Thanks, melboy. I had to post this as two replies because of the character limit imposed by the forum.
OTL logfile created on: 6/1/2010 12:34:10 PM - Run 1
OTL by OldTimer - Version 3.2.5.2 Folder = J:\__INCOMING!!!!!\AntiVirii
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 68.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 48.83 Gb Total Space | 38.64 Gb Free Space | 79.14% Space Free | Partition Type: NTFS
Drive D: | 62.95 Gb Total Space | 60.65 Gb Free Space | 96.34% Space Free | Partition Type: NTFS
Drive E: | 465.76 Gb Total Space | 456.20 Gb Free Space | 97.95% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 78.13 Gb Total Space | 2.99 Gb Free Space | 3.83% Space Free | Partition Type: NTFS
Drive I: | 70.92 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: NTFS
Drive J: | 931.51 Gb Total Space | 47.52 Gb Free Space | 5.10% Space Free | Partition Type: NTFS
Computer Name: NAME REDACTED
Current User Name: NAME REDACTED
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan
========== Processes (SafeList) ========== PRC - [2010/06/01 12:33:46 | 000,571,392 | ---- | M] (OldTimer Tools) -- J:\__INCOMING!!!!!\AntiVirii\OTL.exe
PRC - [2010/05/12 19:11:02 | 000,039,936 | ---- | M] (C-Dilla Ltd) -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE
PRC - [2010/05/07 22:56:11 | 000,136,176 | ---- | M] (Google Inc.) -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Google\Update\1.2.183.23\GoogleCrashHandler.exe
PRC - [2010/05/07 20:32:36 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/05/06 15:59:42 | 002,815,192 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/05/06 15:59:38 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/04/12 17:46:36 | 001,135,912 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/01/13 17:44:52 | 000,037,888 | ---- | M] (Nullsoft, Inc.) -- D:\Program Files\Winamp\winampa.exe
PRC - [2009/12/19 00:04:18 | 001,824,040 | ---- | M] (ManyCam LLC) -- D:\Program Files\ManyCam 2.4\ManyCam.exe
PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2008/04/13 19:12:36 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\snmp.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/04/30 19:43:54 | 003,450,608 | ---- | M] (Stardock) -- D:\Program Files\Stardock\ObjectDock\ObjectDock.exe
PRC - [2005/10/19 15:52:32 | 000,114,688 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\WTablet\TabUserW.exe
PRC - [2005/10/19 15:31:52 | 000,749,568 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Tablet.exe
PRC - [2004/09/01 16:19:30 | 000,225,280 | ---- | M] () -- C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe
PRC - [2002/03/03 22:02:50 | 001,454,080 | R--- | M] (C-Media Electronic Inc. (
www.cmedia.com.tw)) -- C:\WINDOWS\mixer.exe
PRC - [2001/12/05 16:47:32 | 000,147,456 | ---- | M] () -- D:\Program Files\PCI Audio Applications\Bin\EchoCtrl.exe
========== Modules (SafeList) ========== MOD - [2010/06/01 12:33:46 | 000,571,392 | ---- | M] (OldTimer Tools) -- J:\__INCOMING!!!!!\AntiVirii\OTL.exe
MOD - [2008/04/13 19:10:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2007/04/30 19:18:50 | 000,112,400 | ---- | M] () -- D:\Program Files\Stardock\ObjectDock\DockShellHook.dll
MOD - [2005/01/10 11:32:00 | 001,458,176 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nview.dll
MOD - [2005/01/10 11:32:00 | 001,019,904 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvwimg.dll
MOD - [2005/01/10 11:32:00 | 000,081,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvwddi.dll
========== Win32 Services (SafeList) ========== SRV - [2010/05/12 19:11:02 | 000,039,936 | ---- | M] (C-Dilla Ltd) [Auto | Running] -- C:\WINDOWS\system32\drivers\CDAC11BA.EXE -- (C-DillaCdaC11BA)
SRV - [2010/05/10 23:26:04 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/05/06 15:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/05/06 15:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/05/06 15:59:38 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2008/04/13 19:12:36 | 000,033,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\snmp.exe -- (SNMP)
SRV - [2005/10/19 15:31:52 | 000,749,568 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Tablet.exe -- (TabletService)
SRV - [2004/08/04 07:00:00 | 000,019,456 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\tcpsvcs.exe -- (LPDSVC)
========== Driver Services (SafeList) ========== DRV - [2010/05/06 15:39:23 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/05/06 15:39:00 | 000,164,048 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/05/06 15:34:27 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/05/06 15:33:59 | 000,100,432 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010/05/06 15:33:47 | 000,019,024 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/05/06 15:33:29 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2008/04/13 13:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008/01/14 05:06:32 | 000,021,632 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ManyCam.sys -- (ManyCam)
DRV - [2005/01/10 11:32:00 | 003,330,304 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2004/06/06 22:43:52 | 000,036,484 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SMBios.sys -- (SMBios) Intel (R)
DRV - [2002/03/01 01:37:42 | 000,373,518 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cmaudio.sys -- (cmpci) C-Media PCI Audio Driver (WDM)
DRV - [2001/04/09 13:45:00 | 000,008,138 | ---- | M] (Wacom Technology Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\Drivers\PenClass.sys -- (PenClass)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/ig"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems:
jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems:
firebug@software.joehewitt.com:1.5.4
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.3
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10
FF - prefs.js..extensions.enabledItems: {75CEEE46-9B64-46f8-94BF-54012DE155F0}:0.4
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/05/12 21:35:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/05/12 20:28:22 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010/05/07 20:35:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010/05/14 01:10:00 | 000,000,000 | ---D | M]
[2010/05/07 20:30:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Extensions
[2010/05/31 23:01:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\extensions
[2010/05/24 23:58:05 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/05/07 23:35:46 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010/05/17 20:01:52 | 000,000,000 | ---D | M] (MeasureIt) -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}
[2010/05/14 00:57:57 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/05/29 14:49:51 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/05/12 22:51:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\extensions\firebug@software.joehewitt.com
[2010/05/11 12:50:48 | 000,001,196 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla\Firefox\Profiles\88n35o1d.default\searchplugins\winamp-search.xml
[2010/05/31 23:01:26 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/05/12 20:28:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/05/12 20:28:10 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/13 17:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2004/08/04 07:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [C-Media Echo Control] d:\Program Files\PCI Audio Applications\Bin\EchoCtrl.exe ()
O4 - HKLM..\Run: [C-Media Mixer] C:\WINDOWS\mixer.exe (C-Media Electronic Inc. (
www.cmedia.com.tw))
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [Microtek_Scanner_Server] C:\Program Files\Microtek\ScanWizard Pro\LANServer.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe File not found
O4 - HKLM..\Run: [WinampAgent] d:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [EPSON Stylus Photo R260 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBNA.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [EPSON Stylus Photo R260 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBNA.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [ManyCam] d:\Program Files\ManyCam 2.4\ManyCam.exe (ManyCam LLC)
O4 - HKCU..\Run: [SpybotSD TeaTimer] d:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe (Wacom Technology, Corp.)
O4 - Startup: C:\Documents and Settings\NAME REDACTED\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\NAME REDACTED\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = D:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://update.microsoft.com/windowsupda ... 3287094883 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O22 - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - d:\Program Files\Stardock\Fences\FencesMenu.dll (Stardock)
O24 - Desktop WallPaper: C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Stardock\Fences\SolidColorBackgrounds\1\Solid Color.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Stardock\Fences\SolidColorBackgrounds\1\Solid Color.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/07 19:22:36 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2010/05/07 14:07:37 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: VIDC.CFHD - C:\WINDOWS\System32\cfhd.dll (CineForm Inc.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.tscc - C:\WINDOWS\System32\tsccvid.dll (TechSmith Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902053519425536)
========== Files/Folders - Created Within 90 Days ========== [2010/06/01 12:34:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Desktop\Scans
[2010/05/30 02:11:21 | 000,000,000 | ---D | C] -- C:\rsit
[2010/05/30 02:06:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
[2010/05/29 23:57:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010/05/29 22:16:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010/05/29 21:16:35 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2010/05/28 16:26:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Malwarebytes
[2010/05/28 16:26:47 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/05/28 16:26:46 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/05/28 16:26:46 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/05/28 16:26:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/05/28 12:02:44 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/05/26 15:04:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2010/05/25 13:26:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Artisteer
[2010/05/21 19:11:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\WinRAR
[2010/05/18 23:53:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\My Documents\Downloaded Installations
[2010/05/17 11:29:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\FileZilla
[2010/05/17 00:01:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010/05/15 11:34:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Google
[2010/05/15 11:28:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010/05/15 11:27:48 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010/05/15 02:12:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\dvdcss
[2010/05/15 02:10:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DVD Shrink
[2010/05/14 01:09:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2010/05/14 01:09:30 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2010/05/14 01:09:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DivX
[2010/05/14 00:58:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\dwhelper
[2010/05/13 00:18:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\HuluDesktop
[2010/05/12 22:33:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\QuickTime
[2010/05/12 22:33:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TechSmith
[2010/05/12 22:33:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\TechSmith Shared
[2010/05/12 22:29:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Apple
[2010/05/12 22:29:37 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010/05/12 22:29:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Apple Computer
[2010/05/12 22:15:18 | 000,000,000 | ---D | C] -- C:\Program Files\VSTplugins
[2010/05/12 22:15:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Publish Providers
[2010/05/12 22:15:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/05/12 22:14:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Sony
[2010/05/12 22:14:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Sony
[2010/05/12 22:14:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\My Documents\My Videos
[2010/05/12 22:01:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sony
[2010/05/12 21:55:28 | 000,000,000 | ---D | C] -- C:\Program Files\JRE
[2010/05/12 21:17:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\OpenOffice.org
[2010/05/12 21:10:42 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3
[2010/05/12 21:04:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\EPSON
[2010/05/12 20:52:59 | 000,000,000 | ---D | C] -- C:\Program Files\EPSON
[2010/05/12 20:52:38 | 000,000,000 | ---D | C] -- C:\epson
[2010/05/12 20:28:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2010/05/12 20:28:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/05/12 20:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/05/12 20:28:07 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/05/12 20:27:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Sun
[2010/05/12 19:11:02 | 000,039,936 | ---- | C] (C-Dilla Ltd) -- C:\WINDOWS\System32\drivers\CDAC11BA.EXE
[2010/05/12 19:11:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\ABBYY
[2010/05/12 19:11:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\ABBYY
[2010/05/12 19:09:41 | 000,000,000 | ---D | C] -- C:\Program Files\ABBYY
[2010/05/12 19:04:31 | 000,000,000 | ---D | C] -- C:\Kpcms
[2010/05/12 19:02:21 | 000,184,320 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\MSM0CW.dll
[2010/05/12 19:02:21 | 000,073,728 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\MSME0w.dll
[2010/05/12 19:02:21 | 000,041,733 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\MSMB1W.dll
[2010/05/12 19:02:21 | 000,037,589 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\MSMD2w.dll
[2010/05/12 19:02:21 | 000,037,564 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\MSMDEw.dll
[2010/05/12 19:02:21 | 000,035,589 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\MSMWUD10.dll
[2010/05/12 19:02:21 | 000,035,563 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\MSMWUD.dll
[2010/05/12 19:02:18 | 000,015,396 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\Msmusd5.dll
[2010/05/12 19:02:18 | 000,013,962 | ---- | C] ( Microtek International Inc.) -- C:\WINDOWS\System32\Msmusd6.dll
[2010/05/12 19:02:18 | 000,012,499 | ---- | C] (Microtek International Inc.) -- C:\WINDOWS\System32\Msmusd7.dll
[2010/05/12 19:02:13 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010/05/12 19:01:38 | 000,000,000 | ---D | C] -- C:\Program Files\Microtek
[2010/05/12 16:52:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe Systems
[2010/05/12 15:44:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\Adobe PDF
[2010/05/12 15:42:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe Systems Shared
[2010/05/12 15:20:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\ManyCam
[2010/05/12 13:54:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\boswars
[2010/05/11 12:50:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010/05/11 12:50:10 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Toolbar
[2010/05/11 12:50:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Winamp Toolbar
[2010/05/11 12:48:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\RegisteredPackages
[2010/05/11 12:47:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Winamp
[2010/05/11 00:17:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\FLEXnet
[2010/05/10 23:54:42 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010/05/10 23:26:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2010/05/09 21:38:36 | 001,413,120 | ---- | C] (Wacom Technology, Corp.) -- C:\WINDOWS\System32\WacomTablet.cpl
[2010/05/09 21:38:35 | 000,008,138 | ---- | C] (Wacom Technology Corporation) -- C:\WINDOWS\System32\drivers\PenClass.sys
[2010/05/09 21:38:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\WTablet
[2010/05/09 21:38:34 | 000,749,568 | ---- | C] (Wacom Technology, Corp.) -- C:\WINDOWS\System32\Tablet.exe
[2010/05/09 21:38:34 | 000,102,400 | ---- | C] (Wacom Technology, Corp.) -- C:\WINDOWS\System32\Wintab32.dll
[2010/05/09 21:32:07 | 000,000,000 | ---D | C] -- C:\Program Files\Tablet
[2010/05/09 21:27:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2010/05/08 00:57:51 | 000,000,000 | ---D | C] -- C:\Program Files\TabletPlugins
[2010/05/08 00:37:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\vlc
[2010/05/08 00:27:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2010/05/07 23:52:48 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\NAME REDACTED\PrivacIE
[2010/05/07 23:35:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Google
[2010/05/07 23:30:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2010/05/07 23:30:42 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2010/05/07 23:30:37 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2010/05/07 23:21:12 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\NAME REDACTED\IETldCache
[2010/05/07 23:08:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2010/05/07 23:07:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010/05/07 23:05:53 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010/05/07 23:05:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2010/05/07 23:05:41 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010/05/07 23:05:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010/05/07 22:59:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010/05/07 22:56:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Temp
[2010/05/07 22:56:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Google
[2010/05/07 22:49:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Adobe
[2010/05/07 22:49:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NOS
[2010/05/07 22:47:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\skypePM
[2010/05/07 22:46:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Skype
[2010/05/07 22:46:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2010/05/07 22:45:55 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2010/05/07 22:45:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Skype
[2010/05/07 22:45:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us
[2010/05/07 22:45:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2010/05/07 22:45:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2010/05/07 22:45:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2010/05/07 22:45:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2010/05/07 22:41:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2010/05/07 22:35:23 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2010/05/07 22:31:00 | 000,019,024 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/05/07 22:30:59 | 000,164,048 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/05/07 22:30:59 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/05/07 22:30:58 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/05/07 22:30:56 | 000,100,432 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/05/07 22:30:56 | 000,094,800 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/05/07 22:30:56 | 000,028,880 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/05/07 22:30:43 | 000,165,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/05/07 22:30:43 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr
[2010/05/07 22:30:39 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010/05/07 22:30:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/05/07 22:21:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2010/05/07 22:20:06 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2010/05/07 22:19:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010/05/07 22:10:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2010/05/07 21:56:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2010/05/07 21:53:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010/05/07 21:53:17 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010/05/07 21:53:00 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
[2010/05/07 21:51:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2010/05/07 20:54:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Ahead
[2010/05/07 20:52:11 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/05/07 20:52:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\My Documents\Stardock
[2010/05/07 20:50:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Stardock
[2010/05/07 20:50:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Stardock
[2010/05/07 20:49:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Stardock
[2010/05/07 20:49:51 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{A87EB928-0C6C-4071-AEF1-59E32BAEDF1B}
[2010/05/07 20:49:25 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\NAME REDACTED\UserData
[2010/05/07 20:47:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Ahead
[2010/05/07 20:47:50 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2010/05/07 20:47:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2010/05/07 20:46:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\My Documents\Downloads
[2010/05/07 20:46:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\PackageAware
[2010/05/07 20:45:40 | 000,106,496 | ---- | C] (Pegasus Software) -- C:\WINDOWS\System32\TwnLib20.dll
[2010/05/07 20:45:38 | 001,568,768 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagX7.dll
[2010/05/07 20:45:38 | 000,476,320 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXpr7.dll
[2010/05/07 20:45:38 | 000,471,040 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXRA7.dll
[2010/05/07 20:45:38 | 000,364,544 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\TwnLib4.dll
[2010/05/07 20:45:38 | 000,262,144 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\ImagXR7.dll
[2010/05/07 20:45:37 | 000,038,912 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\picn20.dll
[2010/05/07 20:35:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Thunderbird
[2010/05/07 20:35:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Thunderbird
[2010/05/07 20:35:10 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2010/05/07 20:33:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Macromedia
[2010/05/07 20:33:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Adobe
[2010/05/07 20:30:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Mozilla
[2010/05/07 20:30:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Mozilla
[2010/05/07 20:30:47 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/05/07 20:23:08 | 000,155,648 | ---- | C] (Ahead Software Gmbh) -- C:\WINDOWS\System32\NeroCheck.exe
[2010/05/07 20:23:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Ahead
[2010/05/07 20:11:22 | 000,140,800 | ---- | C] (The Duck Corporation) -- C:\WINDOWS\System32\tm20dec.ax
[2010/05/07 20:09:45 | 000,000,000 | ---D | C] -- C:\Program Files\C-Media
[2010/05/07 20:08:49 | 000,135,168 | R--- | C] (C-Media Electronics Inc.) -- C:\WINDOWS\cmuninst.exe
[2010/05/07 20:08:49 | 000,135,168 | R--- | C] (C-Media Electronics Inc.) -- C:\WINDOWS\cmuninst.dat
[2010/05/07 20:08:48 | 001,454,080 | R--- | C] (C-Media Electronic Inc. (
www.cmedia.com.tw)) -- C:\WINDOWS\mixer.exe
[2010/05/07 20:08:48 | 000,032,768 | R--- | C] (C-Media Corporation) -- C:\WINDOWS\System32\cmnprop.dll
[2010/05/07 20:08:43 | 000,373,518 | R--- | C] (C-Media Inc) -- C:\WINDOWS\System32\drivers\cmaudio.sys
[2010/05/07 20:02:01 | 000,000,000 | ---D | C] -- C:\TempEI4
[2010/05/07 19:51:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2010/05/07 19:41:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview
[2010/05/07 19:41:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010/05/07 19:26:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Identities
[2010/05/07 19:26:24 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010/05/07 19:26:22 | 000,000,000 | R--D | C] -- C:\Documents and Settings\NAME REDACTED\My Documents\My Pictures
[2010/05/07 19:26:22 | 000,000,000 | R--D | C] -- C:\Documents and Settings\NAME REDACTED\My Documents\My Music
[2010/05/07 19:26:17 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NAME REDACTED\Application Data\Microsoft
[2010/05/07 19:26:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\NAME REDACTED\SendTo
[2010/05/07 19:26:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\NAME REDACTED\Recent
[2010/05/07 19:26:17 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\NAME REDACTED\Application Data
[2010/05/07 19:26:17 | 000,000,000 | R--D | C] -- C:\Documents and Settings\NAME REDACTED\Start Menu
[2010/05/07 19:26:17 | 000,000,000 | R--D | C] -- C:\Documents and Settings\NAME REDACTED\My Documents
[2010/05/07 19:26:17 | 000,000,000 | R--D | C] -- C:\Documents and Settings\NAME REDACTED\Favorites
[2010/05/07 19:26:17 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\NAME REDACTED\Cookies
[2010/05/07 19:26:17 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NAME REDACTED\Templates
[2010/05/07 19:26:17 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NAME REDACTED\PrintHood
[2010/05/07 19:26:17 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NAME REDACTED\NetHood
[2010/05/07 19:26:17 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings
[2010/05/07 19:26:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\Microsoft
[2010/05/07 19:26:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NAME REDACTED\Desktop
[2010/05/07 19:25:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010/05/07 19:25:39 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010/05/07 19:25:38 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/05/07 19:25:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/05/07 19:25:28 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/05/07 19:25:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010/05/07 19:24:12 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2010/05/07 19:24:12 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2010/05/07 19:23:17 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2010/05/07 19:22:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010/05/07 19:22:51 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010/05/07 19:22:51 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010/05/07 19:21:50 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2010/05/07 19:21:43 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010/05/07 19:21:43 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2010/05/07 19:21:34 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2010/05/07 19:21:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010/05/07 19:20:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2010/05/07 19:20:47 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010/05/07 19:20:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2010/05/07 19:20:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010/05/07 19:20:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010/05/07 19:20:35 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2010/05/07 19:20:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010/05/07 19:20:24 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2010/05/07 19:20:21 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2010/05/07 19:20:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2010/05/07 19:20:11 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2010/05/07 19:20:10 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
[2010/05/07 19:19:43 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2010/05/07 19:19:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010/05/07 19:19:31 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
[2010/05/07 19:19:31 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2010/05/07 19:19:31 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
[2010/05/07 19:19:26 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2010/05/07 19:19:23 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2010/05/07 19:18:49 | 000,000,000 | ---D | C] -- C:\Program Files\MSN
[2010/05/07 19:18:47 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2010/05/07 19:18:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010/05/07 19:18:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010/05/07 19:18:31 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
[2010/05/07 14:14:33 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010/05/07 14:14:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2010/05/07 14:14:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2010/05/07 14:14:29 | 000,000,000 | R--D | C] -- C:\Program Files
[2010/05/07 14:14:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2010/05/07 14:14:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2010/05/07 14:14:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
[2010/05/07 14:14:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents
[2010/05/07 14:14:05 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
[2010/05/07 14:14:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites
[2010/05/07 14:14:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop
[2010/05/07 14:13:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010/05/07 14:13:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010/05/07 14:13:47 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2010/05/07 14:13:47 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
[2010/05/07 14:13:24 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010/05/07 14:13:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2010/05/07 14:06:32 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010/05/07 14:06:32 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2010/05/07 14:06:32 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2010/05/07 14:06:32 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2010/05/07 14:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2010/04/26 17:04:42 | 000,353,592 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\DivXControlPanelApplet.cpl
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 90 Days ========== [2010/06/01 12:32:00 | 000,000,910 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/06/01 12:01:00 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1284227242-839522115-1003UA.job
[2010/06/01 11:32:00 | 000,000,906 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/05/31 23:01:00 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1284227242-839522115-1003Core.job
[2010/05/30 16:24:58 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/05/30 16:24:53 | 000,018,006 | ---- | M] () -- C:\WINDOWS\System32\tablet.dat
[2010/05/30 16:24:40 | 000,000,326 | -HS- | M] () -- C:\WINDOWS\tasks\NCFPSDR.job
[2010/05/30 16:24:40 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/05/30 16:23:35 | 000,017,555 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/05/30 16:23:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/05/30 16:22:23 | 003,670,016 | -H-- | M] () -- C:\Documents and Settings\NAME REDACTED\NTUSER.DAT
[2010/05/30 16:22:23 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\NAME REDACTED\ntuser.ini
[2010/05/29 16:46:00 | 000,063,360 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\bookmarks.html
[2010/05/29 16:45:33 | 000,020,956 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\bookmarks-2010-05-29.json
[2010/05/28 17:45:36 | 000,025,736 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/05/28 17:45:09 | 001,429,624 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/05/28 12:02:44 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\HijackThis.lnk
[2010/05/26 15:05:16 | 000,000,793 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Spybot - Search & Destroy.lnk
[2010/05/26 14:39:28 | 000,000,656 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Artisteer 2.lnk
[2010/05/26 03:02:38 | 000,002,379 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Google Chrome.lnk
[2010/05/26 02:38:32 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/05/23 21:19:58 | 000,000,452 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\My Documents\spider.sav
[2010/05/23 19:57:54 | 000,010,240 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/05/20 13:34:23 | 000,000,508 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\MWSnap 3.lnk
[2010/05/19 00:00:52 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Adobe Dreamweaver CS3.lnk
[2010/05/18 19:18:52 | 000,000,536 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\HTTrack Website Copier.lnk
[2010/05/17 11:29:32 | 000,000,743 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\FileZilla Client.lnk
[2010/05/15 11:33:56 | 000,001,915 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/15 02:16:54 | 000,000,101 | ---- | M] () -- C:\WINDOWS\CMMIXER.INI
[2010/05/14 18:29:42 | 000,012,364 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\CL_codergenius.odt
[2010/05/13 12:21:34 | 000,000,035 | ---- | M] () -- C:\MSP.ini
[2010/05/13 00:18:18 | 000,002,038 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Hulu Desktop.lnk
[2010/05/12 22:45:37 | 000,001,561 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\DVD Architect Pro 5.0.lnk
[2010/05/12 22:43:15 | 000,000,244 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\My Documents\synergy.sgc
[2010/05/12 22:35:41 | 000,134,148 | ---- | M] () -- C:\WINDOWS\ColorPic Uninstaller.exe
[2010/05/12 22:35:41 | 000,000,598 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\ColorPic.lnk
[2010/05/12 22:33:26 | 000,000,737 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Camtasia Studio 6.lnk
[2010/05/12 22:33:19 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010/05/12 22:30:29 | 000,000,579 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\VNC Viewer 4.lnk
[2010/05/12 22:14:48 | 000,002,584 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\My Documents\Register Vegas Pro.htm
[2010/05/12 22:01:17 | 000,001,521 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Vegas Pro 8.0.lnk
[2010/05/12 21:56:06 | 000,000,905 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\OpenOffice.org 3.2.lnk
[2010/05/12 21:22:35 | 000,000,652 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Synergy.lnk
[2010/05/12 19:30:11 | 000,001,764 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Microtek ScanWizard Pro V6.521.lnk
[2010/05/12 19:26:34 | 000,000,501 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/05/12 19:12:15 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/05/12 19:11:02 | 000,039,936 | ---- | M] (C-Dilla Ltd) -- C:\WINDOWS\System32\drivers\CDAC11BA.EXE
[2010/05/12 15:44:13 | 000,000,988 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2010/05/12 15:21:01 | 000,000,670 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\ManyCam 2.4.lnk
[2010/05/12 04:23:42 | 004,824,160 | -H-- | M] () -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\IconCache.db
[2010/05/11 12:50:49 | 000,000,556 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2010/05/11 00:24:55 | 000,000,706 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Photoshop.lnk
[2010/05/09 21:38:35 | 000,000,878 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\TabUserW.exe.lnk
[2010/05/09 21:23:22 | 000,508,956 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/05/09 21:23:22 | 000,432,686 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/05/09 21:23:22 | 000,067,516 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/05/07 23:23:07 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/05/07 22:52:13 | 000,099,056 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Combat Showcase - Farmington Book.pdf
[2010/05/07 22:52:05 | 000,081,910 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Farmington Crew Schedule.pdf
[2010/05/07 22:47:27 | 000,000,056 | -H-- | M] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/05/07 22:46:05 | 000,001,878 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010/05/07 22:41:04 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/05/07 22:31:00 | 000,001,700 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2010/05/07 22:30:57 | 000,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/05/07 21:58:03 | 000,000,615 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010/05/07 20:52:11 | 000,000,753 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Start Menu\Programs\Startup\Stardock ObjectDock.lnk
[2010/05/07 20:50:44 | 000,000,669 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\ObjectDock.lnk
[2010/05/07 20:49:53 | 000,000,763 | ---- | M] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Customize Fences.lnk
[2010/05/07 20:47:42 | 000,001,095 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk
[2010/05/07 20:39:23 | 000,000,371 | ---- | M] () -- C:\WINDOWS\CMISETUP.INI
[2010/05/07 20:39:22 | 000,000,026 | ---- | M] () -- C:\WINDOWS\CMCDPLAY.INI
[2010/05/07 20:39:13 | 000,004,333 | ---- | M] () -- C:\WINDOWS\mixerdef.ini
[2010/05/07 20:35:12 | 000,001,668 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Thunderbird.lnk
[2010/05/07 20:30:54 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010/05/07 20:30:49 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/05/07 20:11:20 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/05/07 20:11:20 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/05/07 19:25:31 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010/05/07 19:24:44 | 000,000,311 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/05/07 19:22:36 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/05/07 19:22:36 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/05/07 19:22:36 | 000,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2010/05/07 19:22:36 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/05/07 19:22:36 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/05/07 19:22:23 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010/05/07 19:21:43 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010/05/07 19:21:43 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010/05/07 19:19:51 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/05/07 19:19:41 | 000,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2010/05/07 19:19:41 | 000,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2010/05/07 19:17:47 | 000,000,321 | -HS- | M] () -- C:\boot.ini
[2010/05/07 14:14:29 | 000,000,231 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/05/06 15:59:57 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\avastSS.scr
[2010/05/06 15:59:36 | 000,165,032 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/05/06 15:39:23 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/05/06 15:39:00 | 000,164,048 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/05/06 15:34:27 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/05/06 15:33:59 | 000,100,432 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/05/06 15:33:55 | 000,094,800 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/05/06 15:33:47 | 000,019,024 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/05/06 15:33:29 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/04/29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/04/29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/04/26 17:04:42 | 000,353,592 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\DivXControlPanelApplet.cpl
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/05/29 16:46:00 | 000,063,360 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\bookmarks.html
[2010/05/29 16:45:33 | 000,020,956 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\bookmarks-2010-05-29.json
[2010/05/28 12:02:44 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\HijackThis.lnk
[2010/05/26 15:05:16 | 000,000,793 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Spybot - Search & Destroy.lnk
[2010/05/26 14:39:28 | 000,000,656 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Artisteer 2.lnk
[2010/05/25 21:11:02 | 000,000,326 | -HS- | C] () -- C:\WINDOWS\tasks\NCFPSDR.job
[2010/05/23 22:00:22 | 001,411,545 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\dcm202_manual_110.pdf
[2010/05/23 21:19:58 | 000,000,452 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\My Documents\spider.sav
[2010/05/19 00:00:52 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Adobe Dreamweaver CS3.lnk
[2010/05/18 19:18:52 | 000,000,536 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\HTTrack Website Copier.lnk
[2010/05/17 11:29:32 | 000,000,743 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\FileZilla Client.lnk
[2010/05/15 11:33:56 | 000,001,915 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/15 11:27:58 | 000,000,910 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/05/15 11:27:58 | 000,000,906 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/05/14 13:31:57 | 000,012,364 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\CL_codergenius.odt
[2010/05/13 12:21:34 | 000,000,035 | ---- | C] () -- C:\MSP.ini
[2010/05/13 00:18:18 | 000,002,038 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Hulu Desktop.lnk
[2010/05/12 22:45:37 | 000,001,561 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\DVD Architect Pro 5.0.lnk
[2010/05/12 22:35:41 | 000,134,148 | ---- | C] () -- C:\WINDOWS\ColorPic Uninstaller.exe
[2010/05/12 22:35:41 | 000,000,598 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\ColorPic.lnk
[2010/05/12 22:33:26 | 000,000,737 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Camtasia Studio 6.lnk
[2010/05/12 22:30:29 | 000,000,579 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\VNC Viewer 4.lnk
[2010/05/12 22:26:14 | 000,000,508 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\MWSnap 3.lnk
[2010/05/12 22:14:48 | 000,002,584 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\My Documents\Register Vegas Pro.htm
[2010/05/12 22:01:17 | 000,001,521 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Vegas Pro 8.0.lnk
[2010/05/12 21:56:06 | 000,000,905 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\OpenOffice.org 3.2.lnk
[2010/05/12 21:26:42 | 000,000,244 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\My Documents\synergy.sgc
[2010/05/12 21:22:35 | 000,000,652 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Synergy.lnk
[2010/05/12 19:26:33 | 000,001,764 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Microtek ScanWizard Pro V6.521.lnk
[2010/05/12 15:44:13 | 000,000,988 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2010/05/12 15:42:40 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2010/05/12 15:42:40 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll
[2010/05/12 15:42:40 | 000,052,224 | ---- | C] () -- C:\WINDOWS\System32\msdvbnp.ax
[2010/05/12 15:42:40 | 000,052,224 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2010/05/12 15:42:40 | 000,030,208 | ---- | C] () -- C:\WINDOWS\System32\psisrndr.ax
[2010/05/12 15:42:40 | 000,030,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax
[2010/05/12 15:42:39 | 001,798,144 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qedit.dll
[2010/05/12 15:42:39 | 000,733,184 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qedwipes.dll
[2010/05/12 15:42:39 | 000,470,528 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qdvd.dll
[2010/05/12 15:42:39 | 000,316,928 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qdv.dll
[2010/05/12 15:42:39 | 000,257,024 | ---- | C] () -- C:\WINDOWS\System32\dllcache\qcap.dll
[2010/05/12 15:42:39 | 000,136,192 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mpg2splt.ax
[2010/05/12 15:42:39 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdmo.dll
[2010/05/12 15:42:38 | 000,132,608 | ---- | C] () -- C:\WINDOWS\System32\dllcache\devenum.dll
[2010/05/12 15:42:38 | 000,064,512 | ---- | C] () -- C:\WINDOWS\System32\dllcache\amstream.dll
[2010/05/12 15:42:38 | 000,034,304 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mciqtz32.dll
[2010/05/12 15:21:01 | 000,000,670 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\ManyCam 2.4.lnk
[2010/05/11 12:50:49 | 000,000,556 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2010/05/11 00:24:55 | 000,000,706 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Photoshop.lnk
[2010/05/11 00:12:32 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/05/11 00:12:31 | 000,010,240 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/05/09 21:38:38 | 000,018,006 | ---- | C] () -- C:\WINDOWS\System32\tablet.dat
[2010/05/09 21:38:36 | 001,830,729 | ---- | C] () -- C:\WINDOWS\System32\WacomTablet.znc
[2010/05/09 21:38:35 | 000,000,878 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\TabUserW.exe.lnk
[2010/05/07 23:07:37 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/05/07 22:56:41 | 000,002,379 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Google Chrome.lnk
[2010/05/07 22:56:15 | 000,001,030 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1284227242-839522115-1003UA.job
[2010/05/07 22:56:14 | 000,000,978 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1284227242-839522115-1003Core.job
[2010/05/07 22:52:17 | 000,099,056 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Combat Showcase - Farmington Book.pdf
[2010/05/07 22:52:09 | 000,081,910 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Farmington Crew Schedule.pdf
[2010/05/07 22:47:27 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010/05/07 22:46:05 | 000,001,878 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010/05/07 22:31:00 | 000,001,700 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2010/05/07 22:12:10 | 000,613,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm
[2010/05/07 22:12:10 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2010/05/07 22:12:10 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2010/05/07 22:12:10 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2010/05/07 22:12:10 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv
[2010/05/07 22:12:10 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2010/05/07 22:12:10 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2010/05/07 22:12:10 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2010/05/07 22:12:10 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2010/05/07 22:12:10 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2010/05/07 22:12:10 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2010/05/07 22:12:10 | 000,067,374 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm
[2010/05/07 22:12:10 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif
[2010/05/07 22:12:10 | 000,023,195 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm
[2010/05/07 22:12:10 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif
[2010/05/07 22:12:10 | 000,017,272 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf
[2010/05/07 22:12:10 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta
[2010/05/07 22:12:10 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif
[2010/05/07 22:12:10 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif
[2010/05/07 22:12:10 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif
[2010/05/07 22:12:10 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif
[2010/05/07 22:12:10 | 000,006,769 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2010/05/07 22:12:10 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif
[2010/05/07 22:12:10 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif
[2010/05/07 22:12:10 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif
[2010/05/07 22:12:10 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif
[2010/05/07 22:12:10 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif
[2010/05/07 22:12:10 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js
[2010/05/07 22:12:10 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif
[2010/05/07 22:12:10 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif
[2010/05/07 22:12:10 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif
[2010/05/07 22:12:10 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif
[2010/05/07 22:12:10 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif
[2010/05/07 22:12:10 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css
[2010/05/07 22:12:10 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif
[2010/05/07 22:12:10 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif
[2010/05/07 22:12:10 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif
[2010/05/07 22:12:10 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif
[2010/05/07 22:12:10 | 000,000,855 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf
[2010/05/07 22:12:10 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js
[2010/05/07 22:12:08 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv
[2010/05/07 22:12:08 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm
[2010/05/07 22:12:08 | 000,000,908 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf
[2010/05/07 22:12:07 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv
[2010/05/07 22:12:07 | 000,077,307 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm
[2010/05/07 22:12:07 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2010/05/07 22:12:07 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip
[2010/05/07 22:12:07 | 000,018,286 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf
[2010/05/07 22:12:07 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif
[2010/05/07 22:12:07 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif
[2010/05/07 22:12:07 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2010/05/07 22:12:06 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv
[2010/05/07 22:12:05 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js
[2010/05/07 22:11:58 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv
[2010/05/07 22:11:58 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010/05/07 22:11:58 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css
[2010/05/07 22:11:58 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm
[2010/05/07 22:11:58 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js
[2010/05/07 22:11:58 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif
[2010/05/07 22:11:58 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif
[2010/05/07 22:11:58 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif
[2010/05/07 22:11:58 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif
[2010/05/07 22:11:58 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif
[2010/05/07 22:11:58 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif
[2010/05/07 22:11:22 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2010/05/07 21:58:03 | 000,000,615 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010/05/07 20:52:11 | 000,000,753 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Start Menu\Programs\Startup\Stardock ObjectDock.lnk
[2010/05/07 20:50:44 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\ObjectDock.lnk
[2010/05/07 20:49:53 | 000,000,763 | ---- | C] () -- C:\Documents and Settings\NAME REDACTED\Desktop\Customize Fences.lnk
[2010/05/07 20:47:42 | 000,001,095 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Nero StartSmart.lnk
[2010/05/07 20:39:53 | 000,000,101 | ---- | C] () -- C:\WINDOWS\CMMIXER.INI
[2010/05/07 20:35:12 | 000,001,668 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Thunderbird.lnk
[2010/05/07 20:30:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/05/07 20:30:49 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/05/07 20:11:18 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2010/05/07 20:11:18 | 000,005,672 | ---- | C] () -- C:\WINDOWS\System32\quartz.vxd
[2010/05/07 20:11:16 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System\CMedia.dll
[2010/05/07 20:11:16 | 000,004,333 | ---- | C] () -- C:\WINDOWS\mixerdef.ini
[2010/05/07 20:09:46 | 000,015,448 | ---- | C] () -- C:\WINDOWS\cmaudio.ini
[2010/05/07 20:09:40 | 000,000,371 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI
[2010/05/07 20:09:40 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI
[2010/05/07 20:03:57 | 000,012,288 | R--- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2010/05/07 20:03:56 | 000,005,110 | R--- | C] () -- C:\WINDOWS\System32\e100b325.din
[2010/05/07 19:47:19 | 000,049,275 | ---- | C] () -- C:\WINDOWS\System32\wfospf.mib
[2010/05/07 19:47:19 | 000,038,608 | ---- | C] () -- C:\WINDOWS\System32\nipx.mib
[2010/05/07 19:47:19 | 000,034,317 | ---- | C] () -- C:\WINDOWS\System32\msiprip2.mib
[2010/05/07 19:47:19 | 000,026,236 | ---- | C] () -- C:\WINDOWS\System32\wins.mib
[2010/05/07 19:47:19 | 000,013,767 | ---- | C] () -- C:\WINDOWS\System32\msipbtp.mib
[2010/05/07 19:47:19 | 000,004,332 | ---- | C] () -- C:\WINDOWS\System32\smi.mib
[2010/05/07 19:47:19 | 000,000,581 | ---- | C] () -- C:\WINDOWS\System32\msft.mib
[2010/05/07 19:47:18 | 000,107,882 | ---- | C] () -- C:\WINDOWS\System32\mib_ii.mib
[2010/05/07 19:47:18 | 000,048,593 | ---- | C] () -- C:\WINDOWS\System32\hostmib.mib
[2010/05/07 19:47:18 | 000,030,448 | ---- | C] () -- C:\WINDOWS\System32\mcastmib.mib
[2010/05/07 19:47:18 | 000,026,100 | ---- | C] () -- C:\WINDOWS\System32\lmmib2.mib
[2010/05/07 19:47:18 | 000,021,386 | ---- | C] () -- C:\WINDOWS\System32\mipx.mib
[2010/05/07 19:47:18 | 000,020,079 | ---- | C] () -- C:\WINDOWS\System32\http.mib
[2010/05/07 19:47:18 | 000,016,617 | ---- | C] () -- C:\WINDOWS\System32\authserv.mib
[2010/05/07 19:47:18 | 000,015,799 | ---- | C] () -- C:\WINDOWS\System32\ipforwd.mib
[2010/05/07 19:47:18 | 000,015,597 | ---- | C] () -- C:\WINDOWS\System32\accserv.mib
[2010/05/07 19:47:18 | 000,010,313 | ---- | C] () -- C:\WINDOWS\System32\mripsap.mib
[2010/05/07 19:47:18 | 000,006,179 | ---- | C] () -- C:\WINDOWS\System32\ftp.mib
[2010/05/07 19:47:18 | 000,004,597 | ---- | C] () -- C:\WINDOWS\System32\dhcp.mib
[2010/05/07 19:47:18 | 000,000,698 | ---- | C] () -- C:\WINDOWS\System32\inetsrv.mib
[2010/05/07 19:41:33 | 000,014,403 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2010/05/07 19:26:18 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\NAME REDACTED\ntuser.dat.LOG
[2010/05/07 19:26:18 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\NAME REDACTED\ntuser.ini
[2010/05/07 19:26:17 | 003,670,016 | -H-- | C] () -- C:\Documents and Settings\NAME REDACTED\NTUSER.DAT
[2010/05/07 19:25:31 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010/05/07 19:24:39 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/05/07 19:24:30 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2010/05/07 19:24:08 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2010/05/07 19:24:08 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2010/05/07 19:24:07 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010/05/07 19:23:55 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2010/05/07 19:23:54 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010/05/07 19:23:48 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010/05/07 19:23:48 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2010/05/07 19:23:46 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2010/05/07 19:23:36 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010/05/07 19:23:31 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2010/05/07 19:23:20 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2010/05/07 19:23:17 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010/05/07 19:23:17 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010/05/07 19:23:17 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2010/05/07 19:23:17 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2010/05/07 19:23:16 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2010/05/07 19:23:16 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2010/05/07 19:23:16 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2010/05/07 19:23:16 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2010/05/07 19:23:16 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2010/05/07 19:23:15 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2010/05/07 19:23:14 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2010/05/07 19:23:14 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2010/05/07 19:23:14 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2010/05/07 19:23:14 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2010/05/07 19:23:14 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2010/05/07 19:23:14 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2010/05/07 19:23:14 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2010/05/07 19:23:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2010/05/07 19:23:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2010/05/07 19:23:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2010/05/07 19:23:13 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2010/05/07 19:23:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010/05/07 19:23:12 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2010/05/07 19:23:12 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2010/05/07 19:23:12 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2010/05/07 19:23:12 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2010/05/07 19:23:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010/05/07 19:23:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010/05/07 19:23:11 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2010/05/07 19:22:36 | 000,002,626 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/05/07 19:22:36 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010/05/07 19:22:36 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010/05/07 19:22:36 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010/05/07 19:22:36 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010/05/07 19:22:32 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/05/07 19:22:32 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/05/07 19:22:31 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010/05/07 19:21:43 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010/05/07 19:21:43 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010/05/07 19:21:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010/05/07 19:21:24 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2010/05/07 19:20:57 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010/05/07 19:20:57 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010/05/07 19:20:51 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2010/05/07 19:19:51 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/05/07 19:19:10 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2010/05/07 19:19:10 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2010/05/07 19:19:10 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2010/05/07 19:19:10 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2010/05/07 19:19:10 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2010/05/07 19:19:10 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2010/05/07 19:19:09 | 000,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2010/05/07 19:19:09 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
[2010/05/07 19:19:09 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2010/05/07 19:19:09 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
[2010/05/07 19:19:09 | 000,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2010/05/07 19:19:09 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
[2010/05/07 19:19:09 | 000,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2010/05/07 19:19:09 | 000,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2010/05/07 19:19:09 | 000,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2010/05/07 19:19:09 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
[2010/05/07 19:19:08 | 000,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2010/05/07 19:19:08 | 000,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2010/05/07 19:19:08 | 000,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2010/05/07 19:19:07 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010/05/07 19:19:07 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010/05/07 19:19:06 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010/05/07 19:19:00 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2010/05/07 14:14:36 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010/05/07 14:14:31 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2010/05/07 14:14:31 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2010/05/07 14:14:30 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010/05/07 14:14:30 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010/05/07 14:14:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2010/05/07 14:14:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2010/05/07 14:14:26 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2010/05/07 14:14:26 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2010/05/07 14:14:26 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2010/05/07 14:14:26 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2010/05/07 14:14:26 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2010/05/07 14:14:26 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2010/05/07 14:14:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2010/05/07 14:14:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2010/05/07 14:14:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2010/05/07 14:14:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2010/05/07 14:14:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2010/05/07 14:14:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2010/05/07 14:14:23 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2010/05/07 14:14:23 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2010/05/07 14:14:23 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2010/05/07 14:14:23 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2010/05/07 14:14:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2010/05/07 14:14:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2010/05/07 14:14:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2010/05/07 14:14:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2010/05/07 14:14:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2010/05/07 14:14:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2010/05/07 14:14:21 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2010/05/07 14:14:21 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2010/05/07 14:14:21 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2010/05/07 14:14:21 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2010/05/07 14:14:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2010/05/07 14:14:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2010/05/07 14:14:19 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls
[2010/05/07 14:14:19 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls
[2010/05/07 14:14:19 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2010/05/07 14:14:19 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2010/05/07 14:14:19 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2010/05/07 14:14:19 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2010/05/07 14:14:19 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2010/05/07 14:14:19 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2010/05/07 14:14:18 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2010/05/07 14:14:18 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2010/05/07 14:14:14 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010/05/07 14:14:04 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2010/05/07 14:14:04 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010/05/07 14:14:04 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010/05/07 14:14:04 | 000,007,506 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010/05/07 14:14:04 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010/05/07 14:14:03 | 001,042,903 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT
[2010/05/07 14:14:03 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010/05/07 14:14:03 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010/05/07 14:13:24 | 001,429,624 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/05/07 14:12:34 | 000,000,321 | -HS- | C] () -- C:\boot.ini
[2010/05/07 14:12:31 | 000,000,311 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2004/06/24 01:20:02 | 000,000,058 | ---- | C] () -- C:\WINDOWS\System32\EAL32.INI
========== LOP Check ========== [2010/05/07 22:30:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/05/12 21:04:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
[2010/05/12 22:45:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sony
[2010/05/12 22:33:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TechSmith
[2010/05/12 22:22:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/05/07 20:49:51 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{A87EB928-0C6C-4071-AEF1-59E32BAEDF1B}
[2010/05/25 13:26:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Artisteer
[2010/05/12 13:55:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\boswars
[2010/05/31 00:47:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\FileZilla
[2010/05/12 15:21:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\ManyCam
[2010/05/12 21:17:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\OpenOffice.org
[2010/05/12 22:15:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Publish Providers
[2010/05/12 22:47:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Sony
[2010/05/07 20:49:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Stardock
[2010/05/07 20:35:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NAME REDACTED\Application Data\Thunderbird
[2010/05/30 16:24:40 | 000,000,326 | -HS- | M] () -- C:\WINDOWS\Tasks\NCFPSDR.job
========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* >[2010/05/07 19:22:36 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/05/07 19:17:47 | 000,000,321 | -HS- | M] () -- C:\boot.ini
[2010/05/07 19:22:36 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/05/07 19:22:36 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/05/07 19:22:36 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/05/13 12:21:34 | 000,000,035 | ---- | M] () -- C:\MSP.ini
[2004/08/04 07:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2010/05/07 22:41:04 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/05/30 16:23:11 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
< %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles >[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav >[2010/05/07 14:12:33 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/05/07 14:12:33 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/05/07 14:12:33 | 000,913,408 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\system32\drivers\*.sys /180 >[2010/05/06 15:33:29 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aavmker4.sys
[2010/05/06 15:33:47 | 000,019,024 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys
[2010/05/06 15:33:55 | 000,094,800 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswmon.sys
[2010/05/06 15:33:59 | 000,100,432 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswmon2.sys
[2010/05/06 15:34:27 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswRdr.sys
[2010/05/06 15:39:00 | 000,164,048 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswSP.sys
[2010/05/06 15:39:23 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\system32\drivers\aswTdi.sys
[2010/04/29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbam.sys
[2010/04/29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
[2010/02/24 08:11:07 | 000,455,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\mrxsmb.sys
[2009/12/31 11:50:03 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\srv.sys
[2010/02/11 07:02:15 | 000,226,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\tcpip6.sys
========== Alternate Data Streams ========== @Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:888AFB86
< End of report >