. DDS (Ver_2011-06-23.01) - NTFSx86 Internet Explorer: 8.0.6001.19120 Run by [removed] at 7:15:25 on 2011-08-17 Microsoft� Windows Vista� Home Premium 6.0.6002.2.1252.55.1033.18.2046.902 [GMT -3:00] . AV: Trend Micro Titanium Maximum Security *Enabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902} AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160} SP: Trend Micro Titanium Maximum Security *Enabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF} SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k rpcss c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\PROGRA~1\GbPlugin\GbpSv.exe C:\Windows\system32\WLANExt.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost.exe -k bthsvcs C:\Program Files\Hotspot Shield\bin\openvpnas.exe C:\Windows\system32\svchost.exe -k hpdevmgmt C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe C:\Program Files\Hotspot Shield\bin\hsswd.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\taskeng.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Hp\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Program Files\CardScan\CardScan\CardScanAgent.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe C:\Program Files\Hp\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\iPod\bin\iPodService.exe c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\wuauclt.exe C:\Users\SONIA\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\SONIA\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\msfeedssync.exe C:\Windows\system32\conime.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_br&c=81&bd=Pavilion&pf=laptop mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_br&c=81&bd=Pavilion&pf=laptop mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_br&c=81&bd=Pavilion&pf=laptop uInternet Settings,ProxyOverride = *.local BHO: HP Print Clips: {053f9267-dc04-4294-a72c-58f732d338c0} - c:\program files\hp\smart web printing\hpswp_framework.dll BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: TmIEPlugInBHO Class: {1ca1377b-dc1d-4a52-9585-6e06050fac53} - c:\program files\trend micro\amsp\module\20004\1.5.1464\6.6.1081\TmIEPlg.dll BHO: TSToolbarBHO: {43c6d902-a1c5-45c9-91f6-fd9e90337e18} - c:\program files\trend micro\titanium\uiframework\ToolbarIE.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: StartNow Toolbar Helper: {6e13d095-45c3-4271-9475-f3b48227dd9f} - c:\program files\startnow toolbar\Toolbar32.dll BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.6209.1142\swg.dll BHO: TmBpIeBHO Class: {bbacbafd-fa5e-4079-8b33-00eb9f13d4ac} - c:\program files\trend micro\amsp\module\20002\6.6.1010\6.6.1010\TmBpIe32.dll BHO: GbIehObj Class: {c41a1c0e-ea6c-11d4-b1b8-444553540007} - c:\windows\downloaded program files\conflict.3\gbiehabn.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: Hotspot Shield Class: {f9e4a054-e9b1-4bc3-83a3-76a1ae736170} - c:\program files\hotspot shield\hssie\HssIE.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll TB: StartNow Toolbar: {5911488e-9d1e-40ec-8cbb-06b231cc153f} - c:\program files\startnow toolbar\Toolbar32.dll TB: Trend Micro Toolbar: {ccac5586-44d7-4c43-b64a-f042461a97d2} - c:\program files\trend micro\titanium\uiframework\ToolbarIE.dll uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [LightScribe Control Panel] c:\program files\common files\lightscribe\LightScribeControlPanel.exe -hidden uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [CardScan AutoSync] uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe uRun: [] uRun: [NokiaOviSuite2] c:\program files\nokia\nokia ovi suite\NokiaOviSuite.exe -tray uRun: [Google Update] "c:\users\sonia\appdata\local\google\update\GoogleUpdate.exe" /c mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe" mRun: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start mRun: [OnScreenDisplay] c:\program files\hewlett-packard\hp quicktouch\HPKBDAPP.exe mRun: [UCam_Menu] "c:\program files\cyberlink\youcam\muitransfer\muistartmenu.exe" "c:\program files\cyberlink\youcam" update "software\cyberlink\youcam\1.0" mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [hpWirelessAssistant] c:\program files\hewlett-packard\hp wireless assistant\HPWAMain.exe mRun: [WAWifiMessage] c:\program files\hewlett-packard\hp wireless assistant\WiFiMsg.exe mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe" mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe" mRun: [CardScanAgent] "c:\program files\cardscan\cardscan\CardScanAgent.exe" mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey mRun: [NokiaMServer] c:\program files\common files\nokia\mplatform\NokiaMServer /watchfiles startup mRun: [Trend Micro Titanium] c:\program files\trend micro\titanium\uiframework\uiWinMgr.exe -set Silent "1" SplashURL "" mRun: [Trend Micro Client Framework] "c:\program files\trend micro\uniclient\uifrmwrk\UIWatchDog.exe" dRunOnce: [] StartupFolder: c:\users\sonia\appdata\roaming\micros~1\windows\startm~1\programs\startup\ferram~1.lnk - c:\program files\sony\sony picture utility\volumewatcher\SPUVolumeWatcher.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm IE: {58ECB495-38F0-49cb-A538-10282ABF65E7} - {E763472E-A716-4CD9-89BD-DBDA6122F741} - c:\program files\hp\smart web printing\hpswp_extensions.dll IE: {700259D7-1666-479a-93B1-3250410481E8} - {A93C41D8-01F8-4F8B-B14C-DE20B117E636} - c:\program files\hp\smart web printing\hpswp_extensions.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL Trusted Zone: rie.com.br\www Trusted Zone: secureweb.com.br\www DPF: {4788DE0A-3552-49EA-AC8C-233DA52523B9} - hxxp://www.blackberry.com/devicesoftware/AxLoader.cab DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldpt-br.cab DPF: {E37CB5F0-51F5-4395-A808-5FA49E399007} - hxxps://wwws.realsecureweb.com.br/mpr/plugin/Cab/GbPluginABN.cab TCP: DhcpNameServer = [removed] [removed] TCP: Interfaces\{97A52A2C-17B6-4F4A-B147-974A6442CCE1} : DhcpNameServer = [removed] [removed] Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - c:\program files\trend micro\amsp\module\20002\6.6.1010\6.6.1010\TmBpIe32.dll Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - c:\program files\trend micro\amsp\module\20004\1.5.1464\6.6.1081\TmIEPlg.dll Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - c:\program files\trend micro\titanium\uiframework\ToolbarIE.dll Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - c:\program files\trend micro\titanium\uiframework\ProToolbarIMRatingActiveX.dll SEH: GbPluginObj Class: {e37cb5f0-51f5-4395-a808-5fa49e399007} - c:\windows\downloaded program files\conflict.3\gbiehabn.dll mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe" . ============= SERVICES / DRIVERS =============== . R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2010-10-24 165648] R1 MpKsl6682b8a8;MpKsl6682b8a8;c:\programdata\microsoft\microsoft antimalware\definition updates\{2477d6d8-80ae-4b9b-b40e-45ad1ae55cee}\MpKsl6682b8a8.sys [2011-8-17 28752] R2 Amsp;Trend Micro Solution Platform;c:\program files\trend micro\amsp\coreServiceShell.exe [2011-8-16 188272] R2 HssWd;Hotspot Shield Monitoring Service;c:\program files\hotspot shield\bin\hsswd.exe -product hss --> c:\program files\hotspot shield\bin\hsswd.exe -product HSS [?] R2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [2011-8-16 64080] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2010-10-24 65024] RUnknown GbpSv;GbpSv; [x] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-11-30 136176] S3 gupdatem;Servi�o do Google Update (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-11-30 136176] S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2010-10-24 43392] . =============== Created Last 30 ================ . 2011-08-17 09:55:51 28752 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{2477d6d8-80ae-4b9b-b40e-45ad1ae55cee}\MpKsl6682b8a8.sys 2011-08-16 19:28:45 -------- d-----w- C:\temp 2011-08-16 18:24:03 92112 ----a-w- c:\windows\system32\drivers\tmtdi.sys 2011-08-16 18:22:45 80464 ----a-w- c:\windows\system32\drivers\tmactmon.sys 2011-08-16 18:22:45 64080 ----a-w- c:\windows\system32\drivers\tmevtmgr.sys 2011-08-16 18:22:45 189520 ----a-w- c:\windows\system32\drivers\tmcomm.sys 2011-08-16 18:09:23 -------- d-----w- c:\programdata\Trend Micro 2011-08-16 18:09:14 -------- d-----w- c:\program files\Trend Micro 2011-08-16 17:27:18 6881616 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{2477d6d8-80ae-4b9b-b40e-45ad1ae55cee}\mpengine.dll 2011-08-16 16:37:46 -------- d-----w- c:\program files\StartNow Toolbar 2011-08-16 16:36:59 625984 ----a-w- c:\program files\common files\ZugoInstaller.exe 2011-08-16 12:19:45 -------- d-----w- c:\users\sonia\appdata\roaming\Nokia Ovi Suite 2011-08-16 12:19:18 -------- d-----w- c:\programdata\Nokia 2011-08-16 12:17:44 -------- d-----w- c:\users\sonia\appdata\local\NokiaAccount 2011-08-16 11:11:40 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2011-08-16 11:11:40 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2011-08-16 11:09:26 -------- d-----w- c:\users\sonia\appdata\local\Nokia 2011-08-16 11:06:56 -------- d-----w- c:\program files\common files\Nokia 2011-08-16 11:06:17 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2011-08-16 11:05:20 -------- d-----w- c:\program files\PC Connectivity Solution 2011-08-16 11:00:57 75264 ----a-w- c:\windows\system32\nmwcdcls.dll 2011-08-16 10:59:35 -------- d-----w- c:\programdata\NokiaInstallerCache 2011-08-16 10:59:35 -------- d-----w- c:\program files\Nokia 2011-08-15 13:49:02 6881616 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll 2011-08-14 13:35:57 6881616 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\updates\mpengine.dll 2011-08-13 06:34:45 439632 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{900ca1d2-367b-427f-90f8-faeef7030641}\gapaengine.dll 2011-08-11 02:52:56 -------- d-----w- c:\program files\iPod 2011-08-11 02:52:53 -------- d-----w- c:\program files\iTunes 2011-08-11 02:38:16 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll 2011-08-11 02:38:16 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll 2011-08-11 02:38:16 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll 2011-08-11 02:38:16 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll 2011-08-11 02:38:16 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll 2011-08-11 02:38:16 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll 2011-08-11 02:38:16 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll 2011-08-10 20:19:38 375808 ----a-w- c:\windows\system32\winsrv.dll 2011-08-10 20:19:36 508416 ----a-w- c:\windows\system32\drivers\bthport.sys 2011-08-10 20:19:36 30208 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS 2011-08-10 20:19:31 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-08-10 20:19:27 2043392 ----a-w- c:\windows\system32\win32k.sys 2011-08-10 20:15:20 49152 ----a-w- c:\windows\system32\csrsrv.dll 2011-08-10 20:14:02 3602832 ----a-w- c:\windows\system32\ntkrnlpa.exe 2011-08-10 20:14:02 3550096 ----a-w- c:\windows\system32\ntoskrnl.exe 2011-08-10 20:13:54 913296 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-08-10 20:13:53 31232 ----a-w- c:\windows\system32\drivers\tcpipreg.sys . ==================== Find3M ==================== . 2011-07-23 11:04:29 916480 ----a-w- c:\windows\system32\wininet.dll 2011-07-23 11:00:05 43520 ----a-w- c:\windows\system32\licmgr10.dll 2011-07-23 10:59:52 1469440 ----a-w- c:\windows\system32\inetcpl.cpl 2011-07-23 10:59:34 71680 ----a-w- c:\windows\system32\iesetup.dll 2011-07-23 10:59:34 109056 ----a-w- c:\windows\system32\iesysprep.dll 2011-07-23 10:03:47 385024 ----a-w- c:\windows\system32\html.iec 2011-07-23 09:27:04 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2011-07-23 09:25:38 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2011-07-12 14:20:54 83816 ----a-w- c:\windows\system32\dns-sd.exe 2011-07-12 14:20:54 73064 ----a-w- c:\windows\system32\dnssd.dll 2011-07-05 21:37:00 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx 2011-07-05 21:37:00 69632 ----a-w- c:\windows\system32\QuickTime.qts . ============= FINISH: 7:17:56,55 ===============