February 13, 2012, 10:31:15 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: SMF - Just Installed!
 
   Home   Help Search Login Register  

readline... logfie, help please


AddThis Social Bookmark Button AddThis Feed Button
Pages: [1]
  Print  
Author Topic: readline... logfie, help please  (Read 4525 times)
guitarplaya989
Newbie
*
Posts: 12


View Profile
« on: November 07, 2006, 01:12:18 PM »

hey i keep having this java script called readline pop up and when you close it another one comes and so on and so on and then it causes pop ups... can anybody help?

Logfile of HijackThis v1.99.1
Scan saved at 11:09:00 AM, on 11/7/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ishost.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\Sr\SrLogon.exe
C:\WINDOWS\System32\ismini.exe
K:\itunes\iTunesHelper.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\cfg32.exe
C:\WINDOWS\System32\g4slcld.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\PSCastor\PSCastor.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Sr\AgentSvc.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sr\AgentFrm.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Sr\compnts\Vr\PavSrv51.exe
C:\Program Files\Sr\compnts\Vr\AVENGINE.EXE
C:\WINDOWS\cfg32a.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
K:\itunes\iTunes.exe
K:\backup installations\utorrent.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\System32\RunDLL32.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\Owner\Desktop\New Folder\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q304&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\program files\hp\digital imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Search - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\WINDOWS\cfg32s.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Sr Agent] "C:\Program Files\Sr\SrLogon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "K:\itunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\PROGRA~1\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [dvlojx.dll] C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\dvlojx.dll,vhuojhb
O4 - HKLM\..\Run: [keyboard] C:\\kybrdff_e49.exe
O4 - HKLM\..\Run: [Kgjg] "C:\WINDOWS\System32\rnnypbw.exe"
O4 - HKLM\..\Run: [newname] C:\\nwnmff_e49.exe
O4 - HKLM\..\Run: [Configuration Manager] C:\WINDOWS\cfg32.exe
O4 - HKLM\..\Run: [defender] C:\\dfndrff_e49.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PSCastor] "C:\Program Files\PSCastor\PSCastor.exe"
O4 - Startup: HP Organize.lnk = ?
O4 - Startup: IMStart.lnk = C:\Program Files\InterMute\IMStart.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add To HP Organize... - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin\core.hp.main\SendTo.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1161885042797
O18 - Filter: text/html - {AE3B25B6-4C21-4038-BD35-99A05B5EF3EB} - C:\WINDOWS\System32\s9ndzm6.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Sr\compnts\Vr\PavSrv51.exe
O23 - Service: Secure Resolutions Managed Agent (SR Agent) - Unknown owner - C:\Program Files\Sr\AgentSvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
Logged
sjpritch25
Newbie
*
Posts: 13



View Profile
« Reply #1 on: November 07, 2006, 02:49:37 PM »

Welcome to 2-Spyware.com

Click My Computer, then C:\
In the menu bar, File->New->Folder.
That will create a folder named New Folder, which you can rename to "BFU"

Please download Brute Force Uninstaller to your desktop.
  • Right click the BFU folder on your desktop, and choose Extract All
  • Click "Next"
  • In the box to choose where to extract the files to,
  • Click "Browse"
  • Click on the + sign next to "My Computer"
  • Click on "Local Disk (C:) or whatever your primary drive is
  • Click "Make New Folder"
  • Type in BFU
  • Click "Next", and Uncheck the "Show Extracted Files" box and then click "Finish".
3. RIGHT-CLICK HERE and choose "Save As" (in IE it's "Save Target As") in order to download Alcra PLUS Remover.
Save it in the same folder you made earlier (c:\BFU).


Do not run the Uninstaller and the Remover yet.

Please reboot into Safemode:
Turn on the computer.
Immediately begin tapping the F8 key.
Use the arrow keys to highlight Safe Mode and press the Enter key.

Open My Computer and navigate to the c:\BFU folder.  Start the Brute Force Uninstaller by doubleclicking BFU.exe

Behind the scriptline to execute field click the folder icon and select alcanshorty.bfu

Press execute and let it do its job.

Wait for the complete script execution box to pop up and press OK.
Press exit to terminate the BFU program.


===========================================

Please download Combofix: http://download.bleepingcomputer.com/sUBs/combofix.exe
and save to the desktop.

1. Double click on combo.exe & follow the prompts.
2. When finished, it will produce a logfile located at C:\ComboFix.txt.
3. Post the contents of that log in your next reply with a new hijackthis log.

Note:
Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.
Logged

guitarplaya989
Newbie
*
Posts: 12


View Profile
« Reply #2 on: November 11, 2006, 04:44:25 PM »

Heres the combo fix log:
Owner - 06-11-11 14:39:12.98    Service Pack 1
ComboFix 06.11.9 - Running from: "C:\Program Files\Mozilla Firefox"

((((((((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
 

C:\WINDOWS\teller2.chk
C:\WINDOWS\system32\ishost.exe
C:\WINDOWS\system32\ismini.exe
C:\WINDOWS\system32\components

 
(((((((((((((((((((((((((((((((   Files Created from 2006-10-11 to 2006-11-11  ))))))))))))))))))))))))))))))))))
 
 
2006-11-11   00:23   729,088   --a------   C:\WINDOWS\system32\LDPackage.dll
2006-11-11   00:23   53,248   --a------   C:\WINDOWS\system32\silc_dll.dll
2006-11-10   19:13   865,158   --ahs----   C:\WINDOWS\system32\rtstv.ini2
2006-11-10   08:54   245,760   --a------   C:\WINDOWS\system32\rlxf.dll
2006-11-10   08:51   299,008   --a------   C:\WINDOWS\system32\rlls.dll
2006-11-10   08:51   1,433,600   --a------   C:\WINDOWS\system32\rlvknlg.exe
2006-11-09   18:46   90,112   --a------   C:\WINDOWS\unvise32.exe
2006-11-04   19:04   845,861   --ahs----   C:\WINDOWS\system32\rtstv.bak2
2006-11-04   02:05   40,973   ---------   C:\WINDOWS\system32\xxywtqr.dll
2006-11-03   19:18   32,768   --a------   C:\WINDOWS\btsolygp.exe
2006-11-03   19:02   752,231   --ahs----   C:\WINDOWS\system32\rtstv.bak1
2006-11-03   19:02   32,768   --a------   C:\WINDOWS\msxeqiit.exe
2006-11-03   19:01   692,276   --ahs----   C:\WINDOWS\system32\vtstr.dll
2006-11-03   18:42   45,056   --a------   C:\WINDOWS\cfg32s.dll
2006-11-03   18:42   102,400   --a------   C:\WINDOWS\cfg32r.dll
2006-11-03   18:41   323,072   --a------   C:\165.exe
2006-11-03   18:41   20,480   --a------   C:\WINDOWS\stub_mm3.exe
2006-11-03   18:40   28,672   --a------   C:\WINDOWS\system32\histuay.exe
2006-11-03   18:40   24,576   --a------   C:\WINDOWS\system32\g4slcld.exe
2006-11-03   18:40   204,800   --a------   C:\WINDOWS\system32\s9ndzm6.dll
2006-11-03   18:37   94,208   --a------   C:\WINDOWS\system32\dvlojx.dll
2006-11-03   18:37   72,704   --a------   C:\WINDOWS\system32\liqkrui.dll
2006-11-03   18:37   15,872   --a------   C:\WINDOWS\system32\winccf32.dll
2006-11-01   21:31   68,888   --a------   C:\WINDOWS\system32\xinput1_3.dll
2006-11-01   21:31   62,744   --a------   C:\WINDOWS\system32\xinput1_2.dll
2006-11-01   21:31   237,848   --a------   C:\WINDOWS\system32\xactengine2_4.dll
2006-11-01   21:31   236,824   --a------   C:\WINDOWS\system32\xactengine2_3.dll
2006-11-01   21:31   2,414,360   --a------   C:\WINDOWS\system32\d3dx9_31.dll
2006-11-01   21:31   2,297,552   --a------   C:\WINDOWS\system32\d3dx9_26.dll
2006-11-01   21:31   15,128   --a------   C:\WINDOWS\system32\x3daudio1_1.dll
2006-11-01   21:30   974,848   --a------   C:\WINDOWS\system32\dxdiag.exe
2006-11-01   21:30   83,968   --a------   C:\WINDOWS\system32\drivers\nabtsfec.sys
2006-11-01   21:30   79,360   --a------   C:\WINDOWS\system32\dpwsockx.dll
2006-11-01   21:30   63,768   --a------   C:\WINDOWS\system32\dxdllreg.exe
2006-11-01   21:30   52,096   --a------   C:\WINDOWS\system32\drivers\msdv.sys
2006-11-01   21:30   48,512   --a------   C:\WINDOWS\system32\drivers\stream.sys
2006-11-01   21:30   470,528   --a------   C:\WINDOWS\system32\qdvd.dll
2006-11-01   21:30   47,104   --a------   C:\WINDOWS\system32\wstdecod.dll
2006-11-01   21:30   381,952   --a------   C:\WINDOWS\system32\dsound.dll
2006-11-01   21:30   354,816   --a------   C:\WINDOWS\system32\psisdecd.dll
2006-11-01   21:30   316,928   --a------   C:\WINDOWS\system32\qdv.dll
2006-11-01   21:30   292,864   --a------   C:\WINDOWS\system32\ddraw.dll
2006-11-01   21:30   230,400   --a------   C:\WINDOWS\system32\dplayx.dll
2006-11-01   21:30   181,248   --a------   C:\WINDOWS\system32\dmime.dll
2006-11-01   21:30   18,688   --a------   C:\WINDOWS\system32\drivers\wstcodec.sys
2006-11-01   21:30   16,896   --a------   C:\WINDOWS\system32\msyuv.dll
2006-11-01   21:30   16,384   --a------   C:\WINDOWS\system32\drivers\ccdecode.sys
2006-11-01   21:30   15,104   --a------   C:\WINDOWS\system32\drivers\mpe.sys
2006-11-01   21:30   14,976   --a------   C:\WINDOWS\system32\drivers\streamip.sys
2006-11-01   21:30   122,880   --a------   C:\WINDOWS\system32\dmusic.dll
2006-11-01   21:30   11,392   --a------   C:\WINDOWS\system32\drivers\bdasup.sys
2006-11-01   21:30   10,880   --a------   C:\WINDOWS\system32\drivers\slip.sys
2006-11-01   21:30   10,112   --a------   C:\WINDOWS\system32\drivers\ndisip.sys
2006-11-01   21:30   1,769,472   --a------   C:\WINDOWS\system32\dxdiagn.dll
2006-11-01   21:30   1,703,936   --a------   C:\WINDOWS\system32\d3d9.dll
2006-11-01   21:30   1,230,336   --a------   C:\WINDOWS\system32\msvidctl.dll
2006-11-01   21:30   1,201,152   --a------   C:\WINDOWS\system32\d3d8.dll
2006-10-26   13:49   65,536   --a------   C:\WINDOWS\wanmpsvc.exe
2006-10-26   13:49   54,784   --a------   C:\WINDOWS\system32\Inetwh32.dll
2006-10-26   13:49   24,660   --a------   C:\WINDOWS\system32\aolddial.dll
2006-10-26   13:49   153,088   --a------   C:\WINDOWS\system32\jgdwmie.dll
2006-10-26   13:49   1,044,480   --a------   C:\WINDOWS\system32\roboex32.dll
2006-10-26   13:48   33,588   --a------   C:\WINDOWS\system32\drivers\wanatw4.sys
2006-10-26   13:27   67,456   --a------   C:\WINDOWS\system32\drivers\pavdrv51.sys
2006-10-26   13:26   290,816   --a------   C:\WINDOWS\system32\WINHTTP5.DLL
2006-10-26   11:19   208,896   --a------   C:\WINDOWS\system32\wmpns.dll
2006-10-26   10:21   991,232   --a------   C:\WINDOWS\system32\esent.dll
2006-10-26   10:02   22,752   --a------   C:\WINDOWS\system32\spupdsvc.exe
2006-10-26   10:00   7,680   --a------   C:\WINDOWS\system32\bitsprx2.dll
2006-10-26   10:00   7,168   --a------   C:\WINDOWS\system32\bitsprx3.dll
2006-10-26   10:00   331,776   --a------   C:\WINDOWS\system32\winhttp.dll
2006-10-26   10:00   17,408   --a------   C:\WINDOWS\system32\qmgrprxy.dll
2006-10-26   09:55   465,176   --a------   C:\WINDOWS\system32\wuapi.dll
2006-10-26   09:55   41,240   --a------   C:\WINDOWS\system32\wups.dll
2006-10-26   09:55   194,328   --a------   C:\WINDOWS\system32\wuaueng1.dll
2006-10-26   09:55   18,200   --a------   C:\WINDOWS\system32\wups2.dll
2006-10-26   09:55   172,312   --a------   C:\WINDOWS\system32\wuauclt1.exe
2006-10-26   09:55   127,256   --a------   C:\WINDOWS\system32\wucltui.dll
2006-10-25   18:01   159,744   --a------   C:\WINDOWS\system32\igfxres.dll
2006-10-25   17:59   21,060   --a------   C:\WINDOWS\system32\drivers\iviaspi.sys
2006-10-25   17:59   204,800   --a------   C:\WINDOWS\system32\IVIresizeW7.dll
2006-10-25   17:59   200,704   --a------   C:\WINDOWS\system32\IVIresizeA6.dll
2006-10-25   17:59   20,480   --a------   C:\WINDOWS\system32\IVIresize.dll
2006-10-25   17:59   192,512   --a------   C:\WINDOWS\system32\IVIresizeP6.dll
2006-10-25   17:59   192,512   --a------   C:\WINDOWS\system32\IVIresizeM6.dll
2006-10-25   17:59   188,416   --a------   C:\WINDOWS\system32\IVIresizePX.dll
2006-10-25   17:59   10,368   --a------   C:\WINDOWS\system32\drivers\pfc.sys
2006-10-25   17:57   51,072   --a------   C:\WINDOWS\system32\drivers\i8042prt.sys
2006-10-25   17:57   23,424   --a------   C:\WINDOWS\system32\drivers\kbdclass.sys
2006-10-25   17:56   77,440   --a------   C:\WINDOWS\system32\drivers\wdmaud.sys
2006-10-25   17:56   57,856   --a------   C:\WINDOWS\system32\drivers\drmk.sys
2006-10-25   17:56   56,832   --a------   C:\WINDOWS\system32\drivers\sysaudio.sys
2006-10-25   17:56   54,272   --a------   C:\WINDOWS\system32\drivers\swmidi.sys
2006-10-25   17:56   50,048   --a------   C:\WINDOWS\system32\drivers\DMusic.sys
2006-10-25   17:56   5,888   --a------   C:\WINDOWS\system32\drivers\splitter.sys
2006-10-25   17:56   21,760   --a------   C:\WINDOWS\system32\drivers\USBSTOR.SYS
2006-10-25   17:56   2,816   --a------   C:\WINDOWS\system32\drivers\drmkaud.sys
2006-10-25   17:56   159,360   --a------   C:\WINDOWS\system32\drivers\kmixer.sys
2006-10-25   17:56   142,208   --a------   C:\WINDOWS\system32\drivers\aec.sys
2006-10-25   17:31   6,400   --a------   C:\WINDOWS\system32\drivers\enum1394.sys
2006-10-25   17:31   55,680   --a------   C:\WINDOWS\system32\drivers\ohci1394.sys
2006-10-25   17:29   7,350,784   --a------   C:\WINDOWS\RTLCPL.EXE
2006-10-25   17:29   67,584   --a------   C:\WINDOWS\SOUNDMAN.EXE
2006-10-25   17:29   57,344   --a------   C:\WINDOWS\ALCMTR.EXE
2006-10-25   17:29   2,533,888   --a------   C:\WINDOWS\ALCWZRD.EXE
2006-10-25   17:29   2,155,200   --a------   C:\WINDOWS\system32\drivers\RtkHDAud.sys
2006-10-25   17:29   156,160   --a------   C:\WINDOWS\system32\RTLCPAPI.dll
2006-10-25   17:17   90,112   --a------   C:\WINDOWS\system32\mycomput.dll
2006-10-25   17:17   9,600   --a------   C:\WINDOWS\system32\drivers\ndistapi.sys
2006-10-25   17:17   88,064   --a------   C:\WINDOWS\system32\mydocs.dll
2006-10-25   17:17   87,552   --a------   C:\WINDOWS\system32\drivers\ndiswan.sys
2006-10-25   17:17   857,600   --a------   C:\WINDOWS\system32\netplwiz.dll
2006-10-25   17:17   831,562   --a------   C:\WINDOWS\system32\mswdat10.dll
2006-10-25   17:17   7,680   --a------   C:\WINDOWS\system32\ncxpnt.dll
2006-10-25   17:17   699,392   --a------   C:\WINDOWS\system32\msxml2.dll
2006-10-25   17:17   66,048   --a------   C:\WINDOWS\system32\msw3prt.dll
2006-10-25   17:17   614,474   --a------   C:\WINDOWS\system32\mswstr10.dll
2006-10-25   17:17   584,192   --a------   C:\WINDOWS\system32\netcfgx.dll
2006-10-25   17:17   495,376   --a------   C:\WINDOWS\system32\msxml.dll
2006-10-25   17:17   44,032   --a------   C:\WINDOWS\system32\msxml3r.dll
2006-10-25   17:17   42,496   --a------   C:\WINDOWS\system32\ncobjapi.dll
2006-10-25   17:17   4,096   --a------   C:\WINDOWS\system32\nddeapir.exe
2006-10-25   17:17   4,096   --a------   C:\WINDOWS\system32\mtxex.dll
2006-10-25   17:17   399,360   --a------   C:\WINDOWS\system32\netlogon.dll
2006-10-25   17:17   39,424   --a------   C:\WINDOWS\system32\net.exe
2006-10-25   17:17   38,016   --a------   C:\WINDOWS\system32\drivers\ndproxy.sys
2006-10-25   17:17   37,916   --a------   C:\WINDOWS\system32\msxml2r.dll
2006-10-25   17:17   35,840   --a------   C:\WINDOWS\system32\narrhook.dll
2006-10-25   17:17   344,095   --a------   C:\WINDOWS\system32\msxbde40.dll
2006-10-25   17:17   33,152   --a------   C:\WINDOWS\system32\drivers\netbios.sys
2006-10-25   17:17   26,624   --a------   C:\WINDOWS\system32\msxmlr.dll
2006-10-25   17:17   253,952   --a------   C:\WINDOWS\system32\neth.dll
2006-10-25   17:17   25,600   --a------   C:\WINDOWS\system32\msvidc32.dll
2006-10-25   17:17   25,088   --a------   C:\WINDOWS\system32\mtxlegih.dll
2006-10-25   17:17   228,352   --a------   C:\WINDOWS\system32\mswsock.dll
2006-10-25   17:17   214,016   --a------   C:\WINDOWS\system32\netevent.dll
2006-10-25   17:17   20,480   --a------   C:\WINDOWS\system32\nbtstat.exe
2006-10-25   17:17   20,480   --a------   C:\WINDOWS\system32\mtxdm.dll
2006-10-25   17:17   171,008   --a------   C:\WINDOWS\system32\netmsg.dll
2006-10-25   17:17   16,384   --a------   C:\WINDOWS\system32\nddenb32.dll
2006-10-25   17:17   15,360   --a------   C:\WINDOWS\system32\nddeapi.dll
2006-10-25   17:17   134,656   --a------   C:\WINDOWS\system32\netid.dll
2006-10-25   17:17   126,912   --a------   C:\WINDOWS\system32\msvideo.dll
2006-10-25   17:17   115,200   --a------   C:\WINDOWS\system32\net1.exe
2006-10-25   17:17   108,464   --a------   C:\WINDOWS\system32\netapi.dll
2006-10-25   17:17   105,984   --a------   C:\WINDOWS\system32\netdde.exe
2006-10-25   17:17   104,064   --a------   C:\WINDOWS\system32\drivers\mup.sys
2006-10-25   17:16   995,384   --a------   C:\WINDOWS\system32\mfc42u.dll
2006-10-25   17:16   995,383   --a------   C:\WINDOWS\system32\mfc42.dll
2006-10-25   17:16   99,840   --a------   C:\WINDOWS\system32\mprmsg.dll
2006-10-25   17:16   94,282   --a------   C:\WINDOWS\system32\msencode.dll
2006-10-25   17:16   924,432   --a------   C:\WINDOWS\system32\mfc40u.dll
2006-10-25   17:16   924,432   --a------   C:\WINDOWS\system32\mfc40.dll
2006-10-25   17:16   91,648   --a------   C:\WINDOWS\system32\loadperf.dll
2006-10-25   17:16   9,936   --a------   C:\WINDOWS\system32\lzexpand.dll
2006-10-25   17:16   9,728   --a------   C:\WINDOWS\system32\mstinit.exe
2006-10-25   17:16   9,216   --a------   C:\WINDOWS\system32\lprmonui.dll
2006-10-25   17:16   89,600   --a------   C:\WINDOWS\system32\langwrbk.dll
2006-10-25   17:16   884,736   --a------   C:\WINDOWS\system32\msimsg.dll
2006-10-25   17:16   817   --a------   C:\WINDOWS\system32\mscdexnt.exe
2006-10-25   17:16   80,384   --a------   C:\WINDOWS\system32\mciavi32.dll
2006-10-25   17:16   80,128   --a------   C:\WINDOWS\system32\msapsspc.dll
2006-10-25   17:16   8,704   --a------   C:\WINDOWS\system32\lprhelp.dll
2006-10-25   17:16   8,192   --a------   C:\WINDOWS\system32\mountvol.exe
2006-10-25   17:16   8,192   --a------   C:\WINDOWS\system32\mciole16.dll
2006-10-25   17:16   8,192   --a------   C:\WINDOWS\system32\mag_hook.dll
2006-10-25   17:16   8,192   --a------   C:\WINDOWS\system32\lpr.exe
2006-10-25   17:16   79,360   --a------   C:\WINDOWS\system32\mprapi.dll
2006-10-25   17:16   79,360   --a------   C:\WINDOWS\system32\makecab.exe
2006-10-25   17:16   78,848   --a------   C:\WINDOWS\system32\msiexec.exe
2006-10-25   17:16   774,144   --a------   C:\WINDOWS\system32\mmc.exe
2006-10-25   17:16   73,802   --a------   C:\WINDOWS\system32\msrclr40.dll
2006-10-25   17:16   7,680   --a------   C:\WINDOWS\system32\mll_mtf.dll
2006-10-25   17:16   7,680   --a------   C:\WINDOWS\system32\mciole32.dll
2006-10-25   17:16   7,680   --a------   C:\WINDOWS\system32\drivers\mcd.sys
2006-10-25   17:16   7,168   --a------   C:\WINDOWS\system32\msr2cenu.dll
2006-10-25   17:16   7,168   --a------   C:\WINDOWS\system32\mscat32.dll
2006-10-25   17:16   69,632   --a------   C:\WINDOWS\system32\msr2c.dll
2006-10-25   17:16   69,120   --a------   C:\WINDOWS\system32\mprddm.dll
2006-10-25   17:16   68,928   --a------   C:\WINDOWS\system32\mmsystem.dll
2006-10-25   17:16   68,608   --a------   C:\WINDOWS\system32\mscms.dll
2006-10-25   17:16   67,584   --a------   C:\WINDOWS\system32\MSCTFP.dll
2006-10-25   17:16   67,072   --a------   C:\WINDOWS\system32\msacm32.dll
2006-10-25   17:16   66,560   --a------   C:\WINDOWS\system32\mmcbase.dll
2006-10-25   17:16   65,536   --a------   C:\WINDOWS\system32\msconf.dll
2006-10-25   17:16   65,024   --a------   C:\WINDOWS\system32\msvcrt40.dll
2006-10-25   17:16   65,024   --a------   C:\WINDOWS\system32\msaudite.dll
2006-10-25   17:16   61,168   --a------   C:\WINDOWS\system32\msacm.dll
2006-10-25   17:16   60,416   --a------   C:\WINDOWS\system32\msratelc.dll
2006-10-25   17:16   6,656   --a------   C:\WINDOWS\system32\msswchx.exe
2006-10-25   17:16   6,144   --a------   C:\WINDOWS\system32\msdtc.exe
2006-10-25   17:16   6,144   --a------   C:\WINDOWS\system32\lpq.exe
2006-10-25   17:16   598,016   --a------   C:\WINDOWS\system32\mstscax.dll
2006-10-25   17:16   577,024   --a------   C:\WINDOWS\system32\mlang.dll
2006-10-25   17:16   57,856   --a------   C:\WINDOWS\system32\licwmi.dll
2006-10-25   17:16   565,760   --a------   C:\WINDOWS\system32\msvcp50.dll
2006-10-25   17:16   56,320   --a------   C:\WINDOWS\system32\mshtmler.dll
2006-10-25   17:16   56,320   --a------   C:\WINDOWS\system32\miglibnt.dll
2006-10-25   17:16   552,991   --a------   C:\WINDOWS\system32\msrepl40.dll
2006-10-25   17:16   55,808   --a------   C:\WINDOWS\system32\mpr.dll
2006-10-25   17:16   54,784   --a------   C:\WINDOWS\system32\msdtclog.dll
2006-10-25   17:16   53,322   --a------   C:\WINDOWS\system32\msjter40.dll
2006-10-25   17:16   512,031   --a------   C:\WINDOWS\system32\msexch40.dll
2006-10-25   17:16   51,712   --a------   C:\WINDOWS\system32\migpwd.exe
2006-10-25   17:16   504,832   --a------   C:\WINDOWS\system32\msftedit.dll
2006-10-25   17:16   504,320   --a------   C:\WINDOWS\system32\logonui.exe
2006-10-25   17:16   50,688   --a------   C:\WINDOWS\system32\msvcirt.dll
2006-10-25   17:16   50,176   --a------   C:\WINDOWS\system32\mdhcp.dll
2006-10-25   17:16   50,176   --a------   C:\WINDOWS\system32\loghours.dll
2006-10-25   17:16   5,632   --a------   C:\WINDOWS\system32\mll_qic.dll
2006-10-25   17:16   5,120   --a------   C:\WINDOWS\system32\msidle.dll
2006-10-25   17:16   5,120   --a------   C:\WINDOWS\system32\lodctr.exe
2006-10-25   17:16   49,152   --a------   C:\WINDOWS\system32\mprdim.dll
2006-10-25   17:16   47,104   --a------   C:\WINDOWS\system32\mspmspsv.dll
2006-10-25   17:16   47,104   --a------   C:\WINDOWS\system32\mprui.dll
2006-10-25   17:16   46,592   --a------   C:\WINDOWS\system32\mmcshext.dll
2006-10-25   17:16   45,056   --a------   C:\WINDOWS\system32\msprivs.dll
2006-10-25   17:16   421,919   --a------   C:\WINDOWS\system32\msrd2x40.dll
2006-10-25   17:16   41,984   --a------   C:\WINDOWS\system32\msports.dll
2006-10-25   17:16   401,462   --a------   C:\WINDOWS\system32\msvcp60.dll
2006-10-25   17:16   4,608   --a------   C:\WINDOWS\system32\mssip32.dll
2006-10-25   17:16   4,608   --a------   C:\WINDOWS\system32\msimg32.dll
2006-10-25   17:16   4,608   --a------   C:\WINDOWS\system32\mchgrcoi.dll
2006-10-25   17:16   4,224   --a------   C:\WINDOWS\system32\drivers\mnmdd.sys
2006-10-25   17:16   4,126   --a------   C:\WINDOWS\system32\msdxmlc.dll
2006-10-25   17:16   39,274   --a------   C:\WINDOWS\system32\mem.exe
2006-10-25   17:16   388,608   --a------   C:\WINDOWS\system32\mstsc.exe
2006-10-25   17:16   381,440   --a------   C:\WINDOWS\system32\lmrt.dll
2006-10-25   17:16   37,504   --a------   C:\WINDOWS\system32\drivers\mountmgr.sys
2006-10-25   17:16   368,710   --a------   C:\WINDOWS\system32\msisam11.dll
2006-10-25   17:16   367,616   --a------   C:\WINDOWS\system32\licdll.dll
2006-10-25   17:16   36,864   --a------   C:\WINDOWS\system32\mscpxl32.dLL
2006-10-25   17:16   35,840   --a------   C:\WINDOWS\system32\mssign32.dll
2006-10-25   17:16   348,191   --a------   C:\WINDOWS\system32\mspbde40.dll
2006-10-25   17:16   339,968   --a------   C:\WINDOWS\system32\mspaint.exe
2006-10-25   17:16   33,792   --a------   C:\WINDOWS\system32\drivers\msgpc.sys
2006-10-25   17:16   33,280   --a------   C:\WINDOWS\system32\msobjs.dll
2006-10-25   17:16   323,072   --a------   C:\WINDOWS\system32\msvcrt.dll
2006-10-25   17:16   32,768   --a------   C:\WINDOWS\system32\mnmsrvc.exe
2006-10-25   17:16   32,256   --a------   C:\WINDOWS\system32\mnmdd.dll
2006-10-25   17:16   319,760   --a------   C:\WINDOWS\system32\msnsspc.dll
2006-10-25   17:16   319,519   --a------   C:\WINDOWS\system32\msexcl40.dll
2006-10-25   17:16   315,466   --a------   C:\WINDOWS\system32\msrd3x40.dll
2006-10-25   17:16   3,584   --a------   C:\WINDOWS\system32\msafd.dll
2006-10-25   17:16   3,584   --a------   C:\WINDOWS\system32\mll_hp.dll
2006-10-25   17:16   295,936   --a------   C:\WINDOWS\system32\localspl.dll
2006-10-25   17:16   29,696   --a------   C:\WINDOWS\system32\lights.exe
2006-10-25   17:16   28,746   --a------   C:\WINDOWS\system32\msrecr40.dll
2006-10-25   17:16   271,360   --a------   C:\WINDOWS\system32\msihnd.dll
2006-10-25   17:16   27,136   --a------   C:\WINDOWS\system32\mspatcha.dll
2006-10-25   17:16   266,752   --a------   C:\WINDOWS\system32\MSCTF.dll
2006-10-25   17:16   253,983   --a------   C:\WINDOWS\system32\mstext40.dll
2006-10-25   17:16   253,952   --a------   C:\WINDOWS\system32\msvcrt20.dll
2006-10-25   17:16   250,368   --a------   C:\WINDOWS\system32\mstask.dll
2006-10-25   17:16   25,088   --a------   C:\WINDOWS\system32\lnkstub.exe
2006-10-25   17:16   241,725   --a------   C:\WINDOWS\system32\msuni11.dll
2006-10-25   17:16   241,695   --a------   C:\WINDOWS\system32\msjtes40.dll
2006-10-25   17:16   24,064   --a------   C:\WINDOWS\system32\mshta.exe
2006-10-25   17:16   230,400   --a------   C:\WINDOWS\system32\msieftp.dll
2006-10-25   17:16   22,528   --a------   C:\WINDOWS\system32\mslbui.dll
2006-10-25   17:16   22,016   --a------   C:\WINDOWS\system32\mpnotify.exe
2006-10-25   17:16   22,016   --a------   C:\WINDOWS\system32\mciwave.dll
2006-10-25   17:16   219,648   --a------   C:\WINDOWS\system32\logon.scr
2006-10-25   17:16   213,023   --a------   C:\WINDOWS\system32\msltus40.dll
2006-10-25   17:16   210,944   --a------   C:\WINDOWS\system32\moricons.dll
2006-10-25   17:16   202,752   --a------   C:\WINDOWS\system32\localsec.dll
2006-10-25   17:16   20,992   --a------   C:\WINDOWS\system32\msg.exe
2006-10-25   17:16   20,992   --a------   C:\WINDOWS\system32\mfcsubs.dll
2006-10-25   17:16   20,992   --a------   C:\WINDOWS\system32\mciseq.dll
2006-10-25   17:16   20,480   --a------   C:\WINDOWS\system32\msorc32r.dll
2006-10-25   17:16   2,890,240   --a------   C:\WINDOWS\system32\msi.dll
2006-10-25   17:16   2,560   --a------   C:\WINDOWS\system32\lz32.dll
2006-10-25   17:16   196,096   --a------   C:\WINDOWS\system32\mobsync.dll
2006-10-25   17:16   19,456   --a------   C:\WINDOWS\system32\mode.com
2006-10-25   17:16   19,456   --a------   C:\WINDOWS\system32\licmgr10.dll
2006-10-25   17:16   182,784   --a------   C:\WINDOWS\system32\msutb.dll
2006-10-25   17:16   18,944   --a------   C:\WINDOWS\system32\mimefilt.dll
2006-10-25   17:16   18,944   --a------   C:\WINDOWS\system32\lpk.dll
2006-10-25   17:16   18,048   --a------   C:\WINDOWS\system32\drivers\msfs.sys
2006-10-25   17:16   173,312   --a------   C:\WINDOWS\system32\drivers\mrxdav.sys
2006-10-25   17:16   17,920   --a------   C:\WINDOWS\system32\midimap.dll
2006-10-25   17:16   17,408   --a------   C:\WINDOWS\system32\mcicda.dll
2006-10-25   17:16   163,840   --a------   C:\WINDOWS\system32\mindex.dll
2006-10-25   17:16   16,384   --a------   C:\WINDOWS\system32\mmfutil.dll
2006-10-25   17:16   151,626   --a------   C:\WINDOWS\system32\msjint40.dll
2006-10-25   17:16   15,872   --a------   C:\WINDOWS\system32\more.com
2006-10-25   17:16   15,360   --a------   C:\WINDOWS\system32\msisip.dll
2006-10-25   17:16   15,360   --a------   C:\WINDOWS\system32\logoff.exe
2006-10-25   17:16   146,432   --a------   C:\WINDOWS\system32\msls31.dll
2006-10-25   17:16   145,408   --a------   C:\WINDOWS\system32\modemui.dll
2006-10-25   17:16   143,872   --a------   C:\WINDOWS\system32\MSIMTF.dll
2006-10-25   17:16   14,848   --a------   C:\WINDOWS\system32\msidntld.dll
2006-10-25   17:16   135,680   --a------   C:\WINDOWS\system32\mobsync.exe
2006-10-25   17:16   131,072   --a------   C:\WINDOWS\system32\msorcl32.dll
2006-10-25   17:16   13,312   --a------   C:\WINDOWS\system32\msswch.dll
2006-10-25   17:16   126,976   --a------   C:\WINDOWS\system32\mshearts.exe
2006-10-25   17:16   126,976   --a------   C:\WINDOWS\system32\msdart.dll
2006-10-25   17:16   12,800   --a------   C:\WINDOWS\system32\mrinfo.exe
2006-10-25   17:16   12,800   --a------   C:\WINDOWS\system32\mgmtapi.dll
2006-10-25   17:16   12,800   --a------   C:\WINDOWS\system32\mcastmib.dll
2006-10-25   17:16   12,288   --a------   C:\WINDOWS\system32\mscpx32r.dLL
2006-10-25   17:16   12,288   --a------   C:\WINDOWS\system32\mmdrv.dll
2006-10-25   17:16   12,288   --a------   C:\WINDOWS\system32\lmhsvc.dll
2006-10-25   17:16   119,808   --a------   C:\WINDOWS\system32\mmutilse.dll
2006-10-25   17:16   116,736   --a------   C:\WINDOWS\system32\mplay32.exe
2006-10-25   17:16   113,664   --a------   C:\WINDOWS\system32\msvfw32.dll
2006-10-25   17:16   112,128   --a------   C:\WINDOWS\system32\mapistub.dll
2006-10-25   17:16   11,776   --a------   C:\WINDOWS\system32\lsass.exe
2006-10-25   17:16   108,544   --a------   C:\WINDOWS\system32\msv1_0.dll
2006-10-25   17:16   108,544   --a------   C:\WINDOWS\system32\mdminst.dll
2006-10-25   17:16   103,936   --a------   C:\WINDOWS\system32\mstlsapi.dll
2006-10-25   17:16   102,912   --a------   C:\WINDOWS\system32\msaatext.dll
2006-10-25   17:16   10,496   --a------   C:\WINDOWS\system32\mcdsrv32.dll
2006-10-25   17:16   10,240   --a------   C:\WINDOWS\system32\msrle32.dll
2006-10-25   17:16   10,240   --a------   C:\WINDOWS\system32\mcd32.dll
2006-10-25   17:16   10,240   --a------   C:\WINDOWS\system32\localui.dll
2006-10-25   17:16   10,112   --a------   C:\WINDOWS\system32\modex.dll
2006-10-25   17:16   1,503,262   --a------   C:\WINDOWS\system32\msjet40.dll
2006-10-25   17:16   1,388,544   --a------   C:\WINDOWS\system32\msvbvm60.dll
2006-10-25   17:16   1,355,776   --a------   C:\WINDOWS\system32\msvbvm50.dll
2006-10-25   17:16   1,131   --a------   C:\WINDOWS\system32\loadfix.com
2006-10-25   17:16   1,128,960   --a------   C:\WINDOWS\system32\mmcndmgr.dll
2006-10-25   17:15   99,840   --a------   C:\WINDOWS\system32\iexpress.exe
2006-10-25   17:15   92,160   --a------   C:\WINDOWS\system32\krnl386.exe
2006-10-25   17:15   91,648   --a------   C:\WINDOWS\system32\iuctl.dll
2006-10-25   17:15   9,728   --a------   C:\WINDOWS\system32\label.exe
2006-10-25   17:15   83,968   --a------   C:\WINDOWS\system32\ipxmontr.dll
2006-10-25   17:15   8,192   --a------   C:\WINDOWS\system32\igmpagnt.dll
2006-10-25   17:15   79,488   --a------   C:\WINDOWS\system32\drivers\ipnat.sys
2006-10-25   17:15   77,824   --a------   C:\WINDOWS\system32\isign32.dll
2006-10-25   17:15   74,368   --a------   C:\WINDOWS\system32\drivers\ipsec.sys
2006-10-25   17:15   73,728   --a------   C:\WINDOWS\system32\ils.dll
2006-10-25   17:15   70,656   --a------   C:\WINDOWS\system32\ifsutil.dll
2006-10-25   17:15   7,680   --a------   C:\WINDOWS\system32\kbdcan.dll
2006-10-25   17:15   7,040   --a------   C:\WINDOWS\system32\kdcom.dll
2006-10-25   17:15   7,040   --a------   C:\WINDOWS\system32\kd1394.dll
2006-10-25   17:15   69,632   --a------   C:\WINDOWS\system32\icwdial.dll
2006-10-25   17:15   69,120   --a------   C:\WINDOWS\system32\ipxpromn.dll
2006-10-25   17:15   68,096   --a------   C:\WINDOWS\system32\inetpp.dll
2006-10-25   17:15   66,560   --a------   C:\WINDOWS\system32\ipxsap.dll
2006-10-25   17:15   65,536   --a------   C:\WINDOWS\system32\jgsh400.dll
2006-10-25   17:15   61,440   --a------   C:\WINDOWS\system32\icwphbk.dll
2006-10-25   17:15   6,144   --a------   C:\WINDOWS\system32\kbdmac.dll
2006-10-25   17:15   6,144   --a------   C:\WINDOWS\system32\kbdfo.dll
2006-10-25   17:15   6,144   --a------   C:\WINDOWS\system32\kbdbene.dll
2006-10-25   17:15   59,392   --a------   C:\WINDOWS\system32\iesetup.dll
2006-10-25   17:15   51,712   --a------   C:\WINDOWS\system32\ipconfig.exe
2006-10-25   17:15   49,664   --a------   C:\WINDOWS\system32\ixsso.dll
2006-10-25   17:15   47,952   --a------   C:\WINDOWS\system32\jobexec.dll
2006-10-25   17:15   450,560   --a------   C:\WINDOWS\system32\infosoft.dll
2006-10-25   17:15   45,568   --a------   C:\WINDOWS\system32\jgsd400.dll
2006-10-25   17:15   44,544   --a------   C:\WINDOWS\system32\jgaw400.dll
2006-10-25   17:15   44,032   --a------   C:\WINDOWS\system32\ipsec6.exe
2006-10-25   17:15   42,809   --a------   C:\WINDOWS\system32\key01.sys
2006-10-25   17:15   42,537   --a------   C:\WINDOWS\system32\keyboard.sys
2006-10-25   17:15   4,736   --a------   C:\WINDOWS\system32\drivers\intelide.sys
2006-10-25   17:15   4,096   --a------   C:\WINDOWS\system32\iprtprio.dll
2006-10-25   17:15   39,936   --a------   C:\WINDOWS\system32\ipxrtmgr.dll
2006-10-25   17:15   39,808   --a------   C:\WINDOWS\system32\drivers\imapi.sys
2006-10-25   17:15   362,496   --a------   C:\WINDOWS\system32\jet500.dll
2006-10-25   17:15   36,922   --a------   C:\WINDOWS\system32\imeshare.dll
2006-10-25   17:15   35,840   --a------   C:\WINDOWS\system32\jgmd400.dll
2006-10-25   17:15   35,840   --a------   C:\WINDOWS\system32\drivers\isapnp.sys
2006-10-25   17:15   32,896   --a------   C:\WINDOWS\system32\drivers\ipfltdrv.sys
2006-10-25   17:15   318,464   --a------   C:\WINDOWS\system32\ippromon.dll
2006-10-25   17:15   30,720   --a------   C:\WINDOWS\system32\iologmsg.dll
2006-10-25   17:15   30,208   --a------   C:\WINDOWS\system32\imgutil.dll
2006-10-25   17:15   3,584   --a------   C:\WINDOWS\system32\iprop.dll
2006-10-25   17:15   294,912   --a------   C:\WINDOWS\system32\iedkcs32.dll
2006-10-25   17:15   28,672   --a------   C:\WINDOWS\system32\isrdbg32.dll
2006-10-25   17:15   28,672   --a------   C:\WINDOWS\system32\ie4uinit.exe
2006-10-25   17:15   266,240   --a------   C:\WINDOWS\system32\inetcfg.dll
2006-10-25   17:15   23,040   --a------   C:\WINDOWS\system32\iernonce.dll
2006-10-25   17:15   221,184   --a------   C:\WINDOWS\system32\ieakui.dll
2006-10-25   17:15   22,016   --a------   C:\WINDOWS\system32\ipxroute.exe
2006-10-25   17:15   21,504   --a------   C:\WINDOWS\system32\ipxrip.dll
2006-10-25   17:15   204,288   --a------   C:\WINDOWS\system32\ieaksie.dll
2006-10-25   17:15   20,992   --a------   C:\WINDOWS\system32\ipxwan.dll
2006-10-25   17:15   199,168   --a------   C:\WINDOWS\system32\ir32_32.dll
2006-10-25   17:15   198,424   --a------   C:\WINDOWS\system32\iuengine.dll
2006-10-25   17:15   19,584   --a------   C:\WINDOWS\system32\drivers\ipinip.sys
2006-10-25   17:15   169,984   --a------   C:\WINDOWS\system32\iprtrmgr.dll
2006-10-25   17:15   154,112   --a------   C:\WINDOWS\system32\ipmontr.dll
2006-10-25   17:15   146,432   --a------   C:\WINDOWS\system32\keymgr.dll
2006-10-25   17:15   144,896   --a------   C:\WINDOWS\system32\initpki.dll
2006-10-25   17:15   14,710   --a------   C:\WINDOWS\system32\kb16.com
2006-10-25   17:15   14,336   --a------   C:\WINDOWS\system32\inetppui.dll
2006-10-25   17:15   13,312   --a------   C:\WINDOWS\system32\irclass.dll
2006-10-25   17:15   126,976   --a------   C:\WINDOWS\system32\ieakeng.dll
2006-10-25   17:15   125,952   --a------   C:\WINDOWS\system32\ifmon.dll
2006-10-25   17:15   123,904   --a------   C:\WINDOWS\system32\imapi.exe
2006-10-25   17:15   114,176   --a------   C:\WINDOWS\system32\input.dll
2006-10-25   17:15   113,152   --a------   C:\WINDOWS\system32\idq.dll
2006-10-25   17:15   110,592   --a------   C:\WINDOWS\system32\inetcplc.dll
2006-10-25   17:15   103,936   --a------   C:\WINDOWS\system32\imm32.dll
2006-10-25   17:15   10,496   --a------   C:\WINDOWS\system32\drivers\irenum.sys
2006-10-25   17:14   9,728   --a------   C:\WINDOWS\system32\gpkrsrc.dll
2006-10-25   17:14   9,216   --a------   C:\WINDOWS\system32\icaapi.dll
2006-10-25   17:14   9,216   --a------   C:\WINDOWS\system32\finger.exe
2006-10-25   17:14   9,216   --a------   C:\WINDOWS\system32\find.exe
2006-10-25   17:14   9,216   --a------   C:\WINDOWS\system32\dumprep.exe
2006-10-25   17:14   882   --a------   C:\WINDOWS\system32\fastopen.exe
2006-10-25   17:14   86,528   --a------   C:\WINDOWS\system32\iassam.dll
2006-10-25   17:14   84,992   --a------   C:\WINDOWS\system32\dskquota.dll
2006-10-25   17:14   81,408   --a------   C:\WINDOWS\system32\fsusd.dll
2006-10-25   17:14   802,304   --a------   C:\WINDOWS\system32\dxmrtp.dll
2006-10-25   17:14   8,832   --a------   C:\WINDOWS\system32\framebuf.dll
2006-10-25   17:14   8,704   --a------   C:\WINDOWS\system32\eventvwr.exe
2006-10-25   17:14   8,424   --a------   C:\WINDOWS\system32\exe2bin.exe
2006-10-25   17:14   77,824   --a------   C:\WINDOWS\system32\fontsub.dll
2006-10-25   17:14   76,800   --a------   C:\WINDOWS\system32\gcdef.dll
2006-10-25   17:14   72,704   --a------   C:\WINDOWS\system32\hlink.dll
2006-10-25   17:14   7,936   --a------   C:\WINDOWS\system32\drivers\fs_rec.sys
2006-10-25   17:14   7,680   --a------   C:\WINDOWS\system32\hostname.exe
2006-10-25   17:14   7,168   --a------   C:\WINDOWS\system32\fxsperf.dll
2006-10-25   17:14   7,168   --a------   C:\WINDOWS\system32\forcedos.exe
2006-10-25   17:14   69,886   --a------   C:\WINDOWS\system32\edit.com
2006-10-25   17:14   68,992   --a------   C:\WINDOWS\system32\drivers\dxg.sys
2006-10-25   17:14   68,096   --a------   C:\WINDOWS\system32\fxscom.dll
2006-10-25   17:14   66,560   --a------   C:\WINDOWS\system32\faultrep.dll
2006-10-25   17:14   62,976   --a------   C:\WINDOWS\system32\dsauth.dll
2006-10-25   17:14   62,464   --a------   C:\WINDOWS\system32\iasnap.dll
2006-10-25   17:14   605,696   --a------   C:\WINDOWS\system32\getuname.dll
2006-10-25   17:14   6,656   --a------   C:\WINDOWS\system32\fxsres.dll
2006-10-25   17:14   59,392   --a------   C:\WINDOWS\system32\iassvcs.dll
2006-10-25   17:14   56,320   --a------   C:\WINDOWS\system32\fsutil.exe
2006-10-25   17:14   559,616   --a------   C:\WINDOWS\system32\fxsst.dll
2006-10-25   17:14   55,296   --a------   C:\WINDOWS\system32\freecell.exe
2006-10-25   17:14   54,784   --a------   C:\WINDOWS\system32\icmui.dll
2006-10-25   17:14   53,760   --a------   C:\WINDOWS\system32\fxsevent.dll
2006-10-25   17:14   5,120   --a------   C:\WINDOWS\system32\hccoin.dll
2006-10-25   17:14   498,205   --a------   C:\WINDOWS\system32\dxmasf.dll
2006-10-25   17:14   49,152   --a------   C:\WINDOWS\system32\eventlog.dll
2006-10-25   17:14   47,104   --a------   C:\WINDOWS\system32\dssec.dll
2006-10-25   17:14   45,568   --a------   C:\WINDOWS\system32\drwtsn32.exe
2006-10-25   17:14   443,392   --a------   C:\WINDOWS\system32\fxsapi.dll
2006-10-25   17:14   44,544   --a------   C:\WINDOWS\system32\hticons.dll
2006-10-25   17:14   41,472   --a------   C:\WINDOWS\system32\iasads.dll
2006-10-25   17:14   40,960   --a------   C:\WINDOWS\system32\extrac32.exe
2006-10-25   17:14   40,448   --a------   C:\WINDOWS\system32\ftp.exe
2006-10-25   17:14   4,768   --a------   C:\WINDOWS\system32\himem.sys
2006-10-25   17:14   4,656   --a------   C:\WINDOWS\system32\ds16gt.dLL
2006-10-25   17:14   395,264   --a------   C:\WINDOWS\system32\fxsxp32.dll
2006-10-25   17:14   391,168   --a------   C:\WINDOWS\system32\fxstiff.dll
2006-10-25   17:14   39,936   --a------   C:\WINDOWS\system32\htui.dll
2006-10-25   17:14   39,424   --a------   C:\WINDOWS\system32\esentutl.exe
2006-10-25   17:14   380,445   --a------   C:\WINDOWS\system32\expsrv.dll
2006-10-25   17:14   37,888   --a------   C:\WINDOWS\system32\grpconv.exe
2006-10-25   17:14   361,472   --a------   C:\WINDOWS\system32\fontext.dll
2006-10-25   17:14   34,944   --a------   C:\WINDOWS\system32\drivers\fips.sys
2006-10-25   17:14   34,560   --a------   C:\WINDOWS\system32\drivers\hidclass.sys
2006-10-25   17:14   33,280   --a------   C:\WINDOWS\system32\eventcls.dll
2006-10-25   17:14   323,072   --a------   C:\WINDOWS\system32\filemgmt.dll
2006-10-25   17:14   32,256   --a------   C:\WINDOWS\system32\iashlpr.dll
2006-10-25   17:14   315,904   --a------   C:\WINDOWS\system32\hnetwiz.dll
2006-10-25   17:14   31,744   --a------   C:\WINDOWS\system32\fxsroute.dll
2006-10-25   17:14   3,584   --a------   C:\WINDOWS\system32\dsprpres.dll
2006-10-25   17:14   3,328   --a------   C:\WINDOWS\system32\drivers\dxgthk.sys
2006-10-25   17:14   3,072   --a------   C:\WINDOWS\system32\icmp.dll
2006-10-25   17:14   3,072   --a------   C:\WINDOWS\system32\fixmapi.exe
2006-10-25   17:14   285,184   --a------   C:\WINDOWS\system32\glmf32.dll
2006-10-25   17:14   28,112   --a------   C:\WINDOWS\system32\drwatson.exe
2006-10-25   17:14   271,360   --a------   C:\WINDOWS\system32\fxscomex.dll
2006-10-25   17:14   263,680   --a------   C:\WINDOWS\system32\duser.dll
2006-10-25   17:14   26,240   --a------   C:\WINDOWS\system32\drivers\fdc.sys
2006-10-25   17:14   26,112   --a------   C:\WINDOWS\system32\graftabl.com
2006-10-25   17:14   250,368   --a------   C:\WINDOWS\system32\fxssvc.exe
2006-10-25   17:14   25,600   --a------   C:\WINDOWS\system32\format.com
2006-10-25   17:14   25,088   --a------   C:\WINDOWS\system32\findstr.exe
2006-10-25   17:14   247,808   --a------   C:\WINDOWS\system32\iassdo.dll
2006-10-25   17:14   240,640   --a------   C:\WINDOWS\system32\hnetcfg.dll
2006-10-25   17:14   24,576   --a------   C:\WINDOWS\system32\gdi.exe
2006-10-25   17:14   24,064   --a------   C:\WINDOWS\system32\fxsdrv.dll
2006-10-25   17:14   237,056   --a------   C:\WINDOWS\system32\icm32.dll
2006-10-25   17:14   236,032   --a------   C:\WINDOWS\system32\fxst30.dll
2006-10-25   17:14   23,680   --a------   C:\WINDOWS\system32\drivers\hidparse.sys
2006-10-25   17:14   23,552   --a------   C:\WINDOWS\system32\iasacct.dll
2006-10-25   17:14   227,840   --a------   C:\WINDOWS\system32\dsquery.dll
2006-10-25   17:14   22,016   --a------   C:\WINDOWS\system32\fxsmon.dll
2006-10-25   17:14   216,064   --a------   C:\WINDOWS\system32\fxscover.exe
2006-10-25   17:14   20,992   --a------   C:\WINDOWS\system32\fxsext32.dll
2006-10-25   17:14   19,712   --a------   C:\WINDOWS\system32\drivers\flpydisk.sys
2006-10-25   17:14   19,694   --a------   C:\WINDOWS\system32\graphics.com
2006-10-25   17:14   19,456   --a------   C:\WINDOWS\system32\fontview.exe
2006-10-25   17:14   19,456   --a------   C:\WINDOWS\system32\ersvc.dll
2006-10-25   17:14   185,856   --a------   C:\WINDOWS\system32\fxswzrd.dll
2006-10-25   17:14   180,224   --a------   C:\WINDOWS\system32\dwwin.exe
2006-10-25   17:14   18,432   --a------   C:\WINDOWS\system32\feclient.dll
2006-10-25   17:14   178,688   --a------   C:\WINDOWS\system32\eudcedit.exe
2006-10-25   17:14   176,128   --a------   C:\WINDOWS\system32\ftsrch.dll
2006-10-25   17:14   17,920   --a------   C:\WINDOWS\system32\iaspolcy.dll
2006-10-25   17:14   17,408   --a------   C:\WINDOWS\system32\esentprf.dll
2006-10-25   17:14   165,376   --a------   C:\WINDOWS\system32\els.dll
2006-10-25   17:14   16,384   --a------   C:\WINDOWS\system32\icfgnt5.dll
2006-10-25   17:14   16,384   --a------   C:\WINDOWS\system32\fmifs.dll
2006-10-25   17:14   16,384   --a------   C:\WINDOWS\system32\ds32gt.dll
2006-10-25   17:14   15,872   --a------   C:\WINDOWS\system32\dvdupgrd.exe
2006-10-25   17:14   149,504   --a------   C:\WINDOWS\system32\fxsui.dll
2006-10-25   17:14   145,152   --a------   C:\WINDOWS\system32\drivers\fastfat.sys
2006-10-25   17:14   144,384   --a------   C:\WINDOWS\system32\dskquoui.dll
2006-10-25   17:14   141,312   --a------   C:\WINDOWS\system32\iasrecst.dll
2006-10-25   17:14   14,848   --a------   C:\WINDOWS\system32\hnetmon.dll
2006-10-25   17:14   14,848   --a------   C:\WINDOWS\system32\help.exe
2006-10-25   17:14   14,848   --a------   C:\WINDOWS\system32\fc.exe
2006-10-25   17:14   137,216   --a------   C:\WINDOWS\system32\hotplug.dll
2006-10-25   17:14   135,680   --a------   C:\WINDOWS\system32\dsprop.dll
2006-10-25   17:14   132,608   --a------   C:\WINDOWS\system32\fxsclntR.dll
2006-10-25   17:14   130,048   --a------   C:\WINDOWS\system32\fxsclnt.exe
2006-10-25   17:14   125,056   --a------   C:\WINDOWS\system32\drivers\ftdisk.sys
2006-10-25   17:14   124,928   --a------   C:\WINDOWS\system32\dssenh.dll
2006-10-25   17:14   12,642   --a------   C:\WINDOWS\system32\edlin.exe
2006-10-25   17:14   116,736   --a------   C:\WINDOWS\system32\glu32.dll
2006-10-25   17:14   116,224   --a------   C:\WINDOWS\system32\iasrad.dll
2006-10-25   17:14   111,104   --a------   C:\WINDOWS\system32\fxscfgwz.dll
2006-10-25   17:14   110,592   --a------   C:\WINDOWS\system32\iccvid.dll
2006-10-25   17:14   11,264   --a------   C:\WINDOWS\system32\fxssend.exe
2006-10-25   17:14   106,496   --a------   C:\WINDOWS\system32\dsuiext.dll
2006-10-25   17:14   103,424   --a------   C:\WINDOWS\system32\EqnClass.Dll
2006-10-25   17:14   101,888   --a------   C:\WINDOWS\system32\gpkcsp.dll
2006-10-25   17:14   10,496   --a------   C:\WINDOWS\system32\drivers\dxapi.sys
2006-10-25   17:14   1,114,896   --a------   C:\WINDOWS\system32\esent97.dll
2006-10-25   17:14   1,004,032   --a------   C:\WINDOWS\explorer.exe
2006-10-25   17:12   98,816   --a------   C:\WINDOWS\system32\clipbrd.exe
2006-10-25   17:12   9,216   --a------   C:\WINDOWS\system32\diskcomp.com
2006-10-25   17:12   89,600   --a------   C:\WINDOWS\system32\comrepl.dll
2006-10-25   17:12   87,040   --a------   C:\WINDOWS\system32\drivers\atapi.sys
2006-10-25   17:12   85,504   --a------   C:\WINDOWS\system32\catsrvps.dll
2006-10-25   17:12   85,020   --a------   C:\WINDOWS\system32\dgsetup.dll
2006-10-25   17:12   80,384   --a------   C:\WINDOWS\system32\charmap.exe
2006-10-25   17:12   80,384   --a------   C:\WINDOWS\system32\cabview.dll
2006-10-25   17:12   80,384   --a------   C:\WINDOWS\system32\autodisc.dll
2006-10-25   17:12   8,192   --a------   C:\WINDOWS\system32\control.exe
2006-10-25   17:12   8,192   --a------   C:\WINDOWS\system32\cidaemon.exe
2006-10-25   17:12   8,192   --a------   C:\WINDOWS\system32\autolfn.exe
2006-10-25   17:12   792,064   --a------   C:\WINDOWS\system32\comres.dll
2006-10-25   17:12   79,360   --a------   C:\WINDOWS\system32\diantz.exe
2006-10-25   17:12   780,928   --a------   C:\WINDOWS\system32\drivers\dmboot.sys
2006-10-25   17:12   77,824   --a------   C:\WINDOWS\system32\asycfilt.dll
2006-10-25   17:12   76,288   --a------   C:\WINDOWS\system32\dfrgfat.exe
2006-10-25   17:12   76,288   --a------   C:\WINDOWS\system32\avifil32.dll
2006-10-25   17:12   75,544   --a------   C:\WINDOWS\system32\cdm.dll
2006-10-25   17:12   74,810   --a------   C:\WINDOWS\system32\atl.dll
2006-10-25   17:12   74,240   --a------   C:\WINDOWS\system32\dhcpsapi.dll
2006-10-25   17:12   73,728   --a------   C:\WINDOWS\system32\csseqchk.dll
2006-10-25   17:12   73,216   --a------   C:\WINDOWS\system32\avwav.dll
2006-10-25   17:12   71,680   --a------   C:\WINDOWS\system32\browsewm.dll
2006-10-25   17:12   70,656   --a------   C:\WINDOWS\system32\defrag.exe
2006-10-25   17:12   70,144   --a------   C:\WINDOWS\system32\cryptdlg.dll
2006-10-25   17:12   7,680   --a------   C:\WINDOWS\system32\dciman32.dll
2006-10-25   17:12   7,680   --a------   C:\WINDOWS\system32\ckcnv.exe
2006-10-25   17:12   7,680   --a------   C:\WINDOWS\system32\chcp.com
2006-10-25   17:12   7,168   --a------   C:\WINDOWS\system32\diskcopy.com
2006-10-25   17:12   69,584   --a------   C:\WINDOWS\system32\avicap.dll
2006-10-25   17:12   68,864   --a------   C:\WINDOWS\system32\drivers\bridge.sys
2006-10-25   17:12   66,560   --a------   C:\WINDOWS\system32\console.dll
2006-10-25   17:12   64,512   --a------   C:\WINDOWS\system32\ciodm.dll
2006-10-25   17:12   64,000   --a------   C:\WINDOWS\system32\avicap32.dll
2006-10-25   17:12   62,976   --a------   C:\WINDOWS\system32\browselc.dll
2006-10-25   17:12   62,464   --a------   C:\WINDOWS\system32\dpnmodem.dll
2006-10-25   17:12   61,952   --a------   C:\WINDOWS\system32\dpnwsock.dll
2006-10-25   17:12   61,440   --a------   C:\WINDOWS\system32\dbnetlib.dll
2006-10-25   17:12   61,440   --a------   C:\WINDOWS\system32\cleanmgr.exe
2006-10-25   17:12   6,656   --a------   C:\WINDOWS\system32\batt.dll
2006-10-25   17:12   590,336   --a------   C:\WINDOWS\system32\d3dramp.dll
2006-10-25   17:12   59,648   --a------   C:\WINDOWS\system32\drivers\cdfs.sys
2006-10-25   17:12   578,560   --a------   C:\WINDOWS\system32\autoconv.exe
2006-10-25   17:12   57,216   --a------   C:\WINDOWS\system32\drivers\atmarpc.sys
2006-10-25   17:12   561,664   --a------   C:\WINDOWS\system32\comctl32.dll
2006-10-25   17:12   55,296   --a------   C:\WINDOWS\system32\digest.dll
2006-10-25   17:12   54,784   --a------   C:\WINDOWS\system32\cmstp.exe
2006-10-25   17:12   54,272   --a------   C:\WINDOWS\system32\clusapi.dll
2006-10-25   17:12   53,888   --a------   C:\WINDOWS\system32\drivers\atmlane.sys
2006-10-25   17:12   53,840   --a------   C:\WINDOWS\system32\dosx.exe
2006-10-25   17:12   53,520   --a------   C:\WINDOWS\system32\dpserial.dll
2006-10-25   17:12   53,248   --a------   C:\WINDOWS\system32\cryptnet.dll
2006-10-25   17:12   51,712   --a------   C:\WINDOWS\system32\dataclen.dll
2006-10-25   17:12   51,200   --a------   C:\WINDOWS\system32\dfrgres.dll
2006-10-25   17:12   50,620   --a------   C:\WINDOWS\system32\command.com
2006-10-25   17:12   5,888   --a------   C:\WINDOWS\system32\drivers\dmload.sys
2006-10-25   17:12   5,120   --a------   C:\WINDOWS\system32\dcomcnfg.exe
2006-10-25   17:12   5,120   --a------   C:\WINDOWS\system32\cisvc.exe
2006-10-25   17:12   5,120   --a------   C:\WINDOWS\system32\bootvrfy.exe
2006-10-25   17:12   49,152   --a------   C:\WINDOWS\system32\browser.dll
2006-10-25   17:12   48,640   --a------   C:\WINDOWS\system32\cryptext.dll
2006-10-25   17:12   47,616   --a------   C:\WINDOWS\system32\d3dxof.dll
2006-10-25   17:12   47,488   --a------   C:\WINDOWS\system32\drivers\cdrom.sys
2006-10-25   17:12   46,336   --a------   C:\WINDOWS\system32\drivers\classpnp.sys
2006-10-25   17:12   46,080   --a------   C:\WINDOWS\system32\docprop.dll
2006-10-25   17:12   45,632   --a------   C:\WINDOWS\system32\cliconfg.exe
2006-10-25   17:12   45,568   --a------   C:\WINDOWS\system32\docprop2.dll
2006-10-25   17:12   45,083   --a------   C:\WINDOWS\system32\dispex.dll
2006-10-25   17:12   45,056   --a------   C:\WINDOWS\system32\camocx.dll
2006-10-25   17:12   44,032   --a------   C:\WINDOWS\system32\dnsrslvr.dll
2006-10-25   17:12   44,032   --a------   C:\WINDOWS\system32\dimap.dll
2006-10-25   17:12   44,032   --a------   C:\WINDOWS\system32\basesrv.dll
2006-10-25   17:12   436,736   --a------   C:\WINDOWS\system32\certmgr.dll
2006-10-25   17:12   436,224   --a------   C:\WINDOWS\system32\d3dim.dll
2006-10-25   17:12   42,768   --a------   C:\WINDOWS\system32\dpwsock.dll
2006-10-25   17:12   41,472   --a------   C:\WINDOWS\system32\cmdl32.exe
2006-10-25   17:12   4,608   --a------   C:\WINDOWS\system32\dllhst3g.exe
2006-10-25   17:12   4,608   --a------   C:\WINDOWS\system32\bootok.exe
2006-10-25   17:12   4,224   --a------   C:\WINDOWS\system32\drivers\beep.sys
2006-10-25   17:12   394,240   --a------   C:\WINDOWS\system32\diactfrm.dll
2006-10-25   17:12   39,424   --a------   C:\WINDOWS\system32\ddeml.dll
2006-10-25   17:12   38,912   --a------   C:\WINDOWS\system32\audiosrv.dll
2006-10-25   17:12   375,808   --a------   C:\WINDOWS\system32\cmd.exe
2006-10-25   17:12   370,176   --a------   C:\WINDOWS\system32\dhcpmon.dll
2006-10-25   17:12   36,352   --a------   C:\WINDOWS\system32\cmutil.dll
2006-10-25   17:12   359,936   --a------   C:\WINDOWS\system32\cards.dll
2006-10-25   17:12   352,256   --a------   C:\WINDOWS\system32\drivers\atmuni.sys
2006-10-25   17:12   350,208   --a------   C:\WINDOWS\system32\d3drm.dll
2006-10-25   17:12   35,840   --a------   C:\WINDOWS\system32\cmmon32.exe
2006-10-25   17:12   35,328   --a------   C:\WINDOWS\system32\dfrgsnap.dll
2006-10-25   17:12   345,600   --a------   C:\WINDOWS\system32\confmsp.dll
2006-10-25   17:12   34,816   --a------   C:\WINDOWS\system32\d3dpmesh.dll
2006-10-25   17:12   34,816   --a------   C:\WINDOWS\system32\atmpvcno.dll
2006-10-25   17:12   330,752   --a------   C:\WINDOWS\system32\dmconfig.dll
2006-10-25   17:12   33,792   --a------   C:\WINDOWS\system32\drivers\disk.sys
2006-10-25   17:12   33,040   --a------   C:\WINDOWS\system32\dplay.dll
2006-10-25   17:12   324,608   --a------   C:\WINDOWS\system32\cmdial32.dll
2006-10-25   17:12   32,816   --a------   C:\WINDOWS\system32\commdlg.dll
2006-10-25   17:12   32,768   --a------   C:\WINDOWS\system32\cnetcfg.dll
2006-10-25   17:12   32,768   --a------   C:\WINDOWS\system32\cfgbkend.dll
2006-10-25   17:12   31,360   --a------   C:\WINDOWS\system32\drivers\atmepvc.sys
2006-10-25   17:12   307,712   --a------   C:\WINDOWS\system32\cscui.dll
2006-10-25   17:12   30,720   --a------   C:\WINDOWS\system32\clipsrv.exe
2006-10-25   17:12   30,160   --a------   C:\WINDOWS\system32\compobj.dll
2006-10-25   17:12   3,584   --a------   C:\WINDOWS\system32\comcat.dll
2006-10-25   17:12   29,184   --a------   C:\WINDOWS\system32\csrsrv.dll
2006-10-25   17:12   29,184   --a------   C:\WINDOWS\system32\cryptdll.dll
2006-10-25   17:12   28,672   --a------   C:\WINDOWS\system32\dbnmpntw.dll
2006-10-25   17:12   273,920   --a------   C:\WINDOWS\system32\dmdlgs.dll
2006-10-25   17:12   272,768   --a------   C:\WINDOWS\system32\atmfd.dll
2006-10-25   17:12   27,648   --a------   C:\WINDOWS\system32\ccfgnt.dll
2006-10-25   17:12   27,200   -ra------   C:\WINDOWS\system32\ctl3dv2.dll
2006-10-25   17:12   27,136   --a------   C:\WINDOWS\system32\ddeshare.exe
2006-10-25   17:12   27,136   --a------   C:\WINDOWS\system32\ctl3d32.dll
2006-10-25   17:12   27,136   --a------   C:\WINDOWS\system32\batmeter.dll
2006-10-25   17:12   27,136   --a------   C:\WINDOWS\system32\atmlib.dll
2006-10-25   17:12   27,097   --a------   C:\WINDOWS\system32\country.sys
2006-10-25   17:12   263,168   --a------   C:\WINDOWS\system32\devmgr.dll
2006-10-25   17:12   26,624   --a------   C:\WINDOWS\system32\cnvfat.dll
2006-10-25   17:12   258,048   --a------   C:\WINDOWS\system32\comdlg32.dll
2006-10-25   17:12   25,600   --a------   C:\WINDOWS\system32\dfsshlex.dll
2006-10-25   17:12   25,600   --a------   C:\WINDOWS\system32\comaddin.dll
2006-10-25   17:12   24,576   --a------   C:\WINDOWS\system32\dbmsvinn.dLL
2006-10-25   17:12   24,576   --a------   C:\WINDOWS\system32\dbmsrpcn.dll
2006-10-25   17:12   24,576   --a------   C:\WINDOWS\system32\conime.exe
2006-10-25   17:12   238,592   --a------   C:\WINDOWS\system32\compatUI.dll
2006-10-25   17:12   227,840   --a------   C:\WINDOWS\system32\avtapi.dll
2006-10-25   17:12   222,208   --a------   C:\WINDOWS\system32\compstui.dll
2006-10-25   17:12   22,528   --a------   C:\WINDOWS\system32\at.exe
2006-10-25   17:12   22,016   --a------   C:\WINDOWS\system32\davclnt.dll
2006-10-25   17:12   21,504   --a------   C:\WINDOWS\system32\dmserver.dll
2006-10-25   17:12   204,800   --a------   C:\WINDOWS\system32\dmadmin.exe
2006-10-25   17:12   20,634   --a------   C:\WINDOWS\system32\debug.exe
2006-10-25   17:12   20,480   --a------   C:\WINDOWS\system32\dbmsadsn.dll
2006-10-25   17:12   2,025,984   --a------   C:\WINDOWS\system32\cdosys.dll
2006-10-25   17:12   19,456   --a------   C:\WINDOWS\system32\dmocx.dll
2006-10-25   17:12   186,880   --a------   C:\WINDOWS\system32\certcli.dll
2006-10-25   17:12   184,320   --a------   C:\WINDOWS\system32\dmdskmgr.dll
2006-10-25   17:12   18,432   --a------   C:\WINDOWS\system32\dmintf.dll
2006-10-25   17:12   18,432   --a------   C:\WINDOWS\system32\deskperf.dll
2006-10-25   17:12   18,432   --a------   C:\WINDOWS\system32\cacls.exe
2006-10-25   17:12   176,157   --a------   C:\WINDOWS\system32\dgrpsetu.dll
2006-10-25   17:12   174,592   --a------   C:\WINDOWS\system32\cmprops.dll
2006-10-25   17:12   17,920   --a------   C:\WINDOWS\system32\diskperf.exe
2006-10-25   17:12   17,408   --a------   C:\WINDOWS\system32\compact.exe
2006-10-25   17:12   168,960   --a------   C:\WINDOWS\system32\dinput8.dll
2006-10-25   17:12   163,328   --a------   C:\WINDOWS\system32\ciadmin.dll
2006-10-25   17:12   16,896   --a------   C:\WINDOWS\system32\deskmon.dll
2006-10-25   17:12   16,896   --a------   C:\WINDOWS\system32\cfgmgr32.dll
2006-10-25   17:12   16,384   --a------   C:\WINDOWS\system32\deskadp.dll
2006-10-25   17:12   16,384   --a------   C:\WINDOWS\system32\avmeter.dll
2006-10-25   17:12   158,720   --a------   C:\WINDOWS\system32\credui.dll
2006-10-25   17:12   152,064   --a------   C:\WINDOWS\system32\datime.dll
2006-10-25   17:12   151,552   --a------   C:\WINDOWS\system32\dinput.dll
2006-10-25   17:12   15,872   --a------   C:\WINDOWS\system32\comp.exe
2006-10-25   17:12   15,872   --a------   C:\WINDOWS\system32\cdmodem.dll
2006-10-25   17:12   149,019   --a------   C:\WINDOWS\system32\crtdll.dll
2006-10-25   17:12   147,456   --a------   C:\WINDOWS\system32\comsnap.dll
2006-10-25   17:12   146,304   --a------   C:\WINDOWS\system32\drivers\dmio.sys
2006-10-25   17:12   145,920   --a------   C:\WINDOWS\system32\diskpart.exe
2006-10-25   17:12   142,848   --a------   C:\WINDOWS\system32\capesnpn.dll
2006-10-25   17:12   14,877   --a------   C:\WINDOWS\system32\corpol.dll
2006-10-25   17:12   14,848   --a------   C:\WINDOWS\system32\bidispl.dll
2006-10-25   17:12   14,336   --a------   C:\WINDOWS\system32\dmremote.exe
2006-10-25   17:12   14,336   --a------   C:\WINDOWS\system32\cmpbk32.dll
2006-10-25   17:12   13,952   --a------   C:\WINDOWS\system32\drivers\cbidf2k.sys
2006-10-25   17:12   13,824   --a------   C:\WINDOWS\system32\convert.exe
2006-10-25   17:12   13,568   --a------   C:\WINDOWS\system32\drivers\asyncmac.sys
2006-10-25   17:12   13,312   --a------   C:\WINDOWS\system32\ctfmon.exe
2006-10-25   17:12   13,312   --a------   C:\WINDOWS\system32\atkctrs.dll
2006-10-25   17:12   13,184   --a------   C:\WINDOWS\system32\drivers\diskdump.sys
2006-10-25   17:12   127,552   --a------   C:\WINDOWS\system32\cliconfg.dll
2006-10-25   17:12   12,288   --a------   C:\WINDOWS\system32\cmcfg32.dll
2006-10-25   17:12   12,288   --a------   C:\WINDOWS\system32\bootvid.dll
2006-10-25   17:12   118,784   --a------   C:\WINDOWS\system32\dmdskres.dll
2006-10-25   17:12   115,200   --a------   C:\WINDOWS\system32\dpcdll.dll
2006-10-25   17:12   114,688   --a------   C:\WINDOWS\system32\calc.exe
2006-10-25   17:12   113,152   --a------   C:\WINDOWS\system32\dfrgui.dll
2006-10-25   17:12   11,776   --a------   C:\WINDOWS\system32\drprov.dll
2006-10-25   17:12   11,776   --a------   C:\WINDOWS\system32\chkdsk.exe
2006-10-25   17:12   11,264   --a------   C:\WINDOWS\system32\chkntfs.exe
2006-10-25   17:12   11,264   --a------   C:\WINDOWS\system32\attrib.exe
2006-10-25   17:12   11,264   --a------   C:\WINDOWS\system32\atrace.dll
2006-10-25   17:12   109,568   --a------   C:\WINDOWS\system32\cic.dll
2006-10-25   17:12   109,456   --a------   C:\WINDOWS\system32\avifile.dll
2006-10-25   17:12   103,424   --a------   C:\WINDOWS\system32\dgnet.dll
2006-10-25   17:12   102,450   --a------   C:\WINDOWS\system32\cscript.exe
2006-10-25   17:12   10,752   --a------   C:\WINDOWS\system32\doskey.exe
2006-10-25   17:12   10,752   --a------   C:\WINDOWS\system32\clb.dll
2006-10-25   17:12   10,240   --a------   C:\WINDOWS\system32\atmadm.exe
2006-10-25   17:12   1,501,696   --a------   C:\WINDOWS\system32\diskcopy.dll
2006-10-25   17:11   19,456   --a------   C:\WINDOWS\system32\arp.exe
2006-10-25   17:11   14,366   --a------   C:\WINDOWS\system32\asfsipc.dll
2006-10-25   17:10   98,304   --a------   C:\WINDOWS\system32\actxprxy.dll
2006-10-25   17:10   91,648   --a------   C:\WINDOWS\system32\ahui.exe
2006-10-25   17:10   91,136   --a------   C:\WINDOWS\system32\advpack.dll
2006-10-25   17:10   9,029   --a------   C:\WINDOWS\system32\ansi.sys
2006-10-25   17:10   64,512   --a------   C:\WINDOWS\system32\acctres.dll
2006-10-25   17:10   62,464   --a------   C:\WINDOWS\system32\adsmsext.dll
2006-10-25   17:10   57,344   --a------   C:\WINDOWS\system32\admparse.dll
2006-10-25   17:10   558,080   --a------   C:\WINDOWS\system32\advapi32.dll
2006-10-25   17:10   41,984   --a------   C:\WINDOWS\system32\alg.exe
2006-10-25   17:10   4,096   --a------   C:\WINDOWS\system32\actmovie.exe
2006-10-25   17:10   26,112   --a------   C:\WINDOWS\system32\adptif.dll
2006-10-25   17:10   25,600   --a------   C:\WINDOWS\system32\aaaamon.dll
2006-10-25   17:10   239,616   --a------   C:\WINDOWS\system32\adsnt.dll
2006-10-25   17:10   181,760   --a------   C:\WINDOWS\system32\activeds.dll
2006-10-25   17:10   179,328   --a------   C:\WINDOWS\system32\drivers\acpi.sys
2006-10-25   17:10   162,816   --a------   C:\WINDOWS\system32\adsldp.dll
2006-10-25   17:10   15,872   --a------   C:\WINDOWS\system32\alrsvc.dll
2006-10-25   17:10   139,776   --a------   C:\WINDOWS\system32\adsldpc.dll
2006-10-25   17:10   131,968   --a------   C:\WINDOWS\system32\drivers\afd.sys
2006-10-25   17:10   129,536   --a------   C:\WINDOWS\system32\acledit.dll
2006-10-25   17:10   12,498   --a------   C:\WINDOWS\system32\append.exe
2006-10-25   17:10   115,712   --a------   C:\WINDOWS\system32\apphelp.dll
2006-10-25   17:10   11,648   --a------   C:\WINDOWS\system32\drivers\acpiec.sys
2006-10-25   17:10   107,008   --a------   C:\WINDOWS\system32\aclui.dll
2006-10-25   17:10   102,912   --a------   C:\WINDOWS\system32\apcups.dll
2006-10-25   16:40   86,016   --a------   C:\WINDOWS\system32\xactsrv.dll
2006-10-25   16:40   707   --a------   C:\WINDOWS\_default.pif
2006-10-25   16:40   28,160   --a------   C:\WINDOWS\system32\xcopy.exe
2006-10-25   16:40   187,904   --a------   C:\WINDOWS\system32\xpsp1res.dll
2006-10-25   16:40   172,664   --a------   C:\WINDOWS\system32\xenroll.dll
2006-10-25   16:40   11,776   --a------   C:\WINDOWS\system32\xolehlp.dll
2006-10-25   16:39   98,304   --a------   C:\WINDOWS\system32\verifier.exe
2006-10-25   16:39   94,784   --a------   C:\WINDOWS\twain.dll
2006-10-25   16:39   93,184   --a------   C:\WINDOWS\system32\winscard.dll
2006-10-25   16:39   9,344   --a------   C:\WINDOWS\system32\vga.dll
2006-10-25   16:39   9,216   --a------   C:\WINDOWS\system32\wuauserv.dll
2006-10-25   16:39   9,216   --a------   C:\WINDOWS\system32\wshatm.dll
2006-10-25   16:39   9,216   --a------   C:\WINDOWS\system32\winfax.dll
2006-10-25   16:39   9,216   --a------   C:\WINDOWS\system32\wifeman.dll
2006-10-25   16:39   9,008   --a------   C:\WINDOWS\system32\ver.dll
2006-10-25   16:39   88,064   --a------   C:\WINDOWS\system32\tscfgwmi.dll
2006-10-25   16:39   86,528   --a------   C:\WINDOWS\system32\wlnotify.dll
2006-10-25   16:39   829,952   --a------   C:\WINDOWS\system32\tapi3.dll
2006-10-25   16:39   82,432   --a------   C:\WINDOWS\system32\ufat.dll
2006-10-25   16:39   81,920   --a------   C:\WINDOWS\system32\trkwks.dll
2006-10-25   16:39   8,456   --a------   C:\WINDOWS\system32\tsddd.dll
2006-10-25   16:39   78,848   --a------   C:\WINDOWS\system32\tapiui.dll
2006-10-25   16:39   77,824   --a------   C:\WINDOWS\system32\wmpstub.exe
2006-10-25   16:39   762,368   --a------   C:\WINDOWS\system32\winntbbu.dll
2006-10-25   16:39   70,912   --a------   C:\WINDOWS\system32\drivers\videoprt.sys
2006-10-25   16:39   70,656   --a------   C:\WINDOWS\system32\wiascr.dll
2006-10-25   16:39   7,680   --a------   C:\WINDOWS\system32\vcdex.dll
2006-10-25   16:39   7,168   --a------   C:\WINDOWS\system32\wshnetbs.dll
2006-10-25   16:39   69,120   --a------   C:\WINDOWS\system32\unimdmat.dll
2006-10-25   16:39   667,136   --a------   C:\WINDOWS\system32\userenv.dll
2006-10-25   16:39   65,585   --a------   C:\WINDOWS\system32\wshext.dll
2006-10-25   16:39   60,416   --a------   C:\WINDOWS\system32\wextract.exe
2006-10-25   16:39   568,832   --a------   C:\WINDOWS\system32\wiashext.dll
2006-10-25   16:39   52,224   --a------   C:\WINDOWS\system32\tsappcmp.dll
2006-10-25   16:39   516,608   --a------   C:\WINDOWS\system32\winlogon.exe
2006-10-25   16:39   51,968   --a------   C:\WINDOWS\system32\drivers\usbhub.sys
2006-10-25   16:39   51,456   --a------   C:\WINDOWS\system32\vga256.dll
2006-10-25   16:39   51,200   --a------   C:\WINDOWS\system32\wmerrenu.dll
2006-10-25   16:39   5,632   --a------   C:\WINDOWS\system32\write.exe
2006-10-25   16:39   5,632   --a------   C:\WINDOWS\system32\wmi.dll
2006-10-25   16:39   5,632   --a------   C:\WINDOWS\system32\tapiperf.dll
2006-10-25   16:39   5,120   --a------   C:\WINDOWS\system32\winnls.dll
2006-10-25   16:39   49,680   --a------   C:\WINDOWS\twunk_16.exe
2006-10-25   16:39   49,664   --a------   C:\WINDOWS\system32\w32tm.exe
2006-10-25   16:39   49,152   --a------   C:\WINDOWS\system32\drivers\volsnap.sys
2006-10-25   16:39   48,640   --a------   C:\WINDOWS\system32\vdmredir.dll
2006-10-25   16:39   48,128   --a------   C:\WINDOWS\system32\winsta.dll
2006-10-25   16:39   479,261   --a------   C:\WINDOWS\system32\vbscript.dll
2006-10-25   16:39   47,872   --a------   C:\WINDOWS\system32\user.exe
2006-10-25   16:39   47,616   --a------   C:\WINDOWS\system32\utilman.exe
2006-10-25   16:39   46,592   --a------   C:\WINDOWS\twain_32.dll
2006-10-25   16:39   46,592   --a------   C:\WINDOWS\system32\wdigest.dll
2006-10-25   16:39   449,536   --a------   C:\WINDOWS\system32\wiadefui.dll
2006-10-25   16:39   446,464   --a------   C:\WINDOWS\system32\wmvdmoe.dll
2006-10-25   16:39   414,720   --a------   C:\WINDOWS\system32\wiaacmgr.exe
2006-10-25   16:39   409,088   --a------   C:\WINDOWS\system32\vssapi.dll
2006-10-25   16:39   403,456   --a------   C:\WINDOWS\system32\winbrand.dll
2006-10-25   16:39   40,960   --a------   C:\WINDOWS\system32\tscupgrd.exe
2006-10-25   16:39   40,960   --a------   C:\WINDOWS\system32\tcpmonui.dll
2006-10-25   16:39   40,448   --a------   C:\WINDOWS\system32\webhits.dll
2006-10-25   16:39   40,448   --a------   C:\WINDOWS\system32\tcpmon.dll
2006-10-25   16:39   4,864   --a------   C:\WINDOWS\system32\drivers\viaide.sys
2006-10-25   16:39   4,736   --a------   C:\WINDOWS\system32\drivers\usbd.sys
2006-10-25   16:39   4,608   --a------   C:\WINDOWS\system32\vjoy.dll
2006-10-25   16:39   4,352   --a------   C:\WINDOWS\system32\drivers\wmilib.sys
2006-10-25   16:39   4,096   --a------   C:\WINDOWS\system32\winver.exe
2006-10-25   16:39   4,096   --a------   C:\WINDOWS\system32\unlodctr.exe
2006-10-25   16:39   384,000   --a------   C:\WINDOWS\system32\themeui.dll
2006-10-25   16:39   38,912   --a------   C:\WINDOWS\system32\wsnmp32.dll
2006-10-25   16:39   35,328   --a------   C:\WINDOWS\system32\winchat.exe
2006-10-25   16:39   343,552   --a------   C:\WINDOWS\system32\termmgr.dll
2006-10-25   16:39   340,480   --a------   C:\WINDOWS\system32\drivers\tcpip.sys
2006-10-25   16:39   339,456   --a------   C:\WINDOWS\system32\usp10.dll
2006-10-25   16:39   33,792   --a------   C:\WINDOWS\system32\vssadmin.exe
2006-10-25   16:39   33,280   --a------   C:\WINDOWS\system32\drivers\wanarp.sys
2006-10-25   16:39   32,256   --a------   C:\WINDOWS\system32\wupdmgr.exe
2006-10-25   16:39   32,256   --a------   C:\WINDOWS\system32\umandlg.dll
2006-10-25   16:39   316,416   --a------   C:\WINDOWS\system32\wiaservc.dll
2006-10-25   16:39   311,327   --a------   C:\WINDOWS\system32\wmv8dmod.dll
2006-10-25   16:39   31,744   --a------   C:\WINDOWS\system32\tracert6.exe
2006-10-25   16:39   31,232   --a------   C:\WINDOWS\system32\wpabaln.exe
2006-10-25   16:39   31,232   --a------   C:\WINDOWS\system32\traffic.dll
2006-10-25   16:39   302,080   --a------   C:\WINDOWS\system32\untfs.dll
2006-10-25   16:39   30,992   --a------   C:\WINDOWS\system32\vbajet32.dll
2006-10-25   16:39   3,072   --a------   C:\WINDOWS\system32\systray.exe
2006-10-25   16:39   296,448   --a------   C:\WINDOWS\system32\wmstream.dll
2006-10-25   16:39   29,184   --a------   C:\WINDOWS\system32\wpnpinst.exe
2006-10-25   16:39   28,721   --a------   C:\WINDOWS\system32\wshcon.dll
2006-10-25   16:39   275,456   --a------   C:\WINDOWS\system32\vssvc.exe
2006-10-25   16:39   268,800   --a------   C:\WINDOWS\system32\ulib.dll
2006-10-25   16:39   266,752   --a------   C:\WINDOWS\winhlp32.exe
2006-10-25   16:39   258,048   --a------   C:\WINDOWS\system32\webcheck.dll
2006-10-25   16:39   256,192   --a------   C:\WINDOWS\winhelp.exe
2006-10-25   16:39   25,600   --a------   C:\WINDOWS\twunk_32.exe
2006-10-25   16:39   25,600   --a------   C:\WINDOWS\system32\utildll.dll
2006-10-25   16:39   247,808   --a------   C:\WINDOWS\system32\wow32.dll
2006-10-25   16:39   24,064   --a------   C:\WINDOWS\system32\vdmdbg.dll
2006-10-25   16:39   231,424   --a------   C:\WINDOWS\system32\upnpui.dll
2006-10-25   16:39   22,016   --a------   C:\WINDOWS\system32\w32topl.dll
2006-10-25   16:39   22,016   --a------   C:\WINDOWS\system32\userinit.exe
2006-10-25   16:39   22,016   --a------   C:\WINDOWS\system32\udhisapi.dll
2006-10-25   16:39   21,504   --a------   C:\WINDOWS\system32\wsock32.dll
2006-10-25   16:39   208,896   --a------   C:\WINDOWS\system32\wavemsp.dll
2006-10-25   16:39   205,120   --a------   C:\WINDOWS\system32\drivers\tcpip6.sys
2006-10-25   16:39   203,264   --a------   C:\WINDOWS\system32\uxtheme.dll
2006-10-25   16:39   200,192   --a------   C:\WINDOWS\system32\termsrv.dll
2006-10-25   16:39   20,535   --a------   C:\WINDOWS\system32\vfpodbc.dll
2006-10-25   16:39   20,232   --a------   C:\WINDOWS\system32\drivers\tdtcp.sys
2006-10-25   16:39   2,864   --a------   C:\WINDOWS\system32\winsock.dll
2006-10-25   16:39   2,736   --a------   C:\WINDOWS\system32\wowdeb.exe
2006-10-25   16:39   2,112   --a------   C:\WINDOWS\system32\winspool.exe
2006-10-25   16:39   19,712   --a------   C:\WINDOWS\system32\drivers\vga.sys
2006-10-25   16:39   19,456   --a------   C:\WINDOWS\system32\tcpsvcs.exe
2006-10-25   16:39   19,328   --a------   C:\WINDOWS\system32\drivers\usbuhci.sys
2006-10-25   16:39   19,328   --a------   C:\WINDOWS\system32\drivers\usbehci.sys
2006-10-25   16:39   19,200   --a------   C:\WINDOWS\system32\tapi.dll
2006-10-25   16:39   18,944   --a------   C:\WINDOWS\vmmreg32.dll
2006-10-25   16:39   18,944   --a------   C:\WINDOWS\system32\ws2help.dll
2006-10-25   16:39   18,944   --a------   C:\WINDOWS\system32\wmiprop.dll
2006-10-25   16:39   18,944   --a------   C:\WINDOWS\system32\winstrm.dll
2006-10-25   16:39   18,432   --a------   C:\WINDOWS\system32\win.com
2006-10-25   16:39   18,176   --a------   C:\WINDOWS\system32\vga64k.dll
2006-10-25   16:39   177,856   --a------   C:\WINDOWS\system32\typelib.dll
2006-10-25   16:39   171,520   --a------   C:\WINDOWS\system32\winmm.dll
2006-10-25   16:39   17,920   --a------   C:\WINDOWS\system32\ureg.dll
2006-10-25   16:39   17,408   --a------   C:\WINDOWS\system32\wtsapi32.dll
2006-10-25   16:39   17,408   --a------   C:\WINDOWS\system32\wshtcpip.dll
2006-10-25   16:39   168,448   --a------   C:\WINDOWS\system32\wldap32.dll
2006-10-25   16:39   166,912   --a------   C:\WINDOWS\system32\wintrust.dll
2006-10-25   16:39   165,376   --a------   C:\WINDOWS\system32\w32time.dll
2006-10-25   16:39   165,376   --a------   C:\WINDOWS\system32\tapi32.dll
2006-10-25   16:39   164,864   --a------   C:\WINDOWS\system32\upnphost.dll
2006-10-25   16:39   16,896   --a------   C:\WINDOWS\system32\vss_ps.dll
2006-10-25   16:39   16,896   --a------   C:\WINDOWS\system32\tsshutdn.exe
2006-10-25   16:39   16,896   --a------   C:\WINDOWS\system32\tftp.exe
2006-10-25   16:39   16,384   --a------   C:\WINDOWS\system32\watchdog.sys
2006-10-25   16:39   16,384   --a------   C:\WINDOWS\system32\version.dll
2006-10-25   16:39   16,384   --a------   C:\WINDOWS\system32\ups.exe
2006-10-25   16:39   16,384   --a------   C:\WINDOWS\system32\tskill.exe
2006-10-25   16:39   16,256   --a------   C:\WINDOWS\system32\drivers\tdi.sys
2006-10-25   16:39   15,744   --a------   C:\WINDOWS\system32\drivers\usbohci.sys
2006-10-25   16:39   15,360   --a------   C:\WINDOWS\TASKMAN.EXE
2006-10-25   16:39   15,360   --a------   C:\WINDOWS\system32\tsd32.dll
2006-10-25   16:39   15,360   --a------   C:\WINDOWS\system32\taskman.exe
2006-10-25   16:39   145,408   --a------   C:\WINDOWS\system32\wiavusd.dll
2006-10-25   16:39   14,848   --a------   C:\WINDOWS\system32\winrnr.dll
2006-10-25   16:39   14,848   --a------   C:\WINDOWS\system32\usbmon.dll
2006-10-25   16:39   14,848   --a------   C:\WINDOWS\system32\upnpcont.exe
2006-10-25   16:39   14,848   --a------   C:\WINDOWS\system32\tsdiscon.exe
2006-10-25   16:39   14,848   --a------   C:\WINDOWS\system32\tscon.exe
2006-10-25   16:39   137,088   --a------   C:\WINDOWS\system32\drivers\update.sys
2006-10-25   16:39   135,552   --a------   C:\WINDOWS\system32\drivers\usbport.sys
2006-10-25   16:39   13,888   --a------   C:\WINDOWS\system32\toolhelp.dll
2006-10-25   16:39   13,824   --a------   C:\WINDOWS\system32\uniplat.dll
2006-10-25   16:39   13,824   --a------   C:\WIN
Logged
Guest
Guest
« Reply #3 on: November 11, 2006, 04:45:08 PM »

Hello, visitor!

The Hijack This log analyzer has analyzed your log. Please take a closer look on the results.

Your system seems to be infected with malicious parasites. Please follow the steps below in order to eliminate the infection and clean up your computer.

1.   Download the Pocket KillBox utility. You will need it later to delete parasite-related files and folders.
2. Use HijackThis to fix the following entries:

O3 - Toolbar: Search - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\WINDOWS\cfg32s.dll
O4 - HKLM\..\Run: [RelevantKnowledge] c:\windows\system32\rlvknlg.exe -boot


3. The following entries are not malicious, but some of them are not used anymore. You may use HijackThis to fix a few of them. However, please keep in mind that some of the entries marked as Questionable or Not Needed are fully legitimate and might be required by installed software to work properly, while some others might be related to certain parasites. It is up to you to decide whether you need any of them, or not.
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - Startup: HP Organize.lnk = ?
O8 - Extra context menu item: Add To HP Organize... - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin\core.hp.main\SendTo.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra ''Tools'' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra ''Tools'' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Filter: text/html - {AE3B25B6-4C21-4038-BD35-99A05B5EF3EB} - C:\WINDOWS\System32\s9ndzm6.dll


4. Now restart your system in Safe Mode. This step is very important!
5.   Use the Pocket KillBox utility to delete the following files:

c:\windows\system32\rlvknlg.exe
C:\WINDOWS\cfg32s.dll



The following files and Windows registry entries are marked as "unknown". Currently, the HijackThis Log Analyzer cannot provide required information on these items. The files and entries in the list below can be both malicious and fully legitimate. Because of this, please do not take any action! Wait for the forum responders or other forum users to provide you with necessary details and further instructions.
C:\Program Files\Sr\SrLogon.exe
C:\Program Files\Sr\AgentSvc.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Sr\AgentFrm.exe
C:\Program Files\Sr\compnts\Vr\PavSrv51.exe
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\program files\hp\digital imaging\bin\hpdtlk02.dll
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [Sr Agent] "C:\Program Files\Sr\SrLogon.exe"
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\PROGRA~1\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [dvlojx.dll] C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\dvlojx.dll,vhuojhb
O4 - HKLM\..\Run: [Kgjg] "C:\WINDOWS\System32\rnnypbw.exe"
O4 - Startup: IMStart.lnk = C:\Program Files\InterMute\IMStart.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Secure Resolutions Managed Agent (SR Agent) - Unknown owner - C:\Program Files\Sr\AgentSvc.exe

After going through all the steps, run another HijackThis scan and post a fresh log to the HijackThis analyzer. It is possible that some parasites your system was infected with were not removed completely and may restore themselves later.


If you want to see more detailed analysis of your log, click here.

Thank you for using the 2-Spyware.com HijackThis log analyzer!
Logged
sjpritch25
Newbie
*
Posts: 13



View Profile
« Reply #4 on: November 12, 2006, 07:46:57 PM »

You are still infected.  Its going to take me awhile to anaylse that combofix log.  But, i did find out you are infected with Vundo Trojan and possibly Trojan Zlob.  Please run these two programs and post both logs in your next reply.  

Please download
VundoFix.exe to your desktop.
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files,
click YES
  • Once you click yes, your desktop will go blank as it starts removing
Vundo.
  • When completed, it will prompt that it will shutdown your computer,
click OK.
  • Turn your computer back on.
  • Please post the contents of C:\vundofix.txt and a new
    HiJackThis log.
Note: It is possible that VundoFix encountered a file it could not
remove.
In this case, VundoFix will run on reboot, simply follow the above
instructions starting from "Click the Scan for

Vundo
button." when VundoFix appears at reboot.

=====================================

Download SmitfraudFix (by S!Ri) to your Desktop.
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd

Select option #1 - Search by typing 1 and press Enter

This program will scan large amounts of files on your computer for known patterns so please be patient while it works.  When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

IMPORTANT: Do NOT run any other options until you are asked to do so!
Logged

Pages: [1]
  Print  
 
Jump to:  




Recommended software:
STOPzilla
(90/100)
STOPzilla is a powerful anti-spyware program that detects, blocks, and removes malicious software allowing users to surf the Web not worrying about spyware, Trojan horses,...
Malwarebytes Anti Malware
(88/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t...
Spyware Doctor
(87/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and...
SpyHunter
(86/100)
SpyHunter is a quite simple, but yet highly effective spyware remover with an easy-to-use interface. This program is an excellent choice for users, who are...
XoftSpySE Anti Spyware
(84/100)
XoftSpySE, an anti-spyware program made by ParetoLogic, Inc., is a simple, but effective on-demand scanner with the typical set of functions but very easy to...
Encyclopedia of parasites:

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other