Firefox Popups & Ads.

[deltalima]

Hi Jiten,

Ultimately, I guess I will end up formatting and reinstalling, but just thought I'd send the ESET message before I do anything.

OK thanks for the information about ESET. I agree with the decision to reformat, that is the only way to be sure that the system is clean.

[Jiten]

Hey Mate.

I did a format and reinstall. Just thought I'd post a few scans, just to make sure it's all kosher.
I did run a MBAM Full scan and KAS Online scan, both came back all clear, if you want those logs then let me know.
------------------------------------------

info.txt logfile of random's system information tool 1.06 2009-11-22 05:46:50

======Uninstall list======

-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
Foxit PDF Editor-->C:\Program Files\Foxit Software\PDF Editor\uninstall.exe
Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HDAUDIO SoftV92 Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_20030003\HXFSETUP.EXE -U -ISnyHDANk.inf
HijackThis 2.0.2-->"C:\Documents and Settings\Cookie\Desktop\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Intel PROSet Wireless-->Intel PROSet Wireless
Intel(R) Network Connections 14.7.23.0-->MsiExec.exe /i{4449B83C-1257-4355-8F3E-71280E922B5F} ARPREMOVE=1
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216017FF}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Base Smart Card Cryptographic Service Provider Package-->"C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Access MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-0117-0409-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-0016-0409-0000-0000000FF1CE}
Microsoft Office Groove MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-00BA-0409-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-0044-0409-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-00A1-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-0018-0409-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010 (Beta)-->MsiExec.exe /X{20140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Proof (English) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2010 (Beta)-->MsiExec.exe /X{20140000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2010 (Beta)-->MsiExec.exe /X{20140000-002C-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-0019-0409-0000-0000000FF1CE}
Microsoft Office Send-a-Smile-->MsiExec.exe /I{20140000-011A-0000-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2010 (Beta)-->MsiExec.exe /X{20140000-001B-0409-0000-0000000FF1CE}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.5.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
QT Lite 3.0.0-->"C:\Program Files\QT Lite\unins000.exe"
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly
Security Update for Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Security Update for Windows Internet Explorer 8 (KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Security Update for Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961371-v2)-->"C:\WINDOWS\$NtUninstallKB961371-v2$\spuninst\spuninst.exe"
Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Security Update for Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Security Update for Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Security Update for Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Security Update for Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Setting Utility Series-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59452470-A902-477F-9338-9B88101681BD}\Setup.exe" -l0x9 UNINSTALL
Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
Sony MP4 Shared Library-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}\setup.exe" -l0x9 -removeonly
Sony Utilities DLL-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EF3D45BB-2260-4008-88EA-492E7744A9DF}\Setup.exe" -l0x9
Sony Video Shared Library-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BE56FEF0-1A0F-4719-B3AD-34B5087AFA6D}\setup.exe" -l0x9 -removeonly
Sophos Anti-Rootkit 1.5.0-->C:\Program Files\Sophos\Sophos Anti-Rootkit\helper.exe remove
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft Windows (KB971513)-->"C:\WINDOWS\$NtUninstallKB971513$\spuninst\spuninst.exe"
Update for Windows Internet Explorer 8 (KB975364)-->"C:\WINDOWS\ie8updates\KB975364-IE8\spuninst\spuninst.exe"
Update for Windows Internet Explorer 8 (KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Update for Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update for Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update for Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update for Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
VAIO Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC37C108-821D-4EDE-8F40-D5B497586805}\Setup.exe" -l0x9
VAIO Event Service-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}\Setup.exe" -l0x9
VAIO Power Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E319E96-ED8E-4B01-9775-C521A1869A25}\Setup.exe" -l0x9 UNINSTALL
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{F6BD194C-4190-4D73-B1B1-C48C99921BFE}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}
Windows Live Messenger-->MsiExec.exe /X{A85FD55B-891B-4314-97A5-EA96C0BD80B5}
Windows Live Sign-in Assistant-->MsiExec.exe /I{45338B07-A236-4270-9A77-EBB4115517B5}
Windows Live Upload Tool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
WinZip 14.0-->MsiExec.exe /X{CD95F661-A5C4-44F5-A6AA-ECDD91C240BA}
Wireless LAN Starter-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{61D6E4FB-1A62-4EB1-BE56-929B00C155CF}\Setup.exe" -l0x9

======Hosts File======

127.0.0.1 localhost
127.0.0.1 mpa.one.microsoft.com

======Security center information======

AV: ESET Smart Security 4.0 (disabled)
FW: ESET Personal firewall (disabled)

======System event log======

Computer Name: SONI
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

Record Number: 75
Source Name: DCOM
Time Written: 20091122003208.000000+000
Event Type: error
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: SONI
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

Record Number: 62
Source Name: DCOM
Time Written: 20091122003208.000000+000
Event Type: error
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: SONI
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

Record Number: 55
Source Name: DCOM
Time Written: 20091122002756.000000+000
Event Type: error
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: SONI
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

Record Number: 54
Source Name: DCOM
Time Written: 20091122002756.000000+000
Event Type: error
User: NT AUTHORITY\NETWORK SERVICE

Computer Name: SONI
Event Code: 10016
Message: The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{A4199E55-EBB9-49E5-AF1A-7A5408B2E206}
to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

Record Number: 53
Source Name: DCOM
Time Written: 20091122002756.000000+000
Event Type: error
User: NT AUTHORITY\NETWORK SERVICE

=====Application event log=====

Computer Name: SONI
Event Code: 5603
Message: A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

Record Number: 15
Source Name: WinMgmt
Time Written: 20091122000335.000000+000
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: SONI
Event Code: 5603
Message: A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

Record Number: 14
Source Name: WinMgmt
Time Written: 20091122000335.000000+000
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: SONI
Event Code: 63
Message: A provider, CmdTriggerConsumer, has been registered in the WMI namespace, Root\cimv2, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Record Number: 13
Source Name: WinMgmt
Time Written: 20091122000335.000000+000
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: SONI
Event Code: 63
Message: A provider, CmdTriggerConsumer, has been registered in the WMI namespace, Root\cimv2, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Record Number: 12
Source Name: WinMgmt
Time Written: 20091122000335.000000+000
Event Type: warning
User: NT AUTHORITY\SYSTEM

Computer Name: SONI
Event Code: 63
Message: A provider, HiPerfCooker_v1, has been registered in the WMI namespace, Root\WMI, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Record Number: 11
Source Name: WinMgmt
Time Written: 20091122000333.000000+000
Event Type: warning
User: NT AUTHORITY\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\Intel\DMIX;C:\Program Files\Intel\WiFi\bin;C:\Program Files\QT Lite\QTSystem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

Log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by Cookie at 2009-11-22 05:46:42
Microsoft Windows XP Professional Service Pack 3
System drive C: has 68 GB (89%) free of 76 GB
Total RAM: 2046 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 05:46:49, on 22/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Microsoft Office\Office14\OfficeSAS\officeSASscheduler.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Cookie\Desktop\RSIT.exe
C:\Documents and Settings\Cookie\Desktop\Cookie.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 8857415562
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

--
End of file - 7747 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Malwarebytes' Scheduled Update for Cookie.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-22 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-11-22 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2009-11-03 556432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-11-22 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-22 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-11-22 256112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2003-11-07 114688]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-08-20 13537280]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-08-20 86016]
"IntelZeroConfig"=C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [2009-02-27 1368064]
"IntelWireless"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2009-02-27 1202448]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-10-06 18750976]
"SonyPowerCfg"=C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2005-05-15 184320]
"ISBMgr.exe"=C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2004-02-20 32768]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-09-11 2054360]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-09-10 420176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-09-10 420176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883856]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\WINDOWS\system32\VESWinlogon.dll [2005-05-20 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2009-10-29 4150160]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Foxit Software\PDF Editor\PDFEdit.exe"="C:\Program Files\Foxit Software\PDF Editor\PDFEdit.exe:*:Enabled:Foxit PDF Editor, the first REAL editor for PDF files!"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2009-11-22 05:46:42 ----D---- C:\rsit
2009-11-22 04:24:14 ----D---- C:\WINDOWS\Sun
2009-11-22 03:28:38 ----D---- C:\Documents and Settings\Cookie\Application Data\Malwarebytes
2009-11-22 03:28:33 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-11-22 03:28:32 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-11-22 03:21:33 ----D---- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2009-11-22 03:21:31 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2009-11-22 03:08:29 ----D---- C:\WINDOWS\temp
2009-11-22 03:02:35 ----AH---- C:\Boot.bak
2009-11-22 03:02:30 ----RASHD---- C:\cmdcons
2009-11-22 03:01:33 ----A---- C:\WINDOWS\zip.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\SWSC.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\SWREG.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\sed.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\PEV.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\NIRCMD.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\MBR.exe
2009-11-22 03:01:33 ----A---- C:\WINDOWS\grep.exe
2009-11-22 03:01:27 ----D---- C:\WINDOWS\ERDNT
2009-11-22 02:54:04 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2009-11-22 02:53:50 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-11-22 02:53:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-11-22 02:53:23 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-11-22 02:52:49 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-11-22 02:52:07 ----D---- C:\WINDOWS\system32\appmgmt
2009-11-22 02:52:06 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-11-22 02:26:23 ----D---- C:\Program Files\Microsoft Silverlight
2009-11-22 02:25:40 ----D---- C:\Program Files\Microsoft
2009-11-22 02:25:18 ----D---- C:\Program Files\Windows Live SkyDrive
2009-11-22 02:24:44 ----D---- C:\Program Files\Windows Live
2009-11-22 02:02:08 ----D---- C:\Documents and Settings\Cookie\Application Data\ESET
2009-11-22 02:01:00 ----D---- C:\Program Files\ESET
2009-11-22 02:01:00 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2009-11-22 01:57:13 ----D---- C:\Program Files\Foxit Software
2009-11-22 01:57:13 ----D---- C:\Documents and Settings\Cookie\Application Data\Foxit
2009-11-22 01:56:13 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2009-11-22 01:56:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971513$
2009-11-22 01:56:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-11-22 01:55:54 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-11-22 01:55:49 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-11-22 01:55:45 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-11-22 01:55:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-11-22 01:55:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-11-22 01:55:22 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-11-22 01:55:18 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-11-22 01:55:14 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-11-22 01:55:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-11-22 01:55:03 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-11-22 01:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-11-22 01:54:49 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-11-22 01:54:44 ----HDC---- C:\WINDOWS\$NtUninstallKB970653-v3$
2009-11-22 01:54:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-11-22 01:54:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-11-22 01:54:31 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-11-22 01:54:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-11-22 01:54:22 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-11-22 01:54:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-11-22 01:54:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-11-22 01:54:02 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-11-22 01:53:58 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-11-22 01:53:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-11-22 01:51:42 ----D---- C:\Documents and Settings\Cookie\Application Data\Macromedia
2009-11-22 01:51:42 ----D---- C:\Documents and Settings\Cookie\Application Data\Adobe
2009-11-22 01:49:25 ----D---- C:\WINDOWS\system32\XPSViewer
2009-11-22 01:49:14 ----D---- C:\Program Files\Reference Assemblies
2009-11-22 01:48:50 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-11-22 01:48:50 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-11-22 01:48:49 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-11-22 01:45:45 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-11-22 01:45:40 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-11-22 01:45:35 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-11-22 01:45:30 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-11-22 01:45:22 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-11-22 01:45:09 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-11-22 01:45:01 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-11-22 01:44:52 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2009-11-22 01:44:40 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-11-22 01:44:33 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-11-22 01:44:26 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-11-22 01:44:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-11-22 01:44:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-11-22 01:44:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-11-22 01:44:07 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-11-22 01:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-11-22 01:43:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-11-22 01:43:47 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-11-22 01:43:42 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-11-22 01:43:37 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-11-22 01:43:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-11-22 01:43:24 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-11-22 01:43:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-11-22 01:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-11-22 01:43:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-11-22 01:42:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-11-22 01:42:51 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-11-22 01:42:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-11-22 01:42:34 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2009-11-22 01:42:24 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-11-22 01:42:19 ----D---- C:\Program Files\Windows Media Connect 2
2009-11-22 01:42:01 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-11-22 01:40:51 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-11-22 01:40:31 ----D---- C:\WINDOWS\system32\LogFiles
2009-11-22 01:40:23 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-11-22 01:38:39 ----RSD---- C:\WINDOWS\assembly
2009-11-22 01:38:38 ----D---- C:\WINDOWS\Microsoft.NET
2009-11-22 01:38:37 ----D---- C:\WINDOWS\system32\URTTemp
2009-11-22 01:35:51 ----D---- C:\Program Files\MSBuild
2009-11-22 01:34:48 ----D---- C:\Program Files\Common Files\DESIGNER
2009-11-22 01:34:19 ----D---- C:\Program Files\Microsoft Sync Framework
2009-11-22 01:30:46 ----D---- C:\Program Files\Sophos
2009-11-22 01:30:38 ----D---- C:\Program Files\Microsoft Analysis Services
2009-11-22 01:30:21 ----D---- C:\WINDOWS\SHELLNEW
2009-11-22 01:29:13 ----D---- C:\Program Files\Microsoft Office
2009-11-22 01:29:11 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2009-11-22 01:28:51 ----RHD---- C:\MSOCache
2009-11-22 01:26:35 ----D---- C:\Program Files\Common Files\Windows Live
2009-11-22 01:23:53 ----D---- C:\Documents and Settings\Cookie\Application Data\skypePM
2009-11-22 01:23:15 ----D---- C:\Documents and Settings\Cookie\Application Data\Skype
2009-11-22 01:21:58 ----D---- C:\Program Files\Common Files\Skype
2009-11-22 01:21:55 ----RD---- C:\Program Files\Skype
2009-11-22 01:21:49 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-11-22 01:01:52 ----D---- C:\WINDOWS\system32\PreInstall
2009-11-22 01:01:50 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-11-22 00:59:12 ----D---- C:\Documents and Settings\Cookie\Application Data\Google
2009-11-22 00:58:59 ----N---- C:\WINDOWS\system32\xpsp4res.dll
2009-11-22 00:55:41 ----SHD---- C:\RECYCLER
2009-11-22 00:52:51 ----A---- C:\WINDOWS\system32\MFC71u.dll
2009-11-22 00:51:03 ----A---- C:\WINDOWS\system32\VESWinlogon.dll
2009-11-22 00:50:45 ----A---- C:\WINDOWS\system32\mfc70.dll
2009-11-22 00:50:28 ----D---- C:\Documents and Settings\Cookie\Application Data\Sony Corporation
2009-11-22 00:50:26 ----A---- C:\WINDOWS\system32\msvcp70.dll
2009-11-22 00:50:25 ----D---- C:\Program Files\Sony
2009-11-22 00:50:25 ----A---- C:\WINDOWS\system32\mfc70u.dll
2009-11-22 00:49:44 ----D---- C:\Program Files\Common Files\Sony Shared
2009-11-22 00:49:44 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-11-22 00:49:06 ----D---- C:\WINDOWS\system32\Adobe
2009-11-22 00:48:52 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-11-22 00:48:42 ----D---- C:\Program Files\QT Lite
2009-11-22 00:47:41 ----D---- C:\Documents and Settings\All Users\Application Data\WinZip
2009-11-22 00:47:37 ----D---- C:\Program Files\WinZip
2009-11-22 00:46:49 ----A---- C:\WINDOWS\system32\javaws.exe
2009-11-22 00:46:49 ----A---- C:\WINDOWS\system32\javaw.exe
2009-11-22 00:46:49 ----A---- C:\WINDOWS\system32\java.exe
2009-11-22 00:46:49 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-11-22 00:46:34 ----D---- C:\Program Files\Java
2009-11-22 00:45:24 ----D---- C:\Documents and Settings\Cookie\Application Data\Sun
2009-11-22 00:44:31 ----D---- C:\WINDOWS\ie8updates
2009-11-22 00:44:30 ----HD---- C:\WINDOWS\$hf_mig$
2009-11-22 00:44:04 ----D---- C:\WINDOWS\WBEM
2009-11-22 00:43:42 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-11-22 00:42:45 ----HDC---- C:\WINDOWS\ie8
2009-11-22 00:42:14 ----HD---- C:\WINDOWS\msdownld.tmp
2009-11-22 00:42:14 ----D---- C:\Program Files\Google
2009-11-22 00:42:14 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2009-11-22 00:41:14 ----D---- C:\Documents and Settings\Cookie\Application Data\Mozilla
2009-11-22 00:41:03 ----D---- C:\Program Files\Mozilla Firefox
2009-11-22 00:40:37 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-22 00:36:25 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-11-22 00:33:20 ----RA---- C:\WINDOWS\system32\hsfci015.dll
2009-11-22 00:33:19 ----RA---- C:\WINDOWS\system32\mdmxsdk.dll
2009-11-22 00:33:19 ----D---- C:\Program Files\CONEXANT
2009-11-22 00:32:07 ----D---- C:\WINDOWS\system32\Lang
2009-11-22 00:30:08 ----D---- C:\WINDOWS\system32\RTCOM
2009-11-22 00:30:05 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-11-22 00:30:00 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2009-11-22 00:29:59 ----A---- C:\WINDOWS\RtlUpd.exe
2009-11-22 00:29:59 ----A---- C:\WINDOWS\RTLCPL.EXE
2009-11-22 00:29:56 ----A---- C:\WINDOWS\RTHDCPL.EXE
2009-11-22 00:29:56 ----A---- C:\WINDOWS\MicCal.exe
2009-11-22 00:29:54 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-22 00:29:54 ----D---- C:\Program Files\Realtek
2009-11-22 00:29:54 ----A---- C:\WINDOWS\ALCWZRD.EXE
2009-11-22 00:29:54 ----A---- C:\WINDOWS\ALCMTR.EXE
2009-11-22 00:29:49 ----A---- C:\WINDOWS\RtlExUpd.dll
2009-11-22 00:29:46 ----D---- C:\Program Files\Common Files\InstallShield
2009-11-22 00:28:39 ----A---- C:\WINDOWS\system32\CSVer.dll
2009-11-22 00:28:31 ----HD---- C:\Intel
2009-11-22 00:27:43 ----D---- C:\Documents and Settings\Cookie\Application Data\Intel
2009-11-22 00:27:24 ----A---- C:\WINDOWS\system32\Netw2r32.dll
2009-11-22 00:27:24 ----A---- C:\WINDOWS\system32\Netw2c32.dll
2009-11-22 00:27:23 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-11-22 00:27:04 ----D---- C:\Program Files\Common Files\Intel
2009-11-22 00:27:04 ----D---- C:\Documents and Settings\All Users\Application Data\Intel
2009-11-22 00:26:17 ----D---- C:\Program Files\Intel
2009-11-22 00:26:10 ----A---- C:\WINDOWS\system32\PROUnstl.exe
2009-11-22 00:24:53 ----A---- C:\WINDOWS\system32\nvwrszht.dll
2009-11-22 00:24:53 ----A---- C:\WINDOWS\system32\nvrszht.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvwrszhc.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvwrstr.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvwrsth.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvwrssv.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvrstr.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvrsth.dll
2009-11-22 00:24:52 ----A---- C:\WINDOWS\system32\nvrssv.dll
2009-11-22 00:24:51 ----A---- C:\WINDOWS\system32\nvwrssl.dll
2009-11-22 00:24:51 ----A---- C:\WINDOWS\system32\nvwrssk.dll
2009-11-22 00:24:51 ----A---- C:\WINDOWS\system32\nvwrsru.dll
2009-11-22 00:24:51 ----A---- C:\WINDOWS\system32\nvwrsptb.dll
2009-11-22 00:24:51 ----A---- C:\WINDOWS\system32\nvrssl.dll
2009-11-22 00:24:51 ----A---- C:\WINDOWS\system32\nvrssk.dll
2009-11-22 00:24:51 ----A---- C:\WINDOWS\system32\nvrsru.dll
2009-11-22 00:24:50 ----A---- C:\WINDOWS\system32\nvwrspt.dll
2009-11-22 00:24:50 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2009-11-22 00:24:50 ----A---- C:\WINDOWS\system32\nvrspt.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvwrspl.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvwrsno.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvwrsnl.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvwrsko.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvrspl.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvrsno.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2009-11-22 00:24:49 ----A---- C:\WINDOWS\system32\nvrsko.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvwrsja.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvwrsit.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvwrshu.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvwrshe.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvrsja.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvrsit.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvrshu.dll
2009-11-22 00:24:48 ----A---- C:\WINDOWS\system32\nvrshe.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvwrsfr.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvwrsfi.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvwrsesm.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvwrses.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvwrseng.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2009-11-22 00:24:47 ----A---- C:\WINDOWS\system32\nvrses.dll
2009-11-22 00:24:46 ----A---- C:\WINDOWS\system32\nvwrsel.dll
2009-11-22 00:24:46 ----A---- C:\WINDOWS\system32\nvwrsde.dll
2009-11-22 00:24:46 ----A---- C:\WINDOWS\system32\nvwrsda.dll
2009-11-22 00:24:46 ----A---- C:\WINDOWS\system32\nvrseng.dll
2009-11-22 00:24:46 ----A---- C:\WINDOWS\system32\nvrsel.dll
2009-11-22 00:24:46 ----A---- C:\WINDOWS\system32\nvrsde.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvwrscs.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvwrsar.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvrsda.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvrscs.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvrsar.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvexpbar.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvcpluir.dll
2009-11-22 00:24:45 ----A---- C:\WINDOWS\system32\nvcplui.exe
2009-11-22 00:24:44 ----D---- C:\WINDOWS\nview
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nwiz.exe
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvwimg.dll
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvsysrot.dll
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvshell.dll
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvmccsrs.dll
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nview.dll
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvgfx.dll
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvdspsch.exe
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvcolor.exe
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\nvappbar.exe
2009-11-22 00:24:44 ----A---- C:\WINDOWS\system32\keystone.exe
2009-11-22 00:24:43 ----A---- C:\WINDOWS\system32\nvudisp.exe
2009-11-22 00:24:27 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2009-11-22 00:23:43 ----RA---- C:\WINDOWS\system32\Vxdif.dll
2009-11-22 00:23:43 ----D---- C:\Program Files\Apoint
2009-11-22 00:23:42 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-11-22 00:14:13 ----D---- C:\Documents and Settings\Cookie\Application Data\Identities
2009-11-22 00:14:10 ----HD---- C:\Program Files\Uninstall Information
2009-11-22 00:14:02 ----SD---- C:\Documents and Settings\Cookie\Application Data\Microsoft
2009-11-22 00:14:02 ----ASH---- C:\Documents and Settings\Cookie\Application Data\desktop.ini
2009-11-22 00:12:54 ----D---- C:\WINDOWS\SoftwareDistribution
2009-11-22 00:12:52 ----D---- C:\WINDOWS\Prefetch
2009-11-22 00:12:48 ----SD---- C:\WINDOWS\system32\Microsoft
2009-11-22 00:12:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-22 00:07:13 ----D---- C:\Program Files\xerox
2009-11-22 00:07:12 ----D---- C:\WINDOWS\system32\xircom
2009-11-22 00:07:12 ----D---- C:\Program Files\microsoft frontpage
2009-11-22 00:06:51 ----A---- C:\WINDOWS\control.ini
2009-11-22 00:06:51 ----A---- C:\AUTOEXEC.BAT
2009-11-22 00:06:36 ----A---- C:\WINDOWS\OEWABLog.txt
2009-11-22 00:06:32 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-11-22 00:05:45 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-11-22 00:05:45 ----RD---- C:\WINDOWS\Offline Web Pages
2009-11-22 00:05:45 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-11-22 00:05:40 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-11-22 00:05:35 ----HD---- C:\Program Files\WindowsUpdate
2009-11-22 00:05:13 ----D---- C:\WINDOWS\system32\DirectX
2009-11-22 00:05:03 ----A---- C:\WINDOWS\system32\atrace.dll
2009-11-22 00:05:00 ----A---- C:\WINDOWS\system32\desktop.ini
2009-11-22 00:05:00 ----A---- C:\WINDOWS\desktop.ini
2009-11-22 00:04:53 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-11-22 00:04:51 ----D---- C:\Program Files\Common Files\Services
2009-11-22 00:04:51 ----A---- C:\WINDOWS\system32\acctres.dll
2009-11-22 00:04:48 ----SD---- C:\WINDOWS\Tasks
2009-11-22 00:04:48 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-11-22 00:04:47 ----D---- C:\Program Files\Common Files\MSSoap
2009-11-22 00:04:42 ----D---- C:\WINDOWS\srchasst
2009-11-22 00:04:41 ----D---- C:\WINDOWS\system32\Macromed
2009-11-22 00:04:38 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-11-22 00:04:38 ----A---- C:\WINDOWS\system32\wups.dll
2009-11-22 00:04:38 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-11-22 00:04:38 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-11-22 00:04:38 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-11-22 00:04:38 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-11-22 00:04:37 ----N---- C:\WINDOWS\system32\wuauclt.exe
2009-11-22 00:04:37 ----N---- C:\WINDOWS\system32\qmgr.dll
2009-11-22 00:04:37 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-11-22 00:04:37 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-11-22 00:04:37 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-11-22 00:04:37 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-11-22 00:04:37 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-11-22 00:04:37 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-11-22 00:04:32 ----D---- C:\Program Files\Movie Maker
2009-11-22 00:04:12 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-11-22 00:04:12 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-11-22 00:04:12 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-11-22 00:04:12 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-11-22 00:04:07 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-11-22 00:04:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-11-22 00:04:06 ----N---- C:\WINDOWS\system32\srsvc.dll
2009-11-22 00:04:06 ----D---- C:\WINDOWS\system32\Restore
2009-11-22 00:04:06 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-11-22 00:04:06 ----A---- C:\WINDOWS\system32\srclient.dll
2009-11-22 00:04:05 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-11-22 00:04:05 ----A---- C:\WINDOWS\system32\msconf.dll
2009-11-22 00:04:05 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-11-22 00:04:05 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-11-22 00:04:05 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-11-22 00:04:05 ----A---- C:\WINDOWS\system32\ils.dll
2009-11-22 00:04:02 ----D---- C:\Program Files\NetMeeting
2009-11-22 00:04:01 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-11-22 00:04:01 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-11-22 00:04:00 ----A---- C:\WINDOWS\system32\inetres.dll
2009-11-22 00:03:59 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-11-22 00:03:57 ----N---- C:\WINDOWS\system32\schedsvc.dll
2009-11-22 00:03:57 ----D---- C:\Program Files\Outlook Express
2009-11-22 00:03:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-11-22 00:03:57 ----A---- C:\WINDOWS\system32\mstask.dll
2009-11-22 00:03:56 ----A---- C:\WINDOWS\system32\isign32.dll
2009-11-22 00:03:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-11-22 00:03:56 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-11-22 00:03:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-11-22 00:03:50 ----D---- C:\Program Files\Common Files\System
2009-11-22 00:03:44 ----D---- C:\Program Files\Internet Explorer
2009-11-22 00:03:05 ----D---- C:\Program Files\ComPlus Applications
2009-11-22 00:03:02 ----A---- C:\WINDOWS\vbaddin.ini
2009-11-22 00:03:02 ----A---- C:\WINDOWS\vb.ini
2009-11-22 00:02:57 ----D---- C:\WINDOWS\Registration
2009-11-22 00:02:47 ----D---- C:\Program Files\Windows Media Player
2009-11-22 00:02:47 ----D---- C:\Program Files\Online Services
2009-11-22 00:02:38 ----D---- C:\Program Files\Messenger
2009-11-22 00:02:33 ----D---- C:\Program Files\MSN Gaming Zone
2009-11-22 00:02:33 ----A---- C:\WINDOWS\system32\write.exe
2009-11-22 00:02:25 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-11-22 00:02:25 ----A---- C:\WINDOWS\system32\hticons.dll
2009-11-22 00:02:24 ----A---- C:\WINDOWS\system32\winchat.exe
2009-11-22 00:02:24 ----A---- C:\WINDOWS\system32\avwav.dll
2009-11-22 00:02:24 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-11-22 00:02:24 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-11-22 00:02:17 ----A---- C:\WINDOWS\system32\getuname.dll
2009-11-22 00:02:17 ----A---- C:\WINDOWS\system32\charmap.exe
2009-11-22 00:02:16 ----A---- C:\WINDOWS\system32\sol.exe
2009-11-22 00:02:16 ----A---- C:\WINDOWS\system32\calc.exe
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\tskill.exe
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\tscon.exe
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\reset.exe
2009-11-22 00:02:15 ----A---- C:\WINDOWS\system32\freecell.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\shadow.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\regini.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\msg.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\logoff.exe
2009-11-22 00:02:14 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-11-22 00:02:13 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-11-22 00:02:07 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-11-22 00:01:52 ----D---- C:\Program Files\MSN
2009-11-22 00:01:51 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-11-22 00:01:51 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-11-22 00:01:51 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-11-22 00:01:50 ----D---- C:\Program Files\Windows NT
2009-11-22 00:01:50 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-11-22 00:01:50 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-11-22 00:01:49 ----A---- C:\WINDOWS\system32\spider.exe
2009-11-22 00:01:49 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-11-22 00:01:48 ----D---- C:\WINDOWS\system32\en-US
2009-11-22 00:01:48 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-11-22 00:01:48 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-11-22 00:01:48 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-11-22 00:01:47 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-11-22 00:01:46 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-11-22 00:01:46 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-11-22 00:01:46 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-11-22 00:01:46 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-11-22 00:01:46 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-11-22 00:01:46 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-11-22 00:01:45 ----N---- C:\WINDOWS\system32\termsrv.dll
2009-11-22 00:01:45 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-11-22 00:01:45 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-11-22 00:01:45 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-11-22 00:01:45 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-11-22 00:01:45 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-11-22 00:01:45 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-11-22 00:01:45 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-11-22 00:01:44 ----D---- C:\WINDOWS\system32\MsDtc
2009-11-22 00:01:44 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-11-22 00:01:44 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-11-22 00:01:44 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-11-22 00:01:44 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-11-22 00:01:43 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-11-22 00:01:43 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-11-22 00:01:43 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-11-22 00:01:42 ----D---- C:\WINDOWS\system32\Com
2009-11-22 00:01:42 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-11-22 00:01:42 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-11-22 00:01:42 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-11-22 00:01:42 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-11-22 00:01:42 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-11-22 00:01:42 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-11-22 00:01:42 ----A---- C:\WINDOWS\system32\colbact.dll
2009-11-22 00:01:41 ----A---- C:\WINDOWS\system32\stclient.dll
2009-11-22 00:01:41 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-11-22 00:01:41 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-11-22 00:01:41 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-11-22 00:01:41 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-11-22 00:01:40 ----A---- C:\WINDOWS\system32\comuid.dll
2009-11-22 00:01:40 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-11-22 00:01:39 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-11-22 00:01:39 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-11-22 00:01:32 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-11-22 00:01:32 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-11-22 00:01:31 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-11-22 00:01:30 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-11-21 23:59:30 ----A---- C:\WINDOWS\system32\h323log.txt
2009-11-21 23:56:10 ----A---- C:\WINDOWS\system32\usbui.dll
2009-11-21 23:55:05 ----A---- C:\WINDOWS\imsins.BAK
2009-11-21 23:55:02 ----SHD---- C:\WINDOWS\Installer
2009-11-21 23:55:02 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-21 23:55:01 ----D---- C:\Program Files\Common Files\ODBC
2009-11-21 23:55:01 ----A---- C:\WINDOWS\ODBCINST.INI
2009-11-21 23:54:57 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-11-21 23:54:54 ----RD---- C:\Program Files
2009-11-21 23:54:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-11-21 23:54:54 ----D---- C:\Program Files\Common Files
2009-11-21 23:54:48 ----A---- C:\WINDOWS\system32\irclass.dll
2009-11-21 23:54:47 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-11-21 23:54:47 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-11-21 23:54:47 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-11-21 23:54:47 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-11-21 23:54:45 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-11-21 23:54:45 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-11-21 23:54:44 ----A---- C:\WINDOWS\system32\batt.dll
2009-11-21 23:54:44 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-11-21 23:54:41 ----A---- C:\WINDOWS\system32\storprop.dll
2009-11-21 23:54:31 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-11-21 23:54:28 ----RA---- C:\WINDOWS\SET8.tmp
2009-11-21 23:54:25 ----RA---- C:\WINDOWS\SET4.tmp
2009-11-21 23:54:23 ----RA---- C:\WINDOWS\SET3.tmp
2009-11-21 23:54:15 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-21 23:54:15 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-21 23:54:09 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-11-21 23:53:47 ----A---- C:\WINDOWS\setuplog.txt
2009-11-21 23:53:42 ----D---- C:\Documents and Settings
2009-11-21 23:53:41 ----SHD---- C:\System Volume Information
2009-11-21 23:53:10 ----RASH---- C:\boot.ini
2009-11-21 23:48:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-11-21 23:48:33 ----RSD---- C:\WINDOWS\Fonts
2009-11-21 23:48:33 ----RD---- C:\WINDOWS\Web
2009-11-21 23:48:33 ----HD---- C:\WINDOWS\inf
2009-11-21 23:48:33 ----D---- C:\WINDOWS\WinSxS
2009-11-21 23:48:33 ----D---- C:\WINDOWS\twain_32
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\wins
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\wbem
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\usmt
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\spool
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\ShellExt
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\Setup
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\scripting
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\ras
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\oobe
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\npp
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\mui
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\inetsrv
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\IME
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\icsxml
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\ias
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\export
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\en
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\drivers
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\dhcp
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\config
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\3com_dmi
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\3076
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\2052
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1054
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1042
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1041
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1037
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1033
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1031
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1028
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32\1025
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system32
2009-11-21 23:48:33 ----D---- C:\WINDOWS\system
2009-11-21 23:48:33 ----D---- C:\WINDOWS\security
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Resources
2009-11-21 23:48:33 ----D---- C:\WINDOWS\repair
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Provisioning
2009-11-21 23:48:33 ----D---- C:\WINDOWS\PeerNet
2009-11-21 23:48:33 ----D---- C:\WINDOWS\pchealth
2009-11-21 23:48:33 ----D---- C:\WINDOWS\NLDRV
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Network Diagnostic
2009-11-21 23:48:33 ----D---- C:\WINDOWS\mui
2009-11-21 23:48:33 ----D---- C:\WINDOWS\msapps
2009-11-21 23:48:33 ----D---- C:\WINDOWS\msagent
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Media
2009-11-21 23:48:33 ----D---- C:\WINDOWS\L2Schemas
2009-11-21 23:48:33 ----D---- C:\WINDOWS\java
2009-11-21 23:48:33 ----D---- C:\WINDOWS\ime
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Help
2009-11-21 23:48:33 ----D---- C:\WINDOWS\ehome
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Driver Cache
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Debug
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Cursors
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Connection Wizard
2009-11-21 23:48:33 ----D---- C:\WINDOWS\Config
2009-11-21 23:48:33 ----D---- C:\WINDOWS\AppPatch
2009-11-21 23:48:33 ----D---- C:\WINDOWS\addins
2009-11-21 23:48:33 ----D---- C:\WINDOWS
2009-11-21 22:10:13 ----A---- C:\WINDOWS\system32\NicInst.dll
2009-11-21 22:10:13 ----A---- C:\WINDOWS\system32\NicCo2.dll
2009-11-21 22:10:13 ----A---- C:\WINDOWS\system32\e100bmsg.dll
2009-11-21 22:07:33 ----A---- C:\WINDOWS\system32\oemdspif.dll
2009-11-21 22:07:32 ----A---- C:\WINDOWS\system32\nvwssr.dll
2009-11-21 22:07:31 ----A---- C:\WINDOWS\system32\nvwss.dll
2009-11-21 22:07:26 ----A---- C:\WINDOWS\system32\nvwddi.dll
2009-11-21 22:07:20 ----A---- C:\WINDOWS\system32\nvvitvsr.dll
2009-11-21 22:07:19 ----A---- C:\WINDOWS\system32\nvvitvs.dll
2009-11-21 22:07:18 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2009-11-21 22:07:12 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2009-11-21 22:07:12 ----A---- C:\WINDOWS\system32\nvnt4cpl.dll
2009-11-21 22:07:10 ----A---- C:\WINDOWS\system32\nvmoblsr.dll
2009-11-21 22:07:10 ----A---- C:\WINDOWS\system32\nvmobls.dll
2009-11-21 22:07:09 ----A---- C:\WINDOWS\system32\nvmctray.dll
2009-11-21 22:07:08 ----A---- C:\WINDOWS\system32\nvmccssr.dll
2009-11-21 22:07:08 ----A---- C:\WINDOWS\system32\nvmccss.dll
2009-11-21 22:07:08 ----A---- C:\WINDOWS\system32\nvmccs.dll
2009-11-21 22:07:06 ----A---- C:\WINDOWS\system32\nvgamesr.dll
2009-11-21 22:07:05 ----A---- C:\WINDOWS\system32\nvgames.dll
2009-11-21 22:06:59 ----A---- C:\WINDOWS\system32\nvdispsr.dll
2009-11-21 22:06:58 ----A---- C:\WINDOWS\system32\nvdisps.dll
2009-11-21 22:06:58 ----A---- C:\WINDOWS\system32\nvcuda.dll
2009-11-21 22:06:49 ----A---- C:\WINDOWS\system32\nvcpl.dll
2009-11-21 22:06:46 ----A---- C:\WINDOWS\system32\nvcodins.dll
2009-11-21 22:06:46 ----A---- C:\WINDOWS\system32\nvcod.dll
2009-11-21 22:06:45 ----A---- C:\WINDOWS\system32\nvapi.dll
2009-11-21 22:06:41 ----A---- C:\WINDOWS\system32\nv4_disp.dll

======List of files/folders modified in the last 1 months======

2009-11-22 03:07:06 ----A---- C:\WINDOWS\system.ini
2009-11-22 01:42:25 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 DMICall;Sony DMI Call service; C:\WINDOWS\system32\DRIVERS\DMICall.sys [2000-12-05 3952]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-09-11 108792]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-09-11 55768]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-09-11 116008]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2009-09-11 135048]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2008-08-13 11904]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2003-09-29 94601]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-05-23 1034752]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-05-23 178048]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-10-06 5922816]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 MEMSWEEP2;MEMSWEEP2; \??\C:\WINDOWS\system32\261.tmp []
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-08-20 6596192]
R3 SNC;Sony Notebook Control Device; C:\WINDOWS\system32\DRIVERS\SonyNC.sys [2001-08-17 20752]
R3 tifmsony;tifmsony; C:\WINDOWS\system32\drivers\tifmsony.sys [2007-02-28 80896]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2008-01-07 2216064]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-05-23 716288]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 catchme;catchme; \??\C:\DOCUME~1\Cookie\LOCALS~1\Temp\catchme.sys []
S3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2007-11-16 165496]
S3 NAL;Nal Service ; \??\C:\WINDOWS\system32\Drivers\iqvw32.sys []
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-09-11 735960]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-02-27 870672]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2009-09-10 269648]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-08-20 159813]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-02-27 473360]
R2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2009-02-27 909312]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [2005-05-20 153600]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-09-11 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-11-22 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2009-10-29 30603640]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2009-09-26 149336]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-09-26 4639136]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Uninstall List

Adobe Flash Player 10 Plugin
Adobe Shockwave Player 11.5
Foxit PDF Editor
Foxit Reader
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
HDAUDIO SoftV92 Data Fax Modem with SmartCP
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Intel PROSet Wireless
Intel(R) Network Connections 14.7.23.0
Java(TM) 6 Update 17
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Choice Guard
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Office Access MUI (English) 2010 (Beta)
Microsoft Office Access Setup Metadata MUI (English) 2010 (Beta)
Microsoft Office Excel MUI (English) 2010 (Beta)
Microsoft Office Groove MUI (English) 2010 (Beta)
Microsoft Office InfoPath MUI (English) 2010 (Beta)
Microsoft Office OneNote MUI (English) 2010 (Beta)
Microsoft Office Outlook MUI (English) 2010 (Beta)
Microsoft Office PowerPoint MUI (English) 2010 (Beta)
Microsoft Office Professional Plus 2010
Microsoft Office Professional Plus 2010 (Beta)
Microsoft Office Proof (English) 2010 (Beta)
Microsoft Office Proof (French) 2010 (Beta)
Microsoft Office Proof (Spanish) 2010 (Beta)
Microsoft Office Proofing (English) 2010 (Beta)
Microsoft Office Publisher MUI (English) 2010 (Beta)
Microsoft Office Send-a-Smile
Microsoft Office Shared MUI (English) 2010 (Beta)
Microsoft Office Shared Setup Metadata MUI (English) 2010 (Beta)
Microsoft Office Word MUI (English) 2010 (Beta)
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.5.5)
MSVCRT
NVIDIA Drivers
QT Lite 3.0.0
Realtek High Definition Audio Driver
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Segoe UI
Setting Utility Series
Skype™ 4.1
Sony MP4 Shared Library
Sony Utilities DLL
Sony Video Shared Library
Sophos Anti-Rootkit 1.5.0
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Windows (KB971513)
Update for Windows Internet Explorer 8 (KB975364)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973815)
VAIO Control Center
VAIO Event Service
VAIO Power Management
Windows Internet Explorer 8
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
WinZip 14.0
Wireless LAN Starter

[deltalima]

Hi Jiten,

I did a format and reinstall. Just thought I'd post a few scans, just to make sure it's all kosher.

That all looks fine now.

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

• Update your AntiVirus Software and keep your other programs up-to-date
  Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
  You can use one of these sites to check if any updates are needed for your pc.
  Secunia Software Inspector
  F-secure Health Check
  
  Security Updates for Windows, Internet Explorer & Microsoft Office
  Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the Microsoft Update site on a regular basis.
  
• Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
  
  A tutorial on installing & using this product can be found here:
  
  Using SpywareBlaster to protect your computer from Spyware and Malware
  
  
• Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

Here are some additional utilities that will enhance your safety

• MVPS Hosts file <= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer
• Winpatrol <= Download and install the free version of Winpatrol. a tutorial for this product is located here:
  Using Winpatrol to protect your computer from malicious software

Stand Up and Be Counted ---> Malware Complaints <--- where you can make difference!

The site offers people who have been (or are) victims of malware the opportunity to document their story and, in that way, launch a complaint against the malware and the makers of the malware.

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place

Happy surfing and stay clean!

[Jiten]

Thanks for your help deltalima. it was very much appreciated. I've taken all points you made on board. Keep up the good work.

Thanks, Jiten

[askey127]

this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.