Spyware Detection Alert keep popping up at system tray

Author	Message
Don Joined: 29 Oct 2006 Posts: 4	Post subject: Spyware Detection Alert keep popping up at system tray Hello! THis is my first post. I'm having some trouble getting rid of the little "security warning alert" icon in the system tray that is normally associated with the SpyWare Quake program. The annoying blinking icon remains with the "security warning: your computer may be infected with harmful or unwanted software!" message popping up during startup windows XP. If I right click this icon either open or exit. If I click open it bring me to Spyware Detection Alert. if I click exit, it will gone and the next time I on my PC, it will pop up again. Hope can help me. Thanks in advance. Here' my log from HiJack This: Logfile of HijackThis v1.99.1 Scan saved at 10:02:55 PM, on 10/29/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Program Files\Spyware Doctor\sdhelp.exe C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\System32\WFXSVC.EXE C:\Program Files\WinFax\WFXMOD32.EXE C:\WINDOWS\System32\wwSecure.exe C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\program files\TV Capture Card\RecSche.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\PROGRA~1\WinFax\WFXSWTCH.exe C:\WINDOWS\system32\wfxsnt40.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Ahead\InCD\InCD.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\ICQLite\ICQLite.exe C:\Program Files\iPod\bin\iPodService.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Webroot\Washer\wwDisp.exe C:\WINDOWS\ASEMBL~1\rundll.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe C:\Program Files\Spyware Doctor\swdoctor.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\WinFax\WFXCTL32.EXE C:\Program Files\FinePixViewer\QuickDCF.exe C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE C:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\NJStar Chinese Calendar\NJCalend.exe C:\WINDOWS\system32\ntvdm.exe C:\Program Files\Microsoft Office\Office10\msoffice.exe C:\Program Files\Internet Explorer\iexplore.exe D:\My Downloads\Spyware Removal\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.singnet.com.sg/ R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {8bf5b8fc-11cb-409f-8c91-4d4ca04a1b6d} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O2 - BHO: (no name) - {c3703265-4671-4858-92a4-cba6a7b3bb45} - (no file) O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [RecSche] c:\program files\TV Capture Card\RecSche.exe /Startup O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [WFXSwtch] C:\PROGRA~1\WinFax\WFXSWTCH.exe O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [ICQ Lite] "C:\Program Files\ICQLite\ICQLite.exe" -minimize O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\system32\drvrup.dll,startup O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe" O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe /startup O4 - HKCU\..\Run: [Snae] "C:\WINDOWS\ASEMBL~1\rundll.exe" -vt yazb O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot O4 - HKCU\..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe "Don & Toni" O4 - Startup: NJStar Chinese Calendar.lnk = C:\Program Files\NJStar Chinese Calendar\NJCalend.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe O4 - Global Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe O4 - Global Startup: Controller.LNK = C:\Program Files\WinFax\WFXCTL32.EXE O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Norton System Doctor.lnk = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155371986609 O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - C:\WINDOWS\System32\WFXSVC.EXE O23 - Service: Washer AutoComplete (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\System32\wwSecure.exe Last edited by Don on Tue Oct 31, 2006 3:03 pm; edited 1 time in total
Sun Oct 29, 2006 3:18 pm
HJT Analyzer Joined: 15 Mar 2006 Posts: 611	Post subject: My HijackThis log Hello, visitor! The Hijack This log analyzer has analyzed your log. Please take a closer look on the results. Your system seems to be infected with malicious parasites. Please follow the steps below in order to eliminate the infection and clean up your computer. 1. Download the Pocket KillBox utility. You will need it later to delete parasite-related files and folders. 2. Use HijackThis to fix the following entries: O4 - HKCU\..\Run: [Snae] "C:\WINDOWS\ASEMBL~1\rundll.exe" -vt yazb 3. The following entries are not malicious, but some of them are not used anymore. You may use HijackThis to fix a few of them. However, please keep in mind that some of the entries marked as Questionable or Not Needed are fully legitimate and might be required by installed software to work properly, while some others might be related to certain parasites. It is up to you to decide whether you need any of them, or not. C:\WINDOWS\ASEMBL~1\rundll.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.singnet.com.sg/ R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) O2 - BHO: (no name) - {8bf5b8fc-11cb-409f-8c91-4d4ca04a1b6d} - (no file) O2 - BHO: (no name) - {c3703265-4671-4858-92a4-cba6a7b3bb45} - (no file) O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe /startup O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra ''Tools'' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra ''Tools'' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL 4. Now restart your system in Safe Mode. This step is very important! 5. Use the Pocket KillBox utility to delete the following files: C:\WINDOWS\ASEMBL~1\rundll.exe The following files and Windows registry entries are marked as "unknown". Currently, the HijackThis Log Analyzer cannot provide required information on these items. The files and entries in the list below can be both malicious and fully legitimate. Because of this, please do not take any action! Wait for the forum responders or other forum users to provide you with necessary details and further instructions. C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\WINDOWS\System32\WFXSVC.EXE C:\Program Files\WinFax\WFXMOD32.EXE C:\program files\TV Capture Card\RecSche.exe C:\WINDOWS\system32\wfxsnt40.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Webroot\Washer\wwDisp.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\WinFax\WFXCTL32.EXE C:\Program Files\NJStar Chinese Calendar\NJCalend.exe C:\Program Files\Microsoft Office\Office10\msoffice.exe O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [RecSche] c:\program files\TV Capture Card\RecSche.exe /Startup O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\system32\drvrup.dll,startup O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - Startup: NJStar Chinese Calendar.lnk = C:\Program Files\NJStar Chinese Calendar\NJCalend.exe O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe O4 - Global Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe O4 - Global Startup: Controller.LNK = C:\Program Files\WinFax\WFXCTL32.EXE O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe After going through all the steps, run another HijackThis scan and post a fresh log to the HijackThis analyzer. It is possible that some parasites your system was infected with were not removed completely and may restore themselves later. If you want to see more detailed analysis of your log, click here. Thank you for using the 2-Spyware.com HijackThis log analyzer!
Sun Oct 29, 2006 3:19 pm
sjpritch25 Joined: 16 Sep 2006 Posts: 13	Post subject: Welcome to 2-Spyware.com Download SmitfraudFix (by S!Ri) to your Desktop. http://siri.urz.free.fr/Fix/SmitfraudFix.zip Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop. Open the SmitfraudFix folder and double-click smitfraudfix.cmd Select option #1 - Search by typing 1 and press Enter This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply. Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. http://www.beyondlogic.org/consulting/proc...processutil.htm IMPORTANT: Do NOT run any other options until you are asked to do so! _________________
Mon Oct 30, 2006 1:33 am
Don Joined: 29 Oct 2006 Posts: 4	Post subject: SmitFraudFix Log Here is the log. Thanks. SmitFraudFix v2.114 Scan done at 2:00:29.15, Tue 10/31/2006 Run from C:\Documents and Settings\Don & Toni\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\DON »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="apitrap.dll" »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32 »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End Last edited by Don on Tue Oct 31, 2006 4:28 pm; edited 1 time in total
Mon Oct 30, 2006 6:02 pm
Don Joined: 29 Oct 2006 Posts: 4	Post subject: And this is the Hijack log: Logfile of HijackThis v1.99.1 Scan saved at 2:12:11 AM, on 10/31/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\igfxtray.exe C:\WINDOWS\System32\hkcmd.exe C:\program files\TV Capture Card\RecSche.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\PROGRA~1\WinFax\WFXSWTCH.exe C:\WINDOWS\system32\wfxsnt40.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Ahead\InCD\InCD.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\ICQLite\ICQLite.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Webroot\Washer\wwDisp.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Spyware Doctor\swdoctor.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Program Files\Spyware Doctor\sdhelp.exe C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\System32\WFXSVC.EXE C:\WINDOWS\System32\wwSecure.exe C:\Program Files\WinFax\WFXMOD32.EXE C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe C:\Program Files\WinFax\WFXCTL32.EXE C:\Program Files\FinePixViewer\QuickDCF.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe C:\WINDOWS\system32\ntvdm.exe C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE C:\WINDOWS\System32\alg.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\NJStar Chinese Calendar\NJCalend.exe C:\Program Files\Microsoft Office\Office10\msoffice.exe C:\Program Files\Internet Explorer\iexplore.exe D:\My Downloads\Spyware Removal\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.singnet.com.sg/ O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [RecSche] c:\program files\TV Capture Card\RecSche.exe /Startup O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [WFXSwtch] C:\PROGRA~1\WinFax\WFXSWTCH.exe O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [ICQ Lite] "C:\Program Files\ICQLite\ICQLite.exe" -minimize O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\system32\drvrup.dll,startup O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe" O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe /startup O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot O4 - HKCU\..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe "Don & Toni" O4 - Startup: NJStar Chinese Calendar.lnk = C:\Program Files\NJStar Chinese Calendar\NJCalend.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe O4 - Global Startup: CleanSweep Smart Sweep-Internet Sweep.lnk = C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe O4 - Global Startup: Controller.LNK = C:\Program Files\WinFax\WFXCTL32.EXE O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Norton System Doctor.lnk = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1155371986609 O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - C:\WINDOWS\System32\WFXSVC.EXE O23 - Service: Washer AutoComplete (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\System32\wwSecure.exe
Mon Oct 30, 2006 6:13 pm
GTO Joined: 15 Nov 2005 Posts: 1519	Post subject: Hi Don. Your last log looks clean to me . Do you still have any spyware problems?
Tue Oct 31, 2006 7:48 am
Don Joined: 29 Oct 2006 Posts: 4	Post subject: The annoying blinking icon (A shield with haif Red and half Green and a Question Mark in the center of the shield) at the bottom right side task bar near the clock still remains saying that "security warning: your computer may be infected with harmful or unwanted software!" I tried update Spyware Doctor, Search & Destroy. Ad-aware professional and Norton SystemWorks then scan through but nothing found and the annoying blinking icon still popping up. I think I might need to permanently hide this icon (don't know whether will affect the PC health or not?)or reformat the Drive.
Tue Oct 31, 2006 1:51 pm
GTO Joined: 15 Nov 2005 Posts: 1519	Post subject: Hi Don. Don't format your drive. Please try the following. Download the SmitFraudFix tool, restart your system in Safe Mode and run a scan. Detailed SmitFraudFix guide can be found on the official web site.
Tue Oct 31, 2006 5:10 pm
Don Joined: 29 Oct 2006 Posts: 4	Post subject: I Download the SmitFraudFix tool, restart your system in Safe Mode and run a scan and delete. But nothing seem to be found and the annoying blinking icon still remain.
Tue Oct 31, 2006 6:54 pm
GTO Joined: 15 Nov 2005 Posts: 1519	Post subject: Hi Don. Let's try this: 1. Download the smitRem tool and unpack its files to a chosen folder. 2. Restart your system in Safe Mode. 3. Once in Safe Mode, run the smitRem tool by executing the RunThis.bat file. The smitRem tutorial can be found here. If this doesn't help, I would like to see the content of your system directory. You may have the new variant of Spyware Quake. Open the Command Prompt (Start > Programs > Accessories > Command Prompt) and enter the following command: dir C:\WINDOWS\System32\*.dll > C:\files.txt This will create a text file named files.txt in the root of your C: drive. Open the file, select all lines in it and paste them here, or send them to me as a private message.
Tue Oct 31, 2006 8:43 pm
Don Joined: 29 Oct 2006 Posts: 4	Post subject: SmitRem Log smitRem © log file version 3.2 by noahdfear Microsoft Windows XP [Version 5.1.2600] "IE"="6.0000" The current date is: Wed 11/01/2006 The current time is: 19:49:34.85 Running from C:\Documents and Settings\Don & Toni\Desktop\smitRem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Pre-run SharedTask Export (GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler) Copyright(C) 2006 BleepingComputer.com Registry Pseudo-Format Mode (Not a valid reg file): [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32] @="%SystemRoot%\System32\browseui.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32] @="%SystemRoot%\System32\browseui.dll" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Appinitdll check ........ Thank you Grinler! dumphive.exe (C)2000-2004 Markus Stephany REGEDIT4 [Windows] "AppInit_DLLs"="apitrap.dll" "DeviceNotSelectedTimeout"="15" "GDIProcessHandleQuota"=dword:00002710 "Spooler"="yes" "swapdisk"="" "TransmissionRetryTimeout"="90" "USERProcessHandleQuota"=dword:00002710 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ XP Firewall allowed access Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:Enabled:BlueSoleil" "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger" "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0" "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ checking for ShudderLTD key ShudderLTD key not present! checking for PSGuard.com key PSGuard.com key not present! checking for WinHound.com key WinHound.com key not present! checking for drsmartload2 key drsmartload2 key not present! spyaxe uninstaller NOT present Winhound uninstaller NOT present SpywareStrike uninstaller NOT present AlfaCleaner uninstaller NOT present SpyFalcon uninstaller NOT present SpywareQuake uninstaller NOT present SpywareSheriff uninstaller NOT present Trust Cleaner uninstaller NOT present SpyHeal uninstaller NOT present VirusBurst uninstaller NOT present BraveSentry uninstaller NOT present AntiVermins uninstaller NOT present ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Existing Pre-run Files ~~~ Program Files ~~~ ~~~ Shortcuts ~~~ ~~~ Favorites ~~~ ~~~ system32 folder ~~~ amcompat.tlb nscompat.tlb ~~~ Icons in System32 ~~~ ~~~ Windows directory ~~~ ~~~ Drive root ~~~ ~~~ Miscellaneous Files/folders ~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03 Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org Killing PID 776 'explorer.exe' Starting registry repairs Registry repairs complete ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SharedTask Export after registry fix (GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler) Copyright(C) 2006 BleepingComputer.com Registry Pseudo-Format Mode (Not a valid reg file): [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32] @="%SystemRoot%\System32\browseui.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32] @="%SystemRoot%\System32\browseui.dll" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Deleting files ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Remaining Post-run Files ~~~ Program Files ~~~ ~~~ Shortcuts ~~~ ~~~ Favorites ~~~ ~~~ system32 folder ~~~ ~~~ Icons in System32 ~~~ ~~~ Windows directory ~~~ ~~~ Drive root ~~~ ~~~ Miscellaneous Files/folders ~~~ ~~~ Wininet.dll ~~~ CLEAN!
Wed Nov 01, 2006 12:46 pm
Don Joined: 29 Oct 2006 Posts: 4	Post subject: But the problem still exist.
Wed Nov 01, 2006 12:47 pm
Don Joined: 29 Oct 2006 Posts: 4	Post subject: content of your system directory Volume in drive C is IBM 40GB Volume Serial Number is DC37-F164 Directory of C:\WINDOWS\System32 02/01/2002 05:50 AM 94,208 34api.dll 02/01/2002 05:50 AM 90,112 34com.dll 02/01/2002 05:50 AM 73,728 34dd.dll 02/01/2002 05:50 AM 90,112 34dialog.dll 02/01/2002 05:50 AM 24,576 34I2Curd.dll 02/01/2002 05:50 AM 24,576 34PCIurd.dll 02/01/2002 05:50 AM 69,632 34TvCtrl.dll 02/01/2002 05:50 AM 86,016 34vcap32.dll 08/16/2006 07:58 PM 100,352 6to4svc.dll 08/23/2001 08:00 PM 25,600 aaaamon.dll 08/23/2001 08:00 PM 64,512 acctres.dll 08/23/2001 08:00 PM 129,536 acledit.dll 08/04/2004 12:56 AM 114,688 aclui.dll 08/04/2004 12:56 AM 194,048 activeds.dll 08/04/2004 12:56 AM 101,888 actxprxy.dll 08/04/2004 12:56 AM 61,440 admparse.dll 08/23/2001 08:00 PM 26,112 adptif.dll 08/04/2004 12:56 AM 175,616 adsldp.dll 08/04/2004 12:56 AM 143,360 adsldpc.dll 08/04/2004 12:56 AM 68,096 adsmsext.dll 08/23/2001 08:00 PM 161,792 adsnds.dll 08/04/2004 12:56 AM 263,680 adsnt.dll 08/23/2001 08:00 PM 109,568 adsnw.dll 08/04/2004 12:56 AM 616,960 advapi32.dll 08/04/2004 12:56 AM 99,840 advpack.dll 08/04/2004 12:56 AM 17,408 alrsvc.dll 08/04/2004 12:56 AM 70,656 amstream.dll 08/23/2001 08:00 PM 102,912 apcups.dll 08/13/2002 05:00 PM 86,016 apitrap.dll 08/04/2004 12:56 AM 126,976 apphelp.dll 08/04/2004 12:56 AM 167,936 appmgmts.dll 08/04/2004 12:56 AM 295,936 appmgr.dll 08/11/2004 01:45 AM 8,192 asferror.dll 08/04/2004 12:56 AM 65,024 asycfilt.dll 01/29/2004 10:08 PM 32,768 ATHPRXY.DLL 08/04/2004 12:56 AM 229,376 ati2cqag.dll 08/04/2004 12:56 AM 377,984 ati2dvaa.dll 08/04/2004 12:56 AM 201,728 ati2dvag.dll 08/04/2004 12:56 AM 870,784 ati3d1ag.dll 08/04/2004 12:56 AM 1,057,760 ati3d2ag.dll 08/04/2004 12:56 AM 1,888,992 ati3duag.dll 08/04/2004 12:56 AM 32,768 ativtmxx.dll 08/04/2004 12:56 AM 516,768 ativvaxx.dll 08/23/2001 08:00 PM 13,312 atkctrs.dll 08/04/2004 12:56 AM 58,880 atl.dll 03/18/2003 09:05 PM 89,088 atl71.dll 08/04/2004 12:56 AM 285,696 atmfd.dll 08/04/2004 12:56 AM 30,208 atmlib.dll 08/23/2001 08:00 PM 34,816 atmpvcno.dll 08/23/2001 08:00 PM 11,264 atrace.dll 08/11/2004 01:45 AM 480,768 Audiodev.dll 08/04/2004 12:56 AM 42,496 audiosrv.dll 03/03/2005 02:09 AM 56,832 authz.dll 08/23/2001 08:00 PM 80,384 autodisc.dll 08/23/2001 08:00 PM 69,584 avicap.dll 08/23/2001 08:00 PM 64,000 avicap32.dll 08/04/2004 12:56 AM 84,992 avifil32.dll 08/23/2001 08:00 PM 109,456 avifile.dll 08/23/2001 08:00 PM 16,384 avmeter.dll 08/23/2001 08:00 PM 227,840 avtapi.dll 08/23/2001 08:00 PM 73,216 avwav.dll 10/28/2005 11:49 PM 133,120 axaltocm.dll 10/28/2005 04:40 PM 96,792 basecsp.dll 08/04/2004 12:56 AM 52,736 basesrv.dll 08/04/2004 12:56 AM 28,672 batmeter.dll 08/04/2004 12:56 AM 8,704 batt.dll 10/28/2005 11:49 PM 25,600 bcsprsrc.dll 08/04/2004 12:56 AM 17,408 bidispl.dll 08/04/2004 12:56 AM 8,192 bitsprx2.dll 08/04/2004 12:56 AM 7,168 bitsprx3.dll 01/28/2005 01:44 PM 294,912 blackbox.dll 08/23/2001 08:00 PM 12,288 bootvid.dll 08/04/2004 12:56 AM 63,488 browselc.dll 08/04/2004 12:56 AM 77,312 browser.dll 06/23/2006 07:25 PM 1,022,976 browseui.dll 08/04/2004 12:56 AM 78,336 browsewm.dll 06/13/2006 06:18 PM 129,536 btfunc.dll 08/04/2004 12:56 AM 20,992 bthci.dll 08/04/2004 12:56 AM 30,208 bthserv.dll 09/21/2004 06:18 PM 7,680 btinstall.dll 08/04/2004 12:56 AM 50,688 btpanui.dll 08/04/2004 12:56 AM 59,904 cabinet.dll 08/04/2004 12:56 AM 84,480 cabview.dll 08/04/2004 12:56 AM 50,688 camocx.dll 08/23/2001 08:00 PM 142,848 capesnpn.dll 08/23/2001 08:00 PM 359,936 cards.dll 07/26/2005 12:39 PM 225,792 catsrv.dll 08/04/2004 12:56 AM 85,504 catsrvps.dll 07/26/2005 12:39 PM 625,152 catsrvut.dll 08/23/2001 08:00 PM 27,648 ccfgnt.dll 08/19/2002 10:23 PM 100,040 ccPasswd.dll 08/08/2002 09:29 PM 87,752 ccTrust.dll 12/07/2005 12:31 PM 202,752 CddbCdda.dll 06/23/2006 07:25 PM 151,040 cdfview.dll 05/26/2005 04:16 AM 75,544 cdm.dll 08/23/2001 08:00 PM 15,872 cdmodem.dll 09/10/2005 09:53 AM 2,067,968 cdosys.dll 08/04/2004 12:56 AM 194,560 certcli.dll 08/04/2004 12:56 AM 457,728 certmgr.dll 01/28/2005 01:44 PM 164,864 cewmdm.dll 08/04/2004 12:56 AM 38,912 cfgbkend.dll 08/04/2004 12:56 AM 16,896 cfgmgr32.dll 08/18/2001 08:00 PM 1,677,824 chsbrkr.dll 08/18/2001 08:00 PM 838,144 chtbrkr.dll 08/23/2001 08:00 PM 163,328 ciadmin.dll 08/23/2001 08:00 PM 109,568 cic.dll 06/22/2006 01:06 PM 69,120 ciodm.dll 08/23/2001 08:00 PM 10,752 clb.dll 07/26/2005 12:39 PM 110,080 clbcatex.dll 07/26/2005 12:39 PM 498,688 clbcatq.dll 08/04/2004 12:56 AM 77,824 cliconfg.dll 08/12/2006 12:40 PM 203,776 clrviddc.dll 08/04/2004 12:56 AM 57,856 clusapi.dll 08/04/2004 12:56 AM 15,872 cmcfg32.dll 08/04/2004 12:56 AM 343,040 cmdial32.dll 08/23/2001 08:00 PM 14,336 cmpbk32.dll 08/04/2004 12:56 AM 185,344 cmprops.dll 08/04/2004 12:56 AM 13,824 cmsetacl.dll 08/04/2004 12:56 AM 39,936 cmutil.dll 08/04/2004 12:56 AM 47,104 cnbjmon.dll 08/23/2001 08:00 PM 32,768 cnetcfg.dll 08/23/2001 08:00 PM 26,624 cnvfat.dll 07/26/2005 12:39 PM 60,416 colbact.dll 08/23/2001 08:00 PM 25,600 comaddin.dll 08/23/2001 08:00 PM 3,584 comcat.dll 08/25/2006 11:45 PM 617,472 comctl32.dll 08/04/2004 12:56 AM 276,992 comdlg32.dll 08/23/2001 08:00 PM 32,816 commdlg.dll 08/04/2004 12:56 AM 252,928 compatui.dll 08/23/2001 08:00 PM 30,160 compobj.dll 08/04/2004 12:56 AM 229,376 compstui.dll 07/26/2005 12:39 PM 97,792 comrepl.dll 08/04/2004 12:56 AM 792,064 comres.dll 08/23/2001 08:00 PM 147,456 comsnap.dll 07/26/2005 12:39 PM 1,267,200 comsvcs.dll 07/26/2005 12:39 PM 540,160 comuid.dll 08/23/2001 08:00 PM 345,600 confmsp.dll 06/05/2006 02:04 PM 242,688 ConnAPI.dll 08/23/2001 08:00 PM 66,560 console.dll 08/04/2004 12:56 AM 35,328 corpol.dll 08/04/2004 12:56 AM 163,840 credui.dll 11/08/1998 04:00 PM 229,888 Crpaig32.dll 11/08/1998 04:00 PM 5,350,912 Crpe32.dll 08/23/2001 08:00 PM 149,019 crtdll.dll 08/04/2004 12:56 AM 597,504 crypt32.dll 08/04/2004 12:56 AM 74,752 cryptdlg.dll 08/04/2004 12:56 AM 33,280 cryptdll.dll 08/04/2004 12:56 AM 53,760 cryptext.dll 08/04/2004 12:56 AM 63,488 cryptnet.dll 08/04/2004 12:56 AM 60,416 cryptsvc.dll 08/04/2004 12:56 AM 512,512 cryptui.dll 08/04/2004 12:56 AM 101,888 cscdll.dll 08/04/2004 12:56 AM 326,656 cscui.dll 08/04/2004 12:56 AM 32,768 csrsrv.dll 08/23/2001 08:00 PM 73,728 csseqchk.dll 08/23/2001 08:00 PM 27,136 ctl3d32.dll 08/23/2001 08:00 PM 27,200 ctl3dv2.dll 08/23/2001 08:00 PM 218,112 c_g18030.dll 08/23/2001 08:00 PM 6,656 c_is2022.dll 08/04/2004 12:56 AM 1,179,648 d3d8.dll 08/04/2004 12:56 AM 8,192 d3d8thk.dll 08/04/2004 12:56 AM 1,689,088 d3d9.dll 08/23/2001 08:00 PM 436,224 d3dim.dll 08/04/2004 12:56 AM 825,344 d3dim700.dll 08/23/2001 08:00 PM 34,816 d3dpmesh.dll 08/23/2001 08:00 PM 590,336 d3dramp.dll 08/23/2001 08:00 PM 350,208 d3drm.dll 08/23/2001 08:00 PM 47,616 d3dxof.dll 07/04/2006 02:26 PM 704,000 DAAPI.dll 06/23/2006 07:25 PM 1,054,208 danim.dll 08/04/2004 12:56 AM 54,272 dataclen.dll 08/23/2001 08:00 PM 152,064 datime.dll 08/04/2004 12:56 AM 24,576 davclnt.dll 08/23/2001 08:00 PM 847,872 dbgeng.dll 08/04/2004 12:56 AM 640,000 dbghelp.dll 08/29/2002 03:40 AM 20,480 dbmsadsn.dll 08/04/2004 12:56 AM 24,576 dbmsrpcn.dll 08/29/2002 12:36 AM 24,576 dbmsvinn.dll 08/04/2004 12:56 AM 110,592 dbnetlib.dll 08/04/2004 12:56 AM 28,672 dbnmpntw.dll 09/28/2000 11:58 PM 104,960 DCCEXT32.DLL 09/28/2000 11:58 PM 144,384 DCCMSP32.DLL 09/28/2000 11:58 PM 37,888 DCCWFP32.DLL 08/04/2004 12:56 AM 8,704 dciman32.dll 08/13/2002 05:00 PM 182,784 ddao35.dll 08/23/2001 08:00 PM 39,424 ddeml.dll 08/04/2004 12:56 AM 266,240 ddraw.dll 08/04/2004 12:56 AM 27,136 ddrawex.dll 08/23/2001 08:00 PM 16,384 deskadp.dll 08/23/2001 08:00 PM 16,896 deskmon.dll 08/23/2001 08:00 PM 18,432 deskperf.dll 08/04/2004 12:56 AM 59,904 devenum.dll 08/04/2004 12:56 AM 282,624 devmgr.dll 08/23/2001 08:00 PM 51,200 dfrgres.dll 08/04/2004 12:56 AM 38,912 dfrgsnap.dll 08/04/2004 12:56 AM 123,904 dfrgui.dll 09/23/2005 07:28 AM 83,456 dfshim.dll 08/04/2004 12:56 AM 28,672 dfsshlex.dll 08/04/2004 12:56 AM 111,104 dgnet.dll 08/23/2001 08:00 PM 176,157 dgrpsetu.dll 08/23/2001 08:00 PM 85,020 dgsetup.dll 05/19/2006 08:59 PM 111,616 dhcpcsvc.dll 08/23/2001 08:00 PM 370,176 dhcpmon.dll 08/23/2001 08:00 PM 74,240 dhcpsapi.dll 08/23/2001 08:00 PM 394,240 diactfrm.dll 08/04/2004 12:56 AM 68,608 digest.dll 08/23/2001 08:00 PM 44,032 dimap.dll 08/04/2004 12:56 AM 159,232 dinput.dll 08/04/2004 12:56 AM 181,760 dinput8.dll 08/23/2001 08:00 PM 1,501,696 diskcopy.dll 08/23/2001 08:00 PM 45,083 dispex.dll 07/04/2006 05:40 AM 620,180 DivX.dll 06/21/2006 06:33 PM 12,288 DivXWMPExtType.dll 07/04/2006 05:40 AM 778,240 divx_xx07.dll 07/04/2006 05:40 AM 778,240 divx_xx0c.dll 07/04/2006 05:40 AM 761,856 divx_xx11.dll 08/04/2004 12:56 AM 28,672 dmband.dll 08/04/2004 12:56 AM 61,440 dmcompos.dll 08/23/2001 08:00 PM 330,752 dmconfig.dll 08/23/2001 08:00 PM 273,920 dmdlgs.dll 08/04/2004 12:56 AM 200,704 dmdskmgr.dll 08/23/2001 08:00 PM 118,784 dmdskres.dll 08/04/2004 12:56 AM 181,248 dmime.dll 08/23/2001 08:00 PM 18,432 dmintf.dll 08/04/2004 12:56 AM 35,840 dmloader.dll 08/23/2001 08:00 PM 19,456 dmocx.dll 08/04/2004 12:56 AM 82,432 dmscript.dll 08/04/2004 12:56 AM 23,552 dmserver.dll 08/04/2004 12:56 AM 105,984 dmstyle.dll 08/04/2004 12:56 AM 103,424 dmsynth.dll 08/04/2004 12:56 AM 104,448 dmusic.dll 08/04/2004 12:56 AM 52,224 dmutil.dll 06/27/2006 01:37 AM 148,480 dnsapi.dll 08/04/2004 12:56 AM 45,568 dnsrslvr.dll 08/23/2001 08:00 PM 46,080 docprop.dll 08/04/2004 12:56 AM 48,128 docprop2.dll 08/04/2004 12:56 AM 96,768 dpcdll.dll 08/04/2006 11:37 PM 73,728 dpl100.dll 08/23/2001 08:00 PM 33,040 dplay.dll 08/04/2004 12:56 AM 229,888 dplayx.dll 08/04/2004 12:56 AM 23,552 dpmodemx.dll 08/04/2004 12:56 AM 3,584 dpnaddr.dll 08/04/2004 12:56 AM 375,296 dpnet.dll 08/04/2004 12:56 AM 35,328 dpnhpast.dll 08/04/2004 12:56 AM 60,928 dpnhupnp.dll 08/04/2004 12:56 AM 3,584 dpnlobby.dll 08/23/2001 08:00 PM 62,464 dpnmodem.dll 08/23/2001 08:00 PM 61,952 dpnwsock.dll 08/23/2001 08:00 PM 53,520 dpserial.dll 06/21/2006 06:34 PM 294,912 dpu10.dll 06/21/2006 06:34 PM 294,912 dpu11.dll 06/21/2006 06:49 PM 53,248 dpuGUI10.dll 06/21/2006 06:34 PM 593,920 dpuGUI11.dll 06/21/2006 06:34 PM 344,064 dpus11.dll 06/21/2006 06:34 PM 57,344 dpv11.dll 08/04/2004 12:56 AM 21,504 dpvacm.dll 08/04/2004 12:56 AM 212,480 dpvoice.dll 08/04/2004 12:56 AM 116,736 dpvvox.dll 08/23/2001 08:00 PM 42,768 dpwsock.dll 08/04/2004 12:56 AM 57,344 dpwsockx.dll 01/28/2005 01:44 PM 258,296 drmclien.dll 01/28/2005 01:44 PM 96,768 drmstor.dll 01/28/2005 01:44 PM 502,272 drmv2clt.dll 08/04/2004 12:56 AM 14,336 drprov.dll 10/28/2006 12:46 PM 53,760 drvrup.dll 08/23/2001 08:00 PM 4,656 ds16gt.dLL 08/04/2004 12:56 AM 16,384 ds32gt.dll 08/23/2001 08:00 PM 62,976 dsauth.dll 08/04/2004 12:56 AM 181,760 dsdmo.dll 08/04/2004 12:56 AM 71,680 dsdmoprp.dll 08/04/2004 12:56 AM 92,672 dskquota.dll 08/23/2001 08:00 PM 144,384 dskquoui.dll 08/04/2004 12:56 AM 367,616 dsound.dll 08/04/2004 12:56 AM 1,294,336 dsound3d.dll 08/04/2004 12:56 AM 142,336 dsprop.dll 08/04/2004 12:56 AM 4,096 dsprpres.dll 08/04/2004 12:56 AM 239,104 dsquery.dll 08/04/2004 12:56 AM 51,200 dssec.dll 08/03/2004 10:31 PM 137,216 dssenh.dll 08/04/2004 12:56 AM 113,152 dsuiext.dll 08/04/2004 12:56 AM 19,456 dswave.dll 08/04/2006 11:37 PM 196,608 dtu100.dll 08/04/2004 12:56 AM 304,128 duser.dll 02/28/2003 04:34 PM 313,856 dx3j.dll 08/04/2004 12:56 AM 619,008 dx7vb.dll 08/04/2004 12:56 AM 1,227,264 dx8vb.dll 08/04/2004 12:56 AM 2,113,536 dxdiagn.dll 08/04/2004 12:56 AM 498,205 dxmasf.dll 06/23/2006 07:25 PM 357,888 dxtmsft.dll 06/23/2006 07:25 PM 205,312 dxtrans.dll 08/04/2004 12:56 AM 26,624 efsadu.dll 08/04/2004 12:56 AM 183,296 els.dll 08/04/2004 12:56 AM 20,480 encapi.dll 08/04/2004 12:56 AM 186,368 encdec.dll 08/23/2001 08:00 PM 103,424 EqnClass.Dll 08/04/2004 12:56 AM 23,040 ersvc.dll 07/26/2005 12:39 PM 243,200 es.dll 10/21/2005 06:20 AM 1,082,368 esent.dll 08/23/2001 08:00 PM 1,114,896 esent97.dll 08/23/2001 08:00 PM 17,408 esentprf.dll 08/23/2001 08:00 PM 33,280 eventcls.dll 08/04/2004 12:56 AM 55,808 eventlog.dll 08/04/2004 12:56 AM 380,957 expsrv.dll 06/23/2006 07:25 PM 55,808 extmgr.dll 08/23/2001 08:00 PM 121,856 exts.dll 08/23/2001 08:00 PM 7,168 f3ahvoas.dll 08/04/2004 12:56 AM 80,384 faultrep.dll 02/13/2002 12:00 AM 45,056 FCLKBTN.DLL 08/23/2001 08:00 PM 117,760 fde.dll 08/04/2004 12:56 AM 73,728 fdeploy.dll 08/04/2004 12:56 AM 21,504 feclient.dll 05/15/2002 09:36 PM 217,088 FF05DA0D.dll 04/22/2002 07:08 PM 274,432 FFTIFF16.dll 08/04/2004 12:56 AM 337,920 filemgmt.dll 02/27/2002 01:27 AM 65,536 FINFCHECK.dll 06/25/2002 10:06 AM 45,056 FINFCOPY.dll 08/04/2004 12:56 AM 87,552 fldrclnr.dll 08/21/2006 08:21 PM 16,896 fltlib.dll 09/25/2003 12:07 PM 1,139,472 FM20.DLL 08/18/2003 02:26 PM 25,872 FM20ENU.DLL 08/23/2001 08:00 PM 16,384 fmifs.dll 08/04/2004 12:56 AM 382,976 fontext.dll 10/18/2005 05:14 AM 80,896 fontsub.dll 08/04/2004 12:56 AM 9,344 framebuf.dll 02/05/2002 06:33 AM 69,632 FREGSHEX.DLL 08/23/2001 08:00 PM 81,408 fsusd.dll 08/23/2001 08:00 PM 176,128 ftsrch.dll 08/04/2004 12:56 AM 60,416 fwcfg.dll 08/23/2001 08:00 PM 76,800 gcdef.dll 12/29/2005 10:54 AM 280,064 gdi32.dll 05/31/2005 10:20 AM 79,432 GEARAspi.dll 08/23/2001 08:00 PM 605,696 getuname.dll 08/23/2001 08:00 PM 285,184 glmf32.dll 08/04/2004 12:56 AM 122,880 glu32.dll 08/04/2004 12:56 AM 566,784 gpedit.dll 08/23/2001 08:00 PM 101,888 gpkcsp.dll 08/04/2004 12:56 AM 9,728 gpkrsrc.dll 08/04/2004 12:56 AM 198,656 gptext.dll 08/04/2004 12:56 AM 614,912 h323msp.dll 08/03/2004 10:59 PM 131,968 HAL.DLL 08/04/2004 12:56 AM 7,168 hccoin.dll 02/10/2004 10:50 AM 118,784 hccutils.dll 03/20/2002 10:01 PM 446,464 HHActiveX.dll 05/27/2005 10:04 AM 41,472 hhsetup.dll 08/04/2004 12:56 AM 20,992 hid.dll 07/21/2006 04:24 PM 72,704 hlink.dll 08/04/2004 12:56 AM 344,064 hnetcfg.dll 08/23/2001 08:00 PM 14,848 hnetmon.dll 08/04/2004 12:56 AM 330,752 hnetwiz.dll 08/04/2004 12:56 AM 144,896 hotplug.dll 12/12/2001 08:33 AM 274,432 hpfinst.dll 04/22/2002 09:06 AM 364,544 hpgt23.dll 02/28/2003 11:10 AM 274,432 hpgwiamd.dll 10/18/2002 05:41 AM 135,168 hpsjvset.dll 12/12/2001 08:33 AM 200,704 hpzcoi04.dll 12/12/2001 08:33 AM 262,144 hpzcon04.dll 12/12/2001 08:33 AM 114,744 hpzlnt04.dll 08/04/2004 12:56 AM 32,285 hsfcisp2.dll 08/23/2001 08:00 PM 44,544 hticons.dll 08/04/2004 12:56 AM 24,576 httpapi.dll 08/04/2004 12:56 AM 41,984 htui.dll 11/18/2004 01:41 AM 347,136 hypertrm.dll 05/22/2002 12:43 PM 61,440 iAlmCoIn_0_pv1102.dll 02/10/2004 11:10 AM 61,440 iAlmCoIn_v3762.dll 02/10/2004 11:16 AM 739,387 ialmdd5.dll 02/10/2004 11:09 AM 126,651 ialmdev5.dll 02/10/2004 11:10 AM 103,484 ialmdnt5.dll 02/10/2004 11:09 AM 471,040 ialmgdev.dll 02/10/2004 11:07 AM 2,273,280 ialmgicd.dll 02/10/2004 11:10 AM 49,152 ialmrem.dll 02/10/2004 11:10 AM 36,415 ialmrnt5.dll 08/23/2001 08:00 PM 23,552 iasacct.dll 08/23/2001 08:00 PM 41,472 iasads.dll 08/23/2001 08:00 PM 32,256 iashlpr.dll 08/23/2001 08:00 PM 62,464 iasnap.dll 08/23/2001 08:00 PM 17,920 iaspolcy.dll 08/04/2004 12:56 AM 119,808 iasrad.dll 08/23/2001 08:00 PM 141,312 iasrecst.dll 08/23/2001 08:00 PM 86,528 iassam.dll 08/23/2001 08:00 PM 247,808 iassdo.dll 08/23/2001 08:00 PM 59,392 iassvcs.dll 08/04/2004 12:56 AM 11,264 icaapi.dll 08/04/2004 12:56 AM 80,384 iccvid.dll 08/23/2001 08:00 PM 16,384 icfgnt5.dll 06/29/2005 09:46 AM 254,976 icm32.dll 08/04/2004 12:56 AM 3,584 icmp.dll 08/23/2001 08:00 PM 54,784 icmui.dll 08/04/2004 12:56 AM 73,728 icwdial.dll 08/04/2004 12:56 AM 65,536 icwphbk.dll 08/04/2004 12:56 AM 120,832 idq.dll 08/04/2004 12:56 AM 139,264 ieakeng.dll 08/04/2004 12:56 AM 216,576 ieaksie.dll 08/23/2001 08:00 PM 221,184 ieakui.dll 08/04/2004 12:56 AM 323,584 iedkcs32.dll 08/04/2004 12:56 AM 81,920 ieencode.dll 06/23/2006 07:25 PM 251,904 iepeers.dll 08/04/2004 12:56 AM 48,640 iernonce.dll 08/04/2004 12:56 AM 62,976 iesetup.dll 08/04/2004 12:56 AM 135,680 ifmon.dll 08/23/2001 08:00 PM 70,656 ifsutil.dll 10/28/2005 11:49 PM 151,552 ifxcardm.dll 02/10/2004 10:50 AM 143,360 igfxdev.dll 02/10/2004 10:53 AM 45,056 igfxdgps.dll 02/10/2004 10:50 AM 86,016 igfxdo.dll 02/10/2004 10:54 AM 221,184 igfxeud.dll 02/10/2004 10:55 AM 32,768 igfxexps.dll 02/10/2004 10:51 AM 126,976 igfxhk.dll 02/10/2004 10:55 AM 225,280 igfxpph.dll 02/10/2004 10:50 AM 155,648 igfxres.dll 02/10/2004 10:50 AM 880,640 igfxress.dll 02/10/2004 10:51 AM 339,968 igfxsrvc.dll 08/04/2004 12:56 AM 8,192 igmpagnt.dll 08/23/2001 08:00 PM 9,216 iissuba.dll 08/04/2004 12:56 AM 81,920 ils.dll 08/04/2004 12:56 AM 144,384 imagehlp.dll 07/06/2001 08:41 PM 569,344 imagr5.dll 07/06/2001 06:44 PM 544,768 imagx5.dll 07/26/2004 04:16 PM 1,568,768 ImagX7.dll 07/07/2001 12:24 AM 283,920 ImagXpr5.dll 07/26/2004 04:16 PM 476,320 ImagXpr7.dll 07/26/2004 04:16 PM 262,144 ImagXR7.dll 07/26/2004 04:16 PM 471,040 ImagXRA7.dll 08/04/2004 12:56 AM 36,921 imeshare.dll 08/04/2004 12:56 AM 35,840 imgutil.dll 08/03/2004 10:31 PM 811,064 imjp81k.dll 08/04/2004 12:56 AM 110,080 imm32.dll 02/15/1995 12:11 AM 17,920 IMPLODE.DLL 08/04/2004 12:56 AM 274,432 inetcfg.dll 07/27/2006 09:24 PM 679,424 inetcomm.dll 08/23/2001 08:00 PM 110,592 inetcplc.dll 08/04/2004 12:56 AM 33,280 inetmib1.dll 08/04/2004 12:56 AM 75,264 inetpp.dll 08/04/2004 12:56 AM 15,872 inetppui.dll 08/04/2004 12:56 AM 48,128 inetres.dll 08/23/2001 08:00 PM 450,560 infosoft.dll 08/04/2004 12:56 AM 147,456 initpki.dll 08/04/2004 12:56 AM 123,392 input.dll 06/23/2006 07:25 PM 96,256 inseng.dll 08/23/2001 08:00 PM 30,720 iologmsg.dll 05/19/2006 08:59 PM 94,720 iphlpapi.dll 08/23/2001 08:00 PM 154,112 ipmontr.dll 08/04/2004 12:56 AM 331,264 ipnathlp.dll 08/04/2004 12:56 AM 330,752 ippromon.dll 08/23/2001 08:00 PM 3,584 iprop.dll 10/15/2002 12:00 AM 44,875 IPrtCnst.dll 08/23/2001 08:00 PM 4,096 iprtprio.dll 08/23/2001 08:00 PM 169,984 iprtrmgr.dll 08/04/2004 12:56 AM 349,696 ipsecsnp.dll 08/04/2004 12:56 AM 182,784 ipsecsvc.dll 08/04/2004 12:56 AM 384,000 ipsmsnap.dll 08/04/2004 12:56 AM 59,904 ipv6mon.dll 08/23/2001 08:00 PM 83,968 ipxmontr.dll 08/23/2001 08:00 PM 69,120 ipxpromn.dll 08/23/2001 08:00 PM 21,504 ipxrip.dll 08/23/2001 08:00 PM 39,936 ipxrtmgr.dll 08/23/2001 08:00 PM 66,560 ipxsap.dll 08/23/2001 08:00 PM 20,992 ipxwan.dll 08/23/2001 08:00 PM 199,168 ir32_32.dll 08/04/2004 12:56 AM 120,320 ir41_qc.dll 08/04/2004 12:56 AM 338,432 ir41_qcx.dll 08/04/2004 12:56 AM 755,200 ir50_32.dll 08/04/2004 12:56 AM 200,192 ir50_qc.dll 08/04/2004 12:56 AM 183,808 ir50_qcx.dll 08/23/2001 08:00 PM 13,312 irclass.dll 08/04/2004 12:56 AM 27,136 irmon.dll 08/04/2004 12:56 AM 81,920 isign32.dll 08/04/2004 12:56 AM 32,768 isrdbg32.dll 05/27/2005 10:04 AM 155,136 itircl.dll 05/27/2005 10:04 AM 137,216 itss.dll 05/26/2005 04:16 AM 198,424 iuengine.dll 08/04/2004 12:56 AM 54,272 ixsso.dll 08/04/2004 12:56 AM 47,616 iyuv_32.dll 02/28/2003 06:26 PM 187,152 javacypt.dll 02/28/2003 06:26 PM 139,536 javaee.dll 02/28/2003 06:26 PM 63,248 javaprxy.dll 02/28/2003 06:26 PM 404,752 javart.dll 08/23/2001 08:00 PM 362,496 jet500.dll 08/23/2001 08:00 PM 44,544 jgaw400.dll 06/02/2006 02:47 AM 163,840 jgdw400.dll 08/23/2001 08:00 PM 35,840 jgmd400.dll 06/02/2006 02:47 AM 27,648 jgpl400.dll 08/23/2001 08:00 PM 45,568 jgsd400.dll 08/23/2001 08:00 PM 65,536 jgsh400.dll 02/28/2003 06:26 PM 171,280 jit.dll 08/23/2001 08:00 PM 47,952 jobexec.dll 05/18/2006 01:24 PM 450,560 jscript.dll 06/23/2006 07:25 PM 15,872 jsproxy.dll 08/23/2001 08:00 PM 6,144 kbd101.dll 08/23/2001 08:00 PM 6,144 kbd101a.dll 08/17/2001 10:55 PM 6,144 kbd101b.dll 08/17/2001 10:55 PM 6,144 kbd101c.dll 08/17/2001 10:55 PM 5,632 kbd103.dll 08/17/2001 10:55 PM 6,144 kbd106.dll 08/23/2001 08:00 PM 6,144 kbd106n.dll 08/23/2001 08:00 PM 6,656 KBDAL.DLL 08/23/2001 08:00 PM 6,144 kbdax2.dll 08/23/2001 08:00 PM 5,632 kbdaze.dll 08/23/2001 08:00 PM 5,632 kbdazel.dll 08/23/2001 08:00 PM 6,144 kbdbe.dll 08/23/2001 08:00 PM 6,144 kbdbene.dll 08/23/2001 08:00 PM 5,632 kbdblr.dll 08/23/2001 08:00 PM 6,144 kbdbr.dll 08/23/2001 08:00 PM 5,632 kbdbu.dll 08/23/2001 08:00 PM 6,144 kbdca.dll 08/23/2001 08:00 PM 7,680 kbdcan.dll 08/23/2001 08:00 PM 6,656 kbdcr.dll 08/23/2001 08:00 PM 7,168 kbdcz.dll 08/23/2001 08:00 PM 6,656 kbdcz1.dll 08/23/2001 08:00 PM 6,656 kbdcz2.dll 08/23/2001 08:00 PM 6,144 kbdda.dll 08/23/2001 08:00 PM 5,120 kbddv.dll 08/23/2001 08:00 PM 6,144 kbdes.dll 08/23/2001 08:00 PM 6,144 kbdest.dll 08/23/2001 08:00 PM 6,144 kbdfc.dll 08/23/2001 08:00 PM 6,144 kbdfi.dll 08/04/2004 12:56 AM 7,168 kbdfi1.dll 08/23/2001 08:00 PM 6,144 kbdfo.dll 08/23/2001 08:00 PM 6,144 kbdfr.dll 08/23/2001 08:00 PM 5,632 kbdgae.dll 08/23/2001 08:00 PM 6,144 kbdgkl.dll 08/23/2001 08:00 PM 6,144 kbdgr.dll 08/23/2001 08:00 PM 6,144 kbdgr1.dll 08/23/2001 08:00 PM 5,632 kbdhe.dll 08/23/2001 08:00 PM 5,632 kbdhe220.dll 08/23/2001 08:00 PM 5,632 kbdhe319.dll 08/23/2001 08:00 PM 6,144 kbdhela2.dll 08/23/2001 08:00 PM 6,656 kbdhela3.dll 08/23/2001 08:00 PM 8,192 kbdhept.dll 08/23/2001 08:00 PM 6,656 kbdhu.dll 08/23/2001 08:00 PM 5,632 kbdhu1.dll 08/23/2001 08:00 PM 7,168 kbdibm02.dll 08/23/2001 08:00 PM 6,144 kbdic.dll 08/04/2004 12:56 AM 6,144 kbdinbe1.dll 08/04/2004 12:56 AM 6,656 kbdinben.dll 08/04/2004 12:56 AM 6,656 kbdinmal.dll 08/23/2001 08:00 PM 5,632 kbdir.dll 08/23/2001 08:00 PM 5,632 kbdit.dll 08/23/2001 08:00 PM 5,632 kbdit142.dll 08/18/2001 06:36 AM 8,704 kbdjpn.dll 08/23/2001 08:00 PM 5,632 kbdkaz.dll 08/18/2001 06:36 AM 8,192 kbdkor.dll 08/23/2001 08:00 PM 5,632 kbdkyr.dll 08/23/2001 08:00 PM 6,656 kbdla.dll 08/23/2001 08:00 PM 6,656 kbdlk41a.dll 08/23/2001 08:00 PM 6,144 kbdlk41j.dll 08/23/2001 08:00 PM 5,632 kbdlt.dll 08/23/2001 08:00 PM 5,632 kbdlt1.dll 08/23/2001 08:00 PM 6,144 kbdlv.dll 08/23/2001 08:00 PM 6,144 kbdlv1.dll 08/23/2001 08:00 PM 6,144 kbdmac.dll 08/04/2004 12:56 AM 5,632 kbdmaori.dll 08/04/2004 12:56 AM 6,144 kbdmlt47.dll 08/04/2004 12:56 AM 6,144 kbdmlt48.dll 08/23/2001 08:00 PM 5,632 kbdmon.dll 08/23/2001 08:00 PM 6,144 kbdne.dll 08/23/2001 08:00 PM 7,168 kbdnec.dll 08/23/2001 08:00 PM 7,168 kbdnec95.dll 08/23/2001 08:00 PM 9,216 kbdnecAT.dll 08/23/2001 08:00 PM 7,680 kbdnecNT.dll 08/23/2001 08:00 PM 6,144 kbdno.dll 08/04/2004 12:56 AM 7,168 kbdno1.dll 08/23/2001 08:00 PM 6,656 kbdpl.dll 08/23/2001 08:00 PM 5,632 kbdpl1.dll 08/23/2001 08:00 PM 6,144 kbdpo.dll 08/23/2001 08:00 PM 5,632 kbdro.dll 08/23/2001 08:00 PM 5,632 kbdru.dll 08/23/2001 08:00 PM 5,632 kbdru1.dll 08/23/2001 08:00 PM 6,144 kbdsf.dll 08/23/2001 08:00 PM 6,656 kbdsg.dll 08/23/2001 08:00 PM 6,656 kbdsl.dll 08/23/2001 08:00 PM 6,656 kbdsl1.dll 08/04/2004 12:56 AM 7,680 kbdsmsfi.dll 08/04/2004 12:56 AM 7,680 kbdsmsno.dll 08/23/2001 08:00 PM 6,144 kbdsp.dll 08/23/2001 08:00 PM 6,144 kbdsw.dll 08/23/2001 08:00 PM 5,632 kbdtat.dll 08/23/2001 08:00 PM 6,144 kbdtuf.dll 08/23/2001 08:00 PM 6,144 kbdtuq.dll 08/23/2001 08:00 PM 5,632 kbduk.dll 08/04/2004 12:56 AM 7,168 kbdukx.dll 08/23/2001 08:00 PM 5,632 kbdur.dll 08/23/2001 08:00 PM 5,632 kbdus.dll 08/23/2001 08:00 PM 6,144 kbdusl.dll 08/23/2001 08:00 PM 6,144 kbdusr.dll 08/23/2001 08:00 PM 6,144 kbdusx.dll 08/23/2001 08:00 PM 5,632 kbduzb.dll 08/23/2001 08:00 PM 5,632 kbdycc.dll 08/23/2001 08:00 PM 6,656 kbdycl.dll 08/03/2004 10:59 PM 7,424 kd1394.dll 08/23/2001 08:00 PM 7,040 kdcom.dll 06/16/2005 01:49 AM 295,936 kerberos.dll 07/05/2006 06:55 PM 984,064 kernel32.dll 08/04/2004 12:56 AM 150,528 keymgr.dll 08/18/2001 08:00 PM 70,656 korwbrkr.dll 08/04/2004 12:56 AM 4,096 ksuser.dll 08/07/2003 02:01 PM 237,568 lame_enc.dll 08/23/2001 08:00 PM 89,600 langwrbk.dll 01/28/2005 01:44 PM 6,656 laprxy.dll 06/27/2006 05:40 AM 571,184 LegitCheckControl.dll 08/13/2001 10:03 AM 32,256 lfani12n.dll 08/13/2001 10:03 AM 25,600 lfavi12n.dll 08/13/2001 10:03 AM 28,672 lfawd12n.dll 08/13/2001 10:03 AM 36,864 lfbmp12n.dll 08/13/2001 10:03 AM 35,840 lfcal12n.dll 08/13/2001 10:03 AM 60,928 Lfcgm12n.dll 08/13/2001 10:03 AM 28,160 lfclp12n.dll 08/13/2001 10:03 AM 313,856 LFCMP12n.DLL 08/13/2001 10:03 AM 27,648 lfCUT12n.dll 08/13/2001 10:03 AM 66,048 Lfdgn12n.dll 08/13/2001 10:03 AM 64,000 Lfdrw12n.dll 08/13/2001 10:03 AM 497,664 lfdwf12n.dll 08/13/2001 10:03 AM 83,456 lfdwg12N.dll 08/13/2001 10:03 AM 133,120 Lfdxf12n.dll 08/13/2001 10:03 AM 57,344 lfeps12n.dll 08/13/2001 10:03 AM 78,336 lffax12n.dll 08/13/2001 10:03 AM 46,080 lfflc12n.dll 08/13/2001 10:03 AM 100,352 lffpx12n.dll 08/13/2001 10:03 AM 43,008 lfgif12n.dll 08/13/2001 10:03 AM 48,640 lfica12n.dll 08/13/2001 10:03 AM 33,792 lfiff12n.dll 08/13/2001 10:03 AM 27,648 lfimg12n.dll 08/13/2001 10:03 AM 26,112 lfitg12n.dll 08/13/2001 10:03 AM 101,376 lfjbg12n.dll 08/13/2001 10:03 AM 35,840 lflma12n.dll 08/13/2001 10:03 AM 32,256 lflmb12n.dll 08/13/2001 10:03 AM 26,112 lfmac12n.dll 08/13/2001 10:03 AM 121,856 lfmpg12n.dll 08/13/2001 10:03 AM 26,112 lfmsp12n.dll 08/13/2001 10:03 AM 26,112 lfpcd12n.dll 08/13/2001 10:03 AM 71,680 Lfpct12n.dll 08/13/2001 10:03 AM 33,280 lfpcx12n.dll 08/13/2001 10:03 AM 161,280 lfpdf12n.dll 08/13/2001 10:03 AM 79,360 Lfplt12n.dll 08/13/2001 10:03 AM 170,496 Lfpng12n.dll 08/13/2001 10:03 AM 48,640 LFPNM12n.dll 08/13/2001 10:03 AM 56,320 lfpsd12n.dll 08/13/2001 10:03 AM 26,112 lfras12n.dll 08/13/2001 10:03 AM 24,576 lfRaw12n.dll 08/13/2001 10:03 AM 27,648 lfsgi12n.dll 08/13/2001 10:03 AM 27,648 lftga12n.dll 08/13/2001 10:03 AM 155,648 lftif12n.dll 08/13/2001 10:03 AM 24,576 Lfvec12n.dll 08/13/2001 10:03 AM 27,136 lfwfx12n.dll 08/13/2001 10:03 AM 59,392 Lfwmf12n.dll 08/13/2001 10:03 AM 27,648 lfwpg12n.dll 08/13/2001 10:03 AM 45,568 lfXbm12n.dll 08/13/2001 10:03 AM 69,120 lfXpm12n.dll 08/13/2001 10:03 AM 32,768 lfxwd12n.dll 06/21/2006 06:42 PM 1,044,480 libdivx.dll 08/04/2004 12:56 AM 423,936 licdll.dll 08/04/2004 12:56 AM 22,016 licmgr10.dll 08/04/2004 12:56 AM 58,880 licwmi.dll 09/01/2005 09:41 AM 19,968 linkinfo.dll 08/12/2006 12:40 PM 278,528 livesnth.dll 08/04/2004 12:56 AM 13,824 lmhsvc.dll 08/04/2004 12:56 AM 399,872 lmrt.dll 08/04/2004 12:56 AM 97,280 loadperf.dll 08/04/2004 12:56 AM 221,696 localsec.dll 08/04/2004 12:56 AM 341,504 localspl.dll 08/04/2004 12:56 AM 11,776 localui.dll 08/23/2001 08:00 PM 50,176 loghours.dll 08/04/2004 12:56 AM 22,016 lpk.dll 08/04/2004 12:56 AM 10,240 lprhelp.dll 08/23/2001 08:00 PM 9,216 lprmonui.dll 10/28/2004 09:21 AM 721,920 lsasrv.dll 08/13/2001 10:03 AM 752,640 ltann12n.dll 08/13/2001 10:03 AM 136,704 LTAUT12n.dll 08/13/2001 10:03 AM 64,512 ltbar12n.dll 08/13/2001 10:03 AM 72,704 ltcap12n.dll 08/13/2001 10:03 AM 99,840 LTCON12n.dll 08/13/2001 10:03 AM 824,832 LTDic12n.dll 08/13/2001 10:03 AM 278,016 LTDIS12n.dll 08/13/2001 10:03 AM 310,272 ltdlg12n.dll 08/13/2001 10:03 AM 227,328 ltefx12n.dll 08/13/2001 10:03 AM 121,344 ltfil12n.DLL 08/13/2001 10:03 AM 165,888 ltimg12n.dll 08/13/2001 10:03 AM 40,448 ltisi12n.dll 08/13/2001 10:03 AM 406,016 ltkrn12n.dll 08/13/2001 10:03 AM 73,728 ltlst12n.dll 08/13/2001 10:03 AM 51,712 ltnet12n.dll 08/13/2001 10:03 AM 144,384 LTSCR12n.DLL 08/13/2001 10:03 AM 76,800 LTTLB12n.dll 08/13/2001 10:03 AM 51,712 lttmb12n.dll 08/13/2001 10:03 AM 41,472 lttwn12n.dll 08/13/2001 10:03 AM 166,400 ltvid12n.dll 08/15/2001 05:31 PM 57,344 LTWEB12n.dll 08/13/2001 10:03 AM 761,856 ltwen12n.dll 08/13/2001 10:03 AM 36,864 LTWND12n.DLL 08/13/2001 10:03 AM 844,288 Ltwvc12n.dll 08/13/2001 10:03 AM 158,208 Lvdlg12n.dll 08/13/2001 10:03 AM 60,416 Lvdx12n.dll 08/13/2001 10:03 AM 59,904 Lvgl12n.dll 08/13/2001 10:03 AM 199,168 Lvkrn12n.dll 08/23/2001 08:00 PM 2,560 lz32.dll 08/23/2001 08:00 PM 9,936 lzexpand.dll 08/23/2001 08:00 PM 8,192 mag_hook.dll 10/01/1998 12:00 PM 520,128 MAPI.DLL 08/23/2001 08:00 PM 112,128 mapi32.dll 08/23/2001 08:00 PM 112,128 mapistub.dll 08/04/2004 12:56 AM 14,848 mcastmib.dll 08/23/2001 08:00 PM 10,240 mcd32.dll 08/23/2001 08:00 PM 10,496 mcdsrv32.dll 08/23/2001 08:00 PM 4,608 mchgrcoi.dll 08/04/2004 12:56 AM 84,480 mciavi32.dll 08/23/2001 08:00 PM 17,408 mcicda.dll 08/23/2001 08:00 PM 8,192 mciole16.dll 08/23/2001 08:00 PM 7,680 mciole32.dll 08/04/2004 12:56 AM 35,328 mciqtz32.dll 08/04/2004 12:56 AM 23,040 mciseq.dll 08/04/2004 12:56 AM 23,552 mciwave.dll 08/23/2001 08:00 PM 50,176 mdhcp.dll 08/04/2004 12:56 AM 118,272 mdminst.dll 08/04/2004 12:56 AM 86,016 mdmxsdk.dll 08/23/2001 08:00 PM 147,968 mdwmdmsp.dll 08/04/2004 12:56 AM 39,936 mf3216.dll 08/23/2001 08:00 PM 924,432 mfc40.dll 0