Thank you for helping...
log.txt:
Logfile of random's system information tool 1.06 (written by random/random)
Run by PPNesdore at 2009-05-10 18:46:15
Microsoft® Windows Vista™ Home Basic
System drive C: has 188 GB (83%) free of 228 GB
Total RAM: 958 MB (17% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:46:37 PM, on 5/10/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16830)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\AOL\1198447098\ee\aolsoftware.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Norton PC Checkup\CHECKUP.exe
c:\program files\common files\installshield\updateservice\isuspm.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\agent.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\PPNesdore\Desktop\RSIT.exe
C:\Windows\system32\UI0Detect.exe
C:\Program Files\Trend Micro\HijackThis\PPNesdore.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId= ... bd=0071218R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.yahoo.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.comR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O2 - BHO: (Gaming)2 - {971F630E-AD68-4d6e-B0C3-1C627AAC80F1} - C:\Program Files\GamingSquared\Gaming2\G2IE_v1042.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O3 - Toolbar: AIM Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1198447098\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US
ee://aol/imAppO4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aim toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: AIM Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll
O9 - Extra button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) -
http://upload.facebook.com/controls/200 ... oader5.cabO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
http://ak.exe.imgfarm.com/images/nocach ... .0.1.0.cabO16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) -
http://www2.snapfish.com/SnapfishActivia.cabO16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) -
http://lads.myspace.com/upload/MySpaceUploader1006.cabO16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) -
http://www.nick.com/common/groove/gx/GrooveAX27.cabO16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) -
http://games.myspace.com/Gameshell/Game ... meHost.cabO18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Windows\system32\AERTSrv.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD DE\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MrHealthy (MrHealthyService) - Symantec Corporation - C:\Program Files\Norton PC Checkup\executables\mrHealthy\MrHealthy.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security 14\PcCtlCom.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security 14\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security 14\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security 14\tmproxy.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 12020 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - c:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-12-18 501384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C554162-8CB7-45A4-B8F4-8EA1C75885F9}]
AOL Toolbar Launcher - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll [2007-10-10 1090912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{971F630E-AD68-4d6e-B0C3-1C627AAC80F1}]
(Gaming)2 - C:\Program Files\GamingSquared\Gaming2\G2IE_v1042.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-03 259696]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-05-05 668656]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-05-03 470512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\Program Files\Dell\BAE\BAE.dll [2006-11-09 98304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{DE9C389F-3316-41A7-809B-AA305ED9D922} - AIM Toolbar - C:\Program Files\AOL\AIM Toolbar 5.0\aoltb.dll [2007-10-10 1090912]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-05-03 259696]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2009-05-03 1006264]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-11-07 111936]
"dscactivate"=C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe [2007-11-15 16384]
"ECenter"=C:\Dell\E-Center\EULALauncher.exe [2007-05-25 17920]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-08-09 29744]
"HostManager"=C:\Program Files\Common Files\AOL\1198447098\ee\AOLSoftware.exe [2006-09-25 50736]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2006-10-03 81920]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-11-20 290088]
"pccguide.exe"=C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe [2007-08-27 1807696]
"PDVDDXSrv"=C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe [2006-10-20 118784]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-11-04 413696]
"RoxWatchTray"=C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [2006-11-05 221184]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2006-10-03 221184]
"DellSupportCenter"=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2007-11-15 202544]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-05-03 13535776]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-05-03 92704]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-17 4907008]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Aim6"=C:\Program Files\AIM6\aim6.exe [2008-01-03 50528]
"DellSupportCenter"=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2007-11-15 202544]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-12-18 68856]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 3 months======
2009-05-10 18:46:15 ----D---- C:\rsit
2009-05-06 17:02:21 ----D---- C:\Windows\Sun
2009-05-06 16:01:38 ----D---- C:\Windows\PCHEALTH
2009-05-06 10:03:44 ----HD---- C:\$AVG8.VAULT$
2009-05-06 08:14:16 ----A---- C:\Windows\system32\msshsq.dll
2009-05-06 06:24:51 ----A---- C:\Windows\system32\es.dll
2009-05-04 17:40:53 ----D---- C:\ProgramData\NVIDIA
2009-05-03 23:58:31 ----A---- C:\Windows\system32\winipsec.dll
2009-05-03 23:58:31 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-05-03 23:58:30 ----A---- C:\Windows\system32\polstore.dll
2009-05-03 23:58:30 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-05-03 23:47:01 ----A---- C:\Windows\system32\riched32.dll
2009-05-03 23:47:01 ----A---- C:\Windows\system32\riched20.dll
2009-05-03 23:46:57 ----A---- C:\Windows\system32\rasser.dll
2009-05-03 23:46:57 ----A---- C:\Windows\system32\rasdiag.dll
2009-05-03 23:46:57 ----A---- C:\Windows\system32\rascfg.dll
2009-05-03 23:46:56 ----A---- C:\Windows\system32\rasmxs.dll
2009-05-03 23:46:56 ----A---- C:\Windows\system32\netcfgx.dll
2009-05-03 23:46:55 ----A---- C:\Windows\system32\msftedit.dll
2009-05-03 23:46:54 ----A---- C:\Windows\system32\ipnathlp.dll
2009-05-03 23:46:54 ----A---- C:\Windows\system32\icsunattend.exe
2009-05-03 23:46:52 ----A---- C:\Windows\system32\wshqos.dll
2009-05-03 23:46:52 ----A---- C:\Windows\system32\traffic.dll
2009-05-03 23:46:51 ----A---- C:\Windows\system32\pacerprf.dll
2009-05-03 23:46:51 ----A---- C:\Windows\system32\localspl.dll
2009-05-03 23:46:50 ----A---- C:\Windows\system32\dps.dll
2009-05-03 23:46:50 ----A---- C:\Windows\system32\cdd.dll
2009-05-03 23:30:29 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-05-03 23:30:29 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-05-03 23:30:28 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-05-03 23:19:07 ----A---- C:\Windows\system32\msoert2.dll
2009-05-03 23:19:07 ----A---- C:\Windows\system32\msoeacct.dll
2009-05-03 23:19:07 ----A---- C:\Windows\system32\ACCTRES.dll
2009-05-03 23:08:23 ----A---- C:\Windows\system32\wtsapi32.dll
2009-05-03 23:08:17 ----A---- C:\Windows\system32\sysmain.dll
2009-05-03 23:08:15 ----A---- C:\Windows\system32\wlanhlp.dll
2009-05-03 23:08:15 ----A---- C:\Windows\system32\wlanapi.dll
2009-05-03 23:08:14 ----A---- C:\Windows\system32\wlansvc.dll
2009-05-03 23:08:14 ----A---- C:\Windows\system32\wlansec.dll
2009-05-03 23:08:14 ----A---- C:\Windows\system32\wlanmsm.dll
2009-05-03 22:57:41 ----A---- C:\Windows\system32\WebClnt.dll
2009-05-03 22:47:19 ----A---- C:\Windows\system32\csrsrv.dll
2009-05-03 22:47:18 ----A---- C:\Windows\system32\winsrv.dll
2009-05-03 22:13:17 ----A---- C:\Windows\system32\winhttp.dll
2009-05-03 22:02:53 ----A---- C:\Windows\system32\gdi32.dll
2009-05-03 21:49:22 ----A---- C:\Windows\system32\xolehlp.dll
2009-05-03 21:49:22 ----A---- C:\Windows\system32\msdtcprx.dll
2009-05-03 21:38:58 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-05-03 21:38:53 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-05-03 21:38:53 ----A---- C:\Windows\system32\gameux.dll
2009-05-03 21:33:32 ----A---- C:\Windows\system32\wmpeffects.dll
2009-05-03 21:29:47 ----A---- C:\Windows\system32\msxml3r.dll
2009-05-03 21:29:47 ----A---- C:\Windows\system32\msxml3.dll
2009-05-03 21:26:08 ----A---- C:\Windows\system32\msscp.dll
2009-05-03 21:22:14 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-05-03 21:18:35 ----A---- C:\Windows\system32\FirewallAPI.dll
2009-05-03 21:18:34 ----A---- C:\Windows\system32\wfapigp.dll
2009-05-03 21:18:34 ----A---- C:\Windows\system32\MPSSVC.dll
2009-05-03 21:18:34 ----A---- C:\Windows\system32\icfupgd.dll
2009-05-03 21:18:33 ----A---- C:\Windows\system32\cmifw.dll
2009-05-03 21:18:32 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-05-03 21:14:58 ----A---- C:\Windows\system32\netapi32.dll
2009-05-03 21:11:16 ----A---- C:\Windows\system32\tzres.dll
2009-05-03 21:06:46 ----A---- C:\Windows\system32\wmploc.DLL
2009-05-03 21:06:45 ----A---- C:\Windows\system32\wmp.dll
2009-05-03 21:06:45 ----A---- C:\Windows\system32\spwmp.dll
2009-05-03 21:06:44 ----A---- C:\Windows\system32\dxmasf.dll
2009-05-03 21:02:23 ----A---- C:\Windows\system32\shell32.dll
2009-05-03 20:51:37 ----A---- C:\Windows\system32\DWWIN.EXE
2009-05-03 20:48:20 ----A---- C:\Windows\explorer.exe
2009-05-03 20:38:07 ----A---- C:\Windows\system32\netcfg.exe
2009-05-03 20:38:06 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-05-03 20:38:06 ----A---- C:\Windows\system32\netiougc.exe
2009-05-03 20:34:37 ----A---- C:\Windows\system32\NlsLexicons0045.dll
2009-05-03 20:34:36 ----A---- C:\Windows\system32\NlsLexicons0049.dll
2009-05-03 20:34:36 ----A---- C:\Windows\system32\NlsLexicons0047.dll
2009-05-03 20:34:36 ----A---- C:\Windows\system32\NlsLexicons0046.dll
2009-05-03 20:34:36 ----A---- C:\Windows\system32\NlsLexicons0020.dll
2009-05-03 20:34:35 ----A---- C:\Windows\system32\NlsLexicons0039.dll
2009-05-03 20:34:35 ----A---- C:\Windows\system32\NlsLexicons0022.dll
2009-05-03 20:34:35 ----A---- C:\Windows\system32\NlsLexicons0021.dll
2009-05-03 20:34:34 ----A---- C:\Windows\system32\NlsLexicons0026.dll
2009-05-03 20:34:34 ----A---- C:\Windows\system32\NlsLexicons0024.dll
2009-05-03 20:34:33 ----A---- C:\Windows\system32\NlsLexicons0027.dll
2009-05-03 20:34:33 ----A---- C:\Windows\system32\NlsLexicons0010.dll
2009-05-03 20:34:32 ----A---- C:\Windows\system32\NlsLexicons0018.dll
2009-05-03 20:34:32 ----A---- C:\Windows\system32\NlsLexicons0013.dll
2009-05-03 20:34:32 ----A---- C:\Windows\system32\NlsLexicons0011.dll
2009-05-03 20:34:31 ----A---- C:\Windows\system32\NlsLexicons0019.dll
2009-05-03 20:34:31 ----A---- C:\Windows\system32\NlsLexicons0001.dll
2009-05-03 20:34:30 ----A---- C:\Windows\system32\NlsLexicons0003.dll
2009-05-03 20:34:30 ----A---- C:\Windows\system32\NlsLexicons0002.dll
2009-05-03 20:34:29 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-05-03 20:34:29 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-05-03 20:34:28 ----A---- C:\Windows\system32\NlsLexicons004c.dll
2009-05-03 20:34:28 ----A---- C:\Windows\system32\NlsLexicons004b.dll
2009-05-03 20:34:28 ----A---- C:\Windows\system32\NlsLexicons004a.dll
2009-05-03 20:34:27 ----A---- C:\Windows\system32\NlsLexicons004e.dll
2009-05-03 20:34:27 ----A---- C:\Windows\system32\NlsLexicons003e.dll
2009-05-03 20:34:27 ----A---- C:\Windows\system32\NlsLexicons002a.dll
2009-05-03 20:34:27 ----A---- C:\Windows\system32\NlsLexicons001a.dll
2009-05-03 20:34:26 ----A---- C:\Windows\system32\NlsLexicons001d.dll
2009-05-03 20:34:26 ----A---- C:\Windows\system32\NlsLexicons001b.dll
2009-05-03 20:34:25 ----A---- C:\Windows\system32\NlsLexicons000d.dll
2009-05-03 20:34:25 ----A---- C:\Windows\system32\NlsLexicons000c.dll
2009-05-03 20:34:25 ----A---- C:\Windows\system32\NlsLexicons000a.dll
2009-05-03 20:34:24 ----A---- C:\Windows\system32\NlsLexicons000f.dll
2009-05-03 20:34:23 ----A---- C:\Windows\system32\NlsLexicons0416.dll
2009-05-03 20:34:23 ----A---- C:\Windows\system32\NlsLexicons0414.dll
2009-05-03 20:34:22 ----A---- C:\Windows\system32\NlsModels0011.dll
2009-05-03 20:34:22 ----A---- C:\Windows\system32\NlsLexicons081a.dll
2009-05-03 20:34:22 ----A---- C:\Windows\system32\NlsLexicons0816.dll
2009-05-03 20:34:21 ----A---- C:\Windows\system32\NlsData0046.dll
2009-05-03 20:34:21 ----A---- C:\Windows\system32\NlsData0045.dll
2009-05-03 20:34:19 ----A---- C:\Windows\system32\NlsData0049.dll
2009-05-03 20:34:19 ----A---- C:\Windows\system32\NlsData0047.dll
2009-05-03 20:34:18 ----A---- C:\Windows\system32\NlsData0039.dll
2009-05-03 20:34:17 ----A---- C:\Windows\system32\NlsData0020.dll
2009-05-03 20:34:16 ----A---- C:\Windows\system32\NlsData0022.dll
2009-05-03 20:34:16 ----A---- C:\Windows\system32\NlsData0021.dll
2009-05-03 20:34:15 ----A---- C:\Windows\system32\NlsData0026.dll
2009-05-03 20:34:15 ----A---- C:\Windows\system32\NlsData0024.dll
2009-05-03 20:34:14 ----A---- C:\Windows\system32\NlsData0027.dll
2009-05-03 20:34:13 ----A---- C:\Windows\system32\NlsData0011.dll
2009-05-03 20:34:13 ----A---- C:\Windows\system32\NlsData0010.dll
2009-05-03 20:34:12 ----A---- C:\Windows\system32\NlsData0018.dll
2009-05-03 20:34:12 ----A---- C:\Windows\system32\NlsData0013.dll
2009-05-03 20:34:11 ----A---- C:\Windows\system32\NlsData0019.dll
2009-05-03 20:34:11 ----A---- C:\Windows\system32\NlsData0000.dll
2009-05-03 20:34:10 ----A---- C:\Windows\system32\NlsData0001.dll
2009-05-03 20:34:09 ----A---- C:\Windows\system32\NlsData0003.dll
2009-05-03 20:34:09 ----A---- C:\Windows\system32\NlsData0002.dll
2009-05-03 20:34:08 ----A---- C:\Windows\system32\NlsData0009.dll
2009-05-03 20:34:08 ----A---- C:\Windows\system32\NlsData0007.dll
2009-05-03 20:34:07 ----A---- C:\Windows\system32\NlsData004b.dll
2009-05-03 20:34:07 ----A---- C:\Windows\system32\NlsData004a.dll
2009-05-03 20:34:05 ----A---- C:\Windows\system32\NlsData004c.dll
2009-05-03 20:34:04 ----A---- C:\Windows\system32\NlsData004e.dll
2009-05-03 20:34:03 ----A---- C:\Windows\system32\NlsData003e.dll
2009-05-03 20:34:03 ----A---- C:\Windows\system32\NlsData002a.dll
2009-05-03 20:34:02 ----A---- C:\Windows\system32\NlsData001a.dll
2009-05-03 20:34:01 ----A---- C:\Windows\system32\NlsData001d.dll
2009-05-03 20:34:01 ----A---- C:\Windows\system32\NlsData001b.dll
2009-05-03 20:34:00 ----A---- C:\Windows\system32\NlsData000c.dll
2009-05-03 20:34:00 ----A---- C:\Windows\system32\NlsData000a.dll
2009-05-03 20:33:59 ----A---- C:\Windows\system32\NlsData000f.dll
2009-05-03 20:33:59 ----A---- C:\Windows\system32\NlsData000d.dll
2009-05-03 20:33:58 ----A---- C:\Windows\system32\NlsData0416.dll
2009-05-03 20:33:58 ----A---- C:\Windows\system32\NlsData0414.dll
2009-05-03 20:33:57 ----A---- C:\Windows\system32\NlsData081a.dll
2009-05-03 20:33:57 ----A---- C:\Windows\system32\NlsData0816.dll
2009-05-03 20:33:57 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-05-03 20:33:56 ----A---- C:\Windows\system32\NlsLexicons0c1a.dll
2009-05-03 20:33:55 ----A---- C:\Windows\system32\NlsData0c1a.dll
2009-05-03 20:24:05 ----A---- C:\Windows\system32\setupapi.dll
2009-05-03 20:22:54 ----A---- C:\Windows\system32\srdelayed.exe
2009-05-03 20:22:54 ----A---- C:\Windows\system32\srcore.dll
2009-05-03 20:22:54 ----A---- C:\Windows\system32\srclient.dll
2009-05-03 20:22:54 ----A---- C:\Windows\system32\rstrui.exe
2009-05-03 20:22:53 ----A---- C:\Windows\system32\wpd_ci.dll
2009-05-03 20:22:53 ----A---- C:\Windows\system32\kd1394.dll
2009-05-03 20:22:52 ----A---- C:\Windows\system32\winresume.exe
2009-05-03 20:22:52 ----A---- C:\Windows\system32\winload.exe
2009-05-03 20:22:51 ----A---- C:\Windows\system32\ci.dll
2009-05-03 20:22:50 ----A---- C:\Windows\system32\cfgmgr32.dll
2009-05-03 20:22:49 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-05-03 20:22:49 ----A---- C:\Windows\system32\drvinst.exe
2009-05-03 20:22:48 ----A---- C:\Windows\system32\oleaut32.dll
2009-05-03 20:22:48 ----A---- C:\Windows\system32\nshhttp.dll
2009-05-03 20:22:48 ----A---- C:\Windows\system32\kbd106n.dll
2009-05-03 20:22:48 ----A---- C:\Windows\system32\dpx.dll
2009-05-03 20:22:47 ----A---- C:\Windows\system32\unlodctr.exe
2009-05-03 20:22:47 ----A---- C:\Windows\system32\lodctr.exe
2009-05-03 20:22:47 ----A---- C:\Windows\system32\loadperf.dll
2009-05-03 20:22:46 ----A---- C:\Windows\system32\prflbmsg.dll
2009-05-03 20:22:45 ----A---- C:\Windows\system32\schedsvc.dll
2009-05-03 20:22:43 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-05-03 20:22:43 ----A---- C:\Windows\system32\dispci.dll
2009-05-03 20:22:43 ----A---- C:\Windows\system32\batt.dll
2009-05-03 20:16:47 ----A---- C:\Windows\system32\rpcss.dll
2009-05-03 20:16:47 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-05-03 20:16:47 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-05-03 20:16:46 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-05-03 20:16:45 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-05-03 20:16:41 ----A---- C:\Windows\system32\sdohlp.dll
2009-05-03 20:16:41 ----A---- C:\Windows\system32\iasrecst.dll
2009-05-03 20:16:41 ----A---- C:\Windows\system32\iasdatastore.dll
2009-05-03 20:16:41 ----A---- C:\Windows\system32\iasads.dll
2009-05-03 20:08:33 ----A---- C:\Windows\system32\WMASF.DLL
2009-05-03 20:08:33 ----A---- C:\Windows\system32\LAPRXY.DLL
2009-05-03 20:08:33 ----A---- C:\Windows\system32\asferror.dll
2009-05-03 20:05:59 ----A---- C:\Windows\system32\kernel32.dll
2009-05-03 20:05:58 ----A---- C:\Windows\system32\secur32.dll
2009-05-03 20:05:58 ----A---- C:\Windows\system32\lsass.exe
2009-05-03 20:05:58 ----A---- C:\Windows\system32\lsasrv.dll
2009-05-03 20:05:57 ----A---- C:\Windows\system32\apilogen.dll
2009-05-03 20:05:57 ----A---- C:\Windows\system32\amxread.dll
2009-05-03 20:03:04 ----A---- C:\Windows\system32\SLC.dll
2009-05-03 20:03:04 ----A---- C:\Windows\system32\mcbuilder.exe
2009-05-03 20:03:03 ----A---- C:\Windows\system32\slwmi.dll
2009-05-03 20:03:02 ----A---- C:\Windows\system32\SLUI.exe
2009-05-03 20:03:02 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-05-03 20:03:01 ----A---- C:\Windows\system32\SLUINotify.dll
2009-05-03 20:03:01 ----A---- C:\Windows\system32\SLLUA.exe
2009-05-03 20:03:00 ----A---- C:\Windows\system32\SLsvc.exe
2009-05-03 20:03:00 ----A---- C:\Windows\system32\slcinst.dll
2009-05-03 20:00:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-05-03 20:00:09 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-05-03 20:00:08 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-05-03 19:56:39 ----A---- C:\Windows\system32\ntprint.exe
2009-05-03 19:56:39 ----A---- C:\Windows\system32\ntprint.dll
2009-05-03 19:56:38 ----A---- C:\Windows\system32\dhcpcmonitor.dll
2009-05-03 19:56:37 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-05-03 19:56:37 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-05-03 19:56:37 ----A---- C:\Windows\system32\authui.dll
2009-05-03 19:56:35 ----A---- C:\Windows\system32\avicap32.dll
2009-05-03 19:56:34 ----A---- C:\Windows\system32\msvidc32.dll
2009-05-03 19:56:34 ----A---- C:\Windows\system32\msvfw32.dll
2009-05-03 19:56:34 ----A---- C:\Windows\system32\msrle32.dll
2009-05-03 19:56:34 ----A---- C:\Windows\system32\mciavi32.dll
2009-05-03 19:56:34 ----A---- C:\Windows\system32\avifil32.dll
2009-05-03 19:56:33 ----A---- C:\Windows\system32\sendmail.dll
2009-05-03 19:50:30 ----A---- C:\Windows\system32\win32spl.dll
2009-05-03 19:50:30 ----A---- C:\Windows\system32\printcom.dll
2009-05-03 19:45:53 ----A---- C:\Windows\system32\wshrm.dll
2009-05-03 19:40:53 ----A---- C:\Windows\system32\sbunattend.exe
2009-05-03 19:29:32 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-05-03 19:29:32 ----A---- C:\Windows\system32\dnscacheugc.exe
2009-05-03 19:29:32 ----A---- C:\Windows\system32\dnsapi.dll
2009-05-03 19:20:01 ----A---- C:\Windows\system32\schannel.dll
2009-05-03 18:48:28 ----A---- C:\Windows\system32\icardres.dll
2009-05-03 18:48:28 ----A---- C:\Windows\system32\icardagt.exe
2009-05-03 18:48:27 ----A---- C:\Windows\system32\infocardapi.dll
2009-05-03 18:48:08 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-05-03 18:47:58 ----A---- C:\Windows\system32\PresentationHost.exe
2009-05-03 18:47:57 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-05-03 18:47:57 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-05-03 18:21:01 ----A---- C:\Windows\system32\dfshim.dll
2009-05-03 18:20:59 ----A---- C:\Windows\system32\netfxperf.dll
2009-05-03 18:20:51 ----A---- C:\Windows\system32\mscoree.dll
2009-05-03 18:20:50 ----A---- C:\Windows\system32\mscorier.dll
2009-05-03 18:20:49 ----A---- C:\Windows\system32\mscories.dll
2009-05-03 17:59:54 ----A---- C:\Windows\system32\rrinstaller.exe
2009-05-03 17:59:54 ----A---- C:\Windows\system32\mfps.dll
2009-05-03 17:59:54 ----A---- C:\Windows\system32\mfpmp.exe
2009-05-03 17:59:54 ----A---- C:\Windows\system32\mferror.dll
2009-05-03 17:59:54 ----A---- C:\Windows\system32\mf.dll
2009-05-03 17:59:52 ----A---- C:\Windows\system32\logagent.exe
2009-05-03 17:59:51 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-05-03 17:59:50 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-05-03 17:58:34 ----A---- C:\Windows\system32\rpcrt4.dll
2009-05-03 17:57:53 ----A---- C:\Windows\system32\INETRES.dll
2009-05-03 17:57:53 ----A---- C:\Windows\system32\inetcomm.dll
2009-05-03 17:57:21 ----A---- C:\Windows\system32\connect.dll
2009-05-03 17:56:50 ----A---- C:\Windows\system32\wmi.dll
2009-05-03 17:56:49 ----A---- C:\Windows\system32\imagehlp.dll
2009-05-03 17:56:23 ----A---- C:\Windows\system32\quartz.dll
2009-05-03 17:55:28 ----A---- C:\Windows\system32\crypt32.dll
2009-05-03 17:54:51 ----A---- C:\Windows\system32\user32.dll
2009-05-03 17:54:28 ----A---- C:\Windows\system32\msxml6r.dll
2009-05-03 17:54:28 ----A---- C:\Windows\system32\msxml6.dll
2009-05-03 17:53:23 ----A---- C:\Windows\system32\iedkcs32.dll
2009-05-03 17:53:23 ----A---- C:\Windows\system32\advpack.dll
2009-05-03 17:53:22 ----A---- C:\Windows\system32\ieakui.dll
2009-05-03 17:53:22 ----A---- C:\Windows\system32\ieaksie.dll
2009-05-03 17:53:22 ----A---- C:\Windows\system32\admparse.dll
2009-05-03 17:53:20 ----A---- C:\Windows\system32\ieapfltr.dll
2009-05-03 17:53:18 ----A---- C:\Windows\system32\wininet.dll
2009-05-03 17:53:18 ----A---- C:\Windows\system32\jsproxy.dll
2009-05-03 17:53:16 ----A---- C:\Windows\system32\dxtrans.dll
2009-05-03 17:53:16 ----A---- C:\Windows\system32\dxtmsft.dll
2009-05-03 17:53:14 ----A---- C:\Windows\system32\msfeeds.dll
2009-05-03 17:53:13 ----A---- C:\Windows\system32\ieui.dll
2009-05-03 17:53:12 ----A---- C:\Windows\system32\ieframe.dll
2009-05-03 17:53:10 ----A---- C:\Windows\system32\mshtmler.dll
2009-05-03 17:53:10 ----A---- C:\Windows\system32\mshtmled.dll
2009-05-03 17:53:10 ----A---- C:\Windows\system32\ieencode.dll
2009-05-03 17:53:09 ----A---- C:\Windows\system32\mshtml.dll
2009-05-03 17:53:07 ----A---- C:\Windows\system32\mstime.dll
2009-05-03 17:53:07 ----A---- C:\Windows\system32\icardie.dll
2009-05-03 17:53:04 ----A---- C:\Windows\system32\ieUnatt.exe
2009-05-03 17:53:03 ----A---- C:\Windows\system32\urlmon.dll
2009-05-03 17:53:03 ----A---- C:\Windows\system32\occache.dll
2009-05-03 17:53:02 ----A---- C:\Windows\system32\pngfilt.dll
2009-05-03 17:53:02 ----A---- C:\Windows\system32\iertutil.dll
2009-05-03 17:53:02 ----A---- C:\Windows\system32\iernonce.dll
2009-05-03 17:53:02 ----A---- C:\Windows\system32\ie4uinit.exe
2009-05-03 17:53:01 ----A---- C:\Windows\system32\iesetup.dll
2009-05-03 17:50:51 ----A---- C:\Windows\system32\qmgr.dll
2009-05-03 17:29:16 ----D---- C:\Windows\Panther
2009-05-03 17:28:47 ----A---- C:\Windows\system32\nvcodins.dll
2009-05-03 17:28:46 ----A---- C:\Windows\system32\nvexpbar.dll
2009-05-03 17:28:46 ----A---- C:\Windows\system32\nvcpluir.dll
2009-05-03 17:28:46 ----A---- C:\Windows\system32\nvcplui.exe
2009-05-03 17:28:45 ----A---- C:\Windows\system32\nvuninst.exe
2009-05-03 17:28:44 ----A---- C:\Windows\system32\nvsvc.dll
2009-05-03 17:28:44 ----A---- C:\Windows\system32\nvmctray.dll
2009-05-03 17:28:43 ----A---- C:\Windows\system32\nvd3dum.dll
2009-05-03 17:28:43 ----A---- C:\Windows\system32\nvapi.dll
2009-05-03 17:28:35 ----A---- C:\Windows\system32\nvunrm.exe
2009-05-03 17:28:35 ----A---- C:\Windows\system32\nvconrm.dll
2009-05-03 17:28:35 ----A---- C:\Windows\system32\fdco1.dll
2009-05-03 17:28:27 ----A---- C:\Windows\system32\uci32113.dll
2009-05-03 17:28:27 ----A---- C:\Windows\system32\mdmxsdk.dll
2009-05-03 17:28:21 ----A---- C:\Windows\system32\SRSTSXT.dll
2009-05-03 17:28:21 ----A---- C:\Windows\system32\ctppld.dll
2009-05-03 17:28:06 ----D---- C:\Windows\Debug
2009-05-03 17:27:05 ----D---- C:\Windows\system32\OEM
2009-05-03 17:16:40 ----HD---- C:\$WINDOWS.~Q
2009-05-03 17:11:56 ----HD---- C:\$INPLACE.~TR
2009-05-03 16:50:29 ----A---- C:\Windows\system32\wups2.dll
2009-05-03 16:50:29 ----A---- C:\Windows\system32\wucltux.dll
2009-05-03 16:50:29 ----A---- C:\Windows\system32\wuaueng.dll
2009-05-03 16:50:29 ----A---- C:\Windows\system32\wuauclt.exe
2009-05-03 16:49:28 ----A---- C:\Windows\system32\wudriver.dll
2009-05-03 16:49:27 ----A---- C:\Windows\system32\wups.dll
2009-05-03 16:49:27 ----A---- C:\Windows\system32\wuapi.dll
2009-05-03 16:48:32 ----A---- C:\Windows\system32\wuwebv.dll
2009-05-03 16:48:32 ----A---- C:\Windows\system32\wuapp.exe
2009-05-03 14:39:51 ----SD---- C:\Users\PPNesdore\AppData\Roaming\Microsoft
2009-05-03 14:38:41 ----D---- C:\Program Files\CONEXANT
2009-05-03 14:38:26 ----D---- C:\Windows\system32\RTCOM
2009-05-03 14:30:44 ----D---- C:\Windows\Prefetch
2009-04-10 10:54:17 ----A---- C:\Windows\system32\MRT.INI
======List of files/folders modified in the last 3 months======
2009-05-10 18:45:47 ----D---- C:\Windows\System32
2009-05-10 18:45:47 ----D---- C:\Windows\inf
2009-05-10 18:45:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-05-10 18:45:30 ----D---- C:\Windows\Temp
2009-05-10 18:41:31 ----D---- C:\MDT
2009-05-06 17:10:10 ----RD---- C:\Program Files
2009-05-06 17:03:34 ----D---- C:\Program Files\Internet Explorer
2009-05-06 17:03:13 ----D---- C:\Windows\system32\drivers
2009-05-06 17:02:21 ----D---- C:\Windows
2009-05-06 16:44:37 ----D---- C:\Program Files\Trend Micro
2009-05-06 16:01:56 ----SHD---- C:\Windows\Installer
2009-05-06 16:01:52 ----D---- C:\ProgramData\Microsoft Help
2009-05-06 15:53:05 ----HD---- C:\ProgramData
2009-05-06 10:32:30 ----D---- C:\Windows\system32\WDI
2009-05-06 09:40:24 ----SHD---- C:\System Volume Information
2009-05-06 08:28:23 ----D---- C:\Windows\winsxs
2009-05-06 08:28:12 ----D---- C:\Windows\servicing
2009-05-06 08:17:14 ----D---- C:\Windows\system32\catroot
2009-05-05 13:15:26 ----D---- C:\Program Files\MyWebSearch
2009-05-04 03:37:50 ----D---- C:\Windows\Microsoft.NET
2009-05-04 03:37:44 ----RSD---- C:\Windows\assembly
2009-05-04 03:30:28 ----ASH---- C:\Program Files\desktop.ini
2009-05-04 03:30:11 ----D---- C:\Windows\rescache
2009-05-04 03:22:56 ----D---- C:\Windows\system32\LogFiles
2009-05-04 03:21:32 ----D---- C:\Windows\system32\ras
2009-05-04 03:21:32 ----D---- C:\Windows\system32\icsxml
2009-05-04 03:21:32 ----D---- C:\Windows\system32\en-US
2009-05-04 03:21:32 ----D---- C:\Program Files\Windows Calendar
2009-05-04 03:21:28 ----D---- C:\Windows\system32\wbem
2009-05-04 03:21:28 ----D---- C:\Program Files\Windows Mail
2009-05-04 03:21:28 ----D---- C:\Program Files\Common Files\System
2009-05-04 03:21:27 ----D---- C:\Program Files\Windows Defender
2009-05-04 03:21:26 ----D---- C:\Windows\AppPatch
2009-05-04 03:21:25 ----D---- C:\Windows\system32\migration
2009-05-04 03:21:25 ----D---- C:\Program Files\Windows Media Player
2009-05-04 03:21:20 ----D---- C:\Windows\system32\manifeststore
2009-05-04 03:21:19 ----D---- C:\Windows\system32\SLUI
2009-05-04 03:21:17 ----D---- C:\Program Files\Windows Sidebar
2009-05-04 03:21:15 ----D---- C:\Windows\system32\XPSViewer
2009-05-04 02:41:07 ----D---- C:\Program Files\ShoppingReport
2009-05-04 00:05:26 ----D---- C:\Windows\system32\catroot2
2009-05-03 18:50:32 ----D---- C:\Program Files\Common Files\Symantec Shared
2009-05-03 18:28:21 ----D---- C:\ProgramData\Dell
2009-05-03 17:29:03 ----RAS---- C:\BOOTSECT.BAK
2009-05-03 17:29:01 ----SHD---- C:\Boot
2009-05-03 17:28:02 ----D---- C:\Windows\system32\config
2009-05-03 17:27:05 ----D---- C:\Windows\system32\oobe
2009-05-03 16:35:16 ----D---- C:\Windows\SoftwareDistribution
2009-05-03 16:27:05 ----D---- C:\Windows\system32\restore
2009-05-03 15:11:40 ----D---- C:\Windows\Registration
2009-05-03 15:10:14 ----D---- C:\Windows\system32\Tasks
2009-05-03 15:05:51 ----D---- C:\Windows\system32\Msdtc
2009-05-03 15:03:45 ----RD---- C:\Users
2009-05-03 15:02:22 ----D---- C:\Users\PPNesdore\AppData\Roaming\Yahoo!
2009-05-03 15:02:22 ----D---- C:\Users\PPNesdore\AppData\Roaming\Runaware
2009-05-03 15:02:22 ----D---- C:\Users\PPNesdore\AppData\Roaming\Roxio
2009-05-03 15:02:21 ----D---- C:\Users\PPNesdore\AppData\Roaming\MusicNet
2009-05-03 15:02:10 ----D---- C:\Users\PPNesdore\AppData\Roaming\Macromedia
2009-05-03 15:02:10 ----D---- C:\Users\PPNesdore\AppData\Roaming\LimeWire
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\Kutchka
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\Identities
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\ICAClient
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\HPAppData
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\HP
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\Google
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\CyberLink
2009-05-03 15:02:09 ----D---- C:\Users\PPNesdore\AppData\Roaming\Apple Computer
2009-05-03 15:01:58 ----D---- C:\Users\PPNesdore\AppData\Roaming\AOL
2009-05-03 15:01:58 ----D---- C:\Users\PPNesdore\AppData\Roaming\Adobe
2009-05-03 15:01:58 ----D---- C:\Users\PPNesdore\AppData\Roaming\acccore
2009-05-03 14:49:30 ----D---- C:\Windows\WindowsMobile
2009-05-03 14:49:19 ----D---- C:\Windows\twain_32
2009-05-03 14:49:18 ----D---- C:\Windows\system32\sysprep
2009-05-03 14:49:09 ----D---- C:\Windows\system32\NDF
2009-05-03 14:49:08 ----D---- C:\Windows\system32\Macromed
2009-05-03 14:49:07 ----DC---- C:\Windows\system32\DRVSTORE
2009-05-03 14:49:07 ----D---- C:\Windows\system32\DLA
2009-05-03 14:49:06 ----D---- C:\Windows\system32\Adobe
2009-05-03 14:49:02 ----D---- C:\Windows\SHELLNEW
2009-05-03 14:48:56 ----D---- C:\Windows\Logs
2009-05-03 14:48:56 ----D---- C:\Windows\java
2009-05-03 14:48:38 ----RSD---- C:\Windows\Fonts
2009-05-03 14:48:38 ----D---- C:\Windows\Help
2009-05-03 14:47:55 ----SD---- C:\Windows\Downloaded Program Files
2009-05-03 14:47:54 ----D---- C:\Windows\Downloaded Installations
2009-05-03 14:47:47 ----D---- C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-05-03 14:47:46 ----D---- C:\ProgramData\YAHOO
2009-05-03 14:47:46 ----D---- C:\ProgramData\WEBREG
2009-05-03 14:47:46 ----D---- C:\ProgramData\Trend Micro
2009-05-03 14:47:45 ----D---- C:\ProgramData\Symantec
2009-05-03 14:47:23 ----SD---- C:\ProgramData\Microsoft
2009-05-03 14:47:23 ----D---- C:\ProgramData\SupportSoft
2009-05-03 14:47:23 ----D---- C:\ProgramData\Sonic
2009-05-03 14:47:23 ----D---- C:\ProgramData\Roxio
2009-05-03 14:47:11 ----D---- C:\ProgramData\Macromedia
2009-05-03 14:47:11 ----D---- C:\ProgramData\InstallShield
2009-05-03 14:47:11 ----D---- C:\ProgramData\HP Product Assistant
2009-05-03 14:47:11 ----D---- C:\ProgramData\HP
2009-05-03 14:47:07 ----D---- C:\ProgramData\Hewlett-Packard
2009-05-03 14:47:07 ----D---- C:\ProgramData\Google
2009-05-03 14:47:00 ----D---- C:\ProgramData\CyberLink
2009-05-03 14:47:00 ----D---- C:\ProgramData\Apple Computer
2009-05-03 14:47:00 ----D---- C:\ProgramData\Apple
2009-05-03 14:46:56 ----D---- C:\ProgramData\AOL OCP
2009-05-03 14:46:56 ----D---- C:\ProgramData\AOL
2009-05-03 14:46:54 ----D---- C:\ProgramData\Adobe
2009-05-03 14:46:50 ----D---- C:\Program Files\Yahoo!
2009-05-03 14:46:49 ----D---- C:\Program Files\Viewpoint
2009-05-03 14:46:48 ----D---- C:\Program Files\Trymedia
2009-05-03 14:46:39 ----D---- C:\Program Files\Safari
2009-05-03 14:46:35 ----D---- C:\Program Files\Roxio
2009-05-03 14:46:25 ----D---- C:\Program Files\ReflexiveArcade
2009-05-03 14:46:24 ----D---- C:\Program Files\QuickTime
2009-05-03 14:46:16 ----D---- C:\Program Files\NVIDIA Corporation
2009-05-03 14:46:16 ----D---- C:\Program Files\Norton PC Checkup
2009-05-03 14:45:58 ----D---- C:\Program Files\Nick Arcade
2009-05-03 14:45:58 ----D---- C:\Program Files\NetWaiting
2009-05-03 14:45:55 ----D---- C:\Program Files\Modem Diagnostic Tool
2009-05-03 14:45:55 ----D---- C:\Program Files\Microsoft.NET
2009-05-03 14:45:55 ----D---- C:\Program Files\Microsoft Works
2009-05-03 14:45:48 ----D---- C:\Program Files\Microsoft Visual Studio
2009-05-03 14:45:48 ----D---- C:\Program Files\Microsoft Office
2009-05-03 14:45:19 ----D---- C:\Program Files\Maxis
2009-05-03 14:44:20 ----D---- C:\Program Files\Kutchka
2009-05-03 14:44:16 ----D---- C:\Program Files\Java
2009-05-03 14:44:16 ----D---- C:\Program Files\iTunes
2009-05-03 14:44:08 ----HD---- C:\Program Files\InstallShield Installation Information
2009-05-03 14:44:08 ----D---- C:\Program Files\iPod
2009-05-03 14:44:07 ----D---- C:\Program Files\HP
2009-05-03 14:43:51 ----D---- C:\Program Files\Google
2009-05-03 14:43:49 ----D---- C:\Program Files\GlobalStar Software
2009-05-03 14:43:49 ----D---- C:\Program Files\FunWebProducts
2009-05-03 14:43:49 ----D---- C:\Program Files\Free Offers from Freeze.com
2009-05-03 14:43:48 ----D---- C:\Program Files\Fish Tycoon
2009-05-03 14:43:48 ----D---- C:\Program Files\Fairy Godmother Tycoon
2009-05-03 14:43:46 ----D---- C:\Program Files\EarthLink Setup
2009-05-03 14:43:46 ----D---- C:\Program Files\Digital Line Detect
2009-05-03 14:43:40 ----D---- C:\Program Files\Dell Support Center
2009-05-03 14:43:18 ----D---- C:\Program Files\Dell DataSafe Online
2009-05-03 14:43:17 ----D---- C:\Program Files\Dell
2009-05-03 14:43:14 ----D---- C:\Program Files\CyberLink
2009-05-03 14:43:02 ----D---- C:\Program Files\Common Files\SureThing Shared
2009-05-03 14:43:02 ----D---- C:\Program Files\Common Files\supportsoft
2009-05-03 14:43:02 ----D---- C:\Program Files\Common Files\Sonic Shared
2009-05-03 14:43:02 ----D---- C:\Program Files\Common Files
2009-05-03 14:43:01 ----D---- C:\Program Files\Common Files\Roxio Shared
2009-05-03 14:42:45 ----D---- C:\Program Files\Common Files\Nullsoft
2009-05-03 14:42:44 ----D---- C:\Program Files\Common Files\microsoft shared
2009-05-03 14:42:38 ----D---- C:\Program Files\Common Files\Java
2009-05-03 14:42:38 ----D---- C:\Program Files\Common Files\InstallShield
2009-05-03 14:42:37 ----D---- C:\Program Files\Common Files\HP
2009-05-03 14:42:36 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2009-05-03 14:42:36 ----D---- C:\Program Files\Common Files\DESIGNER
2009-05-03 14:42:20 ----D---- C:\Program Files\Common Files\Apple
2009-05-03 14:42:20 ----D---- C:\Program Files\Common Files\aolshare
2009-05-03 14:42:19 ----D---- C:\Program Files\Common Files\AOL
2009-05-03 14:42:10 ----D---- C:\Program Files\Common Files\Adobe
2009-05-03 14:42:07 ----D---- C:\Program Files\Bonjour
2009-05-03 14:42:06 ----D---- C:\Program Files\Apple Software Update
2009-05-03 14:42:05 ----D---- C:\Program Files\AOL Install
2009-05-03 14:42:04 ----D---- C:\Program Files\AOL 9.0
2009-05-03 14:42:03 ----D---- C:\Program Files\AOL
2009-05-03 14:41:48 ----D---- C:\Program Files\AIM6
2009-05-03 14:41:44 ----D---- C:\Program Files\Adobe
2009-05-03 14:40:20 ----D---- C:\Windows\system32\CodeIntegrity
2009-05-03 14:34:58 ----D---- C:\Windows\tracing
2009-04-15 21:14:22 ----AD---- C:\ProgramData\TEMP
2009-04-06 07:57:26 ----A---- C:\Windows\system32\mrt.exe
2009-03-21 10:23:02 ----A---- C:\Windows\win.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 DLACDBHM;DLACDBHM; C:\Windows\System32\Drivers\DLACDBHM.SYS [2007-02-08 12856]
R1 DLARTL_M;DLARTL_M; C:\Windows\System32\Drivers\DLARTL_M.SYS [2007-02-08 28120]
R1 tmtdi;Trend Micro TDI Driver; C:\Windows\system32\DRIVERS\tmtdi.sys [2007-08-27 73288]
R2 DLABMFSM;DLABMFSM; C:\Windows\System32\DLA\DLABMFSM.SYS [2006-10-26 35096]
R2 DLABOIOM;DLABOIOM; C:\Windows\System32\DLA\DLABOIOM.SYS [2006-10-26 32472]
R2 DLADResM;DLADResM; C:\Windows\System32\DLA\DLADResM.SYS [2006-10-26 9400]
R2 DLAIFS_M;DLAIFS_M; C:\Windows\System32\DLA\DLAIFS_M.SYS [2006-10-26 104536]
R2 DLAOPIOM;DLAOPIOM; C:\Windows\System32\DLA\DLAOPIOM.SYS [2006-10-26 26296]
R2 DLAPoolM;DLAPoolM; C:\Windows\System32\DLA\DLAPoolM.SYS [2006-10-26 14520]
R2 DLAUDF_M;DLAUDF_M; C:\Windows\System32\DLA\DLAUDF_M.SYS [2006-10-26 97848]
R2 DLAUDFAM;DLAUDFAM; C:\Windows\System32\DLA\DLAUDFAM.SYS [2006-10-26 94648]
R2 DRVNDDM;DRVNDDM; C:\Windows\System32\Drivers\DRVNDDM.SYS [2007-02-09 51768]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 tmpreflt;tmpreflt; C:\Windows\system32\DRIVERS\tmpreflt.sys [2008-08-16 36368]
R2 tmxpflt;tmxpflt; C:\Windows\system32\drivers\TmXPFlt.sys [2008-08-16 205328]
R2 vsapint;vsapint; C:\Windows\system32\DRIVERS\vsapint.sys [2008-05-02 1169240]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 8192]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-10-18 986624]
R3 HSXHWBS2;HSXHWBS2; C:\Windows\system32\DRIVERS\HSXHWBS2.sys [2006-10-18 258048]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-24 2054872]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-10-29 1062048]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-05-03 7460320]
R3 rt61x86;Ralink RT61 Wireless Driver for Windows Vista; C:\Windows\system32\DRIVERS\netr61.sys [2008-11-26 333824]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-10-18 659968]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AERTFilters;Andrea RT Filters Service; C:\Windows\system32\AERTSrv.exe [2007-12-05 77824]
R2 AOL ACS;AOL Connectivity Service; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [2006-10-23 46640]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 MrHealthyService;MrHealthy; C:\Program Files\Norton PC Checkup\executables\mrHealthy\MrHealthy.exe [2009-01-29 578920]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-05-03 118784]
R2 PcCtlCom;Trend Micro Central Control Component; C:\Program Files\Trend Micro\Internet Security 14\PcCtlCom.exe [2007-08-27 1471840]
R2 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [2006-11-05 159744]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter); C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2007-11-15 202544]
R2 Tmntsrv;Trend Micro Real-time Service; C:\Program Files\Trend Micro\Internet Security 14\Tmntsrv.exe [2007-08-27 345432]
R2 tmproxy;Trend Micro Proxy Service; C:\Program Files\Trend Micro\Internet Security 14\tmproxy.exe [2007-08-27 566872]
R2 Viewpoint Manager Service;Viewpoint Manager Service; C:\Program Files\Viewpoint\Common\ViewpointService.exe [2007-01-04 24652]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-11-20 536872]
R3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-05 880640]
S2 TmPfw;Trend Micro Personal Firewall; C:\Program Files\Trend Micro\Internet Security 14\TmPfw.exe [2007-08-27 923216]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-08-09 29744]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-05 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Roxio\Roxio MyDVD DE\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-09-14 73728]
-----------------EOF-----------------
info.txt:
info.txt logfile of random's system information tool 1.06 2009-05-10 18:46:46
======Uninstall list======
-->C:\Program Files\Yahoo!\Yahoo! Music Jukebox\oggcodecs\uninst.exe
-->MsiExec.exe /I{95D9B4D8-B091-4fab-80EA-313EB4B82FD6}
-->MsiExec.exe /I{EB997E90-5EB0-4eb5-90D0-90B1D2F0CA03}
32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81000000003}
Adobe Shockwave Player-->C:\Windows\System32\Adobe\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Adobe\SHOCKW~1\Install.log
AIM 6-->C:\Program Files\AIM6\uninst.exe
AIM Toolbar 5.0-->"C:\Program Files\AOL\AIM Toolbar 5.0\uninstall.exe"
AOL Install-->MsiExec.exe /I{2357B8BC-88C9-4A72-818C-050CC4EB0778}
AOL Uninstaller (Choose which Products to Remove)-->C:\Program Files\Common Files\AOL\uninstaller.exe
Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Browser Address Error Redirector-->MsiExec.exe /I{62230596-37E5-4618-A329-0D21F529A86F}
Conexant D850 PCI V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -IDel200fz.inf
Dell DataSafe Online-->MsiExec.exe /I{4D3C9F4B-4B7D-4E5D-99B9-0123AB0D51ED}
Dell Getting Started Guide-->MsiExec.exe /I{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}
Dell Support Center-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
Digital Line Detect-->C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
EarthLink Setup Files-->MsiExec.exe /X{5E68BB65-4059-4FE5-AAC4-0CD1D79BBDE2}
Fairy Godmother Tycoon-->"C:\Program Files\Fairy Godmother Tycoon\ReflexiveArcade\unins000.exe"
Fish Tycoon-->"C:\Program Files\Fish Tycoon\Uninstall.exe"
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
HP Customer Participation Program 9.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Imaging Device Functions 9.0-->C:\Program Files\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP OCR Software 9.0-->C:\Program Files\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
HP Photosmart All-In-One Software 9.0-->C:\Program Files\HP\Digital Imaging\{B09BCBF6-87EE-4403-A336-3A9510856535}\setup\hpzscr01.exe -datfile hposcr15.dat
HP Photosmart Essential 2.01-->C:\Program Files\HP\Digital Imaging\PhotoSmartEssential\hpzscr01.exe -datfile hpqbud13.dat
HP Smart Web Printing-->MsiExec.exe /X{415CDA53-9100-476F-A7B2-476691E117C7}
HP Solution Center 9.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HP Update-->MsiExec.exe /X{AB40272D-92AB-4F30-B36B-22EDE16F8FE5}
HPSSupply-->MsiExec.exe /X{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}
Internet Service Offers Launcher-->MsiExec.exe /I{CCFF1E13-77A2-4032-8B12-7566982A27DF}
iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
KKopy-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{E2F43AFC-95FF-43A3-95C2-8F55D41CDEC0}
Mall Tycoon-->C:\PROGRA~1\GLOBAL~1\MALLTY~1\UNWISE.EXE C:\PROGRA~1\GLOBAL~1\MALLTY~1\INSTALL.LOG
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Professional 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROR /dll OSETUP.DLL
Microsoft Office Professional 2007-->MsiExec.exe /X{91120000-0014-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Works-->MsiExec.exe /I{6D52C408-B09A-4520-9B18-475B81D393F1}
MobileMe Control Panel-->MsiExec.exe /I{924EB80F-C2BB-4B9F-8412-88BBA937393F}
Modem Diagnostic Tool-->MsiExec.exe /I{F63A3748-B93D-4360-9AD4-B064481A5C7B}
Monopoly - SpongeBob SquarePants Edition-->C:\PROGRA~1\NICKAR~1\MONOPO~1\UNWISE.EXE C:\PROGRA~1\NICKAR~1\MONOPO~1\INSTALL.LOG
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Music, Photos & Videos Launcher-->MsiExec.exe /I{D7769185-9A7C-48D4-8874-5388743A1DE2}
NetWaiting-->C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
Norton PC Checkup-->C:\Program Files\Norton PC Checkup\uninstall.exe
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
NVIDIANetworkDiagnostic-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{EFAD4066-CAF3-4B27-9669-12EED352C376}
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{281ECE39-F043-492B-8337-F2E546B5604A}\Setup.exe" -l0x9 -cluninstall
Product Documentation Launcher-->MsiExec.exe /I{89CEAE14-DD0F-448E-9554-15781EC9DB24}
QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
Roxio Creator Audio-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
Roxio Creator BDAV Plugin-->MsiExec.exe /I{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}
Roxio Creator Copy-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
Roxio Creator Data-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
Roxio Creator DE-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
Roxio Creator Tools-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
Roxio Drag-to-Disc-->MsiExec.exe /I{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}
Roxio Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio MyDVD DE-->MsiExec.exe /I{D639085F-4B6E-4105-9F37-A0DBB023E2FB}
Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
RTC Client API v1.2-->MsiExec.exe /X{44CDBD1B-89FB-4E02-8319-2A4C550F664A}
Safari-->MsiExec.exe /I{582D2A53-F426-4C5E-A2E6-43C1AB36B907}
Sonic Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
TestDrive Client-->MsiExec.exe /X{36C9E08A-BE2B-40A0-83C5-576748F7B777}
The Sims Complete Collection-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F2527115-B8BF-4FDB-B5DA-5AADFB7C13E1}\Setup.exe" -l0x9 -l0009
Trend Micro PC-cillin Internet Security-->C:\PROGRA~1\TRENDM~1\INTERN~1\remove.exe
Trend Micro PC-cillin Internet Security-->MsiExec.exe /X{EA8C73AA-3D75-44C9-87A2-8E945FC5FEE6}
User's Guides-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}\setup.exe"
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
Windows Mobile Device Center Driver Update-->MsiExec.exe /X{E7044E25-3038-4A76-9064-344AC038043E}
Windows Mobile Device Center-->MsiExec.exe /X{904CCF62-818D-4675-BC76-D37EB399F917}
Yahoo! Music Jukebox-->MsiExec.exe /X{EC3B8CA2-49B8-4D38-BE9C-ABD0F6029168}
======Security center information======
AV: PC-cillin Internet Security - Virus Protection (outdated)
FW: PC-cillin Internet Security - Firewall
AS: PC-cillin Internet Security - Spyware Protection (outdated)
AS: Windows Defender
======System event log======
Computer Name: PPNesdore-PC
Event Code: 4
Message: The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.
Record Number: 587313
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20090510234517.000000-000
Event Type: Warning
User:
Computer Name: PPNesdore-PC
Event Code: 4
Message: The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.
Record Number: 587314
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20090510234517.000000-000
Event Type: Warning
User:
Computer Name: PPNesdore-PC
Event Code: 3004
Message: Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow.
For more information please see the following:
Not Applicable
Scan ID: {31A775D3-91DC-42F4-8633-029F437A5D08}
User: PPNesdore-PC\PPNesdore
Name: Unknown
ID:
Severity ID:
Category ID:
Path Found: driver:PCD5SRVC{3F6A8B78-EC003E00-05040000}
Alert Type: Unclassified software
Detection Type:
Record Number: 587315
Source Name: Microsoft-Windows-Windows Defender
Time Written: 20090510234539.000000-000
Event Type: Warning
User:
Computer Name: PPNesdore-PC
Event Code: 4
Message: The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.
Record Number: 587316
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20090510234602.000000-000
Event Type: Warning
User:
Computer Name: PPNesdore-PC
Event Code: 4
Message: The print spooler failed to reopen an existing printer connection because it could not read the configuration information from the registry key S-1-5-18\Printers\Connections. The print spooler could not open the registry key. This can occur if the registry key is corrupt or missing, or if the registry recently became unavailable.
Record Number: 587317
Source Name: Microsoft-Windows-SpoolerWin32SPL
Time Written: 20090510234602.000000-000
Event Type: Warning
User:
=====Application event log=====
Computer Name: PPNesdore-PC
Event Code: 20227
Message: CoID={81E0DF42-3DA4-4D51-A3CD-4BA292952507}: The user PPNesdore-PC\PPNesdore dialed a connection named Broadband Connection which has failed. The error code returned on failure is 815.
Record Number: 10409
Source Name: RasClient
Time Written: 20090504224216.000000-000
Event Type: Error
User:
Computer Name: PPNesdore-PC
Event Code: 1000
Message: Faulting application iexplore.exe, version 7.0.6000.16830, time stamp 0x49ac913e, faulting module tbhelper.dll, version 4.0.5.0, time stamp 0x482ca840, exception code 0xc0000005, fault offset 0x00032846, process id 0x12d8, application start time 0x01c9cd099d88cdb0.
Record Number: 10410
Source Name: Application Error
Time Written: 20090504224250.000000-000
Event Type: Error
User:
Computer Name: PPNesdore-PC
Event Code: 8194
Message: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005. This is often caused by incorrect security settings in either the writer or requestor process.
Operation:
Gathering Writer Data
Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {5be30052-1bd5-43ad-b465-afa31d212ec0}
Record Number: 10424
Source Name: VSS
Time Written: 20090505181210.000000-000
Event Type: Error
User:
Computer Name: PPNesdore-PC
Event Code: 1004
Message: Detection of product '{91120000-0014-0000-0000-0000000FF1CE}', feature 'ProductNonBootFiles', component '{82ECD641-A343-4D45-B2DD-34E0961B7622}' failed. The resource 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{62CEC9E0-3811-4C36-A94E-4F7565DCD23F}\Compatibility Flags' does not exist.
Record Number: 10653
Source Name: MsiInstaller
Time Written: 20090506210117.000000-000
Event Type: Warning
User: PPNesdore-PC\PPNesdore
Computer Name: PPNesdore-PC
Event Code: 1001
Message: Detection of product '{91120000-0014-0000-0000-0000000FF1CE}', feature 'ProductNonBootFiles' failed during request for component '{DD68FEE8-C369-11D1-A173-00A0C90AB50F}'
Record Number: 10654
Source Name: MsiInstaller
Time Written: 20090506210117.000000-000
Event Type: Warning
User: PPNesdore-PC\PPNesdore
=====Security event log=====
Computer Name: PPNesdore-PC
Event Code: 4624
Message: An account was successfully logged on.
Subject:
Security ID: S-1-5-18
Account Name: PPNESDORE-PC$
Account Domain: WORKGROUP
Logon ID: 0x3e7
Logon Type: 5
New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}
Process Information:
Process ID: 0x224
Process Name: C:\Windows\System32\services.exe
Network Information:
Workstation Name:
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon session is created. It is generated on the computer that was accessed.
The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).
The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.
The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 25143
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090510234050.041930-000
Event Type: Audit Success
User:
Computer Name: PPNesdore-PC
Event Code: 4672
Message: Special privileges assigned to new logon.
Subject:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 25144
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090510234050.041930-000
Event Type: Audit Success
User:
Computer Name: PPNesdore-PC
Event Code: 4648
Message: A logon was attempted using explicit credentials.
Subject:
Security ID: S-1-5-18
Account Name: PPNESDORE-PC$
Account Domain: WORKGROUP
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}
Account Whose Credentials Were Used:
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon GUID: {00000000-0000-0000-0000-000000000000}
Target Server:
Target Server Name: localhost
Additional Information: localhost
Process Information:
Process ID: 0x224
Process Name: C:\Windows\System32\services.exe
Network Information:
Network Address: -
Port: -
This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.
Record Number: 25145
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090510234317.320530-000
Event Type: Audit Success
User:
Computer Name: PPNesdore-PC
Event Code: 4624
Message: An account was successfully logged on.
Subject:
Security ID: S-1-5-18
Account Name: PPNESDORE-PC$
Account Domain: WORKGROUP
Logon ID: 0x3e7
Logon Type: 5
New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}
Process Information:
Process ID: 0x224
Process Name: C:\Windows\System32\services.exe
Network Information:
Workstation Name:
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon session is created. It is generated on the computer that was accessed.
The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).
The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.
The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 25146
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090510234317.320530-000
Event Type: Audit Success
User:
Computer Name: PPNesdore-PC
Event Code: 4672
Message: Special privileges assigned to new logon.
Subject:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 25147
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090510234317.320530-000
Event Type: Audit Success
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=6b01
"NUMBER_OF_PROCESSORS"=2
"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\QuickTime\QTSystem\
"QTJAVA"=C:\Program Files\Java\jre1.6.0\lib\ext\QTJava.zip
"RoxioCentral"=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
-----------------EOF-----------------