Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Internet Security 2010-malware

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Internet Security 2010-malware

Unread postby PapaBear » January 24th, 2010, 11:38 am

OTL txt **Part 1**
OTL logfile created on: 1/24/2010 9:25:16 AM - Run 1
OTL by OldTimer - Version 3.1.26.0 Folder = C:\Documents and Settings\Gary S. Priest\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 35.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 68.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 76.68 Gb Total Space | 57.04 Gb Free Space | 74.39% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: REX
Current User Name: Gary S. Priest
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Gary S. Priest\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Documents and Settings\Gary S. Priest\My Documents\Conquer\SV-v20100115-P5206(v516)\scriptvessel.exe (SV Program Group)
PRC - C:\Program Files\Conquer 2.0\Conquer.exe (TQ Digital Entertainment)
PRC - C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgam.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSMonitor.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Conquer 2.0\zftqat\TQAT.exe (TQdigital)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Gary S. Priest\Desktop\OTL.exe (OldTimer Tools)


========== Win32 Services (SafeList) ==========

SRV - (NMIndexingService) -- File not found
SRV - (avgfws9) -- C:\Program Files\AVG\AVG9\avgfws9.exe (AVG Technologies CZ, s.r.o.)
SRV - (gupdate) Google Update Service (gupdate) -- C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (avg9emc) -- C:\Program Files\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (AVGIDSAgent) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9wd) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (JavaQuickStarterService) -- C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (ATI Smart) -- C:\WINDOWS\system32\ati2sgag.exe ()
SRV - (Ati HotKey Poller) -- C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.)
SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)


========== Driver Services (SafeList) ==========

DRV - (AvgLdx86) -- C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgRkx86) -- C:\WINDOWS\System32\Drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSErHrxpx) -- C:\WINDOWS\System32\Drivers\AVGIDSxx.sys (AVG Technologies )
DRV - (AvgTdiX) -- C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSDriverxpx) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys (AVG Technologies )
DRV - (AVGIDSFilterxpx) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys (AVG Technologies )
DRV - (AVGIDSShimxpx) -- C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys (AVG Technologies )
DRV - (Avgfwfd) -- C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgfwdx) -- C:\WINDOWS\system32\drivers\avgfwdx.sys (AVG Technologies CZ, s.r.o.)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (VClone) -- C:\WINDOWS\system32\drivers\VClone.sys (Elaborate Bytes AG)
DRV - (PxHelp20) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (ElbyCDIO) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV - (usbaudio) USB Audio Driver (WDM) -- C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (P17) -- C:\WINDOWS\system32\drivers\P17.sys (Creative Technology Ltd.)
DRV - (ZSMC211) ZSMC USB PC Camera (ZS211) -- C:\WINDOWS\system32\drivers\ZS211.sys (ZSMC.Corporation)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (FETND5BV) -- C:\WINDOWS\system32\drivers\fetnd5bv.sys (VIA Technologies, Inc. )
DRV - (viamraid) -- C:\WINDOWS\system32\DRIVERS\viamraid.sys (VIA Technologies inc,.ltd)
DRV - (BIOS) -- C:\WINDOWS\system32\drivers\BIOS.sys (BIOSTAR Group)
DRV - (ossrv) -- C:\WINDOWS\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctsfm2k) -- C:\WINDOWS\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.)
DRV - (FETNDIS) -- C:\WINDOWS\system32\drivers\fetnd5.sys (VIA Technologies, Inc. )


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1547161642-706699826-839522115-1004\S-1-5-21-1547161642-706699826-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.716
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010/01/07 18:48:48 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/07 16:59:40 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/06 08:29:04 | 00,000,000 | ---D | M]

[2009/12/25 17:57:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Gary S. Priest\Application Data\Mozilla\Extensions
[2010/01/22 19:55:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Gary S. Priest\Application Data\Mozilla\Firefox\Profiles\dt378tcy.default\extensions
[2010/01/22 19:55:23 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/12/20 23:47:02 | 00,063,488 | ---- | M] (Nullsoft) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll

O1 HOSTS File: ([2010/01/18 19:55:03 | 00,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [VirtualCloneDrive] C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1547161642-706699826-839522115-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1547161642-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1547161642-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1547161642-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1547161642-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\DisableRegistryTools: = 0
O7 - HKU\S-1-5-21-1547161642-706699826-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\DisableRegistryTools\ShowInfoTip: = 0
O7 - HKU\S-1-5-21-1547161642-706699826-839522115-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O15 - HKLM\..Trusted Domains: 58 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\.DEFAULT\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-18\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-1547161642-706699826-839522115-1004\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.220.0.10 24.220.0.11
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Gary S. Priest\Application Data\Mozilla\Firefox\Desktop Background.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/12/25 17:47:51 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/01/24 09:24:03 | 00,547,328 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Gary S. Priest\Desktop\OTL.exe
[2010/01/22 18:27:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2010/01/21 10:46:52 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Gary S. Priest\Desktop\HJTInstall.exe
[2010/01/20 19:08:47 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2010/01/20 19:08:43 | 00,000,000 | ---D | C] -- C:\_OTM
[2010/01/20 19:07:40 | 00,503,296 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Gary S. Priest\Desktop\OTM.exe
[2010/01/18 19:59:13 | 00,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010/01/18 19:49:48 | 00,000,000 | RHSD | C] -- C:\cmdcons
[2010/01/18 19:49:09 | 00,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/01/18 19:49:09 | 00,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/01/18 19:49:09 | 00,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/01/18 19:49:09 | 00,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/01/18 19:33:33 | 00,000,000 | ---D | C] -- C:\Qoobox
[2010/01/18 19:13:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/01/18 19:12:27 | 00,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2010/01/18 19:11:22 | 00,791,393 | ---- | C] (Lars Hederer ) -- C:\Documents and Settings\Gary S. Priest\Desktop\erunt-setup.exe
[2010/01/15 14:50:29 | 00,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010/01/15 14:50:29 | 00,000,000 | ---D | C] -- C:\rsit
[2010/01/15 10:30:25 | 00,050,688 | ---- | C] (Atribune.org) -- C:\Documents and Settings\Gary S. Priest\Desktop\ATF-Cleaner.exe
[2010/01/12 13:39:45 | 00,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2010/01/11 10:16:00 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010/01/11 10:13:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Google
[2010/01/11 10:11:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010/01/11 10:11:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Temp
[2010/01/11 10:11:27 | 00,000,000 | ---D | C] -- C:\Program Files\Google
[2010/01/11 10:11:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Google
[2010/01/07 18:49:32 | 00,000,000 | ---D | C] -- C:\$AVG
[2010/01/07 18:49:20 | 00,012,464 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010/01/07 18:49:19 | 00,333,192 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/01/07 18:49:19 | 00,028,424 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/01/07 18:49:11 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg
[2010/01/07 18:48:55 | 00,161,800 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/01/07 18:48:55 | 00,025,608 | ---- | C] (AVG Technologies ) -- C:\WINDOWS\System32\drivers\AVGIDSxx.sys
[2010/01/07 18:48:52 | 00,360,584 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/01/07 18:48:48 | 00,050,968 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgfwdx.dll
[2010/01/07 18:48:48 | 00,030,104 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgfwdx.sys
[2010/01/07 18:48:48 | 00,000,000 | ---D | C] -- C:\Program Files\AVG
[2010/01/07 18:48:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\avg9
[2010/01/07 18:47:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/01/07 18:19:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Malwarebytes
[2010/01/07 17:07:05 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/07 17:07:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/01/07 17:07:03 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/07 17:07:03 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/01/07 16:49:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\smss32.exe
[2010/01/07 09:54:11 | 00,000,000 | ---D | C] -- C:\Program Files\TrendMicro
[2010/01/07 07:49:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\DoctorWeb
[2010/01/07 07:00:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\Avanquest SystemSuite Professional v9.0.3.3
[2010/01/06 10:27:46 | 00,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2010/01/02 09:07:51 | 00,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2010/01/02 09:07:51 | 00,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2010/01/01 16:40:12 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys
[2010/01/01 15:05:49 | 00,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2010/01/01 14:58:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Tracing
[2010/01/01 14:57:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\microsoft
[2010/01/01 14:55:40 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2010/01/01 14:54:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Contacts
[2010/01/01 14:54:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\My Received Files
[2010/01/01 14:52:59 | 00,000,000 | -HSD | C] -- C:\Program Files\Common Files\WindowsLiveInstaller
[2010/01/01 14:52:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\WLInstaller
[2010/01/01 14:45:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Help
[2010/01/01 14:45:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Help
[2010/01/01 14:13:34 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010/01/01 14:13:19 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010/01/01 14:13:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2010/01/01 14:13:10 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010/01/01 14:12:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Adobe
[2010/01/01 14:12:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NOS
[2009/12/31 19:42:49 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\gtk-2.0
[2009/12/31 19:42:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\.thumbnails
[2009/12/31 19:41:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\.gimp-2.6
[2009/12/31 19:41:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\.gegl-0.0
[2009/12/31 19:41:07 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\Gary S. Priest\PrivacIE
[2009/12/31 19:38:13 | 00,000,000 | ---D | C] -- C:\Program Files\Gimp-2.0
[2009/12/31 14:31:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\NeroLogs
[2009/12/31 09:05:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Nero
[2009/12/30 19:28:05 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2009/12/30 19:27:48 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2009/12/30 19:21:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2009/12/30 19:21:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2009/12/30 19:21:53 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2009/12/30 19:21:53 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2009/12/30 19:19:56 | 00,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2009/12/30 19:18:39 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2009/12/30 19:18:39 | 00,000,000 | ---D | C] -- C:\WINDOWS\EHome
[2009/12/30 19:09:29 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\Gary S. Priest\IETldCache
[2009/12/30 18:55:32 | 11,070,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2009/12/30 18:55:32 | 01,985,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2009/12/30 18:55:32 | 00,594,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2009/12/30 18:55:32 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2009/12/30 18:55:30 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2009/12/30 18:55:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2009/12/30 18:55:10 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2009/12/29 10:54:08 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax
[2009/12/29 10:53:54 | 00,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax
[2009/12/29 10:53:54 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax
[2009/12/29 10:53:54 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2009/12/29 10:53:53 | 00,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll
[2009/12/29 10:53:53 | 00,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax
[2009/12/29 10:53:37 | 01,469,312 | ---- | C] (ZSMC.Corporation) -- C:\WINDOWS\System32\drivers\ZS211.sys
[2009/12/29 10:53:37 | 00,172,115 | ---- | C] (ZSMC) -- C:\WINDOWS\System32\ZS211Prp.Ax
[2009/12/29 10:53:37 | 00,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\amcap.exe
[2009/12/29 10:53:37 | 00,081,920 | ---- | C] (zsmc) -- C:\WINDOWS\System32\ZS211STI.dll
[2009/12/29 10:53:37 | 00,077,824 | ---- | C] (ZSMC) -- C:\WINDOWS\ZS211Cap.exe
[2009/12/29 10:53:37 | 00,057,344 | ---- | C] (ZSMCSNAP) -- C:\WINDOWS\ZSSnp211.exe
[2009/12/29 10:53:35 | 00,000,000 | ---D | C] -- C:\Program Files\Vimicro
[2009/12/27 09:36:51 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2009/12/26 11:36:47 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Nero
[2009/12/26 08:35:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Ahead
[2009/12/25 23:18:26 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009/12/25 23:18:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2009/12/25 22:56:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\NeroVision
[2009/12/25 22:52:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Nero
[2009/12/25 22:41:01 | 00,000,000 | ---D | C] -- C:\Program Files\Nero
[2009/12/25 21:33:52 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Sidebar
[2009/12/25 21:29:45 | 00,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_5.dll
[2009/12/25 21:29:44 | 05,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcsx_42.dll
[2009/12/25 21:29:44 | 01,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_42.dll
[2009/12/25 21:29:44 | 01,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll
[2009/12/25 21:29:44 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_42.dll
[2009/12/25 21:29:44 | 00,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_5.dll
[2009/12/25 21:29:44 | 00,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx11_42.dll
[2009/12/25 21:29:43 | 04,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_41.dll
[2009/12/25 21:29:43 | 01,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_41.dll
[2009/12/25 21:29:43 | 00,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_4.dll
[2009/12/25 21:29:43 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_41.dll
[2009/12/25 21:29:43 | 00,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_4.dll
[2009/12/25 21:29:43 | 00,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_3.dll
[2009/12/25 21:29:42 | 04,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll
[2009/12/25 21:29:42 | 02,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_40.dll
[2009/12/25 21:29:42 | 00,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_3.dll
[2009/12/25 21:29:42 | 00,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_40.dll
[2009/12/25 21:29:42 | 00,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_2.dll
[2009/12/25 21:29:42 | 00,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_6.dll
[2009/12/25 21:29:41 | 03,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_39.dll
[2009/12/25 21:29:41 | 01,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_39.dll
[2009/12/25 21:29:41 | 00,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_2.dll
[2009/12/25 21:29:41 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_39.dll
[2009/12/25 21:29:41 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_2.dll
[2009/12/25 21:29:41 | 00,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_3.dll
[2009/12/25 21:29:41 | 00,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_1.dll
[2009/12/25 21:29:41 | 00,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_5.dll
[2009/12/25 21:29:40 | 03,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_38.dll
[2009/12/25 21:29:40 | 01,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_38.dll
[2009/12/25 21:29:40 | 00,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_1.dll
[2009/12/25 21:29:40 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_38.dll
[2009/12/25 21:29:40 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_1.dll
[2009/12/25 21:29:40 | 00,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_0.dll
[2009/12/25 21:29:40 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_4.dll
[2009/12/25 21:29:39 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2009/12/25 21:29:39 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_37.dll
[2009/12/25 21:29:39 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_0.dll
[2009/12/25 21:29:39 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_37.dll
[2009/12/25 21:29:39 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_0.dll
[2009/12/25 21:29:39 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_3.dll
[2009/12/25 21:28:11 | 00,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2009/12/25 21:25:38 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Nero
[2009/12/25 21:12:36 | 00,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deploytk.dll
[2009/12/25 21:12:36 | 00,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2009/12/25 21:12:36 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2009/12/25 21:12:36 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2009/12/25 21:12:36 | 00,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2009/12/25 21:12:27 | 00,000,000 | ---D | C] -- C:\Program Files\Java
[2009/12/25 21:11:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Sun
[2009/12/25 21:11:03 | 00,000,000 | ---D | C] -- C:\Program Files\Winamp Detect
[2009/12/25 21:10:53 | 01,858,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll
[2009/12/25 21:10:53 | 00,670,192 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll
[2009/12/25 21:10:53 | 00,551,408 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll
[2009/12/25 21:10:53 | 00,436,720 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll
[2009/12/25 21:10:53 | 00,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll
[2009/12/25 21:10:53 | 00,129,520 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll
[2009/12/25 21:10:53 | 00,096,752 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll
[2009/12/25 21:10:53 | 00,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe
[2009/12/25 21:10:53 | 00,066,544 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe
[2009/12/25 21:10:53 | 00,066,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe
[2009/12/25 21:10:53 | 00,044,944 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\PxHelp20.sys
[2009/12/25 21:10:53 | 00,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys
[2009/12/25 21:10:53 | 00,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2009/12/25 21:10:53 | 00,000,000 | ---D | C] -- C:\Program Files\Winamp
[2009/12/25 21:10:53 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Winamp
[2009/12/25 21:00:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\uTorrent
[2009/12/25 20:54:36 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles
[2009/12/25 20:53:52 | 00,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages
[2009/12/25 20:53:36 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2009/12/25 20:53:36 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2009/12/25 20:53:36 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll
[2009/12/25 20:53:36 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll
[2009/12/25 20:53:35 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll
[2009/12/25 20:53:35 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_35.dll
[2009/12/25 20:53:35 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll
[2009/12/25 20:53:35 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll
[2009/12/25 20:53:34 | 03,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_34.dll
[2009/12/25 20:53:34 | 01,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_34.dll
[2009/12/25 20:53:34 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_34.dll
[2009/12/25 20:53:34 | 00,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_8.dll
[2009/12/25 20:53:34 | 00,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2009/12/25 20:53:34 | 00,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_2.dll
[2009/12/25 20:53:33 | 00,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_7.dll
[2009/12/25 20:53:32 | 03,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_33.dll
[2009/12/25 20:53:32 | 01,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_33.dll
[2009/12/25 20:53:32 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_33.dll
[2009/12/25 20:53:31 | 03,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll
[2009/12/25 20:53:31 | 02,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2009/12/25 20:53:31 | 00,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_6.dll
[2009/12/25 20:53:31 | 00,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_5.dll
[2009/12/25 20:53:31 | 00,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_4.dll
[2009/12/25 20:53:31 | 00,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_1.dll
[2009/12/25 20:53:30 | 00,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_3.dll
[2009/12/25 20:53:30 | 00,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_2.dll
[2009/12/25 20:53:30 | 00,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_1.dll
[2009/12/25 20:53:30 | 00,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_2.dll
[2009/12/25 20:53:30 | 00,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_1.dll
[2009/12/25 20:53:26 | 02,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll
[2009/12/25 20:53:25 | 02,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll
[2009/12/25 20:53:25 | 02,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2009/12/25 20:53:25 | 02,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll
[2009/12/25 20:53:25 | 00,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_0.dll
[2009/12/25 20:53:25 | 00,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput9_1_0.dll
[2009/12/25 20:53:25 | 00,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_0.dll
[2009/12/25 20:53:24 | 02,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2009/12/25 20:53:24 | 02,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll
[2009/12/25 20:53:24 | 02,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll
[2009/12/25 20:51:36 | 00,000,000 | ---D | C] -- C:\d7bd8d90dc6561f35f408805b51018a4
[2009/12/25 20:34:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Roxio Log Files
[2009/12/25 20:30:04 | 00,000,000 | ---D | C] -- C:\Program Files\Elaborate Bytes
[2009/12/25 19:26:38 | 00,000,000 | ---D | C] -- C:\Hex_Editor_xvi32
[2009/12/25 19:21:44 | 01,650,688 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplva6.dll
[2009/12/25 19:21:44 | 01,581,056 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvw7.dll
[2009/12/25 19:21:44 | 01,552,384 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvm6.dll
[2009/12/25 19:21:44 | 01,122,304 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplvpx.dll
[2009/12/25 19:21:44 | 00,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaw7.dll
[2009/12/25 19:21:44 | 00,077,824 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplaa6.dll
[2009/12/25 19:21:44 | 00,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplapx.dll
[2009/12/25 19:21:44 | 00,065,536 | ---- | C] (Ligos Corporation) -- C:\WINDOWS\System32\mplam6.dll
[2009/12/25 19:21:42 | 00,000,000 | ---D | C] -- C:\Program Files\ACE Mega CoDecS Pack
[2009/12/25 19:09:10 | 00,000,000 | ---D | C] -- C:\Program Files\Conquer 2.0
[2009/12/25 19:04:38 | 00,036,864 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AmdK8.sys
[2009/12/25 19:04:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2009/12/25 19:04:38 | 00,000,000 | ---D | C] -- C:\Program Files\AMD
[2009/12/25 19:04:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\InstallShield
[2009/12/25 19:01:52 | 00,409,600 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2009/12/25 19:01:52 | 00,114,688 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2009/12/25 19:01:46 | 00,011,264 | ---- | C] (Creative Technology Limited) -- C:\WINDOWS\INRES.DLL
[2009/12/25 19:01:45 | 00,000,000 | ---D | C] -- C:\Program Files\Creative
[2009/12/25 18:59:04 | 00,000,000 | ---D | C] -- C:\WINDOWS\pss
[2009/12/25 18:51:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2009/12/25 18:34:42 | 00,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys
[2009/12/25 18:34:42 | 00,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys
[2009/12/25 18:34:42 | 00,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys
[2009/12/25 18:34:42 | 00,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys
[2009/12/25 18:34:42 | 00,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys
[2009/12/25 18:34:42 | 00,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys
[2009/12/25 18:34:41 | 00,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys
[2009/12/25 18:34:41 | 00,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys
[2009/12/25 18:34:41 | 00,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys
[2009/12/25 18:34:41 | 00,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys
[2009/12/25 18:34:40 | 00,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys
[2009/12/25 18:34:40 | 00,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys
[2009/12/25 18:34:39 | 01,897,408 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys
[2009/12/25 18:34:39 | 00,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2009/12/25 18:34:38 | 01,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[2009/12/25 18:34:38 | 00,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys
[2009/12/25 18:34:38 | 00,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2009/12/25 18:34:37 | 00,011,868 | ---- | C] (Conexant) -- C:\WINDOWS\System32\drivers\mdmxsdk.sys
[2009/12/25 18:34:36 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\WinRAR
[2009/12/25 18:34:34 | 01,041,536 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfdpsp2.sys
[2009/12/25 18:34:34 | 00,685,056 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfcxts2.sys
[2009/12/25 18:34:34 | 00,220,032 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfbs2s2.sys
[2009/12/25 18:34:19 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2009/12/25 18:33:34 | 00,327,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2009/12/25 18:33:34 | 00,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys
[2009/12/25 18:33:34 | 00,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys
[2009/12/25 18:33:34 | 00,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2009/12/25 18:33:34 | 00,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys
[2009/12/25 18:33:34 | 00,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys
[2009/12/25 18:33:34 | 00,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys
[2009/12/25 18:33:34 | 00,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys
[2009/12/25 18:33:34 | 00,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2009/12/25 18:33:34 | 00,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2009/12/25 18:33:34 | 00,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys
[2009/12/25 18:33:34 | 00,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys
[2009/12/25 18:33:34 | 00,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2009/12/25 18:33:34 | 00,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys
[2009/12/25 18:33:34 | 00,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys
[2009/12/25 18:33:34 | 00,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2009/12/25 18:33:34 | 00,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys
[2009/12/25 18:33:34 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys
[2009/12/25 18:33:34 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys
[2009/12/25 18:33:34 | 00,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2009/12/25 18:33:34 | 00,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2009/12/25 18:32:55 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\Conquer
[2009/12/25 18:28:56 | 00,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2009/12/25 18:28:53 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2009/12/25 18:28:51 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us
[2009/12/25 18:28:50 | 00,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2009/12/25 18:28:35 | 00,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll
[2009/12/25 18:26:59 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 6.0
[2009/12/25 18:23:39 | 00,272,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2009/12/25 18:22:12 | 00,043,008 | ---- | C] (VIA Technologies, Inc. ) -- C:\WINDOWS\System32\drivers\fetnd5bv.sys
[2009/12/25 18:22:12 | 00,000,000 | ---D | C] -- C:\WINDOWS\vnDrvBas
[2009/12/25 18:19:39 | 02,189,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2009/12/25 18:19:39 | 02,145,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2009/12/25 18:19:39 | 00,730,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009/12/25 18:19:38 | 02,023,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2009/12/25 18:18:09 | 00,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys
[2009/12/25 18:18:07 | 00,455,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2009/12/25 18:18:05 | 00,333,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys
[2009/12/25 18:17:47 | 00,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll
[2009/12/25 18:17:11 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2009/12/25 18:17:02 | 00,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2009/12/25 18:16:57 | 00,000,000 | ---D | C] -- C:\Program Files\VIA
[2009/12/25 18:16:52 | 00,689,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsp3res.dll
[2009/12/25 18:16:24 | 00,013,696 | R--- | C] (BIOSTAR Group) -- C:\WINDOWS\System32\drivers\BIOS.sys
[2009/12/25 18:13:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\ATI
[2009/12/25 18:13:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\ATI
[2009/12/25 18:13:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ATI
[2009/12/25 18:11:20 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2009/12/25 18:11:04 | 00,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2009/12/25 18:11:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2009/12/25 18:11:00 | 00,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2009/12/25 18:11:00 | 00,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2009/12/25 18:10:59 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2009/12/25 18:10:47 | 00,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2009/12/25 18:06:44 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/12/25 18:06:44 | 00,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2009/12/25 18:06:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\Drivers
[2009/12/25 18:06:17 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009/12/25 18:06:01 | 00,000,000 | ---D | C] -- C:\ATI
[2009/12/25 18:01:48 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2009/12/25 17:59:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\Downloads
[2009/12/25 17:58:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Macromedia
[2009/12/25 17:58:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Adobe
[2009/12/25 17:57:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Mozilla
[2009/12/25 17:57:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Mozilla
[2009/12/25 17:56:56 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2009/12/25 17:53:40 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\MyDownloads
[2009/12/25 17:53:23 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Identities
[2009/12/25 17:53:22 | 00,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2009/12/25 17:53:21 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\My Pictures
[2009/12/25 17:53:21 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents\My Music
[2009/12/25 17:53:19 | 00,000,000 | --SD | C] -- C:\Documents and Settings\Gary S. Priest\Application Data\Microsoft
[2009/12/25 17:53:19 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Gary S. Priest\SendTo
[2009/12/25 17:53:19 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Gary S. Priest\Recent
[2009/12/25 17:53:19 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\Gary S. Priest\Application Data
[2009/12/25 17:53:19 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Gary S. Priest\Start Menu
[2009/12/25 17:53:19 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Gary S. Priest\My Documents
[2009/12/25 17:53:19 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Gary S. Priest\Favorites
[2009/12/25 17:53:19 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\Gary S. Priest\Cookies
[2009/12/25 17:53:19 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Gary S. Priest\Templates
[2009/12/25 17:53:19 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Gary S. Priest\PrintHood
[2009/12/25 17:53:19 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Gary S. Priest\NetHood
[2009/12/25 17:53:19 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings
[2009/12/25 17:53:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\Microsoft
[2009/12/25 17:53:19 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Gary S. Priest\Desktop
[2009/12/25 17:50:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2009/12/25 17:50:20 | 00,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2009/12/25 17:49:09 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime
[2009/12/25 17:49:09 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime
[2009/12/25 17:49:09 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime
[2009/12/25 17:49:09 | 00,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime
[2009/12/25 17:49:09 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime
[2009/12/25 17:49:09 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime
[2009/12/25 17:49:08 | 00,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll
[2009/12/25 17:49:08 | 00,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll
[2009/12/25 17:49:08 | 00,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys
[2009/12/25 17:49:07 | 00,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll
[2009/12/25 17:49:07 | 00,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll
[2009/12/25 17:49:06 | 00,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll
[2009/12/25 17:49:06 | 00,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime
[2009/12/25 17:49:06 | 00,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe
[2009/12/25 17:49:06 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll
[2009/12/25 17:49:05 | 00,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2009/12/25 17:49:05 | 00,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe
[2009/12/25 17:49:05 | 00,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2009/12/25 17:49:05 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe
[2009/12/25 17:49:05 | 00,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys
[2009/12/25 17:49:05 | 00,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys
[2009/12/25 17:49:05 | 00,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys
[2009/12/25 17:49:03 | 00,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll
[2009/12/25 17:49:03 | 00,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll
[2009/12/25 17:49:02 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll
[2009/12/25 17:49:02 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2009/12/25 17:49:01 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll
[2009/12/25 17:49:01 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll
[2009/12/25 17:49:01 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll
[2009/12/25 17:49:01 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll
[2009/12/25 17:49:01 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2009/12/25 17:49:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll
[2009/12/25 17:49:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll
[2009/12/25 17:49:00 | 00,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll
[2009/12/25 17:49:00 | 00,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll
[2009/12/25 17:49:00 | 00,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll
[2009/12/25 17:49:00 | 00,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll
[2009/12/25 17:49:00 | 00,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll
[2009/12/25 17:49:00 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll
[2009/12/25 17:49:00 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll
[2009/12/25 17:49:00 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll
[2009/12/25 17:49:00 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll
[2009/12/25 17:49:00 | 00,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll
[2009/12/25 17:49:00 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll
[2009/12/25 17:48:58 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2009/12/25 17:48:58 | 00,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2009/12/25 17:48:58 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2009/12/25 17:48:57 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2009/12/25 17:48:57 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime
[2009/12/25 17:48:56 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2009/12/25 17:48:56 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe
[2009/12/25 17:48:55 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime
[2009/12/25 17:48:55 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe
[2009/12/25 17:48:55 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe
[2009/12/25 17:48:54 | 00,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2009/12/25 17:48:54 | 00,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe
[2009/12/25 17:48:54 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll
[2009/12/25 17:48:54 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2009/12/25 17:48:54 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll
[2009/12/25 17:48:53 | 00,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2009/12/25 17:48:53 | 00,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime
[2009/12/25 17:48:53 | 00,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2009/12/25 17:48:53 | 00,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll
[2009/12/25 17:48:53 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll
[2009/12/25 17:48:53 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll
[2009/12/25 17:48:53 | 00,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll
[2009/12/25 17:48:52 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2009/12/25 17:48:50 | 00,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll
[2009/12/25 17:48:48 | 01,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex
[2009/12/25 17:48:48 | 00,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll
[2009/12/25 17:48:46 | 00,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys
[2009/12/25 17:48:46 | 00,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll
[2009/12/25 17:48:45 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2009/12/25 17:48:44 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2009/12/25 17:48:43 | 00,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2009/12/25 17:48:43 | 00,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2009/12/25 17:48:43 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2009/12/25 17:48:43 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll
[2009/12/25 17:48:43 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll
[2009/12/25 17:48:43 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2009/12/25 17:48:43 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll
[2009/12/25 17:48:43 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2009/12/25 17:48:43 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll
[2009/12/25 17:48:43 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll
[2009/12/25 17:48:43 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2009/12/25 17:48:43 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2009/12/25 17:48:42 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll
[2009/12/25 17:48:42 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll
[2009/12/25 17:48:42 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2009/12/25 17:48:41 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll
[2009/12/25 17:48:41 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll
[2009/12/25 17:48:41 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2009/12/25 17:48:41 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2009/12/25 17:48:41 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll
[2009/12/25 17:48:41 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll
[2009/12/25 17:48:41 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll
[2009/12/25 17:48:41 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2009/12/25 17:48:41 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll
[2009/12/25 17:48:40 | 00,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll
[2009/12/25 17:48:40 | 00,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll
[2009/12/25 17:48:39 | 00,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll
[2009/12/25 17:48:39 | 00,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe
[2009/12/25 17:48:39 | 00,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe
[2009/12/25 17:48:39 | 00,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe
[2009/12/25 17:48:39 | 00,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2009/12/25 17:48:39 | 00,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll
[2009/12/25 17:48:39 | 00,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe
[2009/12/25 17:48:39 | 00,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe
[2009/12/25 17:48:38 | 00,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll
[2009/12/25 17:48:38 | 00,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll
[2009/12/25 17:48:38 | 00,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll
[2009/12/25 17:48:38 | 00,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime
[2009/12/25 17:48:38 | 00,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe
[2009/12/25 17:48:38 | 00,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe
[2009/12/25 17:48:38 | 00,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll
[2009/12/25 17:48:38 | 00,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll
[2009/12/25 17:48:38 | 00,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2009/12/25 17:48:37 | 00,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll
[2009/12/25 17:48:37 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime
[2009/12/25 17:48:37 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2009/12/25 17:48:37 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe
[2009/12/25 17:48:34 | 10,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll
[2009/12/25 17:48:28 | 10,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll
[2009/12/25 17:48:27 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll
[2009/12/25 17:48:26 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll
[2009/12/25 17:48:26 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe
[2009/12/25 17:48:25 | 00,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2009/12/25 17:48:25 | 00,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2009/12/25 17:48:25 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2009/12/25 17:48:24 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2009/12/25 17:48:24 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe
[2009/12/25 17:48:23 | 00,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
[2009/12/25 17:48:23 | 00,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
[2009/12/25 17:48:23 | 00,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
[2009/12/25 17:48:23 | 00,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys
[2009/12/25 17:48:22 | 00,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll
[2009/12/25 17:48:20 | 00,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime
[2009/12/25 17:48:19 | 00,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe
[2009/12/25 17:48:19 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe
[2009/12/25 17:48:18 | 00,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2009/12/25 17:48:18 | 00,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe
[2009/12/25 17:48:18 | 00,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll
[2009/12/25 17:48:18 | 00,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll
[2009/12/25 17:48:18 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll
[2009/12/25 17:48:18 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2009/12/25 17:48:17 | 01,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2009/12/25 17:48:17 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe
[2009/12/25 17:48:17 | 00,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe
[2009/12/25 17:48:17 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe
[2009/12/25 17:48:17 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe
[2009/12/25 17:48:16 | 00,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime
[2009/12/25 17:48:16 | 00,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2009/12/25 17:48:16 | 00,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll
[2009/12/25 17:48:16 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll
[2009/12/25 17:48:10 | 00,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2009/12/25 17:48:09 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2009/12/25 17:47:57 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2009/12/25 17:47:57 | 00,000,000 | ---D | C] -- C:\Program Files\xerox
[2009/12/25 17:47:57 | 00,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2009/12/25 17:47:49 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2009/12/25 17:47:49 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009/12/25 17:47:40 | 00,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2009/12/25 17:46:57 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2009/12/25 17:46:50 | 00,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2009/12/25 17:46:50 | 00,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2009/12/25 17:46:43 | 00,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2009/12/25 17:46:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2009/12/25 17:46:13 | 00,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe
[2009/12/25 17:46:13 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe
[2009/12/25 17:46:13 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll
[2009/12/25 17:46:13 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll
[2009/12/25 17:46:13 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
[2009/12/25 17:46:12 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll
[2009/12/25 17:46:06 | 00,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe
[2009/12/25 17:46:06 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wb32.exe
[2009/12/25 17:46:06 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
[2009/12/25 17:46:06 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2009/12/25 17:46:05 | 00,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll
[2009/12/25 17:46:05 | 00,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
[2009/12/25 17:46:05 | 00,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinfo32.exe
[2009/12/25 17:46:05 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cb32.exe
[2009/12/25 17:46:04 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2009/12/25 17:46:03 | 00,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll
[2009/12/25 17:46:03 | 00,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll
[2009/12/25 17:46:03 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
[2009/12/25 17:46:03 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2009/12/25 17:46:03 | 00,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2009/12/25 17:46:02 | 00,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoap1.dll
[2009/12/25 17:46:02 | 00,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2009/12/25 17:46:02 | 00,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe
[2009/12/25 17:46:02 | 00,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wisc10.dll
[2009/12/25 17:46:02 | 00,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoapr.dll
[2009/12/25 17:46:02 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe
[2009/12/25 17:46:02 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2009/12/25 17:45:59 | 00,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\VGX.dll
[2009/12/25 17:45:59 | 00,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpband.dll
[2009/12/25 17:45:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2009/12/25 17:45:59 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota
Advertisement
Register to Remove

Re: Internet Security 2010-malware

Unread postby PapaBear » January 24th, 2010, 11:39 am

OTL txt **Part 2**
[2009/12/25 17:45:58 | 00,786,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migrate.exe
[2009/12/25 17:45:58 | 00,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup_wm.exe
[2009/12/25 17:45:58 | 00,368,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpvis.dll
[2009/12/25 17:45:58 | 00,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll
[2009/12/25 17:45:58 | 00,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2009/12/25 17:45:58 | 00,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpns.dll
[2009/12/25 17:45:58 | 00,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmplayer.exe
[2009/12/25 17:45:58 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\custsat.dll
[2009/12/25 17:45:58 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2009/12/25 17:45:57 | 01,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll
[2009/12/25 17:45:57 | 00,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
[2009/12/25 17:45:57 | 00,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll
[2009/12/25 17:45:57 | 00,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2009/12/25 17:45:57 | 00,209,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll
[2009/12/25 17:45:57 | 00,183,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
[2009/12/25 17:45:57 | 00,165,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
[2009/12/25 17:45:57 | 00,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2009/12/25 17:45:57 | 00,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll
[2009/12/25 17:45:57 | 00,004,639 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe
[2009/12/25 17:45:56 | 00,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2009/12/25 17:45:56 | 00,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll
[2009/12/25 17:45:56 | 00,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe
[2009/12/25 17:45:56 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2009/12/25 17:45:56 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2009/12/25 17:45:56 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2009/12/25 17:45:53 | 00,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2009/12/25 17:45:51 | 00,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
[2009/12/25 17:45:51 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
[2009/12/25 17:45:51 | 00,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
[2009/12/25 17:45:50 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2009/12/25 17:45:48 | 00,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2009/12/25 17:45:48 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltmc.exe
[2009/12/25 17:45:48 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2009/12/25 17:45:47 | 00,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
[2009/12/25 17:45:47 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
[2009/12/25 17:45:47 | 00,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
[2009/12/25 17:45:47 | 00,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
[2009/12/25 17:45:47 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
[2009/12/25 17:45:45 | 00,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2009/12/25 17:45:45 | 00,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2009/12/25 17:45:45 | 00,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2009/12/25 17:45:44 | 00,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
[2009/12/25 17:45:43 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2009/12/25 17:45:43 | 00,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2009/12/25 17:45:42 | 00,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
[2009/12/25 17:45:42 | 00,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2009/12/25 17:45:42 | 00,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
[2009/12/25 17:45:42 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
[2009/12/25 17:45:38 | 00,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
[2009/12/25 17:45:38 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2009/12/25 17:45:37 | 00,638,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe
[2009/12/25 17:45:37 | 00,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hmmapi.dll
[2009/12/25 17:45:36 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
[2009/12/25 17:45:36 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2009/12/25 17:45:27 | 00,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2009/12/25 17:45:21 | 00,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2009/12/25 17:45:01 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
[2009/12/25 17:45:01 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2009/12/25 17:45:01 | 00,000,000 | ---D | C] -- C:\Program Files\Online Services
[2009/12/25 17:44:57 | 00,000,000 | ---D | C] -- C:\Program Files\Messenger
[2009/12/25 17:44:56 | 02,178,131 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlres.dll
[2009/12/25 17:44:56 | 01,817,687 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgres.dll
[2009/12/25 17:44:56 | 00,780,885 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrres.dll
[2009/12/25 17:44:56 | 00,753,236 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvseres.dll
[2009/12/25 17:44:56 | 00,082,501 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckg.dll
[2009/12/25 17:44:56 | 00,066,113 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvl.dll
[2009/12/25 17:44:56 | 00,048,706 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvse.dll
[2009/12/25 17:44:56 | 00,042,577 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgzm.exe
[2009/12/25 17:44:56 | 00,042,575 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrzm.exe
[2009/12/25 17:44:56 | 00,042,574 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvsezm.exe
[2009/12/25 17:44:56 | 00,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlzm.exe
[2009/12/25 17:44:56 | 00,040,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkr.dll
[2009/12/25 17:44:55 | 01,175,635 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzres.dll
[2009/12/25 17:44:55 | 01,039,955 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnresm.dll
[2009/12/25 17:44:55 | 00,113,222 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zoneclim.dll
[2009/12/25 17:44:55 | 00,057,409 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtz.dll
[2009/12/25 17:44:55 | 00,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2009/12/25 17:44:55 | 00,041,029 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zcorem.dll
[2009/12/25 17:44:55 | 00,032,339 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniansi.dll
[2009/12/25 17:44:55 | 00,013,894 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zonelibm.dll
[2009/12/25 17:44:55 | 00,004,677 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zeeverm.dll
[2009/12/25 17:44:54 | 00,217,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnclim.dll
[2009/12/25 17:44:54 | 00,036,937 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zclientm.exe
[2009/12/25 17:44:54 | 00,029,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\znetm.dll
[2009/12/25 17:44:54 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2009/12/25 17:44:54 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe
[2009/12/25 17:44:54 | 00,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2009/12/25 17:44:48 | 00,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2009/12/25 17:44:48 | 00,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe
[2009/12/25 17:44:48 | 00,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avwav.dll
[2009/12/25 17:44:48 | 00,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
[2009/12/25 17:44:48 | 00,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
[2009/12/25 17:44:48 | 00,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2009/12/25 17:44:47 | 00,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avtapi.dll
[2009/12/25 17:44:47 | 00,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
[2009/12/25 17:44:47 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
[2009/12/25 17:44:47 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winchat.exe
[2009/12/25 17:44:47 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avmeter.dll
[2009/12/25 17:44:47 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
[2009/12/25 17:44:43 | 00,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2009/12/25 17:44:43 | 00,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\getuname.dll
[2009/12/25 17:44:42 | 00,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
[2009/12/25 17:44:42 | 00,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshearts.exe
[2009/12/25 17:44:42 | 00,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
[2009/12/25 17:44:42 | 00,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmine.exe
[2009/12/25 17:44:42 | 00,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe
[2009/12/25 17:44:42 | 00,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2009/12/25 17:44:42 | 00,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\charmap.exe
[2009/12/25 17:44:42 | 00,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2009/12/25 17:44:42 | 00,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
[2009/12/25 17:44:42 | 00,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sol.exe
[2009/12/25 17:44:42 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
[2009/12/25 17:44:42 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\freecell.exe
[2009/12/25 17:44:41 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2009/12/25 17:44:41 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\regini.exe
[2009/12/25 17:44:41 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2009/12/25 17:44:41 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qwinsta.exe
[2009/12/25 17:44:41 | 00,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2009/12/25 17:44:41 | 00,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msg.exe
[2009/12/25 17:44:41 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2009/12/25 17:44:41 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2009/12/25 17:44:41 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2009/12/25 17:44:41 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qappsrv.exe
[2009/12/25 17:44:41 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2009/12/25 17:44:41 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tskill.exe
[2009/12/25 17:44:41 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2009/12/25 17:44:41 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwinsta.exe
[2009/12/25 17:44:41 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdmodem.dll
[2009/12/25 17:44:41 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
[2009/12/25 17:44:41 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2009/12/25 17:44:41 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logoff.exe
[2009/12/25 17:44:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2009/12/25 17:44:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2009/12/25 17:44:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2009/12/25 17:44:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscon.exe
[2009/12/25 17:44:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2009/12/25 17:44:41 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shadow.exe
[2009/12/25 17:44:41 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2009/12/25 17:44:41 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\reset.exe
[2009/12/25 17:44:41 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2009/12/25 17:44:41 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2009/12/25 17:44:40 | 00,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2009/12/25 17:44:40 | 00,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2009/12/25 17:44:40 | 00,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2009/12/25 17:44:40 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
[2009/12/25 17:44:40 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2009/12/25 17:44:40 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2009/12/25 17:44:40 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2009/12/25 17:44:39 | 00,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2009/12/25 17:44:39 | 00,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2009/12/25 17:44:39 | 00,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2009/12/25 17:44:37 | 00,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiprov.dll
[2009/12/25 17:44:37 | 00,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\updprov.dll
[2009/12/25 17:44:37 | 00,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2009/12/25 17:44:37 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmplprov.dll
[2009/12/25 17:44:37 | 00,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmimsg.dll
[2009/12/25 17:44:37 | 00,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2009/12/25 17:44:37 | 00,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trnsprov.dll
[2009/12/25 17:44:37 | 00,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmitimep.dll
[2009/12/25 17:44:37 | 00,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpcons.dll
[2009/12/25 17:44:37 | 00,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.tlb
[2009/12/25 17:44:37 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unsecapp.exe
[2009/12/25 17:44:37 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2009/12/25 17:44:37 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmt.exe
[2009/12/25 17:44:37 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.dll
[2009/12/25 17:44:36 | 00,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsprov.dll
[2009/12/25 17:44:36 | 00,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fwdprov.dll
[2009/12/25 17:44:28 | 00,000,000 | ---D | C] -- C:\Program Files\MSN
[2009/12/25 17:44:27 | 00,347,136 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
[2009/12/25 17:44:27 | 00,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2009/12/25 17:44:27 | 00,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
[2009/12/25 17:44:27 | 00,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
[2009/12/25 17:44:27 | 00,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
[2009/12/25 17:44:27 | 00,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe
[2009/12/25 17:44:27 | 00,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
[2009/12/25 17:44:27 | 00,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2009/12/25 17:44:26 | 02,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll
[2009/12/25 17:44:26 | 00,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstsc.exe
[2009/12/25 17:44:26 | 00,538,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
[2009/12/25 17:44:26 | 00,407,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstsc.exe
[2009/12/25 17:44:26 | 00,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
[2009/12/25 17:44:26 | 00,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2009/12/25 17:44:25 | 00,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
[2009/12/25 17:44:25 | 00,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
[2009/12/25 17:44:25 | 00,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2009/12/25 17:44:25 | 00,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2009/12/25 17:44:25 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
[2009/12/25 17:44:25 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2009/12/25 17:44:25 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2009/12/25 17:44:25 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
[2009/12/25 17:44:25 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2009/12/25 17:44:25 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2009/12/25 17:44:25 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
[2009/12/25 17:44:25 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2009/12/25 17:44:24 | 00,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2009/12/25 17:44:24 | 00,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2009/12/25 17:44:24 | 00,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2009/12/25 17:44:24 | 00,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2009/12/25 17:44:24 | 00,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2009/12/25 17:44:24 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2009/12/25 17:44:23 | 01,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2009/12/25 17:44:23 | 00,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2009/12/25 17:44:23 | 00,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2009/12/25 17:44:23 | 00,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2009/12/25 17:44:23 | 00,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
[2009/12/25 17:44:23 | 00,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2009/12/25 17:44:23 | 00,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2009/12/25 17:44:23 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2009/12/25 17:44:19 | 00,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
[2009/12/25 17:44:19 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
[2009/12/25 17:44:19 | 00,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
[2009/12/25 17:44:18 | 00,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
[2009/12/25 16:50:53 | 00,782,336 | ---- | C] (Creative Labs Inc.) -- C:\WINDOWS\OALInst.exe
[2009/12/25 16:50:53 | 00,139,264 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\System32\EAX.DLL
[2009/12/25 16:50:52 | 01,127,936 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\P17.sys
[2009/12/25 16:50:52 | 00,138,752 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\System32\drivers\ctsfm2k.sys
[2009/12/25 16:50:52 | 00,137,728 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\P17res.dll
[2009/12/25 16:50:52 | 00,133,632 | ---- | C] (Creative Technology Limited) -- C:\WINDOWS\System32\CtDvInst.dll
[2009/12/25 16:50:52 | 00,115,200 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\System32\sfms32.dll
[2009/12/25 16:50:52 | 00,106,496 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\ctoss2k.sys
[2009/12/25 16:50:52 | 00,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\dllcache\a3d.dll
[2009/12/25 16:50:52 | 00,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\A3d.dll
[2009/12/25 16:50:52 | 00,049,152 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\MIDIDEF.EXE
[2009/12/25 16:50:52 | 00,020,992 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\System32\sfman32.dll
[2009/12/25 16:50:52 | 00,020,480 | ---- | C] (Creative Technology Ltd) -- C:\WINDOWS\P17DEF.EXE
[2009/12/25 16:50:52 | 00,008,704 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\Pfmodnt.sys
[2009/12/25 11:39:09 | 00,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys
[2009/12/25 11:39:09 | 00,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2009/12/25 11:39:09 | 00,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
[2009/12/25 11:39:09 | 00,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbaudio.sys
[2009/12/25 11:39:09 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2009/12/25 11:38:06 | 00,027,165 | ---- | C] (VIA Technologies, Inc. ) -- C:\WINDOWS\System32\drivers\fetnd5.sys
[2009/12/25 11:38:04 | 00,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2009/12/25 11:37:09 | 00,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2009/12/25 11:37:09 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2009/12/25 11:37:08 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll
[2009/12/25 11:37:08 | 00,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll
[2009/12/25 11:37:07 | 00,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll
[2009/12/25 11:37:07 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe
[2009/12/25 11:37:07 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2009/12/25 11:37:06 | 00,000,000 | R--D | C] -- C:\Program Files
[2009/12/25 11:37:06 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2009/12/25 11:37:06 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files
[2009/12/25 11:37:04 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll
[2009/12/25 11:37:04 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll
[2009/12/25 11:37:04 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2009/12/25 11:37:04 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2009/12/25 11:37:04 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
[2009/12/25 11:37:04 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
[2009/12/25 11:37:03 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll
[2009/12/25 11:37:03 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll
[2009/12/25 11:37:01 | 00,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
[2009/12/25 11:37:01 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll
[2009/12/25 11:37:01 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
[2009/12/25 11:37:01 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2009/12/25 11:37:01 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
[2009/12/25 11:37:01 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
[2009/12/25 11:37:01 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2009/12/25 11:37:01 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2009/12/25 11:37:01 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
[2009/12/25 11:37:01 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
[2009/12/25 11:37:01 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
[2009/12/25 11:37:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2009/12/25 11:37:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2009/12/25 11:37:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll
[2009/12/25 11:37:00 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
[2009/12/25 11:37:00 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
[2009/12/25 11:37:00 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
[2009/12/25 11:37:00 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2009/12/25 11:37:00 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll
[2009/12/25 11:37:00 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll
[2009/12/25 11:37:00 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
[2009/12/25 11:37:00 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
[2009/12/25 11:37:00 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2009/12/25 11:37:00 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll
[2009/12/25 11:36:59 | 00,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
[2009/12/25 11:36:59 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
[2009/12/25 11:36:59 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll
[2009/12/25 11:36:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll
[2009/12/25 11:36:59 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
[2009/12/25 11:36:59 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll
[2009/12/25 11:36:59 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
[2009/12/25 11:36:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll
[2009/12/25 11:36:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2009/12/25 11:36:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2009/12/25 11:36:57 | 00,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2009/12/25 11:36:57 | 00,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll
[2009/12/25 11:36:57 | 00,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgsetup.dll
[2009/12/25 11:36:57 | 00,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll
[2009/12/25 11:36:57 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2009/12/25 11:36:57 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll
[2009/12/25 11:36:56 | 00,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
[2009/12/25 11:36:56 | 00,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll
[2009/12/25 11:36:56 | 00,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll
[2009/12/25 11:36:56 | 00,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
[2009/12/25 11:36:56 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
[2009/12/25 11:36:56 | 00,025,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
[2009/12/25 11:36:56 | 00,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2009/12/25 11:36:56 | 00,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll
[2009/12/25 11:36:56 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2009/12/25 11:36:56 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
[2009/12/25 11:36:56 | 00,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2009/12/25 11:36:56 | 00,009,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
[2009/12/25 11:36:56 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2009/12/25 11:36:56 | 00,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2009/12/25 11:36:56 | 00,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
[2009/12/25 11:36:56 | 00,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
[2009/12/25 11:36:56 | 00,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
[2009/12/25 11:36:56 | 00,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
[2009/12/25 11:36:56 | 00,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
[2009/12/25 11:36:55 | 00,109,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
[2009/12/25 11:36:55 | 00,073,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
[2009/12/25 11:36:55 | 00,069,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
[2009/12/25 11:36:55 | 00,032,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2009/12/25 11:36:55 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
[2009/12/25 11:36:55 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskman.exe
[2009/12/25 11:36:55 | 00,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
[2009/12/25 11:36:55 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
[2009/12/25 11:36:55 | 00,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
[2009/12/25 11:36:54 | 00,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\winspool.drv
[2009/12/25 11:36:54 | 00,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
[2009/12/25 11:36:54 | 00,068,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2009/12/25 11:36:47 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
[2009/12/25 11:36:47 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents
[2009/12/25 11:36:47 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
[2009/12/25 11:36:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites
[2009/12/25 11:36:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop
[2009/12/25 11:36:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2009/12/25 11:36:38 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2009/12/25 11:36:33 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/12/25 11:36:33 | 00,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
[2009/12/25 11:36:13 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2009/12/25 11:36:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings
[2009/12/25 11:30:16 | 00,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2009/12/25 11:30:16 | 00,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2009/12/25 11:30:16 | 00,000,000 | R--D | C] -- C:\WINDOWS\Web
[2009/12/25 11:30:16 | 00,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\system32
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\system
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\security
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\repair
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\mui
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Media
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\java
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\ime
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Help
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\Config
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\addins
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2009/12/25 11:30:16 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1025

========== Files - Modified Within 30 Days ==========

[2010/01/24 09:24:03 | 00,547,328 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Gary S. Priest\Desktop\OTL.exe
[2010/01/24 09:16:00 | 00,000,904 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/23 19:08:04 | 00,560,703 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\iavifw.avm
[2010/01/23 19:08:03 | 54,606,412 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/01/23 19:04:13 | 00,000,900 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/23 19:04:12 | 00,013,702 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/01/23 19:04:11 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/01/23 19:04:10 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/01/23 19:03:07 | 06,029,312 | -H-- | M] () -- C:\Documents and Settings\Gary S. Priest\NTUSER.DAT
[2010/01/23 19:03:07 | 00,000,178 | -HS- | M] () -- C:\Documents and Settings\Gary S. Priest\ntuser.ini
[2010/01/22 22:00:17 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\HijackThis.lnk
[2010/01/22 20:18:24 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\prvlcl.dat
[2010/01/22 07:10:22 | 00,000,718 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\Shortcut to Conquer.exe.lnk
[2010/01/21 10:46:52 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Gary S. Priest\Desktop\HJTInstall.exe
[2010/01/20 19:07:46 | 00,503,296 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Gary S. Priest\Desktop\OTM.exe
[2010/01/20 19:07:30 | 00,142,495 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/18 20:00:13 | 00,000,751 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/01/18 20:00:13 | 00,000,293 | RHS- | M] () -- C:\boot.ini
[2010/01/18 20:00:13 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/01/18 19:55:03 | 00,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/01/18 19:47:36 | 03,828,912 | R--- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\ComboFix.exe
[2010/01/18 19:39:20 | 00,000,223 | ---- | M] () -- C:\Boot.bak
[2010/01/18 19:12:31 | 00,000,611 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\NTREGOPT.lnk
[2010/01/18 19:12:31 | 00,000,592 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\ERUNT.lnk
[2010/01/18 19:11:26 | 00,791,393 | ---- | M] (Lars Hederer ) -- C:\Documents and Settings\Gary S. Priest\Desktop\erunt-setup.exe
[2010/01/15 14:25:54 | 00,781,909 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\RSIT.exe
[2010/01/15 14:24:23 | 00,293,376 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\8tv46054.exe
[2010/01/15 14:03:22 | 00,441,856 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\CKScanner.exe
[2010/01/15 10:30:29 | 00,050,688 | ---- | M] (Atribune.org) -- C:\Documents and Settings\Gary S. Priest\Desktop\ATF-Cleaner.exe
[2010/01/15 10:25:23 | 00,263,168 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Desktop\rkill.exe
[2010/01/14 07:08:35 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/01/11 13:19:14 | 00,005,632 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/07 18:49:20 | 00,333,192 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/01/07 18:49:20 | 00,012,464 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010/01/07 18:49:19 | 00,028,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/01/07 18:49:18 | 00,113,461 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010/01/07 18:49:11 | 06,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2010/01/07 18:49:11 | 00,492,629 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2010/01/07 18:48:55 | 00,161,800 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/01/07 18:48:55 | 00,025,608 | ---- | M] (AVG Technologies ) -- C:\WINDOWS\System32\drivers\AVGIDSxx.sys
[2010/01/07 18:48:52 | 00,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/01/07 18:48:48 | 00,050,968 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgfwdx.dll
[2010/01/07 18:48:48 | 00,030,104 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgfwdx.sys
[2010/01/07 16:07:14 | 00,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/01/07 16:07:04 | 00,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/01/07 13:34:27 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/01/07 09:53:43 | 00,003,416 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\My Documents\DrWeb.csv
[2010/01/06 19:20:15 | 00,000,137 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2010/01/06 15:27:43 | 00,102,400 | ---- | M] () -- C:\WINDOWS\iStler.exe
[2010/01/05 13:37:14 | 00,002,965 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\.recently-used.xbel
[2010/01/01 15:26:41 | 00,000,163 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Application Data\default.rss
[2010/01/01 15:08:08 | 00,098,256 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/01/01 14:58:17 | 00,013,688 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/01/01 14:58:08 | 00,000,935 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\My Documents\My Sharing Folders.lnk
[2009/12/30 19:29:39 | 00,508,956 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/12/30 19:29:39 | 00,432,686 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/12/30 19:29:39 | 00,067,516 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/12/30 19:28:33 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2009/12/30 19:19:49 | 00,250,048 | RHS- | M] () -- C:\ntldr
[2009/12/26 08:50:24 | 00,002,928 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\My Documents\C
[2009/12/26 08:34:00 | 00,001,024 | ---- | M] () -- C:\Documents and Settings\Gary S. Priest\.rnd
[2009/12/25 21:33:31 | 00,004,767 | ---- | M] () -- C:\WINDOWS\Irremote.ini
[2009/12/25 20:55:14 | 06,404,782 | -H-- | M] () -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\IconCache.db
[2009/12/25 19:06:22 | 00,000,584 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2009/12/25 19:06:22 | 00,000,584 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm
[2009/12/25 19:01:52 | 00,409,600 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2009/12/25 19:01:52 | 00,114,688 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2009/12/25 18:08:29 | 00,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin
[2009/12/25 17:57:04 | 00,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2009/12/25 17:52:56 | 00,013,644 | ---- | M] () -- C:\WINDOWS\System32\wpa.bak
[2009/12/25 17:50:05 | 00,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2009/12/25 17:49:16 | 00,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2009/12/25 17:47:51 | 00,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009/12/25 17:47:51 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009/12/25 17:47:51 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2009/12/25 17:47:51 | 00,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2009/12/25 17:47:51 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009/12/25 17:47:51 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009/12/25 17:47:48 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2009/12/25 17:47:48 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2009/12/25 17:47:40 | 00,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2009/12/25 17:46:50 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009/12/25 17:46:50 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/12/25 17:45:34 | 00,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/12/25 17:45:25 | 00,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2009/12/25 17:45:25 | 00,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini

========== Files Created - No Company Name ==========

[2010/01/22 22:00:17 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\HijackThis.lnk
[2010/01/22 07:10:01 | 00,000,718 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\Shortcut to Conquer.exe.lnk
[2010/01/18 19:49:55 | 00,000,223 | ---- | C] () -- C:\Boot.bak
[2010/01/18 19:49:52 | 00,260,272 | ---- | C] () -- C:\cmldr
[2010/01/18 19:49:09 | 00,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/01/18 19:49:09 | 00,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/01/18 19:49:09 | 00,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/01/18 19:49:09 | 00,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/01/18 19:49:09 | 00,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/01/18 19:47:32 | 03,828,912 | R--- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\ComboFix.exe
[2010/01/18 19:12:31 | 00,000,611 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\NTREGOPT.lnk
[2010/01/18 19:12:31 | 00,000,592 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\ERUNT.lnk
[2010/01/15 14:25:54 | 00,781,909 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\RSIT.exe
[2010/01/15 14:24:23 | 00,293,376 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\8tv46054.exe
[2010/01/15 14:03:21 | 00,441,856 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\CKScanner.exe
[2010/01/15 10:25:22 | 00,263,168 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Desktop\rkill.exe
[2010/01/11 10:11:40 | 00,000,904 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/11 10:11:40 | 00,000,900 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/09 15:05:41 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\prvlcl.dat
[2010/01/07 18:49:18 | 00,560,703 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\iavifw.avm
[2010/01/07 18:49:18 | 00,113,461 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010/01/07 18:49:11 | 54,606,412 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/01/07 18:49:11 | 06,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2010/01/07 18:49:11 | 00,492,629 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2010/01/07 18:49:11 | 00,142,495 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/07 09:53:43 | 00,003,416 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\My Documents\DrWeb.csv
[2010/01/06 15:27:40 | 00,102,400 | ---- | C] () -- C:\WINDOWS\iStler.exe
[2010/01/05 13:37:14 | 00,002,965 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\.recently-used.xbel
[2010/01/01 14:58:08 | 00,000,935 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\My Documents\My Sharing Folders.lnk
[2009/12/31 09:06:05 | 00,000,163 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Application Data\default.rss
[2009/12/31 09:05:37 | 00,005,632 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/30 19:38:57 | 00,000,137 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2009/12/29 10:53:37 | 00,049,152 | ---- | C] () -- C:\WINDOWS\Domino.exe
[2009/12/26 12:01:19 | 00,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009/12/26 08:49:53 | 00,002,928 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\My Documents\C
[2009/12/26 08:33:59 | 00,001,024 | ---- | C] () -- C:\Documents and Settings\Gary S. Priest\.rnd
[2009/12/26 07:51:12 | 00,000,734 | ---- | C] () -- C:\WINDOWS\System32\drivers\etc\hosts.20091226-075112.backup
[2009/12/25 21:33:31 | 00,004,767 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2009/12/25 19:21:44 | 00,152,064 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009/12/25 19:21:44 | 00,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2009/12/25 19:21:43 | 00,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/12/25 19:21:42 | 00,417,792 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.cpl
[2009/12/25 19:06:20 | 00,000,584 | ---- | C] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2009/12/25 19:06:20 | 00,000,584 | ---- | C] () -- C:\WINDOWS\System32\settings.sfm
[2009/12/25 19:01:46 | 00,005,663 | ---- | C] () -- C:\WINDOWS\System32\ludap17.ini
[2009/12/25 19:01:46 | 00,000,075 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini
[2009/12/25 18:34:43 | 00,613,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm
[2009/12/25 18:34:43 | 00,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2009/12/25 18:34:43 | 00,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2009/12/25 18:34:43 | 00,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2009/12/25 18:34:43 | 00,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2009/12/25 18:34:43 | 00,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2009/12/25 18:34:43 | 00,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2009/12/25 18:34:43 | 00,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2009/12/25 18:34:43 | 00,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2009/12/25 18:34:43 | 00,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2009/12/25 18:34:43 | 00,017,272 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf
[2009/12/25 18:34:43 | 00,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta
[2009/12/25 18:34:43 | 00,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif
[2009/12/25 18:34:43 | 00,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif
[2009/12/25 18:34:43 | 00,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif
[2009/12/25 18:34:43 | 00,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif
[2009/12/25 18:34:43 | 00,006,769 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2009/12/25 18:34:43 | 00,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif
[2009/12/25 18:34:43 | 00,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif
[2009/12/25 18:34:43 | 00,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif
[2009/12/25 18:34:43 | 00,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif
[2009/12/25 18:34:43 | 00,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif
[2009/12/25 18:34:43 | 00,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css
[2009/12/25 18:34:43 | 00,000,855 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf
[2009/12/25 18:34:43 | 00,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js
[2009/12/25 18:34:42 | 00,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv
[2009/12/25 18:34:42 | 00,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif
[2009/12/25 18:34:42 | 00,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif
[2009/12/25 18:34:41 | 00,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif
[2009/12/25 18:34:41 | 00,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js
[2009/12/25 18:34:41 | 00,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif
[2009/12/25 18:34:41 | 00,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif
[2009/12/25 18:34:41 | 00,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif
[2009/12/25 18:34:41 | 00,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif
[2009/12/25 18:34:41 | 00,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif
[2009/12/25 18:34:41 | 00,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif
[2009/12/25 18:34:41 | 00,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif
[2009/12/25 18:34:41 | 00,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif
[2009/12/25 18:34:41 | 00,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm
[2009/12/25 18:34:40 | 00,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv
[2009/12/25 18:34:40 | 00,077,307 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm
[2009/12/25 18:34:40 | 00,000,908 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf
[2009/12/25 18:34:39 | 00,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv
[2009/12/25 18:34:39 | 00,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2009/12/25 18:34:39 | 00,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip
[2009/12/25 18:34:39 | 00,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2009/12/25 18:34:38 | 00,097,117 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.hlp
[2009/12/25 18:34:38 | 00,018,286 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf
[2009/12/25 18:34:38 | 00,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif
[2009/12/25 18:34:38 | 00,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif
[2009/12/25 18:34:38 | 00,001,885 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.cnt
[2009/12/25 18:34:37 | 00,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv
[2009/12/25 18:34:34 | 00,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js
[2009/12/25 18:34:31 | 00,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv
[2009/12/25 18:34:31 | 00,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2009/12/25 18:34:30 | 00,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css
[2009/12/25 18:34:30 | 00,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm
[2009/12/25 18:34:30 | 00,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js
[2009/12/25 18:34:30 | 00,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif
[2009/12/25 18:34:30 | 00,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif
[2009/12/25 18:34:30 | 00,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif
[2009/12/25 18:34:30 | 00,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif
[2009/12/25 18:34:30 | 00,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif
[2009/12/25 18:34:29 | 00,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif
[2009/12/25 18:33:34 | 00,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2009/12/25 18:22:12 | 00,061,440 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2009/12/25 18:08:29 | 00,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2009/12/25 18:06:59 | 00,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2009/12/25 17:57:04 | 00,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/12/25 17:53:20 | 00,000,178 | -HS- | C] () -- C:\Documents and Settings\Gary S. Priest\ntuser.ini
[2009/12/25 17:53:19 | 06,029,312 | -H-- | C] () -- C:\Documents and Settings\Gary S. Priest\NTUSER.DAT
[2009/12/25 17:52:57 | 00,013,644 | ---- | C] () -- C:\WINDOWS\System32\wpa.bak
[2009/12/25 17:50:05 | 00,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2009/12/25 17:49:16 | 00,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/12/25 17:49:12 | 00,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2009/12/25 17:48:54 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2009/12/25 17:48:54 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2009/12/25 17:48:53 | 00,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2009/12/25 17:48:44 | 01,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2009/12/25 17:48:44 | 00,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2009/12/25 17:48:39 | 00,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2009/12/25 17:48:39 | 00,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2009/12/25 17:48:37 | 00,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2009/12/25 17:48:31 | 13,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2009/12/25 17:48:27 | 00,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2009/12/25 17:48:18 | 00,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2009/12/25 17:48:15 | 00,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2009/12/25 17:48:15 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2009/12/25 17:48:15 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2009/12/25 17:48:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2009/12/25 17:48:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2009/12/25 17:48:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2009/12/25 17:48:15 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2009/12/25 17:48:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2009/12/25 17:48:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2009/12/25 17:48:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2009/12/25 17:48:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2009/12/25 17:48:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2009/12/25 17:48:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2009/12/25 17:48:13 | 00,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2009/12/25 17:48:13 | 00,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2009/12/25 17:48:13 | 00,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2009/12/25 17:48:13 | 00,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2009/12/25 17:48:13 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2009/12/25 17:48:13 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2009/12/25 17:48:13 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2009/12/25 17:48:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2009/12/25 17:48:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2009/12/25 17:48:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2009/12/25 17:48:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2009/12/25 17:48:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2009/12/25 17:48:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2009/12/25 17:48:12 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2009/12/25 17:48:12 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2009/12/25 17:48:11 | 00,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2009/12/25 17:48:11 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2009/12/25 17:48:11 | 00,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2009/12/25 17:48:11 | 00,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2009/12/25 17:48:11 | 00,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2009/12/25 17:48:11 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2009/12/25 17:48:11 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2009/12/25 17:47:51 | 00,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2009/12/25 17:47:51 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2009/12/25 17:47:51 | 00,000,000 | RHS- | C] () -- C:\IO.SYS
[2009/12/25 17:47:51 | 00,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2009/12/25 17:47:51 | 00,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2009/12/25 17:47:48 | 00,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2009/12/25 17:47:48 | 00,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2009/12/25 17:47:47 | 00,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2009/12/25 17:46:50 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009/12/25 17:46:50 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009/12/25 17:46:46 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009/12/25 17:46:33 | 04,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2009/12/25 17:46:11 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2009/12/25 17:46:11 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2009/12/25 17:46:06 | 00,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2009/12/25 17:45:34 | 00,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/12/25 17:44:44 | 00,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2009/12/25 17:44:44 | 00,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2009/12/25 17:44:44 | 00,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2009/12/25 17:44:44 | 00,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2009/12/25 17:44:44 | 00,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2009/12/25 17:44:43 | 00,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2009/12/25 17:44:43 | 00,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
[2009/12/25 17:44:43 | 00,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2009/12/25 17:44:43 | 00,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2009/12/25 17:44:43 | 00,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2009/12/25 17:44:43 | 00,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2009/12/25 17:44:43 | 00,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
[2009/12/25 17:44:43 | 00,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2009/12/25 17:44:43 | 00,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
[2009/12/25 17:44:43 | 00,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2009/12/25 17:44:43 | 00,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2009/12/25 17:44:43 | 00,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2009/12/25 17:44:43 | 00,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
[2009/12/25 17:44:42 | 00,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2009/12/25 17:44:41 | 00,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2009/12/25 17:44:41 | 00,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2009/12/25 17:44:40 | 00,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2009/12/25 17:44:36 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2009/12/25 16:50:53 | 00,000,059 | ---- | C] () -- C:\WINDOWS\System32\DEFAULT8.SFM
[2009/12/25 16:50:53 | 00,000,059 | ---- | C] () -- C:\WINDOWS\System32\DEFAULT4.SFM
[2009/12/25 16:50:53 | 00,000,059 | ---- | C] () -- C:\WINDOWS\System32\DEFAULT.SFM
[2009/12/25 16:50:52 | 04,174,814 | ---- | C] () -- C:\WINDOWS\System32\CT4MGM.SF2
[2009/12/25 16:50:52 | 02,167,684 | ---- | C] () -- C:\WINDOWS\System32\CT2MGM.SF2
[2009/12/25 16:50:52 | 01,048,576 | ---- | C] () -- C:\WINDOWS\System32\CT1MGM.ROM
[2009/12/25 16:50:52 | 00,064,512 | ---- | C] () -- C:\WINDOWS\System32\P17.dll
[2009/12/25 16:50:52 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\P17CPI.dll
[2009/12/25 16:50:52 | 00,011,770 | ---- | C] () -- C:\WINDOWS\SETTINGS.REG
[2009/12/25 11:37:12 | 00,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2009/12/25 11:37:07 | 01,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2009/12/25 11:37:07 | 00,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2009/12/25 11:37:07 | 00,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2009/12/25 11:37:07 | 00,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2009/12/25 11:37:05 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2009/12/25 11:37:05 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2009/12/25 11:37:04 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2009/12/25 11:37:04 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2009/12/25 11:37:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2009/12/25 11:37:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2009/12/25 11:37:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2009/12/25 11:37:04 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2009/12/25 11:37:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2009/12/25 11:37:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2009/12/25 11:37:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2009/12/25 11:37:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2009/12/25 11:37:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2009/12/25 11:37:03 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2009/12/25 11:37:01 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2009/12/25 11:37:01 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2009/12/25 11:37:01 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2009/12/25 11:37:01 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2009/12/25 11:37:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2009/12/25 11:37:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2009/12/25 11:37:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2009/12/25 11:37:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2009/12/25 11:37:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2009/12/25 11:37:01 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2009/12/25 11:37:00 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2009/12/25 11:37:00 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2009/12/25 11:37:00 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2009/12/25 11:37:00 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2009/12/25 11:37:00 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2009/12/25 11:37:00 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2009/12/25 11:36:58 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls
[2009/12/25 11:36:58 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls
[2009/12/25 11:36:58 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2009/12/25 11:36:58 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2009/12/25 11:36:58 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2009/12/25 11:36:58 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2009/12/25 11:36:58 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2009/12/25 11:36:58 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2009/12/25 11:36:57 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2009/12/25 11:36:57 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2009/12/25 11:36:55 | 00,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2009/12/25 11:36:47 | 00,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2009/12/25 11:36:47 | 00,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2009/12/25 11:36:47 | 00,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2009/12/25 11:36:47 | 00,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2009/12/25 11:36:47 | 00,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2009/12/25 11:36:47 | 00,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2009/12/25 11:36:47 | 00,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2009/12/25 11:36:46 | 01,042,903 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT
[2009/12/25 11:36:13 | 00,098,256 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/12/25 11:35:18 | 00,000,293 | RHS- | C] () -- C:\boot.ini
[2009/12/25 11:35:16 | 00,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
< End of report >

Gary~
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota

Re: Internet Security 2010-malware

Unread postby Dakeyras » January 25th, 2010, 6:30 am

Hi. :)

Backup the Registry:

Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.

Please navigate to Start >> All Programs >> ERUNT >> ERUNT.

  • Click on OK within the pop-up menu.
  • In the next menu under C:\WINDOWS\ERDNT\DD-MM-YYYY under Backup options make sure both the following are selected:
  • System registry
  • Current user registry
  • Next click on OK
  • When the Question pop-up appears click on Yes
  • After a short duration the Registry backup is complete! popup will appear
  • Now click on OK. A backup has been created.

Note: If you have uninstalled ERUNT since we last used it, please inform myself before proceeding any further.

Next::

  • Double-click OTL.exe to start the program.
  • Copy the lines from the codebox to the clipboard by highlighting ALL of them and pressing CTRL + B (or, after highlighting, right-click and choose Copy):
    Code: Select all
    :Files
    C:\Program Files\Conquer 2.0
    C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    
    :Reg
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
    "1900:UDP"=-
    "2869:TCP"=-
    "139:TCP"=-
    "445:TCP"=-
    "137:UDP"=-
    "138:UDP"=-
    
    :Commands
    [emptytemp]
    [Reboot]
  • Then click the Run Fix button at the top.
  • If OTL asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
  • Close OTL.

Run Kaspersky Online AV Scanner:

Go to this Kaspersky website and perform an online antivirus scan.

Note: Use either Internet Explorer or Mozilla Firefoxfor this scan.

  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
      Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As....
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
  • Please post this log in your next reply.

This online tuturial will help explain how to use the aforementioned online scan.

When completed the above, please post back the following:

  • How is your computer performing now? Any problems encountered and or any further symptoms?
  • OTL Log.
  • Kaspersky report.
User avatar
Dakeyras
MRU Honors Graduate
MRU Honors Graduate
 
Posts: 8732
Joined: November 21st, 2007, 5:30 am
Location: The Tundra

Re: Internet Security 2010-malware

Unread postby PapaBear » January 26th, 2010, 12:24 pm

My programs are loading slower and my system is still slower to shut down and restart. The last OTL task moved my Conquer 2.0 folder out of the program folder and put it in some storage or something in the OTL folder. AVG also poped up another warning but I got distracted and cleared it before I wrote it down.

OTL Log
All processes killed
========== FILES ==========
C:\Program Files\Conquer 2.0\zftqat folder moved successfully.
C:\Program Files\Conquer 2.0\sound folder moved successfully.
C:\Program Files\Conquer 2.0\screenshot folder moved successfully.
C:\Program Files\Conquer 2.0\Play\Cursor folder moved successfully.
C:\Program Files\Conquer 2.0\Play\Button folder moved successfully.
C:\Program Files\Conquer 2.0\Play folder moved successfully.
C:\Program Files\Conquer 2.0\map\ScenePart folder moved successfully.
C:\Program Files\Conquer 2.0\map\Scene\furnishings folder moved successfully.
C:\Program Files\Conquer 2.0\map\Scene folder moved successfully.
C:\Program Files\Conquer 2.0\map\puzzle folder moved successfully.
C:\Program Files\Conquer 2.0\map\map folder moved successfully.
C:\Program Files\Conquer 2.0\map folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\857267459\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\857267459 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\856356402\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\856356402 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\845354580\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\845354580 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\75983100\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\75983100 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\734966812\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\734966812 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\683589111\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\683589111 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\621081369\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\621081369 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\618443431\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\618443431 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\49401960\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\49401960 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\4276158980\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\4276158980 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3998896627\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3998896627 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3966098821\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3966098821 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3959862702\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3959862702 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\371162476\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\371162476 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3648312542\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3648312542 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3573520749\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3573520749 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3567443039\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3567443039 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3546837496\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3546837496 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3383983946\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3383983946 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3219853\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\3219853 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2976817255\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2976817255 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2765122551\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2765122551 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2754485123\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2754485123 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2583068350\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2583068350 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2470835785\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2470835785 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2204304263\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\2204304263 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1789354157\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1789354157 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1702080306\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1702080306 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\161950908\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\161950908 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1548062573\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1548062573 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1160965763\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\1160965763 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\0\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light\0 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Light folder moved successfully.
C:\Program Files\Conquer 2.0\log\Diamond\3969656584\CHAT folder moved successfully.
C:\Program Files\Conquer 2.0\log\Diamond\3969656584 folder moved successfully.
C:\Program Files\Conquer 2.0\log\Diamond folder moved successfully.
C:\Program Files\Conquer 2.0\log\857267459 folder moved successfully.
C:\Program Files\Conquer 2.0\log\856356402 folder moved successfully.
C:\Program Files\Conquer 2.0\log\845354580 folder moved successfully.
C:\Program Files\Conquer 2.0\log\75983100 folder moved successfully.
C:\Program Files\Conquer 2.0\log\734966812 folder moved successfully.
C:\Program Files\Conquer 2.0\log\683589111 folder moved successfully.
C:\Program Files\Conquer 2.0\log\621081369 folder moved successfully.
C:\Program Files\Conquer 2.0\log\618443431 folder moved successfully.
C:\Program Files\Conquer 2.0\log\49401960 folder moved successfully.
C:\Program Files\Conquer 2.0\log\4276158980 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3998896627 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3969656584 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3966098821 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3959862702 folder moved successfully.
C:\Program Files\Conquer 2.0\log\371162476 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3648312542 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3573520749 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3567443039 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3546837496 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3383983946 folder moved successfully.
C:\Program Files\Conquer 2.0\log\3219853 folder moved successfully.
C:\Program Files\Conquer 2.0\log\2976817255 folder moved successfully.
C:\Program Files\Conquer 2.0\log\2765122551 folder moved successfully.
C:\Program Files\Conquer 2.0\log\2754485123 folder moved successfully.
C:\Program Files\Conquer 2.0\log\2583068350 folder moved successfully.
C:\Program Files\Conquer 2.0\log\2470835785 folder moved successfully.
C:\Program Files\Conquer 2.0\log\2204304263 folder moved successfully.
C:\Program Files\Conquer 2.0\log\1789354157 folder moved successfully.
C:\Program Files\Conquer 2.0\log\1702080306 folder moved successfully.
C:\Program Files\Conquer 2.0\log\161950908 folder moved successfully.
C:\Program Files\Conquer 2.0\log\1548062573 folder moved successfully.
C:\Program Files\Conquer 2.0\log\1160965763 folder moved successfully.
C:\Program Files\Conquer 2.0\log\0 folder moved successfully.
C:\Program Files\Conquer 2.0\log folder moved successfully.
C:\Program Files\Conquer 2.0\ini\tme folder moved successfully.
C:\Program Files\Conquer 2.0\ini\TerrainMagic folder moved successfully.
C:\Program Files\Conquer 2.0\ini folder moved successfully.
C:\Program Files\Conquer 2.0\Help\images folder moved successfully.
C:\Program Files\Conquer 2.0\Help folder moved successfully.
C:\Program Files\Conquer 2.0\debug folder moved successfully.
C:\Program Files\Conquer 2.0\data2\interface\style01\AntiFraud folder moved successfully.
C:\Program Files\Conquer 2.0\data2\interface\style01 folder moved successfully.
C:\Program Files\Conquer 2.0\data2\interface folder moved successfully.
C:\Program Files\Conquer 2.0\data2 folder moved successfully.
C:\Program Files\Conquer 2.0\data\PlayerFace\JPG\64 folder moved successfully.
C:\Program Files\Conquer 2.0\data\PlayerFace\JPG\16 folder moved successfully.
C:\Program Files\Conquer 2.0\data\PlayerFace\JPG folder moved successfully.
C:\Program Files\Conquer 2.0\data\PlayerFace folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\tutor folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Speedmove folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Ride folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Reversed folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\protect folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Ninja folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Improvelimit folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\giddy folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\freezed folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Fears folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\FamilyPower folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Contribute folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\contest folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\coach folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic\Arena folder moved successfully.
C:\Program Files\Conquer 2.0\data\pic folder moved successfully.
C:\Program Files\Conquer 2.0\data\Npcface folder moved successfully.
C:\Program Files\Conquer 2.0\data\minimap folder moved successfully.
C:\Program Files\Conquer 2.0\data\MapItemIcon folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\snowman folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\pet folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\Item folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\hq folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\house folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\furnishings\screen folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\furnishings\dresser folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\furnishings\couch folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\furnishings\chair folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\furnishings\cabinet folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\furnishings\bead folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\furnishings folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene\cushaw folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\scene folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\ship\scene folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\ship folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\room\forum folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\room folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\poker\link\viproom folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\poker\link\room folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\poker\link folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\poker folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\link\04 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\link\03 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\link\02 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\link\01 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\link folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\element\03 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\element\02 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\element\01 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\element folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\bg\01 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt\bg folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\icecrypt folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\family\Nhouse04 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\family\Nhouse03 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\family\bg folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\family folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\desert\conduit folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle\desert folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\puzzle folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\woods folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\wall folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\street folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\sky folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\ship folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\poker folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\plain\plain folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\plain\capital folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\plain folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newplain\city folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newplain folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\tree\tree folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\tree\pine folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\tree\bamboo folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\tree folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\rock folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\grass folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\frutex folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v\flower folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\newbie-v folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\iceland\icecrypt folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\iceland folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\house folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\furni folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\family folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj\canyon folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\mapobj folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea8 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea7 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea6 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea5 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea4 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea3 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea2 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea\sea1 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship\sea folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\ship folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\09 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\08 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\07 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\06 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\05 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\04 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\03 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\02 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six\01 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\six folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\09 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\08 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\07 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\06 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\05 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\04 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\03 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\02 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five\01 folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg\five folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt\bg folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\icecrypt folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\family\windmill folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\family\swing folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\family\pole folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\family\pearl folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\family\cockhorse folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon\family folder moved successfully.
C:\Program Files\Conquer 2.0\data\map\cartoon folder moved successfully.
C:\Program Files\Conquer 2.0\data\map folder moved successfully.
C:\Program Files\Conquer 2.0\data\main3 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group8 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group7 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group6 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group5 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group4 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group3 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group2 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash\Group1 folder moved successfully.
C:\Program Files\Conquer 2.0\data\main\flash folder moved successfully.
C:\Program Files\Conquer 2.0\data\main folder moved successfully.
C:\Program Files\Conquer 2.0\data\ItemMinIcon\752009 folder moved successfully.
C:\Program Files\Conquer 2.0\data\ItemMinIcon\752003 folder moved successfully.
C:\Program Files\Conquer 2.0\data\ItemMinIcon\752001 folder moved successfully.
C:\Program Files\Conquer 2.0\data\ItemMinIcon\751009 folder moved successfully.
C:\Program Files\Conquer 2.0\data\ItemMinIcon\751003 folder moved successfully.
C:\Program Files\Conquer 2.0\data\ItemMinIcon\751001 folder moved successfully.
C:\Program Files\Conquer 2.0\data\ItemMinIcon folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\VIP folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Teacher folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Task folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Stall folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Squeezer\snum folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Squeezer\Small folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Squeezer\num folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Squeezer\Big folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Squeezer folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\shortcut folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\shop folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Ride folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\PublicCard folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\PublicBtn folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\PosyTaxis folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\PKEffort folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\path folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Password folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\nobility folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Log folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\HorseUp folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Guide folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\GemSync folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Forbid folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\FamOccupy folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Family folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\faction\Num folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\faction folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Exercise folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\EquipHole folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Equipgod folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Equip\Num folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Equip folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\checontribute folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\chatsystem\nobility_JPG folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\chatsystem folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Businessman folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Arena\num folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Arena folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01\Action folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Style01 folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\PkEquip folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Openhole folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\MutualApply folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Mutual folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Furnishment folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\flower folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\EquipTie folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\compose folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Competition\Small folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Competition\Big\Num folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Competition\Big folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface\Competition folder moved successfully.
C:\Program Files\Conquer 2.0\data\interface folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\9 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\8 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\7 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\67 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\66 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\65 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\64 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\63 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\62 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\61 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\60 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\6 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\59 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\58 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\57 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\56 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\55 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\54 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\53 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\52 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\51 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\50 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\5 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\49 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\48 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\47 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\46 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\45 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\44 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\43 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\42 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\41 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\40 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\4 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\39 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\38 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\37 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\36 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\35 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\34 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\33 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\32 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\31 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\30 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\3 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\29 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\28 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\27 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\26 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\25 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\24 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\23 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\22 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\21 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\20 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\2 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\19 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\18 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\17 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\16 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\15 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\14 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\13 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\12 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\11 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\10 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\1 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG\0 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\JPG folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\67 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\66 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\65 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\64 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\63 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco\62 folder moved successfully.
C:\Program Files\Conquer 2.0\data\EmotionIco folder moved successfully.
C:\Program Files\Conquer 2.0\data\Cursor folder moved successfully.
C:\Program Files\Conquer 2.0\data\AutoPatch_pic folder moved successfully.
C:\Program Files\Conquer 2.0\data folder moved successfully.
C:\Program Files\Conquer 2.0\c3\texture folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\997 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\833 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\813 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\785 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\784 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\617 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\616 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\614 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\609 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\608 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\607 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\373 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\282 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\281 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc\102 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\npc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\MountSaddle\801 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\MountSaddle folder moved successfully.
C:\Program Files\Conquer 2.0\c3\Mount\801 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\Mount folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\812 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\810 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\808 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\770 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\769 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\768 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\767 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\766 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\765 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\764 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\763 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\762 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\761 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\760 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\323 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\322 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\321 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\301 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\295 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\234 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\223 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\219 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\218 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\215 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\208 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\157 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\155 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\134 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\126 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\111 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster\109 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\monster folder moved successfully.
C:\Program Files\Conquer 2.0\c3\mesh folder moved successfully.
C:\Program Files\Conquer 2.0\c3\hair folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e355 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e295 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e290 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e248 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e240 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e215 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e192 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e182 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e181 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e129 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e128 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\zf2-e067 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\YiFanFengShun folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\WuFuLinMen folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\Wonderland folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\WindPlain folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601339 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601289 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601239 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601229 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601219 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601209 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601199 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601189 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601179 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601169 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601159 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601149 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601139 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601129 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601119 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601109 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601099 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601089 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601079 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601069 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601059 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601049 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601039 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601029 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601019 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon\601009 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\weapon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\WaterfallCave folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\TwinCity folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\swordcaromstart05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\swordcaromstart04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\swordcaromstart03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\swordcaromstart02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\swordcaromstart folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\swordcaromaccept folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\sea\yellow folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\sea\sea folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\sea\red folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\sea\purple folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\sea\green folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\sea folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\ScapegoatSwitchOpen05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\ScapegoatSwitchOpen04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\ScapegoatSwitchOpen03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\ScapegoatSwitchOpen02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\ScapegoatSwitchOpen folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replacedisappear04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replacedisappear03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replacedisappear02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replacedisappear folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replaceappear05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replaceappear04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replaceappear03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replaceappear02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\replaceappear folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonstate05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonstate04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonstate03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonstate02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonparoxysm05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonparoxysm04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonparoxysm03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonparoxysm02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonorigin folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonmiss folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonfog05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonfog04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonfog03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonfog02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonfog01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisoncast05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisoncast04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisoncast03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisoncast02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisoncast folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonblast05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonblast04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonblast03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonblast02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonattack05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonattack04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonattack03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonattack02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\poisonattack folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\meteor\5 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\meteor\4 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\meteor\3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\meteor\2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\meteor\1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\meteor folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\KOTeleport folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\goose\red folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\goose\purple folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\goose\green folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\goose\goose folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\goose\blue folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\goose folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\gainTeleport folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\EquipBroken folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordzhen folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordzhe folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordzai folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordq folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordlin folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordl folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordj folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordd folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPwordb folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPsword2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPsword1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPstate folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPscreen folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPdisappear folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPdeath folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPbing folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPattack folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endureXPappear folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\endurexp folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\dispersion\yellow folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\dispersion\red folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\dispersion\orange folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\dispersion\green folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\dispersion\blue folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\dispersion folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandend05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandend02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandend folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehanddart05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehanddart04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehanddart03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehanddart02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehanddart folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandcycle05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandcycle04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandcycle03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandcycle02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandcycle folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandattack2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandattack05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandattack02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehandattack folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehand05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehand04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehand03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehand02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\cyclonehand folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\bump2\yellow folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\bump2\red folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\bump2\orange folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\bump2\green folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\bump2\blue folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\bump2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_track05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_track04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_track03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_track02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_track folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_start04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_start03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_start02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_start folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_accept05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_accept04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_accept03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_accept02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\break_accept folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_fly05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_fly04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_fly03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_fly02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_fly folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_discharge05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_discharge04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_discharge03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_discharge02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_discharge folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_continuance05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_continuance04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_continuance03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_continuance02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_accept05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_accept04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_accept03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_accept02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill\attach_accept folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\skill folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\SiJiPingAn folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\ShiQuanShiMei folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\scene_goon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\scene_dis folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\scene_app folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_tenth folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_sixth folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_seventh folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num9 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num8 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num7 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num6 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num5 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num4 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_num0 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_ninth folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_fourth folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_first folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_fifth folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_eighth folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ridmatch_colon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\horse_run folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\horse_back folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\horse_aff folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\flower3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\flower2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\flower1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff23 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff22 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff21 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff20 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff19 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff18b folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff18a folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff18 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff17 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff16 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff15 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff14 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff13 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff12 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff09 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff08 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff07 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\ff02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\balloon4 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\balloon3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\balloon2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF\balloon1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene-FF folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene\clewarsmall folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene\clewarbigred folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene\clewarbignor folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\scene folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\SanYangKaiTai folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\reif folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\ReedIsland folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\QiXingGaoZhao folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\PhoenixCity folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\perfect folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\white-flower-rain folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\white-flower-g-1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\white-flower-full folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\white-flower-charm3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\white-flower-charm2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\white-flower-charm1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\weekpk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\weekpk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\weekpk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\waterpk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\waterpk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\waterpk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\warriorpk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\warriorpk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\warriorpk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tulip-flower-rain folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tulip-flower-g-1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tulip-flower-full folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tulip-flower-charm3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tulip-flower-charm2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tulip-flower-charm1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\trojanpk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\trojanpk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\trojanpk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tread_ref folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\tread_acc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\taskhalf folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\taskcomplete folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\TakeOnTulipSuit folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\TakeOnRoseSuit folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\TakeOnOrchisSuit folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\TakeOnLilySuit folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\switchitem folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\stipple_kdh folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\stipple_jx folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\stipple_dhz folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\stipple_bdh folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\statusweak folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\sports_victory folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\sports_failure folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\slowliquid folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\scholar folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\riga_flap folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\riga_flacc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ride_up folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ride_suck folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ride_screen folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ride_odd folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ride_faint folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ride_down folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\RideMatchArrive folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\RichGod_Money folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\replymove folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\SynQueens folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\SynKings folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter\letter7 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter\letter6 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter\letter5 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter\letter4 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter\letter3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter\letter2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter\letter1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\letter folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\InsigniaNoble06s folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\InsigniaNoble05s folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\InsigniaNoble04s folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\InsigniaNoble03s folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank\InsigniaNoble02s folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\rank folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\PKchampion folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\pigeon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ninjapk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ninjapk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\ninjapk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\Ninja120 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\NEW-flower-rain folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\NEW-flower-r-1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\NEW-flower-g-1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\NEW-flower-full folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\NEW-flower-charm3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\NEW-flower-charm2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\NEW-flower-charm1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\move_improve folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\move_continue folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\moveallaying folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\moveallay folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\moveadding folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\moveadd folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\moonpk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\moonpk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\moonpk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\mate_pk_08 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\mate_pk_03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\mate_pk_02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\mate_pk_01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\juren folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\jinshi folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\guard_defshare folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_refuse folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_hugho folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_hug folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_hand folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_foot folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_dou folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_cuddle_end folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_cuddle_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_cuddle_ap folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_buss_end folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_buss_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_buss_ap folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_buss folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gam_acc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gameweek folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamewater folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamewarrior folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamemonth folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamemain folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamegulp folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamefire folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamefighter folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gamebow folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\gameassistant folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\frost_end folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\frost_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\frost_app folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\flower-white folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\flower-red folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\flower-rainw folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\flower-rainr folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\firepk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\firepk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\firepk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\fam_gain_special folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\fam_gain folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\fam_exp_special folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\fam_exp folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\factionbul_succ folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\factionbul_input folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\end_task folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\dzcard folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\DblExpFlag folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\danger800 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\danger1024 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\CurseFlag folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\cuddle_re folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\cuddle_ac folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\cortege folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\coronet\coronet7 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\coronet\coronet6 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\coronet\coronet4 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\coronet\coronet3 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\coronet folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\congratulate folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\charm03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\charm02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\charm01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\chaos_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\changefig folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\celerityliquid folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\CardAppear1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\cantask folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\cannottask folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\BlessFlag\statusbright folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\BlessFlag folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\bless\statusgray folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\bless\BlessFlag-green folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\bless folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\autorun_wait folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\autorun_end folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\autorun folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\athl_ti folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\athl_ap folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\Archerpk_third folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\Archerpk_second folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\Archerpk_eight folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other\1size-6level folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\other folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\noconfirm\noconfirm096 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\noconfirm folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\n-arrow\n-arrow-b folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\n-arrow folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\MoonSpring folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\monster\Status_Stop_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\monster\eud_431_2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\monster folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\Market folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\MapleForest folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\LuckyGuy folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\Lucky folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\LuckDiffuse folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\LuckAbsorb folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\LoveCanyon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\LiuLiuDaShun folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\lightsword folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\KylinCave folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\JiuJiuTongXin folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\XP folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\roleword folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\pkpunish\yellow_equip folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\pkpunish\disappear folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\pkpunish\Detain folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\pkpunish\blue_equip folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\pkpunish folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\PKpack folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\PKItemRewardEffect folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\KOfire01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\keepon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface216 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface215 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface214 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface213 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface212 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface211 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface210 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface209 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface208 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface207 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface206 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface205 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface204 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface203 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface202 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface201 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface200 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface199 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface198 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface197 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface196 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\interface195 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\GemComposeSuc700001 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\GemComposeFull folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\expression folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\equip_openhole folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemupgrade03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemupgrade02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemupgrade01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex12 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex11 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex10 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex09 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex08 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex07 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex06 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemaddex0 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd12 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd11 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd10 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd09 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd08 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd07 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd06 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd05 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd04 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd03 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend\itemadd0 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\EquipAppend folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\compose\experience folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\compose\compose folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\compose folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_win folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_Raise_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_loseall folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_lose folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_Fold_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_Check folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_call_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_beacon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_banner folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_arrowhead folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\card_AllIn_cyc folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\box_weapon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\box_preview folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface\alternation folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\interface folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\hunpo02 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\good folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\foot01 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\foot-xin folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\flash folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\firecracker2 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\firecracker1 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\firecracker-single folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\expression_right folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\expression_error folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\ErLongTengFei folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\eidolon folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\Dreamland folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\DragonPool folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\DisdainEffectS folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\DisdainEffectB folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\DesertCity folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\Desert folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\curse folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\CountB folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\cool folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\blade\410339 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\blade\410289 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\blade\410239 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\blade folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\BirthVillage folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\BirdIsland folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\battlelevstar folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\BaFangLaiCai folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\attack\attack035 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\attack folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500329 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500279 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500229 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500219 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500209 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500199 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500179 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500169 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500159 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500149 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500129 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500119 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500109 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500099 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500089 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500079 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500069 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500059 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500049 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500039 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500029 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500019 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow\500009 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\arrow folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\ApeCity folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\AncientMaze folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\AncientCity folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\Altar folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\900\effect_12 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\900\effect_11 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\900 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect\2NDMetempsychosis folder moved successfully.
C:\Program Files\Conquer 2.0\c3\effect folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1004\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1004\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1004\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1004 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1003\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1003\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1003\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1003 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1002\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1002\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1002\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1002 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1001\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1001\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1001\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\1001 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\741 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\612 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\601 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\560 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\500 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\490 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0004 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\741 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\612 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\601 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\560 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\500 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0003 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\741 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\612 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\601 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\560 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\500 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0002 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\741 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\612 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\611 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\601 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\560 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\500 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\410 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001\000 folder moved successfully.
C:\Program Files\Conquer 2.0\c3\0001 folder moved successfully.
C:\Program Files\Conquer 2.0\c3 folder moved successfully.
C:\Program Files\Conquer 2.0\AutoPatch_pic folder moved successfully.
C:\Program Files\Conquer 2.0\AutoPatch\update\enzf folder moved successfully.
C:\Program Files\Conquer 2.0\AutoPatch\update folder moved successfully.
C:\Program Files\Conquer 2.0\AutoPatch folder moved successfully.
C:\Program Files\Conquer 2.0\ani folder moved successfully.
C:\Program Files\Conquer 2.0 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy folder moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\139:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\445:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\137:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\138:UDP deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Gary S. Priest
->Temp folder emptied: 4220202 bytes
->Temporary Internet Files folder emptied: 277636 bytes
->Java cache emptied: 12118713 bytes
->FireFox cache emptied: 48605994 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 114155 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 62.00 mb


OTL by OldTimer - Version 3.1.26.0 log created on 01262010_073835

Files\Folders moved on Reboot...
File\Folder C:\WINDOWS\temp\eaab093e-2396-49ba-b608-3573dce2f86f.tmp not found!

Registry entries deleted on Reboot...

Kaspersky report
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Tuesday, January 26, 2010
Operating system: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Tuesday, January 26, 2010 11:09:37
Records in database: 3372737
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
C:\
D:\
F:\

Scan statistics:
Objects scanned: 51014
Threats found: 3
Infected objects found: 3
Suspicious objects found: 0
Scan duration: 01:02:54


File name / Threat / Threats count
C:\Documents and Settings\Gary S. Priest\DoctorWeb\Quarantine\Trial.Nero.9.4.26.0.EXE Infected: Trojan.Win32.Buzus.cvqt 1
C:\Documents and Settings\Gary S. Priest\My Documents\MyDownloads\firefoxsetup.exe Infected: not-a-virus:AdWare.Win32.HotBar.da 1
C:\Qoobox\Quarantine\C\Documents and Settings\Gary S. Priest\Local Settings\Application Data\{043824D6-D722-4575-B8C8-67F42C848810}\chrome\content\overlay.xul.vir Infected: Trojan.JS.Gord.a 1

Selected area has been scanned.


Gary~
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota

Re: Internet Security 2010-malware

Unread postby Dakeyras » January 26th, 2010, 7:02 pm

Hi. :)

My programs are loading slower and my system is still slower to shut down and restart
Most perplexing as I am seeing no reason for this in any of the logs posted. Unless something essential to the Operating System was removed prior to your good self posting for assistance, going back to what you mentioned here:-
Thus far I have ran a scan with Dr.Web and it has deleted/moved some files. I also deleted the 41.exe file from the System32 folder.

AVG also poped up another warning but I got distracted and cleared it before I wrote it down.
OK this is worth investigating.

The last OTL task moved my Conquer 2.0 folder out of the program folder and put it in some storage or something in the OTL folder.
Is Conquer 2.0 still installed then? Only reason I targeted it for removal was I surmised it was a orphaned folder left after uninstalltion as it did not appear in the install list of software when we ran OTL the first time.

If it is indeed still installed I apologise and the removed folded can be quite easily restored to its original location if the need from:-

_OTL >> MovedFiles >> 01262010_073835 >> C:\Program Files >> Conquer 2.0

Next:

This is a cause for some concern:-

C:\Documents and Settings\Gary S. Priest\My Documents\MyDownloads\firefoxsetup.exe

The above was flagged by a prior online scan and when targeted for removal OTM reported it was not found.

Next:

Be prepared I may have to advise either a repair of the Windows Operating System and or a reformat and reinstallation of the Windows Operating System.

OK please check for updates then carry out a full scan with the installed AVG but do not have it fix/remove anything and post the log in your next reply.

The log can be located as follows:-

  • Right click the AVG icon in your taskbar.
    • Click Launch AVG Test Centre
    • Click Results
      • Click the latest scan results
      • Click Virus Results (if present) or click Spyware Results (if present)
    • Click Program
      • Click Export list to file
    • Name it AVG log.txt
      • Save as type: All files (*.*) to your Desktop.
    • Exit AVG
  • Open AVG log.txt and Copy/Paste the results in your next reply
User avatar
Dakeyras
MRU Honors Graduate
MRU Honors Graduate
 
Posts: 8732
Joined: November 21st, 2007, 5:30 am
Location: The Tundra

Re: Internet Security 2010-malware

Unread postby PapaBear » January 28th, 2010, 9:47 am

No, the slowness has only been in the last 7-10 days and even though the computer and programs are slower to load/restart under load it still seems to have the same performance.

Also, I can wait to return my Conquer 2.0 file until we have finished with the scans.

The firefoxsetup.exe is still in "MyDownloads" folder. Should I remove this on my own or run another targeted scan?

It would be most disappointing if I should have to reformat again. This install is barley a month old.

Unfortunately AVG automatically took action against the "infection".

AVG Log
"Scan ""Scan whole computer"" was finished."
"Infections";"1";"1";"0"
"Folders selected for scanning:";"Scan whole computer"
"Scan started:";"Wednesday, January 27, 2010, 7:08:17 PM"
"Scan finished:";"Wednesday, January 27, 2010, 7:19:19 PM (11 minute(s) 2 second(s))"
"Total object scanned:";"254819"
"User who launched the scan:";"Gary S. Priest"

"Infections"
"File";"Infection";"Result"
"C:\WINDOWS\iStler.exe";"Trojan horse Injector.HK";"Moved to Virus Vault"


Gary~
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota

Re: Internet Security 2010-malware

Unread postby Dakeyras » January 28th, 2010, 10:46 am

Hi. :)

I can wait to return my Conquer 2.0 file until we have finished with the scans.
Fair play.

The firefoxsetup.exe is still in "MyDownloads" folder. Should I remove this on my own or run another targeted scan?
Aye, please delete this and empty the recycle Bin.

It would be most disappointing if I should have to reformat again. This install is barley a month old.
I appreciate this but only so much I am able to do online without physical access to the machine...........saying that I will try my best to pinpoint the exact problem(s). So far I do not think malware is a issue any longer but I will not rule it out just yet.

Unfortunately AVG automatically took action against the "infection".
A shame that, it appears to be a unknown file and if the need we can dequarantine it and upload for a check.

Note: The instructions below are specifically tailored for this machine only. Do not carry out/run these on your own machine!

System File Check:

Close all open applications/windows etc.

  • Click on Start >> Run...
  • Type in SFC /Scannow <--- Make sure to leave a space between SFC and the forward slash.
  • Click on OK
  • System File Checker will now scan all protected files to verify their versions.

Note: This will take some time. Also you may be prompted to place your XP installation CD-ROM in the CD-Drive if required.

Extra note: If prompted for files pertaining to SP3 not found on-board, cancel the Windows File Protection scan.

Next:

Please download ISeeYouXP to your Desktop.

  • Double-click ISeeYouXP.exe and follow the prompts.
  • Locate the ISeeYouXP.bat file and double click on it to run it.
  • It will create a file named ISeeYou.txt in the root of drive or on the desktop.
  • Upload the ISeeYou.txt file here as an attachment.

Note: If you get an error similar to the below when running GetRunKey.bat and you are running Windows XP, follow the steps further down that relate to your OS.

C:\WINDOWS\SYSTEM32\AUTOEXEC.NT. The system file is not suitable for running MS-DOS and Microsoft Window applications.

For Windows XP Home: download and run XPHomeFix

Then run ISeeYouXP.bat again and post the log.

The log can get quite long, which is the reason I would like you to attach the file, thank you.
User avatar
Dakeyras
MRU Honors Graduate
MRU Honors Graduate
 
Posts: 8732
Joined: November 21st, 2007, 5:30 am
Location: The Tundra

Re: Internet Security 2010-malware

Unread postby PapaBear » January 28th, 2010, 11:47 am

Ok, I did not get any logs or prompts to save any logs when I ran SFC /Scannow. I also did not get any errors and If I understood your instructions right I did not need to run XPHomeFix.

I deleted and emptied the recycle bin of the firefoxsetup.exe

And yes AVG said it moved the infected item to quarantine.

The forum wont allow me to attach the txt file. :?:
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota

Re: Internet Security 2010-malware

Unread postby Dakeyras » January 28th, 2010, 11:52 am

Ok, I did not get any logs or prompts to save any logs when I ran SFC /Scannow. I also did not get any errors and If I understood your instructions right I did not need to run XPHomeFix.

I deleted and emptied the recycle bin of the firefoxsetup.exe
Good. :thumbup:

And yes AVG said it moved the infected item to quarantine.
OK.
The forum wont allow me to attach the txt file. :?:
Hmmm the log must be larger than I was anticipating. I will have a think about this and get back to you, thank you.

In the meantime since you have run the SFC scan have you noticed any improvement at all?
User avatar
Dakeyras
MRU Honors Graduate
MRU Honors Graduate
 
Posts: 8732
Joined: November 21st, 2007, 5:30 am
Location: The Tundra

Re: Internet Security 2010-malware

Unread postby PapaBear » January 28th, 2010, 12:33 pm

I get a message that says this forum doesn't allow this type of file/log/exe cant remember the exact wording.

And I think I need to be a little more clear. I don't do a variety of things with this computer. I play games, mostly mmo's, surf the web here and there, and burn stuff as this is the only computer with a good dvd/cd burner. I uninstalled Nero, and its still listed in my program menu, so that leaves me with gaming and surfing. After I reinstalled Christmas day when I would click on a short cut or program it would literally load in a second or less. When I would shut down or restart my computer it would be about 3 seconds or less. Even if I had programs running. It would close them and shut down that fast. Now it takes about 3-4 seconds to open a program and 6+ seconds to shutdown and restart. These aren't long times. There very much in tolerable ranges. I only mentioned them because they were the only noticeable differences in performance. I had FireFox open, 8 clients of my game, the task manager, and the folder where my game exe is open when I ran the scan. It did just fine. Even under load my computer is still performing the way I would expect it to. Duno if you want/need the spec on my computer or not but I thought I should at least clarify what I was trying to say.
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota

Re: Internet Security 2010-malware

Unread postby Dakeyras » January 28th, 2010, 4:19 pm

Hi. :)

Right-click on ISeeYouXP.txt >> Properties >> Send To > >> Compressed(zipper)Folder

Upload ISeeYouXP.zip as a attachment in your next reply.

When completed the above, please post back the following:

  • ISeeYouXP.zip
User avatar
Dakeyras
MRU Honors Graduate
MRU Honors Graduate
 
Posts: 8732
Joined: November 21st, 2007, 5:30 am
Location: The Tundra

Re: Internet Security 2010-malware

Unread postby PapaBear » January 28th, 2010, 4:46 pm

Ok, I got this error meassage:


Sorry, the board attachment quota has been reached.


The report is over 800,000 characters. It would take 9 posts to complete.



Gary~
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota

Re: Internet Security 2010-malware

Unread postby Dakeyras » January 28th, 2010, 4:53 pm

Wow that is one big log then! :lol: :)

OK a pity that but not a problem, delete all ISeeYouXP associated, then please follow the instructions below, thank you.

Download to your desktop DDS from one of the links below:

Link1
Link2

  • Disable any script blocking protection.
  • Double click the tool to run it.
  • A black Screen will open, just read the contents and do nothing.
  • When the tool finish it will open a report.
  • The tool will also ask you to create a 2nd report. Please do it.
  • Copy/paste both reports back here and remove DDS from your desktop.

When completed the above, please post back the following in the order asked for:

  • How is you computer performing now, any further symptoms and or problems encountered?
  • Both DDS logs. <-- Post them individually please, IE: one Log per post/reply.
User avatar
Dakeyras
MRU Honors Graduate
MRU Honors Graduate
 
Posts: 8732
Joined: November 21st, 2007, 5:30 am
Location: The Tundra

Re: Internet Security 2010-malware

Unread postby PapaBear » January 28th, 2010, 5:24 pm

Ok, I'm not sure what you mean by script blocking, but as far as I know the scan was completed ok.



DDS txt
DDS (Ver_09-12-01.01) - NTFSx86
Run by Gary S. Priest at 15:21:02.98 on Thu 01/28/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.365 [GMT -6:00]

AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgfws9.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Documents and Settings\Gary S. Priest\My Documents\Conquer\SV-v20100115-P5206(v516)\scriptvessel.exe
C:\WINDOWS\system32\taskmgr.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\_OTL\MovedFiles\01262010_073835\C_Program Files\Conquer 2.0\Conquer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Gary S. Priest\Desktop\dds.scr

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [VirtualCloneDrive] "c:\program files\elaborate bytes\virtualclonedrive\VCDDaemon.exe" /s
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shoc ... wflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: avgrsstarter - avgrsstx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\garys~1.pri\applic~1\mozilla\firefox\profiles\dt378tcy.default\
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npwachk.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\system32\drivers\AVGIDSxx.sys [2010-1-7 25608]
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2010-1-7 161800]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-1-7 333192]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-1-7 28424]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-1-7 360584]
R1 BIOS;BIOS;c:\windows\system32\drivers\BIOS.sys [2009-12-25 13696]
R2 avg9emc;AVG E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-1-7 906520]
R2 avg9wd;AVG WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-1-7 285392]
R2 avgfws9;AVG Firewall;c:\program files\avg\avg9\avgfws9.exe [2010-1-7 2304192]
R2 AVGIDSAgent;AVG9IDSAgent;c:\program files\avg\avg9\identity protection\agent\bin\AVGIDSAgent.exe [2010-1-7 5832712]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2010-1-7 30104]
R3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSDriver.sys [2010-1-7 122376]
R3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSFilter.sys [2010-1-7 30216]
R3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSShim.sys [2010-1-7 25736]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-1-11 135664]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2010-1-7 30104]

=============== Created Last 30 ================


==================== Find3M ====================

2009-12-26 01:01:52 409600 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-26 01:01:52 114688 ----a-w- c:\windows\system32\OpenAL32.dll
2009-12-25 23:45:34 21640 ----a-w- c:\windows\system32\emptyregdb.dat
2009-12-21 19:14:05 916480 ----a-w- c:\windows\system32\wininet.dll

============= FINISH: 15:21:42.53 ===============
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota

Re: Internet Security 2010-malware

Unread postby PapaBear » January 28th, 2010, 5:25 pm

Attach txt
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 12/25/2009 5:49:13 PM
System Uptime: 1/28/2010 7:28:17 AM (8 hours ago)

Motherboard: | | K8T890-8237
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ | Socket 939 | 2199/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 77 GiB total, 55.569 GiB free.
D: is CDROM (CDFS)
F: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Multimedia Audio Controller
Device ID: PCI\VEN_1106&DEV_3059&SUBSYS_82121565&REV_60\3&2411E6FE&0&8D
Manufacturer:
Name: Multimedia Audio Controller
PNP Device ID: PCI\VEN_1106&DEV_3059&SUBSYS_82121565&REV_60\3&2411E6FE&0&8D
Service:

==== System Restore Points ===================

RP1: 1/18/2010 7:49:12 PM - System Checkpoint
RP2: 1/19/2010 9:01:10 PM - System Checkpoint
RP3: 1/20/2010 11:32:27 PM - System Checkpoint
RP4: 1/21/2010 10:46:15 AM - Removed HiJackThis
RP5: 1/22/2010 1:28:31 PM - System Checkpoint
RP6: 1/22/2010 7:13:18 PM - Software Distribution Service 3.0
RP7: 1/23/2010 7:08:06 PM - Avg8 Update
RP8: 1/24/2010 8:07:57 PM - System Checkpoint
RP9: 1/25/2010 8:20:11 PM - System Checkpoint
RP10: 1/26/2010 5:06:56 PM - Installed Windows Media Player 11
RP11: 1/26/2010 5:09:50 PM - Software Distribution Service 3.0
RP12: 1/27/2010 5:54:58 PM - System Checkpoint
RP13: 1/27/2010 7:13:45 PM - Avg8 Update
RP14: 1/28/2010 7:24:39 AM - Software Distribution Service 3.0

==== Installed Programs ======================

ACE Mega CoDecS Pack
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.2
Advertising Center
AMD Processor Driver
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
AVG 9.0
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center HydraVision Full
Catalyst Control Center Localization All
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Conquer 2.0
Creative EAX Settings
Creative Speaker Settings
Device Control
DolbyFiles
ERUNT 1.1j
Gimp 2.6.2 Debug
Google Chrome
Google Earth
Google Update Helper
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB976098-v2)
ImagXpress
Java(TM) 6 Update 17
Malwarebytes' Anti-Malware
Menu Templates - Starter Kit
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft XML Parser
Movie Templates - Starter Kit
Mozilla Firefox (3.5.7)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
Nero 9
Nero BurnRights
Nero ControlCenter
Nero CoverDesigner
Nero DiscSpeed
Nero DriveSpeed
Nero InfoTool
Nero Installer
Nero MediaHome 4
Nero PhotoSnap
Nero Recode
Nero Rescue Agent
Nero ShowTime
Nero StartSmart
Nero Vision
Nero WaveEditor
NeroBurningROM
NeroExpress
neroxml
Platform
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB976325)
Skins
SoundTrax
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB975364)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VCRedistSetup
VIA Platform Device Manager
VIA Rhine-Family Fast Ethernet Adapter
VirtualCloneDrive
WebFldrs XP
Winamp
Winamp Application Detect
Windows Imaging Component
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
ZSMC USB PC Camera (ZS211)

==== Event Viewer Messages From Past Week ========

1/28/2010 9:18:45 AM, information: Windows File Protection [64017] - Windows File Protection file scan completed successfully.
1/28/2010 8:51:56 AM, information: Windows File Protection [64016] - Windows File Protection file scan was started.
1/26/2010 5:11:44 PM, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Windows Media Player 11.
1/23/2010 7:02:37 PM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 1 time(s).
1/23/2010 7:02:36 PM, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s).
1/21/2010 10:46:25 AM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.

==== End Of File ===========================
PapaBear
Regular Member
 
Posts: 29
Joined: January 7th, 2010, 12:00 pm
Location: North Dakota
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 33 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware