DDS (Ver_09-07-30.01) - NTFSx86 Run by [removed] at 18:54:30.18 on Thu 09/17/2009 Internet Explorer: 6.0.2900.5512 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.55 [GMT -6:00] AV: Webroot AntiVirus with AntiSpyware *On-access scanning enabled* (Updated) {77E10C7F-2CCA-4187-9394-BDBC267AD597} ============== Running Processes =============== C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost -k DcomLaunch C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\MozyHome\mozybackup.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe C:\Program Files\Wireless-G USB Network Adapter\WLService.exe C:\Program Files\Wireless-G USB Network Adapter\WUSB54G.exe C:\Program Files\STOPzilla!\STOPzilla.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MozyHome\mozystat.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe C:\Program Files\Napster\napster.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\TMW\Local Settings\Temporary Internet Files\Content.IE5\89IJ0TEV\dds[1].scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ uSearch Page = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com uDefault_Page_URL = hxxp://www.dell4me.com/myway uSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.html uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mDefault_Page_URL = hxxp://yahoo.sbc.com/dsl mDefault_Search_URL = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com mSearch Page = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sp/sbcydsl/*http://www.yahoo.com mStart Page = hxxp://yahoo.sbc.com/dsl mSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.html uInternet Connection Wizard,ShellNext = hxxp://www.dell4me.com/myway uInternet Settings,ProxyOverride = *.local uSearchURL,(Default) = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: ZILLAbar Browser Helper Object: {1827766b-9f49-4854-8034-f6ee26fcb1ec} - c:\program files\stopzilla!\SZSG.dll BHO: {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - No File BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\tfswshx.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: STOPzilla Browser Helper Object: {e3215f20-3212-11d6-9f8b-00d0b743919d} - c:\program files\stopzilla!\SZIEBHO.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: STOPzilla: {98828ded-a591-462f-83ba-d2f62a68b8b8} - c:\program files\stopzilla!\SZSG.dll EB: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - No File EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll uRun: [ctfmon.exe] "c:\windows\system32\ctfmon.exe" mRun: [SoundMAXPnP] "c:\program files\analog devices\core\smax4pnp.exe" mRun: [IAAnotif] "c:\program files\intel\intel application accelerator\iaanotif.exe" mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe" mRun: [IntelMeM] "c:\program files\intel\modem event monitor\IntelMEM.exe" mRun: [RealTray] "c:\program files\real\realplayer\RealPlay.exe" SYSTEMBOOTHIDEPLAYER mRun: [dla] "c:\windows\system32\dla\tfswctrl.exe" mRun: [UpdateManager] "c:\program files\common files\sonic\update manager\sgtray.exe" /r mRun: [DVDLauncher] "c:\program files\cyberlink\powerdvd\DVDLauncher.exe" mRun: [NapsterShell] "c:\program files\napster\napster.exe" /systray mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [SpySweeper] "c:\program files\webroot\webrootsecurity\SpySweeperUI.exe" /startintray mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" StartupFolder: c:\docume~1\tmw\startm~1\programs\startup\pmbmed~1.lnk - c:\program files\sony\sony picture utility\pmbcore\SPUVolumeWatcher.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mozyho~1.lnk - c:\program files\mozyhome\mozystat.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office10\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2499216C-4BA5-11D5-BD9C-000103C116D5} - {2499216C-4BA5-11D5-BD9C-000103C116D5} - c:\program files\yahoo!\common\ylogin.dll IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll LSP: c:\program files\common files\is3\anti-spyware\iS3lsp.dll DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204 DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} - hxxp://photo.walgreens.com/WalgreensActivia.cab DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} - hxxp://www.linkedin.com/cab/LinkedInContactFinderControl.cab DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1110943702750 DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1161607529152 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} - hxxps://www.mybizportal.net/dana-cached/setup/JuniperSetupSP1.cab DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} - hxxp://entimg.msn.com/client/msnmusax2702.cab SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\tmw\applic~1\mozilla\firefox\profiles\dwjhl18j.default\ FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p= FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ ---- FIREFOX POLICIES ---- c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); ============= SERVICES / DRIVERS =============== R0 ssfs0bbc;ssfs0bbc;c:\windows\system32\drivers\ssfs0bbc.sys [2009-4-21 29808] R0 szkg5;szkg;c:\windows\system32\drivers\SZKG.sys [2009-5-12 61328] R1 mozyFilter;mozyFilter;c:\windows\system32\drivers\mozy.sys [2008-8-9 54776] S1 Filter;Filter;\??\c:\windows\system32\drivers\filter.sys --> c:\windows\system32\drivers\Filter.sys [?] =============== Created Last 30 ================ 2009-09-13 11:33 --d----- c:\program files\iPhone Configuration Utility 2009-09-13 11:27 --d----- c:\program files\iPod 2009-09-13 11:27 --d----- c:\program files\iTunes 2009-09-13 11:27 --d----- c:\docume~1\alluse~1\applic~1\{755AC846-7372-4AC8-8550-C52491DAA8BD} 2009-09-13 11:18 --d----- c:\program files\Bonjour 2009-09-11 10:29 10,168 a------- c:\windows\system32\drivers\kgpcpy.cfg 2009-09-10 19:23 --d----- c:\program files\AVG 2009-09-10 19:21 --d----- c:\docume~1\alluse~1\applic~1\avg8 2009-09-10 18:48 --d----- c:\program files\MSSOAP 2009-09-10 18:47 1,563,008 a------- c:\windows\WRSetup.dll 2009-09-10 18:47 --d----- c:\program files\Webroot 2009-09-10 18:47 --d----- c:\docume~1\tmw\applic~1\Webroot 2009-09-10 18:47 --d----- c:\docume~1\alluse~1\applic~1\Webroot 2009-09-10 17:13 --d----- c:\docume~1\tmw\applic~1\Malwarebytes 2009-09-10 17:13 --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes 2009-09-09 19:42 --d----- c:\docume~1\alluse~1\applic~1\SITEguard 2009-09-09 19:41 --d----- c:\program files\STOPzilla! 2009-09-09 19:41 --d----- c:\program files\common files\iS3 2009-09-09 19:41 --d----- c:\docume~1\alluse~1\applic~1\STOPzilla! 2009-09-09 19:19 7,396 a------- c:\windows\system32\drivers\pctcore.cat 2009-09-09 17:40 --d----- c:\program files\webserver 2009-09-08 17:52 --dsh--- c:\documents and settings\tmw\IECompatCache 2009-09-08 17:21 3,684 a------- c:\windows\fs1234.dat 2009-09-08 07:30 1 ----h--- c:\windows\bk23567.dat 2009-09-08 07:30 1 a------- c:\windows\fdgg34353edfgdfdf 2009-09-08 07:30 --d----- c:\program files\DDnsFilter 2009-09-08 07:29 2 a------- c:\windows\0101120101465154.xe 2009-09-08 07:29 2 a------- c:\windows\0535251103110107106.yux 2009-09-05 01:54 94,208 a------- c:\windows\system32\QuickTimeVR.qtx 2009-09-05 01:54 69,632 a------- c:\windows\system32\QuickTime.qts 2009-09-03 19:34 81,920 a------- c:\windows\system32\ieencode.dll 2009-09-03 19:34 81,920 a------- c:\windows\system32\dllcache\ieencode.dll ==================== Find3M ==================== 2009-08-28 19:42 2,065,696 a------- c:\windows\system32\usbaaplrc.dll 2009-08-28 19:42 40,448 a------- c:\windows\system32\drivers\usbaapl.sys 2009-08-05 03:01 204,800 a------- c:\windows\system32\mswebdvd.dll 2009-08-05 03:01 204,800 -------- c:\windows\system32\dllcache\mswebdvd.dll 2009-07-31 15:23 411,368 a------- c:\windows\system32\deploytk.dll 2009-07-20 14:57 17,408 a----r-- c:\windows\system32\SZIO5.dll 2009-07-20 14:56 311,296 a----r-- c:\windows\system32\SZBase5.dll 2009-07-20 14:56 540,672 a----r-- c:\windows\system32\SZComp5.dll 2009-07-19 18:48 11,067,392 -------- c:\windows\system32\dllcache\ieframe.dll 2009-07-18 10:05 3,069,440 a------- c:\windows\system32\dllcache\mshtml.dll 2009-07-18 10:05 1,509,888 -------- c:\windows\system32\dllcache\shdocvw.dll 2009-07-17 13:01 58,880 a------- c:\windows\system32\atl.dll 2009-07-17 13:01 58,880 -------- c:\windows\system32\dllcache\atl.dll 2009-07-13 23:43 10,841,088 a------- c:\windows\system32\dllcache\wmp.dll 2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll 2009-07-13 23:43 286,208 a------- c:\windows\system32\dllcache\wmpdxm.dll 2009-07-10 07:27 1,315,328 a------- c:\windows\system32\dllcache\msoe.dll 2009-07-09 15:52 126,976 a----r-- c:\windows\system32\IS3HTUI5.dll 2009-07-09 15:52 393,216 a----r-- c:\windows\system32\IS3DBA5.dll 2009-07-09 15:51 385,024 a----r-- c:\windows\system32\IS3UI5.dll 2009-07-09 15:51 61,440 a----r-- c:\windows\system32\IS3Hks5.dll 2009-07-09 15:51 23,040 a----r-- c:\windows\system32\IS3XDat5.dll 2009-07-09 15:50 225,280 a----r-- c:\windows\system32\IS3Win325.dll 2009-07-09 15:50 94,208 a----r-- c:\windows\system32\IS3Inet5.dll 2009-07-09 15:50 90,112 a----r-- c:\windows\system32\IS3Svc5.dll 2009-07-09 15:47 724,992 a----r-- c:\windows\system32\IS3Base5.dll 2009-07-03 11:09 12,800 -------- c:\windows\system32\dllcache\xpshims.dll 2009-07-03 11:09 594,432 -------- c:\windows\system32\dllcache\msfeeds.dll 2009-07-03 11:09 55,296 -------- c:\windows\system32\dllcache\msfeedsbs.dll 2009-07-03 11:09 1,985,536 -------- c:\windows\system32\dllcache\iertutil.dll 2009-07-03 11:09 246,272 -------- c:\windows\system32\dllcache\ieproxy.dll 2009-07-01 01:08 101,376 a------- c:\windows\system32\dllcache\iecompat.dll 2009-06-26 10:50 666,624 a------- c:\windows\system32\wininet.dll 2009-06-26 10:50 666,624 a------- c:\windows\system32\dllcache\wininet.dll 2009-06-26 10:50 620,032 a------- c:\windows\system32\dllcache\urlmon.dll 2009-06-25 02:25 730,112 a------- c:\windows\system32\lsasrv.dll 2009-06-25 02:25 301,568 a------- c:\windows\system32\kerberos.dll 2009-06-25 02:25 147,456 a------- c:\windows\system32\schannel.dll 2009-06-25 02:25 136,192 a------- c:\windows\system32\msv1_0.dll 2009-06-25 02:25 56,832 a------- c:\windows\system32\secur32.dll 2009-06-25 02:25 54,272 a------- c:\windows\system32\wdigest.dll 2009-06-25 02:25 730,112 -------- c:\windows\system32\dllcache\lsasrv.dll 2009-06-25 02:25 301,568 -------- c:\windows\system32\dllcache\kerberos.dll 2009-06-25 02:25 147,456 -------- c:\windows\system32\dllcache\schannel.dll 2009-06-25 02:25 136,192 -------- c:\windows\system32\dllcache\msv1_0.dll 2009-06-25 02:25 56,832 -------- c:\windows\system32\dllcache\secur32.dll 2009-06-25 02:25 54,272 -------- c:\windows\system32\dllcache\wdigest.dll 2009-06-24 05:18 92,928 -------- c:\windows\system32\dllcache\ksecdd.sys 2009-02-28 13:59 73,688 ac------ c:\docume~1\tmw\applic~1\GDIPFONTCACHEV1.DAT 2006-07-04 11:32 3,331,878 ac------ c:\documents and settings\tmw\neoteris_read_3109534.reg 2006-06-09 14:29 3,330,338 ac------ c:\documents and settings\tmw\neoteris_read_672904.reg 2006-06-09 07:23 134 ac------ c:\documents and settings\tmw\neoteris_write_17131806.reg 2006-03-31 07:07 3,319,982 ac------ c:\documents and settings\tmw\neoteris_read_26611461.reg 2006-03-11 19:36 3,317,256 ac------ c:\documents and settings\tmw\neoteris_read_18916478.reg 2006-02-08 18:20 3,317,256 ac------ c:\documents and settings\tmw\neoteris_read_26143190.reg 2006-01-24 19:44 3,315,252 ac------ c:\documents and settings\tmw\neoteris_read_8889804.reg 2005-12-25 17:18 3,315,252 ac------ c:\documents and settings\tmw\neoteris_read_12926414.reg 2005-12-23 09:46 3,315,252 ac------ c:\documents and settings\tmw\neoteris_read_12888787.reg 2005-12-18 18:25 3,315,252 ac------ c:\documents and settings\tmw\neoteris_read_15054627.reg 2005-12-08 16:28 3,312,282 ac------ c:\documents and settings\tmw\neoteris_read_8970080.reg 2005-12-04 19:18 3,312,282 ac------ c:\documents and settings\tmw\neoteris_read_9194103.reg 2005-10-28 12:26 3,312,188 ac------ c:\documents and settings\tmw\neoteris_read_6227944.reg 2005-10-26 14:10 3,312,188 ac------ c:\documents and settings\tmw\neoteris_read_23885293.reg 2005-10-25 13:19 3,312,188 ac------ c:\documents and settings\tmw\neoteris_read_26664116.reg 2005-10-25 06:59 3,301,166 ac------ c:\documents and settings\tmw\neoteris_read_5298332.reg 2005-10-23 19:18 3,300,200 ac------ c:\documents and settings\tmw\neoteris_read_28470003.reg 2005-10-18 08:15 3,300,200 ac------ c:\documents and settings\tmw\neoteris_read_6175092.reg 2005-06-21 17:11 3,275,582 ac------ c:\documents and settings\tmw\neoteris_read_3753023.reg 2006-06-05 20:46 88 ---shr-- c:\windows\system32\84D9348185.sys 2006-06-05 20:46 3,350 a--sh--- c:\windows\system32\KGyGaAvL.sys ============= FINISH: 18:57:09.59 ===============