1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Some kind of 2009 software tried to download

Discussion in 'Malware and Virus Removal Archive' started by PAULDEP, 2008/11/15.

  1. 2008/11/15
    PAULDEP

    PAULDEP Well-Known Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    562
    Likes Received:
    1
    [Resolved] Some kind of 2009 software tried to download

    I am panicky, I think that something I clicked on may have infected me. It looks like it downloaded but I don't think it installed on my PC. Here is the log?

    Logfile of random's system information tool 1.04 (written by random/random)
    Run by DAD at 2008-11-15 07:33:49
    Microsoft Windows XP Professional Service Pack 3
    System drive C: has 66 GB (87%) free of 76 GB
    Total RAM: 1022 MB (53% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:34:53 AM, on 11/15/2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16735)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\stsystra.exe
    C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
    C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
    C:\Program Files\AWS\WeatherBug\Weather.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    C:\Program Files\ClipTrak\ClipTrak.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\system32\inetsrv\inetinfo.exe
    C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
    C:\WINDOWS\system32\tcpsvcs.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\mqsvc.exe
    C:\WINDOWS\system32\mqtgsvc.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\DAD\My Documents\Downloads\RSIT.exe
    C:\Program Files\trend micro\DAD.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe "
    O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
    O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
    O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
    O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
    O4 - Startup: ClipTrak.lnk = C:\Program Files\ClipTrak\ClipTrak.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
    O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

    --
    End of file - 4418 bytes

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
    Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "ehTray "=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
    "MsmqIntCert "=regsvr32 /s mqrt.dll []
    "SigmatelSysTrayApp "=C:\WINDOWS\stsystra.exe [2005-03-22 339968]
    "ATIPTA "=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-08-05 344064]
    "COMODO Internet Security "=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2008-11-13 1797880]
    "Kernel and Hardware Abstraction Layer "=C:\WINDOWS\KHALMNPR.EXE [2008-02-29 76304]
    "CanonMyPrinter "=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
    "MSConfig "=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-13 169984]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "Weather "=C:\Program Files\AWS\WeatherBug\Weather.exe [2007-08-29 1347584]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
    C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe [2008-05-02 805392]

    C:\Documents and Settings\DAD\Start Menu\Programs\Startup
    ClipTrak.lnk - C:\Program Files\ClipTrak\ClipTrak.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLS "=" C:\WINDOWS\system32\guard32.dll "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
    c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2008-05-02 72208]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-13 239616]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername "=0
    "legalnoticecaption "=
    "legalnoticetext "=
    "shutdownwithoutlogon "=1
    "undockwithoutlogon "=1
    "InstallVisualStyle "=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme "=C:\WINDOWS\Resources\Themes\Royale.theme

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    "NoDriveTypeAutoRun "=145

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\WINDOWS\system32\mqsvc.exe "= "C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing "
    "%windir%\Network Diagnostic\xpnetdiag.exe "= "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:mad:xpsp3res.dll,-20000 "

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019 "
    "C:\WINDOWS\system32\mqsvc.exe "= "C:\WINDOWS\system32\mqsvc.exe:*:Enabled:Message Queuing "
    "%windir%\Network Diagnostic\xpnetdiag.exe "= "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:mad:xpsp3res.dll,-20000 "

    ======List of files/folders created in the last 3 months======

    2008-11-15 07:34:04 ----D---- C:\Program Files\trend micro
    2008-11-15 07:33:49 ----D---- C:\rsit
    2008-11-15 03:01:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
    2008-11-15 03:00:57 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
    2008-11-14 14:01:51 ----A---- C:\WINDOWS\system32\muweb.dll
    2008-11-14 14:01:51 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
    2008-11-14 14:01:51 ----A---- C:\WINDOWS\system32\mucltui.dll
    2008-11-14 10:46:04 ----D---- C:\Documents and Settings\All Users\Application Data\CanonIJPLM
    2008-11-14 10:39:47 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonBJ
    2008-11-14 10:39:43 ----A---- C:\WINDOWS\system32\CNMLM8U.DLL
    2008-11-14 10:38:39 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
    2008-11-14 10:38:01 ----D---- C:\WINDOWS\LastGood
    2008-11-14 10:37:59 ----A---- C:\WINDOWS\system32\CNC470O.DLL
    2008-11-14 10:37:59 ----A---- C:\WINDOWS\system32\CNC470L.DLL
    2008-11-14 10:37:59 ----A---- C:\WINDOWS\system32\CNC470I.DLL
    2008-11-14 10:37:58 ----A---- C:\WINDOWS\system32\CNC470C.DLL
    2008-11-14 10:37:30 ----HD---- C:\Program Files\CanonBJ
    2008-11-14 10:35:29 ----D---- C:\Program Files\Canon
    2008-11-14 06:24:28 ----D---- C:\Documents and Settings\DAD\Application Data\Thunderbird
    2008-11-14 06:23:19 ----D---- C:\Program Files\Mozilla Thunderbird
    2008-11-14 05:33:40 ----D---- C:\Program Files\Microsoft Silverlight
    2008-11-14 05:27:49 ----A---- C:\WINDOWS\ODBC.INI
    2008-11-14 05:27:41 ----A---- C:\WINDOWS\system32\mdimon.dll
    2008-11-14 05:26:34 ----D---- C:\Program Files\Microsoft ActiveSync
    2008-11-14 05:26:32 ----D---- C:\WINDOWS\SHELLNEW
    2008-11-14 05:26:28 ----D---- C:\Program Files\Common Files\DESIGNER
    2008-11-14 05:25:17 ----D---- C:\Program Files\Microsoft.NET
    2008-11-14 05:25:17 ----D---- C:\Program Files\Microsoft Office
    2008-11-14 05:23:39 ----RHD---- C:\MSOCache
    2008-11-14 05:06:22 ----D---- C:\Program Files\Common Files\Adobe AIR
    2008-11-14 05:06:11 ----D---- C:\Documents and Settings\DAD\Application Data\Macromedia
    2008-11-14 05:06:11 ----D---- C:\Documents and Settings\DAD\Application Data\Adobe
    2008-11-14 05:05:10 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
    2008-11-14 05:05:03 ----D---- C:\Program Files\Common Files\Adobe
    2008-11-14 05:05:03 ----D---- C:\Program Files\Adobe
    2008-11-14 05:02:57 ----D---- C:\Program Files\NOS
    2008-11-14 05:02:57 ----D---- C:\Documents and Settings\All Users\Application Data\NOS
    2008-11-14 04:51:32 ----D---- C:\Program Files\ClipTrak
    2008-11-14 03:06:46 ----D---- C:\WINDOWS\Prefetch
    2008-11-14 00:46:28 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
    2008-11-14 00:44:11 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
    2008-11-14 00:41:54 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
    2008-11-14 00:33:33 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
    2008-11-14 00:31:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
    2008-11-14 00:30:52 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
    2008-11-14 00:28:35 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
    2008-11-14 00:24:18 ----HDC---- C:\WINDOWS\$NtUninstallKB953155$
    2008-11-14 00:22:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
    2008-11-14 00:21:44 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
    2008-11-14 00:21:27 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
    2008-11-14 00:19:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
    2008-11-14 00:16:52 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
    2008-11-14 00:14:34 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
    2008-11-14 00:14:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
    2008-11-14 00:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
    2008-11-14 00:13:45 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
    2008-11-13 23:59:44 ----D---- C:\WINDOWS\system32\scripting
    2008-11-13 23:59:40 ----D---- C:\WINDOWS\l2schemas
    2008-11-13 23:59:39 ----D---- C:\WINDOWS\system32\en
    2008-11-13 23:59:38 ----D---- C:\WINDOWS\system32\bits
    2008-11-13 23:54:42 ----D---- C:\WINDOWS\ServicePackFiles
    2008-11-13 23:41:14 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
    2008-11-13 23:30:41 ----HDC---- C:\WINDOWS\$NtUninstallKB926251$
    2008-11-13 23:28:23 ----HD---- C:\Program Files\Uninstall Information
    2008-11-13 23:23:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
    2008-11-13 23:23:42 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
    2008-11-13 23:23:29 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
    2008-11-13 23:23:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
    2008-11-13 23:21:26 ----D---- C:\WINDOWS\ie7updates
    2008-11-13 23:20:41 ----D---- C:\WINDOWS\WBEM
    2008-11-13 23:20:39 ----D---- C:\WINDOWS\system32\en-US
    2008-11-13 23:19:25 ----HDC---- C:\WINDOWS\ie7
    2008-11-13 23:18:05 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
    2008-11-13 23:17:35 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
    2008-11-13 23:17:03 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
    2008-11-13 23:16:58 ----N---- C:\WINDOWS\system32\xmllite.dll
    2008-11-13 23:14:45 ----D---- C:\WINDOWS\network diagnostic
    2008-11-13 23:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
    2008-11-13 23:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB904942$
    2008-11-13 23:12:05 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
    2008-11-13 23:11:55 ----HDC---- C:\WINDOWS\$NtUninstallKB957095_0$
    2008-11-13 23:11:43 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
    2008-11-13 23:11:22 ----HDC---- C:\WINDOWS\$NtUninstallKB908250$
    2008-11-13 23:10:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951698_0$
    2008-11-13 23:10:46 ----HDC---- C:\WINDOWS\$NtUninstallKB954211_0$
    2008-11-13 23:03:23 ----A---- C:\WINDOWS\system32\MRT.exe
    2008-11-13 23:01:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956841_0$
    2008-11-13 23:01:14 ----HDC---- C:\WINDOWS\$NtUninstallKB913800$
    2008-11-13 23:00:33 ----HDC---- C:\WINDOWS\$NtUninstallKB942830$
    2008-11-13 22:59:10 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
    2008-11-13 22:58:44 ----HDC---- C:\WINDOWS\$NtUninstallKB953155_0$
    2008-11-13 22:58:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
    2008-11-13 22:58:26 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
    2008-11-13 22:58:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
    2008-11-13 22:58:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
    2008-11-13 22:57:36 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
    2008-11-13 21:58:17 ----N---- C:\WINDOWS\system32\wmphoto.dll
    2008-11-13 21:58:07 ----N---- C:\WINDOWS\system32\wlanapi.dll
    2008-11-13 21:58:03 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
    2008-11-13 21:58:03 ----N---- C:\WINDOWS\system32\windowscodecs.dll
    2008-11-13 21:57:46 ----N---- C:\WINDOWS\system32\verclsid.exe
    2008-11-13 21:57:27 ----N---- C:\WINDOWS\system32\tspkg.dll
    2008-11-13 21:57:26 ----N---- C:\WINDOWS\system32\tsgqec.dll
    2008-11-13 21:56:53 ----N---- C:\WINDOWS\system32\spupdwxp.exe
    2008-11-13 21:56:46 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
    2008-11-13 21:56:39 ----N---- C:\WINDOWS\system32\slserv.exe
    2008-11-13 21:56:39 ----N---- C:\WINDOWS\system32\slrundll.exe
    2008-11-13 21:56:39 ----N---- C:\WINDOWS\slrundll.exe
    2008-11-13 21:56:38 ----N---- C:\WINDOWS\system32\slgen.dll
    2008-11-13 21:56:38 ----N---- C:\WINDOWS\system32\slextspk.dll
    2008-11-13 21:56:38 ----N---- C:\WINDOWS\system32\slcoinst.dll
    2008-11-13 21:56:26 ----N---- C:\WINDOWS\system32\setupn.exe
    2008-11-13 21:56:16 ----N---- C:\WINDOWS\system32\s3gnb.dll
    2008-11-13 21:56:10 ----N---- C:\WINDOWS\system32\rhttpaa.dll
    2008-11-13 21:56:04 ----N---- C:\WINDOWS\system32\rasqec.dll
    2008-11-13 21:56:02 ----N---- C:\WINDOWS\system32\qutil.dll
    2008-11-13 21:55:57 ----N---- C:\WINDOWS\system32\qcliprov.dll
    2008-11-13 21:55:56 ----N---- C:\WINDOWS\system32\qagentrt.dll
    2008-11-13 21:55:56 ----N---- C:\WINDOWS\system32\qagent.dll
    2008-11-13 21:55:49 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
    2008-11-13 21:55:39 ----N---- C:\WINDOWS\system32\onex.dll
    2008-11-13 21:55:23 ----N---- C:\WINDOWS\system32\nv4_disp.dll
    2008-11-13 21:55:01 ----N---- C:\WINDOWS\system32\napstat.exe
    2008-11-13 21:55:00 ----N---- C:\WINDOWS\system32\napmontr.dll
    2008-11-13 21:55:00 ----N---- C:\WINDOWS\system32\napipsec.dll
    2008-11-13 21:54:59 ----N---- C:\WINDOWS\system32\mtxparhd.dll
    2008-11-13 21:54:56 ----N---- C:\WINDOWS\system32\msxml6r.dll
    2008-11-13 21:54:56 ----N---- C:\WINDOWS\system32\msxml6.dll
    2008-11-13 21:54:47 ----N---- C:\WINDOWS\system32\msshavmsg.dll
    2008-11-13 21:54:47 ----N---- C:\WINDOWS\system32\mssha.dll
    2008-11-13 21:53:53 ----N---- C:\WINDOWS\system32\mmcperf.exe
    2008-11-13 21:53:52 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
    2008-11-13 21:53:51 ----N---- C:\WINDOWS\system32\mmcex.dll
    2008-11-13 21:53:51 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
    2008-11-13 21:53:13 ----N---- C:\WINDOWS\system32\l2gpstore.dll
    2008-11-13 21:53:11 ----N---- C:\WINDOWS\system32\kmsvc.dll
    2008-11-13 21:53:09 ----N---- C:\WINDOWS\system32\kbdpash.dll
    2008-11-13 21:53:09 ----N---- C:\WINDOWS\system32\kbdnepr.dll
    2008-11-13 21:53:09 ----N---- C:\WINDOWS\system32\kbdiultn.dll
    2008-11-13 21:53:09 ----N---- C:\WINDOWS\system32\kbdbhc.dll
    2008-11-13 21:52:08 ----N---- C:\WINDOWS\system32\comsdupd.exe
    2008-11-13 21:51:56 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
    2008-11-13 21:51:41 ----A---- C:\WINDOWS\003027_.tmp
    2008-11-13 21:51:40 ----N---- C:\WINDOWS\system32\faxpatch.exe
    2008-11-13 21:51:37 ----N---- C:\WINDOWS\system32\eapsvc.dll
    2008-11-13 21:51:37 ----N---- C:\WINDOWS\system32\eapqec.dll
    2008-11-13 21:51:37 ----N---- C:\WINDOWS\system32\eappprxy.dll
    2008-11-13 21:51:36 ----N---- C:\WINDOWS\system32\eapphost.dll
    2008-11-13 21:51:36 ----N---- C:\WINDOWS\system32\eappgnui.dll
    2008-11-13 21:51:36 ----N---- C:\WINDOWS\system32\eappcfg.dll
    2008-11-13 21:51:36 ----N---- C:\WINDOWS\system32\eapp3hst.dll
    2008-11-13 21:51:36 ----N---- C:\WINDOWS\system32\eapolqec.dll
    2008-11-13 21:51:28 ----N---- C:\WINDOWS\system32\dot3ui.dll
    2008-11-13 21:51:28 ----N---- C:\WINDOWS\system32\dot3svc.dll
    2008-11-13 21:51:28 ----N---- C:\WINDOWS\system32\dot3msm.dll
    2008-11-13 21:51:28 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
    2008-11-13 21:51:28 ----N---- C:\WINDOWS\system32\dot3dlg.dll
    2008-11-13 21:51:27 ----N---- C:\WINDOWS\system32\dot3cfg.dll
    2008-11-13 21:51:27 ----N---- C:\WINDOWS\system32\dot3api.dll
    2008-11-13 21:51:24 ----N---- C:\WINDOWS\system32\dimsroam.dll
    2008-11-13 21:51:24 ----N---- C:\WINDOWS\system32\dimsntfy.dll
    2008-11-13 21:51:23 ----N---- C:\WINDOWS\system32\dhcpqec.dll
    2008-11-13 21:51:19 ----N---- C:\WINDOWS\system32\credssp.dll
    2008-11-13 21:51:10 ----N---- C:\WINDOWS\system32\bitsprx4.dll
    2008-11-13 21:51:10 ----N---- C:\WINDOWS\system32\azroles.dll
    2008-11-13 21:51:08 ----N---- C:\WINDOWS\system32\ativtmxx.dll
    2008-11-13 21:51:06 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
    2008-11-13 21:51:06 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
    2008-11-13 21:50:56 ----N---- C:\WINDOWS\system32\aaclient.dll
    2008-11-13 20:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
    2008-11-13 20:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB939373$
    2008-11-13 20:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB930494$
    2008-11-13 20:43:46 ----HDC---- C:\WINDOWS\$NtUninstallKB938464_0$
    2008-11-13 20:43:36 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
    2008-11-13 20:43:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
    2008-11-13 20:42:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$
    2008-11-13 20:42:34 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
    2008-11-13 20:42:26 ----HDC---- C:\WINDOWS\$NtUninstallKB942831$
    2008-11-13 20:42:20 ----HDC---- C:\WINDOWS\$NtUninstallKB926247$
    2008-11-13 20:42:09 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP10$
    2008-11-13 20:41:07 ----D---- C:\WINDOWS\pss
    2008-11-13 20:35:46 ----D---- C:\Documents and Settings\All Users\Application Data\LogiShrd
    2008-11-13 20:35:44 ----D---- C:\Documents and Settings\DAD\Application Data\Logitech
    2008-11-13 20:34:34 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
    2008-11-13 20:33:31 ----A---- C:\WINDOWS\system32\BtCoreIf.dll
    2008-11-13 20:33:27 ----A---- C:\WINDOWS\system32\KemXML.dll
    2008-11-13 20:33:27 ----A---- C:\WINDOWS\system32\KemWnd.dll
    2008-11-13 20:33:27 ----A---- C:\WINDOWS\system32\kemutb.dll
    2008-11-13 20:33:24 ----A---- C:\WINDOWS\system32\KemUtil.dll
    2008-11-13 20:32:54 ----D---- C:\Documents and Settings\All Users\Application Data\Logitech
    2008-11-13 20:32:48 ----D---- C:\Program Files\Common Files\Logishrd
    2008-11-13 20:32:45 ----D---- C:\Program Files\Logitech
    2008-11-13 20:32:44 ----D---- C:\Documents and Settings\DAD\Application Data\InstallShield
    2008-11-13 20:27:16 ----D---- C:\Documents and Settings\DAD\Application Data\Mozilla
    2008-11-13 20:26:12 ----D---- C:\Program Files\Mozilla Firefox
    2008-11-13 20:12:18 ----D---- C:\Program Files\VS Revo Group
    2008-11-13 20:10:38 ----D---- C:\Documents and Settings\DAD\Application Data\Comodo
    2008-11-13 20:08:15 ----D---- C:\Program Files\AWS
    2008-11-13 20:08:15 ----D---- C:\Documents and Settings\DAD\Application Data\WeatherBug
    2008-11-13 20:07:49 ----N---- C:\WINDOWS\kb913800.exe
    2008-11-13 20:05:41 ----D---- C:\WINDOWS\system32\PreInstall
    2008-11-13 20:05:40 ----N---- C:\WINDOWS\system32\spmsg.dll
    2008-11-13 20:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
    2008-11-13 20:05:39 ----HD---- C:\WINDOWS\$hf_mig$
    2008-11-13 20:01:29 ----D---- C:\Documents and Settings\All Users\Application Data\comodo
    2008-11-13 20:01:29 ----A---- C:\WINDOWS\system32\guard32.dll
    2008-11-13 20:01:28 ----D---- C:\Program Files\COMODO
    2008-11-13 19:47:22 ----N---- C:\WINDOWS\system32\ati2sgag.exe
    2008-11-13 19:47:04 ----D---- C:\Program Files\ATI Technologies
    2008-11-13 19:46:32 ----A---- C:\WINDOWS\system32\Oemdspif.dll
    2008-11-13 19:46:32 ----A---- C:\WINDOWS\system32\ativvaxx.dll
    2008-11-13 19:46:32 ----A---- C:\WINDOWS\system32\ativcoxx.dll
    2008-11-13 19:46:32 ----A---- C:\WINDOWS\system32\atitvo32.dll
    2008-11-13 19:46:32 ----A---- C:\WINDOWS\system32\atipdlxx.dll
    2008-11-13 19:46:31 ----A---- C:\WINDOWS\system32\atioglxx.dll
    2008-11-13 19:46:31 ----A---- C:\WINDOWS\system32\atioglx1.dll
    2008-11-13 19:46:31 ----A---- C:\WINDOWS\system32\atikvmag.dll
    2008-11-13 19:46:31 ----A---- C:\WINDOWS\system32\atiiiexx.dll
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ATIDEMGR.dll
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ati3duag.dll
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ati2evxx.exe
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ati2evxx.dll
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ati2edxx.dll
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ati2dvag.dll
    2008-11-13 19:46:30 ----A---- C:\WINDOWS\system32\ati2cqag.dll
    2008-11-13 19:41:59 ----D---- C:\WINDOWS\system32\SoftwareDistribution
    2008-11-13 19:39:08 ----D---- C:\drvrtmp
    2008-11-13 19:39:08 ----A---- C:\WINDOWS\system32\Prounstl.exe
    2008-11-13 19:39:08 ----A---- C:\WINDOWS\system32\IntelNic.dll
    2008-11-13 19:39:08 ----A---- C:\WINDOWS\system32\e100bmsg.dll
    2008-11-13 19:38:30 ----A---- C:\WINDOWS\ModemLog_Conexant D850 56K V.9x DFVc Modem.txt
    2008-11-13 19:38:24 ----D---- C:\Program Files\CONEXANT
    2008-11-13 19:38:20 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
    2008-11-13 19:38:20 ----A---- C:\WINDOWS\system32\HSFCI008.dll
    2008-11-13 19:37:02 ----D---- C:\WINDOWS\system32\ReinstallBackups
    2008-11-13 19:37:02 ----D---- C:\Program Files\Intel
    2008-11-13 19:36:13 ----A---- C:\WINDOWS\stsystra.exe
    2008-11-13 19:36:09 ----A---- C:\WINDOWS\system32\ksuser.dll
    2008-11-13 19:36:07 ----A---- C:\WINDOWS\system32\staco.dll
    2008-11-13 19:35:56 ----HDC---- C:\WINDOWS\$NtUninstallKB835221WXP$
    2008-11-13 19:35:54 ----HD---- C:\Program Files\InstallShield Installation Information
    2008-11-13 19:35:54 ----D---- C:\Program Files\SigmaTel
    2008-11-13 19:35:54 ----A---- C:\WINDOWS\system32\stacapi.dll
    2008-11-13 19:35:07 ----SHD---- C:\RECYCLER
    2008-11-13 19:35:06 ----D---- C:\WINDOWS\system32\vmm32
    2008-11-13 19:35:06 ----D---- C:\Program Files\Dell
    2008-11-13 19:34:51 ----D---- C:\Program Files\Common Files\InstallShield
    2008-11-13 19:32:46 ----D---- C:\WINDOWS\IIS Temporary Compressed Files
    2008-11-13 19:32:31 ----D---- C:\WINDOWS\system32\Cache
    2008-11-13 19:32:13 ----A---- C:\WINDOWS\system32\snprfdll.dll
    2008-11-13 19:32:13 ----A---- C:\WINDOWS\system32\smtpctrs.ini
    2008-11-13 19:32:13 ----A---- C:\WINDOWS\system32\smtpctrs.dll
    2008-11-13 19:32:13 ----A---- C:\WINDOWS\system32\regtrace.exe
    2008-11-13 19:32:13 ----A---- C:\WINDOWS\system32\ntfsdrct.ini
    2008-11-13 19:32:13 ----A---- C:\WINDOWS\system32\fcachdll.dll
    2008-11-13 19:32:13 ----A---- C:\WINDOWS\system32\adsiisex.dll
    2008-11-13 19:31:57 ----A---- C:\WINDOWS\system32\w3svapi.dll
    2008-11-13 19:31:57 ----A---- C:\WINDOWS\system32\w3ctrs.ini
    2008-11-13 19:31:57 ----A---- C:\WINDOWS\system32\w3ctrs.dll
    2008-11-13 19:31:57 ----A---- C:\WINDOWS\system32\axperf.ini
    2008-11-13 19:31:57 ----A---- C:\WINDOWS\system32\aspperf.dll
    2008-11-13 19:31:56 ----A---- C:\WINDOWS\system32\wamregps.dll
    2008-11-13 19:31:56 ----A---- C:\WINDOWS\system32\inetsloc.dll
    2008-11-13 19:31:56 ----A---- C:\WINDOWS\system32\iisrstap.dll
    2008-11-13 19:31:56 ----A---- C:\WINDOWS\system32\iisreset.exe
    2008-11-13 19:31:56 ----A---- C:\WINDOWS\system32\ftpsapi2.dll
    2008-11-13 19:31:55 ----A---- C:\WINDOWS\system32\simptcp.dll
    2008-11-13 19:31:55 ----A---- C:\WINDOWS\system32\infoctrs.ini
    2008-11-13 19:31:55 ----A---- C:\WINDOWS\system32\infoctrs.dll
    2008-11-13 19:31:55 ----A---- C:\WINDOWS\system32\iismui.dll
    2008-11-13 19:31:55 ----A---- C:\WINDOWS\system32\convlog.exe
    2008-11-13 19:31:55 ----A---- C:\WINDOWS\system32\admxprox.dll
    2008-11-13 19:31:51 ----A---- C:\WINDOWS\system32\smtpapi.dll
    2008-11-13 19:31:51 ----A---- C:\WINDOWS\system32\rwnh.dll
    2008-11-13 19:31:50 ----A---- C:\WINDOWS\system32\infoadmn.dll
    2008-11-13 19:31:50 ----A---- C:\WINDOWS\system32\iisrtl.dll
    2008-11-13 19:31:50 ----A---- C:\WINDOWS\system32\iismap.dll
    2008-11-13 19:31:50 ----A---- C:\WINDOWS\system32\iisext.dll
    2008-11-13 19:31:50 ----A---- C:\WINDOWS\system32\exstrace.dll
    2008-11-13 19:31:50 ----A---- C:\WINDOWS\system32\adsiis.dll
    2008-11-13 19:31:50 ----A---- C:\WINDOWS\system32\admwprox.dll
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\staxmem.dll
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\snmptrap.exe
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\snmpmib.dll
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\snmp.exe
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\iprip.dll
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\hostmib.dll
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\evntwin.exe
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\evntcmd.exe
    2008-11-13 19:31:48 ----A---- C:\WINDOWS\system32\evntagnt.dll
    2008-11-13 19:31:47 ----A---- C:\WINDOWS\system32\lmmib2.dll
    2008-11-13 19:31:32 ----D---- C:\WINDOWS\system32\msmq
    2008-11-13 19:31:31 ----D---- C:\WINDOWS\system32\Logfiles
    2008-11-13 19:31:31 ----D---- C:\Inetpub
    2008-11-13 19:29:01 ----D---- C:\Documents and Settings\DAD\Application Data\Identities
    2008-11-13 19:26:40 ----D---- C:\WINDOWS\RegisteredPackages
    2008-11-13 19:25:20 ----HDC---- C:\WINDOWS\$NtUninstallKB900325$
    2008-11-13 19:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB902841$
    2008-11-13 19:24:52 ----HDC---- C:\WINDOWS\$NtUninstallKB888795$
    2008-11-13 19:24:43 ----HDC---- C:\WINDOWS\$NtUninstallKB899510$
    2008-11-13 19:24:35 ----HDC---- C:\WINDOWS\$NtUninstallKB899337$
    2008-11-13 19:24:33 ----A---- C:\WINDOWS\system32\xpsp3res.dll
    2008-11-13 19:24:26 ----HDC---- C:\WINDOWS\$NtUninstallKB895961$
    2008-11-13 19:24:19 ----HDC---- C:\WINDOWS\$NtUninstallKB891593$
    2008-11-13 19:24:02 ----A---- C:\WINDOWS\system32\spupdsvc.exe
    2008-11-13 19:24:01 ----HDC---- C:\WINDOWS\$NtUninstallKB903157$
    2008-11-13 19:22:05 ----D---- C:\WINDOWS\system32\URTTemp
    2008-11-13 19:21:43 ----D---- C:\Program Files\RGB
    2008-11-13 19:20:13 ----D---- C:\Documents and Settings\All Users\Application Data\DIGStream
    2008-11-13 19:20:12 ----D---- C:\Program Files\DIGStream
    2008-11-13 19:14:08 ----SD---- C:\Documents and Settings\DAD\Application Data\Microsoft
    2008-11-13 19:14:08 ----ASH---- C:\Documents and Settings\DAD\Application Data\desktop.ini
    2008-11-13 19:13:20 ----D---- C:\WINDOWS\SoftwareDistribution
    2008-11-13 19:13:17 ----SD---- C:\WINDOWS\system32\Microsoft
    2008-11-13 19:13:16 ----A---- C:\WINDOWS\SchedLgU.Txt
    2008-11-13 18:48:45 ----D---- C:\Program Files\xerox
    2008-11-13 18:48:44 ----D---- C:\WINDOWS\system32\xircom
    2008-11-13 18:48:44 ----D---- C:\Program Files\microsoft frontpage
    2008-11-13 18:48:10 ----D---- C:\DELL
    2008-11-13 18:48:03 ----A---- C:\WINDOWS\control.ini
    2008-11-13 18:48:03 ----A---- C:\AUTOEXEC.BAT
    2008-11-13 18:47:51 ----A---- C:\WINDOWS\OEWABLog.txt
    2008-11-13 18:47:48 ----A---- C:\WINDOWS\system32\mapi32.dll
    2008-11-13 18:46:36 ----SD---- C:\WINDOWS\Downloaded Program Files
    2008-11-13 18:46:36 ----RD---- C:\WINDOWS\Offline Web Pages
    2008-11-13 18:46:36 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
    2008-11-13 18:46:29 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
    2008-11-13 18:46:24 ----HD---- C:\Program Files\WindowsUpdate
    2008-11-13 18:46:05 ----D---- C:\WINDOWS\system32\DirectX
    2008-11-13 18:45:47 ----A---- C:\WINDOWS\system32\atrace.dll
    2008-11-13 18:45:45 ----A---- C:\WINDOWS\system32\desktop.ini
    2008-11-13 18:45:45 ----A---- C:\WINDOWS\desktop.ini
    2008-11-13 18:45:41 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
    2008-11-13 18:45:40 ----A---- C:\WINDOWS\system32\acctres.dll
    2008-11-13 18:45:39 ----D---- C:\Program Files\Common Files\Services
    2008-11-13 18:45:38 ----SD---- C:\WINDOWS\Tasks
    2008-11-13 18:45:38 ----A---- C:\WINDOWS\system32\icfgnt5.dll
    2008-11-13 18:45:37 ----D---- C:\Program Files\Common Files\MSSoap
    2008-11-13 18:45:34 ----D---- C:\WINDOWS\srchasst
    2008-11-13 18:45:33 ----D---- C:\WINDOWS\system32\Macromed
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wuweb.dll
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wups.dll
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wucltui.dll
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wuauserv.dll
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wuaueng1.dll
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wuaueng.dll
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wuauclt1.exe
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wuauclt.exe
    2008-11-13 18:45:30 ----A---- C:\WINDOWS\system32\wuapi.dll
    2008-11-13 18:45:29 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
    2008-11-13 18:45:29 ----A---- C:\WINDOWS\system32\qmgr.dll
    2008-11-13 18:45:29 ----A---- C:\WINDOWS\system32\bitsprx3.dll
    2008-11-13 18:45:29 ----A---- C:\WINDOWS\system32\bitsprx2.dll
    2008-11-13 18:45:23 ----A---- C:\WINDOWS\system32\safrslv.dll
    2008-11-13 18:45:23 ----A---- C:\WINDOWS\system32\safrdm.dll
    2008-11-13 18:45:23 ----A---- C:\WINDOWS\system32\safrcdlg.dll
    2008-11-13 18:45:23 ----A---- C:\WINDOWS\system32\racpldlg.dll
    2008-11-13 18:45:20 ----D---- C:\WINDOWS\system32\Restore
    2008-11-13 18:45:20 ----A---- C:\WINDOWS\system32\srrstr.dll
    2008-11-13 18:45:20 ----A---- C:\WINDOWS\system32\fltmc.exe
    2008-11-13 18:45:20 ----A---- C:\WINDOWS\system32\fltlib.dll
    2008-11-13 18:45:19 ----A---- C:\WINDOWS\system32\srsvc.dll
    2008-11-13 18:45:19 ----A---- C:\WINDOWS\system32\srclient.dll
    2008-11-13 18:45:19 ----A---- C:\WINDOWS\system32\nmmkcert.dll
    2008-11-13 18:45:19 ----A---- C:\WINDOWS\system32\mnmdd.dll
    2008-11-13 18:45:19 ----A---- C:\WINDOWS\system32\isrdbg32.dll
    2008-11-13 18:45:19 ----A---- C:\WINDOWS\system32\ils.dll
    2008-11-13 18:45:18 ----A---- C:\WINDOWS\system32\msconf.dll
    2008-11-13 18:45:18 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
    2008-11-13 18:45:16 ----D---- C:\Program Files\NetMeeting
    2008-11-13 18:45:16 ----A---- C:\WINDOWS\system32\msoert2.dll
    2008-11-13 18:45:16 ----A---- C:\WINDOWS\system32\msoeacct.dll
    2008-11-13 18:45:16 ----A---- C:\WINDOWS\system32\inetres.dll
    2008-11-13 18:45:15 ----A---- C:\WINDOWS\system32\inetcomm.dll
    2008-11-13 18:45:14 ----D---- C:\Program Files\Outlook Express
    2008-11-13 18:45:14 ----A---- C:\WINDOWS\system32\schedsvc.dll
    2008-11-13 18:45:14 ----A---- C:\WINDOWS\system32\mstinit.exe
    2008-11-13 18:45:14 ----A---- C:\WINDOWS\system32\mstask.dll
    2008-11-13 18:45:13 ----A---- C:\WINDOWS\system32\isign32.dll
    2008-11-13 18:45:13 ----A---- C:\WINDOWS\system32\inetcfg.dll
    2008-11-13 18:45:13 ----A---- C:\WINDOWS\system32\icwphbk.dll
    2008-11-13 18:45:13 ----A---- C:\WINDOWS\system32\icwdial.dll
    2008-11-13 18:45:09 ----D---- C:\Program Files\Common Files\System
    2008-11-13 18:45:08 ----D---- C:\Program Files\Internet Explorer
    2008-11-13 18:44:31 ----RSD---- C:\WINDOWS\assembly
    2008-11-13 18:43:59 ----D---- C:\Program Files\ComPlus Applications
    2008-11-13 18:43:58 ----A---- C:\WINDOWS\vbaddin.ini
    2008-11-13 18:43:58 ----A---- C:\WINDOWS\vb.ini
    2008-11-13 18:43:53 ----D---- C:\WINDOWS\Registration
    2008-11-13 18:43:46 ----D---- C:\Program Files\Online Services
    2008-11-13 18:43:31 ----D---- C:\WINDOWS\Microsoft.NET
    2008-11-13 18:43:28 ----D---- C:\Program Files\Windows Media Player
    2008-11-13 18:43:12 ----D---- C:\Program Files\Windows Plus
    2008-11-13 18:43:04 ----A---- C:\WINDOWS\system32\igdetect.dll
    2008-11-13 18:43:03 ----A---- C:\WINDOWS\system32\mhn.dll
    2008-11-13 18:42:59 ----D---- C:\Program Files\Movie Maker
    2008-11-13 18:42:08 ----D---- C:\Program Files\Messenger
    2008-11-13 18:42:06 ----D---- C:\Program Files\MSN Gaming Zone
    2008-11-13 18:42:06 ----A---- C:\WINDOWS\system32\write.exe
    2008-11-13 18:41:59 ----A---- C:\WINDOWS\system32\sndvol32.exe
    2008-11-13 18:41:59 ----A---- C:\WINDOWS\system32\hticons.dll
    2008-11-13 18:41:58 ----A---- C:\WINDOWS\system32\winchat.exe
    2008-11-13 18:41:58 ----A---- C:\WINDOWS\system32\avwav.dll
    2008-11-13 18:41:58 ----A---- C:\WINDOWS\system32\avtapi.dll
    2008-11-13 18:41:58 ----A---- C:\WINDOWS\system32\avmeter.dll
    2008-11-13 18:41:53 ----A---- C:\WINDOWS\system32\getuname.dll
    2008-11-13 18:41:53 ----A---- C:\WINDOWS\system32\charmap.exe
    2008-11-13 18:41:52 ----A---- C:\WINDOWS\system32\winmine.exe
    2008-11-13 18:41:52 ----A---- C:\WINDOWS\system32\sol.exe
    2008-11-13 18:41:52 ----A---- C:\WINDOWS\system32\mshearts.exe
    2008-11-13 18:41:52 ----A---- C:\WINDOWS\system32\calc.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\usrlogon.cmd
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\tsshutdn.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\tslabels.ini
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\tskill.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\tsdiscon.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\tscon.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\shadow.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\rwinsta.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\reset.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\regini.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\qwinsta.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\qappsrv.exe
    2008-11-13 18:41:51 ----A---- C:\WINDOWS\system32\freecell.exe
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\mtxlegih.dll
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\mtxex.dll
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\mtxdm.dll
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\msg.exe
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\msdtcprf.ini
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\logoff.exe
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
    2008-11-13 18:41:50 ----A---- C:\WINDOWS\system32\cdmodem.dll
    2008-11-13 18:41:49 ----A---- C:\WINDOWS\system32\stclient.dll
    2008-11-13 18:41:49 ----A---- C:\WINDOWS\system32\comsnap.dll
    2008-11-13 18:41:49 ----A---- C:\WINDOWS\system32\comrepl.dll
    2008-11-13 18:41:49 ----A---- C:\WINDOWS\system32\comaddin.dll
    2008-11-13 18:41:45 ----A---- C:\WINDOWS\system32\wmimgmt.msc
    2008-11-13 18:41:36 ----D---- C:\Program Files\MSN
    2008-11-13 18:41:35 ----A---- C:\WINDOWS\system32\sndrec32.exe
    2008-11-13 18:41:35 ----A---- C:\WINDOWS\system32\mplay32.exe
    2008-11-13 18:41:35 ----A---- C:\WINDOWS\system32\accwiz.exe
    2008-11-13 18:41:34 ----D---- C:\Program Files\Windows NT
    2008-11-13 18:41:34 ----A---- C:\WINDOWS\system32\spider.exe
    2008-11-13 18:41:34 ----A---- C:\WINDOWS\system32\mspaint.exe
    2008-11-13 18:41:34 ----A---- C:\WINDOWS\system32\hypertrm.dll
    2008-11-13 18:41:34 ----A---- C:\WINDOWS\system32\clipbrd.exe
    2008-11-13 18:41:33 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
    2008-11-13 18:41:33 ----A---- C:\WINDOWS\system32\sessmgr.exe
    2008-11-13 18:41:33 ----A---- C:\WINDOWS\system32\remotepg.dll
    2008-11-13 18:41:33 ----A---- C:\WINDOWS\system32\rdshost.exe
    2008-11-13 18:41:33 ----A---- C:\WINDOWS\system32\rdsaddin.exe
    2008-11-13 18:41:33 ----A---- C:\WINDOWS\system32\mstscax.dll
    2008-11-13 18:41:33 ----A---- C:\WINDOWS\system32\mstsc.exe
    2008-11-13 18:41:32 ----D---- C:\WINDOWS\system32\MsDtc
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\tscupgrd.exe
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\termsrv.dll
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\rdpwsx.dll
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\rdpsnd.dll
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\rdpclip.exe
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\rdchost.dll
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\qprocess.exe
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\icaapi.dll
    2008-11-13 18:41:32 ----A---- C:\WINDOWS\system32\cfgbkend.dll
    2008-11-13 18:41:31 ----A---- C:\WINDOWS\system32\xolehlp.dll
    2008-11-13 18:41:31 ----A---- C:\WINDOWS\system32\mtxoci.dll
    2008-11-13 18:41:31 ----A---- C:\WINDOWS\system32\msdtctm.dll
    2008-11-13 18:41:31 ----A---- C:\WINDOWS\system32\msdtcprx.dll
    2008-11-13 18:41:31 ----A---- C:\WINDOWS\system32\msdtclog.dll
    2008-11-13 18:41:31 ----A---- C:\WINDOWS\system32\msdtc.exe
    2008-11-13 18:41:30 ----D---- C:\WINDOWS\system32\Com
    2008-11-13 18:41:30 ----A---- C:\WINDOWS\system32\colbact.dll
    2008-11-13 18:41:30 ----A---- C:\WINDOWS\system32\clbcatex.dll
    2008-11-13 18:41:30 ----A---- C:\WINDOWS\system32\catsrvut.dll
    2008-11-13 18:41:30 ----A---- C:\WINDOWS\system32\catsrvps.dll
    2008-11-13 18:41:30 ----A---- C:\WINDOWS\system32\catsrv.dll
    2008-11-13 18:41:29 ----A---- C:\WINDOWS\system32\comuid.dll
    2008-11-13 18:41:29 ----A---- C:\WINDOWS\system32\comsvcs.dll
    2008-11-13 18:41:29 ----A---- C:\WINDOWS\system32\clbcatq.dll
    2008-11-13 18:41:24 ----A---- C:\WINDOWS\system32\servdeps.dll
    2008-11-13 18:41:24 ----A---- C:\WINDOWS\system32\mmfutil.dll
    2008-11-13 18:41:24 ----A---- C:\WINDOWS\system32\licwmi.dll
    2008-11-13 18:41:24 ----A---- C:\WINDOWS\system32\cmprops.dll
    2008-11-13 13:40:27 ----A---- C:\WINDOWS\system32\h323log.txt
    2008-11-13 13:38:16 ----A---- C:\WINDOWS\system32\usbui.dll
    2008-11-13 13:37:09 ----A---- C:\WINDOWS\imsins.BAK
    2008-11-13 13:37:06 ----SHD---- C:\WINDOWS\Installer
    2008-11-13 13:37:06 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
    2008-11-13 13:37:05 ----D---- C:\Program Files\Common Files\ODBC
    2008-11-13 13:37:05 ----A---- C:\WINDOWS\ODBCINST.INI
    2008-11-13 13:37:02 ----RD---- C:\Program Files
    2008-11-13 13:37:02 ----D---- C:\Program Files\Common Files\SpeechEngines
    2008-11-13 13:37:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
    2008-11-13 13:37:02 ----D---- C:\Program Files\Common Files
    2008-11-13 13:37:00 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
    2008-11-13 13:37:00 ----RA---- C:\WINDOWS\system32\kbdazel.dll
    2008-11-13 13:36:59 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdycc.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbduzb.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdur.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdtat.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdru1.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdru.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdmon.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdbu.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdblr.dll
    2008-11-13 13:36:58 ----RA---- C:\WINDOWS\system32\kbdaze.dll
    2008-11-13 13:36:57 ----RA---- C:\WINDOWS\system32\kbdhept.dll
    2008-11-13 13:36:57 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
    2008-11-13 13:36:57 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
    2008-11-13 13:36:57 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
    2008-11-13 13:36:57 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
    2008-11-13 13:36:57 ----RA---- C:\WINDOWS\system32\kbdhe.dll
    2008-11-13 13:36:57 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
    2008-11-13 13:36:56 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
    2008-11-13 13:36:56 ----RA---- C:\WINDOWS\system32\kbdlv.dll
    2008-11-13 13:36:56 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
    2008-11-13 13:36:56 ----RA---- C:\WINDOWS\system32\kbdlt.dll
    2008-11-13 13:36:56 ----RA---- C:\WINDOWS\system32\kbdest.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdycl.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdsl.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdro.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdpl.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdhu.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdcz.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\kbdcr.dll
    2008-11-13 13:36:54 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
    2008-11-13 13:36:52 ----A---- C:\WINDOWS\system32\spxcoins.dll
    2008-11-13 13:36:52 ----A---- C:\WINDOWS\system32\irclass.dll
    2008-11-13 13:36:52 ----A---- C:\WINDOWS\system32\EqnClass.Dll
    2008-11-13 13:36:52 ----A---- C:\WINDOWS\system32\dgsetup.dll
    2008-11-13 13:36:52 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
    2008-11-13 13:36:50 ----N---- C:\WINDOWS\system32\CONFIG.TMP
    2008-11-13 13:36:50 ----A---- C:\WINDOWS\TASKMAN.EXE
    2008-11-13 13:36:50 ----A---- C:\WINDOWS\system32\batt.dll
    2008-11-13 13:36:50 ----A---- C:\WINDOWS\notepad.exe
    2008-11-13 13:36:49 ----A---- C:\WINDOWS\system32\storprop.dll
    2008-11-13 13:36:41 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
    2008-11-13 13:36:38 ----RA---- C:\WINDOWS\SET8.tmp
    2008-11-13 13:36:36 ----RA---- C:\WINDOWS\SET4.tmp
    2008-11-13 13:36:35 ----RA---- C:\WINDOWS\SET3.tmp
    2008-11-13 13:36:31 ----D---- C:\WINDOWS\system32\CatRoot2
    2008-11-13 13:36:31 ----D---- C:\WINDOWS\system32\CatRoot
    2008-11-13 13:36:25 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
    2008-11-13 13:36:09 ----A---- C:\WINDOWS\setuplog.txt
    2008-11-13 13:36:06 ----SHD---- C:\System Volume Information
    2008-11-13 13:36:06 ----D---- C:\Documents and Settings
    2008-11-13 13:35:05 ----SH---- C:\boot.ini
    2008-11-13 13:29:29 ----RSHDC---- C:\WINDOWS\system32\dllcache
    2008-11-13 13:29:29 ----RSD---- C:\WINDOWS\Fonts
    2008-11-13 13:29:29 ----RD---- C:\WINDOWS\Web
    2008-11-13 13:29:29 ----HD---- C:\WINDOWS\inf
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\WinSxS
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\twain_32
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Temp
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\wins
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\wbem
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\usmt
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\spool
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\ShellExt
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\Setup
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\ras
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\oobe
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\npp
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\mui
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\inetsrv
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\IME
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\icsxml
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\ias
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\export
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\drivers
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\dhcp
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\config
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\3com_dmi
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\3076
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\2052
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1054
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1042
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1041
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1037
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1033
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1031
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1028
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32\1025
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system32
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\system
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\security
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Resources
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\repair
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Provisioning
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\PeerNet
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\pchealth
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\mui
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\msapps
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\msagent
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Media
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\java
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\ime
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Help
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\ehome
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Driver Cache
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\dell
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Debug
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Cursors
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Connection Wizard
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\Config
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\AppPatch
    2008-11-13 13:29:29 ----D---- C:\WINDOWS\addins
    2008-11-13 13:29:29 ----D---- C:\WINDOWS

    ======List of files/folders modified in the last 3 months======

    2008-11-15 07:01:21 ----A---- C:\WINDOWS\win.ini
    2008-11-15 07:01:21 ----A---- C:\WINDOWS\system.ini
    2008-10-16 14:09:44 ----A---- C:\WINDOWS\system32\wups2.dll
    2008-10-16 14:09:44 ----A---- C:\WINDOWS\system32\cdm.dll
    2008-10-16 14:09:40 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
    2008-10-16 14:07:44 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
    2008-10-16 14:07:14 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
    2008-10-15 11:34:24 ----A---- C:\WINDOWS\system32\netapi32.dll
    2008-10-03 12:41:15 ----A---- C:\WINDOWS\system32\ieframe.dll
    2008-09-04 12:15:04 ----A---- C:\WINDOWS\system32\msxml3.dll
    2008-08-28 02:46:02 ----A---- C:\WINDOWS\system32\win32spl.dll
    2008-08-28 02:46:02 ----A---- C:\WINDOWS\system32\msw3prt.dll
    2008-08-27 13:54:32 ----A---- C:\WINDOWS\system32\mshtml.dll
    2008-08-26 02:24:31 ----A---- C:\WINDOWS\system32\wininet.dll
    2008-08-26 02:24:31 ----A---- C:\WINDOWS\system32\webcheck.dll
    2008-08-26 02:24:31 ----A---- C:\WINDOWS\system32\urlmon.dll
    2008-08-26 02:24:30 ----N---- C:\WINDOWS\system32\pngfilt.dll
    2008-08-26 02:24:30 ----N---- C:\WINDOWS\system32\occache.dll
    2008-08-26 02:24:30 ----N---- C:\WINDOWS\system32\mstime.dll
    2008-08-26 02:24:30 ----N---- C:\WINDOWS\system32\msrating.dll
    2008-08-26 02:24:30 ----N---- C:\WINDOWS\system32\jsproxy.dll
    2008-08-26 02:24:30 ----A---- C:\WINDOWS\system32\url.dll
    2008-08-26 02:24:30 ----A---- C:\WINDOWS\system32\mshtmled.dll
    2008-08-26 02:24:30 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
    2008-08-26 02:24:30 ----A---- C:\WINDOWS\system32\msfeeds.dll
    2008-08-26 02:24:29 ----N---- C:\WINDOWS\system32\iernonce.dll
    2008-08-26 02:24:29 ----N---- C:\WINDOWS\system32\iedkcs32.dll
    2008-08-26 02:24:29 ----A---- C:\WINDOWS\system32\iertutil.dll
    2008-08-26 02:24:28 ----N---- C:\WINDOWS\system32\ieaksie.dll
    2008-08-26 02:24:28 ----N---- C:\WINDOWS\system32\ieakeng.dll
    2008-08-26 02:24:28 ----N---- C:\WINDOWS\system32\extmgr.dll
    2008-08-26 02:24:28 ----N---- C:\WINDOWS\system32\dxtrans.dll
    2008-08-26 02:24:28 ----N---- C:\WINDOWS\system32\dxtmsft.dll
    2008-08-26 02:24:28 ----A---- C:\WINDOWS\system32\ieapfltr.dll
    2008-08-26 02:24:28 ----A---- C:\WINDOWS\system32\icardie.dll
    2008-08-26 02:24:28 ----A---- C:\WINDOWS\system32\advpack.dll
    2008-08-25 03:38:00 ----A---- C:\WINDOWS\system32\ieudinit.exe
    2008-08-25 03:37:59 ----N---- C:\WINDOWS\system32\ie4uinit.exe
    2008-08-23 00:54:51 ----N---- C:\WINDOWS\system32\ieakui.dll

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2008-11-13 99856]
    R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2008-11-13 31504]
    R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
    R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
    R1 Tcpip6;Microsoft IPv6 Protocol Driver; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-04-13 225664]
    R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-09 11043]
    R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-08-03 1273344]
    R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-14 155648]
    R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
    R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
    R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2003-11-17 1042432]
    R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2003-11-17 212224]
    R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
    R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
    R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2008-02-29 28944]
    R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
    R3 MQAC;Message Queuing access control; \??\C:\WINDOWS\system32\drivers\mqac.sys []
    R3 RMCAST;Reliable Multicast Protocol driver; \??\C:\WINDOWS\system32\drivers\RMCast.sys []
    R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2005-11-16 1047816]
    R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
    R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
    R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
    R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
    R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
    R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2003-11-17 680704]
    S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
    S3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
    S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
    S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
    S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
    S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
    S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []


    -----------------EOF-----------------
     
  2. 2008/11/15
    PAULDEP

    PAULDEP Well-Known Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    562
    Likes Received:
    1
    This is part 2 from pauldep;


    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 6to4;IPv6 Helper Service; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
    R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-08-03 380928]
    R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2008-11-13 614136]
    R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2005-10-11 237568]
    R2 ehSched;Media Center Scheduler Service; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 102912]
    R2 IISADMIN;IIS Admin; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-13 15360]
    R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 97432]
    R2 Iprip;RIP Listener; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336]
    R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
    R2 MSMQ;Message Queuing; C:\WINDOWS\system32\mqsvc.exe [2008-04-13 4608]
    R2 MSMQTriggers;Message Queuing Triggers; C:\WINDOWS\system32\mqtgsvc.exe [2008-04-13 117248]
    R2 SimpTcp;Simple TCP/IP Services; C:\WINDOWS\system32\tcpsvcs.exe [2004-08-10 19456]
    R2 SMTPSVC;Simple Mail Transfer Protocol (SMTP); C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-13 15360]
    R2 SNMP;SNMP Service; C:\WINDOWS\System32\snmp.exe [2008-04-13 33280]
    R2 W3SVC;World Wide Web Publishing; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-13 15360]
    S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2005-08-05 516096]
    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
    S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]
    S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336]
    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
    S3 p2pgasvc;Peer Networking Group Authentication; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
    S3 p2pimsvc;Peer Networking Identity Manager; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
    S3 p2psvc;Peer Networking; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
    S3 PNRPSvc;Peer Name Resolution Protocol; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
    S3 SNMPTRAP;SNMP Trap Service; C:\WINDOWS\System32\snmptrap.exe [2008-04-13 8704]
    S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-08-03 38912]
     

  3. to hide this advert.

  4. 2008/11/15
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi PAULDEP
    Not seeing any signs of it, but lets get a on line scan to make sure.

    Download ATF Cleaner by Atribune and save it to your Desktop.
    This is a good tool to get rid of the temporary garbage you pick up while surfing the net.
    Double click ATF-Cleaner.exe to run the program.
    Check the boxes to the left of:

    Windows Temp
    Current User Temp
    All Users Temp
    Cookies
    Temporary Internet Files
    Prefetch
    Java Cache
    Recycle bin


    The rest are optional - if you want it to remove everything check "Select All ".
    Finally, click Empty Selected. When you get the "Done Cleaning" message, click OK


    Please do this.

    Please go HERE to run Panda's ActiveScan
    • Once you are on the Panda site click the Scan your PC button
    • A new window will open...click the Check Now button
    • Enter your Country
    • Enter your State/Province
    • Enter your e-mail address and click send
    • Select either Home User or Company
    • Click the big Scan Now button
    • If it wants to install an ActiveX component allow it
    • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
    • When download is complete, click on My Computer to start the scan
    • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report

    Thanks
    Geri
     
    Geri,
    #3
  5. 2008/11/15
    PAULDEP

    PAULDEP Well-Known Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    562
    Likes Received:
    1
    Awesome Geri, thanks for the GREAT news,,,,also thanks for the heads up on ATF
    ~~Paul
     
  6. 2008/11/16
    PAULDEP

    PAULDEP Well-Known Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    562
    Likes Received:
    1
    Clean as a whistle Geri, you did a great job in showing me the way...Thanks so much for everything!!!

    ~Paul
     
  7. 2008/11/16
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    You are welcome.

    You can delete RSIT.exe and this folder C:\rsit

    Please look at this link for some preventive recommendations, It could keep you from ending up back here to the Malware and Virus Removal Forums.
    http://www.windowsbbs.com/showthread.php?t=67958

    Surf Safely
    Geri
     
    Geri,
    #6
  8. 2008/11/18
    PAULDEP

    PAULDEP Well-Known Member Thread Starter

    Joined:
    2002/01/07
    Messages:
    562
    Likes Received:
    1
    Geri that link "An ounce of prevention is worth a pound of cure" is just loaded with great info. I sent it on to my Bro In-law because he always gets infections on his PC. I also sent it on to my friends because I think its a very helpful load of knowledge that anyone could use. I have added a few of the programs to my PC to work along with my AV & Firewall. I love this Forum, the people and the site NEVER lets me down......God Bless....
    ~Paul
     
  9. 2008/11/18
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Thanks Paul
    It is full of good info. Hope your friends and family use it.

    Geri
     
    Geri,
    #8

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.