My homepage was hijecked by Secure32, and I cant seem to get rid of it (I've read here a a few ways and none worked) I dont have "Paytime" progrram on my computer. Please Help!

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop. Doubleclick on the HJTsetup.exe icon on your desktop. By default it will install to C:\Program Files\Hijack This. Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue. Put a check by "Create a desktop icon" then click "Next" again. Continue to follow the rest of the prompts from there. At the final dialogue box click "Finish" and it will launch Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly. Please download SmitFraudFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop. !!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!! Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd" Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that report into your next reply. Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

Hijack That log: Logfile of HijackThis v1.99.1 Scan saved at 7:37:16 PM, on 1/13/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\WinFast\WFTVFM\WFWIZ.exe C:\Program Files\ICQLite\ICQLite.exe C:\WINDOWS\system32\RUNDLL32.exe C:\Program Files\MSN Messenger\MsnMsgr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINDOWS\system32\msasvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\HJT\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.gmail.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.exe C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [AutoSys] C:\WINDOWS\system32\autosys.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.exe" /background O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?lin... O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windows... O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.co... O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: winrvc32 - winrvc32.dll (file missing) O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\system32\msasvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe Smit log: SmitFraudFix v2.132 Scan done at 19:38:14.03, Sat 01/13/2007 Run from C:\HJT\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guy »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guy\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Guy\FAVORI~1 »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32 »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End thank you

Please download ATF-Cleaner to your desktop from this link http://www.atribune.org/content/view/19/2/ We will need it later in safe mode Download and install AVG Anti-Spyware We will need this later in safe mode Be sure to update AVG Anti- Spyware Temporarily disable any of the following anti-spyware realtime protection programs that you may have Temporarily Disable Realtime Protection Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok. Set up the computer to view hidden files by going to start>control panel>folder options>view tab>tick the circle beside "show hidden files and folders" and untick the box beside "hide extensions of known file types" and "hide protected system operating files">apply>ok. Next, please reboot your computer in Safe Mode by doing the following : Restart your computer After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; Instead of Windows loading as normal, a menu with options should appear; Select the first option, to run Windows in Safe Mode, then press "Enter". Choose your usual account. Run Hijack This from safe mode, close all windows except Hijack This, place a check to the left of the following items and press "fix checked": R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html O4 - HKLM\..\Run: [AutoSys] C:\WINDOWS\system32\autosys.exe O20 - Winlogon Notify: winrvc32 - winrvc32.dll (file missing) O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\system32\msasvc.exe Exit Hijack This but remain in safe mode. Navigate to and delete these files if found: c:\secure32.html C:\WINDOWS\system32\autosys.exe C:\WINDOWS\System32\winrvc32.dll C:\WINDOWS\system32\msasvc.exe Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. In Safe Mode, run AVG Anti-spyware and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared. AVG Anti-Spyware will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. AVG Anti-Spyware will display "All actions have been applied" on the right hand side. Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop). Post the AVG-AntiSpyware log and a new Hijack This log please. Please download ComboFix to the desktop from this link: http://download.bleepingcomputer.com/sUBs/combofix.exe Double-click combofix.exe Follow the prompts. (Don't click on the window while the program is running, it may cause your system to hang.) Please post the combofix.txt log. Download the latest version of http://java.sun.com/javase/downloads/index.jsp Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications". Click the "Download" button to the right. Check the box that says: "Accept License Agreement". The page will refresh. Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop. Close any programs you may have running - especially your web browser. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the "coffee cup" icon next to it. Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions. Reboot your computer once all Java components are removed . Then from your desktop double-click on jre-1_6_0-windowsi586-p.exe to install the newest version. You should consider adding "Spywareblaster" to your arsenol of antispyware tools, just do a google search for spywareblaster, download it,install it, and update it. Its free and runs in the background, so you don't actually run it, and re-writes malicious script before it can install on your computer. Look for updates weekly as there is no auto-update on the free version.

Done Ht log: Logfile of HijackThis v1.99.1 Scan saved at 11:38:40 PM, on 1/14/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.exe C:\HJT\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.gmail.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.google.com/mail/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.exe C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.exe" /background O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?lin... O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windows... O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.co... O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\system32\msasvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe AVG log: AVG Anti-Spyware - Scan Report + Created at: 11:52:40 PM 1/14/2007 + Scan result: C:\System Volume Information\_restore{CFF43F50-8E18-4907-97C5-4721D19740A6}\RP46\A0024497.exe -> Trojan.Sinowal.bh : No action taken. ::Report end Conbofix log: "Guy" - 07-01-14 23:53:16 Service Pack 2 ComboFix 07-01-14.2 - Running from: "C:\HJT" (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.dll C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00002.dll C:\WINDOWS\system32\unsvchosts.lzma C:\Program Files\Common Files\{3C676~1 ((((((((((((((((((((((((((((((( Files Created from 2006-12-14 to 2007-01-14 )))))))))))))))))))))))))))))))))) 2007-01-14 21:34 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-01-13 21:19 438,272 -ra------ C:\WINDOWS\system32\vp6vfw.dll 2007-01-13 19:38 1,892 --a------ C:\WINDOWS\system32\tmp.reg 2007-01-13 18:07 <DIR> d-------- C:\WINDOWS\pss 2007-01-13 17:57 <DIR> d-------- C:\HJT 2007-01-13 17:29 <DIR> d--h----- C:\WINDOWS\PIF 2007-01-10 22:44 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll 2007-01-07 22:47 208,896 --a------ C:\WINDOWS\system32\NVUNINST.exe 2007-01-07 22:47 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups 2007-01-07 22:47 <DIR> d-------- C:\NVIDIA 2007-01-07 21:02 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\nView_Profiles 2007-01-07 13:08 <DIR> d-------- C:\DOCUME~1\Guy\Contacts 2007-01-07 13:07 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE 2007-01-07 13:07 <DIR> d-------- C:\Program Files\MSN Messenger 2007-01-07 00:17 <DIR> d-------- C:\Temp 2007-01-05 12:09 <DIR> d-------- C:\WINDOWS\Sun 2007-01-05 12:09 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Sun 2007-01-04 00:16 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys 2007-01-04 00:16 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys 2007-01-04 00:16 <DIR> d-------- C:\Program Files\Alcohol Soft 2007-01-03 23:22 98,304 --a------ C:\WINDOWS\system32CmdLineExt.dll 2007-01-03 20:49 <DIR> dr-h----- C:\$VAULT$.AVG 2007-01-03 20:48 2,560 --a------ C:\WINDOWS\system32\unsvchosts.exe 2007-01-03 19:44 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2007-01-03 17:16 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Google 2007-01-03 17:07 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys 2007-01-03 17:07 53,760 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2007-01-03 17:07 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys 2007-01-03 17:07 48,000 --a------ C:\WINDOWS\system32\drivers\OVCam2.sys 2007-01-03 17:07 44,544 --a------ C:\WINDOWS\system32\OVUI2.dll 2007-01-03 17:07 41,984 --a------ C:\WINDOWS\system32\OVUI2RC.dll 2007-01-03 17:07 39,424 --a------ C:\WINDOWS\system32\OVComS.exe 2007-01-03 17:07 351,616 --a------ C:\WINDOWS\system32\drivers\OVCodek2.sys 2007-01-03 17:07 28,032 --a------ C:\WINDOWS\system32\drivers\OVCD.sys 2007-01-03 17:07 20,480 --a------ C:\WINDOWS\system32\OVComC.dll 2007-01-03 17:07 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS 2007-01-03 17:07 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys 2007-01-03 17:07 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys 2007-01-03 17:07 116,736 --a------ C:\WINDOWS\system32\OVCodec2.dll 2007-01-03 17:07 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys 2007-01-03 17:07 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys 2007-01-03 17:05 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Apple Computer 2007-01-03 17:04 <DIR> d-------- C:\WINDOWS\system32\appmgmt 2007-01-03 17:02 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll 2007-01-03 17:02 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll 2007-01-03 17:02 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll 2007-01-03 17:02 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll 2007-01-03 17:02 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2007-01-03 17:02 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-01-03 17:02 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll 2007-01-03 17:02 <DIR> d-------- C:\Program Files\Common Files\Ahead 2007-01-03 17:02 <DIR> d-------- C:\Program Files\Common Files\Adobe 2007-01-03 17:02 <DIR> d-------- C:\Program Files\Ahead 2007-01-03 17:01 <DIR> d-------- C:\DOCUME~1\Guy\WINDOWS 2007-01-03 16:59 <DIR> d-------- C:\Program Files\QuickTime 2007-01-03 16:59 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Apple Computer 2007-01-03 16:58 20,640 --------- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-01-03 16:58 109,568 --------- C:\WINDOWS\system32\pxinsi64.exe 2007-01-03 16:58 108,544 --------- C:\WINDOWS\system32\pxcpyi64.exe 2007-01-03 16:58 <DIR> d-------- C:\Program Files\DivX 2007-01-03 16:58 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\DivX 2007-01-03 16:56 <DIR> d-------- C:\Program Files\Google 2007-01-03 16:56 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Google 2007-01-03 16:56 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Azureus 2007-01-03 16:55 <DIR> d-------- C:\Program Files\Java 2007-01-03 16:53 <DIR> d-------- C:\Program Files\Common Files\Java 2007-01-03 16:50 <DIR> d-------- C:\Program Files\Azureus 2007-01-03 16:40 <DIR> d-------- C:\Program Files\ICQToolbar 2007-01-03 16:40 <DIR> d-------- C:\Program Files\ICQLite 2007-01-03 16:40 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\ICQLite 2007-01-02 23:34 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe 2007-01-02 23:34 <DIR> d-------- C:\WINDOWS\nview 2007-01-02 21:45 <DIR> d--hs---- C:\WINDOWS\CSC 2006-12-31 18:58 <DIR> d-------- C:\Program Files\Common Files\Ulead Systems 2006-12-31 18:57 <DIR> d-------- C:\WINDOWS\RegisteredPackages 2006-12-31 18:57 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Ulead Systems 2006-12-31 18:56 9,446 --a------ C:\WINDOWS\system32\drivers\WFIOCTL.sys 2006-12-31 18:56 49,152 --------- C:\WINDOWS\system32\TempDel.exe 2006-12-31 18:56 <DIR> d-------- C:\Program Files\WinFast 2006-12-30 18:30 <DIR> d-------- C:\Program Files\Common Files\SystemRequirementsLab 2006-12-29 21:00 6,144 -ra------ C:\WINDOWS\system32\kbdth3.dll 2006-12-29 21:00 6,144 -ra------ C:\WINDOWS\system32\kbdth2.dll 2006-12-29 21:00 6,144 -ra------ C:\WINDOWS\system32\kbdinpun.dll 2006-12-29 21:00 6,144 --a------ C:\WINDOWS\system32\ftlx041e.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdvntc.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdurdu.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdth1.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdth0.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdsyr2.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdsyr1.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdintel.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdintam.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinmar.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinkan.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinhin.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinguj.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdindev.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdheb.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdfa.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbddiv2.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbddiv1.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbda3.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbda2.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbda1.dll 2006-12-29 21:00 5,632 --a------ C:\WINDOWS\system32\kbdusa.dll 2006-12-29 21:00 5,120 -ra------ C:\WINDOWS\system32\kbdgeo.dll 2006-12-29 21:00 5,120 -ra------ C:\WINDOWS\system32\kbdarmw.dll 2006-12-29 21:00 5,120 -ra------ C:\WINDOWS\system32\kbdarme.dll 2006-12-29 21:00 185,344 --a------ C:\WINDOWS\system32\Thawbrkr.dll 2006-12-29 21:00 10,752 --a------ C:\WINDOWS\system32\c_iscii.dll 2006-12-29 20:47 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2006-12-29 20:46 57,472 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2006-12-29 20:45 74,240 --a------ C:\WINDOWS\system32\usbui.dll 2006-12-29 20:44 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2006-12-29 20:44 9,008 --a------ C:\WINDOWS\system\VER.DLL 2006-12-29 20:44 85,020 --a------ C:\WINDOWS\system32\dgsetup.dll 2006-12-29 20:44 82,944 --a------ C:\WINDOWS\system\OLECLI.DLL 2006-12-29 20:44 8,704 --a------ C:\WINDOWS\system32\batt.dll 2006-12-29 20:44 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2006-12-29 20:44 74,752 --a------ C:\WINDOWS\system32\storprop.dll 2006-12-29 20:44 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll 2006-12-29 20:44 69,584 --a------ C:\WINDOWS\system\AVICAP.DLL 2006-12-29 20:44 69,120 --a------ C:\WINDOWS\NOTEPAD.exe 2006-12-29 20:44 68,768 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2006-12-29 20:44 5,120 --a------ C:\WINDOWS\system\SHELL.DLL 2006-12-29 20:44 32,816 --a------ C:\WINDOWS\system\COMMDLG.DLL 2006-12-29 20:44 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll 2006-12-29 20:44 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL 2006-12-29 20:44 19,200 --a------ C:\WINDOWS\system\TAPI.DLL 2006-12-29 20:44 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2006-12-29 20:44 15,360 --a------ C:\WINDOWS\TASKMAN.exe 2006-12-29 20:44 13,312 --a------ C:\WINDOWS\system32\irclass.dll 2006-12-29 20:44 126,912 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2006-12-29 20:44 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2006-12-29 20:44 109,456 --a------ C:\WINDOWS\system\AVIFILE.DLL 2006-12-29 20:44 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2006-12-29 20:44 <DIR> dr------- C:\Program Files 2006-12-29 20:44 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Documents 2006-12-29 20:44 <DIR> d--hs---- C:\WINDOWS\Installer 2006-12-29 20:44 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines 2006-12-29 20:44 <DIR> d-------- C:\Program Files\Common Files\ODBC 2006-12-29 20:42 <DIR> d--hs---- C:\System Volume Information 2006-12-29 20:42 <DIR> d-------- C:\WINDOWS\system32\CatRoot2 2006-12-29 20:42 <DIR> d-------- C:\WINDOWS\system32\CatRoot 2006-12-29 20:42 <DIR> d-------- C:\Documents and Settings 2006-12-29 20:37 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache 2006-12-29 20:37 <DIR> dr--s---- C:\WINDOWS\Fonts 2006-12-29 20:37 <DIR> dr------- C:\WINDOWS\Web 2006-12-29 20:37 <DIR> d--h----- C:\WINDOWS\inf 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\WinSxS 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\twain_32 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\wins 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\wbem 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\usmt 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\spool 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\ShellExt 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\Setup 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\ras 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\oobe 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\npp 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\mui 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\inetsrv 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\IME 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\icsxml 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\ias 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\export 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\drivers\etc 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\drivers 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\dhcp 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\config 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\3com_dmi 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\3076 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\2052 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1054 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1042 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1041 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1037 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1033 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1031 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1028 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1025 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\security 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Resources 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\repair 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Provisioning 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\PeerNet 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\pchealth 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\mui 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\msapps 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\msagent 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Media 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\java 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\ime 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Help 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\ehome 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Driver Cache 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Debug 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Cursors 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Connection Wizard 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Config 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\AppPatch 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\addins 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS 2006-12-29 16:34 17,920 --a------ C:\WINDOWS\system32\mdimon.dll 2006-12-29 16:33 <DIR> d-------- C:\WINDOWS\SHELLNEW 2006-12-29 16:33 <DIR> d-------- C:\Program Files\Microsoft ActiveSync 2006-12-29 16:29 <DIR> dr-h----- C:\MSOCache 2006-12-29 16:26 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Spybot - Search & Destroy 2006-12-29 16:21 816,672 --a------ C:\WINDOWS\system32\drivers\avg7core.sys 2006-12-29 16:21 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2006-12-29 16:21 4,960 --a------ C:\WINDOWS\system32\drivers\avgtdi.sys 2006-12-29 16:21 4,224 --a------ C:\WINDOWS\system32\drivers\avg7rsw.sys 2006-12-29 16:21 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll 2006-12-29 16:21 3,968 --a------ C:\WINDOWS\system32\drivers\avgclean.sys 2006-12-29 16:21 28,416 --a------ C:\WINDOWS\system32\drivers\avg7rsxp.sys 2006-12-29 16:21 <DIR> d-------- C:\Program Files\Grisoft 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\LOCALS~1\Application Data\AVG7 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\AVG7 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Grisoft 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\avg7 2006-12-29 16:17 <DIR> d-------- C:\Program Files\RFA 2006-12-29 16:06 <DIR> d--hs---- C:\RECYCLER 2006-12-29 15:53 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Windows Genuine Advantage 2006-12-29 15:49 <DIR> d-------- C:\WINDOWS\system32\PreInstall 2006-12-29 15:48 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2006-12-29 15:29 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution 2006-12-29 15:28 4,527,488 --a------ C:\WINDOWS\system32\nv4_disp.dll 2006-12-29 15:28 3,994,624 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys 2006-12-29 15:26 9,600 --a------ C:\WINDOWS\system32\drivers\WINFOXIO.sys 2006-12-29 15:26 <DIR> d-------- C:\WINDOWS\system32\WinFox 2006-12-29 15:25 <DIR> d---s---- C:\DOCUME~1\Guy\UserData 2006-12-29 15:23 <DIR> d-------- C:\WINDOWS\system32\Lang 2006-12-29 15:21 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2006-12-29 15:21 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2006-12-29 15:21 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2006-12-29 15:21 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2006-12-29 15:21 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2006-12-29 15:21 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2006-12-29 15:21 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2006-12-29 15:21 40,960 -r------- C:\WINDOWS\system32\ChCfg.exe 2006-12-29 15:21 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2006-12-29 15:21 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2006-12-29 15:21 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2006-12-29 15:21 143,360 -r------- C:\WINDOWS\system32\RtlCPAPI.dll 2006-12-29 15:21 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2006-12-29 15:20 9,709,568 -r------- C:\WINDOWS\RTLCPL.exe 2006-12-29 15:20 86,016 -r------- C:\WINDOWS\SoundMan.exe 2006-12-29 15:20 69,632 -r------- C:\WINDOWS\Alcmtr.exe 2006-12-29 15:20 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2006-12-29 15:20 487,424 -r------- C:\WINDOWS\RtlExUpd.dll 2006-12-29 15:20 4,353,024 -r------- C:\WINDOWS\system32\drivers\RtkHDAud.Sys 2006-12-29 15:20 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2006-12-29 15:20 364,544 -r------- C:\WINDOWS\RtlUpd.exe 2006-12-29 15:20 327,168 --a------ C:\WINDOWS\IsUninst.exe 2006-12-29 15:20 250,240 --a------ C:\WINDOWS\system32\drivers\yk51x86.sys 2006-12-29 15:20 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2006-12-29 15:20 2,879,488 -r------- C:\WINDOWS\SkyTel.exe 2006-12-29 15:20 2,808,832 -r------- C:\WINDOWS\alcwzrd.exe 2006-12-29 15:20 2,158,592 -r------- C:\WINDOWS\MicCal.exe 2006-12-29 15:20 16,261,632 -r------- C:\WINDOWS\RTHDCPL.exe 2006-12-29 15:20 <DIR> d--h----- C:\Program Files\InstallShield Installation Information 2006-12-29 15:20 <DIR> d-------- C:\WINDOWS\system32\RTCOM 2006-12-29 15:20 <DIR> d-------- C:\Program Files\Realtek 2006-12-29 15:20 <DIR> d-------- C:\Program Files\GIGABYTE 2006-12-29 15:20 <DIR> d-------- C:\Program Files\Common Files\InstallShield 2006-12-29 13:29 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2006-12-29 13:29 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys 2006-12-29 13:24 <DIR> d-------- C:\WINDOWS\SoftwareDistribution 2006-12-29 13:24 <DIR> d-------- C:\WINDOWS\Prefetch 2006-12-29 13:12 112,128 --a------ C:\WINDOWS\system32\mapi32.dll 2006-12-29 13:12 0 -rahs---- C:\MSDOS.SYS 2006-12-29 13:12 0 -rahs---- C:\IO.SYS 2006-12-29 13:12 0 --a------ C:\CONFIG.SYS 2006-12-29 13:12 0 --a------ C:\AUTOEXEC.BAT 2006-12-29 13:12 <DIR> d-------- C:\WINDOWS\system32\xircom 2006-12-29 13:12 <DIR> d-------- C:\Program Files\microsoft frontpage 2006-12-29 13:11 <DIR> dr------- C:\WINDOWS\Offline Web Pages 2006-12-29 13:11 <DIR> d--hs---- C:\DOCUME~1\ALLUSE~1\DRM 2006-12-29 13:11 <DIR> d--h----- C:\Program Files\WindowsUpdate 2006-12-29 13:11 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files 2006-12-29 13:10 81,920 --a------ C:\WINDOWS\system32\ils.dll 2006-12-29 13:10 8,192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2006-12-29 13:10 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2006-12-29 13:10 7,168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2006-12-29 13:10 69,632 --a------ C:\WINDOWS\system32\msconf.dll 2006-12-29 13:10 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll 2006-12-29 13:10 67,584 --a------ C:\WINDOWS\system32\srclient.dll 2006-12-29 13:10 64,512 --a------ C:\WINDOWS\system32\acctres.dll 2006-12-29 13:10 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll 2006-12-29 13:10 48,128 --a------ C:\WINDOWS\system32\inetres.dll 2006-12-29 13:10 465,176 --a------ C:\WINDOWS\system32\wuapi.dll 2006-12-29 13:10 45,568 --a------ C:\WINDOWS\system32\safrslv.dll 2006-12-29 13:10 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2006-12-29 13:10 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll 2006-12-29 13:10 41,240 --a------ C:\WINDOWS\system32\wups.dll 2006-12-29 13:10 382,464 --a------ C:\WINDOWS\system32\qmgr.dll 2006-12-29 13:10 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll 2006-12-29 13:10 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2006-12-29 13:10 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2006-12-29 13:10 29,696 --a------ C:\WINDOWS\system32\safrdm.dll 2006-12-29 13:10 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2006-12-29 13:10 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll 2006-12-29 13:10 239,104 --a------ C:\WINDOWS\system32\srrstr.dll 2006-12-29 13:10 23,040 --a------ C:\WINDOWS\system32\fltmc.exe 2006-12-29 13:10 194,328 --a------ C:\WINDOWS\system32\wuaueng1.dll 2006-12-29 13:10 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2006-12-29 13:10 173,536 --a------ C:\WINDOWS\system32\wuweb.dll 2006-12-29 13:10 172,312 --a------ C:\WINDOWS\system32\wuauclt1.exe 2006-12-29 13:10 170,496 --a------ C:\WINDOWS\system32\srsvc.dll 2006-12-29 13:10 16,896 --a------ C:\WINDOWS\system32\fltlib.dll 2006-12-29 13:10 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2006-12-29 13:10 128,896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys 2006-12-29 13:10 127,256 --a------ C:\WINDOWS\system32\wucltui.dll 2006-12-29 13:10 124,184 --a------ C:\WINDOWS\system32\wuauclt.exe 2006-12-29 13:10 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2006-12-29 13:10 11,264 --a------ C:\WINDOWS\system32\atrace.dll 2006-12-29 13:10 105,984 --a------ C:\WINDOWS\system32\msoert2.dll 2006-12-29 13:10 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll 2006-12-29 13:10 <DIR> d---s---- C:\WINDOWS\Tasks 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\system32\Restore 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\system32\Macromed 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\system32\DirectX 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\srchasst 2006-12-29 13:10 <DIR> d-------- C:\Program Files\Movie Maker 2006-12-29 13:10 <DIR> d-------- C:\Program Files\Common Files\MSSoap 2006-12-29 13:09 81,920 --a------ C:\WINDOWS\system32\isign32.dll 2006-12-29 13:09 73,728 --a------ C:\WINDOWS\system32\icwdial.dll 2006-12-29 13:09 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll 2006-12-29 13:09 5,632 --a------ C:\WINDOWS\system32\write.exe 2006-12-29 13:09 274,944 --a------ C:\WINDOWS\system32\mstask.dll 2006-12-29 13:09 274,432 --a------ C:\WINDOWS\system32\inetcfg.dll 2006-12-29 13:09 190,976 --a------ C:\WINDOWS\system32\schedsvc.dll 2006-12-29 13:09 12,288 --a------ C:\WINDOWS\system32\mstinit.exe 2006-12-29 13:09 <DIR> d-------- C:\WINDOWS\Registration 2006-12-29 13:09 <DIR> d-------- C:\Program Files\Online Services 2006-12-29 13:09 <DIR> d-------- C:\Program Files\MSN Gaming Zone 2006-12-29 13:09 <DIR> d-------- C:\Program Files\Messenger 2006-12-29 13:08 97,792 --a------ C:\WINDOWS\system32\comrepl.dll 2006-12-29 13:08 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll 2006-12-29 13:08 93,696 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2006-12-29 13:08 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll 2006-12-29 13:08 9,728 --a------ C:\WINDOWS\system32\reset.exe 2006-12-29 13:08 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2006-12-29 13:08 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll 2006-12-29 13:08 80,384 --a------ C:\WINDOWS\system32\charmap.exe 2006-12-29 13:08 73,216 --a------ C:\WINDOWS\system32\avwav.dll 2006-12-29 13:08 67,072 --a------ C:\WINDOWS\system32\rdshost.exe 2006-12-29 13:08 655,360 --a------ C:\WINDOWS\system32\mstscax.dll 2006-12-29 13:08 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll 2006-12-29 13:08 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe 2006-12-29 13:08 605,696 --a------ C:\WINDOWS\system32\getuname.dll 2006-12-29 13:08 60,416 --a------ C:\WINDOWS\system32\remotepg.dll 2006-12-29 13:08 60,416 --a------ C:\WINDOWS\system32\colbact.dll 2006-12-29 13:08 6,144 --a------ C:\WINDOWS\system32\msdtc.exe 2006-12-29 13:08 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll 2006-12-29 13:08 58,880 --a------ C:\WINDOWS\system32\licwmi.dll 2006-12-29 13:08 56,832 --a------ C:\WINDOWS\system32\sol.exe 2006-12-29 13:08 56,320 --a------ C:\WINDOWS\system32\servdeps.dll 2006-12-29 13:08 55,296 --a------ C:\WINDOWS\system32\freecell.exe 2006-12-29 13:08 540,160 --a------ C:\WINDOWS\system32\comuid.dll 2006-12-29 13:08 54,272 --a------ C:\WINDOWS\system32\stclient.dll 2006-12-29 13:08 538,624 --a------ C:\WINDOWS\system32\spider.exe 2006-12-29 13:08 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2006-12-29 13:08 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll 2006-12-29 13:08 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2006-12-29 13:08 44,544 --a------ C:\WINDOWS\system32\hticons.dll 2006-12-29 13:08 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll 2006-12-29 13:08 407,552 --a------ C:\WINDOWS\system32\mstsc.exe 2006-12-29 13:08 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2006-12-29 13:08 4,096 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2006-12-29 13:08 4,096 --a------ C:\WINDOWS\system32\mtxex.dll 2006-12-29 13:08 38,912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2006-12-29 13:08 35,328 --a------ C:\WINDOWS\system32\winchat.exe 2006-12-29 13:08 347,136 --a------ C:\WINDOWS\system32\hypertrm.dll 2006-12-29 13:08 343,040 --a------ C:\WINDOWS\system32\mspaint.exe 2006-12-29 13:08 33,792 --a------ C:\WINDOWS\system32\regini.exe 2006-12-29 13:08 295,424 --a------ C:\WINDOWS\system32\termsrv.dll 2006-12-29 13:08 25,600 --a------ C:\WINDOWS\system32\comaddin.dll 2006-12-29 13:08 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2006-12-29 13:08 227,840 --a------ C:\WINDOWS\system32\avtapi.dll 2006-12-29 13:08 225,792 --a------ C:\WINDOWS\system32\catsrv.dll 2006-12-29 13:08 22,016 --a------ C:\WINDOWS\system32\qwinsta.exe 2006-12-29 13:08 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2006-12-29 13:08 20,992 --a------ C:\WINDOWS\system32\msg.exe 2006-12-29 13:08 20,480 --a------ C:\WINDOWS\system32\qprocess.exe 2006-12-29 13:08 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll 2006-12-29 13:08 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2006-12-29 13:08 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2006-12-29 13:08 185,344 --a------ C:\WINDOWS\system32\cmprops.dll 2006-12-29 13:08 183,808 --a------ C:\WINDOWS\system32\accwiz.exe 2006-12-29 13:08 17,408 --a------ C:\WINDOWS\system32\mmfutil.dll 2006-12-29 13:08 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2006-12-29 13:08 16,896 --a------ C:\WINDOWS\system32\tsshutdn.exe 2006-12-29 13:08 16,896 --a------ C:\WINDOWS\system32\qappsrv.exe 2006-12-29 13:08 16,384 --a------ C:\WINDOWS\system32\tskill.exe 2006-12-29 13:08 16,384 --a------ C:\WINDOWS\system32\avmeter.dll 2006-12-29 13:08 15,872 --a------ C:\WINDOWS\system32\rwinsta.exe 2006-12-29 13:08 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll 2006-12-29 13:08 15,360 --a------ C:\WINDOWS\system32\logoff.exe 2006-12-29 13:08 147,968 --a------ C:\WINDOWS\system32\rdchost.dll 2006-12-29 13:08 147,456 --a------ C:\WINDOWS\system32\comsnap.dll 2006-12-29 13:08 140,800 --a------ C:\WINDOWS\system32\sessmgr.exe 2006-12-29 13:08 14,848 --a------ C:\WINDOWS\system32\tsdiscon.exe 2006-12-29 13:08 14,848 --a------ C:\WINDOWS\system32\tscon.exe 2006-12-29 13:08 14,848 --a------ C:\WINDOWS\system32\shadow.exe 2006-12-29 13:08 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2006-12-29 13:08 138,752 --a------ C:\WINDOWS\system32\sndvol32.exe 2006-12-29 13:08 131,584 --a------ C:\WINDOWS\system32\sndrec32.exe 2006-12-29 13:08 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2006-12-29 13:08 126,976 --a------ C:\WINDOWS\system32\mshearts.exe 2006-12-29 13:08 123,392 --a------ C:\WINDOWS\system32\mplay32.exe 2006-12-29 13:08 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2006-12-29 13:08 119,808 --a------ C:\WINDOWS\system32\winmine.exe 2006-12-29 13:08 114,688 --a------ C:\WINDOWS\system32\calc.exe 2006-12-29 13:08 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll 2006-12-29 13:08 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll 2006-12-29 13:08 11,264 --a------ C:\WINDOWS\system32\icaapi.dll 2006-12-29 13:08 102,912 --a------ C:\WINDOWS\system32\clipbrd.exe 2006-12-29 13:08 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll 2006-12-29 13:08 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd 2006-12-29 13:08 <DIR> d-------- C:\WINDOWS\system32\MsDtc 2006-12-29 13:08 <DIR> d-------- C:\WINDOWS\system32\Com 2006-12-29 13:08 <DIR> d-------- C:\Program Files\Windows NT (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-01-14 23:42 -------- d---s---- C:\DOCUME~1\Guy\Application Data\microsoft 2007-01-13 23:56 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys 2006-12-30 18:25 -------- d-------- C:\DOCUME~1\Guy\Application Data\macromedia 2006-12-29 20:44 62 --ahs---- C:\DOCUME~1\Guy\Application Data\desktop.ini 2006-12-29 13:28 -------- d-------- C:\DOCUME~1\Guy\Application Data\identities 2006-12-12 18:30 520192 --a------ C:\WINDOWS\system32\divxsm.exe 2006-12-12 18:30 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2006-12-12 18:30 200704 --a------ C:\WINDOWS\system32\ssldivx.dll 2006-12-12 18:30 1044480 --a------ C:\WINDOWS\system32\libdivx.dll 2006-12-12 18:25 806912 --a------ C:\WINDOWS\system32\divx_xx0c.dll 2006-12-12 18:25 806912 --a------ C:\WINDOWS\system32\divx_xx07.dll 2006-12-12 18:25 790528 --a------ C:\WINDOWS\system32\divx_xx11.dll 2006-12-12 18:25 73728 --a------ C:\WINDOWS\system32\dpl100.dll 2006-12-12 18:25 635486 --a------ C:\WINDOWS\system32\divx.dll 2006-12-12 18:25 593920 --a------ C:\WINDOWS\system32\dpugui11.dll 2006-12-12 18:25 57344 --a------ C:\WINDOWS\system32\dpv11.dll 2006-12-12 18:25 53248 --a------ C:\WINDOWS\system32\dpugui10.dll 2006-12-12 18:25 344064 --a------ C:\WINDOWS\system32\dpus11.dll 2006-12-12 18:25 294912 --a------ C:\WINDOWS\system32\dpu11.dll 2006-12-12 18:25 294912 --a------ C:\WINDOWS\system32\dpu10.dll 2006-12-12 18:25 196608 --a------ C:\WINDOWS\system32\dtu100.dll 2006-12-12 18:24 12288 --a------ C:\WINDOWS\system32\divxwmpexttype.dll 2006-12-12 18:24 118784 --a------ C:\WINDOWS\system32\divxcodecupdatechecker.exe 2006-12-07 17:02 2174976 --a------ C:\WINDOWS\system32\wmvcore.dll 2006-10-22 12:22 888832 --a------ C:\WINDOWS\system32\nvmobls.dll 2006-10-22 12:22 86016 --a------ C:\WINDOWS\system32\nvmctray.dll 2006-10-22 12:22 81920 --a------ C:\WINDOWS\system32\nvwddi.dll 2006-10-22 12:22 794624 --a------ C:\WINDOWS\system32\nvcplui.exe 2006-10-22 12:22 7700480 --a------ C:\WINDOWS\system32\nvcpl.dll 2006-10-22 12:22 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll 2006-10-22 12:22 5644288 --a------ C:\WINDOWS\system32\nvoglnt.dll 2006-10-22 12:22 5619712 --a------ C:\WINDOWS\system32\nvdisps.dll 2006-10-22 12:22 5255168 --a------ C:\WINDOWS\system32\nvdispsr.dll 2006-10-22 12:22 466944 --a------ C:\WINDOWS\system32\nvshell.dll 2006-10-22 12:22 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll 2006-10-22 12:22 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll 2006-10-22 12:22 442368 --a------ C:\WINDOWS\system32\nvappbar.exe 2006-10-22 12:22 425984 --a------ C:\WINDOWS\system32\keystone.exe 2006-10-22 12:22 35840 --a------ C:\WINDOWS\system32\nvcodins.dll 2006-10-22 12:22 35840 --a------ C:\WINDOWS\system32\nvcod.dll 2006-10-22 12:22 3203072 --a------ C:\WINDOWS\system32\nvgamesr.dll 2006-10-22 12:22 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll 2006-10-22 12:22 3047424 --a------ C:\WINDOWS\system32\nvgames.dll 2006-10-22 12:22 2973696 --a------ C:\WINDOWS\system32\nvvitvsr.dll 2006-10-22 12:22 2924544 --a------ C:\WINDOWS\system32\nvvitvs.dll 2006-10-22 12:22 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll 2006-10-22 12:22 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll 2006-10-22 12:22 229376 --a------ C:\WINDOWS\system32\nvmccs.dll 2006-10-22 12:22 212992 --a------ C:\WINDOWS\system32\nvapi.dll 2006-10-22 12:22 188416 --a------ C:\WINDOWS\system32\nvmccss.dll 2006-10-22 12:22 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll 2006-10-22 12:22 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll 2006-10-22 12:22 1622016 --a------ C:\WINDOWS\system32\nwiz.exe 2006-10-22 12:22 159810 --a------ C:\WINDOWS\system32\nvsvc32.exe 2006-10-22 12:22 147456 --a------ C:\WINDOWS\system32\nvcolor.exe 2006-10-22 12:22 1470464 --a------ C:\WINDOWS\system32\nview.dll 2006-10-22 12:22 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe 2006-10-22 12:22 1236992 --a------ C:\WINDOWS\system32\nvwss.dll 2006-10-22 12:22 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll 2006-10-22 12:22 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll 2006-10-19 15:56 713216 --a------ C:\WINDOWS\system32\sxs.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce] "ICQ Lite"="C:\\Program Files\\ICQLite\\ICQLite.exe -trayboot" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP" "WinFast Schedule"="C:\\Program Files\\WinFast\\WFTVFM\\WFWIZ.exe" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "ICQ Lite"="C:\\Program Files\\ICQLite\\ICQLite.exe -minimize" "NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit" "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\ 65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00 "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex] "Flag"=dword:00000002 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 Usnsvc REG_MULTI_SZ usnsvc\0\0 *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_AVGASCLN ~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ backup-20070113-182549-264 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-182549-354 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-182549-919 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-182549-524 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-182549-744 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-182549-765 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-182201-867 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-182201-692 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-182201-681 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-182201-504 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-182201-472 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-182201-243 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-181533-808 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-181533-580 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-181533-306 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-181533-203 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-181533-107 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-181533-840 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180151-204 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180151-242 O4 - HKLM\..\Run: [AutoSys] C:\WINDOWS\system32\autosys.exe backup-20070113-180151-311 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-180151-317 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180151-731 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180151-873 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180151-930 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-180135-596 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-180135-754 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180135-636 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180135-803 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180135-517 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180135-788 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-180040-975 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180040-768 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-180040-700 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180040-619 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180040-505 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180040-458 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-180030-178 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180030-889 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html backup-20070113-180030-712 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180030-979 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html backup-20070113-180030-742 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html backup-20070113-180030-962 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html Completion time: 07-01-14 23:53:52 Thank you!

Looks better. Navigate to and delete the contents of this folder(do not delete the folder): C:\HJT\hijackthis\backups. Please download Killbox by Option^Explicit. If you already have "Killbox" update to this newer version and save it to your desktop. We will need it later in safe mode. Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok. Run Hijack This from safe mode, close all windows except Hijack This, place a check to the left of the following items and press "fix checked": R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\system32\msasvc.exe Exit Hijack This but remain in safe mode. Please double-click Killbox.exe to run it. Select: Delete on Reboot then Click on the All Files button. Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy): C:\WINDOWS\system32\msasvc.exe C:\WINDOWS\system32\C:\WINDOWS\system32\unsvchosts.exe Return to Killbox, go to the File menu, and choose Paste from Clipboard. Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt. If your computer does not restart automatically, please restart it manually. Next go to start> run> type the following commands one at the time then press enter: sc stop (MsaSvc) sc delete (MsaSvc) Please download Dr Web CureIt to your desktop from this link ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe Doubleclick the drweb-cureit.exe file and Allow to run the express scan. This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan. Once the short scan has finished, mark the drives that you want to scan. Select all drives. A red dot shows which drives have been chosen. Click the green arrow at the right, and the scan will start. Click 'Yes to all' if it asks if you want to cure/move the file. When the scan has finished, look if you can click next icon next to the files found: If so, click it and then click the next icon right below and select Move incurable. This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples) After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list Save the report to your desktop. The report will be called DrWeb.csv Close Dr.Web Cureit. Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot. After reboot, post the contents of the log on your desktop. Post a new combofix log. Be sure to update your java as requested in response #3 as your computer is at risk.

Combo fix log: "Guy" - 07-01-15 15:18:28 Service Pack 2 ComboFix 07-01-14.2 - Running from: "C:\HJT" ((((((((((((((((((((((((((((((( Files Created from 2006-12-15 to 2007-01-15 )))))))))))))))))))))))))))))))))) 2007-01-15 14:58 <DIR> d-------- C:\DOCUME~1\Guy\DoctorWeb 2007-01-15 14:49 <DIR> d-------- C:\!KillBox 2007-01-15 11:32 <DIR> d-------- C:\WINDOWS\system32\WinFast 2007-01-14 23:57 <DIR> d-------- C:\Program Files\Common Files\Java 2007-01-14 21:34 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-01-13 21:19 438,272 -ra------ C:\WINDOWS\system32\vp6vfw.dll 2007-01-13 19:38 1,892 --a------ C:\WINDOWS\system32\tmp.reg 2007-01-13 18:07 <DIR> d-------- C:\WINDOWS\pss 2007-01-13 17:57 <DIR> d-------- C:\HJT 2007-01-13 17:29 <DIR> d--h----- C:\WINDOWS\PIF 2007-01-10 22:44 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll 2007-01-07 22:47 208,896 --a------ C:\WINDOWS\system32\NVUNINST.exe 2007-01-07 22:47 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups 2007-01-07 22:47 <DIR> d-------- C:\NVIDIA 2007-01-07 21:02 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\nView_Profiles 2007-01-07 13:08 <DIR> d-------- C:\DOCUME~1\Guy\Contacts 2007-01-07 13:07 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE 2007-01-07 13:07 <DIR> d-------- C:\Program Files\MSN Messenger 2007-01-07 00:17 <DIR> d-------- C:\Temp 2007-01-05 12:09 <DIR> d-------- C:\WINDOWS\Sun 2007-01-05 12:09 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Sun 2007-01-04 00:16 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys 2007-01-04 00:16 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys 2007-01-04 00:16 <DIR> d-------- C:\Program Files\Alcohol Soft 2007-01-03 23:22 98,304 --a------ C:\WINDOWS\system32CmdLineExt.dll 2007-01-03 20:49 <DIR> dr-h----- C:\$VAULT$.AVG 2007-01-03 20:48 2,560 --a------ C:\WINDOWS\system32\unsvchosts.exe 2007-01-03 19:44 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2007-01-03 17:16 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Google 2007-01-03 17:07 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys 2007-01-03 17:07 53,760 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2007-01-03 17:07 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys 2007-01-03 17:07 48,000 --a------ C:\WINDOWS\system32\drivers\OVCam2.sys 2007-01-03 17:07 44,544 --a------ C:\WINDOWS\system32\OVUI2.dll 2007-01-03 17:07 41,984 --a------ C:\WINDOWS\system32\OVUI2RC.dll 2007-01-03 17:07 39,424 --a------ C:\WINDOWS\system32\OVComS.exe 2007-01-03 17:07 351,616 --a------ C:\WINDOWS\system32\drivers\OVCodek2.sys 2007-01-03 17:07 28,032 --a------ C:\WINDOWS\system32\drivers\OVCD.sys 2007-01-03 17:07 20,480 --a------ C:\WINDOWS\system32\OVComC.dll 2007-01-03 17:07 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS 2007-01-03 17:07 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys 2007-01-03 17:07 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys 2007-01-03 17:07 116,736 --a------ C:\WINDOWS\system32\OVCodec2.dll 2007-01-03 17:07 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys 2007-01-03 17:07 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys 2007-01-03 17:05 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Apple Computer 2007-01-03 17:04 <DIR> d-------- C:\WINDOWS\system32\appmgmt 2007-01-03 17:02 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll 2007-01-03 17:02 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll 2007-01-03 17:02 364,544 --------- C:\WINDOWS\system32\TwnLib4.dll 2007-01-03 17:02 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll 2007-01-03 17:02 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2007-01-03 17:02 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll 2007-01-03 17:02 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll 2007-01-03 17:02 <DIR> d-------- C:\Program Files\Common Files\Ahead 2007-01-03 17:02 <DIR> d-------- C:\Program Files\Common Files\Adobe 2007-01-03 17:02 <DIR> d-------- C:\Program Files\Ahead 2007-01-03 17:01 <DIR> d-------- C:\DOCUME~1\Guy\WINDOWS 2007-01-03 16:59 <DIR> d-------- C:\Program Files\QuickTime 2007-01-03 16:59 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Apple Computer 2007-01-03 16:58 20,640 --------- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-01-03 16:58 109,568 --------- C:\WINDOWS\system32\pxinsi64.exe 2007-01-03 16:58 108,544 --------- C:\WINDOWS\system32\pxcpyi64.exe 2007-01-03 16:58 <DIR> d-------- C:\Program Files\DivX 2007-01-03 16:58 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\DivX 2007-01-03 16:56 <DIR> d-------- C:\Program Files\Google 2007-01-03 16:56 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Google 2007-01-03 16:56 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\Azureus 2007-01-03 16:55 <DIR> d-------- C:\Program Files\Java 2007-01-03 16:50 <DIR> d-------- C:\Program Files\Azureus 2007-01-03 16:40 <DIR> d-------- C:\Program Files\ICQToolbar 2007-01-03 16:40 <DIR> d-------- C:\Program Files\ICQLite 2007-01-03 16:40 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\ICQLite 2007-01-02 23:34 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe 2007-01-02 23:34 <DIR> d-------- C:\WINDOWS\nview 2007-01-02 21:45 <DIR> d--hs---- C:\WINDOWS\CSC 2006-12-31 18:58 <DIR> d-------- C:\Program Files\Common Files\Ulead Systems 2006-12-31 18:57 <DIR> d-------- C:\WINDOWS\RegisteredPackages 2006-12-31 18:57 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Ulead Systems 2006-12-31 18:56 <DIR> d-------- C:\Program Files\WinFast 2006-12-30 18:30 <DIR> d-------- C:\Program Files\Common Files\SystemRequirementsLab 2006-12-29 21:00 6,144 -ra------ C:\WINDOWS\system32\kbdth3.dll 2006-12-29 21:00 6,144 -ra------ C:\WINDOWS\system32\kbdth2.dll 2006-12-29 21:00 6,144 -ra------ C:\WINDOWS\system32\kbdinpun.dll 2006-12-29 21:00 6,144 --a------ C:\WINDOWS\system32\ftlx041e.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdvntc.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdurdu.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdth1.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdth0.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdsyr2.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdsyr1.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdintel.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdintam.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinmar.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinkan.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinhin.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdinguj.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdindev.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdheb.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbdfa.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbddiv2.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbddiv1.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbda3.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbda2.dll 2006-12-29 21:00 5,632 -ra------ C:\WINDOWS\system32\kbda1.dll 2006-12-29 21:00 5,632 --a------ C:\WINDOWS\system32\kbdusa.dll 2006-12-29 21:00 5,120 -ra------ C:\WINDOWS\system32\kbdgeo.dll 2006-12-29 21:00 5,120 -ra------ C:\WINDOWS\system32\kbdarmw.dll 2006-12-29 21:00 5,120 -ra------ C:\WINDOWS\system32\kbdarme.dll 2006-12-29 21:00 185,344 --a------ C:\WINDOWS\system32\Thawbrkr.dll 2006-12-29 21:00 10,752 --a------ C:\WINDOWS\system32\c_iscii.dll 2006-12-29 20:47 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2006-12-29 20:46 57,472 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2006-12-29 20:45 74,240 --a------ C:\WINDOWS\system32\usbui.dll 2006-12-29 20:44 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL 2006-12-29 20:44 9,008 --a------ C:\WINDOWS\system\VER.DLL 2006-12-29 20:44 85,020 --a------ C:\WINDOWS\system32\dgsetup.dll 2006-12-29 20:44 82,944 --a------ C:\WINDOWS\system\OLECLI.DLL 2006-12-29 20:44 8,704 --a------ C:\WINDOWS\system32\batt.dll 2006-12-29 20:44 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll 2006-12-29 20:44 74,752 --a------ C:\WINDOWS\system32\storprop.dll 2006-12-29 20:44 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll 2006-12-29 20:44 69,584 --a------ C:\WINDOWS\system\AVICAP.DLL 2006-12-29 20:44 69,120 --a------ C:\WINDOWS\NOTEPAD.exe 2006-12-29 20:44 68,768 --a------ C:\WINDOWS\system\MMSYSTEM.DLL 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll 2006-12-29 20:44 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll 2006-12-29 20:44 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll 2006-12-29 20:44 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll 2006-12-29 20:44 5,120 --a------ C:\WINDOWS\system\SHELL.DLL 2006-12-29 20:44 32,816 --a------ C:\WINDOWS\system\COMMDLG.DLL 2006-12-29 20:44 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll 2006-12-29 20:44 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL 2006-12-29 20:44 19,200 --a------ C:\WINDOWS\system\TAPI.DLL 2006-12-29 20:44 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll 2006-12-29 20:44 15,360 --a------ C:\WINDOWS\TASKMAN.exe 2006-12-29 20:44 13,312 --a------ C:\WINDOWS\system32\irclass.dll 2006-12-29 20:44 126,912 --a------ C:\WINDOWS\system\MSVIDEO.DLL 2006-12-29 20:44 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys 2006-12-29 20:44 109,456 --a------ C:\WINDOWS\system\AVIFILE.DLL 2006-12-29 20:44 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll 2006-12-29 20:44 <DIR> dr------- C:\Program Files 2006-12-29 20:44 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Documents 2006-12-29 20:44 <DIR> d--hs---- C:\WINDOWS\Installer 2006-12-29 20:44 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines 2006-12-29 20:44 <DIR> d-------- C:\Program Files\Common Files\ODBC 2006-12-29 20:42 <DIR> d--hs---- C:\System Volume Information 2006-12-29 20:42 <DIR> d-------- C:\WINDOWS\system32\CatRoot2 2006-12-29 20:42 <DIR> d-------- C:\WINDOWS\system32\CatRoot 2006-12-29 20:42 <DIR> d-------- C:\Documents and Settings 2006-12-29 20:37 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache 2006-12-29 20:37 <DIR> dr--s---- C:\WINDOWS\Fonts 2006-12-29 20:37 <DIR> dr------- C:\WINDOWS\Web 2006-12-29 20:37 <DIR> d--h----- C:\WINDOWS\inf 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\WinSxS 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\twain_32 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\wins 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\wbem 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\usmt 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\spool 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\ShellExt 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\Setup 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\ras 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\oobe 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\npp 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\mui 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\inetsrv 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\IME 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\icsxml 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\ias 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\export 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\drivers\etc 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\drivers 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\dhcp 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\config 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\3com_dmi 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\3076 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\2052 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1054 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1042 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1041 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1037 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1033 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1031 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1028 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32\1025 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system32 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\system 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\security 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Resources 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\repair 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Provisioning 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\PeerNet 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\pchealth 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\mui 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\msapps 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\msagent 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Media 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\java 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\ime 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Help 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\ehome 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Driver Cache 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Debug 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Cursors 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Connection Wizard 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\Config 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\AppPatch 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS\addins 2006-12-29 20:37 <DIR> d-------- C:\WINDOWS 2006-12-29 16:34 17,920 --a------ C:\WINDOWS\system32\mdimon.dll 2006-12-29 16:33 <DIR> d-------- C:\WINDOWS\SHELLNEW 2006-12-29 16:33 <DIR> d-------- C:\Program Files\Microsoft ActiveSync 2006-12-29 16:29 <DIR> dr-h----- C:\MSOCache 2006-12-29 16:26 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Spybot - Search & Destroy 2006-12-29 16:21 816,672 --a------ C:\WINDOWS\system32\drivers\avg7core.sys 2006-12-29 16:21 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2006-12-29 16:21 4,960 --a------ C:\WINDOWS\system32\drivers\avgtdi.sys 2006-12-29 16:21 4,224 --a------ C:\WINDOWS\system32\drivers\avg7rsw.sys 2006-12-29 16:21 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll 2006-12-29 16:21 3,968 --a------ C:\WINDOWS\system32\drivers\avgclean.sys 2006-12-29 16:21 28,416 --a------ C:\WINDOWS\system32\drivers\avg7rsxp.sys 2006-12-29 16:21 <DIR> d-------- C:\Program Files\Grisoft 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\LOCALS~1\Application Data\AVG7 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\Guy\Application Data\AVG7 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Grisoft 2006-12-29 16:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\avg7 2006-12-29 16:17 <DIR> d-------- C:\Program Files\RFA 2006-12-29 16:06 <DIR> d--hs---- C:\RECYCLER 2006-12-29 15:53 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Application Data\Windows Genuine Advantage 2006-12-29 15:49 <DIR> d-------- C:\WINDOWS\system32\PreInstall 2006-12-29 15:48 <DIR> d--h----- C:\WINDOWS\$hf_mig$ 2006-12-29 15:29 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution 2006-12-29 15:28 4,527,488 --a------ C:\WINDOWS\system32\nv4_disp.dll 2006-12-29 15:28 3,994,624 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys 2006-12-29 15:26 9,600 --------- C:\WINDOWS\system32\drivers\WINFOXIO.sys 2006-12-29 15:26 <DIR> d-------- C:\WINDOWS\system32\WinFox 2006-12-29 15:25 <DIR> d---s---- C:\DOCUME~1\Guy\UserData 2006-12-29 15:23 <DIR> d-------- C:\WINDOWS\system32\Lang 2006-12-29 15:21 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys 2006-12-29 15:21 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys 2006-12-29 15:21 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys 2006-12-29 15:21 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys 2006-12-29 15:21 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys 2006-12-29 15:21 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys 2006-12-29 15:21 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2006-12-29 15:21 40,960 -r------- C:\WINDOWS\system32\ChCfg.exe 2006-12-29 15:21 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys 2006-12-29 15:21 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys 2006-12-29 15:21 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys 2006-12-29 15:21 143,360 -r------- C:\WINDOWS\system32\RtlCPAPI.dll 2006-12-29 15:21 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys 2006-12-29 15:20 9,709,568 -r------- C:\WINDOWS\RTLCPL.exe 2006-12-29 15:20 86,016 -r------- C:\WINDOWS\SoundMan.exe 2006-12-29 15:20 69,632 -r------- C:\WINDOWS\Alcmtr.exe 2006-12-29 15:20 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys 2006-12-29 15:20 487,424 -r------- C:\WINDOWS\RtlExUpd.dll 2006-12-29 15:20 4,353,024 -r------- C:\WINDOWS\system32\drivers\RtkHDAud.Sys 2006-12-29 15:20 4,096 --a------ C:\WINDOWS\system32\ksuser.dll 2006-12-29 15:20 364,544 -r------- C:\WINDOWS\RtlUpd.exe 2006-12-29 15:20 327,168 --a------ C:\WINDOWS\IsUninst.exe 2006-12-29 15:20 250,240 --a------ C:\WINDOWS\system32\drivers\yk51x86.sys 2006-12-29 15:20 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe 2006-12-29 15:20 2,879,488 -r------- C:\WINDOWS\SkyTel.exe 2006-12-29 15:20 2,808,832 -r------- C:\WINDOWS\alcwzrd.exe 2006-12-29 15:20 2,158,592 -r------- C:\WINDOWS\MicCal.exe 2006-12-29 15:20 16,261,632 -r------- C:\WINDOWS\RTHDCPL.exe 2006-12-29 15:20 <DIR> d--h----- C:\Program Files\InstallShield Installation Information 2006-12-29 15:20 <DIR> d-------- C:\WINDOWS\system32\RTCOM 2006-12-29 15:20 <DIR> d-------- C:\Program Files\Realtek 2006-12-29 15:20 <DIR> d-------- C:\Program Files\GIGABYTE 2006-12-29 15:20 <DIR> d-------- C:\Program Files\Common Files\InstallShield 2006-12-29 13:29 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2006-12-29 13:29 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys 2006-12-29 13:24 <DIR> d-------- C:\WINDOWS\SoftwareDistribution 2006-12-29 13:24 <DIR> d-------- C:\WINDOWS\Prefetch 2006-12-29 13:12 112,128 --a------ C:\WINDOWS\system32\mapi32.dll 2006-12-29 13:12 0 -rahs---- C:\MSDOS.SYS 2006-12-29 13:12 0 -rahs---- C:\IO.SYS 2006-12-29 13:12 0 --a------ C:\CONFIG.SYS 2006-12-29 13:12 0 --a------ C:\AUTOEXEC.BAT 2006-12-29 13:12 <DIR> d-------- C:\WINDOWS\system32\xircom 2006-12-29 13:12 <DIR> d-------- C:\Program Files\microsoft frontpage 2006-12-29 13:11 <DIR> dr------- C:\WINDOWS\Offline Web Pages 2006-12-29 13:11 <DIR> d--hs---- C:\DOCUME~1\ALLUSE~1\DRM 2006-12-29 13:11 <DIR> d--h----- C:\Program Files\WindowsUpdate 2006-12-29 13:11 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files 2006-12-29 13:10 81,920 --a------ C:\WINDOWS\system32\ils.dll 2006-12-29 13:10 8,192 --a------ C:\WINDOWS\system32\bitsprx2.dll 2006-12-29 13:10 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys 2006-12-29 13:10 7,168 --a------ C:\WINDOWS\system32\bitsprx3.dll 2006-12-29 13:10 69,632 --a------ C:\WINDOWS\system32\msconf.dll 2006-12-29 13:10 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll 2006-12-29 13:10 67,584 --a------ C:\WINDOWS\system32\srclient.dll 2006-12-29 13:10 64,512 --a------ C:\WINDOWS\system32\acctres.dll 2006-12-29 13:10 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll 2006-12-29 13:10 48,128 --a------ C:\WINDOWS\system32\inetres.dll 2006-12-29 13:10 465,176 --a------ C:\WINDOWS\system32\wuapi.dll 2006-12-29 13:10 45,568 --a------ C:\WINDOWS\system32\safrslv.dll 2006-12-29 13:10 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll 2006-12-29 13:10 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll 2006-12-29 13:10 41,240 --a------ C:\WINDOWS\system32\wups.dll 2006-12-29 13:10 382,464 --a------ C:\WINDOWS\system32\qmgr.dll 2006-12-29 13:10 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll 2006-12-29 13:10 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe 2006-12-29 13:10 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll 2006-12-29 13:10 29,696 --a------ C:\WINDOWS\system32\safrdm.dll 2006-12-29 13:10 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll 2006-12-29 13:10 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll 2006-12-29 13:10 239,104 --a------ C:\WINDOWS\system32\srrstr.dll 2006-12-29 13:10 23,040 --a------ C:\WINDOWS\system32\fltmc.exe 2006-12-29 13:10 194,328 --a------ C:\WINDOWS\system32\wuaueng1.dll 2006-12-29 13:10 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll 2006-12-29 13:10 173,536 --a------ C:\WINDOWS\system32\wuweb.dll 2006-12-29 13:10 172,312 --a------ C:\WINDOWS\system32\wuauclt1.exe 2006-12-29 13:10 170,496 --a------ C:\WINDOWS\system32\srsvc.dll 2006-12-29 13:10 16,896 --a------ C:\WINDOWS\system32\fltlib.dll 2006-12-29 13:10 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll 2006-12-29 13:10 128,896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys 2006-12-29 13:10 127,256 --a------ C:\WINDOWS\system32\wucltui.dll 2006-12-29 13:10 124,184 --a------ C:\WINDOWS\system32\wuauclt.exe 2006-12-29 13:10 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll 2006-12-29 13:10 11,264 --a------ C:\WINDOWS\system32\atrace.dll 2006-12-29 13:10 105,984 --a------ C:\WINDOWS\system32\msoert2.dll 2006-12-29 13:10 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll 2006-12-29 13:10 <DIR> d---s---- C:\WINDOWS\Tasks 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\system32\Restore 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\system32\Macromed 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\system32\DirectX 2006-12-29 13:10 <DIR> d-------- C:\WINDOWS\srchasst 2006-12-29 13:10 <DIR> d-------- C:\Program Files\Movie Maker 2006-12-29 13:10 <DIR> d-------- C:\Program Files\Common Files\MSSoap 2006-12-29 13:09 81,920 --a------ C:\WINDOWS\system32\isign32.dll 2006-12-29 13:09 73,728 --a------ C:\WINDOWS\system32\icwdial.dll 2006-12-29 13:09 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll 2006-12-29 13:09 5,632 --a------ C:\WINDOWS\system32\write.exe 2006-12-29 13:09 274,944 --a------ C:\WINDOWS\system32\mstask.dll 2006-12-29 13:09 274,432 --a------ C:\WINDOWS\system32\inetcfg.dll 2006-12-29 13:09 190,976 --a------ C:\WINDOWS\system32\schedsvc.dll 2006-12-29 13:09 12,288 --a------ C:\WINDOWS\system32\mstinit.exe 2006-12-29 13:09 <DIR> d-------- C:\WINDOWS\Registration 2006-12-29 13:09 <DIR> d-------- C:\Program Files\Online Services 2006-12-29 13:09 <DIR> d-------- C:\Program Files\MSN Gaming Zone 2006-12-29 13:09 <DIR> d-------- C:\Program Files\Messenger 2006-12-29 13:08 97,792 --a------ C:\WINDOWS\system32\comrepl.dll 2006-12-29 13:08 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll 2006-12-29 13:08 93,696 --a------ C:\WINDOWS\system32\tscfgwmi.dll 2006-12-29 13:08 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll 2006-12-29 13:08 9,728 --a------ C:\WINDOWS\system32\reset.exe 2006-12-29 13:08 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll 2006-12-29 13:08 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll 2006-12-29 13:08 80,384 --a------ C:\WINDOWS\system32\charmap.exe 2006-12-29 13:08 73,216 --a------ C:\WINDOWS\system32\avwav.dll 2006-12-29 13:08 67,072 --a------ C:\WINDOWS\system32\rdshost.exe 2006-12-29 13:08 655,360 --a------ C:\WINDOWS\system32\mstscax.dll 2006-12-29 13:08 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll 2006-12-29 13:08 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe 2006-12-29 13:08 605,696 --a------ C:\WINDOWS\system32\getuname.dll 2006-12-29 13:08 60,416 --a------ C:\WINDOWS\system32\remotepg.dll 2006-12-29 13:08 60,416 --a------ C:\WINDOWS\system32\colbact.dll 2006-12-29 13:08 6,144 --a------ C:\WINDOWS\system32\msdtc.exe 2006-12-29 13:08 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll 2006-12-29 13:08 58,880 --a------ C:\WINDOWS\system32\licwmi.dll 2006-12-29 13:08 56,832 --a------ C:\WINDOWS\system32\sol.exe 2006-12-29 13:08 56,320 --a------ C:\WINDOWS\system32\servdeps.dll 2006-12-29 13:08 55,296 --a------ C:\WINDOWS\system32\freecell.exe 2006-12-29 13:08 540,160 --a------ C:\WINDOWS\system32\comuid.dll 2006-12-29 13:08 54,272 --a------ C:\WINDOWS\system32\stclient.dll 2006-12-29 13:08 538,624 --a------ C:\WINDOWS\system32\spider.exe 2006-12-29 13:08 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe 2006-12-29 13:08 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll 2006-12-29 13:08 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe 2006-12-29 13:08 44,544 --a------ C:\WINDOWS\system32\hticons.dll 2006-12-29 13:08 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll 2006-12-29 13:08 407,552 --a------ C:\WINDOWS\system32\mstsc.exe 2006-12-29 13:08 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys 2006-12-29 13:08 4,096 --a------ C:\WINDOWS\system32\rdpcfgex.dll 2006-12-29 13:08 4,096 --a------ C:\WINDOWS\system32\mtxex.dll 2006-12-29 13:08 38,912 --a------ C:\WINDOWS\system32\cfgbkend.dll 2006-12-29 13:08 35,328 --a------ C:\WINDOWS\system32\winchat.exe 2006-12-29 13:08 347,136 --a------ C:\WINDOWS\system32\hypertrm.dll 2006-12-29 13:08 343,040 --a------ C:\WINDOWS\system32\mspaint.exe 2006-12-29 13:08 33,792 --a------ C:\WINDOWS\system32\regini.exe 2006-12-29 13:08 295,424 --a------ C:\WINDOWS\system32\termsrv.dll 2006-12-29 13:08 25,600 --a------ C:\WINDOWS\system32\comaddin.dll 2006-12-29 13:08 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll 2006-12-29 13:08 227,840 --a------ C:\WINDOWS\system32\avtapi.dll 2006-12-29 13:08 225,792 --a------ C:\WINDOWS\system32\catsrv.dll 2006-12-29 13:08 22,016 --a------ C:\WINDOWS\system32\qwinsta.exe 2006-12-29 13:08 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys 2006-12-29 13:08 20,992 --a------ C:\WINDOWS\system32\msg.exe 2006-12-29 13:08 20,480 --a------ C:\WINDOWS\system32\qprocess.exe 2006-12-29 13:08 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll 2006-12-29 13:08 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys 2006-12-29 13:08 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll 2006-12-29 13:08 185,344 --a------ C:\WINDOWS\system32\cmprops.dll 2006-12-29 13:08 183,808 --a------ C:\WINDOWS\system32\accwiz.exe 2006-12-29 13:08 17,408 --a------ C:\WINDOWS\system32\mmfutil.dll 2006-12-29 13:08 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll 2006-12-29 13:08 16,896 --a------ C:\WINDOWS\system32\tsshutdn.exe 2006-12-29 13:08 16,896 --a------ C:\WINDOWS\system32\qappsrv.exe 2006-12-29 13:08 16,384 --a------ C:\WINDOWS\system32\tskill.exe 2006-12-29 13:08 16,384 --a------ C:\WINDOWS\system32\avmeter.dll 2006-12-29 13:08 15,872 --a------ C:\WINDOWS\system32\rwinsta.exe 2006-12-29 13:08 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll 2006-12-29 13:08 15,360 --a------ C:\WINDOWS\system32\logoff.exe 2006-12-29 13:08 147,968 --a------ C:\WINDOWS\system32\rdchost.dll 2006-12-29 13:08 147,456 --a------ C:\WINDOWS\system32\comsnap.dll 2006-12-29 13:08 140,800 --a------ C:\WINDOWS\system32\sessmgr.exe 2006-12-29 13:08 14,848 --a------ C:\WINDOWS\system32\tsdiscon.exe 2006-12-29 13:08 14,848 --a------ C:\WINDOWS\system32\tscon.exe 2006-12-29 13:08 14,848 --a------ C:\WINDOWS\system32\shadow.exe 2006-12-29 13:08 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys 2006-12-29 13:08 138,752 --a------ C:\WINDOWS\system32\sndvol32.exe 2006-12-29 13:08 131,584 --a------ C:\WINDOWS\system32\sndrec32.exe 2006-12-29 13:08 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe 2006-12-29 13:08 126,976 --a------ C:\WINDOWS\system32\mshearts.exe 2006-12-29 13:08 123,392 --a------ C:\WINDOWS\system32\mplay32.exe 2006-12-29 13:08 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys 2006-12-29 13:08 119,808 --a------ C:\WINDOWS\system32\winmine.exe 2006-12-29 13:08 114,688 --a------ C:\WINDOWS\system32\calc.exe 2006-12-29 13:08 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll 2006-12-29 13:08 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll 2006-12-29 13:08 11,264 --a------ C:\WINDOWS\system32\icaapi.dll 2006-12-29 13:08 102,912 --a------ C:\WINDOWS\system32\clipbrd.exe 2006-12-29 13:08 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll 2006-12-29 13:08 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd 2006-12-29 13:08 <DIR> d-------- C:\WINDOWS\system32\MsDtc 2006-12-29 13:08 <DIR> d-------- C:\WINDOWS\system32\Com 2006-12-29 13:08 <DIR> d-------- C:\Program Files\Windows NT (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-01-14 23:42 -------- d---s---- C:\DOCUME~1\Guy\Application Data\microsoft 2007-01-13 23:56 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys 2006-12-30 18:25 -------- d-------- C:\DOCUME~1\Guy\Application Data\macromedia 2006-12-29 20:44 62 --ahs---- C:\DOCUME~1\Guy\Application Data\desktop.ini 2006-12-29 13:28 -------- d-------- C:\DOCUME~1\Guy\Application Data\identities 2006-12-12 18:30 520192 --a------ C:\WINDOWS\system32\divxsm.exe 2006-12-12 18:30 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll 2006-12-12 18:30 200704 --a------ C:\WINDOWS\system32\ssldivx.dll 2006-12-12 18:30 1044480 --a------ C:\WINDOWS\system32\libdivx.dll 2006-12-12 18:25 806912 --a------ C:\WINDOWS\system32\divx_xx0c.dll 2006-12-12 18:25 806912 --a------ C:\WINDOWS\system32\divx_xx07.dll 2006-12-12 18:25 790528 --a------ C:\WINDOWS\system32\divx_xx11.dll 2006-12-12 18:25 73728 --a------ C:\WINDOWS\system32\dpl100.dll 2006-12-12 18:25 635486 --a------ C:\WINDOWS\system32\divx.dll 2006-12-12 18:25 593920 --a------ C:\WINDOWS\system32\dpugui11.dll 2006-12-12 18:25 57344 --a------ C:\WINDOWS\system32\dpv11.dll 2006-12-12 18:25 53248 --a------ C:\WINDOWS\system32\dpugui10.dll 2006-12-12 18:25 344064 --a------ C:\WINDOWS\system32\dpus11.dll 2006-12-12 18:25 294912 --a------ C:\WINDOWS\system32\dpu11.dll 2006-12-12 18:25 294912 --a------ C:\WINDOWS\system32\dpu10.dll 2006-12-12 18:25 196608 --a------ C:\WINDOWS\system32\dtu100.dll 2006-12-12 18:24 12288 --a------ C:\WINDOWS\system32\divxwmpexttype.dll 2006-12-12 18:24 118784 --a------ C:\WINDOWS\system32\divxcodecupdatechecker.exe 2006-12-07 17:02 2174976 --a------ C:\WINDOWS\system32\wmvcore.dll 2006-10-22 12:22 888832 --a------ C:\WINDOWS\system32\nvmobls.dll 2006-10-22 12:22 86016 --a------ C:\WINDOWS\system32\nvmctray.dll 2006-10-22 12:22 81920 --a------ C:\WINDOWS\system32\nvwddi.dll 2006-10-22 12:22 794624 --a------ C:\WINDOWS\system32\nvcplui.exe 2006-10-22 12:22 7700480 --a------ C:\WINDOWS\system32\nvcpl.dll 2006-10-22 12:22 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll 2006-10-22 12:22 5644288 --a------ C:\WINDOWS\system32\nvoglnt.dll 2006-10-22 12:22 5619712 --a------ C:\WINDOWS\system32\nvdisps.dll 2006-10-22 12:22 5255168 --a------ C:\WINDOWS\system32\nvdispsr.dll 2006-10-22 12:22 466944 --a------ C:\WINDOWS\system32\nvshell.dll 2006-10-22 12:22 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll 2006-10-22 12:22 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll 2006-10-22 12:22 442368 --a------ C:\WINDOWS\system32\nvappbar.exe 2006-10-22 12:22 425984 --a------ C:\WINDOWS\system32\keystone.exe 2006-10-22 12:22 35840 --a------ C:\WINDOWS\system32\nvcodins.dll 2006-10-22 12:22 35840 --a------ C:\WINDOWS\system32\nvcod.dll 2006-10-22 12:22 3203072 --a------ C:\WINDOWS\system32\nvgamesr.dll 2006-10-22 12:22 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll 2006-10-22 12:22 3047424 --a------ C:\WINDOWS\system32\nvgames.dll 2006-10-22 12:22 2973696 --a------ C:\WINDOWS\system32\nvvitvsr.dll 2006-10-22 12:22 2924544 --a------ C:\WINDOWS\system32\nvvitvs.dll 2006-10-22 12:22 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll 2006-10-22 12:22 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll 2006-10-22 12:22 229376 --a------ C:\WINDOWS\system32\nvmccs.dll 2006-10-22 12:22 212992 --a------ C:\WINDOWS\system32\nvapi.dll 2006-10-22 12:22 188416 --a------ C:\WINDOWS\system32\nvmccss.dll 2006-10-22 12:22 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll 2006-10-22 12:22 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll 2006-10-22 12:22 1622016 --a------ C:\WINDOWS\system32\nwiz.exe 2006-10-22 12:22 159810 --a------ C:\WINDOWS\system32\nvsvc32.exe 2006-10-22 12:22 147456 --a------ C:\WINDOWS\system32\nvcolor.exe 2006-10-22 12:22 1470464 --a------ C:\WINDOWS\system32\nview.dll 2006-10-22 12:22 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe 2006-10-22 12:22 1236992 --a------ C:\WINDOWS\system32\nvwss.dll 2006-10-22 12:22 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll 2006-10-22 12:22 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll 2006-10-19 15:56 713216 --a------ C:\WINDOWS\system32\sxs.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce] "ICQ Lite"="C:\\Program Files\\ICQLite\\ICQLite.exe -trayboot" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "ICQ Lite"="C:\\Program Files\\ICQLite\\ICQLite.exe -minimize" "NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit" "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized" "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0\\bin\\jusched.exe\"" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 Usnsvc REG_MULTI_SZ usnsvc\0\0 [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E] Shell\AutoRun\command E:\install.exe Completion time: 07-01-15 15:19:37 C:\ComboFix2.txt ... 07-01-14 23:53