iTunesHelper.exe [2008-01-15 267048]
    "ISUSScheduler "=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2006-10-03 81920]
    "ISUSPM Startup "=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2006-10-03 221184]
    "IAAnotif "=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2006-09-29 151552]
    "ECenter "=c:\dell\E-Center\EULALauncher.exe [2006-11-17 17920]
    "dscactivate "=C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe [2007-11-15 16384]
    "DLCCCATS "=rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCCtime.dll []
    "DellSupportCenter "=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2008-08-13 206064]
    "cctray "=C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe [2008-10-11 247024]
    "dvHighMem "=C:\Windows\cfgmng32.exe [2007-11-14 11333632]
    "CAVRID "=C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe [2008-08-30 234736]
    "QOELOADER "=C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe [2008-09-09 14088]
    "cafw "=C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe [2008-08-28 771312]
    "capfasem "=C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe [2008-08-28 173296]
    "SigmatelSysTrayApp "=C:\Windows\sttray.exe [2007-01-12 303104]
    "FaxCenterServer "=C:\Program Files\Dell PC Fax\fm3032.exe [2006-11-03 312200]
    "NvSvc "=C:\Windows\system32\nvsvc.dll [2007-09-17 86016]
    "NvCplDaemon "=C:\Windows\system32\NvCpl.dll [2007-09-17 8497696]
    "NvMediaCenter "=C:\Windows\system32\NvMcTray.dll [2007-09-17 81920]
    "CaPPcl "=C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAAntiSpyware.exe [2008-08-27 472304]
    "SpySweeper "=C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray []
    "UniUploader "=C:\Program Files\UniUploader\UniUploader.exe []

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "Malwarebytes' Anti-Malware "=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2008-10-22 399504]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "WMPNSCFG "=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
    "RunSpySweeperScheduleAtStartup "=C:\Windows\system32\msfeedssync.exe [2008-01-19 12800]
    "DellSupport "=C:\Program Files\DellSupport\DSAgnt.exe [2006-11-12 446976]
    "TivoTransfer "=C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe [2008-07-09 1189376]
    "TivoNotify "=C:\Program Files\TiVo\Desktop\TiVoNotify.exe [2008-07-09 394240]
    "TivoServer "=C:\Program Files\TiVo\Desktop\TiVoServer.exe [2008-07-09 1931264]

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\PFW]
    C:\Windows\system32\UmxWnp.Dll [2007-05-18 79368]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{1869181A-9F50-4FCF-8BFF-1B8588ECB85C} "=C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\LinkAdvisor\CIDLinkAdvisor.dll [2008-06-23 1373624]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername "=0
    "legalnoticecaption "=
    "legalnoticetext "=
    "shutdownwithoutlogon "=1
    "undockwithoutlogon "=1
    "EnableUIADesktopToggle "=0

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "EnableShellExecuteHooks "=

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{69300101-fd92-11dc-83d2-0019d129d317}]
    shell\AutoRun\command - K:\tcauto.exe
    shell\VERB\command - K:\tcauto.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aa24b7f5-baf0-11db-a464-806e6f6e6963}]
    shell\AutoRun\command - F:\autorun.exe


    ======List of files/folders created in the last 3 months======

    2008-11-15 07:20:49 ----D---- C:\rsit
    2008-11-13 18:01:51 ----D---- C:\Users\Adam\AppData\Roaming\Malwarebytes
    2008-11-13 18:01:43 ----D---- C:\ProgramData\Malwarebytes
    2008-11-13 18:01:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2008-11-11 18:53:00 ----A---- C:\ProgramData\SPL8130.tmp
    2008-11-11 11:46:16 ----A---- C:\ProgramData\SPLDA92.tmp
    2008-11-10 23:20:17 ----D---- C:\Program Files\RogueRemover FREE
    2008-11-07 01:14:34 ----A---- C:\Windows\system32\win32spl.dll
    2008-11-06 23:21:50 ----A---- C:\Windows\system32\netapi32.dll
    2008-11-06 23:21:33 ----A---- C:\Windows\system32\Faultrep.dll
    2008-11-06 23:21:32 ----A---- C:\Windows\system32\wersvc.dll
    2008-11-06 20:39:27 ----D---- C:\ProgramData\Blizzard
    2008-10-21 22:10:26 ----D---- C:\ProgramData\TiVo
    2008-10-21 22:10:26 ----D---- C:\Program Files\TiVo
    2008-10-21 20:49:34 ----A---- C:\Windows\system32\mshtml.dll
    2008-10-21 20:49:33 ----A---- C:\Windows\system32\ieframe.dll
    2008-10-21 20:49:32 ----A---- C:\Windows\system32\wininet.dll
    2008-10-21 20:49:32 ----A---- C:\Windows\system32\urlmon.dll
    2008-10-21 20:49:31 ----A---- C:\Windows\system32\iertutil.dll
    2008-10-21 20:49:29 ----A---- C:\Windows\system32\mstime.dll
    2008-10-21 20:49:27 ----A---- C:\Windows\system32\jsproxy.dll
    2008-10-21 20:48:36 ----A---- C:\Windows\system32\ntoskrnl.exe
    2008-10-21 20:48:36 ----A---- C:\Windows\system32\ntkrnlpa.exe
    2008-10-21 20:29:54 ----D---- C:\Program Files\Common Files\TiVo Shared
    2008-10-20 13:53:53 ----D---- C:\ProgramData\FLEXnet
    2008-10-20 13:48:05 ----D---- C:\Program Files\Common Files\Macrovision Shared
    2008-10-20 13:47:01 ----D---- C:\ProgramData\Rosetta Stone
    2008-10-20 13:47:00 ----D---- C:\Program Files\Rosetta Stone
    2008-10-03 11:25:34 ----D---- C:\ProgramData\Office Genuine Advantage
    2008-09-28 16:56:03 ----D---- C:\ProgramData\WindowsSearch
    2008-09-28 16:15:32 ----A---- C:\ProgramData\SPLFE2E.tmp
    2008-09-26 19:23:33 ----D---- C:\Users\Adam\AppData\Roaming\DellFaxCtr
    2008-09-26 19:01:17 ----D---- C:\Windows\system32\Dell
    2008-09-26 18:54:25 ----A---- C:\Windows\system32\DLPRMON.DLL
    2008-09-26 18:54:25 ----A---- C:\Windows\system32\DLPMONUI.DLL
    2008-09-26 18:54:03 ----A---- C:\Windows\system32\IMHOST32.DLL
    2008-09-26 18:54:03 ----A---- C:\Windows\system32\IMGMAN32.DLL
    2008-09-26 18:54:01 ----D---- C:\ProgramData\DellFaxCtr
    2008-09-26 18:53:49 ----D---- C:\Program Files\Dell PC Fax
    2008-09-22 20:27:41 ----A---- C:\Windows\system32\stapi32.dll
    2008-09-22 20:27:40 ----D---- C:\Program Files\SigmaTel
    2008-09-19 14:30:52 ----D---- C:\ProgramData\NVIDIA
    2008-09-18 23:55:56 ----A---- C:\Windows\system32\msshooks.dll
    2008-09-18 23:55:56 ----A---- C:\Windows\system32\msscb.dll
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\thawbrkr.dll
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\SearchFilterHost.exe
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\propsys.dll
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\propdefs.dll
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\msstrc.dll
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\mssprxy.dll
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\mssitlb.dll
    2008-09-18 23:55:51 ----A---- C:\Windows\system32\msshsq.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\xmlfilter.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\wsepno.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\srchadmin.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\rtffilt.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\offfilt.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\nlhtml.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\msscntrs.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\mimefilt.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\korwbrkr.dll
    2008-09-18 23:55:50 ----A---- C:\Windows\system32\chsbrkr.dll
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\tquery.dll
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\SearchProtocolHost.exe
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\SearchIndexer.exe
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\mssvp.dll
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\mssrch.dll
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\mssphtb.dll
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\mssph.dll
    2008-09-18 23:55:49 ----A---- C:\Windows\system32\chtbrkr.dll
    2008-09-18 23:48:37 ----A---- C:\Windows\system32\rpcrt4.dll
    2008-09-18 23:48:36 ----A---- C:\Windows\system32\pacerprf.dll
    2008-09-18 23:48:34 ----A---- C:\Windows\system32\wshext.dll
    2008-09-18 23:48:34 ----A---- C:\Windows\system32\wscript.exe
    2008-09-18 23:48:34 ----A---- C:\Windows\system32\vbscript.dll
    2008-09-18 23:48:34 ----A---- C:\Windows\system32\scrrun.dll
    2008-09-18 23:48:34 ----A---- C:\Windows\system32\scrobj.dll
    2008-09-18 23:48:34 ----A---- C:\Windows\system32\jscript.dll
    2008-09-18 23:48:34 ----A---- C:\Windows\system32\cscript.exe
    2008-09-18 23:48:25 ----A---- C:\Windows\system32\emdmgmt.dll
    2008-09-18 23:48:25 ----A---- C:\Windows\system32\dataclen.dll
    2008-09-18 23:48:25 ----A---- C:\Windows\system32\cdd.dll
    2008-09-14 08:44:56 ----D---- C:\PerfLogs
    2008-09-14 08:10:55 ----A---- C:\Windows\system32\SLsvc.exe
    2008-09-14 08:10:55 ----A---- C:\Windows\system32\onex.dll
    2008-09-14 08:10:46 ----A---- C:\Windows\system32\PSHED.DLL
    2008-09-14 08:10:45 ----A---- C:\Windows\system32\imagesp1.dll
    2008-09-14 08:10:44 ----A---- C:\Windows\system32\wbengine.exe
    2008-09-14 08:10:44 ----A---- C:\Windows\system32\dfsr.exe
    2008-09-14 08:10:43 ----A---- C:\Windows\system32\sstpsvc.dll
    2008-09-14 08:10:43 ----A---- C:\Windows\system32\pidgenx.dll
    2008-09-14 08:10:43 ----A---- C:\Windows\system32\mstscax.dll
    2008-09-14 08:10:41 ----A---- C:\Windows\system32\WsmSvc.dll
    2008-09-14 08:10:41 ----A---- C:\Windows\system32\winrscmd.dll
    2008-09-14 08:10:40 ----A---- C:\Windows\system32\vssapi.dll
    2008-09-14 08:10:40 ----A---- C:\Windows\system32\sysmain.dll
    2008-09-14 08:10:40 ----A---- C:\Windows\system32\RMActivate.exe
    2008-09-14 08:10:39 ----A---- C:\Windows\system32\VSSVC.exe
    2008-09-14 08:10:39 ----A---- C:\Windows\system32\secproc.dll
    2008-09-14 08:10:39 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
    2008-09-14 08:10:38 ----A---- C:\Windows\system32\RMActivate_isv.exe
    2008-09-14 08:10:38 ----A---- C:\Windows\system32\iesetup.dll
    2008-09-14 08:10:37 ----A---- C:\Windows\system32\secproc_isv.dll
    2008-09-14 08:10:36 ----A---- C:\Windows\system32\drmv2clt.dll
    2008-09-14 08:10:35 ----A---- C:\Windows\system32\xpssvcs.dll
    2008-09-14 08:10:35 ----A---- C:\Windows\system32\icardres.dll
    2008-09-14 08:10:35 ----A---- C:\Windows\system32\icardagt.exe
    2008-09-14 08:10:35 ----A---- C:\Windows\system32\blackbox.dll
    2008-09-14 08:10:34 ----A---- C:\Windows\system32\RMActivate_ssp.exe
    2008-09-14 08:10:34 ----A---- C:\Windows\system32\RacEngn.dll
    2008-09-14 08:10:33 ----A---- C:\Windows\system32\spwizimg.dll
    2008-09-14 08:10:33 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
    2008-09-14 08:10:33 ----A---- C:\Windows\system32\rdpencom.dll
    2008-09-14 08:10:32 ----A---- C:\Windows\system32\msxml6.dll
    2008-09-14 08:10:32 ----A---- C:\Windows\system32\msxml3.dll
    2008-09-14 08:10:32 ----A---- C:\Windows\system32\msjet40.dll
    2008-09-14 08:10:32 ----A---- C:\Windows\system32\lpremove.exe
    2008-09-14 08:10:32 ----A---- C:\Windows\bfsvc.exe
    2008-09-14 08:10:31 ----A---- C:\Windows\system32\qmgr.dll
    2008-09-14 08:10:31 ----A---- C:\Windows\system32\ntdll.dll
    2008-09-14 08:10:31 ----A---- C:\Windows\system32\lsasrv.dll
    2008-09-14 08:10:31 ----A---- C:\Windows\system32\localspl.dll
    2008-09-14 08:10:30 ----A---- C:\Windows\system32\wevtsvc.dll
    2008-09-14 08:10:30 ----A---- C:\Windows\system32\wcncsvc.dll
    2008-09-14 08:10:30 ----A---- C:\Windows\system32\recdisc.exe
    2008-09-14 08:10:30 ----A---- C:\Windows\system32\mscoree.dll
    2008-09-14 08:10:30 ----A---- C:\Windows\system32\kernel32.dll
    2008-09-14 08:10:30 ----A---- C:\Windows\system32\IKEEXT.DLL
    2008-09-14 08:10:29 ----A---- C:\Windows\system32\TsWpfWrp.exe
    2008-09-14 08:10:29 ----A---- C:\Windows\system32\CompMgmtLauncher.exe
    2008-09-14 08:10:28 ----A---- C:\Windows\system32\wmp.dll
    2008-09-14 08:10:28 ----A---- C:\Windows\system32\vds.exe
    2008-09-14 08:10:27 ----A---- C:\Windows\system32\wcnwiz.dll
    2008-09-14 08:10:27 ----A---- C:\Windows\system32\SMBHelperClass.dll
    2008-09-14 08:10:27 ----A---- C:\Windows\system32\mstsc.exe
    2008-09-14 08:10:26 ----A---- C:\Windows\system32\msvbvm60.dll
    2008-09-14 08:10:26 ----A---- C:\Windows\system32\msdtctm.dll
    2008-09-14 08:10:26 ----A---- C:\Windows\system32\mf.dll
    2008-09-14 08:10:25 ----A---- C:\Windows\system32\termsrv.dll
    2008-09-14 08:10:25 ----A---- C:\Windows\system32\kerberos.dll
    2008-09-14 08:10:25 ----A---- C:\Windows\system32\IMJP10K.DLL
    2008-09-14 08:10:25 ----A---- C:\Windows\system32\advapi32.dll
    2008-09-14 08:10:24 ----A---- C:\Windows\system32\mmcndmgr.dll
    2008-09-14 08:10:24 ----A---- C:\Windows\system32\CertEnroll.dll
    2008-09-14 08:10:23 ----A---- C:\Windows\system32\wbadmin.exe
    2008-09-14 08:10:23 ----A---- C:\Windows\system32\Query.dll
    2008-09-14 08:10:23 ----A---- C:\Windows\system32\MPSSVC.dll
    2008-09-14 08:10:22 ----A---- C:\Windows\system32\xolehlp.dll
    2008-09-14 08:10:22 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
    2008-09-14 08:10:22 ----A---- C:\Windows\system32\ole32.dll
    2008-09-14 08:10:22 ----A---- C:\Windows\system32\netlogon.dll
    2008-09-14 08:10:22 ----A---- C:\Windows\system32\msdtcprx.dll
    2008-09-14 08:10:21 ----A---- C:\Windows\system32\SSShim.dll
    2008-09-14 08:10:21 ----A---- C:\Windows\system32\msvcrt.dll
    2008-09-14 08:10:21 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
    2008-09-14 08:10:20 ----A---- C:\Windows\system32\shlwapi.dll
    2008-09-14 08:10:20 ----A---- C:\Windows\system32\sdclt.exe
    2008-09-14 08:10:20 ----A---- C:\Windows\system32\schedsvc.dll
    2008-09-14 08:10:20 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
    2008-09-14 08:10:20 ----A---- C:\Windows\system32\nlmgp.dll
    2008-09-14 08:10:20 ----A---- C:\Windows\system32\IasMigPlugin.dll
    2008-09-14 08:10:20 ----A---- C:\Windows\system32\DfsShlEx.dll
    2008-09-14 08:10:19 ----A---- C:\Windows\system32\wer.dll
    2008-09-14 08:10:19 ----A---- C:\Windows\system32\vdsdyn.dll
    2008-09-14 08:10:19 ----A---- C:\Windows\system32\user32.dll
    2008-09-14 08:10:19 ----A---- C:\Windows\system32\milcore.dll
    2008-09-14 08:10:19 ----A---- C:\Windows\system32\clusapi.dll
    2008-09-14 08:10:18 ----A---- C:\Windows\system32\WSDApi.dll
    2008-09-14 08:10:18 ----A---- C:\Windows\system32\QAGENTRT.DLL
    2008-09-14 08:10:18 ----A---- C:\Windows\system32\diagperf.dll
    2008-09-14 08:10:18 ----A---- C:\Windows\system32\d3d9.dll
    2008-09-14 08:10:17 ----A---- C:\Windows\system32\winrsmgr.dll
    2008-09-14 08:10:17 ----A---- C:\Windows\system32\vdsbas.dll
    2008-09-14 08:10:17 ----A---- C:\Windows\system32\SLC.dll
    2008-09-14 08:10:17 ----A---- C:\Windows\system32\mtxclu.dll
    2008-09-14 08:10:17 ----A---- C:\Windows\system32\mmc.exe
    2008-09-14 08:10:16 ----A---- C:\Windows\system32\swprv.dll
    2008-09-14 08:10:16 ----A---- C:\Windows\system32\msi.dll
    2008-09-14 08:10:16 ----A---- C:\Windows\system32\cscsvc.dll
    2008-09-14 08:10:16 ----A---- C:\Windows\system32\comctl32.dll
    2008-09-14 08:10:15 ----A---- C:\Windows\system32\MSVidCtl.dll
    2008-09-14 08:10:14 ----A---- C:\Windows\system32\XPSSHHDR.dll
    2008-09-14 08:10:14 ----A---- C:\Windows\system32\sbe.dll
    2008-09-14 08:10:14 ----A---- C:\Windows\system32\samsrv.dll
    2008-09-14 08:10:14 ----A---- C:\Windows\system32\msdtckrm.dll
    2008-09-14 08:10:14 ----A---- C:\Windows\system32\gpsvc.dll
    2008-09-14 08:10:14 ----A---- C:\Windows\system32\FWPUCLNT.DLL
    2008-09-14 08:10:13 ----A---- C:\Windows\system32\mfc42u.dll
    2008-09-14 08:10:13 ----A---- C:\Windows\system32\esent.dll
    2008-09-14 08:10:12 ----A---- C:\Windows\system32\wecutil.exe
    2008-09-14 08:10:12 ----A---- C:\Windows\system32\usp10.dll
    2008-09-14 08:10:12 ----A---- C:\Windows\system32\sdengin2.dll
    2008-09-14 08:10:12 ----A---- C:\Windows\system32\gacinstall.dll
    2008-09-14 08:10:12 ----A---- C:\Windows\system32\cmipnpinstall.dll
    2008-09-14 08:10:12 ----A---- C:\Windows\system32\cmicryptinstall.dll
    2008-09-14 08:10:11 ----A---- C:\Windows\system32\mfc42.dll
    2008-09-14 08:10:08 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
    2008-09-14 08:10:08 ----A---- C:\Windows\system32\crypt32.dll
    2008-09-14 08:10:08 ----A---- C:\Windows\system32\comsvcs.dll
    2008-09-14 08:10:08 ----A---- C:\Windows\system32\certutil.exe
    2008-09-14 08:10:07 ----A---- C:\Windows\system32\mswsock.dll
    2008-09-14 08:10:07 ----A---- C:\Windows\explorer.exe
    2008-09-14 08:10:06 ----A---- C:\Windows\system32\wmdrmsdk.dll
    2008-09-14 08:10:06 ----A---- C:\Windows\system32\sqlceqp30.dll
    2008-09-14 08:10:06 ----A---- C:\Windows\system32\setupapi.dll
    2008-09-14 08:10:06 ----A---- C:\Windows\system32\oleaut32.dll
    2008-09-14 08:10:06 ----A---- C:\Windows\system32\lsm.exe
    2008-09-14 08:10:06 ----A---- C:\Windows\system32\FirewallAPI.dll
    2008-09-14 08:10:06 ----A---- C:\Windows\system32\bcrypt.dll
    2008-09-14 08:10:05 ----A---- C:\Windows\system32\wecsvc.dll
    2008-09-14 08:10:05 ----A---- C:\Windows\system32\sdohlp.dll
    2008-09-14 08:10:05 ----A---- C:\Windows\system32\schannel.dll
    2008-09-14 08:10:05 ----A---- C:\Windows\system32\msv1_0.dll
    2008-09-14 08:10:05 ----A---- C:\Windows\system32\iphlpsvc.dll
    2008-09-14 08:10:05 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
    2008-09-14 08:10:04 ----A---- C:\Windows\system32\wmpmde.dll
    2008-09-14 08:10:04 ----A---- C:\Windows\system32\thumbcache.dll
    2008-09-14 08:10:04 ----A---- C:\Windows\system32\p2psvc.dll
    2008-09-14 08:10:04 ----A---- C:\Windows\system32\eapp3hst.dll
    2008-09-14 08:10:00 ----A---- C:\Windows\system32\riched20.dll
    2008-09-14 08:10:00 ----A---- C:\Windows\system32\autofmt.exe
    2008-09-14 08:09:59 ----A---- C:\Windows\system32\vdsutil.dll
    2008-09-14 08:09:59 ----A---- C:\Windows\system32\imapi2fs.dll
    2008-09-14 08:09:59 ----A---- C:\Windows\system32\d3d10_1.dll
    2008-09-14 08:09:59 ----A---- C:\Windows\system32\autoconv.exe
    2008-09-14 08:09:59 ----A---- C:\Windows\system32\autochk.exe
    2008-09-14 08:09:58 ----A---- C:\Windows\system32\WinSAT.exe
    2008-09-14 08:09:58 ----A---- C:\Windows\system32\tscfgwmi.dll
    2008-09-14 08:09:58 ----A---- C:\Windows\system32\authui.dll
    2008-09-14 08:09:58 ----A---- C:\Windows\system32\authfwcfg.dll
    2008-09-14 08:09:57 ----A---- C:\Windows\system32\wevtapi.dll
    2008-09-14 08:09:57 ----A---- C:\Windows\system32\d3d10_1core.dll
    2008-09-14 08:09:57 ----A---- C:\Windows\system32\browseui.dll
    2008-09-14 08:09:56 ----A---- C:\Windows\system32\mscories.dll
    2008-09-14 08:09:56 ----A---- C:\Windows\system32\dmvdsitf.dll
    2008-09-14 08:09:56 ----A---- C:\Windows\system32\comuid.dll
    2008-09-14 08:09:56 ----A---- C:\Windows\system32\comdlg32.dll
    2008-09-14 08:09:55 ----A---- C:\Windows\system32\WSDMon.dll
    2008-09-14 08:09:55 ----A---- C:\Windows\system32\wevtfwd.dll
    2008-09-14 08:09:55 ----A---- C:\Windows\system32\uexfat.dll
    2008-09-14 08:09:55 ----A---- C:\Windows\system32\eapphost.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\whealogr.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\untfs.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\umrdp.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\sqlcese30.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\rasmans.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\pcaui.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\iassam.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\eappcfg.dll
    2008-09-14 08:09:54 ----A---- C:\Windows\system32\DfrgNtfs.exe
    2008-09-14 08:09:53 ----A---- C:\Windows\system32\wlansvc.dll
    2008-09-14 08:09:52 ----A---- C:\Windows\system32\dot3svc.dll
    2008-09-14 08:09:51 ----A---- C:\Windows\system32\rdpwsx.dll
    2008-09-14 08:09:51 ----A---- C:\Windows\system32\mssha.dll
    2008-09-14 08:09:51 ----A---- C:\Windows\system32\FXSRESM.dll
    2008-09-14 08:09:50 ----A---- C:\Windows\system32\zipfldr.dll
    2008-09-14 08:09:50 ----A---- C:\Windows\system32\WsmAuto.dll
    2008-09-14 08:09:50 ----A---- C:\Windows\system32\winhttp.dll
    2008-09-14 08:09:50 ----A---- C:\Windows\system32\nlasvc.dll
    2008-09-14 08:09:50 ----A---- C:\Windows\system32\msdrm.dll
    2008-09-14 08:09:50 ----A---- C:\Windows\system32\evr.dll
    2008-09-14 08:09:50 ----A---- C:\Windows\system32\dfrgui.exe
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\WMVCORE.DLL
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\wmdrmdev.dll
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\rpcss.dll
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\rasppp.dll
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\ncrypt.dll
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\msrepl40.dll
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\BFE.DLL
    2008-09-14 08:09:49 ----A---- C:\Windows\system32\audiosrv.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\WsmWmiPl.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\WebClnt.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\themecpl.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\rastls.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\printui.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\objsel.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\dhcpcsvc6.dll
    2008-09-14 08:09:48 ----A---- C:\Windows\system32\ddraw.dll
    2008-09-14 08:09:47 ----A---- C:\Windows\system32\w32time.dll
    2008-09-14 08:09:47 ----A---- C:\Windows\system32\sqlsrv32.dll
    2008-09-14 08:09:47 ----A---- C:\Windows\system32\QAGENT.DLL
    2008-09-14 08:09:47 ----A---- C:\Windows\system32\iasnap.dll
    2008-09-14 08:09:47 ----A---- C:\Windows\system32\dbghelp.dll
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\wmdrmnet.dll
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\WerFaultSecure.exe
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\spoolss.dll
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\PresentationHost.exe
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\ncryptui.dll
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\iprtrmgr.dll
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\icm32.dll
    2008-09-14 08:09:46 ----A---- C:\Windows\system32\azroles.dll
    2008-09-14 08:09:45 ----A---- C:\Windows\system32\wlangpui.dll
    2008-09-14 08:09:45 ----A---- C:\Windows\system32\winsrv.dll
    2008-09-14 08:09:45 ----A---- C:\Windows\system32\taskschd.dll
    2008-09-14 08:09:45 ----A---- C:\Windows\system32\msctf.dll
    2008-09-14 08:09:45 ----A---- C:\Windows\system32\infocardapi.dll
    2008-09-14 08:09:45 ----A---- C:\Windows\system32\bcdedit.exe
    2008-09-14 08:09:45 ----A---- C:\Windows\system32\basecsp.dll
    2008-09-14 08:09:44 ----A---- C:\Windows\system32\WFS.exe
    2008-09-14 08:09:44 ----A---- C:\Windows\system32\scksp.dll
    2008-09-14 08:09:44 ----A---- C:\Windows\system32\mstlsapi.dll
    2008-09-14 08:09:44 ----A---- C:\Windows\system32\AudioEng.dll
    2008-09-14 08:09:43 ----A---- C:\Windows\system32\winsta.dll
    2008-09-14 08:09:43 ----A---- C:\Windows\system32\rsaenh.dll
    2008-09-14 08:09:43 ----A---- C:\Windows\system32\netprofm.dll
    2008-09-14 08:09:43 ----A---- C:\Windows\system32\netcfgx.dll
    2008-09-14 08:09:43 ----A---- C:\Windows\system32\hcrstco.dll
    2008-09-14 08:09:43 ----A---- C:\Windows\system32\dbgeng.dll
    2008-09-14 08:09:42 ----A---- C:\Windows\system32\winlogon.exe
    2008-09-14 08:09:42 ----A---- C:\Windows\system32\wercon.exe
    2008-09-14 08:09:42 ----A---- C:\Windows\system32\taskcomp.dll
    2008-09-14 08:09:42 ----A---- C:\Windows\system32\lpksetup.exe
    2008-09-14 08:09:42 ----A---- C:\Windows\system32\cdosys.dll
     
    BlickDot,
    #7
  9. 2008/11/15
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    2008-09-14 08:09:41 ----A---- C:\Windows\system32\wlansec.dll
    2008-09-14 08:09:41 ----A---- C:\Windows\system32\sqmapi.dll
    2008-09-14 08:09:41 ----A---- C:\Windows\system32\msdtcuiu.dll
    2008-09-14 08:09:41 ----A---- C:\Windows\system32\dfshim.dll
    2008-09-14 08:09:41 ----A---- C:\Windows\system32\certcli.dll
    2008-09-14 08:09:41 ----A---- C:\Windows\system32\apds.dll
    2008-09-14 08:09:40 ----A---- C:\Windows\system32\tsgqec.dll
    2008-09-14 08:09:40 ----A---- C:\Windows\system32\shdocvw.dll
    2008-09-14 08:09:40 ----A---- C:\Windows\system32\mprddm.dll
    2008-09-14 08:09:40 ----A---- C:\Windows\system32\iasrad.dll
    2008-09-14 08:09:40 ----A---- C:\Windows\system32\eapsvc.dll
    2008-09-14 08:09:40 ----A---- C:\Windows\system32\AUDIOKSE.dll
    2008-09-14 08:09:40 ----A---- C:\Windows\system32\aaclient.dll
    2008-09-14 08:09:39 ----A---- C:\Windows\system32\Wldap32.dll
    2008-09-14 08:09:39 ----A---- C:\Windows\system32\uDWM.dll
    2008-09-14 08:09:39 ----A---- C:\Windows\system32\profprov.dll
    2008-09-14 08:09:39 ----A---- C:\Windows\system32\msidcrl30.dll
    2008-09-14 08:09:39 ----A---- C:\Windows\system32\dnsapi.dll
    2008-09-14 08:09:39 ----A---- C:\Windows\system32\certmgr.dll
    2008-09-14 08:09:39 ----A---- C:\Windows\system32\bcdsrv.dll
    2008-09-14 08:09:38 ----A---- C:\Windows\system32\WMVDECOD.DLL
    2008-09-14 08:09:38 ----A---- C:\Windows\system32\umpnpmgr.dll
    2008-09-14 08:09:38 ----A---- C:\Windows\system32\pla.dll
    2008-09-14 08:09:37 ----A---- C:\Windows\system32\wmicmiplugin.dll
    2008-09-14 08:09:37 ----A---- C:\Windows\system32\netshell.dll
    2008-09-14 08:09:37 ----A---- C:\Windows\system32\dxgi.dll
    2008-09-14 08:09:37 ----A---- C:\Windows\system32\dot3gpui.dll
    2008-09-14 08:09:36 ----A---- C:\Windows\system32\shsvcs.dll
    2008-09-14 08:09:36 ----A---- C:\Windows\system32\rdpclip.exe
    2008-09-14 08:09:36 ----A---- C:\Windows\system32\ntprint.dll
    2008-09-14 08:09:36 ----A---- C:\Windows\system32\MMDevAPI.dll
    2008-09-14 08:09:36 ----A---- C:\Windows\system32\cryptnet.dll
    2008-09-14 08:09:36 ----A---- C:\Windows\system32\comsnap.dll
    2008-09-14 08:09:35 ----A---- C:\Windows\system32\wscsvc.dll
    2008-09-14 08:09:35 ----A---- C:\Windows\system32\winmm.dll
    2008-09-14 08:09:35 ----A---- C:\Windows\system32\services.exe
    2008-09-14 08:09:34 ----A---- C:\Windows\system32\wscisvif.dll
    2008-09-14 08:09:34 ----A---- C:\Windows\system32\synceng.dll
    2008-09-14 08:09:34 ----A---- C:\Windows\system32\pnidui.dll
    2008-09-14 08:09:34 ----A---- C:\Windows\system32\cmifw.dll
    2008-09-14 08:09:33 ----A---- C:\Windows\system32\WMVSDECD.DLL
    2008-09-14 08:09:33 ----A---- C:\Windows\system32\taskeng.exe
    2008-09-14 08:09:33 ----A---- C:\Windows\system32\pmcsnap.dll
    2008-09-14 08:09:33 ----A---- C:\Windows\system32\msjtes40.dll
    2008-09-14 08:09:33 ----A---- C:\Windows\system32\msconfig.exe
    2008-09-14 08:09:33 ----A---- C:\Windows\system32\iassdo.dll
    2008-09-14 08:09:33 ----A---- C:\Windows\system32\cipher.exe
    2008-09-14 08:09:32 ----A---- C:\Windows\system32\uxtheme.dll
    2008-09-14 08:09:32 ----A---- C:\Windows\system32\tdh.dll
    2008-09-14 08:09:32 ----A---- C:\Windows\system32\rasapi32.dll
    2008-09-14 08:09:32 ----A---- C:\Windows\system32\imapi2.dll
    2008-09-14 08:09:32 ----A---- C:\Windows\system32\dmdskmgr.dll
    2008-09-14 08:09:31 ----A---- C:\Windows\system32\SessEnv.dll
    2008-09-14 08:09:31 ----A---- C:\Windows\system32\msscp.dll
    2008-09-14 08:09:31 ----A---- C:\Windows\system32\dot3api.dll
    2008-09-14 08:09:31 ----A---- C:\Windows\system32\cmd.exe
    2008-09-14 08:09:31 ----A---- C:\Windows\system32\cbsra.exe
    2008-09-14 08:09:31 ----A---- C:\Windows\system32\AuthFWSnapin.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\WUDFx.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\wlanmsm.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\wlancfg.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\wkssvc.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\wevtutil.exe
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\srvsvc.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\qdvd.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\msdtcVSp1res.dll
    2008-09-14 08:09:30 ----A---- C:\Windows\system32\loadperf.dll
    2008-09-14 08:09:29 ----A---- C:\Windows\system32\rpchttp.dll
    2008-09-14 08:09:29 ----A---- C:\Windows\system32\rdpdd.dll
    2008-09-14 08:09:29 ----A---- C:\Windows\system32\mshtmled.dll
    2008-09-14 08:09:29 ----A---- C:\Windows\system32\localsec.dll
    2008-09-14 08:09:29 ----A---- C:\Windows\system32\fontext.dll
    2008-09-14 08:09:29 ----A---- C:\Windows\system32\diskpart.exe
    2008-09-14 08:09:29 ----A---- C:\Windows\system32\comres.dll
    2008-09-14 08:09:28 ----A---- C:\Windows\system32\wlanapi.dll
    2008-09-14 08:09:28 ----A---- C:\Windows\system32\WinSATAPI.dll
    2008-09-14 08:09:28 ----A---- C:\Windows\system32\rdpendp.dll
    2008-09-14 08:09:28 ----A---- C:\Windows\system32\hnetcfg.dll
    2008-09-14 08:09:28 ----A---- C:\Windows\system32\gpedit.msc
    2008-09-14 08:09:28 ----A---- C:\Windows\system32\dsound.dll
    2008-09-14 08:09:27 ----A---- C:\Windows\system32\wsqmcons.exe
    2008-09-14 08:09:23 ----A---- C:\Windows\system32\WMADMOD.DLL
    2008-09-14 08:09:23 ----A---- C:\Windows\system32\wlanpref.dll
    2008-09-14 08:09:23 ----A---- C:\Windows\system32\NAPMONTR.DLL
    2008-09-14 08:09:23 ----A---- C:\Windows\system32\FXSSVC.exe
    2008-09-14 08:09:22 ----A---- C:\Windows\system32\WindowsCodecs.dll
    2008-09-14 08:09:22 ----A---- C:\Windows\system32\RDPENCDD.dll
    2008-09-14 08:09:22 ----A---- C:\Windows\system32\filemgmt.dll
    2008-09-14 08:09:22 ----A---- C:\Windows\system32\avifil32.dll
    2008-09-14 08:09:21 ----A---- C:\Windows\system32\wsecedit.dll
    2008-09-14 08:09:21 ----A---- C:\Windows\system32\tracerpt.exe
    2008-09-14 08:09:21 ----A---- C:\Windows\system32\PresentationHostProxy.dll
    2008-09-14 08:09:21 ----A---- C:\Windows\system32\MuiUnattend.exe
    2008-09-14 08:09:21 ----A---- C:\Windows\system32\dnsrslvr.dll
    2008-09-14 08:09:20 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
    2008-09-14 08:09:20 ----A---- C:\Windows\system32\SLCommDlg.dll
    2008-09-14 08:09:20 ----A---- C:\Windows\system32\dhcpcsvc.dll
    2008-09-14 08:09:20 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\WMSPDMOD.DLL
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\wininit.exe
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\spp.dll
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\rasdlg.dll
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\QSHVHOST.DLL
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\P2PGraph.dll
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\iassvcs.dll
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\gpresult.exe
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\dwmredir.dll
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\dwm.exe
    2008-09-14 08:09:19 ----A---- C:\Windows\system32\apphelp.dll
    2008-09-14 08:09:18 ----A---- C:\Windows\system32\PortableDeviceApi.dll
    2008-09-14 08:09:18 ----A---- C:\Windows\system32\mscorier.dll
    2008-09-14 08:09:18 ----A---- C:\Windows\system32\mcbuilder.exe
    2008-09-14 08:09:18 ----A---- C:\Windows\system32\iashost.exe
    2008-09-14 08:09:18 ----A---- C:\Windows\system32\azroleui.dll
    2008-09-14 08:09:18 ----A---- C:\Windows\HelpPane.exe
    2008-09-14 08:09:17 ----A---- C:\Windows\system32\wecapi.dll
    2008-09-14 08:09:17 ----A---- C:\Windows\system32\srrstr.dll
    2008-09-14 08:09:17 ----A---- C:\Windows\system32\spwizeng.dll
    2008-09-14 08:09:17 ----A---- C:\Windows\system32\SLUI.exe
    2008-09-14 08:09:17 ----A---- C:\Windows\system32\rasmontr.dll
    2008-09-14 08:09:17 ----A---- C:\Windows\system32\lltdsvc.dll
    2008-09-14 08:09:16 ----A---- C:\Windows\system32\unbcl.dll
    2008-09-14 08:09:16 ----A---- C:\Windows\system32\tcpmon.dll
    2008-09-14 08:09:16 ----A---- C:\Windows\system32\shrink.dll
    2008-09-14 08:09:16 ----A---- C:\Windows\system32\msra.exe
    2008-09-14 08:09:15 ----A---- C:\Windows\system32\IPHLPAPI.DLL
    2008-09-14 08:09:15 ----A---- C:\Windows\system32\brcpl.dll
    2008-09-14 08:09:14 ----A---- C:\Windows\system32\WMPEncEn.dll
    2008-09-14 08:09:14 ----A---- C:\Windows\system32\oleacc.dll
    2008-09-14 08:09:14 ----A---- C:\Windows\system32\iashlpr.dll
    2008-09-14 08:09:14 ----A---- C:\Windows\system32\gpedit.dll
    2008-09-14 08:09:13 ----A---- C:\Windows\system32\raschap.dll
    2008-09-14 08:09:12 ----A---- C:\Windows\system32\regsvc.dll
    2008-09-14 08:09:12 ----A---- C:\Windows\system32\framedynos.dll
    2008-09-14 08:09:12 ----A---- C:\Windows\system32\fdWSD.dll
    2008-09-14 08:09:12 ----A---- C:\Windows\system32\appmgr.dll
    2008-09-14 08:09:12 ----A---- C:\Windows\system32\advpack.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\wpdshext.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\wdc.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\vsstrace.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\PerfCenterCPL.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\ntvdm.exe
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\ntlanman.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\ipsmsnap.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\iedkcs32.dll
    2008-09-14 08:09:11 ----A---- C:\Windows\system32\EncDec.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\Storprop.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\NetProjW.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\netman.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\l2nacp.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\ieapfltr.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\framedyn.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\dssenh.dll
    2008-09-14 08:09:10 ----A---- C:\Windows\system32\certreq.exe
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\WsmProv.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\WlanMM.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\wlanhlp.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\WLanConn.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\tcpipcfg.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\sxs.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\profsvc.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\KMSVC.DLL
    2008-09-14 08:09:09 ----A---- C:\Windows\system32\adsnt.dll
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\wusa.exe
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\WUDFHost.exe
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\WerFault.exe
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\VAN.dll
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\userenv.dll
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\umb.dll
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\ncsi.dll
    2008-09-14 08:09:08 ----A---- C:\Windows\system32\IPBusEnum.dll
    2008-09-14 08:09:07 ----A---- C:\Windows\system32\scrptadm.dll
    2008-09-14 08:09:07 ----A---- C:\Windows\system32\ie4uinit.exe
    2008-09-14 08:09:07 ----A---- C:\Windows\system32\fundisc.dll
    2008-09-14 08:09:07 ----A---- C:\Windows\system32\catsrvut.dll
    2008-09-14 08:09:06 ----A---- C:\Windows\system32\puiobj.dll
    2008-09-14 08:09:06 ----A---- C:\Windows\system32\netid.dll
    2008-09-14 08:09:06 ----A---- C:\Windows\system32\cscui.dll
    2008-09-14 08:09:06 ----A---- C:\Windows\system32\cryptui.dll
    2008-09-14 08:09:05 ----A---- C:\Windows\system32\photowiz.dll
    2008-09-14 08:09:05 ----A---- C:\Windows\system32\netcenter.dll
    2008-09-14 08:09:05 ----A---- C:\Windows\system32\MdSched.exe
    2008-09-14 08:09:05 ----A---- C:\Windows\system32\InkEd.dll
    2008-09-14 08:09:05 ----A---- C:\Windows\system32\dps.dll
    2008-09-14 08:09:04 ----A---- C:\Windows\system32\ws2_32.dll
    2008-09-14 08:09:04 ----A---- C:\Windows\system32\WinSCard.dll
    2008-09-14 08:09:04 ----A---- C:\Windows\system32\tcpmon.ini
    2008-09-14 08:09:04 ----A---- C:\Windows\system32\spbcd.dll
    2008-09-14 08:09:04 ----A---- C:\Windows\system32\msinfo32.exe
    2008-09-14 08:09:04 ----A---- C:\Windows\system32\ipsecsnp.dll
    2008-09-14 08:09:03 ----A---- C:\Windows\system32\winrs.exe
    2008-09-14 08:09:03 ----A---- C:\Windows\system32\secur32.dll
    2008-09-14 08:09:03 ----A---- C:\Windows\system32\prnntfy.dll
    2008-09-14 08:09:03 ----A---- C:\Windows\system32\odbcjt32.dll
    2008-09-14 08:09:03 ----A---- C:\Windows\system32\ntdsapi.dll
    2008-09-14 08:09:03 ----A---- C:\Windows\system32\NAPSTAT.EXE
    2008-09-14 08:09:02 ----A---- C:\Windows\system32\schtasks.exe
    2008-09-14 08:09:02 ----A---- C:\Windows\system32\RelMon.dll
    2008-09-14 08:09:02 ----A---- C:\Windows\system32\msfeeds.dll
    2008-09-14 08:09:02 ----A---- C:\Windows\system32\mblctr.exe
    2008-09-14 08:09:02 ----A---- C:\Windows\system32\iasacct.dll
    2008-09-14 08:09:02 ----A---- C:\Windows\system32\cryptsvc.dll
    2008-09-14 08:09:01 ----A---- C:\Windows\system32\dmdlgs.dll
    2008-09-14 08:09:01 ----A---- C:\Windows\system32\dhcpsapi.dll
    2008-09-14 08:09:01 ----A---- C:\Windows\system32\activeds.dll
    2008-09-14 08:09:00 ----A---- C:\Windows\system32\TSpkg.dll
    2008-09-14 08:09:00 ----A---- C:\Windows\system32\pdh.dll
    2008-09-14 08:09:00 ----A---- C:\Windows\system32\netdiagfx.dll
    2008-09-14 08:09:00 ----A---- C:\Windows\system32\FXSCOMEX.dll
    2008-09-14 08:09:00 ----A---- C:\Windows\system32\dfrgfat.exe
    2008-09-14 08:09:00 ----A---- C:\Windows\system32\catsrv.dll
    2008-09-14 08:08:59 ----A---- C:\Windows\system32\wvc.dll
    2008-09-14 08:08:59 ----A---- C:\Windows\system32\winrm.vbs
    2008-09-14 08:08:59 ----A---- C:\Windows\system32\qwave.dll
    2008-09-14 08:08:59 ----A---- C:\Windows\system32\FirewallControlPanel.exe
    2008-09-14 08:08:59 ----A---- C:\Windows\system32\fdWCN.dll
    2008-09-14 08:08:59 ----A---- C:\Windows\system32\dot3msm.dll
    2008-09-14 08:08:59 ----A---- C:\Windows\system32\AudioSes.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\wow32.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\rastapi.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\netcorehc.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\NAPHLPR.DLL
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\msacm32.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\ifmon.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\dot3cfg.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\cscobj.dll
    2008-09-14 08:08:58 ----A---- C:\Windows\system32\adsldp.dll
    2008-09-14 08:08:57 ----A---- C:\Windows\system32\shsetup.dll
    2008-09-14 08:08:57 ----A---- C:\Windows\system32\ntshrui.dll
    2008-09-14 08:08:57 ----A---- C:\Windows\system32\FXSCOMPOSE.dll
    2008-09-14 08:08:57 ----A---- C:\Windows\system32\els.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\wscntfy.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\WMNetMgr.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\stobject.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\sdrsvc.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\QUTIL.DLL
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\msdt.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\ipnathlp.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\iasrecst.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\iasdatastore.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\fdSSDP.dll
    2008-09-14 08:08:56 ----A---- C:\Windows\system32\clbcatq.dll
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\wlgpclnt.dll
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\wlanui.dll
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\smss.exe
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\psisdecd.dll
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\net1.exe
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\nci.dll
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\dsprop.dll
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\Defrag.exe
    2008-09-14 08:08:55 ----A---- C:\Windows\system32\adsldpc.dll
    2008-09-14 08:08:54 ----A---- C:\Windows\system32\upnphost.dll
    2008-09-14 08:08:54 ----A---- C:\Windows\system32\systemcpl.dll
    2008-09-14 08:08:54 ----A---- C:\Windows\system32\rasman.dll
    2008-09-14 08:08:54 ----A---- C:\Windows\system32\P2P.dll
    2008-09-14 08:08:54 ----A---- C:\Windows\system32\mprmsg.dll
    2008-09-14 08:08:54 ----A---- C:\Windows\system32\ActiveContentWizard.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\t2embed.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\rascfg.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\PresentationSettings.exe
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\oleprn.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\msftedit.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\loghours.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\L2SecHC.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\FXSAPI.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\fde.dll
    2008-09-14 08:08:53 ----A---- C:\Windows\system32\CompatUI.dll
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\wdigest.dll
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\setupcl.exe
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\ppcsnap.dll
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\mprdim.dll
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\MigAutoPlay.exe
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\gpapi.dll
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\dxdiag.exe
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\DFDWiz.exe
    2008-09-14 08:08:52 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
    2008-09-14 08:08:51 ----A---- C:\Windows\system32\scansetting.dll
    2008-09-14 08:08:51 ----A---- C:\Windows\system32\rtm.dll
    2008-09-14 08:08:51 ----A---- C:\Windows\system32\msutb.dll
    2008-09-14 08:08:51 ----A---- C:\Windows\system32\devmgr.dll
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\wiaservc.dll
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\NAPCRYPT.DLL
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\msihnd.dll
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\ifsutil.dll
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\FXSCOVER.exe
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\dimsroam.dll
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\CertEnrollUI.dll
    2008-09-14 08:08:50 ----A---- C:\Windows\system32\actxprxy.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\wscapi.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\WinFXDocObj.exe
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\wdi.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\usbmon.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\SyncCenter.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\spoolsv.exe
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\mswmdm.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\kdusb.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\imagehlp.dll
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\BOOTVID.DLL
    2008-09-14 08:08:49 ----A---- C:\Windows\system32\audiodg.exe
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\wlandlg.dll
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\vssadmin.exe
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\uudf.dll
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\scecli.dll
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\regapi.dll
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\mycomput.dll
    2008-09-14 08:08:48 ----A---- C:\Windows\system32\msls31.dll
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\sud.dll
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\SCardSvr.dll
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\newdev.dll
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\mstask.dll
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\mspaint.exe
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\kdcom.dll
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\FXSXP32.dll
    2008-09-14 08:08:47 ----A---- C:\Windows\system32\brcplsiw.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\termmgr.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\tapisrv.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\ssdpsrv.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\samlib.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\puiapi.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\mtxoci.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\inetpp.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\duser.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\cic.dll
    2008-09-14 08:08:46 ----A---- C:\Windows\system32\adtschema.dll
    2008-09-14 08:08:45 ----A---- C:\Windows\system32\wisptis.exe
    2008-09-14 08:08:45 ----A---- C:\Windows\system32\SLUINotify.dll
    2008-09-14 08:08:45 ----A---- C:\Windows\system32\Robocopy.exe
    2008-09-14 08:08:45 ----A---- C:\Windows\system32\input.dll
    2008-09-14 08:08:45 ----A---- C:\Windows\system32\iasads.dll
    2008-09-14 08:08:45 ----A---- C:\Windows\system32\cscapi.dll
    2008-09-14 08:08:45 ----A---- C:\Windows\system32\AzSqlExt.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\WUDFPlatform.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\webcheck.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\verifier.exe
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\twext.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\sdshext.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\netiohlp.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\msdtclog.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\msdt.exe
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\cmdial32.dll
    2008-09-14 08:08:44 ----A---- C:\Windows\system32\authz.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\wintrust.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\vdsldr.exe
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\themeui.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\slcinst.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\oledlg.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\mmcbase.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\dxtmsft.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\d3d8.dll
    2008-09-14 08:08:43 ----A---- C:\Windows\system32\clfsw32.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\WMPhoto.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\SnippingTool.exe
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\SndVol.exe
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\rasqec.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\rasgcw.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\pnpsetup.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\ntmarta.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\ncobjapi.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\msrd3x40.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\msaatext.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\mpr.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\mlang.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\icfupgd.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\icardie.dll
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\diskraid.exe
    2008-09-14 08:08:42 ----A---- C:\Windows\system32\blb_ps.dll
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\wtsapi32.dll
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\wpd_ci.dll
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\unlodctr.exe
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\syssetup.dll
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\slmgr.vbs
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\nslookup.exe
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\mscms.dll
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\lodctr.exe
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\extmgr.dll
    2008-09-14 08:08:41 ----A---- C:\Windows\system32\accessibilitycpl.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\ulib.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\sethc.exe
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\pnpui.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\oobefldr.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\iaspolcy.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\fontsub.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\dxdiagn.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\CscMig.dll
    2008-09-14 08:08:40 ----A---- C:\Windows\system32\cabinet.dll
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\Utilman.exe
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\unattend.dll
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\trkwks.dll
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\scesrv.dll
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\ogldrv.dll
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\occache.dll
    2008-09-14 08:08:39 ----A---- C:\Windows\system32\lnkstub.exe
    2008-09-14 08:08:38 ----A---- C:\Windows\system32\wermgr.exe
    2008-09-14 08:08:38 ----A---- C:\Windows\system32\eappgnui.dll
    2008-09-14 08:08:38 ----A---- C:\Windows\system32\dfdts.dll
    2008-09-14 08:08:38 ----A---- C:\Windows\system32\cabview.dll
    2008-09-14 08:08:38 ----A---- C:\Windows\system32\bthci.dll
    2008-09-14 08:08:38 ----A---- C:\Windows\system32\BlbEvents.dll
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\sdspres.dll
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\p2pcollab.dll
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\msnetobj.dll
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\iepeers.dll
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\ieaksie.dll
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\drvinst.exe
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\dispdiag.exe
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\DHCPQEC.DLL
    2008-09-14 08:08:37 ----A---- C:\Windows\system32\basesrv.dll
    2008-09-14 08:08:36 ----A---- C:\Windows\system32\dsquery.dll
    2008-09-14 08:08:35 ----A---- C:\Windows\system32\verifier.dll
    2008-09-14 08:08:35 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
    2008-09-14 08:08:35 ----A---- C:\Windows\system32\secproc_ssp.dll
    2008-09-14 08:08:35 ----A---- C:\Windows\system32\RstrtMgr.dll
    2008-09-14 08:08:35 ----A---- C:\Windows\system32\mprapi.dll
    2008-09-14 08:08:35 ----A---- C:\Windows\system32\mmcss.dll
    2008-09-14 08:08:35 ----A---- C:\Windows\system32\efsadu.dll
    2008-09-14 08:08:34 ----A---- C:\Windows\system32\WMVENCOD.DLL
    2008-09-14 08:08:34 ----A---- C:\Windows\system32\wercplsupport.dll
    2008-09-14 08:08:34 ----A---- C:\Windows\system32\qedit.dll
    2008-09-14 08:08:34 ----A---- C:\Windows\system32\FXSROUTE.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\WPDSp.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\WPDShServiceObj.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\wiascanprofiles.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\setupugc.exe
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\pnrpnsp.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\networkmap.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\msoeacct.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\iscsiexe.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\icacls.exe
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\d3d10core.dll
    2008-09-14 08:08:33 ----A---- C:\Windows\system32\consent.exe
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\xactsrv.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\wiaaut.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\usercpl.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\QSVRMGMT.DLL
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\PNPXAssocPrx.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\PNPXAssoc.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\pngfilt.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\p2pnetsh.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\msrdc.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\msdmo.dll
    2008-09-14 08:08:32 ----A---- C:\Windows\system32\conime.exe
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\systeminfo.exe
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\pcadm.dll
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\netcfg.exe
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\lpk.dll
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\findstr.exe
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\eappprxy.dll
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\drmmgrtn.dll
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\dpapimig.exe
    2008-09-14 08:08:31 ----A---- C:\Windows\system32\autoplay.dll
    2008-09-14 08:08:30 ----A---- C:\Windows\system32\xwizards.dll
    2008-09-14 08:08:30 ----A---- C:\Windows\system32\resutils.dll
    2008-09-14 08:08:30 ----A---- C:\Windows\system32\msrating.dll
    2008-09-14 08:08:30 ----A---- C:\Windows\system32\mfplat.dll
    2008-09-14 08:08:30 ----A---- C:\Windows\system32\DWWIN.EXE
    2008-09-14 08:08:30 ----A---- C:\Windows\system32\cmdl32.exe
    2008-09-14 08:08:30 ----A---- C:\Windows\system32\alg.exe
    2008-09-14 08:08:29 ----A---- C:\Windows\system32\powercpl.dll
    2008-09-14 08:08:29 ----A---- C:\Windows\system32\netprof.dll
    2008-09-14 08:08:29 ----A---- C:\Windows\system32\MFWMAAEC.DLL
    2008-09-14 08:08:29 ----A---- C:\Windows\system32\dssec.dll
    2008-09-14 08:08:29 ----A---- C:\Windows\system32\dot3ui.dll
    2008-09-14 08:08:29 ----A---- C:\Windows\system32\dfrgifc.exe
    2008-09-14 08:08:29 ----A---- C:\Windows\system32\dbnetlib.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\txflog.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\odbc32.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\nshhttp.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\imm32.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\FXSST.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\feclient.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\btpanui.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\system32\apircl.dll
    2008-09-14 08:08:28 ----A---- C:\Windows\regedit.exe
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\tbssvc.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\taskkill.exe
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\RASMM.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\msieftp.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\iexpress.exe
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\dxva2.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\dwmapi.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\d3d10.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\bcdprov.dll
    2008-09-14 08:08:27 ----A---- C:\Windows\system32\ActionQueue.dll
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\syncui.dll
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\svchost.exe
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\slwmi.dll
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\shwebsvc.dll
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\provthrd.dll
     
    BlickDot,
    #8
  10. 2008/11/15
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\lsass.exe
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\EAPQEC.DLL
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\dmocx.dll
    2008-09-14 08:08:26 ----A---- C:\Windows\system32\appmgmts.dll
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\WMASF.DLL
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\SLCExt.dll
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\slcc.dll
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\raserver.exe
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\PnPUnattend.exe
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\olepro32.dll
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\networkexplorer.dll
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\connect.dll
    2008-09-14 08:08:25 ----A---- C:\Windows\system32\aclui.dll
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\xcopy.exe
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\uxsms.dll
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\UIHub.dll
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\taskmgr.exe
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\QCLIPROV.DLL
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\ias.dll
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\dnscacheugc.exe
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\brcplsdw.dll
    2008-09-14 08:08:24 ----A---- C:\Windows\system32\audiodev.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\upnp.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\reg.exe
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\qprocess.exe
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\NapiNSP.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\msoert2.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\msjetoledb40.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\mountvol.exe
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\mmcshext.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\icsfiltr.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\cmstp.exe
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\atl.dll
    2008-09-14 08:08:23 ----A---- C:\Windows\system32\appinfo.dll
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\wlanext.exe
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\perfts.dll
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\netplwiz.dll
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\FXSEXT32.dll
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\dskquoui.dll
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\certprop.dll
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\browser.dll
    2008-09-14 08:08:22 ----A---- C:\Windows\system32\AuxiliaryDisplayApi.dll
    2008-09-14 08:08:21 ----A---- C:\Windows\system32\WMVXENCD.DLL
    2008-09-14 08:08:21 ----A---- C:\Windows\system32\wmpdxm.dll
    2008-09-14 08:08:21 ----A---- C:\Windows\system32\PING.EXE
    2008-09-14 08:08:21 ----A---- C:\Windows\system32\inetmib1.dll
    2008-09-14 08:08:21 ----A---- C:\Windows\system32\cewmdm.dll
    2008-09-14 08:08:21 ----A---- C:\Windows\system32\bitsadmin.exe
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\WpdMtpUS.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\SysFxUI.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\SoundRecorder.exe
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\rekeywiz.exe
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\qcap.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\qasf.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\ieakeng.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\httpapi.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\dsuiext.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\dmusic.dll
    2008-09-14 08:08:20 ----A---- C:\Windows\system32\chglogon.exe
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\WUDFSvc.dll
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\wmpsrcwp.dll
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\Sens.dll
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\SecEdit.exe
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\PrintBrmUi.exe
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\mtstocom.exe
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\mscandui.dll
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\lsmproxy.dll
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\auditpol.exe
    2008-09-14 08:08:19 ----A---- C:\Windows\system32\adsmsext.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\xwtpw32.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\wzcdlg.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\WMVSENCD.DLL
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\sppnp.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\shimgvw.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\seclogon.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\sbeio.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\printcom.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\ndfapi.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\msdadiag.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\makecab.exe
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\FXSTIFF.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\dot3gpclnt.dll
    2008-09-14 08:08:18 ----A---- C:\Windows\system32\batt.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\wscmisetup.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\WMSPDMOE.DLL
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\wiashext.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\wiadefui.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\userinit.exe
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\shacct.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\perfmon.exe
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\p2phost.exe
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\napipsec.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\msorcl32.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\dxtrans.dll
    2008-09-14 08:08:17 ----A---- C:\Windows\system32\apss.dll
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\wpdwcn.dll
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\winrshost.exe
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\tasklist.exe
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\TapiMigPlugin.dll
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\sxstrace.exe
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\rrinstaller.exe
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\prntvpt.dll
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\notepad.exe
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\MP4SDECD.DLL
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\ktmutil.exe
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\keymgr.dll
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\HelpPaneProxy.dll
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\ftp.exe
    2008-09-14 08:08:16 ----A---- C:\Windows\system32\csrsrv.dll
    2008-09-14 08:08:16 ----A---- C:\Windows\notepad.exe
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\wscproxystub.dll
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\UIAutomationCore.dll
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\netiougc.exe
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\msiexec.exe
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\mfps.dll
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\fmifs.dll
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\driverquery.exe
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\d3dim700.dll
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\cryptdll.dll
    2008-09-14 08:08:15 ----A---- C:\Windows\system32\colorui.dll
    2008-09-14 08:08:14 ----A---- C:\Windows\system32\winethc.dll
    2008-09-14 08:08:14 ----A---- C:\Windows\system32\takeown.exe
    2008-09-14 08:08:14 ----A---- C:\Windows\system32\PnPutil.exe
    2008-09-14 08:08:14 ----A---- C:\Windows\system32\pcasvc.dll
    2008-09-14 08:08:14 ----A---- C:\Windows\system32\nshipsec.dll
    2008-09-14 08:08:14 ----A---- C:\Windows\system32\msimtf.dll
    2008-09-14 08:08:13 ----A---- C:\Windows\system32\wmiprop.dll
    2008-09-14 08:08:13 ----A---- C:\Windows\system32\txfw32.dll
    2008-09-14 08:08:13 ----A---- C:\Windows\system32\pots.dll
    2008-09-14 08:08:13 ----A---- C:\Windows\system32\logagent.exe
    2008-09-14 08:08:13 ----A---- C:\Windows\system32\inseng.dll
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\wpdbusenum.dll
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\rasplap.dll
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\powrprof.dll
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\mfpmp.exe
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\findnetprinters.dll
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\dnshc.dll
    2008-09-14 08:08:12 ----A---- C:\Windows\system32\capisp.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\shrpubw.exe
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\sfc_os.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\sendmail.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\perfnet.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\olecli32.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\nsisvc.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\luainstall.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\imapi.dll
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\gpscript.exe
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\fsutil.exe
    2008-09-14 08:08:11 ----A---- C:\Windows\system32\fdPHost.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\WLanHC.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\wiaacmgr.exe
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\wextract.exe
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\TMM.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\shgina.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\runonce.exe
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\rshx32.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\RpcPing.exe
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\ktmw32.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\d3dim.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\compstui.dll
    2008-09-14 08:08:10 ----A---- C:\Windows\system32\cmmon32.exe
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\WMADMOE.DLL
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\version.dll
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\unregmp2.exe
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\UI0Detect.exe
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\net.exe
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\mdminst.dll
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\gpscript.dll
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\getmac.exe
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\dsauth.dll
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\dimsjob.dll
    2008-09-14 08:08:09 ----A---- C:\Windows\system32\cmlua.dll
    2008-09-14 08:08:08 ----A---- C:\Windows\system32\w32tm.exe
    2008-09-14 08:08:08 ----A---- C:\Windows\system32\msvfw32.dll
    2008-09-14 08:08:08 ----A---- C:\Windows\system32\MPG4DECD.DLL
    2008-09-14 08:08:08 ----A---- C:\Windows\system32\MP43DECD.DLL
    2008-09-14 08:08:08 ----A---- C:\Windows\system32\imgutil.dll
    2008-09-14 08:08:08 ----A---- C:\Windows\system32\FXSUTILITY.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\wmpshell.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\tscupgrd.exe
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\sdchange.exe
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\qwinsta.exe
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\PushPrinterConnections.exe
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\PortableDeviceWiaCompat.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\pnpts.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\migisol.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\ipconfig.exe
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\FXSMON.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\fdeploy.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\credui.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\cmutil.dll
    2008-09-14 08:08:07 ----A---- C:\Windows\system32\ACW.exe
    2008-09-14 08:08:06 ----A---- C:\Windows\system32\sfc.exe
    2008-09-14 08:08:06 ----A---- C:\Windows\system32\dispci.dll
    2008-09-14 08:08:06 ----A---- C:\Windows\system32\dinput8.dll
    2008-09-14 08:08:06 ----A---- C:\Windows\system32\diantz.exe
    2008-09-14 08:08:06 ----A---- C:\Windows\system32\comrepl.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\wmidx.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\vdmredir.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\TSTheme.exe
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\remotepg.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\pdhui.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\nlaapi.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\fwcfg.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\ExplorerFrame.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\expand.exe
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\EncDump.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\colbact.dll
    2008-09-14 08:08:05 ----A---- C:\Windows\system32\cfgbkend.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\wmvdspa.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\utildll.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\TpmInit.exe
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\softkbd.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\quser.exe
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\msfeedsbs.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\modemui.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\McxDriv.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\iernonce.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\hlink.dll
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\bridgeunattend.exe
    2008-09-14 08:08:04 ----A---- C:\Windows\system32\amstream.dll
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\wsnmp32.dll
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\vds_ps.dll
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\sti_ci.dll
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\rdrleakdiag.exe
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\qappsrv.exe
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\FXSCOM.dll
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\esentutl.exe
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\cmcfg32.dll
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\chgport.exe
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\bootcfg.exe
    2008-09-14 08:08:03 ----A---- C:\Windows\system32\admparse.dll
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\wfapigp.dll
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\waitfor.exe
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\tabcal.exe
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\shutdown.exe
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\qdv.dll
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\osblprov.dll
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\odbccp32.dll
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\msg.exe
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\msdtc.exe
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\logman.exe
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\iscsium.dll
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\dpnet.dll
    2008-09-14 08:08:02 ----A---- C:\Windows\system32\cacls.exe
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\wpnpinst.exe
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\wmpcm.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\werdiagcontroller.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\rasauto.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\olethk32.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\olesvr32.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\mfvdsp.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\iscsiwmi.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\DpiScaling.exe
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\dmsynth.dll
    2008-09-14 08:08:01 ----A---- C:\Windows\system32\COLORCNV.DLL
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\wavemsp.dll
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\ufat.dll
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\tscon.exe
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\sxproxy.dll
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\SLLUA.exe
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\odbctrac.dll
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\networkitemfactory.dll
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\mstext40.dll
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\msctfui.dll
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\chgusr.exe
    2008-09-14 08:08:00 ----A---- C:\Windows\system32\at.exe
    2008-09-14 08:07:59 ----A---- C:\Windows\system32\WpdConns.dll
    2008-09-14 08:07:59 ----A---- C:\Windows\system32\ucsvc.exe
    2008-09-14 08:07:59 ----A---- C:\Windows\system32\rgb9rast.dll
    2008-09-14 08:07:59 ----A---- C:\Windows\system32\RegCtrl.dll
    2008-09-14 08:07:59 ----A---- C:\Windows\system32\mshta.exe
    2008-09-14 08:07:59 ----A---- C:\Windows\system32\convert.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\xmlprovi.dll
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\tskill.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\TimeDateMUICallback.dll
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\shadow.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\rwinsta.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\prevhost.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\mobsync.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\logoff.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\licmgr10.dll
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\itss.dll
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\FXST30.dll
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\csrstub.exe
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\bitsigd.dll
    2008-09-14 08:07:58 ----A---- C:\Windows\system32\AuthFWGP.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\unattendedjoin.exe
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\tsdiscon.exe
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\tbs.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\setupcln.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\rasdiag.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\ocsetup.exe
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\netbtugc.exe
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\iscsied.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\GuidedHelp.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\fphc.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\dskquota.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\dmime.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\cscdll.dll
    2008-09-14 08:07:57 ----A---- C:\Windows\system32\AtBroker.exe
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\winnsi.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\regini.exe
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\napdsnap.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\mydocs.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\l2gpstore.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\dsdmo.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\dot3dlg.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\devenum.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\cmpbk32.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\apilogen.dll
    2008-09-14 08:07:56 ----A---- C:\Windows\system32\amxread.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\WINSRPC.DLL
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\VIDRESZR.DLL
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\usbui.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\upnpcont.exe
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\RacAgent.exe
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\odbccu32.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\odbccr32.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\mtxlegih.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\mtxdm.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\msident.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\msdart.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\MsCtfMonitor.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\gpupdate.exe
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\cmstplua.dll
    2008-09-14 08:07:55 ----A---- C:\Windows\system32\avrt.dll
    2008-09-14 08:07:54 ----A---- C:\Windows\system32\vss_ps.dll
    2008-09-14 08:07:54 ----A---- C:\Windows\system32\srwmi.dll
    2008-09-14 08:07:54 ----A---- C:\Windows\system32\nsi.dll
    2008-09-14 08:07:54 ----A---- C:\Windows\system32\nbtstat.exe
    2008-09-14 08:07:54 ----A---- C:\Windows\system32\mfcsubs.dll
    2008-09-14 08:07:54 ----A---- C:\Windows\system32\graftabl.com
    2008-09-14 08:07:54 ----A---- C:\Windows\system32\gpprnext.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\wsock32.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\wiarpc.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\WavDest.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\vfwwdm32.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\syskey.exe
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\ROUTE.EXE
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\rasphone.exe
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\odbcbcp.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\netevent.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\ndfetw.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\msexcl40.dll
    2008-09-14 08:07:53 ----A---- C:\Windows\system32\extrac32.exe
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\wiadss.dll
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\TabbtnEx.dll
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\procinst.dll
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\MP3DMOD.DLL
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\inetppui.dll
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\eventcls.dll
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\d3dxof.dll
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\csrss.exe
    2008-09-14 08:07:52 ----A---- C:\Windows\system32\atmfd.dll
    2008-09-14 08:07:51 ----A---- C:\Windows\system32\WlanMmHC.dll
    2008-09-14 08:07:51 ----A---- C:\Windows\system32\Tabbtn.dll
    2008-09-14 08:07:51 ----A---- C:\Windows\system32\psbase.dll
    2008-09-14 08:07:51 ----A---- C:\Windows\system32\msxbde40.dll
    2008-09-14 08:07:51 ----A---- C:\Windows\system32\dmscript.dll
    2008-09-14 08:07:51 ----A---- C:\Windows\system32\CertEnrollCtrl.exe
    2008-09-14 08:07:51 ----A---- C:\Windows\fveupdate.exe
    2008-09-14 08:07:50 ----A---- C:\Windows\system32\reset.exe
    2008-09-14 08:07:50 ----A---- C:\Windows\system32\query.exe
    2008-09-14 08:07:50 ----A---- C:\Windows\system32\Netplwiz.exe
    2008-09-14 08:07:50 ----A---- C:\Windows\system32\msltus40.dll
    2008-09-14 08:07:50 ----A---- C:\Windows\system32\dmloader.dll
    2008-09-14 08:07:50 ----A---- C:\Windows\system32\credssp.dll
    2008-09-14 08:07:50 ----A---- C:\Windows\system32\change.exe
    2008-09-14 08:07:49 ----A---- C:\Windows\system32\wshcon.dll
    2008-09-14 08:07:49 ----A---- C:\Windows\system32\mspbde40.dll
    2008-09-14 08:07:49 ----A---- C:\Windows\system32\icsunattend.exe
    2008-09-14 08:07:48 ----A---- C:\Windows\system32\WsmRes.dll
    2008-09-14 08:07:48 ----A---- C:\Windows\system32\wship6.dll
    2008-09-14 08:07:48 ----A---- C:\Windows\system32\PlaySndSrv.dll
    2008-09-14 08:07:48 ----A---- C:\Windows\system32\HotStartUserAgent.dll
    2008-09-14 08:07:47 ----A---- C:\Windows\system32\WSHTCPIP.DLL
    2008-09-14 08:07:47 ----A---- C:\Windows\system32\sxsstore.dll
    2008-09-14 08:07:47 ----A---- C:\Windows\system32\msvidc32.dll
    2008-09-14 08:07:47 ----A---- C:\Windows\system32\lltdapi.dll
    2008-09-14 08:07:47 ----A---- C:\Windows\system32\FXSUNATD.exe
    2008-09-14 08:07:46 ----A---- C:\Windows\system32\setupSNK.exe
    2008-09-14 08:07:46 ----A---- C:\Windows\system32\localui.dll
    2008-09-14 08:07:46 ----A---- C:\Windows\system32\ComputerDefaults.exe
    2008-09-14 08:07:45 ----A---- C:\Windows\system32\slwga.dll
    2008-09-14 08:07:45 ----A---- C:\Windows\system32\OptionalFeatures.exe
    2008-09-14 08:07:45 ----A---- C:\Windows\system32\LangCleanupSysprepAction.dll
    2008-09-14 08:07:45 ----A---- C:\Windows\system32\icaapi.dll
    2008-09-14 08:07:44 ----A---- C:\Windows\system32\sbunattend.exe
    2008-09-14 08:07:44 ----A---- C:\Windows\system32\dmutil.dll
    2008-09-14 08:07:43 ----A---- C:\Windows\system32\usbperf.dll
    2008-09-14 08:07:43 ----A---- C:\Windows\system32\spopk.dll
    2008-09-14 08:07:43 ----A---- C:\Windows\system32\serialui.dll
    2008-09-14 08:07:43 ----A---- C:\Windows\system32\NcdProp.dll
    2008-09-14 08:07:42 ----A---- C:\Windows\system32\WinFax.dll
    2008-09-14 08:07:42 ----A---- C:\Windows\system32\odbcconf.dll
    2008-09-14 08:07:42 ----A---- C:\Windows\system32\msfeedssync.exe
    2008-09-14 08:07:42 ----A---- C:\Windows\system32\hbaapi.dll
    2008-09-14 08:07:42 ----A---- C:\Windows\system32\cofiredm.dll
    2008-09-14 08:07:41 ----A---- C:\Windows\system32\rasctrs.dll
    2008-09-14 08:07:41 ----A---- C:\Windows\system32\msobjs.dll
    2008-09-14 08:07:41 ----A---- C:\Windows\system32\ieencode.dll
    2008-09-14 08:07:41 ----A---- C:\Windows\system32\corpol.dll
    2008-09-14 08:07:40 ----A---- C:\Windows\system32\midimap.dll
    2008-09-14 08:07:40 ----A---- C:\Windows\system32\hnetmon.dll
    2008-09-14 08:07:39 ----A---- C:\Windows\system32\vdmdbg.dll
    2008-09-14 08:07:39 ----A---- C:\Windows\system32\url.dll
    2008-09-14 08:07:39 ----A---- C:\Windows\system32\nlsbres.dll
    2008-09-14 08:07:39 ----A---- C:\Windows\system32\LogonUI.exe
    2008-09-14 08:07:39 ----A---- C:\Windows\system32\iprtprio.dll
    2008-09-14 08:07:39 ----A---- C:\Windows\system32\InfDefaultInstall.exe
    2008-09-14 08:07:39 ----A---- C:\Windows\system32\esentprf.dll
    2008-09-14 08:07:37 ----A---- C:\Windows\system32\osbaseln.dll
    2008-09-14 08:07:37 ----A---- C:\Windows\system32\cfgmgr32.dll
    2008-09-14 08:07:36 ----A---- C:\Windows\system32\msisip.dll
    2008-09-14 08:07:35 ----A---- C:\Windows\system32\msmmsp.dll
    2008-09-14 08:07:34 ----A---- C:\Windows\system32\winusb.dll
    2008-09-14 08:07:34 ----A---- C:\Windows\system32\rdpcfgex.dll
    2008-09-14 08:07:34 ----A---- C:\Windows\system32\dispex.dll
    2008-09-14 08:07:31 ----A---- C:\Windows\system32\riched32.dll
    2008-09-14 08:07:31 ----A---- C:\Windows\system32\Nlsdl.dll
    2008-09-14 08:07:31 ----A---- C:\Windows\system32\msidle.dll
    2008-09-14 08:07:30 ----A---- C:\Windows\system32\spwmp.dll
    2008-09-14 08:07:30 ----A---- C:\Windows\system32\idndl.dll
    2008-09-14 08:07:26 ----A---- C:\Windows\system32\KBDKOR.DLL
    2008-09-14 08:07:26 ----A---- C:\Windows\system32\KBDJPN.DLL
    2008-09-14 08:07:25 ----A---- C:\Windows\system32\iscsilog.dll
    2008-09-14 08:07:23 ----A---- C:\Windows\system32\WsmCl.dll
    2008-09-14 08:07:22 ----A---- C:\Windows\system32\wmploc.DLL
    2008-09-14 08:07:22 ----A---- C:\Windows\system32\vga256.dll
    2008-09-14 08:07:22 ----A---- C:\Windows\system32\tsddd.dll
    2008-09-14 08:07:22 ----A---- C:\Windows\system32\framebuf.dll
    2008-09-14 08:07:22 ----A---- C:\Windows\system32\dxmasf.dll
    2008-09-14 08:07:21 ----A---- C:\Windows\system32\vga64k.dll
    2008-09-14 08:07:20 ----A---- C:\Windows\system32\vga.dll
    2008-09-14 08:07:20 ----A---- C:\Windows\system32\dmdskres2.dll
    2008-09-14 08:07:20 ----A---- C:\Windows\system32\bootstr.dll
    2008-09-14 08:07:19 ----A---- C:\Windows\system32\spwizres.dll
    2008-09-14 08:07:19 ----A---- C:\Windows\system32\f3ahvoas.dll
    2008-09-14 08:07:17 ----A---- C:\Windows\system32\gatherWiredInfo.vbs
    2008-09-14 08:07:15 ----A---- C:\Windows\system32\gatherWirelessInfo.vbs
    2008-09-14 08:07:14 ----A---- C:\Windows\system32\fsmgmt.msc
    2008-09-14 08:07:06 ----A---- C:\Windows\system32\secpol.msc
    2008-09-14 08:07:05 ----A---- C:\Windows\system32\vsp1cln.exe
    2008-09-14 08:07:05 ----A---- C:\Windows\system32\perfmon.msc
    2008-09-14 08:06:22 ----A---- C:\Windows\system32\xmllite.dll
    2008-09-14 08:06:21 ----A---- C:\Windows\system32\wbemcomn.dll
    2008-09-14 08:06:14 ----A---- C:\Windows\system32\SmiInstaller.dll
    2008-09-14 08:06:14 ----A---- C:\Windows\system32\SmiEngine.dll
    2008-09-14 08:06:05 ----A---- C:\Windows\system32\wdscore.dll
    2008-09-14 08:06:05 ----A---- C:\Windows\system32\PkgMgr.exe
    2008-09-14 08:05:46 ----A---- C:\Windows\system32\drvstore.dll
    2008-09-14 08:05:45 ----A---- C:\Windows\system32\mspatcha.dll
    2008-09-14 08:05:45 ----A---- C:\Windows\system32\msdelta.dll
    2008-09-14 08:05:45 ----A---- C:\Windows\system32\dpx.dll
    2008-09-09 19:57:29 ----A---- C:\Windows\system32\mkghj.dll
    2008-09-09 19:52:03 ----D---- C:\Users\Adam\AppData\Roaming\CallingID
    2008-09-09 19:50:14 ----D---- C:\Windows\Downloaded Installations
    2008-09-09 19:50:05 ----HD---- C:\Config.msi
    2008-09-09 19:50:05 ----D---- C:\Program Files\Common Files\Scanner
    2008-09-09 19:49:56 ----A---- C:\Windows\system32\vetredir.dll
    2008-09-09 19:49:56 ----A---- C:\Windows\system32\isafprod.dll
    2008-09-09 19:49:55 ----A---- C:\Windows\system32\isafeif.dll
    2008-09-09 19:49:45 ----A---- C:\caavsetupLog.txt
    2008-09-09 19:49:03 ----A---- C:\Windows\system32\svcprs32.exe
    2008-09-09 19:49:02 ----A---- C:\Windows\system32\win32cpr.dll
    2008-09-09 19:49:01 ----A---- C:\Windows\system32\winsflt.dll
    2008-09-09 19:49:00 ----A---- C:\Windows\system32\mdmcls32.exe
    2008-09-09 19:48:59 ----A---- C:\Windows\cfgmng32.exe
    2008-09-09 19:48:54 ----A---- C:\Windows\system32\winsflte.dll
    2008-09-09 19:48:32 ----D---- C:\Windows\rnapxs
    2008-09-09 19:48:32 ----A---- C:\Windows\system32\sporder.dll
    2008-09-09 19:46:06 ----D---- C:\ProgramData\CA
    2008-09-09 19:46:00 ----D---- C:\Program Files\CA
    2008-09-09 19:44:04 ----A---- C:\caisslog.txt
    2008-09-09 19:40:14 ----D---- C:\Users\Adam\AppData\Roaming\GetRightToGo
    2008-09-09 15:23:47 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
    2008-09-09 15:23:47 ----A---- C:\Windows\system32\Apphlpdm.dll
    2008-09-09 15:23:44 ----A---- C:\Windows\system32\wmpeffects.dll
    2008-09-01 18:43:07 ----SHD---- C:\found.001
    2008-08-30 23:23:21 ----A---- C:\Windows\system32\DLAAPI_W.DLL
    2008-08-30 23:23:21 ----A---- C:\Windows\DLA.EXE
    2008-08-29 16:38:36 ----D---- C:\ProgramData\RT_Multiplayer
    2008-08-29 16:36:24 ----D---- C:\Program Files\Cartoon Network
    2008-08-26 12:21:59 ----A---- C:\Windows\system32\wups2.dll
    2008-08-26 12:21:59 ----A---- C:\Windows\system32\wucltux.dll
    2008-08-26 12:21:59 ----A---- C:\Windows\system32\wuaueng.dll
    2008-08-26 12:21:59 ----A---- C:\Windows\system32\wuauclt.exe
    2008-08-26 12:21:19 ----A---- C:\Windows\system32\wups.dll
    2008-08-26 12:21:19 ----A---- C:\Windows\system32\wudriver.dll
    2008-08-26 12:21:19 ----A---- C:\Windows\system32\wuapi.dll
    2008-08-26 12:21:09 ----A---- C:\Windows\system32\wuwebv.dll
    2008-08-26 12:21:09 ----A---- C:\Windows\system32\wuapp.exe
    2008-08-23 16:44:11 ----D---- C:\Program Files\Trendware

    ======List of files/folders modified in the last 3 months======

    2008-11-15 07:22:37 ----D---- C:\Windows\Prefetch
    2008-11-15 07:22:32 ----D---- C:\Windows\Temp
    2008-11-14 15:37:07 ----SHD---- C:\Windows\Installer
    2008-11-13 19:40:20 ----D---- C:\MDT
    2008-11-13 18:26:05 ----HD---- C:\ProgramData
    2008-11-13 18:26:05 ----D---- C:\Program Files\dl_Cats
    2008-11-13 18:01:47 ----D---- C:\Windows\system32\drivers
    2008-11-13 18:01:43 ----RD---- C:\Program Files
    2008-11-11 14:19:18 ----D---- C:\Ashley
    2008-11-11 00:43:41 ----D---- C:\Windows\System32
    2008-11-10 23:43:07 ----D---- C:\Windows\inf
    2008-11-10 23:43:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2008-11-10 23:32:17 ----D---- C:\Program Files\Trend Micro
    2008-11-10 23:28:01 ----D---- C:\Windows\system32\heroes_horde dir
    2008-11-09 21:23:24 ----D---- C:\Windows\rescache
    2008-11-09 09:04:08 ----SD---- C:\Windows\Downloaded Program Files
    2008-11-08 18:32:19 ----D---- C:\Windows\winsxs
    2008-11-08 18:31:03 ----D---- C:\Windows\system32\catroot
    2008-11-08 18:31:02 ----D---- C:\Windows\system32\catroot2
    2008-11-08 12:02:11 ----SHD---- C:\System Volume Information
    2008-11-06 21:02:06 ----D---- C:\Program Files\World of Warcraft
    2008-10-21 22:11:20 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
    2008-10-21 22:11:15 ----D---- C:\Windows
    2008-10-21 21:35:50 ----D---- C:\Program Files\Windows Mail
    2008-10-21 21:35:48 ----D---- C:\Windows\system32\migration
    2008-10-21 20:54:50 ----D---- C:\ProgramData\Microsoft Help
    2008-10-21 20:29:54 ----D---- C:\Program Files\Common Files
    2008-10-07 13:19:40 ----A---- C:\Windows\system32\mrt.exe
    2008-09-28 17:11:28 ----SD---- C:\ProgramData\Microsoft
    2008-09-26 19:01:17 ----D---- C:\Program Files\Dell
    2008-09-22 20:27:25 ----D---- C:\DELL
    2008-09-20 21:49:55 ----D---- C:\Windows\system32\WDI
    2008-09-19 14:24:57 ----D---- C:\Windows\system32\en-US
    2008-09-19 14:24:57 ----D---- C:\Windows\PolicyDefinitions
    2008-09-14 11:17:41 ----D---- C:\Windows\Logs
    2008-09-14 09:04:22 ----D---- C:\Windows\Microsoft.NET
    2008-09-14 09:04:12 ----RSD---- C:\Windows\assembly
    2008-09-14 08:57:33 ----ASH---- C:\Program Files\desktop.ini
    2008-09-14 08:57:31 ----SHD---- C:\Boot
    2008-09-14 08:46:28 ----D---- C:\Program Files\Windows Sidebar
    2008-09-14 08:46:28 ----D---- C:\Program Files\Windows Calendar
    2008-09-14 08:46:28 ----D---- C:\Program Files\Movie Maker
    2008-09-14 08:46:27 ----D---- C:\Program Files\Windows Photo Gallery
    2008-09-14 08:46:27 ----D---- C:\Program Files\Windows Media Player
    2008-09-14 08:46:27 ----D---- C:\Program Files\Windows Journal
    2008-09-14 08:46:27 ----D---- C:\Program Files\Windows Collaboration
    2008-09-14 08:46:27 ----D---- C:\Program Files\Internet Explorer
    2008-09-14 08:46:24 ----D---- C:\Windows\servicing
    2008-09-14 08:46:24 ----D---- C:\Program Files\Windows Defender
    2008-09-14 08:46:24 ----D---- C:\Program Files\Common Files\System
    2008-09-14 08:46:21 ----D---- C:\Windows\MSAgent
    2008-09-14 08:46:20 ----D---- C:\Windows\L2Schemas
    2008-09-14 08:46:20 ----D---- C:\Windows\IME
    2008-09-14 08:46:20 ----D---- C:\Windows\DigitalLocker
    2008-09-14 08:46:18 ----D---- C:\Windows\system32\XPSViewer
    2008-09-14 08:46:18 ----D---- C:\Windows\system32\ko-KR
    2008-09-14 08:46:18 ----D---- C:\Windows\system32\da-DK
    2008-09-14 08:46:18 ----D---- C:\Windows\system32\com
    2008-09-14 08:46:12 ----D---- C:\Windows\system32\sysprep
    2008-09-14 08:46:12 ----D---- C:\Windows\system32\oobe
    2008-09-14 08:46:12 ----D---- C:\Windows\system32\it-IT
    2008-09-14 08:46:12 ----D---- C:\Windows\system32\el-GR
    2008-09-14 08:46:12 ----D---- C:\Windows\system32\de-DE
    2008-09-14 08:46:09 ----D---- C:\Windows\system32\AdvancedInstallers
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\sv-SE
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\SLUI
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\setup
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\ru-RU
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\pt-PT
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\ias
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\hu-HU
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\he-IL
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\fr-FR
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\fi-FI
    2008-09-14 08:46:08 ----D---- C:\Windows\system32\cs-CZ
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\zh-TW
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\zh-CN
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\ro-RO
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\pl-PL
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\manifeststore
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\ja-JP
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\es-ES
    2008-09-14 08:46:06 ----D---- C:\Windows\system32\en
    2008-09-14 08:46:04 ----D---- C:\Windows\system32\wbem
    2008-09-14 08:46:04 ----D---- C:\Windows\system32\tr-TR
    2008-09-14 08:46:03 ----D---- C:\Windows\system32\nl-NL
    2008-09-14 08:46:03 ----D---- C:\Windows\system32\nb-NO
    2008-09-14 08:46:03 ----D---- C:\Windows\system32\ar-SA
    2008-09-14 08:46:02 ----D---- C:\Windows\system32\migwiz
    2008-09-14 08:46:01 ----D---- C:\Windows\system32\pt-BR
    2008-09-14 08:45:19 ----RSD---- C:\Windows\Fonts
    2008-09-14 08:45:19 ----D---- C:\Windows\AppPatch
    2008-09-14 08:45:05 ----D---- C:\Windows\Boot
    2008-09-14 08:45:03 ----D---- C:\Windows\system32\Boot
    2008-09-14 08:24:10 ----A---- C:\Windows\system32\ifxcardm.dll
    2008-09-14 08:24:02 ----A---- C:\Windows\system32\axaltocm.dll
    2008-09-09 19:56:36 ----HD---- C:\Program Files\InstallShield Installation Information
    2008-09-09 19:54:55 ----D---- C:\Program Files\Common Files\InstallShield
    2008-09-09 19:50:36 ----D---- C:\Windows\system32\Tasks
    2008-09-09 19:50:34 ----D---- C:\Windows\Tasks
    2008-09-09 19:32:15 ----D---- C:\ProgramData\Trend Micro
    2008-08-30 23:26:01 ----D---- C:\Windows\system32\DLA
    2008-08-30 23:23:22 ----A---- C:\Windows\wininit.ini
    2008-08-30 23:23:17 ----D---- C:\Program Files\Roxio

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2008-01-18 350720]
    R1 DLACDBHM;DLACDBHM; C:\Windows\System32\Drivers\DLACDBHM.SYS [2007-02-08 12856]
    R1 DLARTL_M;DLARTL_M; C:\Windows\System32\Drivers\DLARTL_M.SYS [2007-02-08 28120]
    R1 KmxAgent;KmxAgent; C:\Windows\System32\DRIVERS\kmxagent.sys [2008-03-21 63504]
    R1 KmxFile;KmxFile; C:\Windows\System32\DRIVERS\KmxFile.sys [2008-03-21 45584]
    R1 KmxFilter;HIPS Core Filter Driver; C:\Windows\system32\DRIVERS\KmxFilter.sys [2008-05-30 51704]
    R1 VETEFILE;VET File Scan Engine; C:\Windows\system32\drivers\VETEFILE.sys [2008-09-09 880560]
    R1 VETFDDNT;VET Floppy Boot Sector Monitor; C:\Windows\system32\drivers\VETFDDNT.sys [2008-08-30 21488]
    R1 VET-FILT;VET File System Filter; C:\Windows\system32\drivers\VET-FILT.sys [2008-08-30 26352]
    R1 VETMONNT;VET File Monitor; C:\Windows\system32\drivers\VETMONNT.sys [2008-08-30 32240]
    R1 VET-REC;VET File System Recognizer; C:\Windows\system32\drivers\VET-REC.sys [2008-08-30 21104]
    R2 DLABMFSM;DLABMFSM; C:\Windows\System32\DLA\DLABMFSM.SYS [2006-10-26 35096]
    R2 DLABOIOM;DLABOIOM; C:\Windows\System32\DLA\DLABOIOM.SYS [2006-10-26 32472]
    R2 DLADResM;DLADResM; C:\Windows\System32\DLA\DLADResM.SYS [2006-10-26 9400]
    R2 DLAIFS_M;DLAIFS_M; C:\Windows\System32\DLA\DLAIFS_M.SYS [2006-10-26 104536]
    R2 DLAOPIOM;DLAOPIOM; C:\Windows\System32\DLA\DLAOPIOM.SYS [2006-10-26 26296]
    R2 DLAPoolM;DLAPoolM; C:\Windows\System32\DLA\DLAPoolM.SYS [2006-10-26 14520]
    R2 DLAUDF_M;DLAUDF_M; C:\Windows\System32\DLA\DLAUDF_M.SYS [2006-10-26 97848]
    R2 DLAUDFAM;DLAUDFAM; C:\Windows\System32\DLA\DLAUDFAM.SYS [2006-10-26 94648]
    R2 DRVNDDM;DRVNDDM; C:\Windows\System32\Drivers\DRVNDDM.SYS [2007-02-09 51768]
    R2 dsunidrv;dsunidrv; \??\C:\Program Files\DellSupport\Drivers\dsunidrv.sys [2006-08-17 7424]
    R2 KmxCF;KmxCF; C:\Windows\System32\DRIVERS\KmxCF.sys [2008-06-04 138744]
    R2 KmxSbx;KmxSbx; C:\Windows\System32\DRIVERS\KmxSbx.sys [2008-03-21 66576]
    R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
    R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 8192]
    R3 DSproct;DSproct; \??\C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys [2006-10-05 4736]
    R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-01-18 220672]
    R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
    R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-10-18 986624]
    R3 HSXHWBS2;HSXHWBS2; C:\Windows\system32\DRIVERS\HSXHWBS2.sys [2006-10-18 258048]
    R3 KmxCfg;KmxCfg; C:\Windows\System32\DRIVERS\kmxcfg.sys [2008-05-30 88816]
    R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-09-17 7624192]
    R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-08-06 124928]
    R3 STHDA;SigmaTel High Definition Audio CODEC; C:\Windows\system32\drivers\stwrt.sys [2007-01-12 647680]
    R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
    R3 VETEBOOT;VET Boot Scan Engine; C:\Windows\system32\drivers\VETEBOOT.sys [2008-09-09 108368]
    R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-10-18 659968]
    R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
    S3 AX88178;10/100 Gigabit USB2.0 Network Adapter; C:\Windows\system32\DRIVERS\ax88178.sys [2005-01-25 24448]
    S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
    S3 EthDriver;TEG-PCITXR NDIS6 Driver ; C:\Windows\system32\DRIVERS\TEGPCI.sys [2007-04-12 70144]
    S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
    S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
    S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
    S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
    S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
    S3 usbaudio;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-18 73088]
    S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
    S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2007-10-31 110592]
    R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
    R2 CAISafe;CAISafe; C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe [2008-08-30 144696]
    R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2008-01-19 21504]
    R2 dlcc_device;dlcc_device; C:\Windows\system32\dlcccoms.exe [2007-01-30 538096]
    R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2006-09-29 81920]
    R2 ITMRTSVC;CA Pest Patrol Realtime Protection Service; C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe [2007-09-26 283912]
    R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter); C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2008-08-13 201968]
    R2 STacSV;SigmaTel Audio Service; C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe [2007-01-12 90112]
    R2 TivoBeacon2;TiVo Beacon; C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe [2008-07-09 868864]
    R2 UmxAgent;HIPS Event Manager; C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe [2007-10-18 1010192]
    R2 UmxCfg;HIPS Configuration Interpreter; C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe [2007-10-18 801296]
    R2 UmxFwHlp;HIPS Firewall Helper; C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe [2008-03-19 145936]
    R2 UmxPol;HIPS Policy Manager; C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe [2008-04-15 281104]
    R2 VETMSGNT;VET Message Service; C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe [2008-08-30 255216]
    R2 WinSvchostManager;WinSock Svchost Manager; C:\Windows\System32\svcprs32.exe [2007-11-14 823296]
    R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
    R3 CaCCProvSP;CaCCProvSP; C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe [2008-10-11 214256]
    R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-01-15 504104]
    R3 PPCtlPriv;PPCtlPriv; C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe [2008-08-27 185584]
    S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2008-01-19 21504]
    S3 DSBrokerService;DSBrokerService; C:\Program Files\DellSupport\brkrsvc.exe [2006-11-07 70656]
    S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2008-01-19 523776]
    S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-10-20 658432]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
    S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
    S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-05 880640]
    S3 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [2006-11-05 159744]
    S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-09-14 73728]
    S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2008-01-19 21504]
    S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2008-01-19 917504]

    -----------------EOF-----------------
     
    BlickDot,
    #9
  11. 2008/11/15
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    info.txt
    =========================================================
    info.txt logfile of random's system information tool 1.04 2008-11-15 07:21:34

    ======Uninstall list======

    --> "C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\setup\ccinstaller.exe" /u /silent /module= "fw "
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A05B328-35EB-4CED-B16F-62FA5A2642E6}\setup.exe" -l0x9 IfYouSeeThisAlowOnlyRemove -removeonly
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {FAD8A83E-9BAC-4179-9268-A35948034D85}
    2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
    Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Reader 7.0.9-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002}
    Adobe Shockwave Player-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
    Age of Empires III - The Asian Dynasties-->C:\Program Files\InstallShield Installation Information\{C43C1415-3DFC-4089-9A32-0BECF28A6046}\setup.exe -runfromtemp -l0x0409
    Age of Empires III - The WarChiefs-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{1C08A24C-B168-407E-A826-68FAF5F20710}
    Age of Empires III-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}
    Apple Mobile Device Support-->MsiExec.exe /I{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4}
    Apple Software Update-->MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}
    Ben 10 Alien Force Bounty Hunters-->MsiExec.exe /X{BC7E9D03-F7B1-4179-AAEC-941D14DF5EF3}
    Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
    CA Anti-Spyware--> "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\setup\ccinstaller.exe" /u /silent /module= "pp "
    CA Anti-Virus-->C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\unvet32.exe
    CA Desktop DNA Migrator-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{0AFD47CE-CA9C-4372-AA20-CB05D33638FA} /l1033 /s /f1 "C:\Program Files\CA\CA Internet Security Suite\CA Desktop DNA Migrator\dnaunset.iss "
    CA Internet Security Suite--> "C:\Program Files\CA\CA Internet Security Suite\caunst.exe" /u
    CA Pest Patrol Realtime Protection-->MsiExec.exe /X{F05A5232-CE5E-4274-AB27-44EB8105898D}
    CA Website Inspector-->C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\CAWebsiteInspector.exe /uninstall
    Conexant D850 PCI V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -IDel200fz.inf
    Dell Support Center (Support Software)-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
    Dell System Customization Wizard-->MsiExec.exe /I{13BA7B44-B712-4DEE-A7B8-1DD564F37AE5}
    DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
    Digital Line Detect-->C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\Setup.exe -runfromtemp -l0x0009 -removeonly
    Documentation & Support Launcher-->MsiExec.exe /I{89CEAE14-DD0F-448E-9554-15781EC9DB24}
    Fax Solutions-->C:\Program Files\Dell PC Fax\Install\x86\Uninst.exe
    Games, Music, & Photos Launcher-->MsiExec.exe /I{3E25E350-949F-4DB7-8288-2A60E018B4C1}
    HijackThis 2.0.2--> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
    Intel(R) Matrix Storage Manager-->C:\Windows\System32\Imsmudlg.exe
    iTunes-->MsiExec.exe /I{B85C4D19-6CEB-48CF-BD98-C887AC8C6F94}
    Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
    JumpStart 4th Grade-->C:\Program Files\Common Files\Knowledge Adventure\Uninstall\JSA4GUn.exe
    Malwarebytes' Anti-Malware--> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe "
    Malwarebytes' RogueRemover--> "C:\Program Files\RogueRemover FREE\unins000.exe "
    Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
    Microsoft Office Home and Student 2007--> "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
    Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
    Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
    Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
    Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
    Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
    Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
    Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
    Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
    Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
    Modem Diagnostic Tool-->MsiExec.exe /I{F63A3748-B93D-4360-9AD4-B064481A5C7B}
    MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
    NetWaiting-->C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
    NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
    Pdf995 (installed by TaxCut)-->C:\Program Files\pdf995\setup.exe uninstall
    PdfEdit995 (installed by TaxCut)-->C:\Program Files\pdf995\res\utilities\thinsetup.exe - uninstall
    PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{281ECE39-F043-492B-8337-F2E546B5604A}\Setup.exe" -l0x9 -cluninstall
    QuickTime-->MsiExec.exe /I{6EC874C2-F950-4B7E-A5B7-B1066D6B74AA}
    RollerCoaster Tycoon 2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{72DF62BD-FF36-424E-AA5F-D89BAFF2C249}\Setup.exe" -l0x9
    Rosetta Stone V3-->MsiExec.exe /X{7210BCFE-ED8D-4261-8537-81B5A4BDFA2A}
    Roxio Creator Audio-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
    Roxio Creator BDAV Plugin-->MsiExec.exe /I{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}
    Roxio Creator Copy-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
    Roxio Creator Data-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
    Roxio Creator DE-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
    Roxio Creator Tools-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
    Roxio Drag-to-Disc-->MsiExec.exe /I{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}
    Roxio Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
    Roxio MyDVD DE-->MsiExec.exe /I{D639085F-4B6E-4105-9F37-A0DBB023E2FB}
    Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
    Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
    Security Update for 2007 Microsoft Office System (KB955936)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {1D94099C-2BBA-440E-BD5E-093BBDF8F028}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
    Security Update for Microsoft Office Excel 2007 (KB955470)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6E8637D8-10D6-4568-AA06-E2706F31685E}
    Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
    Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
    Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
    Security Update for Microsoft Office Word 2007 (KB950113)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {AD72BABE-C733-4FCF-9674-4314466191B9}
    Security Update for Visio 2007 (KB947590)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {6BAD036C-261F-4BEF-96CF-C20678D07A41}
    SigmaTel Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}\setup.exe" -l0x9 -remove -removeonly
    Sonic Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
    TaxCut Illinois 2007-->MsiExec.exe /X{EF9DCAA9-3635-4776-B0BA-14883C3C711D}
    TaxCut Premium + State 2007-->MsiExec.exe /X{663E217E-FC26-4249-9E8E-F190CD63E737}
    TeamSpeak 2 RC2--> "C:\Program Files\Teamspeak2_RC2\unins000.exe "
    TEG-PCITXR 32bit Gigabit PCI Adapter(for Vista)-->C:\Program Files\InstallShield Installation Information\{745B8364-47BF-489B-BFB5-15CF40E3F711}\setup.exe -runfromtemp -l0x0009 -removeonly
    TiVo Desktop 2.6.2-->MsiExec.exe /X{4E839090-3B68-436A-B3CF-A2A08C38DD26}
    TurboTax Deluxe 2007-->C:\Program Files\TurboTax\Deluxe 2007\TaxUnst.EXE "C:\Program Files\TurboTax\Deluxe 2007\Uninstall.log" -NoGui
    TurboTax Deluxe Deduction Maximizer 2006-->C:\Program Files\TurboTax\Deluxe 2006\TaxUnst.EXE "C:\Program Files\TurboTax\Deluxe 2006\Uninstall.log" -NoGui
    TurboTax ItsDeductible 2006-->MsiExec.exe /X{AFF1EA96-9C23-4249-B7D4-CD4B54D4582F}
    Update for Office 2007 (KB946691)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
    USB2.0 Gigabit Ethernet Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A092261-FD2E-41D2-8684-882E52E96B93}\Setup.exe" -l0x9
    User's Guides-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}\setup.exe"
    Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
    World of Warcraft-->C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft (2)\Uninstall.exe

    ======Security center information======

    AV: CA Anti-Virus
    FW: CA Personal Firewall
    AS: Windows Defender (disabled)
    AS: CA Anti-Spyware
    AS: Spy Sweeper (disabled)

    ======Environment variables======

    "ComSpec "=%SystemRoot%\system32\cmd.exe
    "FP_NO_HOST_CHECK "=NO
    "OS "=Windows_NT
    "Path "=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\QuickTime\QTSystem\
    "PATHEXT "=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
    "PROCESSOR_ARCHITECTURE "=x86
    "TEMP "=%SystemRoot%\TEMP
    "TMP "=%SystemRoot%\TEMP
    "USERNAME "=SYSTEM
    "windir "=%SystemRoot%
    "PROCESSOR_LEVEL "=6
    "PROCESSOR_IDENTIFIER "=x86 Family 6 Model 15 Stepping 6, GenuineIntel
    "PROCESSOR_REVISION "=0f06
    "NUMBER_OF_PROCESSORS "=2
    "RoxioCentral "=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
    "CLASSPATH "=.;C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
    "QTJAVA "=C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip

    -----------------EOF-----------------
     
    BlickDot,
    #10
  12. 2008/11/15
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK Can you give me the file path that is suppose to be Spyware.RemoteSpy.

    Thanks
    Geri
     
    Geri,
    #11
  13. 2008/11/16
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    Hello

    Well here is what I can get through Task Manager.

    When the "Windows Security Alert" window comes up task Manager says

    Task: "Windows Security Alert" - running

    When I go to it's process

    Image Name: "wmpnscfg.exe"
    User Name: Blickdot
    CPU: 00
    Memory: 328K
    Description: "Windows Media Player network Sharing Service Configuration Aplication "

    Path I don't know
     
    BlickDot,
    #12
  14. 2008/11/16
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK, That file is a legit file, but not really needed at startup.

    Lets see if the alert goes away if we fix it with HJT.

    Please re-open HiJackThis and scan only. Check the boxes next to all the entries listed below.

    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

    Now close all windows other than HiJackThis, then click Fix Checked.

    Close HJT.

    Reboot and let me know if the alert stopped. Also check and make sure you can open Windows Media Player

    Geri
     
    Geri,
    #13
  15. 2008/11/16
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    Hey

    That line dose not exactly match anything I see in HJT.
    The closest I see is:
    O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe "
    Allthough when I create a log file the line dose match.
    So have I selected and fixed the item.
    I will let you know what happens.
     
    BlickDot,
    #14
  16. 2008/11/17
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    Hello

    I don't know how that last post fit in.

    But anyway, after cleaning the entry in HJT I am still able to open Windows Media Player.

    And the popup is still there.

    Can I ask does Windows Security Alert normally use Windows Media Player to send Alerts?
     
    Last edited: 2008/11/17
    BlickDot,
    #15
  17. 2008/11/17
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    I don't believe so, but I'm not sure with Vista.

    Can I see a new HJT log.

    Thanks
     
    Geri,
    #16
  18. 2008/11/17
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    Hi
    Here goes:
    ------------------------------------------
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:22:54 AM, on 11/15/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
    C:\Windows\cfgmng32.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\cavrid.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
    C:\Windows\sttray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAAntiSpyware.exe
    C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\DellSupport\DSAgnt.exe
    C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
    C:\Program Files\TiVo\Desktop\TiVoNotify.exe
    C:\Users\Ashley\AppData\Roaming\Google\visfdw.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Internet Explorer\ieuser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Users\Ashley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AV2B7U4O\RSIT[1].exe
    C:\Program Files\Trend Micro\HijackThis\Adam.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://v11.www.msn.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O2 - BHO: CA Toolbar Helper - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\Toolbar\CallingIDIE.dll
    O3 - Toolbar: CA Toolbar - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - C:\Program Files\CA\CA Internet Security Suite\CA Website Inspector\Toolbar\CallingIDIE.dll
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe "
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [ISUSPM Startup] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" -startup
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe "
    O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe "
    O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
    O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKLM\..\Run: [cctray] "C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe "
    O4 - HKLM\..\Run: [dvHighMem] C:\Windows\cfgmng32.exe
    O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe "
    O4 - HKLM\..\Run: [QOELOADER] "C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-6.0.1.33\QOELoader.exe "
    O4 - HKLM\..\Run: [cafw] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl
    O4 - HKLM\..\Run: [capfasem] C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
    O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [CaPPcl] C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAAntiSpyware.exe /scan /startup
    O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
    O4 - HKLM\..\Run: [UniUploader] C:\Program Files\UniUploader\UniUploader.exe
    O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
    O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe "
    O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{D596C828-B284-49F8-AE7E-85522E5B3EB0}
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer
    O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
    O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [WindowsWelcomeCenter] "rundll32.exe" oobefldr.dll,ShowWelcomeCenter (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\Run: [winlogone] "C:\Users\Ashley\AppData\Roaming\Google\visfdw.exe" (User 'Ashley')
    O4 - HKUS\S-1-5-21-1243134545-562782869-3649009219-1001\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe (User 'Ashley')
    O4 - S-1-5-21-1243134545-562782869-3649009219-1001 Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Ashley')
    O4 - S-1-5-21-1243134545-562782869-3649009219-1001 User Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Ashley')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
    O13 - Gopher Prefix:
    O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
    O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
    O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.dell.com/systemprofiler/SysProExe.CAB
    O16 - DPF: {56393399-041A-4650-94C7-13DFCB1F4665} (PSFormX Control) - http://www.ca.com/us/securityadvisor/pestscan/pestscan.cab
    O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
    O16 - DPF: {C9E2242D-DC05-4C54-9483-A5C90653F7BC} (TIClientControl Object) - https://techinline.net/Client/TIClient.cab
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: CaCCProvSP - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
    O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
    O23 - Service: dlcc_device - - C:\Windows\system32\dlcccoms.exe
    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
    O23 - Service: PPCtlPriv - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: TiVo Beacon (TivoBeacon2) - TiVo Inc. - C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
    O23 - Service: HIPS Event Manager (UmxAgent) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
    O23 - Service: HIPS Configuration Interpreter (UmxCfg) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
    O23 - Service: HIPS Firewall Helper (UmxFwHlp) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
    O23 - Service: HIPS Policy Manager (UmxPol) - CA - C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
    O23 - Service: VET Message Service (VETMSGNT) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
    O23 - Service: WinSock Svchost Manager (WinSvchostManager) - Unknown owner - C:\Windows\System32\svcprs32.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 13481 bytes
     
    BlickDot,
    #17
  19. 2008/11/17
    BlickDot

    BlickDot Inactive Thread Starter

    Joined:
    2005/02/27
    Messages:
    73
    Likes Received:
    0
    BlickDot,
    #18
  20. 2008/11/17
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    OK please give me some time to research this.

    I am running XP and windows media player does not run at startup, I need to find out why it is set to run at startup with Vista.

    I'll get back to you as soon as I find out.

    Thanks
    Geri
     
    Geri,
    #19
  21. 2008/11/18
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    I'll just say I don't like some of the advice given there.
     
    Geri,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...