the new thread...and i will also add that my computer severly crashed this morning. it gave a blue screen with dump of physical memory and then it didnt work at all...it did not start up windows. i gave it a quick memory and hdd test from bios and then it worked...strange...

Please post a Hijack This log and a Combofix log please.

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:49, on 07-10-14 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\HPQ\IAM\bin\asghost.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe C:\WINDOWS\Samsung\LaserSMMgr\ssmmgr.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\PROGRA~1\MICROS~4\rapimgr.exe C:\Program Files\HPQ\SHARED\HPQWMI.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe C:\Program Files\MPlayerC\MPlayerC.exe C:\Program Files\MPlayerC\MPlayerC.exe C:\Program Files\MPlayerC\mplayer\mplayer.exe C:\Program Files\Internet Explorer\IEXPLORE.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule O4 - HKLM\..\Run: [hpWirelessAssistant] "%ProgramFiles%\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe" O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe O4 - HKLM\..\Run: [Samsung LBP SM] "C:\WINDOWS\Samsung\LaserSMMgr\ssmmgr.exe" /autorun O4 - HKLM\..\Run: [ioloDelayModule] C:\Program Files\iolo\System Mechanic Professional 6\delay.exe O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe O4 - HKLM\..\Run: [NSRKey] C:\PROGRA~1\NORTON~2\NSR\Agent\NSRTray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" -quiet O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: rds.lnk = ? O8 - Extra context menu item: Download by YouTube Robot - res://C:\Program Files\YouTubeRobot\RobotExt.ocx/LINK.HTM O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/englis... O16 - DPF: {14C1B87C-3342-445F-9B5E-365FF330A3AC} - http://h50203.www5.hp.com/HPISWeb/C... O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper20073151.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{E0403AD7-3C48-49B4-8C07-87C9F48AC952}: NameServer = 82.76.253.115 82.76.253.125 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O20 - Winlogon Notify: OneCard - C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.exe O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 9957 bytes

post a link for combofix...thx

Please download ComboFix to the desktop from this link: http://download.bleepingcomputer.com/sUBs/ComboFix.exe Double-click combofix.exe Follow the prompts. (Don't click on the window while the program is running, it may cause your system to hang.) Please post the log it produces.

ComboFix 07-10-12.4 - Administrator 2007-10-16 0:23:21.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1078 [GMT 3:00] Running from: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\W5A7O9E3\ComboFix[1].exe * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-09-15 to 2007-10-15 ))))))))))))))))))))))))))))))) . 2007-10-14 17:21 <DIR> d-------- C:\My FLVs 2007-10-14 17:17 <DIR> d-------- C:\Program Files\YouTubeRobot 2007-10-14 17:17 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll 2007-10-14 17:17 593,920 --a------ C:\WINDOWS\system32\dpuGUI11.dll 2007-10-14 17:17 574,976 --a------ C:\WINDOWS\system32\divx.dll 2007-10-14 17:17 294,912 --a------ C:\WINDOWS\system32\dpu11.dll 2007-10-14 17:17 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll 2007-10-14 17:17 200,704 --a------ C:\WINDOWS\system32\dtu100.dll 2007-10-14 17:17 86,016 --a------ C:\WINDOWS\system32\dpl100.dll 2007-10-14 17:17 57,344 --a------ C:\WINDOWS\system32\dpv11.dll 2007-10-14 17:15 <DIR> d-------- C:\Program Files\Common Files\Download Manager 2007-10-14 01:03 81,920 --a------ C:\WINDOWS\system32\GkSui20.exe 2007-10-14 01:02 <DIR> d-------- C:\Program Files\YouTube Movie Ripper V1.1 2007-10-14 00:18 <DIR> d-------- C:\Program Files\Apple Software Update 2007-10-14 00:17 <DIR> d-------- C:\Program Files\Common Files\Apple 2007-10-14 00:17 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple 2007-10-13 13:26 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-10-10 20:24 584,192 --------- C:\WINDOWS\system32\dllcache\rpcrt4.dll 2007-10-09 13:26 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab 2007-10-09 13:26 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2007-10-08 01:22 <DIR> d-------- C:\Program Files\Azureus 2007-10-08 01:22 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Azureus 2007-10-08 01:22 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Azureus 2007-10-08 01:22 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Azureus 2007-10-04 18:34 <DIR> d-------- C:\WINDOWS\ERUNT 2007-10-04 11:23 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-10-03 17:09 <DIR> d-------- C:\Program Files\Trend Micro 2007-10-03 16:55 4,090 --a------ C:\WINDOWS\system32\tmp.reg 2007-09-29 18:13 <DIR> d-------- C:\WINDOWS\pss 2007-09-29 17:55 215,144 --a------ C:\WINDOWS\patchw32.dll 2007-09-29 17:52 215,144 --a------ C:\WINDOWS\pw32a.dll 2007-09-29 17:25 636,568 -r------- C:\WINDOWS\system32\NSRSte.dll 2007-09-29 17:18 <DIR> d-------- C:\Program Files\Norton SystemWorks Premier 2007-09-29 12:58 <DIR> d-------- C:\Program Files\Windows Media Connect 2 2007-09-29 12:56 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF 2007-09-21 13:24 3,497,832 --a------ C:\WINDOWS\system32\d3dx9_34.dll 2007-09-21 13:24 1,124,720 --a------ C:\WINDOWS\system32\D3DCompiler_34.dll 2007-09-21 13:24 443,752 --a------ C:\WINDOWS\system32\d3dx10_34.dll 2007-09-21 13:24 266,088 --a------ C:\WINDOWS\system32\xactengine2_8.dll 2007-09-21 13:24 18,280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll 2007-09-21 12:57 <DIR> d-------- C:\Program Files\Ubisoft 2007-09-19 13:37 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE 2007-09-19 13:37 <DIR> d---s---- C:\Program Files\Xfire 2007-09-19 13:37 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Xfire 2007-09-19 13:37 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Xfire 2007-09-19 13:03 <DIR> d-------- C:\Program Files\Kylotonn Entertainment 2007-09-19 00:09 <DIR> d-------- C:\WINDOWS\speech 2007-09-19 00:08 <DIR> d-------- C:\eJay 2007-09-19 00:08 159,744 --a------ C:\WINDOWS\system32\DartSock.dll 2007-09-19 00:08 106,496 --a------ C:\WINDOWS\system32\DartWeb.dll 2007-09-19 00:08 97,280 --a------ C:\WINDOWS\system32\ccrpbds5.dll 2007-09-19 00:08 77,824 --a------ C:\WINDOWS\system32\eJ_Enumerator.dll 2007-09-19 00:08 36,864 --a------ C:\WINDOWS\system32\eJayWMExport.dll 2007-09-19 00:08 29,696 --a------ C:\WINDOWS\system32\pthread.dll 2007-09-18 23:30 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2007-09-18 23:30 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2007-09-18 23:30 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-09-18 23:30 22,328 --a------ C:\Documents and Settings\Administrator\Application Data\PnkBstrK.sys 2007-09-18 23:30 22,328 --a------ C:\Documents and Settings\Administrator\Application Data\PnkBstrK.sys 2007-09-18 21:52 <DIR> d-------- C:\mama2 2007-09-16 13:50 <DIR> d-------- C:\casa . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-14 20:50 --------- d-----w C:\Program Files\oDC 2007-10-13 21:35 --------- d-----w C:\Program Files\iTunes 2007-10-13 21:30 --------- d-----w C:\Program Files\QuickTime 2007-10-13 21:26 --------- d-----w C:\Program Files\iPod 2007-10-12 12:18 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2007-10-12 11:52 --------- d-----w C:\Program Files\Java 2007-10-07 22:18 --------- d-----w C:\Program Files\BitComet 2007-10-02 16:46 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2007-10-02 16:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2007-10-02 16:45 --------- d-----w C:\Program Files\Symantec 2007-10-02 16:33 --------- d-----w C:\Program Files\Norton AntiVirus 2007-09-29 16:24 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-09-29 15:02 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Symantec 2007-09-29 15:02 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Symantec 2007-09-29 09:55 --------- d-----w C:\Program Files\Windows Media Connect 2007-09-25 08:18 --------- d-----w C:\Program Files\Common Files\Adobe 2007-09-18 21:03 --------- d-----w C:\Program Files\EvaluareSanatate 2007-09-12 22:21 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Bioshock 2007-09-12 22:21 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Bioshock 2007-09-12 14:41 --------- d-----w C:\Program Files\THQ 2007-09-08 10:51 --------- d-----w C:\Program Files\Bethesda Softworks 2007-09-08 09:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\PlayFirst 2007-09-08 09:44 --------- d-----w C:\Documents and Settings\Administrator\Application Data\PlayFirst 2007-09-08 09:44 --------- d-----w C:\Documents and Settings\Administrator\Application Data\PlayFirst 2007-09-06 08:43 --------- d-----w C:\Documents and Settings\Administrator\Application Data\AdobeUM 2007-09-06 08:43 --------- d-----w C:\Documents and Settings\Administrator\Application Data\AdobeUM 2007-08-31 15:31 --------- d-----w C:\Program Files\3GP Player 2007-08-27 21:57 --------- d-----w C:\Program Files\Virtual Hottie 2 2007-08-22 13:12 96,256 ------w C:\WINDOWS\system32\dllcache\inseng.dll 2007-08-22 13:12 658,944 ------w C:\WINDOWS\system32\dllcache\wininet.dll 2007-08-22 13:12 615,424 ------w C:\WINDOWS\system32\dllcache\urlmon.dll 2007-08-22 13:12 55,808 ------w C:\WINDOWS\system32\dllcache\extmgr.dll 2007-08-22 13:12 532,480 ------w C:\WINDOWS\system32\dllcache\mstime.dll 2007-08-22 13:12 474,112 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll 2007-08-22 13:12 449,024 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-08-22 13:12 39,424 ------w C:\WINDOWS\system32\dllcache\pngfilt.dll 2007-08-22 13:12 357,888 ------w C:\WINDOWS\system32\dllcache\dxtmsft.dll 2007-08-22 13:12 3,058,176 ------w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-08-22 13:12 251,392 ------w C:\WINDOWS\system32\dllcache\iepeers.dll 2007-08-22 13:12 205,312 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-08-22 13:12 16,384 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-08-22 13:12 151,040 ------w C:\WINDOWS\system32\dllcache\cdfview.dll 2007-08-22 13:12 146,432 ------w C:\WINDOWS\system32\dllcache\msrating.dll 2007-08-22 13:12 1,494,528 ------w C:\WINDOWS\system32\dllcache\shdocvw.dll 2007-08-22 13:12 1,054,208 ------w C:\WINDOWS\system32\dllcache\danim.dll 2007-08-22 13:12 1,022,976 ------w C:\WINDOWS\system32\dllcache\browseui.dll 2007-08-21 10:30 18,432 ------w C:\WINDOWS\system32\dllcache\iedw.exe 2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2007-08-21 06:15 683,520 ------w C:\WINDOWS\system32\dllcache\inetcomm.dll 2007-08-19 17:57 --------- d-----w C:\Documents and Settings\Administrator\Application Data\InstallShield 2007-08-19 17:57 --------- d-----w C:\Documents and Settings\Administrator\Application Data\InstallShield 2007-07-30 16:19 92,504 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll 2007-07-30 16:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll 2007-07-30 16:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll 2007-07-30 16:19 549,720 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll 2007-07-30 16:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe 2007-07-30 16:19 53,080 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe 2007-07-30 16:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll 2007-07-30 16:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll 2007-07-30 16:19 325,976 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll 2007-07-30 16:19 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll 2007-07-30 16:19 207,736 ----a-w C:\WINDOWS\system32\muweb.dll 2007-07-30 16:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll 2007-07-30 16:19 203,096 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll 2007-07-30 16:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll 2007-07-30 16:19 1,712,984 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll 2007-07-30 16:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll 2007-07-30 16:18 33,624 ----a-w C:\WINDOWS\system32\dllcache\wups.dll 2007-03-08 18:48 46,952 ----a-w C:\Documents and Settings\Administrator\Application Data\GDIPFONTCACHEV1.DAT 2007-03-08 18:48 46,952 ----a-w C:\Documents and Settings\Administrator\Application Data\GDIPFONTCACHEV1.DAT 2005-05-11 21:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll . ((((((((((((((((((((((((((((( snapshot@2007-10-04_11.41.09.56 ))))))))))))))))))))))))))))))))))))))))) . + 2007-07-09 13:16:16 582,656 ----a-w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\rpcrt4.dll + 2007-06-19 07:24:36 350,720 ----a-w C:\WINDOWS\$hf_mig$\KB933729\SP2QFE\xpsp3res.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB933729\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB933729\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB933729\update\updspapi.dll + 2007-08-22 12:55:28 1,022,976 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\browseui.dll + 2007-08-22 12:55:29 151,040 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\cdfview.dll + 2007-08-22 12:55:30 1,054,208 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\danim.dll + 2007-08-22 12:55:30 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\dxtmsft.dll + 2007-08-22 12:55:31 205,824 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\dxtrans.dll + 2007-08-22 12:55:31 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\extmgr.dll + 2007-08-21 10:19:39 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\iedw.exe + 2007-08-22 12:55:32 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\iepeers.dll + 2007-08-22 12:55:32 96,256 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\inseng.dll + 2007-08-22 12:55:32 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\jsproxy.dll + 2007-08-22 12:55:36 3,064,832 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\mshtml.dll + 2007-08-22 12:55:37 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\mshtmled.dll + 2007-08-22 12:55:37 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\msrating.dll + 2007-08-22 12:55:38 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\mstime.dll + 2007-08-22 12:55:38 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\pngfilt.dll + 2007-08-22 12:55:40 1,498,112 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\shdocvw.dll + 2007-08-22 12:55:41 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\shlwapi.dll + 2007-08-22 12:55:43 617,984 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\urlmon.dll + 2007-08-22 12:55:44 665,600 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\wininet.dll + 2007-08-21 10:13:33 350,720 ----a-w C:\WINDOWS\$hf_mig$\KB939653\SP2QFE\xpsp3res.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB939653\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB939653\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB939653\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB939653\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB939653\update\updspapi.dll + 2007-08-21 06:25:02 683,520 ----a-w C:\WINDOWS\$hf_mig$\KB941202\SP2QFE\inetcomm.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB941202\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB941202\update\updspapi.dll + 2004-08-04 08:00:00 581,120 -c----w C:\WINDOWS\$NtUninstallKB933729$\rpcrt4.dll + 2005-10-12 23:12:26 213,216 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe + 2005-10-12 23:12:33 371,424 -c----w C:\WINDOWS\$NtUninstallKB933729$\spuninst\updspapi.dll + 2007-06-14 18:09:18 1,023,488 -c----w C:\WINDOWS\$NtUninstallKB939653$\browseui.dll + 2007-06-14 18:09:18 151,040 -c----w C:\WINDOWS\$NtUninstallKB939653$\cdfview.dll + 2007-06-14 18:09:18 1,054,208 -c----w C:\WINDOWS\$NtUninstallKB939653$\danim.dll + 2007-06-14 18:09:18 357,888 -c----w C:\WINDOWS\$NtUninstallKB939653$\dxtmsft.dll + 2007-06-14 18:09:19 205,312 -c----w C:\WINDOWS\$NtUninstallKB939653$\dxtrans.dll + 2007-06-14 18:09:19 55,808 -c----w C:\WINDOWS\$NtUninstallKB939653$\extmgr.dll + 2007-06-14 14:07:24 18,432 -c----w C:\WINDOWS\$NtUninstallKB939653$\iedw.exe + 2007-06-14 18:09:19 251,392 -c----w C:\WINDOWS\$NtUninstallKB939653$\iepeers.dll + 2007-06-14 18:09:19 96,256 -c----w C:\WINDOWS\$NtUninstallKB939653$\inseng.dll + 2007-06-14 18:09:19 16,384 -c----w C:\WINDOWS\$NtUninstallKB939653$\jsproxy.dll + 2007-06-14 18:09:20 3,058,688 -c----w C:\WINDOWS\$NtUninstallKB939653$\mshtml.dll + 2007-06-14 18:09:19 449,024 -c----w C:\WINDOWS\$NtUninstallKB939653$\mshtmled.dll + 2007-06-14 18:09:19 146,432 -c----w C:\WINDOWS\$NtUninstallKB939653$\msrating.dll + 2007-06-14 18:09:20 532,480 -c----w C:\WINDOWS\$NtUninstallKB939653$\mstime.dll + 2007-06-14 18:09:20 39,424 -c----w C:\WINDOWS\$NtUninstallKB939653$\pngfilt.dll + 2007-06-14 18:09:20 1,494,528 -c----w C:\WINDOWS\$NtUninstallKB939653$\shdocvw.dll + 2007-06-14 18:09:20 474,112 -c----w C:\WINDOWS\$NtUninstallKB939653$\shlwapi.dll + 2007-03-06 01:22:41 213,216 -c----w C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe + 2007-03-06 01:23:51 371,424 -c----w C:\WINDOWS\$NtUninstallKB939653$\spuninst\updspapi.dll + 2007-06-14 18:09:20 615,424 -c----w C:\WINDOWS\$NtUninstallKB939653$\urlmon.dll + 2007-06-26 14:09:10 658,944 -c----w C:\WINDOWS\$NtUninstallKB939653$\wininet.dll + 2007-06-14 13:39:54 115,712 -c----w C:\WINDOWS\$NtUninstallKB939653$\xpsp3res.dll + 2007-05-16 15:12:02 683,520 -c----w C:\WINDOWS\$NtUninstallKB941202$\inetcomm.dll + 2007-03-06 01:22:41 213,216 -c----w C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe + 2007-03-06 01:23:51 371,424 -c----w C:\WINDOWS\$NtUninstallKB941202$\spuninst\updspapi.dll + 2007-09-27 19:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.exe + 2007-10-04 15:35:28 9,629,696 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000001\ntuser.dat + 2007-10-04 15:35:28 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\[u]0[/u]0000002\UsrClass.dat + 2007-09-27 19:03:23 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.exe + 2007-10-04 15:34:52 9,629,696 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0[/u]0000001\ntuser.dat + 2007-10-04 15:34:52 155,648 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\[u]0[/u]0000002\UsrClass.dat - 2007-09-19 22:49:52 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2007-10-12 12:18:54 1,165,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe - 2007-09-19 22:49:53 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2007-10-12 12:18:55 20,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe - 2007-09-19 22:49:53 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2007-10-12 12:18:54 159,504 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe - 2007-09-19 22:49:53 184,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe + 2007-10-12 12:18:54 184,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2007-09-19 22:49:53 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2007-10-12 12:18:55 217,864 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe - 2007-09-19 22:49:53 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2007-10-12 12:18:55 18,704 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe - 2007-09-19 22:49:54 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe + 2007-10-12 12:18:55 35,088 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2007-09-19 22:49:53 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe + 2007-10-12 12:18:54 845,584 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2007-09-19 22:49:53 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2007-10-12 12:18:55 922,384 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2007-09-19 22:49:53 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2007-10-12 12:18:55 272,648 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe - 2007-09-19 22:49:54 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe + 2007-10-12 12:18:55 888,080 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2007-09-19 22:49:53 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2007-10-12 12:18:54 1,172,240 ----a-r C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2007-10-13 21:36:04 102,400 ----a-r C:\WINDOWS\Installer\{B045B608-4A47-4C77-9EAD-06C394503306}\iTunesIco.exe + 2007-10-13 21:18:39 27,136 ----a-r C:\WINDOWS\Installer\{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}\AppleSoftwareUpdateIco.exe + 2004-07-15 08:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_aspnet_isapi.dll + 2004-07-15 07:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_CORPerfMonExt.dll + 2004-07-15 07:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_fusion.dll + 2004-07-15 07:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_mscorjit.dll + 2004-07-15 21:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_mscorlib.dll + 2003-02-20 21:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_mscorsn.dll + 2004-07-15 07:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_mscorsvr.dll + 2004-07-15 07:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_mscorwks.dll + 2003-02-21 06:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_msvcr71.dll + 2004-07-15 07:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1264\_PerfCounter.dll + 2004-07-15 08:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_aspnet_isapi.dll + 2004-07-15 07:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_CORPerfMonExt.dll + 2004-07-15 07:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_fusion.dll + 2004-07-15 07:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_mscorjit.dll + 2004-07-15 21:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_mscorlib.dll + 2003-02-20 21:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_mscorsn.dll + 2004-07-15 07:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_mscorsvr.dll + 2004-07-15 07:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_mscorwks.dll + 2003-02-21 06:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_msvcr71.dll + 2004-07-15 07:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1392\_PerfCounter.dll + 2004-07-15 08:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_aspnet_isapi.dll + 2004-07-15 07:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_CORPerfMonExt.dll + 2004-07-15 07:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_fusion.dll + 2004-07-15 07:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_mscorjit.dll + 2004-07-15 21:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_mscorlib.dll + 2003-02-20 21:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_mscorsn.dll + 2004-07-15 07:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_mscorsvr.dll + 2004-07-15 07:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_mscorwks.dll + 2003-02-21 06:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_msvcr71.dll + 2004-07-15 07:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1920\_PerfCounter.dll + 2004-07-15 08:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_aspnet_isapi.dll + 2004-07-15 07:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_CORPerfMonExt.dll + 2004-07-15 07:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_fusion.dll + 2004-07-15 07:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_mscorjit.dll + 2004-07-15 21:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_mscorlib.dll + 2003-02-20 21:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_mscorsn.dll + 2004-07-15 07:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_mscorsvr.dll + 2004-07-15 07:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_mscorwks.dll + 2003-02-21 06:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_msvcr71.dll + 2004-07-15 07:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3052\_PerfCounter.dll + 2004-07-15 08:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_aspnet_isapi.dll + 2004-07-15 07:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_CORPerfMonExt.dll + 2004-07-15 07:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_fusion.dll + 2004-07-15 07:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_mscorjit.dll + 2004-07-15 21:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_mscorlib.dll + 2003-02-20 21:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_mscorsn.dll + 2004-07-15 07:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_mscorsvr.dll + 2004-07-15 07:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_mscorwks.dll + 2003-02-21 06:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_msvcr71.dll + 2004-07-15 07:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW3068\_PerfCounter.dll + 2004-07-15 08:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_aspnet_isapi.dll + 2004-07-15 07:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_CORPerfMonExt.dll + 2004-07-15 07:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_fusion.dll + 2004-07-15 07:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_mscorjit.dll + 2004-07-15 21:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_mscorlib.dll + 2003-02-20 21:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_mscorsn.dll + 2004-07-15 07:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_mscorsvr.dll + 2004-07-15 07:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_mscorwks.dll + 2003-02-21 06:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_msvcr71.dll + 2004-07-15 07:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW340\_PerfCounter.dll + 2004-07-15 08:49:16 258,048 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_aspnet_isapi.dll + 2004-07-15 07:32:22 81,920 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_CORPerfMonExt.dll + 2004-07-15 07:24:30 282,624 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_fusion.dll + 2004-07-15 07:25:06 315,392 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_mscorjit.dll + 2004-07-15 21:29:02 2,138,112 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_mscorlib.dll + 2003-02-20 21:09:18 77,824 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_mscorsn.dll + 2004-07-15 07:26:52 2,510,848 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_mscorsvr.dll + 2004-07-15 07:28:34 2,502,656 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_mscorwks.dll + 2003-02-21 06:42:22 348,160 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_msvcr71.dll + 2004-07-15 07:34:50 94,208 ----a-w C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW964\_PerfCounter.dll + 2007-08-22 13:12:15 1,022,976 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\browseui.dll + 2007-08-22 13:12:15 151,040 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\cdfview.dll + 2007-08-22 13:12:16 1,054,208 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\danim.dll + 2007-08-22 13:12:16 357,888 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\dxtmsft.dll + 2007-08-22 13:12:16 205,312 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\dxtrans.dll + 2007-08-22 13:12:16 55,808 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\extmgr.dll + 2007-08-21 10:30:45 18,432 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\iedw.exe + 2007-08-22 13:12:16 251,392 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\iepeers.dll + 2007-08-22 13:12:16 96,256 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\inseng.dll + 2007-08-22 13:12:16 16,384 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\jsproxy.dll + 2007-08-22 13:12:17 3,058,176 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\mshtml.dll + 2007-08-22 13:12:17 449,024 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\mshtmled.dll + 2007-08-22 13:12:17 146,432 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\msrating.dll + 2007-08-22 13:12:17 532,480 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\mstime.dll + 2007-08-22 13:12:17 39,424 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\pngfilt.dll + 2007-08-22 13:12:18 1,494,528 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\shdocvw.dll + 2007-08-22 13:12:18 474,112 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\shlwapi.dll + 2007-08-22 13:12:18 615,424 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\urlmon.dll + 2007-08-22 13:12:18 658,944 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\wininet.dll + 2007-08-21 10:20:02 115,712 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2gdr\xpsp3res.dll + 2007-08-22 12:55:28 1,022,976 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\browseui.dll + 2007-08-22 12:55:29 151,040 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\cdfview.dll + 2007-08-22 12:55:30 1,054,208 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\danim.dll + 2007-08-22 12:55:30 357,888 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\dxtmsft.dll + 2007-08-22 12:55:31 205,824 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\dxtrans.dll + 2007-08-22 12:55:31 55,808 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\extmgr.dll + 2007-08-21 10:19:39 18,432 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\iedw.exe + 2007-08-22 12:55:32 251,904 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\iepeers.dll + 2007-08-22 12:55:32 96,256 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\inseng.dll + 2007-08-22 12:55:32 16,384 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\jsproxy.dll + 2007-08-22 12:55:36 3,064,832 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\mshtml.dll + 2007-08-22 12:55:37 449,024 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\mshtmled.dll + 2007-08-22 12:55:37 146,432 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\msrating.dll + 2007-08-22 12:55:38 532,480 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\mstime.dll + 2007-08-22 12:55:38 39,424 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\pngfilt.dll + 2007-08-22 12:55:40 1,498,112 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\shdocvw.dll + 2007-08-22 12:55:41 474,112 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\shlwapi.dll + 2007-08-22 12:55:43 617,984 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\urlmon.dll + 2007-08-22 12:55:44 665,600 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\wininet.dll + 2007-08-21 10:13:33 350,720 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\sp2qfe\xpsp3res.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\SoftwareDistribution\Download\[u]0[/u]474e07262334919ca66aaa879430a63\update\updspapi.dll + 2007-07-09 13:09:42 584,192 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\SP2GDR\rpcrt4.dll + 2007-06-13 06:53:14 115,712 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\SP2GDR\xpsp3res.dll + 2007-07-09 13:16:16 582,656 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\SP2QFE\rpcrt4.dll + 2007-06-19 07:24:36 350,720 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\SP2QFE\xpsp3res.dll + 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\spmsg.dll + 2005-10-12 23:12:26 213,216 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\spuninst.exe + 2005-10-12 23:12:25 22,752 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\update\spcustom.dll + 2005-10-12 23:12:28 716,000 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\update\update.exe + 2005-10-12 23:12:33 371,424 ----a-w C:\WINDOWS\SoftwareDistribution\Download\28d74bdac17e30d3a4336176766f2e4a\update\updspapi.dll + 2007-08-21 06:15:44 683,520 ----a-w C:\WINDOWS\SoftwareDistribution\Download\8c426bb59cb8f380ba397304c1c563d0\sp2gdr\inetcomm.dll + 2007-08-21 06:25:02 683,520 ----a-w C:\WINDOWS\SoftwareDistribution\Download\8c426bb59cb8f380ba397304c1c563d0\sp2qfe\inetcomm.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\SoftwareDistribution\Download\8c426bb59cb8f380ba397304c1c563d0\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\SoftwareDistribution\Download\8c426bb59cb8f380ba397304c1c563d0\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\SoftwareDistribution\Download\8c426bb59cb8f380ba397304c1c563d0\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\SoftwareDistribution\Download\8c426bb59cb8f380ba397304c1c563d0\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\SoftwareDistribution\Download\8c426bb59cb8f380ba397304c1c563d0\update\updspapi.dll - 2007-06-14 18:09:18 1,023,488 ----a-w C:\WINDOWS\system32\browseui.dll + 2007-08-22 13:12:15 1,022,976 ----a-w C:\WINDOWS\system32\browseui.dll - 2007-06-14 18:09:18 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll + 2007-08-22 13:12:15 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll - 2007-06-14 18:09:18 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll + 2007-08-22 13:12:16 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll + 2007-09-06 10:28:16 30,336 -c--a-w C:\WINDOWS\system32\DRVSTORE\usbaapl_A65621D65F5B7507DD7B22331826547BDD2D206B\usbaapl.sys - 2007-06-14 18:09:18 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll + 2007-08-22 13:12:16 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll - 2007-06-14 18:09:19 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll + 2007-08-22 13:12:16 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll - 2007-06-14 18:09:19 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll + 2007-08-22 13:12:16 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll - 2007-06-14 18:09:19 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll + 2007-08-22 13:12:16 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll - 2007-06-14 18:09:19 96,256 ----a-w C:\WINDOWS\system32\inseng.dll + 2007-08-22 13:12:16 96,256 ----a-w C:\WINDOWS\system32\inseng.dll - 2006-07-25 22:25:56 49,248 ----a-w C:\WINDOWS\system32\java.exe + 2007-09-24 19:30:28 135,168 ----a-w C:\WINDOWS\system32\java.exe - 2006-07-25 22:26:06 53,346 ----a-w C:\WINDOWS\system32\javaw.exe + 2007-09-24 19:30:30 135,168 ----a-w C:\WINDOWS\system32\javaw.exe - 2006-07-26 00:03:16 127,078 ----a-w C:\WINDOWS\system32\javaws.exe + 2007-09-24 20:31:42 139,264 ----a-w C:\WINDOWS\system32\javaws.exe - 2007-06-14 18:09:19 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll + 2007-08-22 13:12:16 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll + 2005-05-24 09:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll + 2007-08-29 12:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe + 2007-08-29 12:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll - 2007-09-06 02:50:42 17,474,680 ----a-w C:\WINDOWS\system32\MRT.exe + 2007-09-28 05:19:39 18,089,592 ----a-w C:\WINDOWS\system32\MRT.exe - 2007-06-14 18:09:20 3,058,688 ----a-w C:\WINDOWS\system32\mshtml.dll + 2007-08-22 13:12:17 3,058,176 ----a-w C:\WINDOWS\system32\mshtml.dll - 2007-06-14 18:09:19 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll + 2007-08-22 13:12:17 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll - 2007-06-14 18:09:19 146,432 ----a-w C:\WINDOWS\system32\msrating.dll + 2007-08-22 13:12:17 146,432 ----a-w C:\WINDOWS\system32\msrating.dll - 2000-05-23 19:45:58 118,784 ----a-w C:\WINDOWS\system32\MSSTDFMT.DLL + 2000-07-15 05:00:00 118,784 ----a-w C:\WINDOWS\system32\MSSTDFMT.DLL - 2007-06-14 18:09:20 532,480 ----a-w C:\WINDOWS\system32\mstime.dll + 2007-08-22 13:12:17 532,480 ----a-w C:\WINDOWS\system32\mstime.dll - 2004-08-04 08:00:00 1,392,671 ----a-w C:\WINDOWS\system32\msvbvm60.dll + 2004-02-24 02:42:40 1,386,496 ----a-w C:\WINDOWS\system32\msvbvm60.dll - 2007-06-14 18:09:20 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll + 2007-08-22 13:12:17 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll - 2004-08-04 08:00:00 581,120 ----a-w C:\WINDOWS\system32\rpcrt4.dll + 2007-07-09 13:09:42 584,192 ----a-w C:\WINDOWS\system32\rpcrt4.dll - 2007-06-14 18:09:20 1,494,528 ----a-w C:\WINDOWS\system32\shdocvw.dll + 2007-08-22 13:12:18 1,494,528 ----a-w C:\WINDOWS\system32\shdocvw.dll - 2007-06-14 18:09:20 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll + 2007-08-22 13:12:18 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll - 2007-07-22 15:39:27 844,800 ----a-w C:\WINDOWS\system32\swreg.exe + 2007-10-05 07:07:31 279,552 ----a-w C:\WINDOWS\system32\swreg.exe - 2007-06-14 18:09:20 615,424 ----a-w C:\WINDOWS\system32\urlmon.dll + 2007-08-22 13:12:18 615,424 ----a-w C:\WINDOWS\system32\urlmon.dll - 2007-06-26 14:09:10 658,944 ----a-w C:\WINDOWS\system32\wininet.dll + 2007-08-22 13:12:18 658,944 ----a-w C:\WINDOWS\system32\wininet.dll - 2007-06-14 13:39:54 115,712 ----a-w C:\WINDOWS\system32\xpsp3res.dll + 2007-08-21 10:20:02 115,712 ----a-w C:\WINDOWS\system32\xpsp3res.dll - 2006-04-26 13:32:34 524,288 ----a-w C:\WINDOWS\system32\XVIDCORE.DLL + 2007-02-28 10:33:08 761,856 ----a-w C:\WINDOWS\system32\xvidcore.dll - 2006-04-26 13:32:34 155,648 ----a-w C:\WINDOWS\system32\XVIDVFW.DLL + 2007-02-28 10:33:08 180,224 ----a-w C:\WINDOWS\system32\xvidvfw.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AGRSMMSG"="AGRSMMSG.exe" [2005-04-13 13:12 C:\WINDOWS\AGRSMMSG.exe] "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-01-20 07:40] "UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 11:01] "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-08-03 11:05] "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2005-02-02 15:12] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-02-02 15:11] "eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-12-03 23:24] "CognizanceTS"="C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll" [2003-12-22 21:12] "hpWirelessAssistant"="C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe" [2005-01-21 23:40] "WatchDog"="C:\Program Files\InterVideo\DVD Check\DVDCheck.exe" [2004-12-08 19:44] "Samsung LBP SM"="C:\WINDOWS\Samsung\LaserSMMgr\ssmmgr.exe" [2003-04-04 03:40] "ioloDelayModule"="C:\Program Files\iolo\System Mechanic Professional 6\delay.exe" [2005-06-08 14:31] "UVS10 Preload"="C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe" [2006-03-07 00:52] "NSRKey"="C:\PROGRA~1\NORTON~2\NSR\Agent\NSRTray.exe" [] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-06-29 06:24] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-09-26 14:42] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 11:00] "Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2006-11-30 22:49] "H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2006-06-26 16:13] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 20:05] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableChangePassword"=0 (0x0) "DisableLockWorkstation"=0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoViewOnDrive"=0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard] C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll 2004-11-10 03:19 38912 C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] "Notification Packages"= scecli AsWlnPkg [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10818}" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10818}" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 6\SMSystemAnalyzer.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" -quiet R1 ClntMgmt.sys;ClntMgmt.sys;C:\WINDOWS\system32\Drivers\ClntMgmt.sys R2 ASChannel;Local Communication Channel;C:\WINDOWS\System32\svchost.exe -k Cognizance R2 DgiVecp;Team MFP Comm Driver;C:\WINDOWS\system32\Drivers\DgiVecp.sys R3 GTIPCI21;GTIPCI21;C:\WINDOWS\system32\DRIVERS\gtipci21.sys S2 pciinfo;HP Pci Information;\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HPISPz\hpdom\pciinfo.sys S3 dot4ufd;HP Dot4USB Filter;C:\WINDOWS\system32\DRIVERS\hppaufd0.sys S3 EraserUtilDrv10621;EraserUtilDrv10621;\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv10621.sys S3 Z302Mic;Vimicro Z302 Mic Audio Filter Driver;C:\WINDOWS\system32\drivers\UsbMicfilt.sys S3 ZSMC302;PC CAM 300A;C:\WINDOWS\system32\Drivers\usbvm302.sys [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] Cognizance ASChannel [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{91a85214-d646-11db-b2a9-0014c2e08dc1}] Auto\command - F:\sal.xls.exe AutoRun\command - C:\WINDOWS\system32\RunDLL32.exe Shell32.DLL,ShellExec_RunDLL sal.xls.exe . Contents of the 'Scheduled Tasks' folder "2007-10-13 21:18:37 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-16 00:27:44 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** . Completion time: 2007-10-16 0:29:42 C:\ComboFix-quarantined-files.txt ... 2007-10-04 11:41 C:\ComboFix2.txt ... 2007-10-04 11:42 . --- E O F ---

The computer looks cleaner than the last time I viewed it. Lets check for a rootkit. Please download the Sophos Anti-Rootkit Scanner and save it to your desktop from the following link. Sophos-Anti-Rootkit You will need to enter your name, e-mail address and location in order to access the download page. Once you have downloaded the file, double click the sarsfx icon Review the licence agreement and click on the Accept button The scanner will prompt you to extract the files to C:\SOPHTEMP - DO NOT change this location, simply click the Install button Once the files have been extracted; using Windows Explorer, navigate to C:\SOPHTEMP and double click on the blue shield icon called sargui. Ensure that there are checkmarks next to Running processes, Windows registry and Local hard drives, then click Start scan Allow the program to scan your computer - please be patient as it may take some time Once the scan has completed a window will pop-up with the results of the scan - click OK to this. In the main window, you will see each of the entries found by the scan (if any) If the scanner generated any warning messages, please click on each warning and copy and paste the text of it into this thread for me to review. Once you have posted any warning messages here, you can close the scanner and wait for me to get back to you. If you have not had any warnings, any entries which can be cleaned up by the scanner will have a box with a green checkmark in it next to the entry To clean up these entries click on the Clean up checked items button. If you accidentally check a file NOT recommended for clean up, you will get a warning message and if necessary can re-select the entries you want to clean up Once you have cleaned the selected files, you will be prompted to re-boot your computer - please do so. Let us know if this helped the computers runability.