ComboFix 08-03-14.2 - Jam�e 2008-03-14 17:23:54.3 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.1252.1.1033.18.1509 [GMT 0:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
 * Created a new restore point

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Jam�e\My Documents\CROSOF~1
C:\Documents and Settings\Jam�e\ResErrors.log
C:\Documents and Settings\LocalService\Application Data\NetMon
C:\Documents and Settings\LocalService\Application Data\NetMon\domains.txt
C:\Documents and Settings\LocalService\Application Data\NetMon\log.txt
C:\Documents and Settings\NetworkService\Application Data\NetMon
C:\Documents and Settings\NetworkService\Application Data\NetMon\domains.txt
C:\Documents and Settings\NetworkService\Application Data\NetMon\log.txt
C:\Program Files\Common Files\Yazzle1281OinAdmin.exe
C:\Program Files\Common Files\Yazzle1281OinUninstaller.exe
C:\Program Files\JavaCore
C:\Program Files\JavaCore\JavaCore.exe
C:\Program Files\JavaCore\UnInstall.exe
C:\Program Files\JavaCore\xml96.tmp
C:\Program Files\NoDNS
C:\Program Files\stem32~1
C:\Program Files\stem32~1\??stem32\
C:\Program Files\Temporary
C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\Temp\sanR24
C:\Temp\sanR24\lDii.log
C:\WINDOWS\b153.exe
C:\WINDOWS\Downloaded Program Files\UGA6P_0001_N122M2802NetInstaller.exe
C:\WINDOWS\system32\asks~1
C:\WINDOWS\system32\b4
C:\WINDOWS\system32\b4\sysdr659.exe
C:\WINDOWS\system32\drivers\dhlp.sys
C:\WINDOWS\system32\iDlo01
C:\WINDOWS\system32\iDlo01\iDlo011065.exe
C:\WINDOWS\system32\kcntrkwd.exe
C:\WINDOWS\system32\mcntskwb.exe
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\pcntrkwb.exe
C:\WINDOWS\system32\pcntrkwd.exe
C:\WINDOWS\system32\t2
C:\WINDOWS\system32\winpfz37.sys
C:\WINDOWS\system32\x1
C:\WINDOWS\system32\x1\crecomdll1.exe
C:\WINDOWS\system32\z8
C:\WINDOWS\system32\z8\key89104.exe
C:\WINDOWS\system32\zxdnt3d.cfg

.
(((((((((((((((((((((((((((((((((((((((   Drivers/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\LEGACY_DHLP
-------\dhlp


(((((((((((((((((((((((((   Files Created from 2008-02-14 to 2008-03-14  )))))))))))))))))))))))))))))))
.

2008-03-13 23:44 . 2008-03-13 23:44	<DIR>	d--------	C:\Program Files\Trend Micro
2008-03-11 17:40 . 2008-03-14 17:22	<DIR>	d--------	C:\WINDOWS\system32\drivers\Avg
2008-03-11 17:40 . 2008-03-11 17:40	96,520	--a------	C:\WINDOWS\system32\drivers\avgldx86.sys
2008-03-11 17:40 . 2008-03-14 17:21	74,760	--a------	C:\WINDOWS\system32\drivers\avgtdix.sys
2008-03-11 17:40 . 2008-03-14 17:21	10,520	--a------	C:\WINDOWS\system32\avgrsstx.dll
2008-03-11 17:37 . 2008-03-11 17:37	<DIR>	d--------	C:\Program Files\AVG
2008-03-11 17:37 . 2008-03-12 18:39	<DIR>	d--------	C:\Documents and Settings\All Users\Application Data\avg8
2008-03-11 17:37 . 2008-03-11 17:37	45,568	--a------	C:\WINDOWS\system32\avgfwdx.dll
2008-03-11 17:37 . 2008-03-11 17:37	22,528	--a------	C:\WINDOWS\system32\drivers\avgfwdx.sys
2008-03-10 08:27 . 2008-03-10 08:27	49,172	--a------	C:\WINDOWS\system32\jqwnw64l.exe
2008-03-10 01:02 . 2008-03-11 17:35	<DIR>	d--------	C:\Program Files\RogueRemover FREE
2008-03-10 00:28 . 2008-03-10 00:28	<DIR>	d--------	C:\Program Files\Common Files\Download Manager
2008-03-10 00:28 . 2008-03-10 00:28	1,152	--a------	C:\WINDOWS\system32\windrv.sys
2008-03-09 01:25 . 2008-03-09 01:25	49,187	--a------	C:\WINDOWS\system32\jrwnw64p.exe
2008-03-09 01:09 . 2008-03-09 01:09	9,662	--a------	C:\WINDOWS\system32\ZoneAlarmIconUK.ico
2008-03-09 01:05 . 2008-03-09 01:05	<DIR>	dr-------	C:\Documents and Settings\All Users\Application Data\SalesMon
2008-03-09 01:05 . 2008-03-09 01:05	<DIR>	d--hs----	C:\AVSystemCare
2008-03-09 01:04 . 2008-03-09 01:04	13,942	--a------	C:\WINDOWS\system32\N90-002.ico
2008-03-09 00:59 . 2008-03-10 00:19	<DIR>	d--hs----	C:\WINDOWS\SmFt7WU
2008-03-09 00:59 . 2008-03-09 00:59	<DIR>	d--------	C:\Documents and Settings\All Users\Application Data\Rabio

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-14 17:29	---------	d-----w	C:\Documents and Settings\All Users\Application Data\Kontiki
2008-03-13 08:49	---------	d-----w	C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-03-09 22:13	---------	d-----w	C:\Program Files\SUPERAntiSpyware
2008-02-09 00:52	---------	d-----w	C:\Program Files\Common Files\Adobe
2007-11-27 23:37	1,031	--sh--w	C:\WINDOWS\system\ws32ntfl.dat
2006-07-29 13:29	88	--sh--r	C:\WINDOWS\system32\98BA9CD33F.sys
2002-04-16 10:27	5	--sha-w	C:\WINDOWS\system32\CdI5T.drv
2006-07-29 13:29	3,922	--sha-w	C:\WINDOWS\system32\KGyGaAvL.sys
.

(((((((((((((((((((((((((((((   snapshot@2007-11-18_21.53.59.09   )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-07-06 09:52:38	72,960	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqac.sys
+ 2007-07-06 13:08:11	138,240	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqad.dll
+ 2007-07-06 13:08:11	47,104	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqdscli.dll
+ 2007-07-06 13:08:11	16,896	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqise.dll
+ 2007-07-06 13:08:11	660,992	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqqm.dll
+ 2007-07-06 13:08:11	177,152	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqrt.dll
+ 2007-07-06 13:08:11	95,744	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqsec.dll
+ 2007-07-06 13:08:11	48,640	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqupgrd.dll
+ 2007-07-06 13:08:11	471,552	----a-w	C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqutil.dll
+ 2005-10-12 23:12:25	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB937894\spmsg.dll
+ 2005-10-12 23:12:26	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB937894\spuninst.exe
+ 2005-10-12 23:12:25	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB937894\update\spcustom.dll
+ 2005-10-12 23:12:29	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB937894\update\update.exe
+ 2005-10-12 23:12:34	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB937894\update\updspapi.dll
+ 2007-10-30 16:53:32	360,832	----a-w	C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
+ 2007-03-06 01:22:36	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB941644\spmsg.dll
+ 2007-03-06 01:22:41	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB941644\spuninst.exe
+ 2007-03-06 01:22:34	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB941644\update\spcustom.dll
+ 2007-03-06 01:22:59	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB941644\update\update.exe
+ 2007-03-06 01:23:51	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB941644\update\updspapi.dll
+ 2007-11-13 11:02:46	60,416	----a-w	C:\WINDOWS\$hf_mig$\KB942763\SP2QFE\tzchange.exe
+ 2007-03-06 01:22:36	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll
+ 2007-03-06 01:22:41	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe
+ 2007-03-06 01:22:34	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB942763\update\spcustom.dll
+ 2007-03-06 01:22:59	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB942763\update\update.exe
+ 2007-03-06 01:23:51	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB942763\update\updspapi.dll
+ 2007-11-14 07:18:03	450,560	----a-w	C:\WINDOWS\$hf_mig$\KB942840\SP2QFE\jscript.dll
+ 2007-03-06 01:22:36	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB942840\spmsg.dll
+ 2007-03-06 01:22:41	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB942840\spuninst.exe
+ 2007-03-06 01:22:34	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB942840\update\spcustom.dll
+ 2007-03-06 01:22:59	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB942840\update\update.exe
+ 2007-03-06 01:23:51	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB942840\update\updspapi.dll
+ 2007-12-04 18:29:10	551,936	----a-w	C:\WINDOWS\$hf_mig$\KB943055\SP2QFE\oleaut32.dll
+ 2007-03-06 01:22:36	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB943055\spmsg.dll
+ 2007-03-06 01:22:41	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB943055\spuninst.exe
+ 2007-03-06 01:22:34	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB943055\update\spcustom.dll
+ 2007-03-06 01:22:59	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
+ 2007-03-06 01:23:51	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB943055\update\updspapi.dll
+ 2007-11-07 09:50:47	727,040	----a-w	C:\WINDOWS\$hf_mig$\KB943485\SP2QFE\lsasrv.dll
+ 2007-03-06 01:22:36	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB943485\spmsg.dll
+ 2007-03-06 01:22:41	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB943485\spuninst.exe
+ 2007-03-06 01:22:34	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB943485\update\spcustom.dll
+ 2007-03-06 01:22:59	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
+ 2007-03-06 01:23:51	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB943485\update\updspapi.dll
+ 2007-11-13 08:47:45	20,480	----a-w	C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys
+ 2007-03-06 01:22:36	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll
+ 2007-03-06 01:22:41	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe
+ 2007-03-06 01:22:34	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll
+ 2007-03-06 01:22:59	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
+ 2007-03-06 01:23:51	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll
+ 2007-12-18 09:38:59	179,712	----a-w	C:\WINDOWS\$hf_mig$\KB946026\SP2QFE\mrxdav.sys
+ 2007-03-06 01:22:36	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB946026\spmsg.dll
+ 2007-03-06 01:22:41	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB946026\spuninst.exe
+ 2007-03-06 01:22:34	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB946026\update\spcustom.dll
+ 2007-03-06 01:22:59	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
+ 2007-03-06 01:23:51	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB946026\update\updspapi.dll
+ 2007-03-06 01:22:33	14,048	----a-w	C:\WINDOWS\$hf_mig$\KB946627\spmsg.dll
+ 2007-03-06 01:22:39	213,216	----a-w	C:\WINDOWS\$hf_mig$\KB946627\spuninst.exe
+ 2007-03-06 01:22:31	22,752	----a-w	C:\WINDOWS\$hf_mig$\KB946627\update\spcustom.dll
+ 2007-03-06 01:22:56	716,000	----a-w	C:\WINDOWS\$hf_mig$\KB946627\update\update.exe
+ 2007-03-06 01:23:47	371,424	----a-w	C:\WINDOWS\$hf_mig$\KB946627\update\updspapi.dll
+ 2004-08-10 04:00:00	72,960	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqac.sys
+ 2004-08-10 04:00:00	138,240	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqad.dll
+ 2004-08-10 04:00:00	47,104	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqdscli.dll
+ 2004-08-10 04:00:00	16,896	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqise.dll
+ 2004-08-10 04:00:00	660,992	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqqm.dll
+ 2004-08-10 04:00:00	177,152	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqrt.dll
+ 2004-08-10 04:00:00	95,744	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqsec.dll
+ 2004-08-10 04:00:00	48,640	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqupgrd.dll
+ 2004-08-10 04:00:00	471,552	-c----w	C:\WINDOWS\$NtUninstallKB937894$\mqutil.dll
+ 2005-10-12 23:12:26	213,216	-c----w	C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe
+ 2005-10-12 23:12:34	371,424	-c----w	C:\WINDOWS\$NtUninstallKB937894$\spuninst\updspapi.dll
+ 2005-08-30 04:13:42	1,287,680	-c----w	C:\WINDOWS\$NtUninstallKB941568$\quartz.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB941568$\spuninst\updspapi.dll
+ 2007-10-27 16:39:36	213,216	-c----w	C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe
+ 2007-10-27 16:39:46	371,424	-c----w	C:\WINDOWS\$NtUninstallKB941569$\spuninst\updspapi.dll
+ 2005-08-03 17:29:52	227,840	-c----w	C:\WINDOWS\$NtUninstallKB941569$\wmasf.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB941644$\spuninst\updspapi.dll
+ 2006-04-20 11:51:50	359,808	-c----w	C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
+ 2007-08-22 12:55:28	1,022,976	-c----w	C:\WINDOWS\$NtUninstallKB942615$\browseui.dll
+ 2007-08-22 12:55:29	151,040	-c----w	C:\WINDOWS\$NtUninstallKB942615$\cdfview.dll
+ 2007-08-22 12:55:30	1,054,208	-c----w	C:\WINDOWS\$NtUninstallKB942615$\danim.dll
+ 2007-08-22 12:55:30	357,888	-c----w	C:\WINDOWS\$NtUninstallKB942615$\dxtmsft.dll
+ 2007-08-22 12:55:31	205,824	-c----w	C:\WINDOWS\$NtUninstallKB942615$\dxtrans.dll
+ 2007-08-22 12:55:31	55,808	-c----w	C:\WINDOWS\$NtUninstallKB942615$\extmgr.dll
+ 2007-08-21 10:19:39	18,432	-c----w	C:\WINDOWS\$NtUninstallKB942615$\iedw.exe
+ 2007-08-22 12:55:32	251,904	-c----w	C:\WINDOWS\$NtUninstallKB942615$\iepeers.dll
+ 2007-08-22 12:55:32	96,256	-c----w	C:\WINDOWS\$NtUninstallKB942615$\inseng.dll
+ 2007-08-22 12:55:32	16,384	-c----w	C:\WINDOWS\$NtUninstallKB942615$\jsproxy.dll
+ 2007-08-22 12:55:36	3,064,832	-c----w	C:\WINDOWS\$NtUninstallKB942615$\mshtml.dll
+ 2007-08-22 12:55:37	449,024	-c----w	C:\WINDOWS\$NtUninstallKB942615$\mshtmled.dll
+ 2007-08-22 12:55:37	146,432	-c----w	C:\WINDOWS\$NtUninstallKB942615$\msrating.dll
+ 2007-08-22 12:55:38	532,480	-c----w	C:\WINDOWS\$NtUninstallKB942615$\mstime.dll
+ 2007-08-22 12:55:38	39,424	-c----w	C:\WINDOWS\$NtUninstallKB942615$\pngfilt.dll
+ 2007-08-22 12:55:40	1,498,112	-c----w	C:\WINDOWS\$NtUninstallKB942615$\shdocvw.dll
+ 2007-08-22 12:55:41	474,112	-c----w	C:\WINDOWS\$NtUninstallKB942615$\shlwapi.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB942615$\spuninst\updspapi.dll
+ 2007-08-22 12:55:43	617,984	-c----w	C:\WINDOWS\$NtUninstallKB942615$\urlmon.dll
+ 2007-08-22 12:55:44	665,600	-c----w	C:\WINDOWS\$NtUninstallKB942615$\wininet.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB942763$\spuninst\updspapi.dll
+ 2007-07-18 12:42:22	60,416	-c----w	C:\WINDOWS\$NtUninstallKB942763$\tzchange.exe
+ 2006-05-18 05:24:25	450,560	-c----w	C:\WINDOWS\$NtUninstallKB942840$\jscript.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB942840$\spuninst\updspapi.dll
+ 2007-05-17 11:28:05	549,376	-c----w	C:\WINDOWS\$NtUninstallKB943055$\oleaut32.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB943055$\spuninst\updspapi.dll
+ 2006-08-17 12:28:27	721,920	-c----w	C:\WINDOWS\$NtUninstallKB943485$\lsasrv.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB943485$\spuninst\updspapi.dll
+ 2007-10-11 05:57:29	1,024,000	-c----w	C:\WINDOWS\$NtUninstallKB944533$\browseui.dll
+ 2007-10-11 05:57:29	151,040	-c----w	C:\WINDOWS\$NtUninstallKB944533$\cdfview.dll
+ 2007-10-11 05:57:30	1,054,208	-c----w	C:\WINDOWS\$NtUninstallKB944533$\danim.dll
+ 2007-10-11 05:57:30	357,888	-c----w	C:\WINDOWS\$NtUninstallKB944533$\dxtmsft.dll
+ 2007-10-11 05:57:30	205,824	-c----w	C:\WINDOWS\$NtUninstallKB944533$\dxtrans.dll
+ 2007-10-11 05:57:30	55,808	-c----w	C:\WINDOWS\$NtUninstallKB944533$\extmgr.dll
+ 2007-10-10 10:48:23	18,432	-c----w	C:\WINDOWS\$NtUninstallKB944533$\iedw.exe
+ 2007-10-11 05:57:31	251,904	-c----w	C:\WINDOWS\$NtUninstallKB944533$\iepeers.dll
+ 2007-10-11 05:57:31	96,256	-c----w	C:\WINDOWS\$NtUninstallKB944533$\inseng.dll
+ 2007-10-11 05:57:31	16,384	-c----w	C:\WINDOWS\$NtUninstallKB944533$\jsproxy.dll
+ 2007-10-30 09:55:21	3,065,856	-c----w	C:\WINDOWS\$NtUninstallKB944533$\mshtml.dll
+ 2007-10-11 05:57:36	449,024	-c----w	C:\WINDOWS\$NtUninstallKB944533$\mshtmled.dll
+ 2007-10-11 05:57:36	146,432	-c----w	C:\WINDOWS\$NtUninstallKB944533$\msrating.dll
+ 2007-10-11 05:57:37	532,480	-c----w	C:\WINDOWS\$NtUninstallKB944533$\mstime.dll
+ 2007-10-11 05:57:37	39,424	-c----w	C:\WINDOWS\$NtUninstallKB944533$\pngfilt.dll
+ 2007-10-11 05:57:39	1,498,112	-c----w	C:\WINDOWS\$NtUninstallKB944533$\shdocvw.dll
+ 2007-10-11 05:57:40	474,112	-c----w	C:\WINDOWS\$NtUninstallKB944533$\shlwapi.dll
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB944533$\spuninst\updspapi.dll
+ 2007-10-11 05:57:40	617,984	-c----w	C:\WINDOWS\$NtUninstallKB944533$\urlmon.dll
+ 2007-10-11 05:57:41	666,112	-c----w	C:\WINDOWS\$NtUninstallKB944533$\wininet.dll
+ 2007-10-29 10:04:03	350,720	-c----w	C:\WINDOWS\$NtUninstallKB944533$\xpsp3res.dll
+ 2004-08-10 04:00:00	27,440	-c----w	C:\WINDOWS\$NtUninstallKB944653$\secdrv.sys
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB944653$\spuninst\updspapi.dll
+ 2004-08-10 04:00:00	181,248	-c----w	C:\WINDOWS\$NtUninstallKB946026$\mrxdav.sys
+ 2007-03-06 01:22:41	213,216	-c----w	C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe
+ 2007-03-06 01:23:51	371,424	-c----w	C:\WINDOWS\$NtUninstallKB946026$\spuninst\updspapi.dll
+ 2007-03-06 01:22:39	213,216	-c----w	C:\WINDOWS\$NtUninstallKB946627$\spuninst\spuninst.exe
+ 2007-03-06 01:23:47	371,424	-c----w	C:\WINDOWS\$NtUninstallKB946627$\spuninst\updspapi.dll
+ 2008-02-28 16:57:20	185,344	----a-w	C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UGA6P_0001_N122M2802NetInstaller.exe
+ 2004-12-08 03:47:52	368,640	----a-w	C:\WINDOWS\Downloaded Program Files\WinWeb.dll
+ 2000-08-31 08:00:00	163,328	----a-w	C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE
+ 2000-08-31 08:00:00	163,328	----a-w	C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2006-10-27 14:16:36	133,936	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\CONTAB32.DLL
+ 2006-10-26 19:55:32	87,344	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\DLGSETP.DLL
+ 2006-10-26 19:55:48	340,248	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\MIMEDIR.DLL
+ 2006-10-26 19:34:12	660,792	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OMSMAIN.DLL
+ 2006-10-26 19:34:10	192,848	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OMSXP32.DLL
+ 2006-10-27 14:16:44	594,256	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OUTLMIME.DLL
+ 2006-10-27 14:16:40	176,976	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\OUTLPH.DLL
+ 2006-10-26 19:55:54	413,472	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\PSTPRX32.DLL
+ 2006-10-26 20:17:08	11,072	----a-r	C:\WINDOWS\Installer\$PatchCache$\Managed\[u]0[/u]0002109030000000000000000F01FEC\12.0.4518\XLCALL32.DLL
- 2007-11-14 21:12:08	1,165,584	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2008-03-13 08:49:36	1,165,584	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2007-11-14 21:12:09	20,240	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-03-13 08:49:36	20,240	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2007-11-14 21:12:08	159,504	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2008-03-13 08:49:36	159,504	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2007-11-14 21:12:09	184,080	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2008-03-13 08:49:36	184,080	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2007-11-14 21:12:09	217,864	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2008-03-13 08:49:36	217,864	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2007-11-14 21:12:09	18,704	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-03-13 08:49:36	18,704	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2007-11-14 21:12:10	35,088	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-03-13 08:49:38	35,088	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2007-11-14 21:12:09	845,584	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-03-13 08:49:36	845,584	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2007-11-14 21:12:09	922,384	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-03-13 08:49:36	922,384	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2007-11-14 21:12:09	272,648	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2008-03-13 08:49:36	272,648	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2007-11-14 21:12:10	888,080	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-03-13 08:49:36	888,080	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
- 2007-11-14 21:12:08	1,172,240	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-03-13 08:49:36	1,172,240	----a-r	C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2007-11-14 21:12:55	20,240	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-03-13 08:48:45	20,240	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\cagicon.exe
- 2007-11-14 21:12:56	217,864	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\misc.exe
+ 2008-03-13 08:48:45	217,864	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\misc.exe
- 2007-11-14 21:12:55	18,704	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-03-13 08:48:45	18,704	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\mspicons.exe
- 2007-11-14 21:12:56	35,088	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-03-13 08:48:45	35,088	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\oisicon.exe
- 2007-11-14 21:12:55	845,584	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-03-13 08:48:44	845,584	----a-r	C:\WINDOWS\Installer\{91120000-001A-0000-0000-0000000FF1CE}\outicon.exe
+ 2008-02-09 00:52:48	295,606	----a-r	C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A81200000003}\SC_Reader.exe
+ 2007-11-18 22:03:51	29,696	----a-r	C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF11.exe
+ 2007-11-18 22:03:51	18,944	----a-r	C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
+ 2007-11-18 22:03:51	65,024	----a-r	C:\WINDOWS\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
- 2007-06-17 00:11:58	51,200	----a-w	C:\WINDOWS\NirCmd.exe
+ 2000-08-31 08:00:00	28,160	----a-w	C:\WINDOWS\NirCmd.exe
+ 2004-08-10 04:00:00	73,376	----a-w	C:\WINDOWS\system\MCIAVI.DRV
+ 2004-08-10 04:00:00	25,264	----a-w	C:\WINDOWS\system\MCISEQ.DRV
+ 2004-08-10 04:00:00	28,160	----a-w	C:\WINDOWS\system\MCIWAVE.DRV
+ 2004-08-10 04:00:00	3,360	----a-w	C:\WINDOWS\system\SYSTEM.DRV
+ 2004-08-10 04:00:00	4,048	----a-w	C:\WINDOWS\system\TIMER.DRV
+ 2004-08-10 04:00:00	13,600	----a-w	C:\WINDOWS\system\WFWNET.DRV
+ 2004-08-10 04:00:00	146,432	----a-w	C:\WINDOWS\system\WINSPOOL.DRV
+ 2004-06-09 09:57:12	305,408	----a-w	C:\WINDOWS\system32\acfpdf.drv
- 2007-08-22 12:55:28	1,022,976	----a-w	C:\WINDOWS\system32\browseui.dll
+ 2007-12-07 00:44:30	1,024,000	----a-w	C:\WINDOWS\system32\browseui.dll
+ 2004-11-02 13:41:52	516,832	----a-w	C:\WINDOWS\system32\capicom.dll
- 2007-08-22 12:55:29	151,040	----a-w	C:\WINDOWS\system32\cdfview.dll
+ 2007-12-07 00:44:30	151,040	----a-w	C:\WINDOWS\system32\cdfview.dll
+ 2004-08-10 04:00:00	10,544	----a-w	C:\WINDOWS\system32\comm.drv
- 2007-08-22 12:55:30	1,054,208	----a-w	C:\WINDOWS\system32\danim.dll
+ 2007-12-07 00:44:32	1,054,208	----a-w	C:\WINDOWS\system32\danim.dll
- 2007-08-22 12:55:28	1,022,976	------w	C:\WINDOWS\system32\dllcache\browseui.dll
+ 2007-12-07 00:44:30	1,024,000	------w	C:\WINDOWS\system32\dllcache\browseui.dll
- 2007-08-22 12:55:29	151,040	------w	C:\WINDOWS\system32\dllcache\cdfview.dll
+ 2007-12-07 00:44:30	151,040	------w	C:\WINDOWS\system32\dllcache\cdfview.dll
- 2007-08-22 12:55:30	1,054,208	------w	C:\WINDOWS\system32\dllcache\danim.dll
+ 2007-12-07 00:44:32	1,054,208	------w	C:\WINDOWS\system32\dllcache\danim.dll
- 2007-08-22 12:55:30	357,888	------w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2007-12-07 00:44:33	357,888	------w	C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2007-08-22 12:55:31	205,824	------w	C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2007-12-07 00:44:33	205,824	------w	C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2007-08-22 12:55:31	55,808	------w	C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2007-12-07 00:44:33	55,808	------w	C:\WINDOWS\system32\dllcache\extmgr.dll
- 2007-08-21 10:19:39	18,432	------w	C:\WINDOWS\system32\dllcache\iedw.exe
+ 2007-12-06 10:05:52	18,432	------w	C:\WINDOWS\system32\dllcache\iedw.exe
- 2007-08-22 12:55:32	251,904	------w	C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2007-12-07 00:44:33	251,904	------w	C:\WINDOWS\system32\dllcache\iepeers.dll
- 2007-08-22 12:55:32	96,256	------w	C:\WINDOWS\system32\dllcache\inseng.dll
+ 2007-12-07 00:44:33	96,256	------w	C:\WINDOWS\system32\dllcache\inseng.dll
- 2006-05-18 05:24:25	450,560	------w	C:\WINDOWS\system32\dllcache\jscript.dll
+ 2007-11-14 07:26:56	450,560	------w	C:\WINDOWS\system32\dllcache\jscript.dll
- 2007-08-22 12:55:32	16,384	------w	C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2007-12-07 00:44:33	16,384	------w	C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2006-08-17 12:28:27	721,920	------w	C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2007-11-07 09:26:56	721,920	------w	C:\WINDOWS\system32\dllcache\lsasrv.dll
+ 2007-07-06 10:05:47	72,960	------w	C:\WINDOWS\system32\dllcache\mqac.sys
+ 2007-07-06 12:46:59	138,240	------w	C:\WINDOWS\system32\dllcache\mqad.dll
+ 2007-07-06 12:46:59	47,104	------w	C:\WINDOWS\system32\dllcache\mqdscli.dll
+ 2007-07-06 12:46:59	16,896	------w	C:\WINDOWS\system32\dllcache\mqise.dll
+ 2007-07-06 12:46:59	660,992	------w	C:\WINDOWS\system32\dllcache\mqqm.dll
+ 2007-07-06 12:46:59	177,152	------w	C:\WINDOWS\system32\dllcache\mqrt.dll
+ 2007-07-06 12:46:59	95,744	------w	C:\WINDOWS\system32\dllcache\mqsec.dll
+ 2007-07-06 12:46:59	48,640	------w	C:\WINDOWS\system32\dllcache\mqupgrd.dll
+ 2007-07-06 12:46:59	471,552	------w	C:\WINDOWS\system32\dllcache\mqutil.dll
+ 2007-12-18 09:51:35	179,584	------w	C:\WINDOWS\system32\dllcache\mrxdav.sys
- 2007-08-22 12:55:36	3,064,832	------w	C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2007-12-07 00:44:35	3,066,368	------w	C:\WINDOWS\system32\dllcache\mshtml.dll
- 2007-08-22 12:55:37	449,024	------w	C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2007-12-07 00:44:36	449,024	------w	C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2007-08-22 12:55:37	146,432	------w	C:\WINDOWS\system32\dllcache\msrating.dll
+ 2007-12-07 00:44:36	146,432	------w	C:\WINDOWS\system32\dllcache\msrating.dll
- 2007-08-22 12:55:38	532,480	------w	C:\WINDOWS\system32\dllcache\mstime.dll
+ 2007-12-07 00:44:36	532,480	------w	C:\WINDOWS\system32\dllcache\mstime.dll
- 2007-05-17 11:28:05	549,376	------w	C:\WINDOWS\system32\dllcache\oleaut32.dll
+ 2007-12-04 18:38:13	550,912	------w	C:\WINDOWS\system32\dllcache\oleaut32.dll
- 2007-08-22 12:55:38	39,424	------w	C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2007-12-07 00:44:36	39,424	------w	C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2007-10-29 22:35:13	1,287,680	------w	C:\WINDOWS\system32\dllcache\quartz.dll
- 2007-08-22 12:55:40	1,498,112	------w	C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2007-12-07 00:44:37	1,499,136	------w	C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2007-08-22 12:55:41	474,112	------w	C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2007-12-07 00:44:38	474,112	------w	C:\WINDOWS\system32\dllcache\shlwapi.dll
- 2006-04-20 11:51:50	359,808	------w	C:\WINDOWS\system32\dllcache\tcpip.sys
+ 2007-10-30 17:20:55	360,064	------w	C:\WINDOWS\system32\dllcache\tcpip.sys
- 2007-08-22 12:55:43	617,984	------w	C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2007-12-07 00:44:39	617,984	------w	C:\WINDOWS\system32\dllcache\urlmon.dll
- 2007-08-22 12:55:44	665,600	------w	C:\WINDOWS\system32\dllcache\wininet.dll
+ 2007-12-07 00:44:39	666,112	------w	C:\WINDOWS\system32\dllcache\wininet.dll
+ 2007-10-27 17:39:46	228,864	------w	C:\WINDOWS\system32\dllcache\wmasf.dll
- 2004-08-10 04:00:00	72,960	----a-w	C:\WINDOWS\system32\drivers\mqac.sys
+ 2007-07-06 10:05:47	72,960	----a-w	C:\WINDOWS\system32\drivers\mqac.sys
- 2004-08-10 04:00:00	181,248	----a-w	C:\WINDOWS\system32\drivers\mrxdav.sys
+ 2007-12-18 09:51:35	179,584	----a-w	C:\WINDOWS\system32\drivers\mrxdav.sys
- 2004-08-10 04:00:00	27,440	----a-w	C:\WINDOWS\system32\drivers\secdrv.sys
+ 2007-11-13 10:25:53	20,480	----a-w	C:\WINDOWS\system32\drivers\secdrv.sys
- 2006-04-20 11:51:50	359,808	----a-w	C:\WINDOWS\system32\drivers\tcpip.sys
+ 2007-10-30 17:20:55	360,064	----a-w	C:\WINDOWS\system32\drivers\tcpip.sys
- 2007-08-22 12:55:30	357,888	----a-w	C:\WINDOWS\system32\dxtmsft.dll
+ 2007-12-07 00:44:33	357,888	----a-w	C:\WINDOWS\system32\dxtmsft.dll
- 2007-08-22 12:55:31	205,824	----a-w	C:\WINDOWS\system32\dxtrans.dll
+ 2007-12-07 00:44:33	205,824	----a-w	C:\WINDOWS\system32\dxtrans.dll
- 2007-08-22 12:55:31	55,808	----a-w	C:\WINDOWS\system32\extmgr.dll
+ 2007-12-07 00:44:33	55,808	----a-w	C:\WINDOWS\system32\extmgr.dll
+ 2000-08-31 08:00:00	73,728	----a-w	C:\WINDOWS\system32\fdsv.exe
+ 2000-08-31 08:00:00	80,412	----a-w	C:\WINDOWS\system32\grep.exe
- 2007-08-22 12:55:32	251,904	----a-w	C:\WINDOWS\system32\iepeers.dll
+ 2007-12-07 00:44:33	251,904	----a-w	C:\WINDOWS\system32\iepeers.dll
- 2007-08-22 12:55:32	96,256	----a-w	C:\WINDOWS\system32\inseng.dll
+ 2007-12-07 00:44:33	96,256	----a-w	C:\WINDOWS\system32\inseng.dll
- 2006-05-18 05:24:25	450,560	----a-w	C:\WINDOWS\system32\jscript.dll
+ 2007-11-14 07:26:56	450,560	----a-w	C:\WINDOWS\system32\jscript.dll
- 2007-08-22 12:55:32	16,384	----a-w	C:\WINDOWS\system32\jsproxy.dll
+ 2007-12-07 00:44:33	16,384	----a-w	C:\WINDOWS\system32\jsproxy.dll
+ 2004-08-10 04:00:00	221,600	----a-w	C:\WINDOWS\system32\lanman.drv
+ 2007-10-11 14:12:48	1,468,968	------w	C:\WINDOWS\system32\LegitCheckControl.dll
- 2006-08-17 12:28:27	721,920	----a-w	C:\WINDOWS\system32\lsasrv.dll
+ 2007-11-07 09:26:56	721,920	----a-w	C:\WINDOWS\system32\lsasrv.dll
+ 2004-08-10 04:00:00	73,376	----a-w	C:\WINDOWS\system32\mciavi.drv
+ 2004-08-10 04:00:00	25,264	----a-w	C:\WINDOWS\system32\mciseq.drv
+ 2004-08-10 04:00:00	28,160	----a-w	C:\WINDOWS\system32\mciwave.drv
- 2004-08-10 04:00:00	138,240	----a-w	C:\WINDOWS\system32\mqad.dll
+ 2007-07-06 12:46:59	138,240	----a-w	C:\WINDOWS\system32\mqad.dll
- 2004-08-10 04:00:00	47,104	----a-w	C:\WINDOWS\system32\mqdscli.dll
+ 2007-07-06 12:46:59	47,104	----a-w	C:\WINDOWS\system32\mqdscli.dll
- 2004-08-10 04:00:00	16,896	----a-w	C:\WINDOWS\system32\mqise.dll
+ 2007-07-06 12:46:59	16,896	----a-w	C:\WINDOWS\system32\mqise.dll
- 2004-08-10 04:00:00	660,992	----a-w	C:\WINDOWS\system32\mqqm.dll
+ 2007-07-06 12:46:59	660,992	----a-w	C:\WINDOWS\system32\mqqm.dll
- 2004-08-10 04:00:00	177,152	----a-w	C:\WINDOWS\system32\mqrt.dll
+ 2007-07-06 12:46:59	177,152	----a-w	C:\WINDOWS\system32\mqrt.dll
- 2004-08-10 04:00:00	95,744	----a-w	C:\WINDOWS\system32\mqsec.dll
+ 2007-07-06 12:46:59	95,744	----a-w	C:\WINDOWS\system32\mqsec.dll
- 2004-08-10 04:00:00	48,640	----a-w	C:\WINDOWS\system32\mqupgrd.dll
+ 2007-07-06 12:46:59	48,640	----a-w	C:\WINDOWS\system32\mqupgrd.dll
- 2004-08-10 04:00:00	471,552	----a-w	C:\WINDOWS\system32\mqutil.dll
+ 2007-07-06 12:46:59	471,552	----a-w	C:\WINDOWS\system32\mqutil.dll
- 2007-11-02 07:12:57	18,238,072	----a-w	C:\WINDOWS\system32\MRT.exe
+ 2008-03-05 16:30:54	19,148,408	----a-w	C:\WINDOWS\system32\MRT.exe
+ 2004-08-10 04:00:00	20,480	----a-w	C:\WINDOWS\system32\msacm32.drv
+ 2004-08-10 04:00:00	188,416	----a-w	C:\WINDOWS\system32\msh261.drv
+ 2004-08-04 00:56:58	294,912	----a-w	C:\WINDOWS\system32\msh263.drv
- 2007-08-22 12:55:36	3,064,832	----a-w	C:\WINDOWS\system32\mshtml.dll
+ 2007-12-07 00:44:35	3,066,368	----a-w	C:\WINDOWS\system32\mshtml.dll
- 2007-08-22 12:55:37	449,024	----a-w	C:\WINDOWS\system32\mshtmled.dll
+ 2007-12-07 00:44:36	449,024	----a-w	C:\WINDOWS\system32\mshtmled.dll
- 2007-08-22 12:55:37	146,432	----a-w	C:\WINDOWS\system32\msrating.dll
+ 2007-12-07 00:44:36	146,432	----a-w	C:\WINDOWS\system32\msrating.dll
- 2007-08-22 12:55:38	532,480	----a-w	C:\WINDOWS\system32\mstime.dll
+ 2007-12-07 00:44:36	532,480	----a-w	C:\WINDOWS\system32\mstime.dll
- 2007-05-17 11:28:05	549,376	----a-w	C:\WINDOWS\system32\oleaut32.dll
+ 2007-12-04 18:38:13	550,912	----a-w	C:\WINDOWS\system32\oleaut32.dll
- 2007-08-22 12:55:38	39,424	----a-w	C:\WINDOWS\system32\pngfilt.dll
+ 2007-12-07 00:44:36	39,424	----a-w	C:\WINDOWS\system32\pngfilt.dll
- 2005-08-30 04:13:42	1,287,680	----a-w	C:\WINDOWS\system32\quartz.dll
+ 2007-10-29 22:35:13	1,287,680	----a-w	C:\WINDOWS\system32\quartz.dll
+ 2000-08-31 08:00:00	98,816	----a-w	C:\WINDOWS\system32\sed.exe
- 2007-08-22 12:55:40	1,498,112	----a-w	C:\WINDOWS\system32\shdocvw.dll
+ 2007-12-07 00:44:37	1,499,136	----a-w	C:\WINDOWS\system32\shdocvw.dll
- 2007-08-22 12:55:41	474,112	----a-w	C:\WINDOWS\system32\shlwapi.dll
+ 2007-12-07 00:44:38	474,112	----a-w	C:\WINDOWS\system32\shlwapi.dll
+ 2007-06-20 11:06:42	8,192	----a-w	C:\WINDOWS\system32\spool\prtprocs\w32x86\GoToPrintProcessor.dll
- 2007-07-22 18:39:27	279,552	----a-w	C:\WINDOWS\system32\swreg.exe
+ 2000-08-31 08:00:00	161,792	----a-w	C:\WINDOWS\system32\swreg.exe
+ 2004-08-10 04:00:00	3,360	----a-w	C:\WINDOWS\system32\system.drv
+ 2004-08-10 04:00:00	4,048	----a-w	C:\WINDOWS\system32\timer.drv
- 2007-07-18 12:42:22	60,416	------w	C:\WINDOWS\system32\tzchange.exe
+ 2007-11-13 11:31:11	60,416	------w	C:\WINDOWS\system32\tzchange.exe
- 2007-08-22 12:55:43	617,984	----a-w	C:\WINDOWS\system32\urlmon.dll
+ 2007-12-07 00:44:39	617,984	----a-w	C:\WINDOWS\system32\urlmon.dll
+ 2004-08-10 04:00:00	23,552	----a-w	C:\WINDOWS\system32\wdmaud.drv
+ 2004-08-10 04:00:00	13,600	----a-w	C:\WINDOWS\system32\wfwnet.drv
- 2007-08-22 12:55:44	665,600	----a-w	C:\WINDOWS\system32\wininet.dll
+ 2007-12-07 00:44:39	666,112	----a-w	C:\WINDOWS\system32\wininet.dll
+ 2004-08-10 04:00:00	146,432	----a-w	C:\WINDOWS\system32\winspool.drv
- 2005-08-03 17:29:52	227,840	----a-w	C:\WINDOWS\system32\wmasf.dll
+ 2007-10-27 17:39:46	228,864	----a-w	C:\WINDOWS\system32\wmasf.dll
- 2007-10-29 10:04:03	350,720	----a-w	C:\WINDOWS\system32\xpsp3res.dll
+ 2007-12-06 09:38:31	350,720	----a-w	C:\WINDOWS\system32\xpsp3res.dll
+ 2000-08-31 08:00:00	68,096	----a-w	C:\WINDOWS\system32\zip.exe
+ 2008-03-14 17:28:26	16,384	----atw	C:\WINDOWS\temp\Perflib_Perfdata_5b0.dat
+ 2006-12-02 00:25:52	1,101,824	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-12-02 00:25:56	1,093,120	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
+ 2006-12-02 00:25:58	69,632	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-02 00:26:00	57,856	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
+ 2006-12-02 00:08:00	40,960	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2006-12-02 00:08:00	45,056	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-02 00:08:00	65,536	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-02 00:08:00	57,344	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-02 00:08:00	61,440	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-02 00:08:00	61,440	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-02 00:08:00	61,440	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-02 00:08:00	49,152	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-02 00:08:00	49,152	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-02 00:46:44	65,536	----a-w	C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll
.
-- Snapshot reset to current date --
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{00E78F4D-3E92-4CB3-B99C-303701C7D93B}]
			C:\Program Files\.\jaqi89104.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5C3F6257-3E00-45C2-88D5-CB0F3A17BF0E}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6632E9BF-0123-7FD9-5714-5F00BBB28BCE}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6F87F145-DC2D-4766-AF03-3A3B96FFAD98}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eyeBeam SIP Client"="" []
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 04:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2003-11-19 16:48 32881]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 17:48 761947]
"Dell QuickSet"="C:\Program Files\Dell\QuickSet\quickset.exe" [2006-04-06 13:58 1032192]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-28 10:55 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-12-28 10:56 602182]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 09:44 249856]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 09:44 81920]
"BluetoothAuthenticationAgent"="rundll32.exe" [2004-08-10 04:00 33280 C:\WINDOWS\system32\rundll32.exe]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 23:47 31016]
"eFax 4.3"="C:\Program Files\eFax Messenger 4.3\J2GDllCmd.exe" [2007-03-06 17:21 116224]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 05:24 286720]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-08-15 19:15 271672]
"MSKDetectorExe"="C:\Program Files\McAfee\SpamKiller\MSKDetct.exe" [2005-07-12 18:05 1117184]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-12-09 19:29 49152]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-03-14 17:21 1172760]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 04:00 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-07-03 15:00:59 24576]
eFax 4.3.lnk - C:\Program Files\eFax Messenger 4.3\J2GTray.exe [2007-08-22 00:07:13 629248]
Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2007-02-05 14:40:46 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 14:39 294400]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders	msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, xlibgfl254.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Kontiki\\KService.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-03-11 17:40]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-03-14 17:21]
R2 avgfws8;AVG8 Firewall;C:\PROGRA~1\AVG\AVG8\avgfws8.exe [2008-03-14 17:21]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-03-14 17:21]
R3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-03-11 17:37]
S0 AvgRkx86;avgrkx86.sys;C:\WINDOWS\system32\Drivers\avgrkx86.sys []
S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2008-03-11 17:37]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 16:57]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 16:58]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 16:59]
S3 wwEngineSvc;Window Washer Engine;C:\Program Files\Webroot\Washer\WasherSvc.exe [2007-08-09 12:56]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
\Shell\AutoRun\command - E:\setup.exe

.
Contents of the 'Scheduled Tasks' folder
"2008-03-14 00:00:00 C:\WINDOWS\Tasks\A3D50312913EB632.job"
- c:\docume~1\jame~1\applic~1\stopba~1\size ping surf.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-14 17:29:07
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ... 

scanning hidden autostart entries ...

scanning hidden files ... 

scan completed successfully 
hidden files: 0 

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\SearchFilterHost.exe
.
**************************************************************************
.
Completion time: 2008-03-14 17:31:58 - machine was rebooted
ComboFix-quarantined-files.txt  2008-03-14 17:31:53
ComboFix2.txt  2007-11-18 23:30:58
.
2008-03-13 17:52:08	--- E O F ---