Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

New Hijack this logfiel

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

New Hijack this logfiel

Unread postby billmonahan » January 11th, 2008, 11:52 pm

Symptoms:
IE opens while i am using firefox. It used to display ads, but I loaded a new hosts fiel to prevent the ads from popping up. Now IE opens with 'cannot load ...'

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:32:49 PM, on 1/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\System32\snmp.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Digital Media Reader\shwicon2k.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Print Server\PTP\PSDiagnostic.exe
C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\eFax Messenger 4.3\J2GDllCmd.exe
C:\Program Files\eFax Messenger 4.3\J2GTray.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Julie\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.gateway.com/
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {60D3AAEB-AA39-4AE0-B2F9-E4AF0613A2A3} - C:\PROGRA~1\PERFEC~1\POPUPA~1\ABG_PL~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunKist] C:\Program Files\Digital Media Reader\shwicon2k.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe /autorun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [eFax 4.3] "C:\Program Files\eFax Messenger 4.3\J2GDllCmd.exe" /R
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: eFax 4.3.lnk = C:\Program Files\eFax Messenger 4.3\J2GTray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/ ... acscom.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2768004665
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2597940078
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {7DD62E58-5FA8-11D2-AFB7-00104B64F126} (Sview Control) - http://www.swiftview.com/product/public ... _green.exe
O16 - DPF: {93CEA8A4-6059-4E0B-ADDD-73848153DD5E} (CWebLaunchCtl Object) - http://support.gateway.com/eSupport/sta ... launch.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/check/netset/ ... downls.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/S ... anager.ocx
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - http://livenj01.custhelp.com/7530-b327h ... a/RntX.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe (file missing)

--
End of file - 10402 bytes
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm
Advertisement
Register to Remove

Re: New Hijack this logfiel

Unread postby askey127 » January 15th, 2008, 3:44 pm

billmonahan,
----------------------------------------------------------
Download and Install CCleaner
  • Download CCleaner from here . Choose the Slim version.
  • Double click on ccsetupXXX_slim.exe to start the installation of CCleaner. (XXX is the version number)
  • Click OK
  • Click Next
  • Click I agree
  • Click Next
  • Click Install
  • Once the installation has finished, click Finish
-----------------------------------------------------------
Set Options in CCleaner and run Cleaning Scan.
Open CCleaner if it's not already running.
( Do not use the Registry block to clean anything with this program. It is for experts only and it is risky).
  • Select Cleaner Settings.
    Check Internet Explorer, Windows Explorer, and System so that all items are checked. In the Advanced section, have a check only on Old PreFetch Data.
  • Click on the Options block on the left. Select Advanced.
    Uncheck Only delete files in Windows Temp folders older than 48 hours.
  • Set Cookie Retention.
    Click on the Options block on the left, then choose Cookies.
    Under the Cookies to delete pane, highlight any cookies you would like to retain permanently (those companies or sites with which you regularly visit or do business), and click the right arrow > to move them to the Cookies to keep pane.
  • Run Cleaning Scan. Click on the Cleaner block on the left. Choose the Windows tab.
    Click the Run Cleaner button. This process could take a while. When CCleaner shows how much has been removed, cleaning is finished.
Exit CCleaner by clicking on the X button in the upper right of the CCleaner window.
------------------------------------------------------------
Update your Java.
Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older versions of Java components.
  • Close any programs you may have running, ESPECIALLY your web browser
  • Click Start > Control Panel > Add/Remove Programs.
  • Check any item with Java Runtime Environment, JRE, J2SE, or Java Webstart in the name. Make sure you Uninstall J2RE1.4.2
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove all installed versions of Java.
  • Reboot your computer
Download the latest version of Java Runtime Environment(JRE), and install it to your computer. It is the 4th one down on the page, called Java Runtime Environment (JRE) 6 Update 4
Download it, choose save, and save it to your desktop.Then doubleclick it, and it will install the newest version of Java for you to use.
-----------------------------------------------------
Using Internet Explorer, Please Do an Online Scan with Kaspersky WebScanner.
Go here to run an online scanner from Kaspersky.
  • Click on "Kaspersky Online Scanner"
  • A new smaller window will pop up. Press on "Accept". After reading the contents.
  • Now Kaspersky will update the anti-virus database. Let it run.
  • Click on "Next">"Scan Settings", and make sure the database is set to "extended". And check both the scan options. Then click OK.
  • Then click on "My Computer", and the scan will start.
  • Once finished, save the log to your Desktop as filename KAV.txt
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the license, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license is accepted, reset to 100%.

Please post the contents of KAV.txt in your reply.
If the file KAV.txt appears to be too large to post (more than a couple hundred lines), let me know and I will give you instructions that will convert it to a smaller file.

askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: New Hijack this logfiel

Unread postby billmonahan » January 16th, 2008, 9:50 pm

21k lines...yea i think we have to compress it
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm

Re: New Hijack this logfiel

Unread postby askey127 » January 17th, 2008, 8:06 am

billmonahan,
-----------------------------------------------------------
Remove Skipped Items From Kaspersky Log
Download Fixedit and save it to your desktop.
Double click Fixedit.exe, use File, Open and open C:\KAV.txt.

After the file loads, switch to the tab labeled "Make Global Changes"
In the upper RED block, click the button labeled "Contains the Test Key anywhere"
In the middle box labeled "Test Key Text", copy/paste or type this exactly
Object is locked skipped
In the lower GREEN block, click the button labeled "Delete the entire line".
Then Hit the OK button.

Switch back to the tab labeled "Show/Edit Current Text"
Select the entire modified file (Ctrl-A), Copy (Ctrl-C) and Paste (Ctrl-V) the contents of the file in your reply.
Use Edit, SaveAs and save to your Desktop as KAV2.txt
askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: New Hijack this logfiel

Unread postby billmonahan » January 19th, 2008, 10:11 am

File size is still 21k lines.

Most are a variations of:

1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J02980.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03045.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03048.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03281.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03282.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03284.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03285.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03287.CTA ok scanned
1/16/2008 9:51:41 AM File: C:\Bundle\PictureIt\PIP\PI9\6T.ITS//G3J03288.CTA ok scanned


OR

1/16/2008 9:49:53 AM File: C:\System Volume Information\_restore{8D8A52C0-A17A-4EA1-A9EB-0CDDF315434D}\RP1075\A0130432.msi//klssrmv.dll ok scanned
1/16/2008 9:49:53 AM File: C:\System Volume Information\_restore{8D8A52C0-A17A-4EA1-A9EB-0CDDF315434D}\RP1075\A0130432.msi//kingsoftspy06.ini ok scanned
1/16/2008 9:49:53 AM File: C:\System Volume Information\_restore{8D8A52C0-A17A-4EA1-A9EB-0CDDF315434D}\RP1075\A0130432.msi//kl1.ini ok scanned
1/16/2008 9:49:53 AM File: C:\System Volume Information\_restore{8D8A52C0-A17A-4EA1-A9EB-0CDDF315434D}\RP1075\A0130432.msi//kav_fsee.ini ok scanned
1/16/2008 9:49:53 AM File: C:\System Volume Information\_restore{8D8A52C0-A17A-4EA1-A9EB-0CDDF315434D}\RP1075\A0130432.msi//kingsoftis06.ini ok scanned
1

OR

1/16/2008 9:50:13 AM File: C:\NAV05ENG.exe/Support\Help\External\context.chm//#IVB ok scanned
1/16/2008 9:50:13 AM File: C:\NAV05ENG.exe/Support\Help\External\context.chm//#STRINGS ok scanned
1/16/2008 9:50:13 AM File: C:\NAV05ENG.exe/Support\Help\External\context.chm//#SYSTEM ok scanned
1/16/2008 9:50:13 AM File: C:\NAV05ENG.exe/Support\Help\External\context.chm//#TOPICS ok scanned
1/16/2008 9:50:13 AM File: C:\NAV05ENG.exe/Support\Help\External\context.chm//#URLSTR ok scanned
1/16/2008 9:50:13 AM File: C:\NAV05ENG.exe/Support\Help\External\context.chm//#URLTBL ok scanned
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm

Re: New Hijack this logfiel

Unread postby billmonahan » January 19th, 2008, 10:17 am

THIS IS THE FILE WITH THOSE LINES REMOVED


Scan My Computer
----------------
Scanned: 671201
Detected: 6
Untreated: 0
Start time: 1/16/2008 9:15:13 AM
Duration: 08:25:07
Finish time: 1/16/2008 5:40:20 PM
Signatures published: 1/16/2008 5:54:26 AM


Detected
--------
Status Object
------ ------
deleted: Trojan program Trojan.Java.ClassLoader.k File: C:\Documents and Settings\Owner\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-1e02e398-2200318f.zip/Beyond.class
deleted: Trojan program Trojan.Java.ClassLoader.k File: C:\Documents and Settings\Owner\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-51b26348-19887863.zip/Beyond.class
deleted: Trojan program Trojan.Java.ClassLoader.k File: C:\Documents and Settings\Owner\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-78ee691-51de339a.zip/Beyond.class
deleted: Trojan program Trojan.Java.ClassLoader.k File: C:\Documents and Settings\Owner\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-79cf335f-3a224a09.zip/Beyond.class
deleted: adware not-a-virus:AdWare.Win32.Trymedia.b File: C:\Documents and Settings\Owner\Desktop\Gaming\AgeofSail2Setup-dm.exe


Events
------
Time Name Status Reason
---- ---- ------ ------
1/16/2008 9:17:59 AM Running module: smss.exe\smss.exe ok iChecker
1/16/2008 9:17:59 AM File: C:\WINDOWS\System32\smss.exe ok iSwift
1/16/2008 9:17:59 AM Running module: smss.exe\ntdll.dll ok iChecker
1/16/2008 9:17:59 AM File: C:\WINDOWS\system32\ntdll.dll ok iSwift
1/16/2008 9:17:59 AM Running module: csrss.exe\csrss.exe ok iChecker
1/16/2008 9:17:59 AM File: C:\WINDOWS\system32\csrss.exe ok iSwift
1/16/2008 9:17:59 AM Running module: csrss.exe\ntdll.dll ok iChecker
1/16/2008 9:17:59 AM Running module: csrss.exe\CSRSRV.dll ok iChecker
1/16/2008 9:17:59 AM File: C:\WINDOWS\system32\CSRSRV.dll ok iSwift
1/16/2008 9:17:59 AM Running module: csrss.exe\basesrv.dll ok iChecker
1/16/2008 9:18:00 AM File: C:\WINDOWS\system32\basesrv.dll ok scanned
1/16/2008 9:18:01 AM Running module: csrss.exe\winsrv.dll ok scanned
1/16/2008 9:18:01 AM File: C:\WINDOWS\system32\winsrv.dll ok scanned
1/16/2008 9:18:01 AM Running module: csrss.exe\GDI32.dll ok scanned
1/16/2008 9:18:01 AM File: C:\WINDOWS\system32\GDI32.dll ok scanned
1/16/2008 9:18:02 AM Running module: csrss.exe\KERNEL32.dll ok scanned
1/16/2008 9:18:02 AM File: C:\WINDOWS\system32\KERNEL32.dll ok scanned
1/16/2008 9:18:02 AM Running module: csrss.exe\USER32.dll ok scanned
1/16/2008 9:18:03 AM File: C:\WINDOWS\system32\USER32.dll ok scanned
1/16/2008 9:18:04 AM Running module: csrss.exe\sxs.dll ok scanned
1/16/2008 9:18:04 AM File: C:\WINDOWS\system32\sxs.dll ok scanned
1/16/2008 9:18:04 AM Running module: csrss.exe\ADVAPI32.dll ok scanned
1/16/2008 9:18:05 AM File: C:\WINDOWS\system32\ADVAPI32.dll ok scanned
1/16/2008 9:18:05 AM Running module: csrss.exe\RPCRT4.dll ok scanned
1/16/2008 9:18:05 AM File: C:\WINDOWS\system32\RPCRT4.dll ok scanned
1/16/2008 9:18:05 AM Running module: winlogon.exe\winlogon.exe ok scanned
1/16/2008 9:18:05 AM File: C:\WINDOWS\system32\winlogon.exe ok scanned
1/16/2008 9:18:05 AM Running module: winlogon.exe\ntdll.dll ok iChecker
1/16/2008 9:18:05 AM Running module: winlogon.exe\kernel32.dll ok iChecker
1/16/2008 9:18:05 AM File: C:\WINDOWS\system32\kernel32.dll ok iSwift
1/16/2008 9:18:05 AM Running module: winlogon.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:18:05 AM Running module: winlogon.exe\RPCRT4.dll ok iChecker
1/16/2008 9:18:06 AM Running module: winlogon.exe\AUTHZ.dll ok scanned
1/16/2008 9:18:06 AM File: C:\WINDOWS\system32\AUTHZ.dll ok scanned
1/16/2008 9:18:06 AM Running module: winlogon.exe\msvcrt.dll ok scanned
1/16/2008 9:18:06 AM File: C:\WINDOWS\system32\msvcrt.dll ok scanned
1/16/2008 9:18:07 AM Running module: winlogon.exe\CRYPT32.dll ok scanned
1/16/2008 9:18:07 AM File: C:\WINDOWS\system32\CRYPT32.dll ok scanned
1/16/2008 9:18:07 AM Running module: winlogon.exe\USER32.dll ok iChecker
1/16/2008 9:18:07 AM Running module: winlogon.exe\GDI32.dll ok iChecker
1/16/2008 9:18:07 AM Running module: winlogon.exe\MSASN1.dll ok scanned
1/16/2008 9:18:07 AM File: C:\WINDOWS\system32\MSASN1.dll ok scanned
1/16/2008 9:18:07 AM Running module: winlogon.exe\NDdeApi.dll ok scanned
1/16/2008 9:18:07 AM File: C:\WINDOWS\system32\NDdeApi.dll ok scanned
1/16/2008 9:18:07 AM Running module: winlogon.exe\PROFMAP.dll ok scanned
1/16/2008 9:18:07 AM File: C:\WINDOWS\system32\PROFMAP.dll ok scanned
1/16/2008 9:18:08 AM Running module: winlogon.exe\NETAPI32.dll ok scanned
1/16/2008 9:18:08 AM File: C:\WINDOWS\system32\NETAPI32.dll ok scanned
1/16/2008 9:18:09 AM Running module: winlogon.exe\USERENV.dll ok scanned
1/16/2008 9:18:09 AM File: C:\WINDOWS\system32\USERENV.dll ok scanned
1/16/2008 9:18:09 AM Running module: winlogon.exe\PSAPI.DLL ok scanned
1/16/2008 9:18:09 AM File: C:\WINDOWS\system32\PSAPI.DLL ok scanned
1/16/2008 9:18:10 AM Running module: winlogon.exe\REGAPI.dll ok scanned
1/16/2008 9:18:10 AM File: C:\WINDOWS\system32\REGAPI.dll ok scanned
1/16/2008 9:18:10 AM Running module: winlogon.exe\Secur32.dll ok scanned
1/16/2008 9:18:10 AM File: C:\WINDOWS\system32\Secur32.dll ok scanned
1/16/2008 9:18:10 AM Running module: winlogon.exe\SETUPAPI.dll ok scanned
1/16/2008 9:18:12 AM File: C:\WINDOWS\system32\SETUPAPI.dll ok scanned
1/16/2008 9:18:12 AM Running module: winlogon.exe\VERSION.dll ok scanned
1/16/2008 9:18:12 AM File: C:\WINDOWS\system32\VERSION.dll ok scanned
1/16/2008 9:18:13 AM Running module: winlogon.exe\WINSTA.dll ok scanned
1/16/2008 9:18:13 AM File: C:\WINDOWS\system32\WINSTA.dll ok scanned
1/16/2008 9:18:13 AM Running module: winlogon.exe\WINTRUST.dll ok scanned
1/16/2008 9:18:13 AM File: C:\WINDOWS\system32\WINTRUST.dll ok scanned
1/16/2008 9:18:13 AM Running module: winlogon.exe\IMAGEHLP.dll ok scanned
1/16/2008 9:18:13 AM File: C:\WINDOWS\system32\IMAGEHLP.dll ok scanned
1/16/2008 9:18:13 AM Running module: winlogon.exe\WS2_32.dll ok scanned
1/16/2008 9:18:13 AM File: C:\WINDOWS\system32\WS2_32.dll ok scanned
1/16/2008 9:18:14 AM Running module: winlogon.exe\WS2HELP.dll ok scanned
1/16/2008 9:18:14 AM File: C:\WINDOWS\system32\WS2HELP.dll ok scanned
1/16/2008 9:18:14 AM Running module: winlogon.exe\IMM32.DLL ok scanned
1/16/2008 9:18:14 AM File: C:\WINDOWS\system32\IMM32.DLL ok scanned
1/16/2008 9:18:14 AM Running module: winlogon.exe\MSGINA.dll ok scanned
1/16/2008 9:18:16 AM File: C:\WINDOWS\system32\MSGINA.dll ok scanned
1/16/2008 9:18:22 AM Running module: winlogon.exe\SHELL32.dll ok scanned
1/16/2008 9:18:41 AM File: C:\WINDOWS\system32\SHELL32.dll ok scanned
1/16/2008 9:18:41 AM Running module: winlogon.exe\SHLWAPI.dll ok scanned
1/16/2008 9:18:41 AM File: C:\WINDOWS\system32\SHLWAPI.dll ok scanned
1/16/2008 9:18:42 AM Running module: winlogon.exe\COMCTL32.dll ok scanned
1/16/2008 9:18:46 AM File: C:\WINDOWS\system32\COMCTL32.dll ok scanned
1/16/2008 9:18:46 AM Running module: winlogon.exe\ODBC32.dll ok scanned
1/16/2008 9:18:46 AM File: C:\WINDOWS\system32\ODBC32.dll ok iChecker
1/16/2008 9:18:47 AM Running module: winlogon.exe\comdlg32.dll ok scanned
1/16/2008 9:18:47 AM File: C:\WINDOWS\system32\comdlg32.dll ok scanned
1/16/2008 9:18:47 AM Running module: winlogon.exe\comctl32.dll ok scanned
1/16/2008 9:18:50 AM File: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll ok scanned
1/16/2008 9:18:50 AM Running module: winlogon.exe\odbcint.dll ok scanned
1/16/2008 9:18:50 AM File: C:\WINDOWS\system32\odbcint.dll ok iChecker
1/16/2008 9:18:50 AM Running module: winlogon.exe\SHSVCS.dll ok scanned
1/16/2008 9:18:50 AM File: C:\WINDOWS\system32\SHSVCS.dll ok scanned
1/16/2008 9:18:50 AM Running module: winlogon.exe\sfc.dll ok scanned
1/16/2008 9:18:50 AM File: C:\WINDOWS\system32\sfc.dll ok scanned
1/16/2008 9:18:50 AM Running module: winlogon.exe\sfc_os.dll ok scanned
1/16/2008 9:18:50 AM File: C:\WINDOWS\system32\sfc_os.dll ok scanned
1/16/2008 9:18:52 AM Running module: winlogon.exe\ole32.dll ok scanned
1/16/2008 9:18:52 AM File: C:\WINDOWS\system32\ole32.dll ok scanned
1/16/2008 9:18:52 AM Running module: winlogon.exe\Apphelp.dll ok scanned
1/16/2008 9:18:52 AM File: C:\WINDOWS\system32\Apphelp.dll ok scanned
1/16/2008 9:18:52 AM Running module: winlogon.exe\msctfime.ime ok scanned
1/16/2008 9:18:53 AM File: C:\WINDOWS\system32\msctfime.ime ok scanned
1/16/2008 9:18:53 AM Running module: winlogon.exe\WINSCARD.DLL ok scanned
1/16/2008 9:18:53 AM File: C:\WINDOWS\system32\WINSCARD.DLL ok scanned
1/16/2008 9:18:53 AM Running module: winlogon.exe\WTSAPI32.dll ok scanned
1/16/2008 9:18:53 AM File: C:\WINDOWS\system32\WTSAPI32.dll ok scanned
1/16/2008 9:18:53 AM Running module: winlogon.exe\sxs.dll ok iChecker
1/16/2008 9:18:53 AM Running module: winlogon.exe\uxtheme.dll ok scanned
1/16/2008 9:18:53 AM File: C:\WINDOWS\system32\uxtheme.dll ok scanned
1/16/2008 9:18:53 AM Running module: winlogon.exe\WINMM.dll ok scanned
1/16/2008 9:18:53 AM File: C:\WINDOWS\system32\WINMM.dll ok scanned
1/16/2008 9:18:53 AM Running module: winlogon.exe\rsaenh.dll ok scanned
1/16/2008 9:18:54 AM File: C:\WINDOWS\system32\rsaenh.dll ok scanned
1/16/2008 9:18:54 AM Running module: winlogon.exe\cscdll.dll ok scanned
1/16/2008 9:18:54 AM File: C:\WINDOWS\system32\cscdll.dll ok scanned
1/16/2008 9:18:54 AM Running module: winlogon.exe\WlNotify.dll ok scanned
1/16/2008 9:18:54 AM File: C:\WINDOWS\system32\WlNotify.dll ok scanned
1/16/2008 9:18:54 AM Running module: winlogon.exe\WINSPOOL.DRV ok scanned
1/16/2008 9:18:54 AM File: C:\WINDOWS\system32\WINSPOOL.DRV ok scanned
1/16/2008 9:18:54 AM Running module: winlogon.exe\MPR.dll ok scanned
1/16/2008 9:18:54 AM File: C:\WINDOWS\system32\MPR.dll ok scanned
1/16/2008 9:18:54 AM Running module: winlogon.exe\WgaLogon.dll ok scanned
1/16/2008 9:18:54 AM File: C:\WINDOWS\system32\WgaLogon.dll ok scanned
1/16/2008 9:18:54 AM Running module: winlogon.exe\OLEAUT32.dll ok scanned
1/16/2008 9:18:54 AM File: C:\WINDOWS\system32\OLEAUT32.dll ok scanned
1/16/2008 9:18:55 AM Running module: winlogon.exe\NTMARTA.DLL ok scanned
1/16/2008 9:18:55 AM File: C:\WINDOWS\system32\NTMARTA.DLL ok scanned
1/16/2008 9:18:55 AM Running module: winlogon.exe\WLDAP32.dll ok scanned
1/16/2008 9:18:55 AM File: C:\WINDOWS\system32\WLDAP32.dll ok scanned
1/16/2008 9:18:55 AM Running module: winlogon.exe\SAMLIB.dll ok scanned
1/16/2008 9:18:55 AM File: C:\WINDOWS\system32\SAMLIB.dll ok scanned
1/16/2008 9:18:56 AM Running module: winlogon.exe\CLBCATQ.DLL ok scanned
1/16/2008 9:18:56 AM File: C:\WINDOWS\system32\CLBCATQ.DLL ok scanned
1/16/2008 9:18:56 AM Running module: winlogon.exe\COMRes.dll ok scanned
1/16/2008 9:18:57 AM File: C:\WINDOWS\system32\COMRes.dll ok scanned
1/16/2008 9:18:57 AM Running module: winlogon.exe\msv1_0.dll ok scanned
1/16/2008 9:18:57 AM File: C:\WINDOWS\system32\msv1_0.dll ok scanned
1/16/2008 9:18:58 AM Running module: winlogon.exe\iphlpapi.dll ok scanned
1/16/2008 9:18:58 AM File: C:\WINDOWS\system32\iphlpapi.dll ok scanned
1/16/2008 9:18:58 AM Running module: winlogon.exe\cscui.dll ok scanned
1/16/2008 9:18:59 AM File: C:\WINDOWS\system32\cscui.dll ok scanned
1/16/2008 9:18:59 AM Running module: winlogon.exe\xpsp2res.dll ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll archive EmbeddedHTML
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0001.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0002.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0003.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0004.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0005.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0006.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0007.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0008.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0009.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0010.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0011.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll//data0012.html ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\system32\xpsp2res.dll ok scanned
1/16/2008 9:19:03 AM Running module: winlogon.exe\drprov.dll ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\System32\drprov.dll ok scanned
1/16/2008 9:19:03 AM Running module: winlogon.exe\ntlanman.dll ok scanned
1/16/2008 9:19:03 AM File: C:\WINDOWS\System32\ntlanman.dll ok scanned
1/16/2008 9:19:04 AM Running module: winlogon.exe\NETUI0.dll ok scanned
1/16/2008 9:19:04 AM File: C:\WINDOWS\System32\NETUI0.dll ok scanned
1/16/2008 9:19:04 AM Running module: winlogon.exe\NETUI1.dll ok scanned
1/16/2008 9:19:04 AM File: C:\WINDOWS\System32\NETUI1.dll ok scanned
1/16/2008 9:19:04 AM Running module: winlogon.exe\NETRAP.dll ok scanned
1/16/2008 9:19:04 AM File: C:\WINDOWS\System32\NETRAP.dll ok scanned
1/16/2008 9:19:04 AM Running module: winlogon.exe\davclnt.dll ok scanned
1/16/2008 9:19:04 AM File: C:\WINDOWS\System32\davclnt.dll ok scanned
1/16/2008 9:19:04 AM Running module: winlogon.exe\MPRUI.dll ok scanned
1/16/2008 9:19:04 AM File: C:\WINDOWS\system32\MPRUI.dll ok scanned
1/16/2008 9:19:04 AM Running module: winlogon.exe\NETUI2.dll ok scanned
1/16/2008 9:19:04 AM File: C:\WINDOWS\system32\NETUI2.dll ok scanned
1/16/2008 9:19:05 AM Running module: winlogon.exe\netmsg.dll ok scanned
1/16/2008 9:19:05 AM File: C:\WINDOWS\system32\netmsg.dll ok scanned
1/16/2008 9:19:05 AM Running module: winlogon.exe\wdmaud.drv ok scanned
1/16/2008 9:19:05 AM File: C:\WINDOWS\system32\wdmaud.drv ok scanned
1/16/2008 9:19:05 AM Running module: winlogon.exe\msacm32.drv ok scanned
1/16/2008 9:19:05 AM File: C:\WINDOWS\system32\msacm32.drv ok scanned
1/16/2008 9:19:05 AM Running module: winlogon.exe\MSACM32.dll ok scanned
1/16/2008 9:19:05 AM File: C:\WINDOWS\system32\MSACM32.dll ok scanned
1/16/2008 9:19:05 AM Running module: winlogon.exe\midimap.dll ok scanned
1/16/2008 9:19:05 AM File: C:\WINDOWS\system32\midimap.dll ok scanned
1/16/2008 9:19:05 AM Running module: services.exe\services.exe ok scanned
1/16/2008 9:19:05 AM File: C:\WINDOWS\system32\services.exe ok scanned
1/16/2008 9:19:05 AM Running module: services.exe\ntdll.dll ok iChecker
1/16/2008 9:19:05 AM Running module: services.exe\kernel32.dll ok iChecker
1/16/2008 9:19:05 AM Running module: services.exe\msvcrt.dll ok iChecker
1/16/2008 9:19:05 AM Running module: services.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:19:05 AM Running module: services.exe\RPCRT4.dll ok iChecker
1/16/2008 9:19:05 AM Running module: services.exe\USER32.dll ok iChecker
1/16/2008 9:19:05 AM Running module: services.exe\GDI32.dll ok iChecker
1/16/2008 9:19:05 AM Running module: services.exe\USERENV.dll ok iChecker
1/16/2008 9:19:06 AM Running module: services.exe\SCESRV.dll ok scanned
1/16/2008 9:19:06 AM File: C:\WINDOWS\system32\SCESRV.dll ok scanned
1/16/2008 9:19:06 AM Running module: services.exe\AUTHZ.dll ok iChecker
1/16/2008 9:19:06 AM Running module: services.exe\umpnpmgr.dll ok scanned
1/16/2008 9:19:06 AM File: C:\WINDOWS\system32\umpnpmgr.dll ok scanned
1/16/2008 9:19:06 AM Running module: services.exe\WINSTA.dll ok iChecker
1/16/2008 9:19:06 AM Running module: services.exe\NETAPI32.dll ok iChecker
1/16/2008 9:19:06 AM Running module: services.exe\NCObjAPI.DLL ok scanned
1/16/2008 9:19:06 AM File: C:\WINDOWS\system32\NCObjAPI.DLL ok scanned
1/16/2008 9:19:07 AM Running module: services.exe\MSVCP60.dll ok scanned
1/16/2008 9:19:07 AM File: C:\WINDOWS\system32\MSVCP60.dll ok iChecker
1/16/2008 9:19:07 AM Running module: services.exe\ShimEng.dll ok scanned
1/16/2008 9:19:07 AM File: C:\WINDOWS\system32\ShimEng.dll ok scanned
1/16/2008 9:19:07 AM Running module: services.exe\AcAdProc.dll ok scanned
1/16/2008 9:19:07 AM File: C:\WINDOWS\AppPatch\AcAdProc.dll ok scanned
1/16/2008 9:19:07 AM Running module: services.exe\IMM32.DLL ok iChecker
1/16/2008 9:19:07 AM Running module: services.exe\secur32.dll ok iChecker
1/16/2008 9:19:07 AM File: C:\WINDOWS\system32\secur32.dll ok iSwift
1/16/2008 9:19:07 AM Running module: services.exe\Apphelp.dll ok iChecker
1/16/2008 9:19:07 AM Running module: services.exe\VERSION.dll ok iChecker
1/16/2008 9:19:07 AM Running module: services.exe\eventlog.dll ok scanned
1/16/2008 9:19:07 AM File: C:\WINDOWS\system32\eventlog.dll ok scanned
1/16/2008 9:19:07 AM Running module: services.exe\WS2_32.dll ok iChecker
1/16/2008 9:19:07 AM Running module: services.exe\WS2HELP.dll ok iChecker
1/16/2008 9:19:07 AM Running module: services.exe\PSAPI.DLL ok iChecker
1/16/2008 9:19:07 AM Running module: services.exe\wtsapi32.dll ok iChecker
1/16/2008 9:19:07 AM File: C:\WINDOWS\system32\wtsapi32.dll ok iSwift
1/16/2008 9:19:07 AM Running module: lsass.exe\lsass.exe ok scanned
1/16/2008 9:19:07 AM File: C:\WINDOWS\system32\lsass.exe ok scanned
1/16/2008 9:19:07 AM Running module: lsass.exe\ntdll.dll ok iChecker
1/16/2008 9:19:07 AM Running module: lsass.exe\kernel32.dll ok iChecker
1/16/2008 9:19:07 AM Running module: lsass.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:19:07 AM Running module: lsass.exe\RPCRT4.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\LSASRV.dll ok scanned
1/16/2008 9:19:08 AM File: C:\WINDOWS\system32\LSASRV.dll ok scanned
1/16/2008 9:19:08 AM Running module: lsass.exe\MPR.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\USER32.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\GDI32.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\MSASN1.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\msvcrt.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\NETAPI32.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\NTDSAPI.dll ok scanned
1/16/2008 9:19:08 AM File: C:\WINDOWS\system32\NTDSAPI.dll ok scanned
1/16/2008 9:19:08 AM Running module: lsass.exe\DNSAPI.dll ok scanned
1/16/2008 9:19:08 AM File: C:\WINDOWS\system32\DNSAPI.dll ok scanned
1/16/2008 9:19:08 AM Running module: lsass.exe\WS2_32.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\WS2HELP.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\WLDAP32.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\Secur32.dll ok iChecker
1/16/2008 9:19:08 AM Running module: lsass.exe\SAMLIB.dll ok iChecker
1/16/2008 9:19:09 AM Running module: lsass.exe\SAMSRV.dll ok scanned
1/16/2008 9:19:09 AM File: C:\WINDOWS\system32\SAMSRV.dll ok scanned
1/16/2008 9:19:09 AM Running module: lsass.exe\cryptdll.dll ok scanned
1/16/2008 9:19:09 AM File: C:\WINDOWS\system32\cryptdll.dll ok scanned
1/16/2008 9:19:09 AM Running module: lsass.exe\ShimEng.dll ok iChecker
1/16/2008 9:19:09 AM Running module: lsass.exe\AcGenral.DLL ok scanned
1/16/2008 9:19:10 AM File: C:\WINDOWS\AppPatch\AcGenral.DLL ok scanned
1/16/2008 9:19:10 AM Running module: lsass.exe\WINMM.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\ole32.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\MSACM32.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\VERSION.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\SHELL32.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\USERENV.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\UxTheme.dll ok iChecker
1/16/2008 9:19:10 AM File: C:\WINDOWS\system32\UxTheme.dll ok iSwift
1/16/2008 9:19:10 AM Running module: lsass.exe\IMM32.DLL ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\comctl32.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\comctl32.dll ok iChecker
1/16/2008 9:19:10 AM File: C:\WINDOWS\system32\comctl32.dll ok iSwift
1/16/2008 9:19:10 AM Running module: lsass.exe\msprivs.dll ok scanned
1/16/2008 9:19:10 AM File: C:\WINDOWS\system32\msprivs.dll ok scanned
1/16/2008 9:19:10 AM Running module: lsass.exe\kerberos.dll ok scanned
1/16/2008 9:19:10 AM File: C:\WINDOWS\system32\kerberos.dll ok scanned
1/16/2008 9:19:10 AM Running module: lsass.exe\msv1_0.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\iphlpapi.dll ok iChecker
1/16/2008 9:19:10 AM Running module: lsass.exe\netlogon.dll ok scanned
1/16/2008 9:19:10 AM File: C:\WINDOWS\system32\netlogon.dll ok scanned
1/16/2008 9:19:11 AM Running module: lsass.exe\w32time.dll ok scanned
1/16/2008 9:19:11 AM File: C:\WINDOWS\system32\w32time.dll ok scanned
1/16/2008 9:19:11 AM Running module: lsass.exe\MSVCP60.dll ok iChecker
1/16/2008 9:19:11 AM Running module: lsass.exe\schannel.dll ok scanned
1/16/2008 9:19:11 AM File: C:\WINDOWS\system32\schannel.dll ok scanned
1/16/2008 9:19:11 AM Running module: lsass.exe\CRYPT32.dll ok iChecker
1/16/2008 9:19:11 AM Running module: lsass.exe\wdigest.dll ok scanned
1/16/2008 9:19:11 AM File: C:\WINDOWS\system32\wdigest.dll ok scanned
1/16/2008 9:19:11 AM Running module: lsass.exe\rsaenh.dll ok iChecker
1/16/2008 9:19:11 AM Running module: lsass.exe\setupapi.dll ok iChecker
1/16/2008 9:19:11 AM File: C:\WINDOWS\system32\setupapi.dll ok iSwift
1/16/2008 9:19:11 AM Running module: lsass.exe\scecli.dll ok scanned
1/16/2008 9:19:11 AM File: C:\WINDOWS\system32\scecli.dll ok scanned
1/16/2008 9:19:11 AM Running module: lsass.exe\ipsecsvc.dll ok scanned
1/16/2008 9:19:11 AM File: C:\WINDOWS\system32\ipsecsvc.dll ok scanned
1/16/2008 9:19:11 AM Running module: lsass.exe\AUTHZ.dll ok iChecker
1/16/2008 9:19:11 AM Running module: lsass.exe\oakley.DLL ok scanned
1/16/2008 9:19:11 AM File: C:\WINDOWS\system32\oakley.DLL ok scanned
1/16/2008 9:19:12 AM Running module: lsass.exe\WINIPSEC.DLL ok scanned
1/16/2008 9:19:12 AM File: C:\WINDOWS\system32\WINIPSEC.DLL ok scanned
1/16/2008 9:19:12 AM Running module: lsass.exe\mswsock.dll ok scanned
1/16/2008 9:19:12 AM File: C:\WINDOWS\system32\mswsock.dll ok scanned
1/16/2008 9:19:12 AM Running module: lsass.exe\hnetcfg.dll ok scanned
1/16/2008 9:19:12 AM File: C:\WINDOWS\system32\hnetcfg.dll ok scanned
1/16/2008 9:19:12 AM Running module: lsass.exe\wshtcpip.dll ok scanned
1/16/2008 9:19:12 AM File: C:\WINDOWS\System32\wshtcpip.dll ok scanned
1/16/2008 9:19:12 AM Running module: lsass.exe\pstorsvc.dll ok scanned
1/16/2008 9:19:12 AM File: C:\WINDOWS\system32\pstorsvc.dll ok scanned
1/16/2008 9:19:12 AM Running module: lsass.exe\psbase.dll ok scanned
1/16/2008 9:19:12 AM File: C:\WINDOWS\system32\psbase.dll ok scanned
1/16/2008 9:19:13 AM Running module: lsass.exe\dssenh.dll ok scanned
1/16/2008 9:19:13 AM File: C:\WINDOWS\system32\dssenh.dll ok scanned
1/16/2008 9:19:13 AM Running module: svchost.exe\svchost.exe ok scanned
1/16/2008 9:19:13 AM File: C:\WINDOWS\system32\svchost.exe ok scanned
1/16/2008 9:19:13 AM Running module: svchost.exe\ntdll.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\kernel32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\RPCRT4.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\ShimEng.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\AcGenral.DLL ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\USER32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\GDI32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\WINMM.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\ole32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\msvcrt.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\MSACM32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\VERSION.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\SHELL32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\USERENV.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\UxTheme.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\IMM32.DLL ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\WLDAP32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\SAMLIB.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\rpcss.dll ok scanned
1/16/2008 9:19:13 AM File: c:\windows\system32\rpcss.dll ok scanned
1/16/2008 9:19:13 AM Running module: svchost.exe\Secur32.dll ok iChecker
1/16/2008 9:19:13 AM File: c:\windows\system32\Secur32.dll ok iSwift
1/16/2008 9:19:13 AM Running module: svchost.exe\WS2_32.dll ok iChecker
1/16/2008 9:19:13 AM File: c:\windows\system32\WS2_32.dll ok iSwift
1/16/2008 9:19:13 AM Running module: svchost.exe\WS2HELP.dll ok iChecker
1/16/2008 9:19:13 AM File: c:\windows\system32\WS2HELP.dll ok iSwift
1/16/2008 9:19:13 AM Running module: svchost.exe\xpsp2res.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\COMRes.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\Apphelp.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\WTSAPI32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\WINSTA.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\NETAPI32.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\msv1_0.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\iphlpapi.dll ok iChecker
1/16/2008 9:19:13 AM Running module: svchost.exe\termsrv.dll ok scanned
1/16/2008 9:19:13 AM File: c:\windows\system32\termsrv.dll ok scanned
1/16/2008 9:19:14 AM Running module: svchost.exe\ICAAPI.dll ok scanned
1/16/2008 9:19:14 AM File: c:\windows\system32\ICAAPI.dll ok scanned
1/16/2008 9:19:14 AM Running module: svchost.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:19:14 AM File: c:\windows\system32\SETUPAPI.dll ok iSwift
1/16/2008 9:19:14 AM Running module: svchost.exe\WINTRUST.dll ok iChecker
1/16/2008 9:19:14 AM Running module: svchost.exe\CRYPT32.dll ok iChecker
1/16/2008 9:19:14 AM Running module: svchost.exe\MSASN1.dll ok iChecker
1/16/2008 9:19:14 AM Running module: svchost.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:19:14 AM Running module: svchost.exe\AUTHZ.dll ok iChecker
1/16/2008 9:19:14 AM File: c:\windows\system32\AUTHZ.dll ok iSwift
1/16/2008 9:19:14 AM Running module: svchost.exe\mstlsapi.dll ok scanned
1/16/2008 9:19:14 AM File: c:\windows\system32\mstlsapi.dll ok scanned
1/16/2008 9:19:14 AM Running module: svchost.exe\ACTIVEDS.dll ok scanned
1/16/2008 9:19:14 AM File: c:\windows\system32\ACTIVEDS.dll ok scanned
1/16/2008 9:19:15 AM Running module: svchost.exe\adsldpc.dll ok scanned
1/16/2008 9:19:15 AM File: c:\windows\system32\adsldpc.dll ok scanned
1/16/2008 9:19:15 AM Running module: svchost.exe\ATL.DLL ok scanned
1/16/2008 9:19:15 AM File: c:\windows\system32\ATL.DLL ok scanned
1/16/2008 9:19:15 AM Running module: svchost.exe\REGAPI.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\rsaenh.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\svchost.exe ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\ntdll.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\kernel32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\RPCRT4.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\ShimEng.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\AcGenral.DLL ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\USER32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\GDI32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\WINMM.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\ole32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\msvcrt.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\MSACM32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\VERSION.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\SHELL32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\USERENV.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\UxTheme.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\IMM32.DLL ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\rpcss.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\Secur32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\WS2_32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\WS2HELP.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\xpsp2res.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\rsaenh.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\mswsock.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\hnetcfg.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\wshtcpip.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\DNSAPI.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\iphlpapi.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\winrnr.dll ok scanned
1/16/2008 9:19:15 AM File: C:\WINDOWS\System32\winrnr.dll ok scanned
1/16/2008 9:19:15 AM Running module: svchost.exe\WLDAP32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\rasadhlp.dll ok scanned
1/16/2008 9:19:15 AM File: C:\WINDOWS\system32\rasadhlp.dll ok scanned
1/16/2008 9:19:15 AM Running module: svchost.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:19:15 AM Running module: svchost.exe\COMRes.dll ok iChecker
1/16/2008 9:19:15 AM Running module: MsMpEng.exe\MsMpEng.exe ok scanned
1/16/2008 9:19:15 AM File: C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe ok scanned
1/16/2008 9:19:15 AM Running module: MsMpEng.exe\ntdll.dll ok iChecker
1/16/2008 9:19:15 AM Running module: MsMpEng.exe\kernel32.dll ok iChecker
1/16/2008 9:19:15 AM Running module: MsMpEng.exe\msvcrt.dll ok iChecker
1/16/2008 9:19:15 AM Running module: MsMpEng.exe\MpSvc.dll ok scanned
1/16/2008 9:19:15 AM File: C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpSvc.dll ok scanned
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\RPCRT4.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\VERSION.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\CRYPT32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\USER32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\GDI32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\MSASN1.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\WINTRUST.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\MpClient.dll ok scanned
1/16/2008 9:19:16 AM File: C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MpClient.dll ok scanned
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\SHELL32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\ole32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\USERENV.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\IMM32.DLL ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\comctl32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\comctl32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\rsaenh.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\xpsp2res.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\uxtheme.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\secur32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\netapi32.dll ok iChecker
1/16/2008 9:19:16 AM File: C:\WINDOWS\system32\netapi32.dll ok iSwift
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\mpengine.dll ok scanned
1/16/2008 9:19:16 AM File: C:\Documents and Settings\All Users\Application Data\Microsoft\OneCare Protection\Definition Updates\{E002DF32-B825-45FC-AA71-4BDD7FAB8BB6}\mpengine.dll ok scanned
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\WS2_32.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\WS2HELP.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\PSAPI.DLL ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\iphlpapi.dll ok iChecker
1/16/2008 9:19:16 AM Running module: MsMpEng.exe\mpavrtm.dll ok scanned
1/16/2008 9:19:16 AM File: C:\Program Files\Microsoft Windows OneCare Live\Antivirus\mpavrtm.dll ok scanned
1/16/2008 9:19:17 AM Running module: MsMpEng.exe\FLTLIB.DLL ok scanned
1/16/2008 9:19:17 AM File: C:\WINDOWS\system32\FLTLIB.DLL ok scanned
1/16/2008 9:19:17 AM Running module: svchost.exe\svchost.exe ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\svchost.exe ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\ntdll.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\kernel32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\RPCRT4.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\ShimEng.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\ShimEng.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\AcGenral.DLL ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\USER32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\GDI32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\WINMM.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\WINMM.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\ole32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\msvcrt.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\MSACM32.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\MSACM32.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\VERSION.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\SHELL32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\USERENV.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\UxTheme.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\UxTheme.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\IMM32.DLL ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\NTMARTA.DLL ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\WLDAP32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\SAMLIB.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\SAMLIB.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\xpsp2res.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\xpsp2res.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\shsvcs.dll ok iChecker
1/16/2008 9:19:17 AM File: c:\windows\system32\shsvcs.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\WINSTA.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\WINSTA.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\NETAPI32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\dhcpcsvc.dll ok scanned
1/16/2008 9:19:17 AM File: c:\windows\system32\dhcpcsvc.dll ok scanned
1/16/2008 9:19:17 AM Running module: svchost.exe\DNSAPI.dll ok iChecker
1/16/2008 9:19:17 AM File: c:\windows\system32\DNSAPI.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\WS2_32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\WS2HELP.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\iphlpapi.dll ok iChecker
1/16/2008 9:19:17 AM File: c:\windows\system32\iphlpapi.dll ok iSwift
1/16/2008 9:19:17 AM Running module: svchost.exe\Secur32.dll ok iChecker
1/16/2008 9:19:17 AM Running module: svchost.exe\rsaenh.dll ok iChecker
1/16/2008 9:19:17 AM File: C:\WINDOWS\System32\rsaenh.dll ok iSwift
1/16/2008 9:19:18 AM Running module: svchost.exe\wzcsvc.dll ok scanned
1/16/2008 9:19:18 AM File: c:\windows\system32\wzcsvc.dll ok scanned
1/16/2008 9:19:18 AM Running module: svchost.exe\rtutils.dll ok scanned
1/16/2008 9:19:18 AM File: c:\windows\system32\rtutils.dll ok scanned
1/16/2008 9:19:18 AM Running module: svchost.exe\WMI.dll ok scanned
1/16/2008 9:19:18 AM File: c:\windows\system32\WMI.dll ok scanned
1/16/2008 9:19:18 AM Running module: svchost.exe\CRYPT32.dll ok iChecker
1/16/2008 9:19:18 AM Running module: svchost.exe\MSASN1.dll ok iChecker
1/16/2008 9:19:18 AM Running module: svchost.exe\WTSAPI32.dll ok iChecker
1/16/2008 9:19:18 AM File: c:\windows\system32\WTSAPI32.dll ok iSwift
1/16/2008 9:19:19 AM Running module: svchost.exe\ESENT.dll ok scanned
1/16/2008 9:19:19 AM File: c:\windows\system32\ESENT.dll ok scanned
1/16/2008 9:19:19 AM Running module: svchost.exe\ATL.DLL ok iChecker
1/16/2008 9:19:20 AM Running module: svchost.exe\rastls.dll ok scanned
1/16/2008 9:19:20 AM File: C:\WINDOWS\System32\rastls.dll ok scanned
1/16/2008 9:19:20 AM Running module: svchost.exe\CRYPTUI.dll ok scanned
1/16/2008 9:19:22 AM File: C:\WINDOWS\system32\CRYPTUI.dll ok scanned
1/16/2008 9:19:22 AM Running module: svchost.exe\WINTRUST.dll ok iChecker
1/16/2008 9:19:22 AM Running module: svchost.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:19:22 AM Running module: svchost.exe\WININET.dll ok scanned
1/16/2008 9:19:23 AM File: C:\WINDOWS\system32\WININET.dll packed file PE_Patch
1/16/2008 9:19:25 AM File: C:\WINDOWS\system32\WININET.dll//PE_Patch ok iChecker
1/16/2008 9:19:25 AM File: C:\WINDOWS\system32\WININET.dll ok scanned
1/16/2008 9:19:25 AM Running module: svchost.exe\Normaliz.dll ok scanned
1/16/2008 9:19:25 AM File: C:\WINDOWS\system32\Normaliz.dll ok scanned
1/16/2008 9:19:26 AM Running module: svchost.exe\iertutil.dll ok scanned
1/16/2008 9:19:26 AM File: C:\WINDOWS\system32\iertutil.dll ok scanned
1/16/2008 9:19:26 AM Running module: svchost.exe\MPRAPI.dll ok scanned
1/16/2008 9:19:26 AM File: C:\WINDOWS\System32\MPRAPI.dll ok scanned
1/16/2008 9:19:26 AM Running module: svchost.exe\ACTIVEDS.dll ok iChecker
1/16/2008 9:19:26 AM File: C:\WINDOWS\System32\ACTIVEDS.dll ok iSwift
1/16/2008 9:19:26 AM Running module: svchost.exe\adsldpc.dll ok iChecker
1/16/2008 9:19:26 AM File: C:\WINDOWS\System32\adsldpc.dll ok iSwift
1/16/2008 9:19:26 AM Running module: svchost.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:19:26 AM File: C:\WINDOWS\System32\SETUPAPI.dll ok iSwift
1/16/2008 9:19:26 AM Running module: svchost.exe\RASAPI32.dll ok scanned
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\RASAPI32.dll ok scanned
1/16/2008 9:19:27 AM Running module: svchost.exe\rasman.dll ok scanned
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\rasman.dll ok scanned
1/16/2008 9:19:27 AM Running module: svchost.exe\TAPI32.dll ok scanned
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\TAPI32.dll ok scanned
1/16/2008 9:19:27 AM Running module: svchost.exe\SCHANNEL.dll ok iChecker
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\SCHANNEL.dll ok iSwift
1/16/2008 9:19:27 AM Running module: svchost.exe\WinSCard.dll ok iChecker
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\WinSCard.dll ok iSwift
1/16/2008 9:19:27 AM Running module: svchost.exe\raschap.dll ok scanned
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\raschap.dll ok scanned
1/16/2008 9:19:27 AM Running module: svchost.exe\msv1_0.dll ok iChecker
1/16/2008 9:19:27 AM Running module: svchost.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\CLBCATQ.DLL ok iSwift
1/16/2008 9:19:27 AM Running module: svchost.exe\COMRes.dll ok iChecker
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\COMRes.dll ok iSwift
1/16/2008 9:19:27 AM Running module: svchost.exe\MSVCP60.dll ok iChecker
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\MSVCP60.dll ok iSwift
1/16/2008 9:19:27 AM Running module: svchost.exe\WZCSAPI.DLL ok scanned
1/16/2008 9:19:27 AM File: C:\WINDOWS\System32\WZCSAPI.DLL ok scanned
1/16/2008 9:19:28 AM Running module: svchost.exe\schedsvc.dll ok scanned
1/16/2008 9:19:28 AM File: c:\windows\system32\schedsvc.dll ok scanned
1/16/2008 9:19:28 AM Running module: svchost.exe\NTDSAPI.dll ok iChecker
1/16/2008 9:19:28 AM File: c:\windows\system32\NTDSAPI.dll ok iSwift
1/16/2008 9:19:28 AM Running module: svchost.exe\MSIDLE.DLL ok scanned
1/16/2008 9:19:28 AM File: C:\WINDOWS\System32\MSIDLE.DLL ok scanned
1/16/2008 9:19:28 AM Running module: svchost.exe\audiosrv.dll ok scanned
1/16/2008 9:19:28 AM File: c:\windows\system32\audiosrv.dll ok scanned
1/16/2008 9:19:28 AM Running module: svchost.exe\wkssvc.dll ok scanned
1/16/2008 9:19:28 AM File: c:\windows\system32\wkssvc.dll ok scanned
1/16/2008 9:19:28 AM Running module: svchost.exe\cryptsvc.dll ok scanned
1/16/2008 9:19:28 AM File: c:\windows\system32\cryptsvc.dll ok scanned
1/16/2008 9:19:28 AM Running module: svchost.exe\certcli.dll ok scanned
1/16/2008 9:19:29 AM File: c:\windows\system32\certcli.dll ok scanned
1/16/2008 9:19:29 AM Running module: svchost.exe\ersvc.dll ok scanned
1/16/2008 9:19:29 AM File: c:\windows\system32\ersvc.dll ok scanned
1/16/2008 9:19:29 AM Running module: svchost.exe\es.dll ok scanned
1/16/2008 9:19:29 AM File: c:\windows\system32\es.dll ok scanned
1/16/2008 9:19:29 AM Running module: svchost.exe\pchsvc.dll ok scanned
1/16/2008 9:19:29 AM File: c:\windows\pchealth\helpctr\binaries\pchsvc.dll ok scanned
1/16/2008 9:19:29 AM Running module: svchost.exe\hidserv.dll ok scanned
1/16/2008 9:19:29 AM File: c:\windows\system32\hidserv.dll ok scanned
1/16/2008 9:19:29 AM Running module: svchost.exe\HID.DLL ok scanned
1/16/2008 9:19:29 AM File: c:\windows\system32\HID.DLL ok scanned
1/16/2008 9:19:29 AM Running module: svchost.exe\srvsvc.dll ok scanned
1/16/2008 9:19:29 AM File: c:\windows\system32\srvsvc.dll ok scanned
1/16/2008 9:19:29 AM Running module: svchost.exe\HNETCFG.DLL ok iChecker
1/16/2008 9:19:29 AM File: C:\WINDOWS\System32\HNETCFG.DLL ok iSwift
1/16/2008 9:19:30 AM Running module: svchost.exe\netman.dll ok scanned
1/16/2008 9:19:30 AM File: c:\windows\system32\netman.dll ok scanned
1/16/2008 9:19:30 AM Running module: svchost.exe\netshell.dll ok scanned
1/16/2008 9:19:34 AM File: c:\windows\system32\netshell.dll ok scanned
1/16/2008 9:19:34 AM Running module: svchost.exe\credui.dll ok scanned
1/16/2008 9:19:34 AM File: c:\windows\system32\credui.dll ok scanned
1/16/2008 9:19:34 AM Running module: svchost.exe\seclogon.dll ok scanned
1/16/2008 9:19:34 AM File: c:\windows\system32\seclogon.dll ok scanned
1/16/2008 9:19:34 AM Running module: svchost.exe\sens.dll ok scanned
1/16/2008 9:19:34 AM File: c:\windows\system32\sens.dll ok scanned
1/16/2008 9:19:34 AM Running module: svchost.exe\srsvc.dll ok scanned
1/16/2008 9:19:34 AM File: c:\windows\system32\srsvc.dll ok scanned
1/16/2008 9:19:34 AM Running module: svchost.exe\POWRPROF.dll ok scanned
1/16/2008 9:19:34 AM File: c:\windows\system32\POWRPROF.dll ok scanned
1/16/2008 9:19:35 AM Running module: svchost.exe\tapisrv.dll ok scanned
1/16/2008 9:19:35 AM File: c:\windows\system32\tapisrv.dll ok scanned
1/16/2008 9:19:35 AM Running module: svchost.exe\PSAPI.DLL ok iChecker
1/16/2008 9:19:35 AM File: c:\windows\system32\PSAPI.DLL ok iSwift
1/16/2008 9:19:35 AM Running module: svchost.exe\trkwks.dll ok scanned
1/16/2008 9:19:35 AM File: c:\windows\system32\trkwks.dll ok scanned
1/16/2008 9:19:35 AM Running module: svchost.exe\w32time.dll ok iChecker
1/16/2008 9:19:35 AM File: c:\windows\system32\w32time.dll ok iSwift
1/16/2008 9:19:35 AM Running module: svchost.exe\wmisvc.dll ok scanned
1/16/2008 9:19:35 AM File: c:\windows\system32\wbem\wmisvc.dll ok scanned
1/16/2008 9:19:36 AM Running module: svchost.exe\VSSAPI.DLL ok scanned
1/16/2008 9:19:36 AM File: C:\WINDOWS\system32\VSSAPI.DLL ok scanned
1/16/2008 9:19:36 AM Running module: svchost.exe\wscsvc.dll ok scanned
1/16/2008 9:19:36 AM File: c:\windows\system32\wscsvc.dll ok scanned
1/16/2008 9:19:36 AM Running module: svchost.exe\msi.dll ok scanned
1/16/2008 9:19:42 AM File: c:\windows\system32\msi.dll ok scanned
1/16/2008 9:19:42 AM Running module: svchost.exe\wuauserv.dll ok scanned
1/16/2008 9:19:42 AM File: c:\windows\system32\wuauserv.dll ok scanned
1/16/2008 9:19:45 AM Running module: svchost.exe\wuaueng.dll ok scanned
1/16/2008 9:19:45 AM File: C:\WINDOWS\system32\wuaueng.dll ok scanned
1/16/2008 9:19:45 AM Running module: svchost.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:19:45 AM File: C:\WINDOWS\System32\WINSPOOL.DRV ok iSwift
1/16/2008 9:19:45 AM Running module: svchost.exe\WINHTTP.dll ok scanned
1/16/2008 9:19:45 AM File: C:\WINDOWS\System32\WINHTTP.dll ok scanned
1/16/2008 9:19:45 AM Running module: svchost.exe\Cabinet.dll ok scanned
1/16/2008 9:19:45 AM File: C:\WINDOWS\System32\Cabinet.dll ok scanned
1/16/2008 9:19:46 AM Running module: svchost.exe\mspatcha.dll ok scanned
1/16/2008 9:19:46 AM File: C:\WINDOWS\System32\mspatcha.dll ok scanned
1/16/2008 9:19:46 AM Running module: svchost.exe\wbemcomn.dll ok scanned
1/16/2008 9:19:46 AM File: C:\WINDOWS\System32\wbem\wbemcomn.dll ok scanned
1/16/2008 9:19:46 AM Running module: svchost.exe\mswsock.dll ok iChecker
1/16/2008 9:19:46 AM Running module: svchost.exe\wshtcpip.dll ok iChecker
1/16/2008 9:19:46 AM Running module: svchost.exe\browser.dll ok scanned
1/16/2008 9:19:46 AM File: c:\windows\system32\browser.dll ok scanned
1/16/2008 9:19:47 AM Running module: svchost.exe\wbemcore.dll ok scanned
1/16/2008 9:19:47 AM File: C:\WINDOWS\System32\Wbem\wbemcore.dll ok scanned
1/16/2008 9:19:47 AM Running module: svchost.exe\esscli.dll ok scanned
1/16/2008 9:19:47 AM File: C:\WINDOWS\System32\Wbem\esscli.dll ok scanned
1/16/2008 9:19:47 AM Running module: svchost.exe\FastProx.dll ok scanned
1/16/2008 9:19:48 AM File: C:\WINDOWS\System32\Wbem\FastProx.dll ok scanned
1/16/2008 9:19:48 AM Running module: svchost.exe\wbemsvc.dll ok scanned
1/16/2008 9:19:48 AM File: C:\WINDOWS\System32\wbem\wbemsvc.dll ok scanned
1/16/2008 9:19:48 AM Running module: svchost.exe\SXS.DLL ok iChecker
1/16/2008 9:19:48 AM File: C:\WINDOWS\System32\SXS.DLL ok iSwift
1/16/2008 9:19:48 AM Running module: svchost.exe\wmiutils.dll ok scanned
1/16/2008 9:19:48 AM File: C:\WINDOWS\System32\wbem\wmiutils.dll ok scanned
1/16/2008 9:19:48 AM Running module: svchost.exe\sfc.dll ok iChecker
1/16/2008 9:19:48 AM File: C:\WINDOWS\System32\sfc.dll ok iSwift
1/16/2008 9:19:48 AM Running module: svchost.exe\sfc_os.dll ok iChecker
1/16/2008 9:19:48 AM File: C:\WINDOWS\System32\sfc_os.dll ok iSwift
1/16/2008 9:19:48 AM Running module: svchost.exe\ipnathlp.dll ok scanned
1/16/2008 9:19:48 AM File: c:\windows\system32\ipnathlp.dll ok scanned
1/16/2008 9:19:48 AM Running module: svchost.exe\AUTHZ.dll ok iChecker
1/16/2008 9:19:49 AM Running module: svchost.exe\repdrvfs.dll ok scanned
1/16/2008 9:19:49 AM File: C:\WINDOWS\System32\wbem\repdrvfs.dll ok scanned
1/16/2008 9:19:49 AM Running module: svchost.exe\wmiprvsd.dll ok scanned
1/16/2008 9:19:49 AM File: C:\WINDOWS\System32\wbem\wmiprvsd.dll ok scanned
1/16/2008 9:19:49 AM Running module: svchost.exe\NCObjAPI.DLL ok iChecker
1/16/2008 9:19:50 AM Running module: svchost.exe\comsvcs.dll ok scanned
1/16/2008 9:19:51 AM File: C:\WINDOWS\system32\comsvcs.dll ok scanned
1/16/2008 9:19:51 AM Running module: svchost.exe\colbact.DLL ok scanned
1/16/2008 9:19:51 AM File: C:\WINDOWS\system32\colbact.DLL ok scanned
1/16/2008 9:19:51 AM Running module: svchost.exe\MTXCLU.DLL ok scanned
1/16/2008 9:19:51 AM File: C:\WINDOWS\system32\MTXCLU.DLL ok scanned
1/16/2008 9:19:51 AM Running module: svchost.exe\WSOCK32.dll ok scanned
1/16/2008 9:19:52 AM File: C:\WINDOWS\system32\WSOCK32.dll ok scanned
1/16/2008 9:19:52 AM Running module: svchost.exe\CLUSAPI.DLL ok scanned
1/16/2008 9:19:52 AM File: C:\WINDOWS\System32\CLUSAPI.DLL ok scanned
1/16/2008 9:19:52 AM Running module: svchost.exe\RESUTILS.DLL ok scanned
1/16/2008 9:19:52 AM File: C:\WINDOWS\System32\RESUTILS.DLL ok scanned
1/16/2008 9:19:52 AM Running module: svchost.exe\wbemess.dll ok scanned
1/16/2008 9:19:52 AM File: C:\WINDOWS\System32\wbem\wbemess.dll ok scanned
1/16/2008 9:19:52 AM Running module: svchost.exe\ncprov.dll ok scanned
1/16/2008 9:19:52 AM File: C:\WINDOWS\System32\wbem\ncprov.dll ok scanned
1/16/2008 9:19:53 AM Running module: svchost.exe\unimdm.tsp ok scanned
1/16/2008 9:19:53 AM File: C:\WINDOWS\System32\unimdm.tsp ok scanned
1/16/2008 9:19:53 AM Running module: svchost.exe\uniplat.dll ok scanned
1/16/2008 9:19:53 AM File: C:\WINDOWS\System32\uniplat.dll ok scanned
1/16/2008 9:19:53 AM Running module: svchost.exe\unimdmat.dll ok scanned
1/16/2008 9:19:53 AM File: C:\WINDOWS\System32\unimdmat.dll ok scanned
1/16/2008 9:19:53 AM Running module: svchost.exe\modemui.dll ok scanned
1/16/2008 9:19:53 AM File: C:\WINDOWS\system32\modemui.dll ok scanned
1/16/2008 9:19:53 AM Running module: svchost.exe\kmddsp.tsp ok scanned
1/16/2008 9:19:53 AM File: C:\WINDOWS\System32\kmddsp.tsp ok scanned
1/16/2008 9:19:53 AM Running module: svchost.exe\ndptsp.tsp ok scanned
1/16/2008 9:19:54 AM File: C:\WINDOWS\System32\ndptsp.tsp ok scanned
1/16/2008 9:19:54 AM Running module: svchost.exe\ipconf.tsp ok scanned
1/16/2008 9:19:54 AM File: C:\WINDOWS\System32\ipconf.tsp ok scanned
1/16/2008 9:19:54 AM Running module: svchost.exe\h323.tsp ok scanned
1/16/2008 9:19:54 AM File: C:\WINDOWS\System32\h323.tsp ok scanned
1/16/2008 9:19:54 AM Running module: svchost.exe\hidphone.tsp ok scanned
1/16/2008 9:19:54 AM File: C:\WINDOWS\System32\hidphone.tsp ok scanned
1/16/2008 9:19:54 AM Running module: svchost.exe\Apphelp.dll ok iChecker
1/16/2008 9:19:54 AM Running module: svchost.exe\wups2.dll ok scanned
1/16/2008 9:19:54 AM File: C:\WINDOWS\system32\wups2.dll ok scanned
1/16/2008 9:19:54 AM Running module: svchost.exe\rasadhlp.dll ok iChecker
1/16/2008 9:19:54 AM File: C:\WINDOWS\System32\rasadhlp.dll ok iSwift
1/16/2008 9:19:55 AM Running module: svchost.exe\rasmans.dll ok scanned
1/16/2008 9:19:55 AM File: c:\windows\system32\rasmans.dll ok scanned
1/16/2008 9:19:55 AM Running module: svchost.exe\WINIPSEC.DLL ok iChecker
1/16/2008 9:19:55 AM File: c:\windows\system32\WINIPSEC.DLL ok iSwift
1/16/2008 9:19:55 AM Running module: svchost.exe\netcfgx.dll ok scanned
1/16/2008 9:19:56 AM File: c:\windows\system32\netcfgx.dll ok scanned
1/16/2008 9:19:56 AM Running module: svchost.exe\rastapi.dll ok scanned
1/16/2008 9:19:56 AM File: C:\WINDOWS\System32\rastapi.dll ok scanned
1/16/2008 9:19:56 AM Running module: svchost.exe\rasppp.dll ok scanned
1/16/2008 9:19:56 AM File: C:\WINDOWS\System32\rasppp.dll ok scanned
1/16/2008 9:19:56 AM Running module: svchost.exe\ntlsapi.dll ok scanned
1/16/2008 9:19:56 AM File: C:\WINDOWS\System32\ntlsapi.dll ok scanned
1/16/2008 9:19:56 AM Running module: svchost.exe\kerberos.dll ok iChecker
1/16/2008 9:19:56 AM Running module: svchost.exe\cryptdll.dll ok iChecker
1/16/2008 9:19:56 AM File: C:\WINDOWS\System32\cryptdll.dll ok iSwift
1/16/2008 9:19:56 AM Running module: svchost.exe\upnp.dll ok scanned
1/16/2008 9:19:56 AM File: C:\WINDOWS\System32\upnp.dll ok scanned
1/16/2008 9:19:56 AM Running module: svchost.exe\SSDPAPI.dll ok scanned
1/16/2008 9:19:57 AM File: C:\WINDOWS\System32\SSDPAPI.dll ok scanned
1/16/2008 9:19:57 AM Running module: svchost.exe\RASDLG.dll ok scanned
1/16/2008 9:19:57 AM File: C:\WINDOWS\System32\RASDLG.dll ok scanned
1/16/2008 9:19:58 AM Running module: svchost.exe\msxml3.dll ok scanned
1/16/2008 9:19:58 AM File: C:\WINDOWS\system32\msxml3.dll ok scanned
1/16/2008 9:19:59 AM Running module: svchost.exe\urlmon.dll ok scanned
1/16/2008 9:20:01 AM File: C:\WINDOWS\system32\urlmon.dll ok scanned
1/16/2008 9:20:01 AM Running module: svchost.exe\mlang.dll ok scanned
1/16/2008 9:20:03 AM File: C:\WINDOWS\System32\mlang.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\xmlprovi.dll ok scanned
1/16/2008 9:20:03 AM File: C:\WINDOWS\System32\xmlprovi.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\svchost.exe ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ntdll.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\kernel32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\USER32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\GDI32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\WINMM.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ole32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\VERSION.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\USERENV.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\dnsrslvr.dll ok scanned
1/16/2008 9:20:03 AM File: c:\windows\system32\dnsrslvr.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\DNSAPI.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\iphlpapi.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\mswsock.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:03 AM File: C:\WINDOWS\System32\hnetcfg.dll ok iSwift
1/16/2008 9:20:03 AM Running module: svchost.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\svchost.exe ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ntdll.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\kernel32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\USER32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\GDI32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\WINMM.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\ole32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\VERSION.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\USERENV.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\SAMLIB.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\lmhsvc.dll ok scanned
1/16/2008 9:20:03 AM File: c:\windows\system32\lmhsvc.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\iphlpapi.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:03 AM Running module: svchost.exe\webclnt.dll ok scanned
1/16/2008 9:20:03 AM File: c:\windows\system32\webclnt.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\WININET.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\Normaliz.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\iertutil.dll ok scanned
1/16/2008 9:20:03 AM Running module: svchost.exe\Secur32.dll ok iChecker
1/16/2008 9:20:03 AM File: C:\WINDOWS\System32\Secur32.dll ok iSwift
1/16/2008 9:20:03 AM Running module: svchost.exe\ssdpsrv.dll ok scanned
1/16/2008 9:20:04 AM File: c:\windows\system32\ssdpsrv.dll ok scanned
1/16/2008 9:20:04 AM Running module: svchost.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\COMRes.dll ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\mswsock.dll ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\upnphost.dll ok scanned
1/16/2008 9:20:04 AM File: c:\windows\system32\upnphost.dll ok scanned
1/16/2008 9:20:04 AM Running module: svchost.exe\WINHTTP.dll ok iChecker
1/16/2008 9:20:04 AM File: c:\windows\system32\WINHTTP.dll ok iSwift
1/16/2008 9:20:04 AM Running module: svchost.exe\SSDPAPI.dll ok iChecker
1/16/2008 9:20:04 AM File: c:\windows\system32\SSDPAPI.dll ok iSwift
1/16/2008 9:20:04 AM Running module: svchost.exe\netapi32.dll ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\DNSAPI.dll ok iChecker
1/16/2008 9:20:04 AM File: C:\WINDOWS\System32\DNSAPI.dll ok iSwift
1/16/2008 9:20:04 AM Running module: svchost.exe\rasadhlp.dll ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\rsaenh.dll ok iChecker
1/16/2008 9:20:04 AM Running module: svchost.exe\httpapi.dll ok scanned
1/16/2008 9:20:04 AM File: C:\WINDOWS\System32\httpapi.dll ok scanned
1/16/2008 9:20:04 AM Running module: aawservice.exe\aawservice.exe ok scanned
1/16/2008 9:20:05 AM File: C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe ok scanned
1/16/2008 9:20:05 AM Running module: aawservice.exe\ntdll.dll ok iChecker
1/16/2008 9:20:05 AM Running module: aawservice.exe\kernel32.dll ok iChecker
1/16/2008 9:20:05 AM Running module: aawservice.exe\CEAPI.dll ok scanned
1/16/2008 9:20:05 AM File: C:\Program Files\Lavasoft\Ad-Aware 2007\CEAPI.dll ok scanned
1/16/2008 9:20:05 AM Running module: aawservice.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:05 AM Running module: aawservice.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\PKArchive84cb.dll ok scanned
1/16/2008 9:20:06 AM File: C:\Program Files\Lavasoft\Ad-Aware 2007\PKArchive84cb.dll packed file PKLite32
1/16/2008 9:20:06 AM File: C:\Program Files\Lavasoft\Ad-Aware 2007\PKArchive84cb.dll//PKLite32 ok scanned
1/16/2008 9:20:06 AM File: C:\Program Files\Lavasoft\Ad-Aware 2007\PKArchive84cb.dll ok scanned
1/16/2008 9:20:06 AM Running module: aawservice.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\GDI32.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\USER32.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\ole32.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\PSAPI.DLL ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\VERSION.dll ok iChecker
1/16/2008 9:20:06 AM Running module: aawservice.exe\WININET.dll ok scanned
1/16/2008 9:20:06 AM Running module: aawservice.exe\Normaliz.dll ok scanned
1/16/2008 9:20:06 AM Running module: aawservice.exe\iertutil.dll ok scanned
1/16/2008 9:20:07 AM Running module: aawservice.exe\Update.dll ok scanned
1/16/2008 9:20:07 AM File: C:\Program Files\Lavasoft\Ad-Aware 2007\Update.dll ok scanned
1/16/2008 9:20:07 AM Running module: aawservice.exe\WSOCK32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: aawservice.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: aawservice.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:07 AM Running module: aawservice.exe\USERENV.dll ok iChecker
1/16/2008 9:20:07 AM Running module: aawservice.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:07 AM Running module: aawservice.exe\comctl32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: aawservice.exe\comctl32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: aawservice.exe\rsaenh.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\spoolsv.exe ok scanned
1/16/2008 9:20:07 AM File: C:\WINDOWS\system32\spoolsv.exe ok scanned
1/16/2008 9:20:07 AM Running module: spoolsv.exe\ntdll.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\kernel32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\GDI32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\USER32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\WINMM.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\ole32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\VERSION.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\USERENV.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\comctl32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\comctl32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\SPOOLSS.DLL ok scanned
1/16/2008 9:20:07 AM File: C:\WINDOWS\system32\SPOOLSS.DLL ok scanned
1/16/2008 9:20:07 AM Running module: spoolsv.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\DNSAPI.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\iphlpapi.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\rasadhlp.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\localspl.dll ok scanned
1/16/2008 9:20:07 AM File: C:\WINDOWS\system32\localspl.dll ok scanned
1/16/2008 9:20:07 AM Running module: spoolsv.exe\Secur32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\sfc_os.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\WINTRUST.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\winspool.drv ok iChecker
1/16/2008 9:20:07 AM File: C:\WINDOWS\system32\winspool.drv ok iSwift
1/16/2008 9:20:07 AM Running module: spoolsv.exe\netapi32.dll ok iChecker
1/16/2008 9:20:07 AM Running module: spoolsv.exe\cnbjmon.dll ok scanned
1/16/2008 9:20:07 AM File: C:\WINDOWS\system32\cnbjmon.dll ok scanned
1/16/2008 9:20:07 AM Running module: spoolsv.exe\CNBJMON2.DLL ok scanned
1/16/2008 9:20:07 AM File: C:\WINDOWS\system32\CNBJMON2.DLL ok scanned
1/16/2008 9:20:07 AM Running module: spoolsv.exe\hpzlnt09.dll ok scanned
1/16/2008 9:20:07 AM File: C:\WINDOWS\system32\hpzlnt09.dll ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\hpzsnt09.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\hpzsnt09.dll ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\ippnu.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\ippnu.dll ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\WSOCK32.dll ok iChecker
1/16/2008 9:20:08 AM Running module: spoolsv.exe\lprmon.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\lprmon.dll ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\LPRHELP.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\LPRHELP.dll ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\mdimon.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\mdimon.dll ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\msi.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\msi.dll ok iSwift
1/16/2008 9:20:08 AM Running module: spoolsv.exe\FXSMON.DLL ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\FXSMON.DLL ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\FXSEVENT.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\FXSEVENT.dll ok scanned
1/16/2008 9:20:08 AM Running module: spoolsv.exe\pjlmon.dll ok scanned
1/16/2008 9:20:08 AM File: C:\WINDOWS\system32\pjlmon.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\tcpmon.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\tcpmon.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\tcpmib.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\tcpmib.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\mgmtapi.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\mgmtapi.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\snmpapi.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\snmpapi.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\wsnmp32.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\wsnmp32.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\sugo3LMK.DLL ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\sugo3LMK.DLL ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\usbmon.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\usbmon.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\mdippr.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\mswsock.dll ok iChecker
1/16/2008 9:20:09 AM File: C:\WINDOWS\System32\mswsock.dll ok iSwift
1/16/2008 9:20:09 AM Running module: spoolsv.exe\winrnr.dll ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\win32spl.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\win32spl.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\NETRAP.dll ok iChecker
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\NETRAP.dll ok iSwift
1/16/2008 9:20:09 AM Running module: spoolsv.exe\NTDSAPI.dll ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\COMRes.dll ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\inetpp.dll ok scanned
1/16/2008 9:20:09 AM File: C:\WINDOWS\system32\inetpp.dll ok scanned
1/16/2008 9:20:09 AM Running module: spoolsv.exe\msctfime.ime ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:09 AM Running module: spoolsv.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\svchost.exe ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\ntdll.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\kernel32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\USER32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\GDI32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\WINMM.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\ole32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\VERSION.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\USERENV.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\SAMLIB.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:09 AM Running module: svchost.exe\w3ssl.dll ok scanned
1/16/2008 9:20:09 AM File: c:\windows\system32\w3ssl.dll ok scanned
1/16/2008 9:20:10 AM Running module: svchost.exe\strmfilt.dll ok scanned
1/16/2008 9:20:10 AM File: C:\WINDOWS\System32\strmfilt.dll ok scanned
1/16/2008 9:20:10 AM Running module: svchost.exe\Secur32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: svchost.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: svchost.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:10 AM Running module: svchost.exe\HTTPAPI.dll ok iChecker
1/16/2008 9:20:10 AM File: C:\WINDOWS\System32\HTTPAPI.dll ok iSwift
1/16/2008 9:20:10 AM Running module: svchost.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:10 AM File: C:\WINDOWS\System32\WS2_32.dll ok iSwift
1/16/2008 9:20:10 AM Running module: svchost.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:10 AM File: C:\WINDOWS\System32\WS2HELP.dll ok iSwift
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\msfwsvc.exe ok scanned
1/16/2008 9:20:10 AM File: C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe ok scanned
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\ntdll.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\kernel32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\GDI32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\USER32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\ole32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\WSOCK32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\ESENT.dll ok iChecker
1/16/2008 9:20:10 AM File: C:\WINDOWS\system32\ESENT.dll ok iSwift
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\DNSAPI.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\WINTRUST.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\VERSION.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\USERENV.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\PSAPI.DLL ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\comctl32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\comctl32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\IPHLPAPI.DLL ok iChecker
1/16/2008 9:20:10 AM File: C:\WINDOWS\system32\IPHLPAPI.DLL ok iSwift
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\mswsock.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\rsaenh.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\secur32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\netapi32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\cryptnet.dll ok scanned
1/16/2008 9:20:10 AM File: C:\WINDOWS\system32\cryptnet.dll ok scanned
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\WINHTTP.dll ok iChecker
1/16/2008 9:20:10 AM File: C:\WINDOWS\system32\WINHTTP.dll ok iSwift
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\SensApi.dll ok scanned
1/16/2008 9:20:10 AM File: C:\WINDOWS\system32\SensApi.dll ok scanned
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\Cabinet.dll ok iChecker
1/16/2008 9:20:10 AM File: C:\WINDOWS\system32\Cabinet.dll ok iSwift
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:10 AM Running module: msfwsvc.exe\COMRes.dll ok iChecker
1/16/2008 9:20:11 AM Running module: msfwsvc.exe\msxml6.dll ok scanned
1/16/2008 9:20:12 AM File: c:\WINDOWS\system32\msxml6.dll ok scanned
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\PRISMXL.SYS ok scanned
1/16/2008 9:20:12 AM File: C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS ok scanned
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\ntdll.dll ok iChecker
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\kernel32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\USER32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\GDI32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\ADVAPI32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\RPCRT4.dll ok iChecker
1/16/2008 9:20:12 AM Running module: PRISMXL.SYS\IMM32.DLL ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\snmp.exe ok scanned
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\snmp.exe ok scanned
1/16/2008 9:20:12 AM Running module: snmp.exe\ntdll.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\kernel32.dll ok scanned
1/16/2008 9:20:12 AM Running module: snmp.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\snmpapi.dll ok iChecker
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\snmpapi.dll ok iSwift
1/16/2008 9:20:12 AM Running module: snmp.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\mswsock.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\DNSAPI.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\iphlpapi.dll ok iChecker
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\iphlpapi.dll ok iSwift
1/16/2008 9:20:12 AM Running module: snmp.exe\USER32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\GDI32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\winrnr.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\lmmib2.dll ok scanned
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\lmmib2.dll ok scanned
1/16/2008 9:20:12 AM Running module: snmp.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\inetmib1.dll ok scanned
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\inetmib1.dll ok scanned
1/16/2008 9:20:12 AM Running module: snmp.exe\WSOCK32.dll ok iChecker
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\WSOCK32.dll ok iSwift
1/16/2008 9:20:12 AM Running module: snmp.exe\MPRAPI.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\ACTIVEDS.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\adsldpc.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\ATL.DLL ok iChecker
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\ATL.DLL ok iSwift
1/16/2008 9:20:12 AM Running module: snmp.exe\ole32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\rtutils.dll ok iChecker
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\rtutils.dll ok iSwift
1/16/2008 9:20:12 AM Running module: snmp.exe\SAMLIB.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:20:12 AM Running module: snmp.exe\hostmib.dll ok scanned
1/16/2008 9:20:12 AM File: C:\WINDOWS\System32\hostmib.dll ok scanned
1/16/2008 9:20:12 AM Running module: snmp.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:13 AM Running module: snmp.exe\snmpmib.dll ok scanned
1/16/2008 9:20:13 AM File: C:\WINDOWS\System32\snmpmib.dll ok scanned
1/16/2008 9:20:13 AM Running module: snmp.exe\evntagnt.dll ok scanned
1/16/2008 9:20:13 AM File: C:\WINDOWS\System32\evntagnt.dll ok scanned
1/16/2008 9:20:13 AM Running module: snmp.exe\MSVCP60.dll ok iChecker
1/16/2008 9:20:13 AM Running module: snmp.exe\igmpagnt.dll ok scanned
1/16/2008 9:20:13 AM File: C:\WINDOWS\System32\igmpagnt.dll ok scanned
1/16/2008 9:20:13 AM Running module: snmp.exe\mcastmib.dll ok scanned
1/16/2008 9:20:13 AM File: C:\WINDOWS\System32\mcastmib.dll ok scanned
1/16/2008 9:20:13 AM Running module: snmp.exe\rtipxmib.dll ok scanned
1/16/2008 9:20:13 AM File: C:\WINDOWS\System32\rtipxmib.dll ok scanned
1/16/2008 9:20:13 AM Running module: sqlwriter.exe\sqlwriter.exe ok scanned
1/16/2008 9:20:13 AM File: c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe packed file PE_Patch
1/16/2008 9:20:13 AM File: c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe//PE_Patch ok scanned
1/16/2008 9:20:13 AM File: c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe ok scanned
1/16/2008 9:20:13 AM Running module: sqlwriter.exe\ntdll.dll ok iChecker
1/16/2008 9:20:13 AM Running module: sqlwriter.exe\kernel32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\MSVCR80.dll ok scanned
1/16/2008 9:20:14 AM File: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll ok scanned
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\ole32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\GDI32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\USER32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\sqlwvss_xp.dll ok scanned
1/16/2008 9:20:14 AM File: c:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll ok scanned
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\MSVCP80.dll ok scanned
1/16/2008 9:20:14 AM File: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll ok scanned
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\VSSAPI.DLL ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\ATL.DLL ok iChecker
1/16/2008 9:20:14 AM File: C:\WINDOWS\system32\ATL.DLL ok iSwift
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\COMRes.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\VERSION.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\es.dll ok iChecker
1/16/2008 9:20:14 AM File: C:\WINDOWS\System32\es.dll ok iSwift
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\wtsapi32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: sqlwriter.exe\WINSTA.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\svchost.exe ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\ntdll.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\kernel32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\USER32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\GDI32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\WINMM.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\ole32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\VERSION.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\USERENV.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:14 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\comctl32.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\wiaservc.dll ok scanned
1/16/2008 9:20:15 AM File: c:\windows\system32\wiaservc.dll ok scanned
1/16/2008 9:20:15 AM Running module: svchost.exe\CFGMGR32.dll ok scanned
1/16/2008 9:20:15 AM File: c:\windows\system32\CFGMGR32.dll ok scanned
1/16/2008 9:20:15 AM Running module: svchost.exe\setupapi.dll ok iChecker
1/16/2008 9:20:15 AM File: C:\WINDOWS\System32\setupapi.dll ok iSwift
1/16/2008 9:20:15 AM Running module: svchost.exe\mscms.dll ok scanned
1/16/2008 9:20:15 AM File: c:\windows\system32\mscms.dll ok scanned
1/16/2008 9:20:15 AM Running module: svchost.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:20:15 AM File: c:\windows\system32\WINSPOOL.DRV ok iSwift
1/16/2008 9:20:15 AM Running module: svchost.exe\WINSTA.dll ok iChecker
1/16/2008 9:20:15 AM File: c:\windows\system32\WINSTA.dll ok iSwift
1/16/2008 9:20:15 AM Running module: svchost.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\COMRes.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\WINTRUST.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:20:15 AM Running module: svchost.exe\ACTXPRXY.DLL ok scanned
1/16/2008 9:20:15 AM File: C:\WINDOWS\system32\ACTXPRXY.DLL ok scanned
1/16/2008 9:20:16 AM Running module: fxssvc.exe\fxssvc.exe ok scanned
1/16/2008 9:20:16 AM File: C:\WINDOWS\system32\fxssvc.exe ok scanned
1/16/2008 9:20:16 AM Running module: fxssvc.exe\ntdll.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\kernel32.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\MSVCP60.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\TAPI32.dll ok iChecker
1/16/2008 9:20:16 AM File: C:\WINDOWS\system32\TAPI32.dll ok iSwift
1/16/2008 9:20:16 AM Running module: fxssvc.exe\GDI32.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\USER32.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\rtutils.dll ok iChecker
1/16/2008 9:20:16 AM File: C:\WINDOWS\system32\rtutils.dll ok iSwift
1/16/2008 9:20:16 AM Running module: fxssvc.exe\WINMM.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\VERSION.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\ole32.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\credui.dll ok iChecker
1/16/2008 9:20:16 AM File: C:\WINDOWS\system32\credui.dll ok iSwift
1/16/2008 9:20:16 AM Running module: fxssvc.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\FXSEVENT.dll ok iChecker
1/16/2008 9:20:16 AM Running module: fxssvc.exe\FXSTIFF.dll ok scanned
1/16/2008 9:20:16 AM File: C:\WINDOWS\system32\FXSTIFF.dll ok scanned
1/16/2008 9:20:17 AM Running module: fxssvc.exe\FXSAPI.dll ok scanned
1/16/2008 9:20:17 AM File: C:\WINDOWS\system32\FXSAPI.dll ok scanned
1/16/2008 9:20:17 AM Running module: fxssvc.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\comctl32.dll ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\comctl32.dll ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\SAMLIB.dll ok iChecker
1/16/2008 9:20:17 AM Running module: fxssvc.exe\fxst30.dll ok scanned
1/16/2008 9:20:18 AM File: C:\WINDOWS\system32\fxst30.dll ok scanned
1/16/2008 9:20:18 AM Running module: fxssvc.exe\fxsroute.dll ok scanned
1/16/2008 9:20:18 AM File: C:\WINDOWS\system32\fxsroute.dll ok scanned
1/16/2008 9:20:18 AM Running module: fxssvc.exe\MPR.dll ok iChecker
1/16/2008 9:20:18 AM Running module: fxssvc.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:18 AM Running module: fxssvc.exe\Secur32.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\winss.exe ok scanned
1/16/2008 9:20:18 AM File: C:\Program Files\Microsoft Windows OneCare Live\winss.exe ok scanned
1/16/2008 9:20:18 AM Running module: winss.exe\ntdll.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\kernel32.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\MSVCR80.dll ok scanned
1/16/2008 9:20:18 AM Running module: winss.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\GDI32.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\USER32.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\ole32.dll ok iChecker
1/16/2008 9:20:18 AM Running module: winss.exe\WINSSCOMMON.dll ok scanned
1/16/2008 9:20:19 AM File: C:\Program Files\Microsoft Windows OneCare Live\WINSSCOMMON.dll ok scanned
1/16/2008 9:20:19 AM Running module: winss.exe\MSVCP80.dll ok scanned
1/16/2008 9:20:19 AM Running module: winss.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:19 AM Running module: winss.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:19 AM Running module: winss.exe\WTSAPI32.dll ok iChecker
1/16/2008 9:20:19 AM Running module: winss.exe\WINSTA.dll ok iChecker
1/16/2008 9:20:19 AM Running module: winss.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:19 AM Running module: winss.exe\USERENV.dll ok iChecker
1/16/2008 9:20:19 AM Running module: winss.exe\WinSSPlatform.dll ok scanned
1/16/2008 9:20:19 AM File: C:\Program Files\Microsoft Windows OneCare Live\WinSSPlatform.dll ok scanned
1/16/2008 9:20:19 AM Running module: winss.exe\WININET.dll ok scanned
1/16/2008 9:20:19 AM Running module: winss.exe\Normaliz.dll ok scanned
1/16/2008 9:20:19 AM Running module: winss.exe\iertutil.dll ok scanned
1/16/2008 9:20:19 AM Running module: winss.exe\VERSION.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\dbghelp.dll ok scanned
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\dbghelp.dll ok scanned
1/16/2008 9:20:20 AM Running module: winss.exe\MPR.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\Cert.dll ok scanned
1/16/2008 9:20:20 AM File: C:\Program Files\Microsoft Windows OneCare Live\Cert.dll ok scanned
1/16/2008 9:20:20 AM Running module: winss.exe\ConflictingAppModule.dll ok scanned
1/16/2008 9:20:20 AM File: C:\Program Files\Microsoft Windows OneCare Live\ConflictingAppModule.dll ok scanned
1/16/2008 9:20:20 AM Running module: winss.exe\WSOCK32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\WINHTTP.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\SensApi.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\ESENT.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\iphlpapi.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\urlmon.dll ok scanned
1/16/2008 9:20:20 AM Running module: winss.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\HTTPAPI.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\HTTPAPI.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\comctl32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\comctl32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\SAMLIB.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\secur32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\rsaenh.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\COMRes.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\msxml3.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\mswsock.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\DNSAPI.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\winrnr.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\netman.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\netman.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\MPRAPI.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\MPRAPI.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\ACTIVEDS.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\ACTIVEDS.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\adsldpc.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\adsldpc.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\ATL.DLL ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\rtutils.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\netshell.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\netshell.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\credui.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\RASAPI32.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\RASAPI32.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\rasman.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\rasman.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\TAPI32.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\WINMM.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\WZCSAPI.DLL ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\WZCSAPI.DLL ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\WZCSvc.DLL ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\WZCSvc.DLL ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\WMI.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\WMI.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\DHCPCSVC.DLL ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\system32\DHCPCSVC.DLL ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\wbemprox.dll ok scanned
1/16/2008 9:20:20 AM File: C:\WINDOWS\System32\wbem\wbemprox.dll ok scanned
1/16/2008 9:20:20 AM Running module: winss.exe\wbemcomn.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\wbemsvc.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\fastprox.dll ok iChecker
1/16/2008 9:20:20 AM File: C:\WINDOWS\System32\wbem\fastprox.dll ok iSwift
1/16/2008 9:20:20 AM Running module: winss.exe\MSVCP60.dll ok iChecker
1/16/2008 9:20:20 AM Running module: winss.exe\NTDSAPI.dll ok iChecker
1/16/2008 9:20:21 AM Running module: winss.exe\providers.dll ok scanned
1/16/2008 9:20:22 AM File: C:\Program Files\Microsoft Windows OneCare Live\providers.dll ok scanned
1/16/2008 9:20:22 AM Running module: winss.exe\ATL80.DLL ok scanned
1/16/2008 9:20:22 AM File: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL ok scanned
1/16/2008 9:20:22 AM Running module: winss.exe\POWRPROF.dll ok iChecker
1/16/2008 9:20:22 AM File: C:\WINDOWS\system32\POWRPROF.dll ok iSwift
1/16/2008 9:20:22 AM Running module: winss.exe\pdh.dll ok scanned
1/16/2008 9:20:23 AM File: C:\WINDOWS\system32\pdh.dll ok scanned
1/16/2008 9:20:23 AM Running module: winss.exe\comdlg32.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\ODBC32.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\odbcbcp.dll ok scanned
1/16/2008 9:20:23 AM File: C:\WINDOWS\system32\odbcbcp.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\sfc.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\sfc_os.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\WINTRUST.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\odbcint.dll ok iChecker
1/16/2008 9:20:23 AM Running module: winss.exe\MpClient.dll ok scanned
1/16/2008 9:20:23 AM Running module: winss.exe\cryptnet.dll ok iChecker
1/16/2008 9:20:24 AM Running module: winss.exe\BackupEngine.dll ok scanned
1/16/2008 9:20:24 AM File: C:\Program Files\Microsoft Windows OneCare Live\BackupEngine.dll ok scanned
1/16/2008 9:20:24 AM Running module: winss.exe\PRIMOSDK.dll ok scanned
1/16/2008 9:20:24 AM File: C:\Program Files\Microsoft Windows OneCare Live\PRIMOSDK.dll ok scanned
1/16/2008 9:20:24 AM Running module: winss.exe\VSSAPI.DLL ok iChecker
1/16/2008 9:20:24 AM Running module: winss.exe\msfwapi.dll ok scanned
1/16/2008 9:20:24 AM File: C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwapi.dll ok scanned
1/16/2008 9:20:24 AM Running module: winss.exe\MpsCatApi.DLL ok scanned
1/16/2008 9:20:24 AM File: C:\Program Files\Microsoft Windows OneCare Live\Firewall\MpsCatApi.DLL ok scanned
1/16/2008 9:20:24 AM Running module: winss.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:24 AM Running module: winss.exe\Cabinet.dll ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\msidcrl40.dll ok scanned
1/16/2008 9:20:25 AM File: C:\Program Files\Microsoft Windows OneCare Live\msidcrl40.dll ok scanned
1/16/2008 9:20:25 AM Running module: winss.exe\OLEACC.dll ok scanned
1/16/2008 9:20:25 AM File: C:\WINDOWS\system32\OLEACC.dll ok scanned
1/16/2008 9:20:25 AM Running module: winss.exe\PSAPI.DLL ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\rasadhlp.dll ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\es.dll ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\msv1_0.dll ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\wuapi.dll ok scanned
1/16/2008 9:20:25 AM File: C:\WINDOWS\system32\wuapi.dll ok scanned
1/16/2008 9:20:25 AM Running module: winss.exe\wups.dll ok scanned
1/16/2008 9:20:25 AM File: C:\WINDOWS\system32\wups.dll ok scanned
1/16/2008 9:20:25 AM Running module: winss.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\schannel.dll ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\dssenh.dll ok iChecker
1/16/2008 9:20:25 AM Running module: winss.exe\netfxperf.dll ok scanned
1/16/2008 9:20:25 AM File: C:\WINDOWS\system32\netfxperf.dll ok iChecker
1/16/2008 9:20:26 AM Running module: winss.exe\mscoree.dll ok scanned
1/16/2008 9:20:26 AM File: C:\WINDOWS\system32\mscoree.dll ok scanned
1/16/2008 9:20:26 AM Running module: winss.exe\perfcounter.dll ok scanned
1/16/2008 9:20:26 AM File: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\perfcounter.dll ok scanned
1/16/2008 9:20:26 AM Running module: winss.exe\mscorwks.dll ok scanned
1/16/2008 9:20:26 AM File: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll ok scanned
1/16/2008 9:20:27 AM Running module: winss.exe\CorperfmonExt.dll ok scanned
1/16/2008 9:20:27 AM File: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CorperfmonExt.dll ok scanned
1/16/2008 9:20:27 AM Running module: winss.exe\aspnet_perf.dll ok scanned
1/16/2008 9:20:27 AM File: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_perf.dll ok scanned
1/16/2008 9:20:28 AM Running module: winss.exe\query.dll ok scanned
1/16/2008 9:20:28 AM File: C:\WINDOWS\System32\query.dll ok scanned
1/16/2008 9:20:28 AM Running module: winss.exe\fxsperf.dll ok scanned
1/16/2008 9:20:28 AM File: C:\WINDOWS\system32\fxsperf.dll ok scanned
1/16/2008 9:20:28 AM Running module: winss.exe\sqlctr90.dll ok scanned
1/16/2008 9:20:28 AM File: C:\WINDOWS\system32\sqlctr90.dll ok scanned
1/16/2008 9:20:28 AM Running module: winss.exe\instapi.dll ok scanned
1/16/2008 9:20:28 AM File: c:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll ok scanned
1/16/2008 9:20:29 AM Running module: winss.exe\MSMAPI32.DLL ok scanned
1/16/2008 9:20:29 AM File: C:\PROGRA~1\COMMON~1\SYSTEM\MSMAPI\1033\MSMAPI32.DLL ok scanned
1/16/2008 9:20:30 AM Running module: winss.exe\mso.dll ok scanned
1/16/2008 9:20:32 AM File: C:\Program Files\Common Files\Microsoft Shared\office11\mso.dll ok scanned
1/16/2008 9:20:32 AM Running module: winss.exe\perfdisk.dll ok scanned
1/16/2008 9:20:32 AM File: C:\WINDOWS\system32\perfdisk.dll ok scanned
1/16/2008 9:20:32 AM Running module: winss.exe\perfnet.dll ok scanned
1/16/2008 9:20:32 AM File: C:\WINDOWS\system32\perfnet.dll ok scanned
1/16/2008 9:20:32 AM Running module: winss.exe\perfos.dll ok scanned
1/16/2008 9:20:32 AM File: C:\WINDOWS\system32\perfos.dll ok scanned
1/16/2008 9:20:32 AM Running module: winss.exe\perfproc.dll ok scanned
1/16/2008 9:20:32 AM File: C:\WINDOWS\system32\perfproc.dll ok scanned
1/16/2008 9:20:32 AM Running module: winss.exe\pschdprf.dll ok scanned
1/16/2008 9:20:32 AM File: C:\WINDOWS\system32\pschdprf.dll ok scanned
1/16/2008 9:20:32 AM Running module: winss.exe\TRAFFIC.dll ok scanned
1/16/2008 9:20:32 AM File: C:\WINDOWS\system32\TRAFFIC.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\rasctrs.dll ok scanned
1/16/2008 9:20:33 AM File: C:\WINDOWS\System32\rasctrs.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\rsvpperf.dll ok scanned
1/16/2008 9:20:33 AM File: C:\WINDOWS\System32\rsvpperf.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\tapiperf.dll ok scanned
1/16/2008 9:20:33 AM File: C:\WINDOWS\system32\tapiperf.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\Perfctrs.dll ok scanned
1/16/2008 9:20:33 AM File: C:\WINDOWS\system32\Perfctrs.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\perfts.dll ok scanned
1/16/2008 9:20:33 AM File: C:\WINDOWS\system32\perfts.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\UTILDLL.dll ok scanned
1/16/2008 9:20:33 AM File: C:\WINDOWS\system32\UTILDLL.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\wmiaprpl.dll ok scanned
1/16/2008 9:20:33 AM File: C:\WINDOWS\System32\wbem\wmiaprpl.dll ok scanned
1/16/2008 9:20:33 AM Running module: winss.exe\loadperf.dll ok scanned
1/16/2008 9:20:34 AM File: C:\WINDOWS\system32\loadperf.dll ok scanned
1/16/2008 9:20:34 AM Running module: wmpnetwk.exe\WMPNetwk.exe ok scanned
1/16/2008 9:20:35 AM File: C:\Program Files\Windows Media Player\WMPNetwk.exe ok scanned
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\ntdll.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\kernel32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\USER32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\GDI32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\ole32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\WINHTTP.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\WSOCK32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\IPHLPAPI.DLL ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\HTTPAPI.dll ok iChecker
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\wmpmde.dll ok scanned
1/16/2008 9:20:35 AM File: C:\WINDOWS\system32\wmpmde.dll ok scanned
1/16/2008 9:20:35 AM Running module: wmpnetwk.exe\MFPlat.DLL ok scanned
1/16/2008 9:20:35 AM File: C:\WINDOWS\system32\MFPlat.DLL ok scanned
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\USERENV.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\faultrep.dll ok scanned
1/16/2008 9:20:36 AM File: C:\WINDOWS\system32\faultrep.dll ok scanned
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\VERSION.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\WINSTA.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\WTSAPI32.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\comctl32.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\comctl32.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\SAMLIB.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\Secur32.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\COMRes.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\upnp.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\SSDPAPI.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\msi.dll ok scanned
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\SXS.DLL ok iChecker
1/16/2008 9:20:36 AM File: C:\WINDOWS\system32\SXS.DLL ok iSwift
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\mswsock.dll ok iChecker
1/16/2008 9:20:36 AM Running module: wmpnetwk.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:44 AM Running module: wmpnetwk.exe\wmp.dll ok scanned
1/16/2008 9:20:45 AM File: C:\WINDOWS\system32\wmp.dll ok scanned
1/16/2008 9:20:45 AM Running module: wmpnetwk.exe\MSVFW32.dll ok scanned
1/16/2008 9:20:45 AM File: C:\WINDOWS\system32\MSVFW32.dll ok scanned
1/16/2008 9:20:45 AM Running module: wmpnetwk.exe\WINMM.dll ok iChecker
1/16/2008 9:20:45 AM Running module: wmpnetwk.exe\dbghelp.dll ok iChecker
1/16/2008 9:20:45 AM Running module: wmpnetwk.exe\wmploc.dll ok scanned
1/16/2008 9:20:53 AM File: C:\WINDOWS\system32\wmploc.dll ok scanned
1/16/2008 9:20:55 AM Running module: wmpnetwk.exe\gdiplus.dll ok scanned
1/16/2008 9:20:55 AM File: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll ok scanned
1/16/2008 9:20:55 AM Running module: wmpnetwk.exe\ACTXPRXY.DLL ok iChecker
1/16/2008 9:20:55 AM Running module: wmpnetwk.exe\wmpps.dll ok scanned
1/16/2008 9:20:55 AM File: C:\WINDOWS\system32\wmpps.dll ok scanned
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\wmiprvse.exe ok scanned
1/16/2008 9:20:55 AM File: C:\WINDOWS\System32\wbem\wmiprvse.exe ok scanned
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\ntdll.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\kernel32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\USER32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\GDI32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\wbemcomn.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\ole32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\FastProx.dll ok iChecker
1/16/2008 9:20:55 AM File: C:\WINDOWS\System32\wbem\FastProx.dll ok iSwift
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\MSVCP60.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\NTDSAPI.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\DNSAPI.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\WLDAP32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\Secur32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\NCObjAPI.DLL ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\WINMM.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\VERSION.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\USERENV.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\comctl32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\comctl32.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\COMRes.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\wbemsvc.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\wmiutils.dll ok iChecker
1/16/2008 9:20:55 AM Running module: wmiprvse.exe\wmiprov.dll ok scanned
1/16/2008 9:20:56 AM File: C:\WINDOWS\System32\wbem\wmiprov.dll ok scanned
1/16/2008 9:20:56 AM Running module: wmiprvse.exe\WMI.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wmiprvse.exe\esscli.dll ok iChecker
1/16/2008 9:20:56 AM File: C:\WINDOWS\System32\wbem\esscli.dll ok iSwift
1/16/2008 9:20:56 AM Running module: wuauclt.exe\wuauclt.exe ok scanned
1/16/2008 9:20:56 AM File: C:\WINDOWS\system32\wuauclt.exe ok scanned
1/16/2008 9:20:56 AM Running module: wuauclt.exe\ntdll.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\kernel32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\ole32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\GDI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\USER32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WINMM.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\VERSION.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\USERENV.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\comctl32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\wuaueng.dll ok scanned
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\ESENT.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WTSAPI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WINSTA.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\NETAPI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\IPHLPAPI.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WINHTTP.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\WINTRUST.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\Cabinet.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\mspatcha.dll ok iChecker
1/16/2008 9:20:56 AM File: C:\WINDOWS\system32\mspatcha.dll ok iSwift
1/16/2008 9:20:56 AM Running module: wuauclt.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\COMRes.dll ok iChecker
1/16/2008 9:20:56 AM Running module: wuauclt.exe\wups2.dll ok scanned
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\SynTPLpr.exe ok scanned
1/16/2008 9:20:56 AM File: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe ok scanned
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\ntdll.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\kernel32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\USER32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\GDI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\ole32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\VERSION.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\COMRes.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\SynCOM.dll ok scanned
1/16/2008 9:20:56 AM File: C:\WINDOWS\system32\SynCOM.dll ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\SynTPFcs.dll ok scanned
1/16/2008 9:20:56 AM File: C:\WINDOWS\system32\SynTPFcs.dll ok scanned
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\msctfime.ime ok iChecker
1/16/2008 9:20:56 AM Running module: SynTPLpr.exe\MSCTF.dll ok scanned
1/16/2008 9:20:56 AM File: C:\WINDOWS\system32\MSCTF.dll ok scanned
1/16/2008 9:20:56 AM Running module: alg.exe\alg.exe ok scanned
1/16/2008 9:20:56 AM File: C:\WINDOWS\System32\alg.exe ok scanned
1/16/2008 9:20:56 AM Running module: alg.exe\ntdll.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\kernel32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\ATL.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\USER32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\GDI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\ole32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\WSOCK32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\WS2_32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\WS2HELP.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\MSWSOCK.DLL ok iChecker
1/16/2008 9:20:56 AM File: C:\WINDOWS\System32\MSWSOCK.DLL ok iSwift
1/16/2008 9:20:56 AM Running module: alg.exe\ShimEng.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\AcGenral.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\WINMM.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\MSACM32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\VERSION.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\USERENV.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\UxTheme.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\comctl32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\comctl32.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\COMRes.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\hnetcfg.dll ok iChecker
1/16/2008 9:20:56 AM Running module: alg.exe\wshtcpip.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\SynTPEnh.exe ok scanned
1/16/2008 9:20:57 AM File: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ok scanned
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\ntdll.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\kernel32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\USER32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\GDI32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\comdlg32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\COMCTL32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\ole32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\VERSION.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\WINMM.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\comctl32.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\COMRes.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\SynCOM.dll ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\msctfime.ime ok iChecker
1/16/2008 9:20:57 AM Running module: SynTPEnh.exe\SynTPAPI.dll ok scanned
1/16/2008 9:20:57 AM File: C:\WINDOWS\system32\SynTPAPI.dll ok scanned
1/16/2008 9:20:58 AM Running module: SynTPEnh.exe\SynTPFcs.dll ok scanned
1/16/2008 9:20:58 AM Running module: SynTPEnh.exe\MSCTF.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\atiptaxx.exe ok scanned
1/16/2008 9:20:58 AM File: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe ok scanned
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\ntdll.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\kernel32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\USER32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\GDI32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\VERSION.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\ole32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\comctl32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\comctl32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\ATRPUIXX.ENU ok scanned
1/16/2008 9:20:58 AM File: C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.ENU ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\COMRes.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\atipdsxx.dll ok scanned
1/16/2008 9:20:58 AM File: C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll ok scanned
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\msctfime.ime ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\atipdxxx.dll ok scanned
1/16/2008 9:20:58 AM File: C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll ok scanned
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\DINPUT8.dll ok scanned
1/16/2008 9:20:58 AM File: C:\WINDOWS\system32\DINPUT8.dll ok scanned
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\HID.DLL ok iChecker
1/16/2008 9:20:58 AM File: C:\WINDOWS\system32\HID.DLL ok iSwift
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\SETUPAPI.DLL ok iChecker
1/16/2008 9:20:58 AM File: C:\WINDOWS\system32\SETUPAPI.DLL ok iSwift
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\WINMM.DLL ok iChecker
1/16/2008 9:20:58 AM File: C:\WINDOWS\system32\WINMM.DLL ok iSwift
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\WINTRUST.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\CRYPT32.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\MSASN1.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\MSCTF.dll ok iChecker
1/16/2008 9:20:58 AM Running module: atiptaxx.exe\SynTPFcs.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\shwicon2k.exe ok scanned
1/16/2008 9:20:59 AM File: C:\Program Files\Digital Media Reader\shwicon2k.exe ok scanned
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\ntdll.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\kernel32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\USER32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\GDI32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\ole32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\COMCTL32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\IMM32.DLL ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\comctl32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\uxtheme.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\msctfime.ime ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\xpsp2res.dll ok iChecker
1/16/2008 9:20:59 AM Running module: shwicon2k.exe\MSCTF.dll ok iChecker
1/16/2008 9:20:59 AM Running module: WkUFind.exe\WkUFind.exe ok scanned
1/16/2008 9:20:59 AM File: C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe ok scanned
1/16/2008 9:20:59 AM Running module: WkUFind.exe\ntdll.dll ok iChecker
1/16/2008 9:20:59 AM Running module: WkUFind.exe\kernel32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: WkUFind.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: WkUFind.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\point32.exe ok scanned
1/16/2008 9:20:59 AM File: C:\Program Files\Microsoft IntelliPoint\point32.exe ok scanned
1/16/2008 9:20:59 AM Running module: point32.exe\ntdll.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\kernel32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\USER32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\GDI32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\RPCRT4.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\point32.dll ok scanned
1/16/2008 9:20:59 AM File: C:\Program Files\Microsoft IntelliPoint\point32.dll ok scanned
1/16/2008 9:20:59 AM Running module: point32.exe\HID.DLL ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\msvcrt.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\PSAPI.DLL ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\msi.dll ok scanned
1/16/2008 9:20:59 AM Running module: point32.exe\dpgmkb.dll ok scanned
1/16/2008 9:20:59 AM File: C:\Program Files\Microsoft IntelliPoint\dpgmkb.dll ok scanned
1/16/2008 9:20:59 AM Running module: point32.exe\VERSION.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\comdlg32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\COMCTL32.dll ok iChecker
1/16/2008 9:20:59 AM File: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll ok iSwift
1/16/2008 9:20:59 AM Running module: point32.exe\SHELL32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\ole32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\OLEACC.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\MSVCP60.dll ok iChecker
1/16/2008 9:20:59 AM Running module: point32.exe\dpgcmd.dll ok scanned
1/16/2008 9:21:00 AM File: C:\Program Files\Microsoft IntelliPoint\dpgcmd.dll ok scanned
1/16/2008 9:21:00 AM Running module: point32.exe\WINMM.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\uxtheme.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\msctfime.ime ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\srres.dll ok scanned
1/16/2008 9:21:00 AM File: C:\Program Files\Microsoft IntelliPoint\srres.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\ipres.dll ok scanned
1/16/2008 9:21:00 AM File: C:\Program Files\Microsoft IntelliPoint\ipres.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\WINTRUST.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\CRYPT32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\MSASN1.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:21:00 AM Running module: point32.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\PSDiagnostic.exe ok scanned
1/16/2008 9:21:00 AM File: C:\Program Files\Print Server\PTP\PSDiagnostic.exe ok scanned
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\ntdll.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\kernel32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\MYDLL.dll ok scanned
1/16/2008 9:21:00 AM File: C:\Program Files\Print Server\PTP\MYDLL.dll ok scanned
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\USER32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\GDI32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\comdlg32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\COMCTL32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\oledlg.dll ok scanned
1/16/2008 9:21:00 AM File: C:\WINDOWS\system32\oledlg.dll ok scanned
1/16/2008 9:21:00 AM Running module: PSDiagnostic.exe\ole32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\OLEPRO32.DLL ok scanned
1/16/2008 9:21:01 AM File: C:\WINDOWS\system32\OLEPRO32.DLL ok scanned
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\WSOCK32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\WS2_32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\WS2HELP.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\NETAPI32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\comctl32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\uxtheme.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\mswsock.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\hnetcfg.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\wshtcpip.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\msctfime.ime ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\DNSAPI.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\winrnr.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\WLDAP32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\rasadhlp.dll ok iChecker
1/16/2008 9:21:01 AM Running module: PSDiagnostic.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\ssmmgr.exe ok scanned
1/16/2008 9:21:01 AM File: C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe ok scanned
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\ntdll.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\kernel32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\WS2_32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\WS2HELP.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\USER32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\GDI32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\comdlg32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\COMCTL32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\oledlg.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\ole32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\OLEPRO32.DLL ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\comctl32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\uxtheme.dll ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\msctfime.ime ok iChecker
1/16/2008 9:21:01 AM Running module: SSMMgr.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\winssnotify.exe ok scanned
1/16/2008 9:21:01 AM File: C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe ok scanned
1/16/2008 9:21:01 AM Running module: winssnotify.exe\ntdll.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\kernel32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\MSVCR80.dll ok scanned
1/16/2008 9:21:01 AM Running module: winssnotify.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WinSSNotifyLib.dll ok scanned
1/16/2008 9:21:01 AM File: C:\Program Files\Microsoft Windows OneCare Live\WinSSNotifyLib.dll ok scanned
1/16/2008 9:21:01 AM Running module: winssnotify.exe\MSVCP80.dll ok scanned
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\GDI32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\USER32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\ole32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\gdiplus.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\COMCTL32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\UxTheme.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WINMM.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WINSSCOMMON.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WTSAPI32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WINSTA.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\NETAPI32.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\USERENV.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WinSSPlatform.dll ok iChecker
1/16/2008 9:21:01 AM Running module: winssnotify.exe\WININET.dll ok scanned
1/16/2008 9:21:02 AM Running module: winssnotify.exe\Normaliz.dll ok scanned
1/16/2008 9:21:02 AM Running module: winssnotify.exe\iertutil.dll ok scanned
1/16/2008 9:21:02 AM Running module: winssnotify.exe\VERSION.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\dbghelp.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\MPR.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\Cert.dll ok scanned
1/16/2008 9:21:02 AM Running module: winssnotify.exe\ProvidersClient.DLL ok scanned
1/16/2008 9:21:02 AM File: C:\Program Files\Microsoft Windows OneCare Live\ProvidersClient.DLL ok scanned
1/16/2008 9:21:02 AM Running module: winssnotify.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\msctfime.ime ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\SynTPFcs.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\COMRes.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\msxml3.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\Providers.DLL ok iChecker
1/16/2008 9:21:02 AM File: C:\Program Files\Microsoft Windows OneCare Live\Providers.DLL ok iSwift
1/16/2008 9:21:02 AM Running module: winssnotify.exe\ATL80.DLL ok scanned
1/16/2008 9:21:02 AM Running module: winssnotify.exe\POWRPROF.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\pdh.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\comdlg32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\ODBC32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\odbcbcp.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\CRYPT32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\MSASN1.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\sfc.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\sfc_os.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\WINTRUST.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\WSOCK32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\WS2_32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\WS2HELP.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\odbcint.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\rsaenh.dll ok iChecker
1/16/2008 9:21:02 AM Running module: winssnotify.exe\PSAPI.DLL ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\jusched.exe ok scanned
1/16/2008 9:21:02 AM File: C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe ok scanned
1/16/2008 9:21:02 AM Running module: jusched.exe\ntdll.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\kernel32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\GDI32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\USER32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\WININET.dll ok scanned
1/16/2008 9:21:02 AM Running module: jusched.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\Normaliz.dll ok scanned
1/16/2008 9:21:02 AM Running module: jusched.exe\iertutil.dll ok scanned
1/16/2008 9:21:02 AM Running module: jusched.exe\ole32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\comctl32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\comctl32.dll ok iChecker
1/16/2008 9:21:02 AM Running module: jusched.exe\uxtheme.dll ok iChecker
1/16/2008 9:21:02 AM Running module: WDEzLink.exe\WDEzLink.exe ok scanned
1/16/2008 9:21:03 AM File: C:\Program Files\Western Digital Technologies\NetCenter EasyLink\WDEzLink.exe ok scanned
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\ntdll.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\kernel32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\GDI32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\USER32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\iphlpapi.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\WS2_32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\WS2HELP.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\comdlg32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\COMCTL32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\WININET.dll ok scanned
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\Normaliz.dll ok scanned
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\iertutil.dll ok scanned
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\ole32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\MPR.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\comctl32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\uxtheme.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\SynTPFcs.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\VERSION.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\msctfime.ime ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\mswsock.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\DNSAPI.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\winrnr.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\WLDAP32.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\rasadhlp.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\hnetcfg.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\wshtcpip.dll ok iChecker
1/16/2008 9:21:03 AM Running module: WDEzLink.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:03 AM Running module: avp.exe\avp.exe ok scanned
1/16/2008 9:21:03 AM File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\avp.exe ok scanned
1/16/2008 9:21:03 AM Running module: avp.exe\ntdll.dll ok iChecker
1/16/2008 9:21:03 AM Running module: avp.exe\kernel32.dll ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\prremote.dll ok scanned
1/16/2008 9:21:04 AM File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\prremote.dll ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\USER32.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\GDI32.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\MSVCP80.dll ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\MSVCR80.dll ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\FSSync.dll ok scanned
1/16/2008 9:21:04 AM File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\FSSync.dll ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\ole32.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\comctl32.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\Secur32.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\uxtheme.dll ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\msctfime.ime ok iChecker
1/16/2008 9:21:04 AM Running module: avp.exe\AVPGS.PPL ok scanned
1/16/2008 9:21:04 AM File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\AVPGS.PPL ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\prloader.dll ok scanned
1/16/2008 9:21:04 AM File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\prloader.dll ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\prkernel.ppl ok scanned
1/16/2008 9:21:04 AM File: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\prkernel.ppl ok scanned
1/16/2008 9:21:04 AM Running module: avp.exe\userenv.dll ok iChecker
1/16/2008 9:21:04 AM File: C:\WINDOWS\system32\userenv.dll ok iSwift
1/16/2008 9:21:04 AM Running module: avp.exe\pxstub.ppl ok scanned
1/16/2008 9:21:05 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\pxstub.ppl ok scanned
1/16/2008 9:21:05 AM Running module: avp.exe\params.ppl ok scanned
1/16/2008 9:21:05 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\params.ppl ok scanned
1/16/2008 9:21:05 AM Running module: avp.exe\winreg.ppl ok scanned
1/16/2008 9:21:05 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\winreg.ppl ok scanned
1/16/2008 9:21:05 AM Running module: avp.exe\mkavio.ppl ok scanned
1/16/2008 9:21:05 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\mkavio.ppl ok scanned
1/16/2008 9:21:05 AM Running module: avp.exe\tempfile.ppl ok scanned
1/16/2008 9:21:05 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\tempfile.ppl ok scanned
1/16/2008 9:21:05 AM Running module: avp.exe\avpgui.ppl ok scanned
1/16/2008 9:21:06 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\avpgui.ppl ok scanned
1/16/2008 9:21:06 AM Running module: avp.exe\WININET.dll ok scanned
1/16/2008 9:21:06 AM Running module: avp.exe\Normaliz.dll ok scanned
1/16/2008 9:21:06 AM Running module: avp.exe\iertutil.dll ok scanned
1/16/2008 9:21:06 AM Running module: avp.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:06 AM Running module: avp.exe\nfio.ppl ok scanned
1/16/2008 9:21:06 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\nfio.ppl ok scanned
1/16/2008 9:21:06 AM Running module: avp.exe\fsdrvplg.ppl ok scanned
1/16/2008 9:21:06 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\fsdrvplg.ppl ok scanned
1/16/2008 9:21:07 AM Running module: avp.exe\basegui.ppl ok scanned
1/16/2008 9:21:07 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\basegui.ppl ok scanned
1/16/2008 9:21:07 AM Running module: avp.exe\VERSION.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\WS2_32.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\WS2HELP.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\SynTPFcs.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\COMRes.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\xpsp2res.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\thpimpl.ppl ok scanned
1/16/2008 9:21:07 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\thpimpl.ppl ok scanned
1/16/2008 9:21:07 AM Running module: avp.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\wtsapi32.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\WINSTA.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\NETAPI32.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\qb.ppl ok scanned
1/16/2008 9:21:07 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\qb.ppl ok scanned
1/16/2008 9:21:07 AM Running module: avp.exe\winmm.dll ok iChecker
1/16/2008 9:21:07 AM File: C:\WINDOWS\system32\winmm.dll ok iSwift
1/16/2008 9:21:07 AM Running module: avp.exe\WINTRUST.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\CRYPT32.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\MSASN1.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\wdmaud.drv ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\msacm32.drv ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\MSACM32.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\midimap.dll ok iChecker
1/16/2008 9:21:07 AM Running module: avp.exe\report.ppl ok scanned
1/16/2008 9:21:07 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\report.ppl ok scanned
1/16/2008 9:21:07 AM Running module: avp.exe\Comdlg32.dll ok iChecker
1/16/2008 9:21:07 AM File: C:\WINDOWS\system32\Comdlg32.dll ok iSwift
1/16/2008 9:21:07 AM Running module: avp.exe\appHelp.dll ok iChecker
1/16/2008 9:21:07 AM File: C:\WINDOWS\system32\appHelp.dll ok iSwift
1/16/2008 9:21:07 AM Running module: avp.exe\cscui.dll ok iChecker
1/16/2008 9:21:07 AM File: C:\WINDOWS\System32\cscui.dll ok iSwift
1/16/2008 9:21:07 AM Running module: avp.exe\CSCDLL.dll ok iChecker
1/16/2008 9:21:07 AM File: C:\WINDOWS\System32\CSCDLL.dll ok iSwift
1/16/2008 9:21:09 AM Running module: avp.exe\browseui.dll ok scanned
1/16/2008 9:21:09 AM File: C:\WINDOWS\System32\browseui.dll ok iChecker
1/16/2008 9:21:09 AM Running module: avp.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:21:09 AM Running module: avp.exe\ntshrui.dll ok scanned
1/16/2008 9:21:09 AM File: C:\WINDOWS\system32\ntshrui.dll ok scanned
1/16/2008 9:21:09 AM Running module: avp.exe\ATL.DLL ok iChecker
1/16/2008 9:21:10 AM Running module: avp.exe\shdocvw.dll ok scanned
1/16/2008 9:21:11 AM File: C:\WINDOWS\System32\shdocvw.dll ok scanned
1/16/2008 9:21:11 AM Running module: avp.exe\CRYPTUI.dll ok iChecker
1/16/2008 9:21:11 AM Running module: avp.exe\WLDAP32.dll ok iChecker
1/16/2008 9:21:15 AM Running module: avp.exe\ieframe.dll ok scanned
1/16/2008 9:21:21 AM File: C:\WINDOWS\system32\ieframe.dll ok scanned
1/16/2008 9:21:21 AM Running module: avp.exe\PSAPI.DLL ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\urlmon.dll ok scanned
1/16/2008 9:21:21 AM Running module: avp.exe\LINKINFO.dll ok scanned
1/16/2008 9:21:21 AM File: C:\WINDOWS\system32\LINKINFO.dll ok scanned
1/16/2008 9:21:21 AM Running module: avp.exe\MPR.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\drprov.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\ntlanman.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\NETUI0.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\NETUI1.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\NETRAP.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\SAMLIB.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\davclnt.dll ok iChecker
1/16/2008 9:21:21 AM Running module: avp.exe\PortableDeviceApi.dll ok scanned
1/16/2008 9:21:22 AM File: C:\WINDOWS\system32\PortableDeviceApi.dll ok scanned
1/16/2008 9:21:22 AM Running module: avp.exe\MSGINA.dll ok iChecker
1/16/2008 9:21:22 AM Running module: avp.exe\ODBC32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: avp.exe\odbcint.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\ctfmon.exe ok scanned
1/16/2008 9:21:22 AM File: C:\WINDOWS\system32\ctfmon.exe ok scanned
1/16/2008 9:21:22 AM Running module: ctfmon.exe\ntdll.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\kernel32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\USER32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\GDI32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\MSUTB.dll ok scanned
1/16/2008 9:21:22 AM File: C:\WINDOWS\system32\MSUTB.dll ok scanned
1/16/2008 9:21:22 AM Running module: ctfmon.exe\ShimEng.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\AcGenral.DLL ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\WINMM.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\ole32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\MSACM32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\VERSION.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\USERENV.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\UxTheme.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\comctl32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\SynTPFcs.dll ok iChecker
1/16/2008 9:21:22 AM Running module: ctfmon.exe\msctfime.ime ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\explorer.exe ok scanned
1/16/2008 9:21:22 AM File: C:\WINDOWS\explorer.exe ok scanned
1/16/2008 9:21:22 AM Running module: explorer.exe\ntdll.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\kernel32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\BROWSEUI.dll ok iChecker
1/16/2008 9:21:22 AM File: C:\WINDOWS\system32\BROWSEUI.dll ok iSwift
1/16/2008 9:21:22 AM Running module: explorer.exe\GDI32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\USER32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\ole32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\SHDOCVW.dll ok iChecker
1/16/2008 9:21:22 AM File: C:\WINDOWS\system32\SHDOCVW.dll ok iSwift
1/16/2008 9:21:22 AM Running module: explorer.exe\CRYPT32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\MSASN1.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\CRYPTUI.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\WINTRUST.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\IMAGEHLP.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\NETAPI32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\WININET.dll ok scanned
1/16/2008 9:21:22 AM Running module: explorer.exe\Normaliz.dll ok scanned
1/16/2008 9:21:22 AM Running module: explorer.exe\iertutil.dll ok scanned
1/16/2008 9:21:22 AM Running module: explorer.exe\WLDAP32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\VERSION.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\UxTheme.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\ShimEng.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\AcGenral.DLL ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\WINMM.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\MSACM32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\USERENV.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\comctl32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\comctl32.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\MSCTF.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\SynTPFcs.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\msctfime.ime ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\appHelp.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\COMRes.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\cscui.dll ok iChecker
1/16/2008 9:21:22 AM Running module: explorer.exe\CSCDLL.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\themeui.dll ok scanned
1/16/2008 9:21:23 AM File: C:\WINDOWS\System32\themeui.dll ok scanned
1/16/2008 9:21:23 AM Running module: explorer.exe\Secur32.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\MSIMG32.dll ok scanned
1/16/2008 9:21:23 AM File: C:\WINDOWS\System32\MSIMG32.dll ok scanned
1/16/2008 9:21:23 AM Running module: explorer.exe\xpsp2res.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\ACTXPRXY.DLL ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\msutb.dll ok iChecker
1/16/2008 9:21:23 AM File: C:\WINDOWS\System32\msutb.dll ok iSwift
1/16/2008 9:21:23 AM Running module: explorer.exe\msi.dll ok scanned
1/16/2008 9:21:23 AM Running module: explorer.exe\LINKINFO.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\ntshrui.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\ATL.DLL ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\SETUPAPI.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\ieframe.dll ok scanned
1/16/2008 9:21:23 AM Running module: explorer.exe\PSAPI.DLL ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\urlmon.dll ok scanned
1/16/2008 9:21:23 AM Running module: explorer.exe\MLANG.dll ok iChecker
1/16/2008 9:21:23 AM File: C:\WINDOWS\system32\MLANG.dll ok iSwift
1/16/2008 9:21:23 AM Running module: explorer.exe\MPR.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\drprov.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\ntlanman.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\NETUI0.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\NETUI1.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\NETRAP.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\SAMLIB.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\davclnt.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\ws2_32.dll ok iChecker
1/16/2008 9:21:23 AM File: C:\WINDOWS\system32\ws2_32.dll ok iSwift
1/16/2008 9:21:23 AM Running module: explorer.exe\WS2HELP.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\RASAPI32.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\rasman.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\TAPI32.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\rtutils.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\msv1_0.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\iphlpapi.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\sensapi.dll ok iChecker
1/16/2008 9:21:23 AM File: C:\WINDOWS\system32\sensapi.dll ok iSwift
1/16/2008 9:21:23 AM Running module: explorer.exe\mswsock.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\rasadhlp.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\DNSAPI.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\hnetcfg.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\wshtcpip.dll ok iChecker
1/16/2008 9:21:23 AM Running module: explorer.exe\WINSTA.dll ok iChecker
1/16/2008 9:21:24 AM Running module: explorer.exe\webcheck.dll ok scanned
1/16/2008 9:21:24 AM File: C:\WINDOWS\system32\webcheck.dll ok scanned
1/16/2008 9:21:24 AM Running module: explorer.exe\stobject.dll ok scanned
1/16/2008 9:21:24 AM File: C:\WINDOWS\System32\stobject.dll ok scanned
1/16/2008 9:21:24 AM Running module: explorer.exe\BatMeter.dll ok scanned
1/16/2008 9:21:25 AM File: C:\WINDOWS\System32\BatMeter.dll ok scanned
1/16/2008 9:21:25 AM Running module: explorer.exe\POWRPROF.dll ok iChecker
1/16/2008 9:21:25 AM File: C:\WINDOWS\System32\POWRPROF.dll ok iSwift
1/16/2008 9:21:25 AM Running module: explorer.exe\WTSAPI32.dll ok iChecker
1/16/2008 9:21:25 AM File: C:\WINDOWS\System32\WTSAPI32.dll ok iSwift
1/16/2008 9:21:25 AM Running module: explorer.exe\upnpui.dll ok scanned
1/16/2008 9:21:25 AM File: C:\WINDOWS\system32\upnpui.dll ok scanned
1/16/2008 9:21:25 AM Running module: explorer.exe\upnp.dll ok iChecker
1/16/2008 9:21:25 AM Running module: explorer.exe\WINHTTP.dll ok iChecker
1/16/2008 9:21:25 AM Running module: explorer.exe\SSDPAPI.dll ok iChecker
1/16/2008 9:21:25 AM Running module: explorer.exe\NETSHELL.dll ok iChecker
1/16/2008 9:21:25 AM File: C:\WINDOWS\system32\NETSHELL.dll ok iSwift
1/16/2008 9:21:25 AM Running module: explorer.exe\credui.dll ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\WPDShServiceObj.dll ok scanned
1/16/2008 9:21:26 AM File: C:\WINDOWS\system32\WPDShServiceObj.dll ok scanned
1/16/2008 9:21:26 AM Running module: explorer.exe\mydocs.dll ok scanned
1/16/2008 9:21:26 AM File: C:\WINDOWS\System32\mydocs.dll ok scanned
1/16/2008 9:21:26 AM Running module: explorer.exe\PortableDeviceTypes.dll ok scanned
1/16/2008 9:21:26 AM File: C:\WINDOWS\system32\PortableDeviceTypes.dll ok scanned
1/16/2008 9:21:26 AM Running module: explorer.exe\msxml3.dll ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\PortableDeviceApi.dll ok scanned
1/16/2008 9:21:26 AM Running module: explorer.exe\wdmaud.drv ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\msacm32.drv ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\midimap.dll ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\WZCSAPI.DLL ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\winrnr.dll ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\MPRAPI.dll ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\ACTIVEDS.dll ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\adsldpc.dll ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\fxsst.dll ok scanned
1/16/2008 9:21:26 AM File: C:\WINDOWS\system32\fxsst.dll ok scanned
1/16/2008 9:21:26 AM Running module: explorer.exe\WINSPOOL.DRV ok iChecker
1/16/2008 9:21:26 AM Running module: explorer.exe\FXSAPI.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\wmiapsrv.exe ok scanned
1/16/2008 9:21:26 AM File: C:\WINDOWS\System32\wbem\wmiapsrv.exe ok scanned
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\ntdll.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\kernel32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\msvcrt.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\ADVAPI32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\RPCRT4.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\USER32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\GDI32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\OLEAUT32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\ole32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\loadperf.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\wbemcomn.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\ShimEng.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\AcGenral.DLL ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\WINMM.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\MSACM32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\VERSION.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\SHELL32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\SHLWAPI.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\USERENV.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\UxTheme.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\IMM32.DLL ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\comctl32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\comctl32.dll ok iChecker
1/16/2008 9:21:26 AM Running module: wmiapsrv.exe\WMIApRes.dll ok scanned
1/16/2008 9:21:27 AM File: C:\WINDOWS\System32\wbem\WMIApRes.dll ok scanned
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\NTMARTA.DLL ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\WLDAP32.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\SAMLIB.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\PSAPI.DLL ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\xpsp2res.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\CLBCATQ.DLL ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\COMRes.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\wbemprox.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\WS2_32.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\WS2HELP.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\wbemsvc.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\fastprox.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\MSVCP60.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\NTDSAPI.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\DNSAPI.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\NETAPI32.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\Secur32.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\wmiutils.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\wmiprov.dll ok iChecker
1/16/2008 9:21:27 AM Running module: wmiapsrv.exe\WMI.dll ok iChecker
1/16/2008 9:21:29 AM File: c:\windows\system32\mmdrv.dll ok scanned
1/16/2008 9:21:29 AM File: c:\windows\system\timer.drv ok iSwift
1/16/2008 9:21:29 AM File: c:\windows\system32\mshta.exe ok iSwift
1/16/2008 9:21:29 AM File: C:\WINDOWS\system32\notepad.exe ok iSwift
1/16/2008 9:21:29 AM File: c:\windows\regedit.exe ok iSwift
1/16/2008 9:21:31 AM File: c:\program files\microsoft office\office11\msaccess.exe ok scanned
1/16/2008 9:21:32 AM File: C:\WINDOWS\system32\accwiz.exe ok scanned
1/16/2008 9:21:32 AM File: c:\program files\windows media player\wmplayer.exe ok scanned
1/16/2008 9:21:32 AM File: c:\windows\system32\rundll32.exe ok scanned
1/16/2008 9:21:32 AM File: c:\windows\system32\cryptext.dll ok scanned
1/16/2008 9:21:32 AM File: c:\program files\outlook express\wab.exe ok scanned
1/16/2008 9:21:33 AM File: c:\windows\hh.exe ok scanned
1/16/2008 9:21:33 AM File: c:\windows\system32\clipbrd.exe ok scanned
1/16/2008 9:21:35 AM File: c:\progra~1\micros~2\office11\excel.exe ok scanned
1/16/2008 9:21:35 AM File: C:\WINDOWS\system32\rundll32.exe ok iSwift
1/16/2008 9:21:35 AM File: c:\windows\system32\shimgvw.dll ok scanned
1/16/2008 9:21:35 AM File: c:\program files\microsoft office\office11\excel.exe ok iSwift
1/16/2008 9:21:36 AM File: C:\WINDOWS\system32\fontview.exe ok scanned
1/16/2008 9:21:40 AM File: c:\program files\poseidon for uml ce 3.0\poseidon for uml.exe ok scanned
1/16/2008 9:21:40 AM File: c:\windows\system32\msconf.dll ok scanned
1/16/2008 9:21:41 AM File: c:\windows\winhlp32.exe ok scanned
1/16/2008 9:21:42 AM File: C:\WINDOWS\system32\winhlp32.exe ok scanned
1/16/2008 9:21:42 AM File: c:\progra~1\micros~2\office11\outlook.exe ok scanned
1/16/2008 9:21:43 AM File: c:\program files\windows nt\hypertrm.exe ok scanned
1/16/2008 9:21:43 AM File: c:\program files\internet explorer\iexplore.exe ok scanned
1/16/2008 9:21:43 AM File: c:\program files\java\jre1.6.0_04\bin\javaw.exe ok scanned
1/16/2008 9:21:44 AM File: c:\program files\java\jre1.6.0_04\bin\javaws.exe ok scanned
1/16/2008 9:22:00 AM File: c:\program files\windows journal viewer\jntview.exe ok scanned
1/16/2008 9:22:05 AM File: C:\WINDOWS\system32\wscript.exe ok scanned
1/16/2008 9:22:05 AM File: c:\program files\microsoft office\office11\mstore.exe ok iSwift
1/16/2008 9:22:06 AM File: c:\program files\microsoft works\msworks.exe ok scanned
1/16/2008 9:22:47 AM File: C:\WINDOWS\system32\ntbackup.exe ok scanned
1/16/2008 9:22:47 AM File: C:\WINDOWS\system32\mmc.exe ok scanned
1/16/2008 9:22:47 AM File: c:\program files\microsoft office\office11\outlook.exe ok iSwift
1/16/2008 9:22:48 AM File: C:\WINDOWS\system32\shell32.dll ok iSwift
1/16/2008 9:22:48 AM File: C:\WINDOWS\system32\desk.cpl ok scanned
1/16/2008 9:22:48 AM File: c:\program files\microsoft office\office11\finder.exe ok scanned
1/16/2008 9:22:49 AM File: C:\WINDOWS\system32\rasphone.exe ok scanned
1/16/2008 9:22:49 AM File: C:\WINDOWS\system32\perfmon.exe ok scanned
1/16/2008 9:22:50 AM File: c:\program files\cyberlink\powerdvd\powerdvd.exe ok scanned
1/16/2008 9:22:50 AM File: c:\program files\common files\microsoft shared\shoebox\piolch.exe ok scanned
1/16/2008 9:22:55 AM File: c:\program files\microsoft office\office11\powerpnt.exe ok scanned
1/16/2008 9:22:56 AM File: c:\windows\system32\msrating.dll ok scanned
1/16/2008 9:22:57 AM File: c:\dba online\dba.exe ok scanned
1/16/2008 9:23:15 AM File: c:\program files\windows nt\accessories\wordpad.exe ok scanned
1/16/2008 9:23:20 AM File: c:\windows\notepad.exe ok iChecker
1/16/2008 9:23:20 AM File: c:\windows\explorer.exe ok iSwift
1/16/2008 9:23:22 AM File: c:\program files\cyberlink\common\updateipr.exe ok scanned
1/16/2008 9:23:23 AM File: C:\WINDOWS\system32\wpnpinst.exe ok scanned
1/16/2008 9:23:25 AM File: c:\program files\microsoft office\office11\winword.exe ok scanned
1/16/2008 9:23:26 AM File: c:\program files\common files\microsoft shared\office11\msoxmled.exe ok scanned
1/16/2008 9:23:26 AM File: c:\windows\system32\shell32.dll ok iSwift
1/16/2008 9:23:27 AM File: c:\windows\system32\drwtsn32.exe ok scanned
1/16/2008 9:23:27 AM File: c:\windows\system32\userinit.exe ok scanned
1/16/2008 9:23:27 AM File: c:\windows\system32\crypt32.dll ok iSwift
1/16/2008 9:23:27 AM File: c:\windows\system32\cryptnet.dll ok iSwift
1/16/2008 9:23:27 AM File: c:\windows\system32\cscdll.dll ok iSwift
1/16/2008 9:23:27 AM File: c:\windows\system32\wlnotify.dll ok iSwift
1/16/2008 9:23:27 AM File: c:\windows\system32\sclgntfy.dll ok scanned
1/16/2008 9:23:27 AM File: c:\windows\system32\wgalogon.dll ok iSwift
1/16/2008 9:23:27 AM File: c:\program files\synaptics\syntp\syntplpr.exe ok iSwift
1/16/2008 9:23:27 AM File: c:\program files\synaptics\syntp\syntpenh.exe ok iSwift
1/16/2008 9:23:28 AM File: c:\windows\system32\ati2mdxx.exe ok scanned
1/16/2008 9:23:28 AM File: c:\program files\ati technologies\ati control panel\atiptaxx.exe ok iSwift
1/16/2008 9:23:28 AM File: c:\program files\digital media reader\shwicon2k.exe ok iSwift
1/16/2008 9:23:28 AM File: c:\program files\common files\microsoft shared\works shared\wkufind.exe ok iSwift
1/16/2008 9:23:28 AM File: c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe ok scanned
1/16/2008 9:23:28 AM File: c:\program files\microsoft intellipoint\point32.exe ok iSwift
1/16/2008 9:23:28 AM File: c:\program files\print server\ptp\psdiagnostic.exe ok iSwift
1/16/2008 9:23:28 AM File: c:\windows\samsung\panelmgr\ssmmgr.exe ok iSwift
1/16/2008 9:23:28 AM File: c:\program files\adobe\reader 8.0\reader\reader_sl.exe ok scanned
1/16/2008 9:23:30 AM File: c:\program files\windows defender\msascui.exe packed file PE_Patch
1/16/2008 9:23:34 AM File: c:\program files\windows defender\msascui.exe//PE_Patch ok scanned
1/16/2008 9:23:34 AM File: c:\program files\windows defender\msascui.exe ok scanned
1/16/2008 9:23:35 AM File: c:\program files\efax messenger 4.3\j2gdllcmd.exe ok scanned
1/16/2008 9:23:35 AM File: c:\program files\microsoft windows onecare live\winssnotify.exe ok iSwift
1/16/2008 9:23:35 AM File: c:\program files\java\jre1.6.0_04\bin\jusched.exe ok iSwift
1/16/2008 9:23:35 AM File: c:\program files\western digital technologies\netcenter easylink\wdezlink.exe ok iSwift
1/16/2008 9:23:35 AM File: c:\program files\kaspersky lab\kaspersky anti-virus 6.0 sos\avp.exe ok iSwift
1/16/2008 9:23:35 AM File: c:\windows\system32\ctfmon.exe ok iSwift
1/16/2008 9:23:35 AM File: C:\WINDOWS\system32\alrsvc.dll ok scanned
1/16/2008 9:23:35 AM File: C:\WINDOWS\system32\audiosrv.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\qmgr.dll ok scanned
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\browser.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\cryptsvc.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\rpcss.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\dhcpcsvc.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\dmserver.dll ok scanned
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\dnsrslvr.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\ersvc.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\shsvcs.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\hidserv.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\w3ssl.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\srvsvc.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\wkssvc.dll ok iSwift
1/16/2008 9:23:36 AM File: C:\WINDOWS\system32\lmhsvc.dll ok iSwift
1/16/2008 9:23:37 AM File: C:\WINDOWS\system32\msgsvc.dll ok scanned
1/16/2008 9:23:37 AM File: C:\WINDOWS\system32\ntmssvc.dll ok scanned
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\rasauto.dll ok scanned
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\rasmans.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\mprdim.dll ok scanned
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\schedsvc.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\seclogon.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\sens.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\ipnathlp.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\ssdpsrv.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\wiaservc.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\tapisrv.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\termsrv.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\trkwks.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\upnphost.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\webclnt.dll ok iSwift
1/16/2008 9:23:38 AM File: C:\WINDOWS\system32\wbem\wmisvc.dll ok iSwift
1/16/2008 9:23:39 AM File: c:\windows\system32\mspmsnsv.dll ok scanned
1/16/2008 9:23:39 AM File: C:\WINDOWS\system32\wscsvc.dll ok iSwift
1/16/2008 9:23:40 AM File: C:\WINDOWS\system32\wudfsvc.dll ok scanned
1/16/2008 9:23:40 AM File: C:\WINDOWS\system32\wzcsvc.dll ok iSwift
1/16/2008 9:23:40 AM File: C:\WINDOWS\system32\xmlprov.dll ok scanned
1/16/2008 9:23:40 AM File: c:\program files\lavasoft\ad-aware 2007\aawservice.exe ok iSwift
1/16/2008 9:23:40 AM File: c:\windows\system32\drivers\abp480n5.sys ok scanned
1/16/2008 9:23:42 AM File: c:\windows\system32\drivers\acpi.sys ok scanned
1/16/2008 9:23:42 AM File: c:\windows\system32\drivers\acpiec.sys ok scanned
1/16/2008 9:23:42 AM File: c:\program files\common files\adobe systems shared\service\adobelmsvc.exe ok scanned
1/16/2008 9:23:43 AM File: c:\windows\system32\drivers\adpu160m.sys ok scanned
1/16/2008 9:23:43 AM File: c:\windows\system32\drivers\aeaudio.sys ok scanned
1/16/2008 9:23:43 AM File: c:\windows\system32\drivers\aec.sys ok scanned
1/16/2008 9:23:44 AM File: C:\WINDOWS\system32\drivers\afd.sys ok scanned
1/16/2008 9:23:44 AM File: c:\windows\system32\drivers\agp440.sys ok scanned
1/16/2008 9:23:44 AM File: c:\windows\system32\drivers\agpcpq.sys ok scanned
1/16/2008 9:23:45 AM File: c:\windows\system32\drivers\aha154x.sys ok scanned
1/16/2008 9:23:45 AM File: c:\windows\system32\drivers\aic78u2.sys ok scanned
1/16/2008 9:23:45 AM File: c:\windows\system32\drivers\aic78xx.sys ok scanned
1/16/2008 9:23:45 AM File: C:\WINDOWS\system32\alg.exe ok iSwift
1/16/2008 9:23:45 AM File: c:\windows\system32\drivers\ac97ali.sys packed file PE_Patch
1/16/2008 9:23:46 AM File: c:\windows\system32\drivers\ac97ali.sys//PE_Patch ok scanned
1/16/2008 9:23:46 AM File: c:\windows\system32\drivers\ac97ali.sys ok scanned
1/16/2008 9:23:46 AM File: c:\windows\system32\drivers\aliide.sys ok scanned
1/16/2008 9:23:47 AM File: c:\windows\system32\drivers\alim1541.sys ok scanned
1/16/2008 9:23:47 AM File: c:\windows\system32\drivers\amdagp.sys ok scanned
1/16/2008 9:23:47 AM File: c:\windows\system32\drivers\amdk7.sys ok scanned
1/16/2008 9:23:47 AM File: c:\windows\system32\drivers\amsint.sys ok scanned
1/16/2008 9:23:48 AM File: c:\windows\system32\drivers\arp1394.sys ok scanned
1/16/2008 9:23:48 AM File: c:\windows\system32\drivers\asc.sys ok iSwift
1/16/2008 9:23:48 AM File: c:\windows\system32\drivers\asc3350p.sys ok iSwift
1/16/2008 9:23:48 AM File: c:\windows\system32\drivers\asc3550.sys ok scanned
1/16/2008 9:23:49 AM File: C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe packed file PE_Patch
1/16/2008 9:23:49 AM File: C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe//PE_Patch ok scanned
1/16/2008 9:23:50 AM File: C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe ok scanned
1/16/2008 9:23:50 AM File: c:\windows\system32\drivers\asyncmac.sys ok iSwift
1/16/2008 9:23:52 AM File: c:\windows\system32\drivers\atapi.sys ok scanned
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\ati2mtag.sys ok scanned
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\atmarpc.sys ok iSwift
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\audstub.sys ok iSwift
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\bcmwl5.sys ok iSwift
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\bcm4sbxp.sys ok iSwift
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\atisgkaf.sys ok iSwift
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\cbidf2k.sys ok iSwift
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\cd20xrnt.sys ok scanned
1/16/2008 9:23:57 AM File: c:\windows\system32\drivers\cdrom.sys ok scanned
1/16/2008 9:23:57 AM File: C:\WINDOWS\system32\cisvc.exe ok scanned
1/16/2008 9:23:57 AM File: C:\WINDOWS\system32\clipsrv.exe ok scanned
1/16/2008 9:23:58 AM File: c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe ok scanned
1/16/2008 9:23:58 AM File: c:\windows\system32\drivers\cmbatt.sys ok scanned
1/16/2008 9:23:58 AM File: c:\windows\system32\drivers\cmdide.sys ok scanned
1/16/2008 9:23:58 AM File: c:\windows\system32\drivers\compbatt.sys ok scanned
1/16/2008 9:23:58 AM File: c:\windows\system32\dllhost.exe ok scanned
1/16/2008 9:23:59 AM File: c:\windows\system32\drivers\cpqarray.sys ok scanned
1/16/2008 9:23:59 AM File: c:\windows\system32\drivers\dac2w2k.sys ok scanned
1/16/2008 9:23:59 AM File: c:\windows\system32\drivers\dac960nt.sys ok scanned
1/16/2008 9:23:59 AM File: c:\windows\system32\drivers\dc21x4.sys ok scanned
1/16/2008 9:23:59 AM File: c:\windows\system32\drivers\dgivecp.sys ok scanned
1/16/2008 9:24:00 AM File: c:\windows\system32\drivers\disk.sys ok scanned
1/16/2008 9:24:00 AM File: C:\WINDOWS\system32\dmadmin.exe ok scanned
1/16/2008 9:24:05 AM File: c:\windows\system32\drivers\dmboot.sys packed file PE_Patch
1/16/2008 9:24:05 AM File: c:\windows\system32\drivers\dmboot.sys//PE_Patch ok scanned
1/16/2008 9:24:05 AM File: c:\windows\system32\drivers\dmboot.sys ok scanned
1/16/2008 9:24:06 AM File: c:\windows\system32\drivers\dmio.sys ok scanned
1/16/2008 9:24:08 AM File: c:\windows\system32\drivers\dmload.sys ok scanned
1/16/2008 9:24:12 AM File: c:\windows\system32\drivers\dmusic.sys ok scanned
1/16/2008 9:24:12 AM File: c:\windows\system32\drivers\dpti2o.sys ok scanned
1/16/2008 9:24:12 AM File: c:\windows\system32\drivers\drmkaud.sys ok scanned
1/16/2008 9:24:12 AM File: c:\windows\system32\drivers\emcfilt.sys ok scanned
1/16/2008 9:24:12 AM File: c:\windows\system32\svchost.exe ok iSwift
1/16/2008 9:24:12 AM File: c:\windows\system32\drivers\fdc.sys ok scanned
1/16/2008 9:24:13 AM File: c:\windows\system32\drivers\flpydisk.sys ok scanned
1/16/2008 9:24:14 AM File: c:\windows\system32\drivers\fltmgr.sys packed file PE_Patch
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\fltmgr.sys//PE_Patch ok scanned
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\fltmgr.sys ok scanned
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\ftdisk.sys ok scanned
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\gameenum.sys ok scanned
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\gearaspiwdm.sys ok scanned
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\msgpc.sys ok scanned
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\grmnusb.sys ok scanned
1/16/2008 9:24:15 AM File: c:\windows\system32\drivers\hidusb.sys ok scanned
1/16/2008 9:24:16 AM File: c:\windows\system32\drivers\hpn.sys ok scanned
1/16/2008 9:24:16 AM File: c:\windows\system32\drivers\hpzid412.sys ok scanned
1/16/2008 9:24:16 AM File: c:\windows\system32\drivers\hpzipr12.sys ok scanned
1/16/2008 9:24:16 AM File: c:\windows\system32\drivers\hpzius12.sys ok scanned
1/16/2008 9:24:17 AM File: c:\windows\system32\drivers\hsfhwali.sys ok scanned
1/16/2008 9:24:19 AM File: c:\windows\system32\drivers\hsf_dp.sys ok scanned
1/16/2008 9:24:19 AM File: c:\windows\system32\drivers\http.sys ok scanned
1/16/2008 9:24:19 AM File: c:\windows\system32\drivers\i2omp.sys ok scanned
1/16/2008 9:24:20 AM File: c:\windows\system32\drivers\i8042prt.sys ok scanned
1/16/2008 9:24:20 AM File: c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe ok scanned
1/16/2008 9:24:20 AM File: c:\windows\system32\drivers\imapi.sys ok scanned
1/16/2008 9:24:20 AM File: c:\windows\system32\imapi.exe ok scanned
1/16/2008 9:24:20 AM File: c:\windows\system32\drivers\ini910u.sys ok scanned
1/16/2008 9:24:20 AM File: c:\windows\system32\drivers\intelide.sys ok scanned
1/16/2008 9:24:20 AM File: c:\windows\system32\drivers\ip6fw.sys ok scanned
1/16/2008 9:24:21 AM File: c:\windows\system32\drivers\ipfltdrv.sys ok scanned
1/16/2008 9:24:21 AM File: c:\windows\system32\drivers\ipinip.sys ok scanned
1/16/2008 9:24:21 AM File: c:\windows\system32\drivers\ipnat.sys ok scanned
1/16/2008 9:24:21 AM File: c:\program files\ipod\bin\ipodservice.exe ok scanned
1/16/2008 9:24:21 AM File: c:\windows\system32\drivers\ipsec.sys ok scanned
1/16/2008 9:24:22 AM File: c:\windows\system32\drivers\irenum.sys ok scanned
1/16/2008 9:24:22 AM File: c:\windows\system32\drivers\isapnp.sys ok scanned
1/16/2008 9:24:22 AM File: c:\windows\system32\drivers\kbdclass.sys ok scanned
1/16/2008 9:24:22 AM File: c:\windows\system32\drivers\klif.sys ok scanned
1/16/2008 9:24:22 AM File: c:\windows\system32\drivers\kmixer.sys ok scanned
1/16/2008 9:24:23 AM File: C:\WINDOWS\system32\tcpsvcs.exe ok scanned
1/16/2008 9:24:23 AM File: c:\windows\system32\drivers\mdc8021x.sys ok scanned
1/16/2008 9:24:23 AM File: c:\windows\system32\drivers\mdmxsdk.sys ok scanned
1/16/2008 9:24:23 AM File: c:\windows\system32\mnmsrvc.exe ok scanned
1/16/2008 9:24:23 AM File: c:\windows\system32\drivers\mouclass.sys ok scanned
1/16/2008 9:24:23 AM File: c:\windows\system32\drivers\mouhid.sys ok scanned
1/16/2008 9:24:24 AM File: c:\windows\system32\drivers\mpfilter.sys packed file PE_Patch
1/16/2008 9:24:24 AM File: c:\windows\system32\drivers\mpfilter.sys//PE_Patch ok scanned
1/16/2008 9:24:24 AM File: c:\windows\system32\drivers\mpfilter.sys ok scanned
1/16/2008 9:24:24 AM File: c:\windows\system32\drivers\mraid35x.sys ok scanned
1/16/2008 9:24:24 AM File: c:\windows\system32\drivers\mrxdav.sys packed file PE_Patch
1/16/2008 9:24:24 AM File: c:\windows\system32\drivers\mrxdav.sys//PE_Patch ok scanned
1/16/2008 9:24:24 AM File: c:\windows\system32\drivers\mrxdav.sys ok scanned
1/16/2008 9:24:25 AM File: c:\windows\system32\drivers\mrxsmb.sys packed file PE_Patch
1/16/2008 9:24:25 AM File: c:\windows\system32\drivers\mrxsmb.sys//PE_Patch ok scanned
1/16/2008 9:24:25 AM File: c:\windows\system32\drivers\mrxsmb.sys ok scanned
1/16/2008 9:24:25 AM File: c:\windows\system32\msdtc.exe ok scanned
1/16/2008 9:24:25 AM File: c:\windows\system32\drivers\msfwdrv.sys ok scanned
1/16/2008 9:24:25 AM File: c:\windows\system32\drivers\msfwhlpr.sys ok scanned
1/16/2008 9:24:25 AM File: c:\program files\microsoft windows onecare live\firewall\msfwsvc.exe ok iSwift
1/16/2008 9:24:26 AM File: c:\windows\system32\msiexec.exe ok scanned
1/16/2008 9:24:26 AM File: c:\windows\system32\drivers\mskssrv.sys ok scanned
1/16/2008 9:24:26 AM File: c:\windows\system32\drivers\mspclock.sys ok scanned
1/16/2008 9:24:26 AM File: c:\windows\system32\drivers\mspqm.sys ok scanned
1/16/2008 9:24:26 AM File: c:\windows\system32\drivers\mssmbios.sys ok scanned
1/16/2008 9:24:29 AM File: c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe packed file PE_Patch
1/16/2008 9:24:52 AM File: c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe//PE_Patch ok scanned
1/16/2008 9:24:52 AM File: c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe ok scanned
1/16/2008 9:24:53 AM File: c:\program files\microsoft sql server\90\shared\sqladhlp90.exe packed file PE_Patch
1/16/2008 9:24:53 AM File: c:\program files\microsoft sql server\90\shared\sqladhlp90.exe//PE_Patch ok scanned
1/16/2008 9:24:53 AM File: c:\program files\microsoft sql server\90\shared\sqladhlp90.exe ok scanned
1/16/2008 9:24:53 AM File: c:\windows\system32\drivers\mxnic.sys ok scanned
1/16/2008 9:24:53 AM File: c:\windows\system32\drivers\ndistapi.sys ok scanned
1/16/2008 9:24:53 AM File: c:\windows\system32\drivers\ndisuio.sys ok scanned
1/16/2008 9:24:53 AM File: c:\windows\system32\drivers\ndiswan.sys ok scanned
1/16/2008 9:24:53 AM File: c:\windows\system32\drivers\netbios.sys ok scanned
1/16/2008 9:24:53 AM File: c:\windows\system32\drivers\netbt.sys ok scanned
1/16/2008 9:24:53 AM File: C:\WINDOWS\system32\netdde.exe ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\nic1394.sys ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\nv4_mini.sys ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\nwlnkflt.sys ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\nwlnkfwd.sys ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\ohci1394.sys ok scanned
1/16/2008 9:24:54 AM File: c:\program files\microsoft windows onecare live\antivirus\msmpeng.exe ok iSwift
1/16/2008 9:24:54 AM File: c:\program files\common files\microsoft shared\source engine\ose.exe ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\p2k.sys ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\p3.sys ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\palmusbd.sys ok scanned
1/16/2008 9:24:54 AM File: c:\windows\system32\drivers\parport.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\pci.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\pciide.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\pcmcia.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\perc2.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\perc2hib.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\hpzipm12.exe ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\point32.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\raspptp.sys ok scanned
1/16/2008 9:24:55 AM File: c:\program files\common files\new boundary\prismxl\prismxl.sys ok iSwift
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\processr.sys ok scanned
1/16/2008 9:24:55 AM File: c:\windows\system32\drivers\psched.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\ptilink.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\pxhelp20.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\ql1080.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\ql10wnt.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\ql12160.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\ql1240.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\ql1280.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\rasacd.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\rasl2tp.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\raspppoe.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\raspti.sys ok scanned
1/16/2008 9:24:56 AM File: c:\windows\system32\drivers\rdbss.sys ok scanned
1/16/2008 9:24:57 AM File: c:\windows\system32\drivers\rdpcdd.sys ok scanned
1/16/2008 9:24:57 AM File: c:\windows\system32\drivers\rdpdr.sys ok scanned
1/16/2008 9:24:57 AM File: c:\windows\system32\sessmgr.exe ok scanned
1/16/2008 9:24:57 AM File: c:\windows\system32\drivers\redbook.sys ok scanned
1/16/2008 9:24:57 AM File: C:\WINDOWS\system32\locator.exe ok scanned
1/16/2008 9:24:57 AM File: C:\WINDOWS\system32\rsvp.exe ok scanned
1/16/2008 9:24:57 AM File: C:\WINDOWS\system32\scardsvr.exe ok scanned
1/16/2008 9:24:57 AM File: C:\WINDOWS\system32\drivers\scsiport.sys ok scanned
1/16/2008 9:24:57 AM File: c:\windows\system32\drivers\secdrv.sys ok scanned
1/16/2008 9:24:57 AM File: c:\windows\system32\drivers\ser2plms.sys ok scanned
1/16/2008 9:24:58 AM File: c:\windows\system32\drivers\serenum.sys ok scanned
1/16/2008 9:24:58 AM File: c:\windows\system32\drivers\serial.sys ok scanned
1/16/2008 9:24:58 AM File: c:\windows\system32\drivers\sfdrv01.sys ok scanned
1/16/2008 9:24:58 AM File: c:\windows\system32\drivers\sfhlp02.sys ok scanned
1/16/2008 9:24:58 AM File: c:\windows\system32\drivers\sisagp.sys ok scanned
1/16/2008 9:24:58 AM File: c:\windows\system32\drivers\smwdm.sys ok scanned
1/16/2008 9:24:58 AM File: C:\WINDOWS\system32\snmp.exe ok iSwift
1/16/2008 9:24:59 AM File: C:\WINDOWS\system32\snmptrap.exe ok scanned
1/16/2008 9:24:59 AM File: c:\windows\system32\drivers\sparrow.sys packed file PE_Patch
1/16/2008 9:24:59 AM File: c:\windows\system32\drivers\sparrow.sys//PE_Patch ok scanned
1/16/2008 9:24:59 AM File: c:\windows\system32\drivers\sparrow.sys ok scanned
1/16/2008 9:24:59 AM File: c:\windows\system32\drivers\splitter.sys ok scanned
1/16/2008 9:24:59 AM File: c:\program files\microsoft sql server\90\shared\sqlbrowser.exe packed file PE_Patch
1/16/2008 9:24:59 AM File: c:\program files\microsoft sql server\90\shared\sqlbrowser.exe//PE_Patch ok scanned
1/16/2008 9:24:59 AM File: c:\program files\microsoft sql server\90\shared\sqlbrowser.exe ok scanned
1/16/2008 9:24:59 AM File: c:\program files\microsoft sql server\90\shared\sqlwriter.exe ok iSwift
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\sr.sys packed file PE_Patch
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\sr.sys//PE_Patch ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\sr.sys ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\srr.sys skipped locked
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\srv.sys ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\swenum.sys ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\swmidi.sys ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\symc810.sys ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\symc8xx.sys ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\sym_hi.sys ok scanned
1/16/2008 9:25:00 AM File: c:\windows\system32\drivers\sym_u3.sys ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\syntp.sys ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\sysaudio.sys ok scanned
1/16/2008 9:25:01 AM File: C:\WINDOWS\system32\smlogsvc.exe ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\tcpip.sys ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\termdd.sys ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\toside.sys ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\ultra.sys ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\update.sys ok scanned
1/16/2008 9:25:01 AM File: C:\WINDOWS\system32\ups.exe ok scanned
1/16/2008 9:25:01 AM File: c:\windows\system32\drivers\usbccgp.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbehci.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbhub.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbohci.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbprint.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbscan.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbser.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbstor.sys ok scanned
1/16/2008 9:25:02 AM File: c:\windows\system32\drivers\usbuhci.sys ok scanned
1/16/2008 9:25:03 AM File: C:\WINDOWS\system32\drivers\vga.sys ok scanned
1/16/2008 9:25:03 AM File: c:\windows\system32\drivers\viaagp.sys ok scanned
1/16/2008 9:25:03 AM File: c:\windows\system32\drivers\viaide.sys ok scanned
1/16/2008 9:25:03 AM File: C:\WINDOWS\system32\vssvc.exe ok scanned
1/16/2008 9:25:03 AM File: c:\windows\system32\drivers\wanarp.sys ok scanned
1/16/2008 9:25:03 AM File: c:\windows\system32\drivers\wdmaud.sys ok scanned
1/16/2008 9:25:03 AM File: c:\windows\system32\drivers\hsf_cnxt.sys ok scanned
1/16/2008 9:25:03 AM File: c:\program files\windows defender\msmpeng.exe ok scanned
1/16/2008 9:25:03 AM File: c:\program files\microsoft windows onecare live\winss.exe ok iSwift
1/16/2008 9:25:04 AM File: C:\WINDOWS\system32\bcmwltry.exe ok scanned
1/16/2008 9:25:04 AM File: c:\windows\system32\wbem\wmiapsrv.exe ok iSwift
1/16/2008 9:25:04 AM File: c:\program files\windows media player\wmpnetwk.exe ok iSwift
1/16/2008 9:25:04 AM File: c:\windows\system32\drivers\wudfpf.sys ok scanned
1/16/2008 9:25:04 AM File: c:\windows\system32\drivers\wudfrd.sys ok scanned
1/16/2008 9:25:05 AM File: c:\windows\system32\autochk.exe ok scanned
1/16/2008 9:25:05 AM File: c:\windows\system32\lsdelete.exe ok scanned
1/16/2008 9:25:05 AM File: c:\windows\system32\ieudinit.exe ok scanned
1/16/2008 9:25:05 AM File: c:\windows\inf\unregmp2.exe ok scanned
1/16/2008 9:25:05 AM File: c:\windows\system32\ie4uinit.exe ok scanned
1/16/2008 9:25:06 AM File: c:\windows\system32\iedkcs32.dll ok scanned
1/16/2008 9:25:06 AM File: C:\WINDOWS\system32\shmgrate.exe ok scanned
1/16/2008 9:25:06 AM File: C:\WINDOWS\system32\regsvr32.exe ok scanned
1/16/2008 9:25:06 AM File: C:\WINDOWS\system32\themeui.dll ok iSwift
1/16/2008 9:25:06 AM File: C:\Program Files\outlook express\setup50.exe ok scanned
1/16/2008 9:25:06 AM File: c:\windows\system32\user.exe ok scanned
1/16/2008 9:25:06 AM File: c:\windows\system32\advpack.dll ok scanned
1/16/2008 9:25:06 AM File: c:\windows\inf\msnetmtg.inf ok scanned
1/16/2008 9:25:06 AM File: c:\windows\inf\msmsgs.inf ok scanned
1/16/2008 9:25:07 AM File: c:\windows\inf\wmp11.inf ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system32\regsvr32.exe ok iSwift
1/16/2008 9:25:07 AM File: c:\windows\system32\mscories.dll ok scanned
1/16/2008 9:25:07 AM File: c:\windows\inf\fxsocm.inf ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system32\comm.drv ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system\vga.drv ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system\mmsystem.dll ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system\keyboard.drv ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system\mouse.drv ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system\wfwnet.drv ok scanned
1/16/2008 9:25:07 AM File: c:\windows\system32\progman.exe ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system\sound.drv ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system\system.drv ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\midimap.dll ok iSwift
1/16/2008 9:25:08 AM File: c:\windows\system32\imaadp32.acm ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\msadp32.acm ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\msg711.acm ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\msgsm32.acm ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\tssoft32.acm ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\iccvid.dll ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\msh263.drv ok scanned
1/16/2008 9:25:08 AM File: c:\windows\system32\ir32_32.dll ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\iyuv_32.dll ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\msrle32.dll ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\msvidc32.dll ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\msyuv.dll ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\tsbyuv.dll ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\msacm32.drv ok iSwift
1/16/2008 9:25:09 AM File: c:\windows\system32\msg723.acm ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\msh261.drv ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\msaud32.acm ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\sl_anet.acm ok scanned
1/16/2008 9:25:09 AM File: c:\windows\system32\l3codeca.acm ok scanned
1/16/2008 9:25:10 AM File: c:\windows\system32\ir41_32.ax ok scanned
1/16/2008 9:25:10 AM File: c:\windows\system32\iac25_32.ax ok scanned
1/16/2008 9:25:10 AM File: c:\windows\system32\ir50_32.dll ok scanned
1/16/2008 9:25:10 AM File: c:\windows\system32\wdmaud.drv ok iSwift
1/16/2008 9:25:10 AM File: c:\windows\system32\msnaudio.acm ok scanned
1/16/2008 9:25:10 AM File: c:\windows\system32\webcheck.dll ok iSwift
1/16/2008 9:25:10 AM File: c:\windows\system32\stobject.dll ok iSwift
1/16/2008 9:25:10 AM File: c:\windows\system32\upnpui.dll ok iSwift
1/16/2008 9:25:10 AM File: c:\windows\system32\wpdshserviceobj.dll ok iSwift
1/16/2008 9:25:10 AM File: c:\windows\system32\logon.scr ok scanned
1/16/2008 9:25:10 AM File: C:\WINDOWS\system32\logon.scr ok iSwift
1/16/2008 9:25:10 AM File: C:\WINDOWS\system32\browseui.dll ok iSwift
1/16/2008 9:25:10 AM File: c:\progra~1\wifd1f~1\mpshhook.dll ok scanned
1/16/2008 9:25:11 AM File: c:\progra~1\common~1\micros~1\webfol~1\msonsext.dll ok scanned
1/16/2008 9:25:11 AM File: c:\program files\microsoft office\office11\msohev.dll ok scanned
1/16/2008 9:25:11 AM File: c:\windows\system32\wmpshell.dll ok scanned
1/16/2008 9:25:11 AM File: c:\progra~1\micros~2\office11\mlshext.dll ok scanned
1/16/2008 9:25:11 AM File: c:\progra~1\micros~2\office11\olkfstub.dll ok scanned
1/16/2008 9:25:11 AM File: c:\windows\system32\dfshim.dll ok scanned
1/16/2008 9:25:11 AM File: c:\windows\system32\ieframe.dll ok iSwift
1/16/2008 9:25:12 AM File: c:\windows\system32\extmgr.dll ok scanned
1/16/2008 9:25:12 AM File: c:\windows\system32\occache.dll ok scanned
1/16/2008 9:25:12 AM File: C:\WINDOWS\system32\audiodev.dll ok scanned
1/16/2008 9:25:12 AM File: C:\WINDOWS\system32\wpdshext.dll ok scanned
1/16/2008 9:25:12 AM File: c:\program files\itunes\itunesminiplayer.dll ok scanned
1/16/2008 9:25:13 AM File: c:\windows\system32\wuaucpl.cpl ok scanned
1/16/2008 9:25:13 AM File: c:\program files\efax messenger 4.3\j2gshell.dll ok scanned
1/16/2008 9:25:13 AM File: C:\WINDOWS\system32\shimgvw.dll ok iSwift
1/16/2008 9:25:13 AM File: c:\program files\java\jre1.6.0_04\bin\ssv.dll ok scanned
1/16/2008 9:25:13 AM File: c:\program files\adobe\reader 8.0\reader\acrord32.exe ok scanned
1/16/2008 9:25:14 AM File: c:\program files\ahead\nero backitup\backitup.exe ok scanned
1/16/2008 9:25:15 AM File: c:\program files\msn gaming zone\windows\bckgzm.exe ok scanned
1/16/2008 9:25:16 AM File: c:\program files\bigfix\bigfix.exe ok scanned
1/16/2008 9:25:16 AM File: c:\program files\close combat iv\cc4.exe ok scanned
1/16/2008 9:25:16 AM File: c:\program files\msn gaming zone\windows\chkrzm.exe ok scanned
1/16/2008 9:25:16 AM File: c:\windows\system32\cmcfg32.dll ok scanned
1/16/2008 9:25:16 AM File: c:\program files\netmeeting\conf.exe ok scanned
1/16/2008 9:25:17 AM File: c:\program files\canon\canoscan toolbox ver4.1\cstbox.exe ok scanned
1/16/2008 9:25:17 AM File: c:\program files\common files\microsoft shared\help 8\dexplore.exe ok scanned
1/16/2008 9:25:34 AM File: c:\program files\windows nt\dialer.exe ok scanned
1/16/2008 9:25:38 AM File: c:\windows\system32\dxdiag.exe ok scanned
1/16/2008 9:25:40 AM File: c:\ffrma\ffrma2000.mde ok scanned
1/16/2008 9:25:41 AM File: c:\program files\mozilla firefox\firefox.exe ok scanned
1/16/2008 9:25:42 AM File: c:\program files\gamemapr\gamemapr\gamemapr.exe ok scanned
1/16/2008 9:25:42 AM File: c:\windows\pchealth\helpctr\binaries\helpctr.exe ok scanned
1/16/2008 9:25:43 AM File: c:\documents and settings\admin\desktop\hijackthis.exe packed file PE_Patch.UPX
1/16/2008 9:25:43 AM File: c:\documents and settings\admin\desktop\hijackthis.exe//PE_Patch.UPX packed file UPX
1/16/2008 9:25:43 AM File: c:\documents and settings\admin\desktop\hijackthis.exe//PE_Patch.UPX//UPX ok scanned
1/16/2008 9:25:43 AM File: c:\documents and settings\admin\desktop\hijackthis.exe//PE_Patch.UPX ok scanned
1/16/2008 9:25:43 AM File: c:\documents and settings\admin\desktop\hijackthis.exe ok scanned
1/16/2008 9:25:44 AM File: c:\program files\hp\digital imaging\album\hpqaprnt.exe ok scanned
1/16/2008 9:25:44 AM File: c:\program files\hp\digital imaging\unload\hpqcmon.exe ok scanned
1/16/2008 9:25:44 AM File: c:\program files\hp\digital imaging\unload\hpqphunl.exe ok scanned
1/16/2008 9:25:45 AM File: c:\program files\hp\digital imaging\bin\hpqthb08.exe ok scanned
1/16/2008 9:25:45 AM File: c:\program files\hp\digital imaging\unload\hpqunset.exe ok scanned
1/16/2008 9:25:45 AM File: c:\program files\msn gaming zone\windows\hrtzzm.exe ok scanned
1/16/2008 9:25:45 AM File: c:\program files\internet explorer\connection wizard\icwconn1.exe ok scanned
1/16/2008 9:25:46 AM File: c:\program files\internet explorer\connection wizard\icwconn2.exe ok scanned
1/16/2008 9:25:46 AM File: c:\program files\internet explorer\connection wizard\inetwiz.exe ok scanned
1/16/2008 9:25:46 AM File: c:\program files\internet explorer\connection wizard\isignup.exe ok scanned
1/16/2008 9:25:47 AM File: c:\program files\itunes\itunes.exe ok scanned
1/16/2008 9:25:47 AM File: C:\WINDOWS\system32\usmt\migwiz.exe ok scanned
1/16/2008 9:25:48 AM File: c:\program files\musicmatch\musicmatch jukebox\mmjb.exe ok scanned
1/16/2008 9:25:48 AM File: c:\program files\microsoft intellipoint\mousinfo.exe ok scanned
1/16/2008 9:25:50 AM File: c:\program files\movie maker\moviemk.exe ok scanned
1/16/2008 9:25:50 AM File: c:\program files\windows media player\mplayer2.exe ok scanned
1/16/2008 9:26:12 AM File: c:\windows\pchealth\helpctr\binaries\msconfig.exe ok scanned
1/16/2008 9:26:12 AM File: C:\Program Files\outlook express\msimn.exe ok iSwift
1/16/2008 9:26:31 AM File: c:\program files\common files\microsoft shared\msinfo\msinfo32.exe ok scanned
1/16/2008 9:26:31 AM File: c:\program files\microsoft money\system\msmoney.exe ok scanned
1/16/2008 9:26:32 AM File: c:\program files\messenger\msmsgs.exe ok scanned
1/16/2008 9:26:32 AM File: c:\program files\msn\msncorefiles\msn6.exe ok scanned
1/16/2008 9:26:53 AM File: c:\progra~1\common~1\micros~1\modi\11.0\mspview.exe ok scanned
1/16/2008 9:26:53 AM File: c:\program files\ahead\coverdesigner\coverdes.exe ok scanned
1/16/2008 9:26:54 AM File: c:\program files\ahead\nero\nero.exe ok scanned
1/16/2008 9:26:55 AM File: c:\program files\ahead\neroburnrights\neroburnrights.exe ok scanned
1/16/2008 9:26:57 AM File: c:\program files\ahead\nero startsmart\nerostartsmart.exe ok scanned
1/16/2008 9:26:58 AM File: c:\program files\hps simulations\north german plain '85\ngplain85.exe ok scanned
1/16/2008 9:26:59 AM File: c:\progra~1\micros~2\office11\ois.exe ok scanned
1/16/2008 9:27:21 AM File: C:\WINDOWS\system32\mspaint.exe ok scanned
1/16/2008 9:27:21 AM File: c:\program files\microsoft picture it! 9\pi.exe ok iSwift
1/16/2008 9:27:21 AM File: c:\program files\quicktime\pictureviewer.exe ok iSwift
1/16/2008 9:27:21 AM File: c:\program files\windows nt\pinball\pinball.exe ok iSwift
1/16/2008 9:27:21 AM File: c:\progra~1\micros~2\office11\powerpnt.exe ok iSwift
1/16/2008 9:27:21 AM File: c:\program files\quick64\quick64.exe ok iSwift
1/16/2008 9:27:21 AM File: c:\program files\quicktime\quicktimeplayer.exe ok scanned
1/16/2008 9:27:21 AM File: c:\program files\real\realplayer\realplay.exe ok scanned
1/16/2008 9:27:22 AM File: c:\program files\common files\real\update_ob\rnxproc.exe ok scanned
1/16/2008 9:27:22 AM File: c:\program files\msn gaming zone\windows\rvsezm.exe ok scanned
1/16/2008 9:27:22 AM File: c:\windows\system32\control.exe ok scanned
1/16/2008 9:27:22 AM File: c:\program files\msn gaming zone\windows\shvlzm.exe ok scanned
1/16/2008 9:27:23 AM File: c:\program files\microsoft streets and trips\streets.exe ok scanned
1/16/2008 9:27:24 AM File: c:\program files\swiftview\sview.exe ok scanned
1/16/2008 9:27:25 AM File: c:\program files\microsoft visual studio 8\common7\ide\vwdexpress.exe ok scanned
1/16/2008 9:27:25 AM File: C:\Program Files\outlook express\wab.exe ok iSwift
1/16/2008 9:27:25 AM File: C:\Program Files\outlook express\wabmig.exe ok scanned
1/16/2008 9:27:25 AM File: c:\progra~1\micros~2\office11\winword.exe ok iSwift
1/16/2008 9:27:25 AM File: c:\program files\microsoft works\wkplmstp.exe ok scanned
1/16/2008 9:27:25 AM File: c:\program files\microsoft works\wksab.exe ok scanned
1/16/2008 9:27:25 AM File: c:\program files\common files\microsoft shared\works shared\wkscal.exe ok scanned
1/16/2008 9:27:26 AM File: c:\program files\microsoft works\wksdb.exe ok scanned
1/16/2008 9:27:26 AM File: c:\program files\microsoft works\wkssb.exe ok scanned
1/16/2008 9:27:26 AM File: c:\program files\microsoft works\wksss.exe ok scanned
1/16/2008 9:27:27 AM File: c:\program files\microsoft works\wkswp.exe ok scanned
1/16/2008 9:27:27 AM File: c:\program files\microsoft works\wkwcestp.exe ok scanned
1/16/2008 9:27:28 AM File: c:\program files\ahead\wmpburn\wmpburn.exe ok scanned
1/16/2008 9:27:28 AM File: C:\Program Files\windows nt\accessories\wordpad.exe ok iSwift
1/16/2008 9:27:28 AM File: c:\windows\system32\ntsd.exe ok iSwift
1/16/2008 9:27:28 AM File: c:\windows\system32\java.exe ok iSwift
1/16/2008 9:27:28 AM File: c:\windows\system32\console.dll ok iSwift
1/16/2008 9:27:28 AM File: C:\WINDOWS\system32\shdocvw.dll ok iSwift
1/16/2008 9:27:28 AM File: c:\program files\java\jre1.6.0_04\bin\npjpi160_04.dll ok iSwift
1/16/2008 9:27:29 AM File: c:\progra~1\micros~2\office11\refiebar.dll ok scanned
1/16/2008 9:27:29 AM File: c:\progra~1\micros~2\office11\refbar.ico ok scanned
1/16/2008 9:27:29 AM File: c:\progra~1\micros~2\office11\refbarh.ico ok scanned
1/16/2008 9:27:29 AM File: c:\program files\real\realplayer\eb_act.ico ok scanned
1/16/2008 9:27:29 AM File: c:\program files\real\realplayer\eb_inact.ico ok scanned
1/16/2008 9:27:29 AM File: c:\windows\system32\shdocvw.dll ok iSwift
1/16/2008 9:27:50 AM File: C:\WINDOWS\network diagnostic\xpnetdiag.exe ok scanned
1/16/2008 9:27:50 AM File: c:\windows\system32\gwfspidgen.dll ok iSwift
1/16/2008 9:27:50 AM File: c:\windows\downloaded program files\legitcheckcontrol.dll ok scanned
1/16/2008 9:27:51 AM File: c:\windows\system32\legitcheckcontrol.dll ok scanned
1/16/2008 9:27:51 AM File: c:\windows\downloaded program files\yacscom.dll ok scanned
1/16/2008 9:27:51 AM File: c:\windows\opuc.dll ok scanned
1/16/2008 9:27:51 AM File: c:\windows\system32\msvcp60.dll ok iSwift
1/16/2008 9:27:51 AM File: c:\windows\downloaded program files\loginfo.dll ok scanned
1/16/2008 9:27:52 AM File: c:\windows\downloaded program files\sysinfo.dll ok scanned
1/16/2008 9:27:52 AM File: c:\windows\system32\wuweb.dll ok scanned
1/16/2008 9:27:52 AM File: c:\windows\system32\muweb.dll archive CAB
1/16/2008 9:27:52 AM File: c:\windows\system32\muweb.dll/Authorization.xml ok scanned
1/16/2008 9:27:52 AM File: c:\windows\system32\muweb.dll ok scanned
1/16/2008 9:27:52 AM File: c:\windows\downloaded program files\yacsui.dll ok scanned
1/16/2008 9:27:53 AM File: c:\windows\system32\weblaunch.ocx ok scanned
1/16/2008 9:27:53 AM File: c:\windows\downloaded program files\hpgetdownloadmanager.ocx ok scanned
1/16/2008 9:27:53 AM File: c:\windows\downloaded program files\rntx.dll ok scanned
1/16/2008 9:27:53 AM File: c:\windows\downloaded program files\msnchat45.ocx ok scanned
1/16/2008 9:27:54 AM File: c:\windows\system32\kaspersky lab\kaspersky online scanner\kavwebscan.dll ok scanned
1/16/2008 9:27:54 AM File: c:\windows\downlo~1\yacscom.dll ok iSwift
1/16/2008 9:27:54 AM File: c:\windows\downlo~1\sysinfo.dll ok iSwift
1/16/2008 9:27:54 AM File: c:\progra~1\swiftv~1\svocx.ocx ok scanned
1/16/2008 9:27:54 AM File: c:\windows\downlo~1\hpgetd~1.ocx ok iSwift
1/16/2008 9:27:54 AM File: c:\windows\downlo~1\rntx.dll ok iSwift
1/16/2008 9:27:55 AM File: c:\program files\apple software update\softwareupdate.exe ok scanned
1/16/2008 9:27:56 AM File: c:\program files\hp\{45b6180b-dcab-4093-8ee8-6164457517f0}\pexpress\hphped05.exe ok scanned
1/16/2008 9:27:56 AM File: C:\WINDOWS\system32\rsvpsp.dll ok iSwift
1/16/2008 9:27:56 AM File: C:\WINDOWS\system32\winrnr.dll ok iSwift
1/16/2008 9:27:56 AM File: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini ok iSwift
1/16/2008 9:27:56 AM File: c:\program files\efax messenger 4.3\j2gtray.exe ok iSwift
1/16/2008 9:27:56 AM File: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\eFax 4.3.lnk ok iSwift
1/16/2008 9:27:56 AM File: C:\Documents and Settings\Owner\Start Menu\Programs\Startup\desktop.ini ok iSwift
1/16/2008 9:27:56 AM File: C:\Documents and Settings\Admin\Start Menu\Programs\Startup\desktop.ini ok iSwift
1/16/2008 9:27:56 AM File: C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe ok iSwift
1/16/2008 9:27:56 AM File: C:\Program Files\Windows Media Player\wmpnetwk.exe ok iSwift
1/16/2008 9:27:56 AM File: C:\WINDOWS\system32\wbem\wmiprvse.exe ok iSwift
1/16/2008 9:27:56 AM File: C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe ok iSwift
1/16/2008 9:27:56 AM File: C:\WINDOWS\system32\wbem\wmiapsrv.exe ok iSwift
1/16/2008 9:27:56 AM File: C:\Program Files\Internet Explorer\iexplore.exe ok iSwift
1/16/2008 9:27:56 AM File: C:\System Volume Information\MountPointManagerRemoteDatabase ok scanned
1/16/2008 9:27:56 AM File: C:\System Volume Information\tracking.log ok scanned
1/16/2008 9:50:09 AM Logical disk sector: C ok scanned
1/16/2008 9:50:09 AM Logical disk sector: F ok scanned
1/16/2008 9:50:09 AM Physical disk sector: \Device\Harddisk2\DR3 ok scanned
1/16/2008 9:50:09 AM Physical disk sector: \Device\Harddisk0\DR0 ok scanned
1/16/2008 9:50:09 AM File: C:\AUTOEXEC.BAT ok iChecker
1/16/2008 9:50:09 AM File: C:\boot.ini ok scanned
1/16/2008 9:50:09 AM File: C:\CONFIG.SYS ok iChecker
1/16/2008 9:50:09 AM File: C:\DVDPATH.TXT ok scanned
1/16/2008 9:50:09 AM File: C:\hiberfil.sys skipped locked
1/16/2008 9:50:09 AM File: C:\hpcmerr.log ok iChecker
1/16/2008 9:50:09 AM File: C:\IO.SYS ok iChecker
1/16/2008 9:50:09 AM File: C:\IPH.PH ok scanned
1/16/2008 9:50:09 AM File: C:\ireland.gif ok scanned
1/16/2008 9:50:09 AM File: C:\MOVE_RECOVERY ok scanned
1/16/2008 9:50:09 AM File: C:\MSDOS.SYS ok iChecker
1/16/2008 9:50:51 AM File: C:\NTDETECT.COM ok scanned
1/16/2008 9:50:51 AM File: C:\ntldr ok scanned
1/16/2008 9:50:51 AM File: C:\pagefile.sys skipped locked
1/16/2008 9:50:51 AM File: C:\_Sid.txt ok scanned
1/16/2008 9:50:51 AM File: C:\Borland\JBuilder2005\samples\Welcome\Welcome.jpx.local~ ok scanned
1/16/2008 9:50:51 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~1~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~2~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~3~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~4~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~5~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~6~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~7~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\TestUI.java~8~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~10~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~11~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~12~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~13~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~14~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~15~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~6~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~7~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~8~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\borland\samples\welcome\WelcomeApp.java~9~ ok scanned
1/16/2008 9:50:52 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~14~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~15~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~16~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~17~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~18~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~19~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~20~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~21~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~22~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Client.java~23~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\DnDContainer.java~1~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\DnDContainer.java~2~ ok scanned
1/16/2008 9:50:53 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\DnDContainer.java~3~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\DnDContainer.java~4~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\DnDContainer.java~5~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\FieldEditor.java~1~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\IUserInterface.java~1~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\Lead.java~1~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\LeadDataSource.java~1~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\LeadDataSource.java~2~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\LeadDataSource.java~3~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\LeadList.java~1~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\bak\com\wfm\leadtracker\LeadList.java~2~ ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\borland\samples\welcome\TestUI.class ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\borland\samples\welcome\WelcomeApp.class ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\borland\samples\welcome\WelcomeFrame$1.class ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\borland\samples\welcome\WelcomeFrame$2.class ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\borland\samples\welcome\WelcomeFrame.class ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\wfm\leadtracker\Client.class ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\wfm\leadtracker\DnDContainer.class ok scanned
1/16/2008 9:50:54 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\wfm\leadtracker\IUserInterface.class ok scanned
1/16/2008 9:50:55 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\wfm\leadtracker\Lead.class ok scanned
1/16/2008 9:50:55 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\wfm\leadtracker\LeadDataSource.class ok scanned
1/16/2008 9:50:55 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\wfm\leadtracker\LeadList.class ok scanned
1/16/2008 9:50:56 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\com\wfm\ui\Selection.class ok scanned
1/16/2008 9:50:56 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\package cache\com.borland.samples.welcome.dep2 ok scanned
1/16/2008 9:50:56 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\package cache\com.wfm.leadtracker.dep2 ok scanned
1/16/2008 9:50:56 AM File: C:\Borland\JBuilder2005\samples\Welcome\classes\package cache\com.wfm.ui.dep2 ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\borland\samples\welcome.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\borland\samples\welcome\TestUI.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\borland\samples\welcome\WelcomeApp.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\borland\samples\welcome\WelcomeFrame.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\ui.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker\Client.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker\FieldEditor.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker\IUserInterface.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker\Lead.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker\LeadDataSource.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker\LeadDetail.html ok scanned
1/16/2008 9:50:57 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\leadtracker\LeadList.html ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\doc\com\wfm\ui\Selection.html ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\borland\samples\welcome\TestUI.java ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\borland\samples\welcome\WelcomeFrame.jbx ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\Client.java ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\DnDContainer.java ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\IUserInterface.java ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\Lead.java ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\LeadDataSource.java ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\LeadList.java ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\DnD\DnD.jpx ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\DnD\DnD.jpx.local ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\leadtracker\DnD\classes\cache files\DnD.index ok scanned
1/16/2008 9:50:58 AM File: C:\Borland\JBuilder2005\samples\Welcome\src\com\wfm\ui\Selection.java ok scanned
1/16/2008 9:50:58 AM File: C:\Bundle\Money\MONEY.MSI archive Embedded
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//BB_bmp2 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//BB_bmp1 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary8 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary9 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary10 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary11 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary12 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary13 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary14 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary15 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary16 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary17 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary18 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary19 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary20 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary21 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//Binary22 ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//bin.PidCa_dll ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//bin.WorksCA_dll ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//bin.MnyCA_dll ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//SetupIcon ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI//MnyIco.exe ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\Money\MONEY.MSI ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\PictureIt\AUTORUN.INF ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\PictureIt\README.HTM ok scanned
1/16/2008 9:50:59 AM File: C:\Bundle\PictureIt\README.TXT ok scanned
1/16/2008 9:51:00 AM File: C:\Bundle\PictureIt\SETUP.EXE ok scanned
1/16/2008 9:51:00 AM File: C:\Bundle\PictureIt\SUPPORT.TXT ok scanned


Statistics
----------
Object Scanned Detected Untreated Deleted Moved to Quarantine Archives Packed files Password protected Corrupted
------ ------- -------- --------- ------- ------------------- -------- ------------ ------------------ ---------


Settings
--------
Parameter Value
--------- -----
Security Level Recommended
Action Prompt for action when the scan is complete
Run mode Manually
File types Scan all files
Scan only new and changed files No
Scan archives All
Scan embedded OLE objects All
Skip if object is larger than No
Skip if scan takes longer than No
Parse email formats No
Scan password-protected archives No
Enable iChecker technology Yes
Enable iSwift technology Yes
Record information about dangerous objects to program statistics Yes
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm

Re: New Hijack this logfiel

Unread postby askey127 » January 19th, 2008, 10:31 am

billmonahan,
That scan was actually quite a good result.
-----------------------------------------------------------
Retrieve the Installed Programs List from CCleaner
Open CCleaner if it's not already running.
In the Left Pane, click Tools
Verify that Uninstall is highlighted in color, or click on it.
In the lower Right, click Save to Text File.
Pull down the arrow at the top of the Save dialog and choose Desktop as the location.
You can leave the filename as install.txt
Click Save
Exit CCleaner by clicking on the X button in the upper right of the CCleaner window.
-----------------------------------------------------------
Post a New HiJackThis Log

Reboot your computer. Start HijackThis .

Click Do System Scan and Save a Log File.
When the Scan is complete, select the whole log (Ctrl-A), copy and paste the log contents in a reply, along with the contents of CCleaner's install.txt..
askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: New Hijack this logfiel

Unread postby billmonahan » January 19th, 2008, 11:34 am

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:32:40 AM, on 1/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\avp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\System32\snmp.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Digital Media Reader\shwicon2k.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Print Server\PTP\PSDiagnostic.exe
C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\Program Files\Western Digital Technologies\NetCenter EasyLink\WDEzLink.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Documents and Settings\Admin\Desktop\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://url.adtrgt.com/cpv.jsp?p=112194& ... eyword=irs com&selectedListingId=6349671
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunKist] C:\Program Files\Digital Media Reader\shwicon2k.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe /autorun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [eFax 4.3] "C:\Program Files\eFax Messenger 4.3\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [WD NetCenter EasyLink] C:\Program Files\Western Digital Technologies\NetCenter EasyLink\WDEzLink.exe -s
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: eFax 4.3.lnk = C:\Program Files\eFax Messenger 4.3\J2GTray.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/ka ... nicode.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/ ... acscom.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2768004665
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2597940078
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {7DD62E58-5FA8-11D2-AFB7-00104B64F126} (Sview Control) - http://www.swiftview.com/product/public ... _green.exe
O16 - DPF: {93CEA8A4-6059-4E0B-ADDD-73848153DD5E} (CWebLaunchCtl Object) - http://support.gateway.com/eSupport/sta ... launch.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/check/netset/ ... downls.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/S ... anager.ocx
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - http://livenj01.custhelp.com/7530-b327h ... a/RntX.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\avp.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe (file missing)

--
End of file - 9268 bytes


Ad-Aware 2007
Adobe Flash Player 9 ActiveX
Adobe Reader 8.1.1
Adobe SVG Viewer 3.0
AOL Toolbar
AOL You've Got Pictures Screensaver
Apple Software Update
ATI Control Panel
ATI Display Driver
BCM Wireless Network Adapter
BigFix
Canon CanoScan Toolbox 4.1
CCleaner (remove only)
Close Combat IV
DBA Online
Digital Media Reader
DigitImg
Dynamic Draw Professional 4
eFax Messenger 4.3
Firefight 4.0
GameMapr
GameSpy Arcade
GTOneCare
GWCares
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 2.0.2
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB926239)
hpmdtab
HPS North German Plain '85
InterActual Player
Invasion Normandy Demo
iPod for Windows 2005-09-23
iPod for Windows 2005-11-17
IPP Port Monitor
iTunes
Java(TM) 6 Update 4
Kaspersky Anti-Virus 6.0 SOS
Kaspersky Online Scanner
Learn2 Player (Uninstall Only)
Linksys Bi-Admin
Linksys EasyLink Advisor 1.6 (0033)
Linksys PrintServer Driver
Memories Disc Creator 2.0
Microsoft .NET Framework 2.0
Microsoft ActiveX Control Pad
Microsoft Application Error Reporting
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft IntelliPoint 5.2
Microsoft Money 2004
Microsoft Money 2004 System Pack
Microsoft MSDN 2005 Express Edition - ENU
Microsoft Office Access 2003
Microsoft Office Standard Edition 2003
Microsoft Picture It! Photo Premium 9
Microsoft Protection Service
Microsoft SMaRT
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft Streets and Trips 2005 with USB GPS
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual Web Developer 2005 Express Edition - ENU
Microsoft Visual Web Developer 2005 Express Edition - ENU Service Pack 1 (KB926751)
Microsoft Windows Journal Viewer
Microsoft Windows Live OneCare Resources v2.0.2500.14
Microsoft Windows OneCare Live AntiSpyware and AntiVirus
Microsoft Windows OneCare Live v2.0.2500.14
Microsoft Windows OneCare Live v2.0.2500.14 Idcrl Install
Microsoft Works
Move Networks Player for Firefox
Mozilla Firefox (2.0.0.11)
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser (KB933579)
MUSICMATCH® Jukebox
Nero BurnRights
Nero OEM
NetCenter EasyLink
Norton 360
Open Office Source Clode Link
Photosmart 140,240,7200,7600,7700,7900 Series
Poseidon For UML CE 3.0
PowerDVD
Print Server Driver
PS7900
PSShortcuts
PSUsage
PX Engine
Quick64 v1.0 BETA (Full)
QuickTime
RealPlayer
Reverse Mortgage Analyzer 00
Reverse Mortgage Analyzer 2000
Samsung ML-2510 Series
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926247)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
SoftK56 Data Fax CARP
SoundMAX
Spelling Dictionaries Support For Adobe Reader 8
Steel Panthers World At War v8.20
Sun(TM) Download Manager 2.0
SwiftView Viewer
Synaptics Pointing Device Driver
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB900930)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB914882)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB923845)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Viewpoint Media Player
War Plan Orange
WebEx
WebFldrs XP
Windows Backup Utility
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live OneCare
Windows Media Format 11 runtime
Windows Media Player 11
Windows Movie Maker 2.0
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB887797
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
Yahoo! Install Manager
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm

Re: New Hijack this logfiel

Unread postby askey127 » January 19th, 2008, 1:51 pm

bill,
Your log show at least three Antivirus applications installed, and at least two are running the same time. (Live OneCare from Microsoft, Kaspersky, and Norton 360.)
Some of it has to go, or they will battle each other for control and leave you with a vulnerable and possibly unstable system.
When you go to Control Panel, Security Center, click the small down arrows to the right of the green (or red) ON/OFF indicator, and note what it says about the status and vendor of both the Firewall, and AntiVirus Protection.
Also please tell me if you actually use AOL.

We are going to remove some of the startup and helper entries. You can reset your homepage to google.com or something later, if you wish.
-----------------------------------------------------------
Remove log items with HighjackThis. Start HijackThis (or reveal.exe).
Click Do System Scan Only. When the Scan is complete, Check the following entries:
(Some of these lines may be missing)

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://url.adtrgt.com/cpv.jsp?p=112194& ... eyword=irs com&selectedListingId=6349671
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -

Make sure Every other window except HJT is closed (No other tabs showing in the bottom tray), and Click Fix Checked
Click the "X" in the upper right corner of the HiJackThis window to close it.

Please answer the questions above, reboot and supply a new HiJackThis log.
askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: New Hijack this logfiel

Unread postby billmonahan » January 19th, 2008, 5:04 pm

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://url.adtrgt.com/cpv.jsp?p=112194& ... eyword=irs com&selectedListingId=6349671

I notice that:
--------------------------------------
http://url.adtrgt.com/cpv.jsp?p=112194& ... eyword=irs com&selectedListingId=6349671
-------------------------------------

or something like it is usually in the popup window.
And this popped up while I was typing this:

--------------------------------------------------
http://url.adtrgt.com/cpv.jsp?p=112087& ... rd=malware removal&selectedListingId=6372876
-------------------------------------------------

Norton 360 has been removed and Microsoft Live OneCare was installed since my first post.

Firewall and Virus protection are provided by Microsoft Live OneCare.

I dont use AOL.

I thought you should see know this before doing any of the fix-it steps with the Hijack this
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm

Re: New Hijack this logfiel

Unread postby askey127 » January 19th, 2008, 5:37 pm

bill,
Thanks for the info.
OK, then we will alter our instructions as follows:
-----------------------------------------------------------
Remove log items with HighjackThis. Start HijackThis (or reveal.exe).
Click Do System Scan Only. When the Scan is complete, Check the following entries:
(Some of these lines may be missing)

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://url.adtrgt.com/cpv.jsp?p=112194& ... eyword=irs com&selectedListingId=6349671
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll (file missing)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 SOS\avp.exe

Make sure Every other window except HJT is closed (No other tabs showing in the bottom tray), and Click Fix Checked
Click the "X" in the upper right corner of the HiJackThis window to close it.
-----------------------------------------------------------
Remove Program(s) with CCleaner
Open CCleaner. In the Left Pane, click Tools. Verify that Uninstall is highlighted in color, or click on it.
Click and Highlight the Following Programs, one at a time, and click the Run Uninstaller button for each one.
Wait for completion of each one before highlighting and Uninstalling the next.
Ad-Aware 2007
AOL Toolbar
AOL You've Got Pictures Screensaver
Kaspersky Anti-Virus 6.0 SOS
Kaspersky Online Scanner

Take extra care in answering questions posed by any Uninstaller. Some questions may be worded to deceive you into Keeping the program.
-----------------------------------------------------------
Stop, Disable and Delete A Service
Go to Start, Run OR Start, Programs, Accessories, Command Prompt and type Services.msc and click OK.
Under the Extended Tab, Scroll down and find the service.

Symantec Lic NetConnect service
Click once on the service to highlight it.
Right-Click on the service. Click on Properties
Select the General tab.
Next to Service Status, click Stop.
Click the Arrow-down tab on the right-hand side of the Start-up Type box.
From the drop-down menu, click on Disabled
Click Apply , then OK

Delete the Service
Open HiJackThis. Click on Config, Misc Tools, Delete an NT Service
Type CLTNetCnService in the space provided and click OK
The program will ask you to REBOOT --- Accept.
Sign in to your usual account.
Using Windows Explorer, locate and DELETE the following folder (if it still is present):
C:\Program Files\Common Files\Symantec Shared\

Start HijackThis .
Click Do System Scan and Save a Log File.
When the Scan is complete, select the whole log (Ctrl-A), copy and paste the log contents in a reply.

Take a few minutes and see how it's running.
askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: New Hijack this logfiel

Unread postby billmonahan » January 19th, 2008, 10:34 pm

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:33:54 PM, on 1/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\System32\snmp.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Digital Media Reader\shwicon2k.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Print Server\PTP\PSDiagnostic.exe
C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\Program Files\Western Digital Technologies\NetCenter EasyLink\WDEzLink.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Documents and Settings\Admin\Desktop\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunKist] C:\Program Files\Digital Media Reader\shwicon2k.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe /autorun
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [eFax 4.3] "C:\Program Files\eFax Messenger 4.3\J2GDllCmd.exe" /R
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [WD NetCenter EasyLink] C:\Program Files\Western Digital Technologies\NetCenter EasyLink\WDEzLink.exe -s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: eFax 4.3.lnk = C:\Program Files\eFax Messenger 4.3\J2GTray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/ ... acscom.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 2768004665
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2597940078
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {7DD62E58-5FA8-11D2-AFB7-00104B64F126} (Sview Control) - http://www.swiftview.com/product/public ... _green.exe
O16 - DPF: {93CEA8A4-6059-4E0B-ADDD-73848153DD5E} (CWebLaunchCtl Object) - http://support.gateway.com/eSupport/sta ... launch.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/check/netset/ ... downls.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/S ... anager.ocx
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - http://livenj01.custhelp.com/7530-b327h ... a/RntX.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe (file missing)

--
End of file - 7589 bytes
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm

Re: New Hijack this logfiel

Unread postby askey127 » January 20th, 2008, 8:36 am

billmonahan,
If your machine is running smoothly, let's finish up with a few additional protections.
-----------------------------------------------------------
Reset System Restore Points
  • Click Start > Help and Support
  • Click on ->Undo changes to your computer with System Restore.
  • Click Create A Restore Point then click Next. Give it a name it and then click Create, then Close.
  • Close Help and Support Center.
  • Click Start | Run and type Cleanmgr
  • Select (C: ) then click OK.
  • Click the More Options tab.
  • Click Clean Up in the System Restore Section.
This will remove all previous restore points except the newly created one.
This System Restore sequence is not to be done regularly, but only as a Special Case after the removal of malware.
-----------------------------------------------------------
Install SpywareBlaster - SpywareBlaster will add a large list of programs and sites to your Internet Explorer settings that will protect you from accidentally running or downloading known malicious programs. Available from http://www.javacoolsoftware.com/spywareblaster.html
After the installation, click Download Latest Protection Updates. When it finishes, click Enable All Protection.
-----------------------------------------------------------
Download and Install a HOSTS File
A HOSTS file is a big list of bad web sites. The list has a specific format, a specific name, (name is just HOSTS with no file extension), and a specific location. Your machine always looks at that file in that location before connecting to a web site to verify the address. So the HOSTS listing can be used to "short circuit" a request to a bad website by giving it the address of your own machine.

Whatever list your HOSTS file has will be used by your browser. You can open the HOSTS file with Notepad and look at it.
In Windows XP, it is located in this folder ==> C:\Windows\System32\Drivers\etc\

Be sure to disable the service "DNS Client" FIRST to allow the use of large HOSTS files without slowdowns.
If this isn't done first, the next reboot may take a VERY LONG TIME.
This is how to do it. First be sure you are signed in as a user with administrative privileges:
Stop and Disable the DNS Client Service
Go to Start, Run and type Services.msc and click OK.
Under the Extended Tab, Scroll down and find this service.
DNS Client
Right-Click on the DNS Client Service. Choose Properties
Select the General tab. Click on the Stop button.
Click the Arrow-down tab on the right-hand side at the Start-up Type box.
From the drop-down menu, click on Manual
Click the Apply tab, then click OK


Download BlueTack's HOSTS Manager here, using Internet Explorer:
http://www.bluetack.co.uk/forums/index.php?act=dscript&CODE=showdetails&f_id=5
A short distance down the page in the center, click on the Download button.
Agree to the license.
On the next page, to the right side of where it says Download Estimates, right click on the underlined word "Hosts Manager" choose "Save Target As" and download the installer Hosts20setup.exe to your desktop.
Double click the Installer on your desktop and let it Install the Hosts Manager

After the installation is complete, click on the Hosts Manager icon on your desktop. (You can delete the Hosts Switch icon).
When the manager comes up, go to the left pane, and click Download.
It will load 70,000 lines or more. When it finishes, also in the left pane, click Replace, and then Save.
You can use this manager to handle your HOSTS file download, edits, and most any other HOSTS issue.

If you have a firewall, you may have to give permissions at various times to Unlock the present default HOSTS file and install the new one.
------------------------------------------------------------------------------------------------------------
If you are interested, extra information about HOSTS files :
Read an excellent tutorial about HOSTS files (the Bluetack version) here:
http://www.bluetack.co.uk/forums/index.php?showtopic=8406

There is a very detailed resource for those wanting to spend more time reading up, or to have as a reference:
http://www.bluetack.co.uk/forums/index.php?showtopic=8337

You can see another HOSTS file tutorial here : http://www.mvps.org/winhelp2002/hosts.htm
and choose to manually download and install the MVPS HOSTS File instead of using the BlueTack HOSTS.
The BlueTack version (70k+ entries) is more aggressive than the mvps (12k + entries), and targets adware sites as well as more dangerous ones.
-----------------------------------------------------------
Install WinPatrol - Download and Install the Free WinPatrol, and view Instructions here: http://www.winpatrol.com/winpatrol.html
- WinPatrol is an active program that drops a "Scotty Dog" icon into the system tray (right click to check/change status), allows you to monitor/edit startups, services, Browser helpers, and prompts for permission if any program tries to change your system.
If any additional issues or questions, please let me know.
askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: New Hijack this logfiel

Unread postby billmonahan » January 20th, 2008, 10:57 am

Pop-ups still happening - HOSTS file blocks any ads but the windows keep opening. :-( :cry:
billmonahan
Regular Member
 
Posts: 18
Joined: January 11th, 2008, 11:38 pm

Re: New Hijack this logfiel

Unread postby askey127 » January 20th, 2008, 11:19 am

bill,
We will find it.
----------------------------------------------------------
Download Deckard's System Scanner (DSS) from here http://www.techsupportforum.com/sectools/Deckard/dss.exe
and Save to your Desktop.
(Note: You must be logged onto an account with administrator privileges).
  • Close all applications and windows.
  • Double-click on dss.exe to run it, and follow the prompts. OK what it wants to do.
  • When the scan is complete, two text files will open
    main.txt <- this one will be maximized
    extra.txt <- this one will be minimized
    ( Default location for both files is C:\Deckard\SystemScanner\ )
  • Copy/Paste the contents of main.txt and extra.txt into your next post please.

askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA
Advertisement
Register to Remove

Next

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 360 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware