thank u 4 ur nice work my laptop is gettin slow and overheat

[sahem]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Saweer at 2009-07-23 00:00:03
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 35 GB (24%) free of 143 GB
Total RAM: 2044 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:00:09 ص, on 23/07/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Saweer\Stuff\installs\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Saweer.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Texas%20Holdem%20Poker/Images/armhelper.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate1c992f9716bca36) (gupdate1c992f9716bca36) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\STacSV.exe

--
End of file - 12013 bytes

======Scheduled tasks folder======

C:\Windows\tasks\At1.job
C:\Windows\tasks\At10.job
C:\Windows\tasks\At2.job
C:\Windows\tasks\At3.job
C:\Windows\tasks\At4.job
C:\Windows\tasks\At5.job
C:\Windows\tasks\At6.job
C:\Windows\tasks\At7.job
C:\Windows\tasks\At8.job
C:\Windows\tasks\At9.job
C:\Windows\tasks\AWC Startup.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-330823194-3490735558-1199261006-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-330823194-3490735558-1199261006-1000UA.job
C:\Windows\tasks\User_Feed_Synchronization-{7416979F-2C60-413D-80E2-6D064A215906}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-26 279944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-02-23 304736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-06-20 669168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-06-26 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-27 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-08-26 279944]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-06-10 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-06-20 1316136]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-04-16 178712]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-03-14 202032]
"OnScreenDisplay"=C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe [2007-11-02 554288]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-09 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-11-20 488752]
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [2006-06-15 229376]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2008-09-11 446556]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2008-06-13 210216]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-13 13584928]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-13 92704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableStatusMessages"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{19ba24e6-00e1-11de-bd65-8180313ee977}]
shell\AutoRun\command - 6phx.com
shell\open\command - 6phx.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae19cd5d-147c-11de-8f04-001e68dd1e4b}]
shell\AUTopLAY\command - ousjcb.pif
shell\AutoRun\command - ousjcb.pif
shell\EXPLore\command - ousjcb.pif
shell\open\command - ousjcb.pif


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2009-07-22 15:01:52 ----D---- C:\Users\Saweer\AppData\Roaming\Malwarebytes
2009-07-22 15:01:42 ----D---- C:\ProgramData\Malwarebytes
2009-07-22 15:01:42 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-22 11:15:38 ----D---- C:\rsit
2009-07-21 02:31:42 ----D---- C:\Windows\system32\SRSLabs
2009-07-21 02:28:33 ----A---- C:\Windows\system32\stcplx.dll
2009-07-21 02:28:33 ----A---- C:\Windows\system32\stapi32.dll
2009-07-20 01:46:31 ----D---- C:\Program Files\Trend Micro
2009-07-20 00:56:26 ----D---- C:\Program Files\Sony
2009-07-19 01:29:16 ----A---- C:\Windows\system32\BtwRSupport.dll
2009-07-19 01:28:46 ----D---- C:\Windows\system32\es-MX
2009-07-19 01:28:45 ----D---- C:\Windows\system32\es-AR
2009-07-18 23:14:26 ----A---- C:\ProgramData\MobileTV.exe
2009-07-18 23:14:25 ----D---- C:\ProgramData\ENU
2009-07-18 23:14:25 ----A---- C:\ProgramData\MPV.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\Karaoke.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\hpqp.txt
2009-07-18 23:14:25 ----A---- C:\ProgramData\Games.exe
2009-07-18 23:14:25 ----A---- C:\ProgramData\DVD.exe
2009-07-18 23:13:27 ----A---- C:\ProgramData\hpqp.ini
2009-07-18 16:30:41 ----D---- C:\Program Files\Common Files\LightScribe
2009-07-18 12:35:36 ----D---- C:\Program Files\DIFX
2009-07-15 13:36:19 ----A---- C:\Windows\system32\t2embed.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\lpk.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\fontsub.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\dciman32.dll
2009-07-15 13:36:19 ----A---- C:\Windows\system32\atmfd.dll
2009-07-15 01:46:01 ----D---- C:\Program Files\Common Files\Totem Shared
2009-07-15 01:45:15 ----D---- C:\Program Files\MP3Dancer
2009-07-09 04:29:31 ----D---- C:\Program Files\Common Files\COWON
2009-07-09 04:29:29 ----D---- C:\Program Files\JetAudio
2009-07-09 04:28:34 ----D---- C:\Users\Saweer\AppData\Roaming\InstallShield
2009-07-05 17:23:49 ----D---- C:\Program Files\sM@D!
2009-07-05 17:20:51 ----D---- C:\Windows\system32\URTTEMP
2009-07-02 19:48:57 ----D---- C:\Program Files\Currate.com AlwaysMath.com Calculator
2009-06-28 00:16:10 ----D---- C:\Program Files\VirtualDJ
2009-06-27 01:22:17 ----A---- C:\Windows\system32\javaws.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\javaw.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\java.exe
2009-06-27 01:22:17 ----A---- C:\Windows\system32\deploytk.dll
2009-06-27 00:07:27 ----A---- C:\Windows\system32\XAudio2_1.dll
2009-06-27 00:07:27 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2009-06-27 00:07:26 ----A---- C:\Windows\system32\xactengine3_1.dll
2009-06-27 00:07:26 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\D3DX9_38.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\d3dx10_38.dll
2009-06-27 00:07:25 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\XAudio2_0.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\xactengine3_0.dll
2009-06-27 00:07:24 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2009-06-27 00:07:23 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2009-06-27 00:07:22 ----A---- C:\Windows\system32\xactengine2_10.dll
2009-06-27 00:07:21 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2009-06-27 00:07:19 ----A---- C:\Windows\system32\xactengine2_9.dll
2009-06-27 00:07:18 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2009-06-27 00:07:17 ----A---- C:\Windows\system32\xactengine2_8.dll
2009-06-27 00:07:17 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2009-06-27 00:07:16 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\xinput1_3.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\xactengine2_7.dll
2009-06-27 00:07:15 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2009-06-27 00:07:13 ----A---- C:\Windows\system32\xactengine2_6.dll
2009-06-27 00:07:13 ----A---- C:\Windows\system32\xactengine2_5.dll
2009-06-27 00:07:11 ----A---- C:\Windows\system32\xactengine2_4.dll
2009-06-27 00:07:11 ----A---- C:\Windows\system32\x3daudio1_1.dll
2009-06-27 00:07:10 ----A---- C:\Windows\system32\d3dx9_31.dll
2009-06-27 00:07:09 ----A---- C:\Windows\system32\xinput1_2.dll
2009-06-27 00:07:09 ----A---- C:\Windows\system32\xactengine2_3.dll
2009-06-27 00:07:08 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-06-27 00:07:07 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-06-27 00:06:24 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-06-27 00:06:24 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-06-26 22:58:00 ----D---- C:\Program Files\scc-tds
2009-06-26 22:50:18 ----D---- C:\Program Files\MCoP
2009-06-10 02:27:11 ----A---- C:\Windows\system32\mshtml.dll
2009-06-10 02:27:09 ----A---- C:\Windows\system32\ieframe.dll
2009-06-10 02:27:08 ----A---- C:\Windows\system32\iertutil.dll
2009-06-10 02:27:07 ----A---- C:\Windows\system32\wininet.dll
2009-06-10 02:27:07 ----A---- C:\Windows\system32\urlmon.dll
2009-06-10 02:27:07 ----A---- C:\Windows\system32\iedkcs32.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\jsproxy.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\ieui.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\iesetup.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\iernonce.dll
2009-06-10 02:27:06 ----A---- C:\Windows\system32\ie4uinit.exe
2009-06-10 01:44:57 ----A---- C:\Windows\system32\localspl.dll
2009-06-10 01:20:56 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-07 18:04:46 ----D---- C:\Program Files\shamsanGames
2009-06-07 07:04:14 ----D---- C:\Users\Saweer\AppData\Roaming\uniblue
2009-06-07 07:03:46 ----D---- C:\Program Files\Uniblue
2009-06-07 07:01:21 ----HDC---- C:\ProgramData\{51019853-129C-4EDE-9030-D5FD7BBD9AD0}
2009-06-05 03:30:01 ----D---- C:\Program Files\Common Files\PX Storage Engine
2009-06-05 03:29:56 ----D---- C:\Users\Saweer\AppData\Roaming\Winamp
2009-06-02 03:02:36 ----D---- C:\Windows\system32\eu-ES
2009-06-02 03:02:36 ----D---- C:\Windows\system32\ca-ES
2009-06-02 03:02:34 ----D---- C:\Windows\system32\vi-VN
2009-06-02 02:44:53 ----D---- C:\Windows\system32\EventProviders
2009-06-02 02:43:59 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-06-02 02:43:56 ----A---- C:\Windows\system32\SLsvc.exe
2009-06-02 02:43:56 ----A---- C:\Windows\system32\SLCExt.dll
2009-06-02 02:43:54 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-06-02 02:43:54 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-06-02 02:43:53 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-06-02 02:43:51 ----A---- C:\Windows\system32\mssrch.dll
2009-06-02 02:43:48 ----A---- C:\Windows\system32\tquery.dll
2009-06-02 02:43:47 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-06-02 02:43:47 ----A---- C:\Windows\system32\lsasrv.dll
2009-06-02 02:43:46 ----A---- C:\Windows\system32\scavenge.dll
2009-06-02 02:43:46 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-06-02 02:43:46 ----A---- C:\Windows\system32\RMActivate.exe
2009-06-02 02:43:45 ----A---- C:\Windows\system32\msi.dll
2009-06-02 02:43:44 ----A---- C:\Windows\system32\imapi2fs.dll
2009-06-02 02:43:43 ----A---- C:\Windows\system32\WscEapPr.dll
2009-06-02 02:43:43 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-06-02 02:43:43 ----A---- C:\Windows\system32\secproc_isv.dll
2009-06-02 02:43:42 ----A---- C:\Windows\system32\sysmain.dll
2009-06-02 02:43:41 ----A---- C:\Windows\system32\icardagt.exe
2009-06-02 02:43:40 ----A---- C:\Windows\system32\mf.dll
2009-06-02 02:43:40 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-06-02 02:43:39 ----A---- C:\Windows\system32\EhStorShell.dll
2009-06-02 02:43:38 ----A---- C:\Windows\system32\spreview.exe
2009-06-02 02:43:38 ----A---- C:\Windows\system32\spinstall.exe
2009-06-02 02:43:37 ----A---- C:\Windows\system32\drmv2clt.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\spwizui.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\shell32.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\secproc.dll
2009-06-02 02:43:36 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-06-02 02:43:34 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-06-02 02:43:34 ----A---- C:\Windows\system32\p2psvc.dll
2009-06-02 02:43:34 ----A---- C:\Windows\system32\mssvp.dll
2009-06-02 02:43:33 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-06-02 02:43:33 ----A---- C:\Windows\system32\mscoree.dll
2009-06-02 02:43:32 ----A---- C:\Windows\system32\mssphtb.dll
2009-06-02 02:43:32 ----A---- C:\Windows\system32\mssph.dll
2009-06-02 02:43:32 ----A---- C:\Windows\system32\imapi2.dll
2009-06-02 02:43:31 ----A---- C:\Windows\system32\sdohlp.dll
2009-06-02 02:43:31 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-06-02 02:43:30 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-06-02 02:43:30 ----A---- C:\Windows\system32\esent.dll
2009-06-02 02:43:30 ----A---- C:\Windows\system32\DevicePairing.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\wevtsvc.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\sperror.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\SLC.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-06-02 02:43:29 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\korwbrkr.dll
2009-06-02 02:43:29 ----A---- C:\Windows\system32\IasMigReader.exe
2009-06-02 02:43:28 ----A---- C:\Windows\system32\wmp.dll
2009-06-02 02:43:28 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-06-02 02:43:28 ----A---- C:\Windows\system32\msshsq.dll
2009-06-02 02:43:27 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-06-02 02:43:27 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-06-02 02:43:27 ----A---- C:\Windows\system32\msjet40.dll
2009-06-02 02:43:27 ----A---- C:\Windows\system32\MPSSVC.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\Query.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\qmgr.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\msxml6.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\msexch40.dll
2009-06-02 02:43:26 ----A---- C:\Windows\system32\diagperf.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\srchadmin.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\P2PGraph.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\ole32.dll
2009-06-02 02:43:25 ----A---- C:\Windows\system32\ntdll.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\winload.exe
2009-06-02 02:43:24 ----A---- C:\Windows\system32\uDWM.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\riched20.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\msxml3.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\mmc.exe
2009-06-02 02:43:24 ----A---- C:\Windows\system32\mblctr.exe
2009-06-02 02:43:24 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\EncDec.dll
2009-06-02 02:43:24 ----A---- C:\Windows\system32\dfsr.exe
2009-06-02 02:43:23 ----A---- C:\Windows\system32\RacEngn.dll
2009-06-02 02:43:23 ----A---- C:\Windows\system32\fdBth.dll
2009-06-02 02:43:22 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-06-02 02:43:22 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-06-02 02:43:22 ----A---- C:\Windows\system32\milcore.dll
2009-06-02 02:43:22 ----A---- C:\Windows\system32\kernel32.dll
2009-06-02 02:43:22 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-06-02 02:43:21 ----A---- C:\Windows\system32\spoolss.dll
2009-06-02 02:43:21 ----A---- C:\Windows\system32\schedsvc.dll
2009-06-02 02:43:21 ----A---- C:\Windows\system32\CertEnroll.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\msvcp60.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\msjtes40.dll
2009-06-02 02:43:20 ----A---- C:\Windows\system32\fsquirt.exe
2009-06-02 02:43:20 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-06-02 02:43:19 ----A---- C:\Windows\system32\infocardapi.dll
2009-06-02 02:43:19 ----A---- C:\Windows\system32\gpedit.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\WinSAT.exe
2009-06-02 02:43:18 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-06-02 02:43:18 ----A---- C:\Windows\system32\mstext40.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\Magnify.exe
2009-06-02 02:43:18 ----A---- C:\Windows\system32\es.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-06-02 02:43:18 ----A---- C:\Windows\system32\advapi32.dll
2009-06-02 02:43:17 ----A---- C:\Windows\system32\WMPhoto.dll
2009-06-02 02:43:17 ----A---- C:\Windows\system32\WebClnt.dll
2009-06-02 02:43:17 ----A---- C:\Windows\system32\msexcl40.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\vssapi.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\slwmi.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\msxbde40.dll
2009-06-02 02:43:16 ----A---- C:\Windows\system32\comsvcs.dll
2009-06-02 02:43:15 ----A---- C:\Windows\system32\mstscax.dll
2009-06-02 02:43:15 ----A---- C:\Windows\system32\authui.dll
2009-06-02 02:43:14 ----A---- C:\Windows\system32\PresentationHost.exe
2009-06-02 02:43:14 ----A---- C:\Windows\system32\NetProjW.dll
2009-06-02 02:43:14 ----A---- C:\Windows\system32\msrepl40.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\propsys.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\newdev.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\iasrecst.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\gpsvc.dll
2009-06-02 02:43:13 ----A---- C:\Windows\system32\eudcedit.exe
2009-06-02 02:43:13 ----A---- C:\Windows\system32\crypt32.dll
2009-06-02 02:43:13 ----A---- C:\Windows\explorer.exe
2009-06-02 02:43:12 ----A---- C:\Windows\system32\setupapi.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\rpcss.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\mspbde40.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\davclnt.dll
2009-06-02 02:43:12 ----A---- C:\Windows\system32\d3d9.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\wevtapi.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\shlwapi.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\msrd3x40.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\msltus40.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\msdtctm.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\mfc42.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-06-02 02:43:11 ----A---- C:\Windows\system32\browseui.dll
2009-06-02 02:43:10 ----A---- C:\Windows\system32\user32.dll
2009-06-02 02:43:10 ----A---- C:\Windows\system32\photowiz.dll
2009-06-02 02:43:10 ----A---- C:\Windows\system32\nlhtml.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\win32spl.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\samsrv.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\quartz.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\oleaut32.dll
2009-06-02 02:43:09 ----A---- C:\Windows\system32\ci.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\winhttp.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-06-02 02:43:08 ----A---- C:\Windows\system32\netshell.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\msv1_0.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\kerberos.dll
2009-06-02 02:43:08 ----A---- C:\Windows\system32\IKEEXT.DLL
2009-06-02 02:43:08 ----A---- C:\Windows\system32\compcln.exe
2009-06-02 02:43:08 ----A---- C:\Windows\system32\apds.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\xmlfilter.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\mswstr10.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\msctf.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\emdmgmt.dll
2009-06-02 02:43:07 ----A---- C:\Windows\system32\audiosrv.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\VSSVC.exe
2009-06-02 02:43:06 ----A---- C:\Windows\system32\sqlsrv32.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\SLUI.exe
2009-06-02 02:43:06 ----A---- C:\Windows\system32\QAGENTRT.DLL
2009-06-02 02:43:06 ----A---- C:\Windows\system32\msvcrt.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\msrd2x40.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\mfc42u.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\gdi32.dll
2009-06-02 02:43:06 ----A---- C:\Windows\system32\eapphost.dll
2009-06-02 02:43:05 ----A---- C:\Windows\system32\winresume.exe
2009-06-02 02:43:05 ----A---- C:\Windows\system32\propdefs.dll
2009-06-02 02:43:05 ----A---- C:\Windows\system32\odbc32.dll
2009-06-02 02:43:04 ----A---- C:\Windows\system32\wevtutil.exe
2009-06-02 02:43:04 ----A---- C:\Windows\system32\shdocvw.dll
2009-06-02 02:43:04 ----A---- C:\Windows\system32\mssitlb.dll
2009-06-02 02:43:04 ----A---- C:\Windows\system32\dbgeng.dll
2009-06-02 02:43:03 ----A---- C:\Windows\system32\WsmSvc.dll
2009-06-02 02:43:03 ----A---- C:\Windows\system32\swprv.dll
2009-06-02 02:43:03 ----A---- C:\Windows\system32\mmcndmgr.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\vds.exe
2009-06-02 02:43:02 ----A---- C:\Windows\system32\usp10.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\schannel.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\netlogon.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\msscb.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\msctfp.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\drvinst.exe
2009-06-02 02:43:02 ----A---- C:\Windows\system32\devmgr.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-06-02 02:43:02 ----A---- C:\Windows\system32\BFE.DLL
2009-06-02 02:43:02 ----A---- C:\Windows\system32\adsldpc.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\WSDApi.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\WMVSDECD.DLL
2009-06-02 02:43:01 ----A---- C:\Windows\system32\Wldap32.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\wcnwiz.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\services.exe
2009-06-02 02:43:01 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-06-02 02:43:01 ----A---- C:\Windows\system32\evr.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\wercon.exe
2009-06-02 02:43:00 ----A---- C:\Windows\system32\wcncsvc.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\msdtcprx.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\msdrm.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\mimefilt.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\comdlg32.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\certcli.dll
2009-06-02 02:43:00 ----A---- C:\Windows\system32\adtschema.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\taskeng.exe
2009-06-02 02:42:59 ----A---- C:\Windows\system32\rtffilt.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\reg.exe
2009-06-02 02:42:59 ----A---- C:\Windows\system32\mswdat10.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\msjter40.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\ipsmsnap.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\dnsapi.dll
2009-06-02 02:42:59 ----A---- C:\Windows\system32\certutil.exe
2009-06-02 02:42:58 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-06-02 02:42:58 ----A---- C:\Windows\system32\w32time.dll
2009-06-02 02:42:58 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-06-02 02:42:57 ----A---- C:\Windows\system32\TsWpfWrp.exe
2009-06-02 02:42:57 ----A---- C:\Windows\system32\rsaenh.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msstrc.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msshooks.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msscntrs.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\msihnd.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\MMDevAPI.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\bthserv.dll
2009-06-02 02:42:57 ----A---- C:\Windows\system32\bcrypt.dll
2009-06-02 02:42:56 ----A---- C:\Windows\system32\inetcomm.dll
2009-06-02 02:42:54 ----A---- C:\Windows\system32\netapi32.dll
2009-06-02 02:42:54 ----A---- C:\Windows\system32\inetpp.dll
2009-06-02 02:42:54 ----A---- C:\Windows\system32\dfshim.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\wmicmiplugin.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\termsrv.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\profsvc.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\mtxclu.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\mscories.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\hidserv.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\gameux.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\fundisc.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-06-02 02:42:53 ----A---- C:\Windows\system32\cryptsvc.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\wdc.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\shsvcs.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\msiexec.exe
2009-06-02 02:42:52 ----A---- C:\Windows\system32\imapi.dll
2009-06-02 02:42:52 ----A---- C:\Windows\system32\chsbrkr.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\spoolsv.exe
2009-06-02 02:42:51 ----A---- C:\Windows\system32\rasmans.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\pnidui.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\icardres.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\iassdo.dll
2009-06-02 02:42:51 ----A---- C:\Windows\system32\autofmt.exe
2009-06-02 02:42:50 ----A---- C:\Windows\system32\wersvc.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\slmgr.vbs
2009-06-02 02:42:50 ----A---- C:\Windows\system32\scrrun.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\PSHED.DLL
2009-06-02 02:42:50 ----A---- C:\Windows\system32\pidgenx.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\pdh.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\CertEnrollUI.dll
2009-06-02 02:42:50 ----A---- C:\Windows\system32\azroles.dll
2009-06-02 02:42:49 ----A---- C:\Windows\system32\wmpmde.dll
2009-06-02 02:42:49 ----A---- C:\Windows\system32\winlogon.exe
2009-06-02 02:42:49 ----A---- C:\Windows\system32\SyncCenter.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\SLUINotify.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\ncrypt.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\msjetoledb40.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\comuid.dll
2009-06-02 02:42:48 ----A---- C:\Windows\system32\certmgr.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\wisptis.exe
2009-06-02 02:42:47 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\untfs.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\taskcomp.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\spp.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\sethc.exe
2009-06-02 02:42:47 ----A---- C:\Windows\system32\scrobj.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\rtutils.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\kd1394.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\iassam.dll
2009-06-02 02:42:47 ----A---- C:\Windows\system32\dwm.exe
2009-06-02 02:42:46 ----A---- C:\Windows\system32\iasnap.dll
2009-06-02 02:42:46 ----A---- C:\Windows\system32\autochk.exe
2009-06-02 02:42:45 ----A---- C:\Windows\system32\winsrv.dll
2009-06-02 02:42:45 ----A---- C:\Windows\system32\printui.dll
2009-06-02 02:42:45 ----A---- C:\Windows\system32\kdcom.dll
2009-06-02 02:42:45 ----A---- C:\Windows\system32\cscript.exe
2009-06-02 02:42:45 ----A---- C:\Windows\system32\autoconv.exe
2009-06-02 02:42:44 ----A---- C:\Windows\system32\wow32.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\userenv.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\osk.exe
2009-06-02 02:42:44 ----A---- C:\Windows\system32\onex.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\mswsock.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\basecsp.dll
2009-06-02 02:42:44 ----A---- C:\Windows\system32\audiodg.exe
2009-06-02 02:42:43 ----A---- C:\Windows\system32\WinSCard.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\winmm.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\WerFaultSecure.exe
2009-06-02 02:42:43 ----A---- C:\Windows\system32\spcmsg.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\RelMon.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\rdpencom.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\offfilt.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\msftedit.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\kdusb.dll
2009-06-02 02:42:43 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\wsepno.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\WerFault.exe
2009-06-02 02:42:42 ----A---- C:\Windows\system32\Utilman.exe
2009-06-02 02:42:42 ----A---- C:\Windows\system32\stobject.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\secproc_ssp.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\mfplat.dll
2009-06-02 02:42:42 ----A---- C:\Windows\system32\diskraid.exe
2009-06-02 02:42:41 ----A---- C:\Windows\system32\wscript.exe
2009-06-02 02:42:41 ----A---- C:\Windows\system32\wiaservc.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\ulib.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\sysclass.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\SndVol.exe
2009-06-02 02:42:41 ----A---- C:\Windows\system32\secur32.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\prnntfy.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\odbccp32.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\msnetobj.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\mscms.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\mcmde.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\iasdatastore.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\apphelp.dll
2009-06-02 02:42:41 ----A---- C:\Windows\system32\adsmsext.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\wscntfy.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\wlansvc.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\wlangpui.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\rastapi.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\pnpsetup.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\ipsecsnp.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2009-06-02 02:42:40 ----A---- C:\Windows\system32\fdProxy.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\dsound.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\diskpart.exe
2009-06-02 02:42:40 ----A---- C:\Windows\system32\cryptui.dll
2009-06-02 02:42:40 ----A---- C:\Windows\system32\brcpl.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\wusa.exe
2009-06-02 02:42:39 ----A---- C:\Windows\system32\wscsvc.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\WMVENCOD.DLL
2009-06-02 02:42:39 ----A---- C:\Windows\system32\vdsdyn.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\regsvc.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\rastls.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\rasapi32.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\ntprint.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\netiohlp.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\mscorier.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\logman.exe
2009-06-02 02:42:39 ----A---- C:\Windows\system32\iasrad.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\iashlpr.dll
2009-06-02 02:42:39 ----A---- C:\Windows\system32\gpapi.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\zipfldr.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\wshext.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\wpccpl.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\wer.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\rasdlg.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\netcenter.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\iassvcs.dll
2009-06-02 02:42:38 ----A---- C:\Windows\system32\findstr.exe
2009-06-02 02:42:37 ----A---- C:\Windows\system32\wsnmp32.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\uxsms.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\themecpl.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\srvsvc.dll
2009-06-02 02:42:37 ----A---- C:\Windows\system32\mssprxy.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\tsbyuv.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\slcc.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\scansetting.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\powrprof.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\ntmarta.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\msutb.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\mstsc.exe
2009-06-02 02:42:36 ----A---- C:\Windows\system32\mstlsapi.dll
2009-06-02 02:42:36 ----A---- C:\Windows\system32\iasads.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\wlanhlp.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\sud.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\powercpl.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\newdev.exe
2009-06-02 02:42:35 ----A---- C:\Windows\system32\networkmap.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\iasacct.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\dot3svc.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\connect.dll
2009-06-02 02:42:35 ----A---- C:\Windows\system32\authz.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\themeui.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\systemcpl.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\samlib.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\pcaui.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\mmci.dll
2009-06-02 02:42:34 ----A---- C:\Windows\system32\accessibilitycpl.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\wlanpref.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\usercpl.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\rpchttp.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\qdvd.dll
2009-06-02 02:42:33 ----A---- C:\Windows\system32\autoplay.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\wpcao.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\vdsutil.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\tapisrv.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\scksp.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\scesrv.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\regapi.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\oleprn.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\msinfo32.exe
2009-06-02 02:42:32 ----A---- C:\Windows\system32\mpr.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\feclient.dll
2009-06-02 02:42:32 ----A---- C:\Windows\system32\AudioSes.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\wscisvif.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\sdclt.exe
2009-06-02 02:42:31 ----A---- C:\Windows\system32\rekeywiz.exe
2009-06-02 02:42:31 ----A---- C:\Windows\system32\ncryptui.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\imm32.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\iaspolcy.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\Faultrep.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\dpapimig.exe
2009-06-02 02:42:31 ----A---- C:\Windows\system32\dot3msm.dll
2009-06-02 02:42:31 ----A---- C:\Windows\system32\DeviceEject.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\whealogr.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\TSTheme.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\tcpmon.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\spwinsat.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\scecli.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\rasplap.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\rasgcw.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\qedit.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\PnPUnattend.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\pnpui.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\perfdisk.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\hdwwiz.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2009-06-02 02:42:30 ----A---- C:\Windows\system32\fdWSD.dll
2009-06-02 02:42:30 ----A---- C:\Windows\system32\cmmon32.exe
2009-06-02 02:42:30 ----A---- C:\Windows\system32\certreq.exe
2009-06-02 02:42:29 ----A---- C:\Windows\system32\srcore.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\SnippingTool.exe
2009-06-02 02:42:29 ----A---- C:\Windows\system32\SCardSvr.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\raschap.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\MSVidCtl.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\fontext.dll
2009-06-02 02:42:29 ----A---- C:\Windows\system32\conime.exe
2009-06-02 02:42:29 ----A---- C:\Windows\system32\cmdial32.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\WMVXENCD.DLL
2009-06-02 02:42:28 ----A---- C:\Windows\system32\wlanui.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\wlanmsm.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\wiaaut.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\shwebsvc.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\rasppp.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\PnPutil.exe
2009-06-02 02:42:28 ----A---- C:\Windows\system32\oobefldr.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\dsprop.dll
2009-06-02 02:42:28 ----A---- C:\Windows\system32\dimsroam.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\wmdrmsdk.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\shsetup.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\rasmontr.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\mscandui.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\modemui.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\dataclen.dll
2009-06-02 02:42:27 ----A---- C:\Windows\system32\chtbrkr.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\WSDMon.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\wmpeffects.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\wlgpclnt.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\smss.exe
2009-06-02 02:42:26 ----A---- C:\Windows\system32\rdpwsx.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\netplwiz.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\credui.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\certprop.dll
2009-06-02 02:42:26 ----A---- C:\Windows\system32\blackbox.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\wscapi.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\wpcsvc.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\thawbrkr.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\softkbd.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\sendmail.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\networkexplorer.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\msscp.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\msimtf.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\logagent.exe
2009-06-02 02:42:25 ----A---- C:\Windows\system32\InkEd.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\ifmon.dll
2009-06-02 02:42:25 ----A---- C:\Windows\system32\gpresult.exe
2009-06-02 02:42:25 ----A---- C:\Windows\system32\cipher.exe
2009-06-02 02:42:24 ----A---- C:\Windows\system32\olepro32.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\msctfui.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\drmmgrtn.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\dmsynth.dll
2009-06-02 02:42:24 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\wshbth.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\version.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\SLLUA.exe
2009-06-02 02:42:23 ----A---- C:\Windows\system32\puiapi.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\msisip.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\mprapi.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\input.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\fc.exe
2009-06-02 02:42:23 ----A---- C:\Windows\system32\ExplorerFrame.dll
2009-06-02 02:42:23 ----A---- C:\Windows\system32\cdd.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\msjint40.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\l2nacp.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\ftp.exe
2009-06-02 02:42:22 ----A---- C:\Windows\system32\fdSSDP.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\eapp3hst.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\dmusic.dll
2009-06-02 02:42:22 ----A---- C:\Windows\system32\cscapi.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\wsdchngr.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\tscupgrd.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\Storprop.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\SMBHelperClass.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\slcinst.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\rrinstaller.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\rasdial.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\rasdiag.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\networkitemfactory.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\mfps.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\ipconfig.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\fdWCN.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\eappcfg.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\dot3cfg.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\cscdll.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\bthudtask.exe
2009-06-02 02:42:21 ----A---- C:\Windows\system32\bthci.dll
2009-06-02 02:42:21 ----A---- C:\Windows\system32\aaclient.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\ocsetup.exe
2009-06-02 02:42:20 ----A---- C:\Windows\system32\nslookup.exe
2009-06-02 02:42:20 ----A---- C:\Windows\system32\mmcico.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\mfpmp.exe
2009-06-02 02:42:20 ----A---- C:\Windows\system32\hbaapi.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\fdeploy.dll
2009-06-02 02:42:20 ----A---- C:\Windows\system32\eappgnui.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\tsgqec.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\PNPXAssoc.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\iscsilog.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\gpupdate.exe
2009-06-02 02:42:19 ----A---- C:\Windows\system32\csrstub.exe
2009-06-02 02:42:19 ----A---- C:\Windows\system32\cbsra.exe
2009-06-02 02:42:19 ----A---- C:\Windows\system32\bitsigd.dll
2009-06-02 02:42:19 ----A---- C:\Windows\system32\atmlib.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\winrnr.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\vdmdbg.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\slwga.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\odbcconf.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\NcdProp.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\midimap.dll
2009-06-02 02:42:18 ----A---- C:\Windows\system32\inetppui.dll
2009-06-02 02:42:17 ----A---- C:\Windows\system32\spwmp.dll
2009-06-02 02:42:16 ----A---- C:\Windows\system32\wmploc.DLL
2009-06-02 02:42:16 ----A---- C:\Windows\system32\dxmasf.dll
2009-06-02 02:42:15 ----A---- C:\Windows\system32\msimsg.dll
2009-06-02 02:42:15 ----A---- C:\Windows\system32\mferror.dll
2009-06-02 02:42:15 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-06-02 02:42:01 ----A---- C:\Windows\system32\SmiEngine.dll
2009-06-02 02:41:58 ----A---- C:\Windows\system32\wdscore.dll
2009-06-02 02:41:58 ----A---- C:\Windows\system32\PkgMgr.exe
2009-06-02 02:41:54 ----A---- C:\Windows\system32\drvstore.dll
2009-06-01 13:44:24 ----A---- C:\Windows\unvise32qt.exe
2009-06-01 13:43:32 ----D---- C:\Windows\system32\QuickTime
2009-06-01 13:43:32 ----D---- C:\Program Files\QuickTime
2009-06-01 13:41:24 ----D---- C:\ProgramData\QuickTime
2009-06-01 13:22:26 ----A---- C:\VarInit.txt
2009-06-01 13:22:25 ----A---- C:\UtdInfo.txt
2009-05-28 15:11:47 ----D---- C:\Program Files\RegCure
2009-05-24 20:34:40 ----D---- C:\Program Files\Microsoft Student
2009-05-24 20:33:31 ----D---- C:\Program Files\Learning Essentials
2009-05-24 20:33:15 ----A---- C:\Windows\system32\xinput1_1.dll
2009-05-24 20:33:09 ----A---- C:\Windows\system32\d3dx9_30.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_29.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_28.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_27.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_26.dll
2009-05-24 20:33:08 ----A---- C:\Windows\system32\d3dx9_25.dll
2009-05-24 20:33:07 ----A---- C:\Windows\system32\d3dx9_24.dll
2009-05-24 20:17:41 ----D---- C:\Encarta
2009-05-23 12:43:20 ----D---- C:\Users\Saweer\AppData\Roaming\SpinTop
2009-05-23 12:37:13 ----D---- C:\Users\Saweer\AppData\Roaming\PoolSharks
2009-05-22 17:22:49 ----D---- C:\Program Files\EyeOfHorus
2009-05-09 13:35:51 ----D---- C:\ProgramData\Rising
2009-05-09 13:35:12 ----D---- C:\Program Files\Rising
2009-05-09 05:01:51 ----AD---- C:\ProgramData\TEMP
2009-05-09 04:52:58 ----D---- C:\Program Files\removeit
2009-05-07 02:15:21 ----D---- C:\Users\Saweer\AppData\Roaming\uTorrent
2009-05-06 02:38:32 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2009-05-06 02:38:10 ----D---- C:\Users\Saweer\AppData\Roaming\SUPERAntiSpyware.com
2009-05-06 02:38:10 ----D---- C:\Program Files\SUPERAntiSpyware
2009-05-06 02:26:42 ----D---- C:\Program Files\Marxio Timer
2009-05-05 19:05:40 ----A---- C:\Windows\system32\mcophokdll.dll
2009-05-05 19:05:40 ----A---- C:\Windows\system32\mcophokapp.exe
2009-05-01 18:31:33 ----D---- C:\Program Files\Perfect Alarm Clock
2009-05-01 15:04:01 ----D---- C:\Program Files\Equanimity
2009-05-01 13:51:01 ----A---- C:\Windows\system32\mshtmler.dll
2009-05-01 13:51:01 ----A---- C:\Windows\system32\mshtmled.dll
2009-05-01 13:51:01 ----A---- C:\Windows\system32\icardie.dll
2009-05-01 13:51:01 ----A---- C:\Windows\system32\admparse.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\msls31.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\imgutil.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\ieakeng.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\dxtmsft.dll
2009-05-01 13:51:00 ----A---- C:\Windows\system32\corpol.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\webcheck.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\occache.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\msrating.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\licmgr10.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\inseng.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\iepeers.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\ieaksie.dll
2009-05-01 13:50:59 ----A---- C:\Windows\system32\dxtrans.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-05-01 13:50:58 ----A---- C:\Windows\system32\wextract.exe
2009-05-01 13:50:58 ----A---- C:\Windows\system32\vbscript.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\pngfilt.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\mstime.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\msfeedssync.exe
2009-05-01 13:50:58 ----A---- C:\Windows\system32\msfeeds.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\jscript.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\ieapfltr.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\ieakui.dll
2009-05-01 13:50:58 ----A---- C:\Windows\system32\advpack.dll
2009-05-01 13:50:57 ----A---- C:\Windows\system32\url.dll
2009-05-01 13:50:57 ----A---- C:\Windows\system32\mshta.exe
2009-05-01 13:50:57 ----A---- C:\Windows\system32\iexpress.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\SetDepNx.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\PDMSetup.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\ieUnatt.exe
2009-05-01 13:50:56 ----A---- C:\Windows\system32\iesysprep.dll

======List of files/folders modified in the last 3 months======

2009-07-23 00:00:07 ----D---- C:\Windows\Temp
2009-07-22 23:54:40 ----D---- C:\Windows\tracing
2009-07-22 21:54:09 ----D---- C:\Windows\Prefetch
2009-07-22 21:53:44 ----D---- C:\Windows
2009-07-22 20:24:22 ----D---- C:\Program Files\Mozilla Firefox
2009-07-22 17:59:57 ----D---- C:\Program Files\Microsoft Silverlight
2009-07-22 17:59:42 ----D---- C:\Windows\system32\drivers
2009-07-22 16:14:38 ----SHD---- C:\System Volume Information
2009-07-22 15:37:53 ----D---- C:\Windows\system32\catroot
2009-07-22 15:37:48 ----D---- C:\Windows\inf
2009-07-22 15:34:01 ----D---- C:\Windows\winsxs
2009-07-22 15:34:00 ----D---- C:\Program Files\Internet Explorer
2009-07-22 15:33:28 ----SHD---- C:\Windows\Installer
2009-07-22 15:01:42 ----HD---- C:\ProgramData
2009-07-22 15:01:42 ----D---- C:\Program Files
2009-07-21 23:58:03 ----D---- C:\Windows\System32
2009-07-21 23:58:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-07-21 20:33:40 ----D---- C:\ProgramData\NVIDIA
2009-07-21 20:13:54 ----D---- C:\Windows\system32\catroot2
2009-07-21 20:10:56 ----D---- C:\SwSetup
2009-07-21 08:28:17 ----D---- C:\Windows\Tasks
2009-07-21 08:28:06 ----D---- C:\Windows\system32\Tasks
2009-07-21 02:54:08 ----D---- C:\ProgramData\CyberLink
2009-07-21 02:53:52 ----D---- C:\Users\Saweer\AppData\Roaming\CyberLink
2009-07-21 02:32:40 ----D---- C:\Program Files\IDT
2009-07-19 21:38:44 ----D---- C:\Windows\system32\config
2009-07-19 21:38:42 ----D---- C:\Windows\panther
2009-07-19 21:38:41 ----D---- C:\Windows\Debug
2009-07-19 01:28:47 ----D---- C:\Windows\system32\zh-TW
2009-07-19 01:28:47 ----D---- C:\Windows\system32\zh-CN
2009-07-19 01:28:47 ----D---- C:\Windows\system32\sv-SE
2009-07-19 01:28:47 ----D---- C:\Windows\system32\ru-RU
2009-07-19 01:28:47 ----D---- C:\Windows\system32\pt-BR
2009-07-19 01:28:47 ----D---- C:\Windows\system32\pl-PL
2009-07-19 01:28:47 ----D---- C:\Windows\system32\nl-NL
2009-07-19 01:28:47 ----D---- C:\Windows\system32\nb-NO
2009-07-19 01:28:46 ----D---- C:\Windows\system32\ko-KR
2009-07-19 01:28:46 ----D---- C:\Windows\system32\ja-JP
2009-07-19 01:28:46 ----D---- C:\Windows\system32\it-IT
2009-07-19 01:28:46 ----D---- C:\Windows\system32\fr-FR
2009-07-19 01:28:45 ----D---- C:\Windows\system32\fi-FI
2009-07-19 01:28:45 ----D---- C:\Windows\system32\es-ES
2009-07-19 01:28:45 ----D---- C:\Windows\system32\en-US
2009-07-19 01:28:45 ----D---- C:\Windows\system32\de-DE
2009-07-19 01:28:45 ----D---- C:\Windows\system32\da-DK
2009-07-18 23:13:24 ----RSD---- C:\Windows\Fonts
2009-07-18 23:11:23 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-18 23:11:18 ----D---- C:\Program Files\HP
2009-07-18 17:07:55 ----D---- C:\Program Files\Hewlett-Packard
2009-07-18 16:30:41 ----D---- C:\Program Files\Common Files
2009-07-18 02:16:58 ----RSD---- C:\Windows\assembly
2009-07-18 01:08:34 ----D---- C:\Program Files\Winamp
2009-07-16 16:24:59 ----SD---- C:\Windows\Downloaded Program Files
2009-07-15 16:29:05 ----D---- C:\Program Files\Windows Mail
2009-07-14 03:17:01 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2009-07-14 03:16:03 ----D---- C:\Program Files\DVDVideoSoft
2009-07-11 14:45:28 ----D---- C:\Windows\SMINST
2009-07-11 14:45:25 ----D---- C:\Program Files\A-1 Image 4.20
2009-07-07 18:10:56 ----A---- C:\Windows\system32\mrt.exe
2009-07-05 19:06:38 ----D---- C:\Windows\registration
2009-06-30 22:28:22 ----D---- C:\Program Files\Google
2009-06-29 01:47:43 ----D---- C:\Users\Saweer\AppData\Roaming\IObit
2009-06-28 23:52:51 ----D---- C:\Windows\Microsoft.NET
2009-06-28 01:03:21 ----D---- C:\Program Files\Common Files\microsoft shared
2009-06-27 20:32:51 ----D---- C:\Users\Saweer\AppData\Roaming\COWON
2009-06-27 01:21:15 ----D---- C:\Program Files\Java
2009-06-27 00:05:16 ----D---- C:\Windows\Logs
2009-06-26 22:52:37 ----D---- C:\Windows\Cursors
2009-06-26 22:42:51 ----D---- C:\Windows\LiveKernelReports
2009-06-24 02:04:56 ----D---- C:\Windows\system32\LogFiles
2009-06-10 03:29:16 ----D---- C:\Windows\ehome
2009-06-10 03:29:15 ----D---- C:\Windows\system32\migration
2009-06-10 03:10:14 ----D---- C:\Program Files\Microsoft Works
2009-06-10 03:08:56 ----D---- C:\ProgramData\Microsoft Help
2009-06-10 03:08:10 ----A---- C:\Windows\win.ini
2009-06-05 22:25:54 ----SD---- C:\Users\Saweer\AppData\Roaming\Microsoft
2009-06-02 03:23:31 ----D---- C:\Windows\rescache
2009-06-02 03:11:15 ----SHD---- C:\boot
2009-06-02 03:03:53 ----D---- C:\Program Files\Windows Calendar
2009-06-02 03:03:52 ----D---- C:\Program Files\Movie Maker
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Sidebar
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Media Player
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Journal
2009-06-02 03:03:50 ----D---- C:\Program Files\Windows Collaboration
2009-06-02 03:03:47 ----D---- C:\Program Files\Windows Photo Gallery
2009-06-02 03:03:47 ----D---- C:\Program Files\Common Files\System
2009-06-02 03:03:43 ----D---- C:\Windows\servicing
2009-06-02 03:03:43 ----D---- C:\Program Files\Windows Defender
2009-06-02 03:03:30 ----D---- C:\Windows\system32\XPSViewer
2009-06-02 03:03:30 ----D---- C:\Windows\system32\sk-SK
2009-06-02 03:03:30 ----D---- C:\Windows\system32\lv-LV
2009-06-02 03:03:30 ----D---- C:\Windows\system32\hr-HR
2009-06-02 03:03:30 ----D---- C:\Windows\system32\et-EE
2009-06-02 03:03:30 ----D---- C:\Windows\IME
2009-06-02 03:03:28 ----D---- C:\Windows\system32\oobe
2009-06-02 03:03:28 ----D---- C:\Windows\system32\el-GR
2009-06-02 03:03:23 ----D---- C:\Windows\system32\setup
2009-06-02 03:03:23 ----D---- C:\Windows\system32\he-IL
2009-06-02 03:03:23 ----D---- C:\Windows\system32\AdvancedInstallers
2009-06-02 03:03:22 ----D---- C:\Windows\system32\uk-UA
2009-06-02 03:03:22 ----D---- C:\Windows\system32\sr-Latn-CS
2009-06-02 03:03:22 ----D---- C:\Windows\system32\SLUI
2009-06-02 03:03:22 ----D---- C:\Windows\system32\sl-SI
2009-06-02 03:03:22 ----D---- C:\Windows\system32\ro-RO
2009-06-02 03:03:22 ----D---- C:\Windows\system32\pt-PT
2009-06-02 03:03:22 ----D---- C:\Windows\system32\manifeststore
2009-06-02 03:03:22 ----D---- C:\Windows\system32\hu-HU
2009-06-02 03:03:22 ----D---- C:\Windows\system32\en
2009-06-02 03:03:22 ----D---- C:\Windows\system32\cs-CZ
2009-06-02 03:03:22 ----D---- C:\Windows\system32\bg-BG
2009-06-02 03:03:21 ----D---- C:\Windows\system32\th-TH
2009-06-02 03:03:20 ----D---- C:\Windows\system32\wbem
2009-06-02 03:03:20 ----D---- C:\Windows\system32\tr-TR
2009-06-02 03:03:18 ----D---- C:\Windows\system32\lt-LT
2009-06-02 03:03:18 ----D---- C:\Windows\system32\ar-SA
2009-06-02 03:03:17 ----D---- C:\Windows\system32\migwiz
2009-06-02 03:02:41 ----D---- C:\Windows\AppPatch
2009-06-02 03:02:34 ----D---- C:\Windows\system32\Boot
2009-06-01 13:22:24 ----D---- C:\Program Files\Common Files\InstallShield
2009-05-24 20:38:04 ----SD---- C:\ProgramData\Microsoft
2009-05-07 22:26:36 ----D---- C:\Windows\ModemLogs
2009-05-04 20:34:15 ----D---- C:\Windows\system32\spool
2009-05-01 18:39:03 ----A---- C:\Windows\ss3unstl.exe
2009-05-01 18:38:39 ----A---- C:\Windows\unins000.exe
2009-05-01 18:29:48 ----A---- C:\Windows\wbfaone.ini
2009-05-01 18:23:07 ----D---- C:\Windows\a1imagesaver
2009-05-01 14:05:31 ----D---- C:\Windows\PolicyDefinitions
2009-04-28 20:51:45 ----D---- C:\Windows\system32\WDI
2009-04-25 14:28:15 ----D---- C:\Games

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-04-28 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]
R2 Aspi32;Aspi32; C:\Windows\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-04-28 55640]
R2 RMCAST;RMCAST (Pgm) Protocol Driver; C:\Windows\system32\DRIVERS\RMCAST.sys [2009-04-11 113664]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2008-08-07 34608]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-10-23 1331192]
R3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-06-23 80424]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-06-23 81960]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-06-23 16168]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-09-04 54784]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-19 16768]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-04-17 114528]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2008-08-06 44576]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-09-13 7391392]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2009-05-25 164864]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2008-09-11 389120]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-06-20 200112]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 ALSysIO;ALSysIO; \??\C:\Users\Saweer\AppData\Local\Temp\ALSysIO.sys []
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-10-23 1331192]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-02-06 55280]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2008-01-21 987648]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2008-01-21 654336]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\aestsrv.exe [2008-06-27 77824]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2008-03-18 13312]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-06-10 185089]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2008-08-07 24880]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-04-16 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-01-27 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-09-13 196608]
R2 QPCapSvc;QuickPlay Background Capture Service (QBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [2009-01-12 292216]
R2 QPSched;QuickPlay Task Scheduler (QTS); C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [2009-01-12 116080]
R2 Recovery Service for Windows;Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [2008-03-27 341328]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\STacSV.exe [2008-09-11 237650]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-02-07 193840]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-01-26 148832]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S2 gupdate1c992f9716bca36;Google Update Service (gupdate1c992f9716bca36); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-20 133104]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 fsssvc;Windows Live Family Safety; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2007-07-24 181800]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-08 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-27 145184]

-----------------EOF-----------------

[Shaba]

Ok, you seem to have more free RAM.

Did it help for slowness?

[sahem]

I can't till right now
but anyway thanx
you are great guyz go on

[Shaba]

Let's run one scan to be sure that there is nothing left.

Please go to Kaspersky website and perform an online antivirus scan.

1. Read through the requirements and privacy statement and click on Accept button.
2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
3. When the downloads have finished, click on Settings.
4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
   Spyware, Adware, Dialers, and other potentially dangerous programs
   Archives
   
5. Click on My Computer under Scan.
6. Once the scan is complete, it will display the results. Click on View Scan Report.
7. You will see a list of infected items there. Click on Save Report As....
8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
9. Please post this log in your next reply along with a fresh HijackThis log.

[sahem]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:22:49 م, on 24/07/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Java\jre6\bin\jp2launcher.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\windows\ehome\ehtray.exe
C:\Users\Saweer\Stuff\installs\CoreTemp\Core Temp.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Saweer\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Saweer\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Saweer\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... on&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Texas%20Holdem%20Poker/Images/armhelper.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate1c992f9716bca36) (gupdate1c992f9716bca36) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_805f33de\STacSV.exe

--
End of file - 12622 bytes

[sahem]

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Friday, July 24, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 2 (build 6002)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Friday, July 24, 2009 03:03:39
Records in database: 2523284
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\

Scan statistics:
Files scanned: 233345
Threat name: 3
Infected objects: 3
Suspicious objects: 0
Duration of the scan: 06:46:23


File name / Threat name / Threats count
C:\Program Files\Multimedia Builder498\Player\Player.bin Infected: Backdoor.Win32.Bifrose.bjap 1
C:\Program Files\Multimedia Builder498\Plugins\MMBMisc.dll Infected: not-a-virus:RiskTool.Win32.Squnsh.b 1
C:\Users\Saweer\Medical\NEW\CD 3\other\BREATHING THE MASTER KEY TO SELF HEALING\BREATHING THE MASTER KEY TO SELF HEALING.exe Infected: Trojan-Dropper.Win32.VB.lhn 1

The selected area was scanned.

[Shaba]

I'd like you to check a file for malware.

• Go to VirusTotal or Jotti's

C:\Program Files\Multimedia Builder498\Player\Player.bin I

• Copy/Paste file on the list into the white Upload a file box.
• Click Send/Submit, and the file will upload to VirusTotal/Jotti, where it will be scanned by several anti-virus programmes.
• After a while, a window will open, with details of what the scans found.
• Save the complete results in a Notepad/Word document on your desktop.
• Post back results here, please.

[sahem]

File size: 528896 bytes
Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5: e73703ebac562139018abeabc5517a4a
SHA1: ab312d40be622805aac945c2186e77f08a7178b3
Packer (Avast): UPX
Packer (Drweb): UPX

[Shaba]

Please post complete results here

[sahem]

noooooooooooo
don't till me that this is not the complete results
the kaspersky test took more than six hrs it killed me cause my line is 128kb
to be frank i'll not do it again or i can't
is there any other way!?!?!?!?!?

[Shaba]

I meant complete jotti/virustotal results for that file

[sahem]

ADDITIONAL INFORMATION


File size: 528896 bytes
Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
MD5: e73703ebac562139018abeabc5517a4a
SHA1: ab312d40be622805aac945c2186e77f08a7178b3
Packer (Avast): UPX
Packer (Drweb): UPX


2009-07-24 Found nothing 2009-07-25 Found nothing
2009-07-25 Trojan.Agent!IK 2009-07-24 Trojan.Agent IKARUS & A-SQUARED
2009-07-24 Found nothing 2009-07-25 Backdoor.Win32.Bifrose.bjap KASPER
2009-07-24 Found nothing 2009-07-24 Found nothing
2009-07-24 Found nothing 2009-07-24 Found nothing
2009-07-25 Found nothing 2009-07-24 Found nothing
2009-07-25 Found nothing 2009-07-24 Found nothing
2009-07-25 Found nothing 2009-07-25 Found nothing
2009-07-24 Found nothing 2009-07-24 Found nothing
2009-07-24 Found nothing 2009-07-24 Found nothing
2009-07-24 Backdoor.Win32.Bifrose.bjap F-SECURE

[Shaba]

Do you recognize this program?

Multimedia Builder498

[sahem]

no
i never used it
should i delete it???!!

[Shaba]

Yes I recommend to do that.

Delete this as well:

C:\Users\Saweer\Medical\NEW\CD 3\other\BREATHING THE MASTER KEY TO SELF HEALING

Empty Recycle Bin.

Still problems?