Hello, I have decided to remove the programs mentioned. I have included the file check results and the rsit logs. Thank you once again.
File already submitted: The file sent has already been analysed by VirusTotal in the past. This is same basic info regarding the sample itself and its last analysis:
MD5: c464fee5a2ffe71e9a25d8ebe3d43ac4
Date first seen: 2006-12-15 15:41:55 (UTC)
Date last seen: 2010-10-04 20:35:00 (UTC)
Detection ratio: 4/42
------------------------------------------------------
------------------------------------------------------
Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-10-06 12:12:17
Microsoft Windows XP Professional Service Pack 3
System drive C: has 118 GB (77%) free of 153 GB
Total RAM: 2038 MB (78% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:12:24 PM, on 6/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21283)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\mmm.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Administrator\Desktop\RSIT.exe
C:\Program Files\trend micro\Administrator.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = IE
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\Spybot - Search & Destroy\SDHelper.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [PowerTweaK Menu] C:\WINDOWS\system32\mmm.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /nosplash
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\SDHelper.dll (file missing)
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\SDHelper.dll (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4CA8FE88-7B35-4301-B71B-ED8AF0F5E0C6}: NameServer = 93.188.163.74,93.188.166.109
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 93.188.163.74,93.188.166.109
O17 - HKLM\System\CS1\Services\Tcpip\..\{4CA8FE88-7B35-4301-B71B-ED8AF0F5E0C6}: NameServer = 93.188.163.74,93.188.166.109
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 93.188.163.74,93.188.166.109
O17 - HKLM\System\CS2\Services\Tcpip\..\{4CA8FE88-7B35-4301-B71B-ED8AF0F5E0C6}: NameServer = 93.188.163.74,93.188.166.109
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: NameServer = 93.188.163.74,93.188.166.109
O17 - HKLM\System\CS3\Services\Tcpip\..\{4CA8FE88-7B35-4301-B71B-ED8AF0F5E0C6}: NameServer = 93.188.163.74,93.188.166.109
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 93.188.163.74,93.188.166.109
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 6969 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\1-Click Maintenance.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-20 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - E:\Spybot - Search & Destroy\SDHelper.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-07 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-07 73728]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-01-13 131072]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-01-13 163840]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-01-13 135168]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-08-16 1404928]
"PowerTweaK Menu"=C:\WINDOWS\system32\mmm.exe [2005-07-05 828416]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"SystemTray"=C:\WINDOWS\system32\SysTray.Exe [2001-08-23 3072]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-17 1164584]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2009-03-08 37376]
"TaskSwitchXP"=C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe [2006-08-04 62976]
"SpybotSD TeaTimer"=E:\Spybot - Search & Destroy\TeaTimer.exe []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-01-13 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2009-03-08 133632]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSMConfigurePrograms"=1
"NoActiveDesktop"=0
"NoBandCustomize"=0
"NoMovingBands"=0
"NoCloseDragDropBands"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoSMConfigurePrograms"=1
"NoToolbarCustomize"=0
"NoBandCustomize"=0
"NoActiveDesktop"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======List of files/folders created in the last 1 months======
2010-10-06 12:12:17 ----D---- C:\rsit
2010-10-04 15:52:26 ----D---- C:\Program Files\Microsoft Works
2010-10-04 15:52:19 ----D---- C:\Program Files\Common Files\DESIGNER
2010-10-04 15:51:06 ----D---- C:\Users\All Users\Application Data\Microsoft Help
2010-10-04 15:51:06 ----D---- C:\Program Files\Microsoft Office
2010-10-04 15:50:52 ----RHD---- C:\MSOCache
2010-10-03 14:31:00 ----D---- C:\Program Files\Trend Micro
2010-10-03 04:14:42 ----D---- C:\Users\Administrator\Application Data\Malwarebytes
2010-10-03 03:53:25 ----D---- C:\Users\All Users\Application Data\Spybot - Search & Destroy
2010-10-03 03:53:25 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-10-03 03:32:59 ----SHD---- C:\WINDOWS\CSC
2010-10-03 03:32:51 ----A---- C:\WINDOWS\ntbtlog.txt
2010-10-03 02:11:29 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-10-03 02:11:24 ----D---- C:\Users\All Users\Application Data\Malwarebytes
2010-10-03 02:11:23 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-10-02 16:02:42 ----D---- C:\WINDOWS\system32\appmgmt
2010-10-02 15:53:31 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-09-29 20:48:44 ----D---- C:\Users\Administrator\Application Data\DivX
2010-09-29 20:48:32 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2010-09-29 20:48:32 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2010-09-29 20:48:14 ----D---- C:\Program Files\Common Files\DivX Shared
2010-09-29 20:45:49 ----D---- C:\Program Files\DivX
2010-09-29 20:44:48 ----D---- C:\Users\All Users\Application Data\DivX
2010-09-29 01:01:05 ----D---- C:\Program Files\Common Files\Adobe
2010-09-28 16:55:32 ----D---- C:\Users\Administrator\Application Data\Corel
2010-09-28 16:25:52 ----D---- C:\Users\Administrator\Application Data\LimeWire
2010-09-28 16:21:45 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-09-28 16:21:41 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-09-28 16:21:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-09-28 16:21:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-09-28 15:34:21 ----D---- C:\Users\Administrator\Application Data\uTorrent
2010-09-28 15:05:40 ----D---- C:\WINDOWS\Sun
2010-09-28 15:05:38 ----D---- C:\Users\Administrator\Application Data\Sun
2010-09-28 12:53:20 ----D---- C:\Users\Administrator\Application Data\Media Player Classic
2010-09-27 21:57:16 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-09-27 21:40:52 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-09-27 21:40:47 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-09-27 21:40:22 ----D---- C:\WINDOWS\ie7updates
2010-09-27 21:40:11 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-09-27 21:40:05 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-09-27 21:40:01 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-09-27 21:39:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-27 21:39:52 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-09-27 21:39:46 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-09-27 21:39:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-09-27 21:39:36 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-27 21:39:32 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-09-27 21:39:22 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-09-27 21:39:17 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-09-27 21:39:13 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-09-27 21:39:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-09-27 21:38:44 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-09-27 21:38:39 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-09-27 21:38:34 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-09-27 21:38:29 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-09-27 21:38:24 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-09-27 21:38:21 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-09-27 21:38:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-09-27 21:38:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-09-27 21:38:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-09-27 21:37:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-27 21:37:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-09-27 21:37:41 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-09-27 21:37:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-09-27 21:37:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-09-27 21:37:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-27 21:37:21 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-09-27 21:37:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-09-27 21:37:11 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-27 21:37:04 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-09-27 21:36:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-09-27 21:36:54 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-09-27 21:36:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-09-27 21:36:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-09-27 21:36:37 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-09-27 21:36:31 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-09-27 21:36:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-09-27 21:36:22 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-09-27 21:36:17 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-27 21:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-09-27 21:36:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-09-27 21:35:58 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-09-27 21:35:54 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-09-27 21:34:56 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-09-27 21:34:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-09-27 21:34:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-09-27 21:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-09-27 21:34:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-09-27 21:34:26 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-09-27 21:34:20 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-09-27 21:34:16 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-09-27 21:34:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-09-27 21:34:06 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-09-27 21:34:04 ----D---- C:\Program Files\MSXML 4.0
2010-09-27 21:33:57 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-09-27 21:33:51 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-09-27 21:33:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-09-27 21:33:42 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-09-27 21:33:34 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-09-27 21:30:33 ----D---- C:\Users\Administrator\Application Data\Macromedia
2010-09-27 21:30:32 ----D---- C:\Users\Administrator\Application Data\Adobe
2010-09-27 21:25:36 ----A---- C:\Picked.ini
2010-09-27 21:25:09 ----A---- C:\Fade.ini
2010-09-27 20:29:36 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2010-09-27 20:24:09 ----D---- C:\Users\Administrator\Application Data\Mozilla
2010-09-27 20:21:20 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-09-27 20:20:14 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2010-09-08 07:33:27 ----A---- C:\WINDOWS\system32\h323log.txt
2010-09-08 07:33:22 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-09-08 07:33:20 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-09-08 07:33:18 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-09-08 07:33:17 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-09-08 07:33:15 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-09-08 07:33:13 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-09-08 07:33:11 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-09-08 07:33:09 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-09-08 07:33:07 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-09-08 07:33:05 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-09-08 07:33:03 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-09-08 07:33:00 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-09-08 07:32:25 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-09-08 07:32:00 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-09-08 07:30:51 ----A---- C:\WINDOWS\system32\usbui.dll
2010-09-08 07:30:42 ----D---- C:\Program Files\Analog Devices
2010-09-08 07:30:41 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-09-08 07:30:41 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-09-08 07:30:41 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-09-08 07:30:22 ----D---- C:\WINDOWS\system32\x64
2010-09-08 07:30:22 ----A---- C:\WINDOWS\system32\igxpun.exe
2010-09-08 07:30:08 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-09-08 07:30:08 ----A---- C:\WINDOWS\system32\difxapi.dll
2010-09-08 07:27:01 ----SHD---- C:\WINDOWS\Installer
2010-09-08 07:27:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-08 07:27:00 ----D---- C:\Program Files\Common Files\ODBC
2010-09-08 07:27:00 ----A---- C:\WINDOWS\ODBCINST.INI
2010-09-08 07:26:57 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-09-08 07:26:57 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-08 07:26:56 ----D---- C:\Program Files\Common Files
2010-09-08 07:26:56 ----AD---- C:\Program Files
2010-09-08 07:26:53 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-09-08 07:26:53 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-09-08 07:26:53 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-09-08 07:26:52 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-09-08 07:26:50 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-09-08 07:26:50 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-09-08 07:26:50 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-09-08 07:26:50 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-09-08 07:26:50 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-09-08 07:26:50 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-09-08 07:26:50 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-09-08 07:26:49 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-09-08 07:26:49 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-09-08 07:26:49 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-09-08 07:26:49 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-09-08 07:26:49 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-09-08 07:26:48 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-09-08 07:26:43 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-09-08 07:26:43 ----A---- C:\WINDOWS\system32\irclass.dll
2010-09-08 07:26:43 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-09-08 07:26:43 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-09-08 07:26:43 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-09-08 07:26:42 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-09-08 07:26:41 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-09-08 07:26:41 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-09-08 07:26:41 ----A---- C:\WINDOWS\system32\batt.dll
2010-09-08 07:26:41 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-09-08 07:26:40 ----A---- C:\WINDOWS\system32\storprop.dll
2010-09-08 07:26:30 ----ASH---- C:\Users\All Users\Application Data\desktop.ini
2010-09-08 07:26:24 ----RA---- C:\WINDOWS\SET8.tmp
2010-09-08 07:26:22 ----RA---- C:\WINDOWS\SET4.tmp
2010-09-08 07:26:20 ----RA---- C:\WINDOWS\SET3.tmp
2010-09-08 07:26:16 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-08 07:26:16 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-08 07:26:10 ----SD---- C:\Users\All Users\Application Data\Microsoft
2010-09-08 07:25:26 ----A---- C:\WINDOWS\system32\drivers\smwdm.sys
2010-09-08 07:25:25 ----A---- C:\WINDOWS\system32\drivers\senfilt.sys
2010-09-08 07:25:23 ----A---- C:\WINDOWS\system32\PostProc.dll
2010-09-08 07:25:22 ----A---- C:\WINDOWS\system32\Edcrypt.dll
2010-09-08 07:23:30 ----A---- C:\WINDOWS\system32\drivers\b57xp32.sys
2010-09-08 07:21:58 ----A---- C:\WINDOWS\system32\drivers\igxpmp32.sys
2010-09-08 07:21:39 ----A---- C:\WINDOWS\system32\igxprd32.dll
2010-09-08 07:21:39 ----A---- C:\WINDOWS\system32\igxpgd32.dll
2010-09-08 07:21:38 ----A---- C:\WINDOWS\system32\igxpdx32.dll
2010-09-08 07:21:38 ----A---- C:\WINDOWS\system32\igxpdv32.dll
2010-09-08 07:21:38 ----A---- C:\WINDOWS\system32\iglicd32.dll
2010-09-08 07:21:38 ----A---- C:\WINDOWS\system32\igldev32.dll
2010-09-08 07:21:38 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2010-09-08 07:21:38 ----A---- C:\WINDOWS\system32\igfxCoIn_v4764.dll
2010-09-08 07:21:37 ----A---- C:\WINDOWS\system32\igfxress.dll
2010-09-08 07:21:37 ----A---- C:\WINDOWS\system32\igfxpph.dll
2010-09-08 07:21:37 ----A---- C:\WINDOWS\system32\igfxexps.dll
2010-09-08 07:21:37 ----A---- C:\WINDOWS\system32\igfxdo.dll
2010-09-08 07:21:37 ----A---- C:\WINDOWS\system32\igfxdev.dll
2010-09-08 07:21:36 ----A---- C:\WINDOWS\system32\hccutils.dll
2010-09-08 07:21:33 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2010-09-08 07:21:33 ----A---- C:\WINDOWS\system32\igfxtray.exe
2010-09-08 07:21:33 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2010-09-08 07:21:33 ----A---- C:\WINDOWS\system32\igfxpers.exe
2010-09-08 07:21:33 ----A---- C:\WINDOWS\system32\igfxext.exe
2010-09-08 07:21:33 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2010-09-08 07:21:33 ----A---- C:\WINDOWS\system32\hkcmd.exe
2010-09-08 07:16:36 ----A---- C:\WINDOWS\~DF6B54.tmp
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\slide_wallpapers.exe
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\sleep.exe
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\regshot.ini
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\regshot.exe
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\pskill.exe
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\oeminfo.ini
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\nircmdc.exe
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\nircmd.exe
2010-09-08 07:16:20 ----A---- C:\WINDOWS\system32\myuninst.exe
2010-09-08 07:16:18 ----A---- C:\WINDOWS\system32\language.ini
2010-09-08 07:16:18 ----A---- C:\WINDOWS\system32\killproc.exe
2010-09-08 07:16:17 ----A---- C:\WINDOWS\system32\WAIT.EXE
2010-09-08 07:16:17 ----A---- C:\WINDOWS\system32\Tweakui.exe
2010-09-08 07:16:17 ----A---- C:\WINDOWS\system32\hwid.exe
2010-09-08 07:16:17 ----A---- C:\WINDOWS\system32\cWnd.exe
2010-09-08 07:16:17 ----A---- C:\WINDOWS\system32\cmdow.exe
2010-09-08 07:16:17 ----A---- C:\WINDOWS\system32\cmdhide.exe
2010-09-08 07:16:17 ----A---- C:\WINDOWS\system32\calc.exe
2010-09-08 07:16:16 ----A---- C:\WINDOWS\system32\TCPOptimizer.exe
2010-09-08 07:16:16 ----A---- C:\WINDOWS\system32\Refresh.exe
2010-09-08 07:16:16 ----A---- C:\WINDOWS\system32\MyCleaner.exe
2010-09-08 07:16:16 ----A---- C:\WINDOWS\system32\HideCMD.exe
2010-09-08 07:16:16 ----A---- C:\WINDOWS\system32\DELTREE.EXE
2010-09-08 07:16:15 ----A---- C:\WINDOWS\system32\ChangeWallpaper.exe
2010-09-08 07:15:55 ----A---- C:\WINDOWS\Removes.ini
2010-09-08 07:15:53 ----AD---- C:\WINDOWS\LastXP
2010-09-08 07:15:41 ----SHD---- C:\System Volume Information
2010-09-08 07:15:41 ----D---- C:\Users
2010-09-08 07:15:14 ----RASH---- C:\boot.ini
2010-09-08 07:11:12 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-09-08 07:11:12 ----RSD---- C:\WINDOWS\Fonts
2010-09-08 07:11:12 ----RD---- C:\WINDOWS\Offline Web Pages
2010-09-08 07:11:12 ----HD---- C:\WINDOWS\inf
2010-09-08 07:11:12 ----D---- C:\WINDOWS\WinSxS
2010-09-08 07:11:12 ----D---- C:\WINDOWS\WBEM
2010-09-08 07:11:12 ----D---- C:\WINDOWS\twain_32
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Temp
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\wins
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\wbem
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\usmt
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\spool
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\ShellExt
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\Setup
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\scripting
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\ras
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\PreInstall
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\oobe
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\npp
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\mui
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\Macromed
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\inetsrv
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\IME
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\icsxml
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\ias
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\export
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\en-US
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\en
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\drivers
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\dhcp
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\config
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\3com_dmi
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\3076
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\2052
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1054
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1042
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1041
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1037
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1033
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1031
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1028
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system32\1025
2010-09-08 07:11:12 ----D---- C:\WINDOWS\system
2010-09-08 07:11:12 ----D---- C:\WINDOWS\SoftwareDistribution
2010-09-08 07:11:12 ----D---- C:\WINDOWS\security
2010-09-08 07:11:12 ----D---- C:\WINDOWS\repair
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Provisioning
2010-09-08 07:11:12 ----D---- C:\WINDOWS\PeerNet
2010-09-08 07:11:12 ----D---- C:\WINDOWS\pchealth
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Network Diagnostic
2010-09-08 07:11:12 ----D---- C:\WINDOWS\mui
2010-09-08 07:11:12 ----D---- C:\WINDOWS\msapps
2010-09-08 07:11:12 ----D---- C:\WINDOWS\msagent
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Media
2010-09-08 07:11:12 ----D---- C:\WINDOWS\L2Schemas
2010-09-08 07:11:12 ----D---- C:\WINDOWS\java
2010-09-08 07:11:12 ----D---- C:\WINDOWS\ime
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Help
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Driver Cache
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Debug
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Cursors
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Connection Wizard
2010-09-08 07:11:12 ----D---- C:\WINDOWS\Config
2010-09-08 07:11:12 ----D---- C:\WINDOWS\AppPatch
2010-09-08 07:11:12 ----D---- C:\WINDOWS\addins
2010-09-08 07:11:12 ----AD---- C:\WINDOWS\Web
2010-09-08 07:11:12 ----AD---- C:\WINDOWS\system32
2010-09-08 07:11:12 ----AD---- C:\WINDOWS\Resources
2010-09-08 07:11:12 ----AD---- C:\WINDOWS
2010-09-08 07:11:11 ----ASH---- C:\pagefile.sys
2010-09-07 21:55:49 ----SHD---- C:\RECYCLER
2010-09-07 21:55:28 ----A---- C:\WINDOWS\ppGameDrive.ini
2010-09-07 21:55:28 ----A---- C:\WINDOWS\ppAppDrive.ini
2010-09-07 21:55:24 ----A---- C:\WINDOWS\system32\StartAU.cmd
2010-09-07 21:54:40 ----A---- C:\WINDOWS\system32\renuser.exe
2010-09-07 21:54:37 ----A---- C:\WINDOWS\system32\ChangeVLKey.vbs
2010-09-07 21:54:37 ----A---- C:\WINDOWS\system32\7z.exe
2010-09-07 21:54:37 ----A---- C:\WINDOWS\system32\2apply.exe
2010-09-07 21:54:30 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-09-07 21:54:12 ----D---- C:\Users\Administrator\Application Data\Identities
2010-09-07 21:54:08 ----HD---- C:\Program Files\Uninstall Information
2010-09-07 21:51:19 ----D---- C:\ppApps
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\vxblock.dll
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxwave.dll
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxsfs.dll
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxmas.dll
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxdrv.dll
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\pxafs.dll
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\px.dll
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2010-09-07 21:50:57 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2010-09-07 21:50:54 ----D---- C:\Users\Administrator\Application Data\Winamp
2010-09-07 21:50:54 ----D---- C:\Program Files\Winamp
2010-09-07 21:50:49 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2010-09-07 21:50:48 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-09-07 21:50:47 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-09-07 21:50:45 ----D---- C:\Users\Administrator\Application Data\TuneUp Software
2010-09-07 21:50:32 ----D---- C:\Users\All Users\Application Data\TuneUp Software
2010-09-07 21:50:31 ----D---- C:\Program Files\TuneUp Utilities 2009
2010-09-07 21:50:18 ----RD---- C:\Program Files\Skype
2010-09-07 21:50:06 ----D---- C:\Program Files\Nero
2010-09-07 21:49:38 ----D---- C:\Program Files\Nero Burning ROM Portable
2010-09-07 21:49:19 ----D---- C:\Program Files\LimeWire
2010-09-07 21:49:00 ----A---- C:\WINDOWS\system32\unrar.dll
2010-09-07 21:49:00 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-09-07 21:49:00 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-09-07 21:49:00 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-09-07 21:49:00 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-09-07 21:48:57 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-09-07 21:48:56 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-09-07 21:48:56 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-09-07 21:48:56 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2010-09-07 21:48:53 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-09-07 21:48:53 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-09-07 21:48:52 ----A---- C:\WINDOWS\system32\pthreadGC2.dll
2010-09-07 21:48:51 ----D---- C:\Users\All Users\Application Data\Real
2010-09-07 21:48:51 ----D---- C:\Users\Administrator\Application Data\Real
2010-09-07 21:48:51 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-07 21:48:38 ----D---- C:\Program Files\Mozilla Firefox
2010-09-07 21:48:15 ----D---- C:\Program Files\Celestia
2010-09-07 21:48:09 ----D---- C:\Program Files\CCleaner
2010-09-07 21:47:36 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2010-09-07 21:47:36 ----A---- C:\WINDOWS\system32\drivers\avgntmgr.sys
2010-09-07 21:47:36 ----A---- C:\WINDOWS\system32\drivers\avgntdd.sys
2010-09-07 21:47:35 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2010-09-07 21:47:34 ----D---- C:\Users\All Users\Application Data\Avira
2010-09-07 21:47:34 ----D---- C:\Program Files\Avira
2010-09-07 21:47:02 ----D---- C:\Users\All Users\Application Data\Adobe
2010-09-07 21:47:01 ----D---- C:\Program Files\Adobe
2010-09-07 21:46:14 ----D---- C:\Program Files\7-Zip
2010-09-07 21:46:07 ----D---- C:\Program Files\Unlocker
2010-09-07 21:46:07 ----D---- C:\Program Files\Microsoft
2010-09-07 21:46:05 ----D---- C:\Program Files\TaskSwitchXP
2010-09-07 21:46:00 ----D---- C:\Program Files\Run With Arguments
2010-09-07 21:45:59 ----D---- C:\Program Files\Attribute Changer
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\WhyReboot.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\WC.com
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\WallChan.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\ussf.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\UpxGui.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\Replacer.cmd
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\RegFileMerger.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\Reg2InfHandler.cmd
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\Reg2Inf.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\PCalc.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\modifyPE.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\mmm.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\mmm.dll
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\makeiso.cmd
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\LCISOCreator.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\system32\HMTCD.dll
2010-09-07 21:45:57 ----A---- C:\WINDOWS\nircmdc.exe
2010-09-07 21:45:57 ----A---- C:\WINDOWS\nircmd.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\wiaaut.dll
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\HFExtract.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\FGCBAHandler.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\FGCBA.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\EXPander.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\colorpad.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\cdimage.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\Cabtool.exe
2010-09-07 21:45:56 ----A---- C:\WINDOWS\system32\Cabarc.exe
2010-09-07 21:45:35 ----A---- C:\WINDOWS\system32\libpng13.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\zlib1.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\vb40032.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\ssleay32.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\openal32.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\msvcr71.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\msvcr70.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\msvcp71.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\msvcp70.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\msvci70.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\msstkprp.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\msstdfmt.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc71u.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc71KOR.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc71JPN.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc71ITA.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc71FRA.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70u.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70KOR.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70JPN.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70ITA.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70FRA.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70ESP.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70ENU.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70DEU.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70CHT.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\mfc70CHS.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\libmmd.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\libintl3.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\libiconv2.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\libeay32.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\cygwinb19.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\cygwin1.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\AutoItX3.dll
2010-09-07 21:45:34 ----A---- C:\WINDOWS\system32\atl70.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\mfc71ESP.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\mfc71ENU.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\mfc71DEU.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\mfc71CHT.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\mfc71CHS.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\mfc71.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\mfc70.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\libssl32.dll
2010-09-07 21:45:33 ----A---- C:\WINDOWS\system32\atl71.dll
2010-09-07 21:45:21 ----D---- C:\Program Files\System
2010-09-07 21:45:14 ----A---- C:\WINDOWS\DontSort.ini
2010-09-07 21:44:56 ----A---- C:\WINDOWS\system32\XXMKLINK.EXE
2010-09-07 21:44:56 ----A---- C:\WINDOWS\system32\NoSplash.exe
2010-09-07 21:44:56 ----A---- C:\WINDOWS\system32\NoHardwareWin.exe
2010-09-07 21:44:56 ----A---- C:\WINDOWS\system32\InstallTheme.exe
2010-09-07 21:44:55 ----A---- C:\WINDOWS\system32\FixBootINI.exe
2010-09-07 21:44:35 ----AD---- C:\Program Files\Utilities
2010-09-07 21:43:39 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-09-07 21:43:00 ----A---- C:\WINDOWS\system32\MRT.exe
2010-09-07 21:42:27 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2010-09-07 21:42:20 ----D---- C:\Users\All Users\Application Data\Windows Genuine Advantage
2010-09-07 21:42:14 ----ASH---- C:\Users\Administrator\Application Data\desktop.ini
2010-09-07 21:42:13 ----SD---- C:\Users\Administrator\Application Data\Microsoft
2010-09-07 21:41:32 ----SD---- C:\WINDOWS\system32\Microsoft
2010-09-07 21:41:32 ----D---- C:\WINDOWS\Prefetch
2010-09-07 21:41:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-09-07 21:40:22 ----A---- C:\WINDOWS\system32\javaws.exe
2010-09-07 21:40:22 ----A---- C:\WINDOWS\system32\javaw.exe
2010-09-07 21:40:22 ----A---- C:\WINDOWS\system32\java.exe
2010-09-07 21:40:22 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-09-07 21:40:15 ----D---- C:\Program Files\Java
2010-09-07 21:39:31 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-07 21:39:28 ----D---- C:\Program Files\Windows Sidebar
2010-09-07 21:39:27 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-07 21:39:27 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-07 21:39:09 ----D---- C:\Program Files\Alky for Applications
2010-09-07 21:38:56 ----RASH---- C:\MSDOS.SYS
2010-09-07 21:38:56 ----RASH---- C:\IO.SYS
2010-09-07 21:38:56 ----A---- C:\WINDOWS\control.ini
2010-09-07 21:38:56 ----A---- C:\CONFIG.SYS
2010-09-07 21:38:56 ----A---- C:\AUTOEXEC.BAT
2010-09-07 21:38:43 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-09-07 21:38:38 ----D---- C:\WINDOWS\system32\dllcache
2010-09-07 21:37:42 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-09-07 21:37:38 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-09-07 21:37:32 ----HD---- C:\Program Files\WindowsUpdate
2010-09-07 21:37:10 ----D---- C:\WINDOWS\system32\DirectX
2010-09-07 21:37:04 ----A---- C:\WINDOWS\system32\atrace.dll
2010-09-07 21:37:03 ----A---- C:\WINDOWS\system32\desktop.ini
2010-09-07 21:37:03 ----A---- C:\WINDOWS\desktop.ini
2010-09-07 21:36:58 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-09-07 21:36:57 ----D---- C:\Program Files\Common Files\Services
2010-09-07 21:36:57 ----A---- C:\WINDOWS\system32\acctres.dll
2010-09-07 21:36:55 ----SD---- C:\WINDOWS\Tasks
2010-09-07 21:36:55 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-09-07 21:36:54 ----D---- C:\Program Files\Common Files\MSSoap
2010-09-07 21:36:50 ----D---- C:\WINDOWS\srchasst
2010-09-07 21:36:49 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-09-07 21:36:49 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-09-07 21:36:48 ----A---- C:\WINDOWS\system32\wups.dll
2010-09-07 21:36:48 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-09-07 21:36:48 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-09-07 21:36:48 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-09-07 21:36:48 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-09-07 21:36:47 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-09-07 21:36:47 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-09-07 21:36:47 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-09-07 21:36:47 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-09-07 21:36:47 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-09-07 21:36:47 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-09-07 21:36:47 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-09-07 21:36:44 ----D---- C:\Program Files\Movie Maker
2010-09-07 21:36:27 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-09-07 21:36:27 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-09-07 21:36:27 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-09-07 21:36:27 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-09-07 21:36:24 ----D---- C:\WINDOWS\system32\Restore
2010-09-07 21:36:24 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-09-07 21:36:24 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-09-07 21:36:24 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-09-07 21:36:23 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-09-07 21:36:23 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-09-07 21:36:23 ----A---- C:\WINDOWS\system32\srclient.dll
2010-09-07 21:36:23 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-09-07 21:36:23 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-09-07 21:36:23 ----A---- C:\WINDOWS\system32\ils.dll
2010-09-07 21:36:23 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-09-07 21:36:22 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-09-07 21:36:22 ----A---- C:\WINDOWS\system32\msconf.dll
2010-09-07 21:36:22 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-09-07 21:36:20 ----D---- C:\Program Files\NetMeeting
2010-09-07 21:36:20 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-09-07 21:36:20 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-09-07 21:36:18 ----A---- C:\WINDOWS\system32\inetres.dll
2010-09-07 21:36:18 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-09-07 21:36:16 ----D---- C:\Program Files\Outlook Express
2010-09-07 21:36:16 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-09-07 21:36:16 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-09-07 21:36:16 ----A---- C:\WINDOWS\system32\mstask.dll
2010-09-07 21:36:16 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-09-07 21:36:16 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-09-07 21:36:15 ----A---- C:\WINDOWS\system32\isign32.dll
2010-09-07 21:36:15 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-09-07 21:36:11 ----D---- C:\Program Files\Common Files\System
2010-09-07 21:36:10 ----D---- C:\Program Files\Internet Explorer
2010-09-07 21:35:30 ----D---- C:\Program Files\ComPlus Applications
2010-09-07 21:35:28 ----A---- C:\WINDOWS\vbaddin.ini
2010-09-07 21:35:28 ----A---- C:\WINDOWS\vb.ini
2010-09-07 21:35:23 ----D---- C:\WINDOWS\Registration
2010-09-07 21:35:03 ----D---- C:\Program Files\Windows Media Connect 2
2010-09-07 21:35:02 ----D---- C:\Program Files\Windows Media Player
2010-09-07 21:34:56 ----D---- C:\Program Files\Messenger
2010-09-07 21:34:56 ----A---- C:\WINDOWS\system32\write.exe
2010-09-07 21:34:48 ----A---- C:\WINDOWS\system32\winchat.exe
2010-09-07 21:34:48 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-09-07 21:34:48 ----A---- C:\WINDOWS\system32\hticons.dll
2010-09-07 21:34:48 ----A---- C:\WINDOWS\system32\avwav.dll
2010-09-07 21:34:48 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-09-07 21:34:48 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-09-07 21:34:43 ----A---- C:\WINDOWS\system32\getuname.dll
2010-09-07 21:34:43 ----A---- C:\WINDOWS\system32\charmap.exe
2010-09-07 21:34:42 ----A---- C:\WINDOWS\system32\winmine.exe
2010-09-07 21:34:42 ----A---- C:\WINDOWS\system32\sol.exe
2010-09-07 21:34:42 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\tskill.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\tscon.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\shadow.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\reset.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\regini.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-09-07 21:34:41 ----A---- C:\WINDOWS\system32\freecell.exe
2010-09-07 21:34:40 ----A---- C:\WINDOWS\system32\msg.exe
2010-09-07 21:34:40 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-09-07 21:34:40 ----A---- C:\WINDOWS\system32\logoff.exe
2010-09-07 21:34:40 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-09-07 21:34:36 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-09-07 21:34:35 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-09-07 21:34:34 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-09-07 21:34:34 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-09-07 21:34:34 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-09-07 21:34:33 ----D---- C:\Program Files\Windows NT
2010-09-07 21:34:33 ----A---- C:\WINDOWS\system32\spider.exe
2010-09-07 21:34:33 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-09-07 21:34:32 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-09-07 21:34:32 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-09-07 21:34:32 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-09-07 21:34:32 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-09-07 21:34:32 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-09-07 21:34:32 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-09-07 21:34:32 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-09-07 21:34:31 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-09-07 21:34:30 ----D---- C:\WINDOWS\system32\MsDtc
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-09-07 21:34:30 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-09-07 21:34:29 ----D---- C:\WINDOWS\system32\Com
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-09-07 21:34:29 ----A---- C:\WINDOWS\system32\colbact.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\stclient.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\comuid.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-09-07 21:34:28 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-09-07 21:34:27 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-09-07 21:34:27 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-09-07 21:34:20 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-09-07 21:34:20 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-09-07 21:34:20 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-09-07 21:34:20 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-09-07 21:34:17 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-09-07 21:34:17 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
======List of files/folders modified in the last 1 months======
2010-09-08 07:26:55 ----A---- C:\WINDOWS\system.ini
2010-09-07 21:38:54 ----A---- C:\WINDOWS\win.ini
2010-09-07 21:38:20 ----ASH---- C:\WINDOWS\fonts\desktop.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-13 45648]
R0 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-09-27 75096]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2009-03-08 62848]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-09-11 176640]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-01-13 5672032]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2009-03-08 12160]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2006-08-16 732928]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2006-08-16 260352]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-03-08 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-03-08 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2010-09-07 603904]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-07 152984]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-09-07 360192]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
-----------------EOF-----------------
-------------------------------------