OK, my mother in law and my wife were on the computer and I believe they downloaded and installed some codec they believed they needed and now I have CiD advertisement pop ups every few minutes and I don't know what program installed the stuff. I have Hijackthis but I don't know what other tools I need. I'm not real versed at this so any help would be apreciated, so just tell me what I need to do and I'll get to it. Thanks!

Hello, my name is fenzodahl512 and welcome to Geekstogo... Please do the following..


Download Lop S&D by Eric_71 and save it to your desktop.
Lop S&D will only run on Windows XP and Windows Vista

Disable your antivirus, antimalware and firewall programs so they do not interfere with the running of Lop S&D.
To see how to disable security programs visit this tutorial:
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

• Double-click Lop S&D.exe
• Choose the language by typing of the corresponding letter and press Enter
• Click OK at the informative window
• Type 1, to choose Option 1 (Search) then press Enter
• Wait until the end of the scan
• A report will be generated, post the contents of it in your next reply.

(Copy of the report can be found at this location: %systemdrive%\lopR.txt, in most cases C:\lopR.txt)




NEXT


Please download RSIT by random/random and save it to your Desktop.

• Double click on RSIT.exe to run RSIT
• Before you click "Continue", make sure you change the List files/folders created or modified in the last 3 months
• Click Continue at the disclaimer screen.
• Once it has finished, two logs will open. Please post the contents of both log.txt and info.txt in your next reply.

Now, re-enable back all your antivirus, antispyware, firewall program that been disabled before..

Post me these logs in your next reply. Post each log in separate post..

1. Lop S&D
2. RSIT log.txt
3. RSIT info.txt

This post has been edited by fenzodahl512: Oct 9 2008, 01:20 PM

Hello, due to some problem, your post has gone missing.. Please find the logs at locations below and post them back again here.. Please post each log in separate post.. Thank you

C:\lopR.txt
C:\rsit\log.txt
C:\rsit\info.txt

Hmmmm... that's weird well ok here they are again Thanks!

1.

--------------------\\ Lop S&D 4.2.4-5 XP/Vista


"C:\Lop SD" ( MAJ : 02-10-2008|23:42 )
Option : [1] ( Sun 10/12/2008| 0:46 )

--------------------\\ Listing folders in APPLIC~1

[08/10/2008|04:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Microsoft

[08/18/2008|02:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Adobe
[08/11/2008|10:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple
[08/11/2008|10:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple Computer
[10/05/2008|11:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AVS4YOU
[10/02/2008|06:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Axis Readme Second Bat
[08/10/2008|07:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google
[10/11/2008|04:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google Updater
[08/10/2008|07:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> iolo
[09/25/2008|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> McAfee
[08/10/2008|11:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Media Center Programs
[08/31/2008|09:50] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft
[08/10/2008|07:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> MSN6
[08/19/2008|12:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Real
[09/25/2008|10:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SiteAdvisor
[10/09/2008|01:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TEMP
[08/10/2008|03:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Genuine Advantage
[09/30/2008|07:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Yahoo!
[10/01/2008|01:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Yahoo! Companion

[08/10/2008|04:23] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Microsoft

[08/10/2008|07:24] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> iolo
[08/10/2008|06:27] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Microsoft
[09/25/2008|10:16] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> SACore

[08/13/2008|12:56] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> DivX
[08/10/2008|08:36] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Microsoft

[08/18/2008|02:05] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Adobe
[08/11/2008|10:27] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Apple Computer
[10/06/2008|12:03] C:\DOCUME~1\Sue\APPLIC~1\<DIR> AVS4YOU
[10/11/2008|05:49] C:\DOCUME~1\Sue\APPLIC~1\<DIR> BitTorrent
[10/02/2008|06:39] C:\DOCUME~1\Sue\APPLIC~1\<DIR> BONEDVDDEFAULT
[08/19/2008|12:48] C:\DOCUME~1\Sue\APPLIC~1\<DIR> DivX
[10/12/2008|12:46] C:\DOCUME~1\Sue\APPLIC~1\<DIR> DNA
[08/10/2008|07:43] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Google
[08/10/2008|04:28] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Identities
[09/10/2008|01:27] C:\DOCUME~1\Sue\APPLIC~1\<DIR> ImgBurn
[08/10/2008|04:38] C:\DOCUME~1\Sue\APPLIC~1\<DIR> InstallShield
[08/10/2008|07:32] C:\DOCUME~1\Sue\APPLIC~1\<DIR> iolo
[09/29/2008|08:47] C:\DOCUME~1\Sue\APPLIC~1\<DIR> LimeWire
[08/10/2008|02:47] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Macromedia
[09/07/2008|11:44] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Media Player Classic
[08/25/2008|12:02] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Microsoft
[10/06/2008|11:08] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Move Networks
[08/11/2008|09:48] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Mozilla
[08/10/2008|07:06] C:\DOCUME~1\Sue\APPLIC~1\<DIR> MSN6
[08/14/2008|03:27] C:\DOCUME~1\Sue\APPLIC~1\<DIR> MySpace
[10/11/2008|06:46] C:\DOCUME~1\Sue\APPLIC~1\<DIR> OpenOffice.org2
[10/06/2008|11:54] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Real
[08/27/2008|03:58] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Sun
[08/10/2008|06:08] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Windows Desktop Search
[08/10/2008|06:13] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Windows Search
[08/10/2008|07:53] C:\DOCUME~1\Sue\APPLIC~1\<DIR> WinRAR
[10/01/2008|01:02] C:\DOCUME~1\Sue\APPLIC~1\<DIR> Yahoo!

--------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[10/11/2008 06:45 PM][--a------] C:\WINDOWS\tasks\XoftSpySE 2.job
[10/11/2008 10:02 PM][--a------] C:\WINDOWS\tasks\XoftSpySE.job
[10/12/2008 12:00 AM][--ah-----] C:\WINDOWS\tasks\AA15142797B28A43.job
[10/08/2008 11:02 PM][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/11/2008 06:48 PM][--ah-----] C:\WINDOWS\tasks\MP Scheduled Scan.job
[10/11/2008 06:45 PM][--ah-----] C:\WINDOWS\tasks\SA.DAT
[03/31/2003 07:00 AM][-r-h-----] C:\WINDOWS\tasks\desktop.ini
[08/15/2008 01:00 AM][--a------] C:\WINDOWS\tasks\McDefragTask.job
[10/01/2008 01:00 AM][--a------] C:\WINDOWS\tasks\McQcTask.job

( AA15142797B28A43.job )=( c:\docume~1\sue\applic~1\bonedv~1\nurbcitywarn.exe )

--------------------\\ Listing Folders in C:\Program Files

[08/27/2008|11:23] C:\Program Files\<DIR> 2K Games
[08/18/2008|02:05] C:\Program Files\<DIR> Adobe
[09/10/2008|01:50] C:\Program Files\<DIR> Ahead
[08/11/2008|10:19] C:\Program Files\<DIR> Apple Software Update
[08/18/2008|02:25] C:\Program Files\<DIR> AviSynth 2.5
[10/06/2008|12:11] C:\Program Files\<DIR> AVS4YOU
[08/11/2008|10:40] C:\Program Files\<DIR> AVSMedia
[08/10/2008|07:39] C:\Program Files\<DIR> BitTorrent
[10/08/2008|11:02] C:\Program Files\<DIR> Bonjour
[10/09/2008|01:30] C:\Program Files\<DIR> CA Yahoo! Anti-Spy
[08/19/2008|09:41] C:\Program Files\<DIR> CCleaner
[10/08/2008|05:12] C:\Program Files\<DIR> Common Files
[08/10/2008|04:21] C:\Program Files\<DIR> ComPlus Applications
[09/28/2008|05:06] C:\Program Files\<DIR> ConvertHelper
[08/19/2008|12:39] C:\Program Files\<DIR> DivX
[09/28/2008|08:50] C:\Program Files\<DIR> DNA
[10/04/2008|04:24] C:\Program Files\<DIR> DOSBox-0.72
[08/10/2008|07:53] C:\Program Files\<DIR> Driver-Soft
[08/10/2008|07:37] C:\Program Files\<DIR> DVDFab HD Decrypter 4
[09/01/2008|07:40] C:\Program Files\<DIR> EA GAMES
[08/22/2008|01:45] C:\Program Files\<DIR> Electronic Arts
[08/22/2008|01:59] C:\Program Files\<DIR> GameSpy
[08/10/2008|02:44] C:\Program Files\<DIR> GIGABYTE
[08/10/2008|07:43] C:\Program Files\<DIR> Google
[08/10/2008|07:38] C:\Program Files\<DIR> ImgBurn
[08/27/2008|11:23] C:\Program Files\<DIR> InstallShield Installation Information
[08/10/2008|04:34] C:\Program Files\<DIR> Intel
[10/11/2008|06:21] C:\Program Files\<DIR> Internet Explorer
[08/10/2008|07:28] C:\Program Files\<DIR> iolo
[08/11/2008|10:25] C:\Program Files\<DIR> iPod
[08/11/2008|10:25] C:\Program Files\<DIR> iTunes
[08/27/2008|04:16] C:\Program Files\<DIR> Java
[08/19/2008|12:51] C:\Program Files\<DIR> K-Lite Codec Pack
[08/18/2008|02:19] C:\Program Files\<DIR> Lexmark 730 Series
[09/16/2008|08:31] C:\Program Files\<DIR> Lx_cats
[10/06/2008|11:37] C:\Program Files\<DIR> McAfee
[08/10/2008|05:35] C:\Program Files\<DIR> McAfee.com
[08/12/2008|02:26] C:\Program Files\<DIR> Messenger
[08/10/2008|04:24] C:\Program Files\<DIR> microsoft frontpage
[08/19/2008|12:35] C:\Program Files\<DIR> Microsoft Silverlight
[10/06/2008|12:18] C:\Program Files\<DIR> Movavi Video Converter 6
[08/10/2008|05:26] C:\Program Files\<DIR> Movie Maker
[10/12/2008|12:42] C:\Program Files\<DIR> Mozilla Firefox
[08/10/2008|08:13] C:\Program Files\<DIR> MSBuild
[08/10/2008|07:10] C:\Program Files\<DIR> MSN
[08/10/2008|04:21] C:\Program Files\<DIR> MSN Gaming Zone
[08/14/2008|03:27] C:\Program Files\<DIR> MySpace
[08/10/2008|05:24] C:\Program Files\<DIR> NetMeeting
[08/10/2008|04:21] C:\Program Files\<DIR> Online Services
[08/27/2008|04:17] C:\Program Files\<DIR> OpenOffice.org 2.4
[08/10/2008|05:24] C:\Program Files\<DIR> Outlook Express
[08/11/2008|10:21] C:\Program Files\<DIR> QuickTime
[08/20/2008|12:32] C:\Program Files\<DIR> Realtek
[08/10/2008|08:13] C:\Program Files\<DIR> Reference Assemblies
[08/11/2008|10:22] C:\Program Files\<DIR> Safari
[09/11/2008|05:59] C:\Program Files\<DIR> Sierra
[08/10/2008|11:26] C:\Program Files\<DIR> THQ
[10/09/2008|01:24] C:\Program Files\<DIR> Trend Micro
[08/10/2008|04:27] C:\Program Files\<DIR> Uninstall Information
[08/10/2008|08:07] C:\Program Files\<DIR> Windows Defender
[08/10/2008|06:08] C:\Program Files\<DIR> Windows Desktop Search
[08/10/2008|06:07] C:\Program Files\<DIR> Windows Media Connect 2
[08/10/2008|06:07] C:\Program Files\<DIR> Windows Media Player
[08/10/2008|05:24] C:\Program Files\<DIR> Windows NT
[08/10/2008|04:21] C:\Program Files\<DIR> WindowsUpdate
[09/24/2008|02:02] C:\Program Files\<DIR> Winnydows
[08/29/2008|05:32] C:\Program Files\<DIR> WinRAR
[08/10/2008|04:24] C:\Program Files\<DIR> xerox
[10/08/2008|04:19] C:\Program Files\<DIR> XoftSpySE
[09/30/2008|07:28] C:\Program Files\<DIR> Yahoo!

--------------------\\ Listing Folders in C:\Program Files\Common Files

[08/18/2008|02:04] C:\Program Files\Common Files\<DIR> Adobe
[08/18/2008|02:04] C:\Program Files\Common Files\<DIR> Adobe AIR
[08/11/2008|10:24] C:\Program Files\Common Files\<DIR> Apple
[10/05/2008|11:51] C:\Program Files\Common Files\<DIR> AVSMedia
[09/07/2008|12:12] C:\Program Files\Common Files\<DIR> EasyInfo
[09/10/2008|01:49] C:\Program Files\Common Files\<DIR> InstallShield
[08/10/2008|11:25] C:\Program Files\Common Files\<DIR> Java
[08/10/2008|05:35] C:\Program Files\Common Files\<DIR> McAfee
[08/11/2008|10:12] C:\Program Files\Common Files\<DIR> Microsoft Shared
[08/10/2008|04:22] C:\Program Files\Common Files\<DIR> MSSoap
[08/09/2008|09:18] C:\Program Files\Common Files\<DIR> ODBC
[08/19/2008|12:50] C:\Program Files\Common Files\<DIR> Real
[10/08/2008|05:12] C:\Program Files\Common Files\<DIR> Scanner
[08/10/2008|04:22] C:\Program Files\Common Files\<DIR> Services
[08/09/2008|09:18] C:\Program Files\Common Files\<DIR> SpeechEngines
[08/10/2008|05:24] C:\Program Files\Common Files\<DIR> System

--------------------\\ Process

( 48 Processes )

IEXPLORE.EXE ~ [PID:3748]
IEXPLORE.EXE ~ [PID:832]

--------------------\\ Searching with S_Lop

C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1
C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1\btderppi.exe
C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1\nurb city warn.exe
C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1\once comp.exe
C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1\ptuwvftw.exe
C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1\szllsvyj.exe

--------------------\\ Searching for Lop Files - Folders

C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Axis Readme Second Bat\cool dead.exe
C:\DOCUME~1\Sue\APPLIC~1\bonedv~1
C:\DOCUME~1\Sue\APPLIC~1\bonedv~1\btderppi.exe
C:\DOCUME~1\Sue\APPLIC~1\bonedv~1\nurb city warn.exe
C:\DOCUME~1\Sue\APPLIC~1\bonedv~1\once comp.exe
C:\DOCUME~1\Sue\APPLIC~1\bonedv~1\ptuwvftw.exe
C:\DOCUME~1\Sue\APPLIC~1\bonedv~1\szllsvyj.exe
C:\DOCUME~1\Sue\Cookies\sue@adopt.euroclick[1].txt
C:\WINDOWS\Tasks\AA15142797B28A43.job

--------------------\\ Searching within the Registry

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\peakfragmemo]
"DisplayName"="CiD Help"
"UninstallString"="C:\\DOCUME~1\\Sue\\APPLIC~1\\BONEDV~1\\once comp.exe -uninstall"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Real Tick"="C:\\DOCUME~1\\Sue\\APPLIC~1\\BONEDV~1\\once comp.exe"
"Real Tick"="C:\\DOCUME~1\\Sue\\APPLIC~1\\BONEDV~1\\once comp.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

--------------------\\ Checking the Hosts file

Hosts file CLEAN


--------------------\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-12 00:46:55
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Searching for other infections


No other infections found !

[F:28][D:2]-> C:\DOCUME~1\Sue\LOCALS~1\Temp
[F:21][D:0]-> C:\DOCUME~1\Sue\Cookies
[F:3009][D:8]-> C:\DOCUME~1\Sue\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - Fri 10/10/2008| 2:35 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - Sun 10/12/2008| 0:47 - Option : [1]

--------------------\\ Scan completed at 0:47:27

2.
Logfile of random's system information tool 1.04 (written by random/random)
Run by Sue at 2008-10-12 14:31:17
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 181 GB (76%) free of 238 GB
Total RAM: 2046 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:31:20 PM, on 10/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iolo\common\lib\ioloServiceManager.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\SearchIndexer.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\OpenOffice.org 2.4\program\soffice.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
c:\PROGRA~1\mcafee\msc\mcuimgr.exe
C:\Documents and Settings\Sue\Desktop\Unused Desktop Shortcuts\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Sue.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Real Tick] C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1\once comp.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: McAfee Application Installer Cleanup (0068661223311079) (0068661223311079mcinstcleanup) - Unknown owner - C:\WINDOWS\TEMP\006866~1.EXE (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

--
End of file - 6741 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AA15142797B28A43.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\McDefragTask.job
C:\WINDOWS\tasks\McQcTask.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\XoftSpySE 2.job
C:\WINDOWS\tasks\XoftSpySE.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll [2008-05-15 817936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{377C180E-6F0E-4D4C-980F-F45BD3D40CF4}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mcapbho.dll [2007-11-26 324936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll [2007-11-09 58688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-08-10 2549368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll [2008-08-10 651760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2008-09-04 121632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2008-09-04 121632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2007-11-01 582992]
"McENUI"=C:\PROGRA~1\McAfee\MHN\McENUI.exe [2007-11-30 1164576]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-05-16 13529088]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-07-22 116040]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-07-31 16806912]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2008-06-18 77824]
"AlcWzrd"=C:\WINDOWS\ALCWZRD.EXE [2008-06-19 2808832]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"NeroCheck"=C:\WINDOWS\system32\\NeroCheck.exe [2001-07-09 155648]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-05-27 413696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2008-09-28 289088]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-10-18 204288]
"Real Tick"=C:\DOCUME~1\Sue\APPLIC~1\BONEDV~1\once comp.exe [2008-10-02 478720]

C:\Documents and Settings\Sue\Start Menu\Programs\Startup
OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2008-05-27 304128]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\GIGABYTE\@BIOS\gwflash.exe"="C:\Program Files\GIGABYTE\@BIOS\gwflash.exe:*:Enabled:gwflash"
"C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe"="C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\THQ\Gas Powered Games\Supreme Commander - Forged Alliance\bin\ForgedAlliance.exe"="C:\Program Files\THQ\Gas Powered Games\Supreme Commander - Forged Alliance\bin\ForgedAlliance.exe:*:Enabled:Supreme Commander - Forged Alliance"
"C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe"="C:\Program Files\THQ\Gas Powered Games\GPGNet\GPG.Multiplayer.Client.exe:*:Enabled:GPGNet - Supreme Commander - Forged Alliance"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\MySpace\IM\MySpaceIM.exe"="C:\Program Files\MySpace\IM\MySpaceIM.exe:*:Enabled:MySpaceIM"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\Program Files\GameSpy\Comrade\Comrade.exe"="C:\Program Files\GameSpy\Comrade\Comrade.exe:*:Enabled:Comrade"
"C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Gold\Civilization4.exe"="C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Gold\Civilization4.exe:*:Enabled:Sid Meier's Civilization 4 Gold"
"C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Gold\Warlords\Civ4Warlords.exe"="C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Gold\Warlords\Civ4Warlords.exe:*:Enabled:Sid Meier's Civilization 4: Warlords"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.js - open - NOTEPAD.EXE %1
.reg - open - NOTEPAD.EXE %1
.scr - open - NOTEPAD.EXE %1
.vbs - open - NOTEPAD.EXE %1

======List of files/folders created in the last 3 months======

2008-10-10 02:36:48 ----D---- C:\rsit
2008-10-10 02:32:49 ----A---- C:\lopR.txt
2008-10-10 02:32:15 ----D---- C:\Lop SD
2008-10-09 12:59:15 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-10-09 11:08:36 ----A---- C:\WINDOWS\system32\muweb.dll
2008-10-09 01:24:17 ----D---- C:\Program Files\Trend Micro
2008-10-08 23:02:41 ----D---- C:\Program Files\Bonjour
2008-10-08 17:12:49 ----D---- C:\Program Files\Common Files\Scanner
2008-10-08 17:12:44 ----D---- C:\Program Files\CA Yahoo! Anti-Spy
2008-10-08 10:58:16 ----A---- C:\EventLOG.txt
2008-10-08 04:59:14 ----A---- C:\WINDOWS\ntbtlog.txt
2008-10-08 04:54:00 ----D---- C:\WINDOWS\pss
2008-10-08 02:08:11 ----D---- C:\Program Files\XoftSpySE
2008-10-06 15:49:56 ----D---- C:\Documents and Settings\Sue\Application Data\Move Networks
2008-10-06 00:09:19 ----D---- C:\Program Files\Movavi Video Converter 6
2008-10-05 23:53:45 ----D---- C:\Documents and Settings\Sue\Application Data\AVS4YOU
2008-10-05 23:51:52 ----D---- C:\Documents and Settings\All Users\Application Data\AVS4YOU
2008-10-05 23:50:38 ----D---- C:\Program Files\AVS4YOU
2008-10-04 03:39:45 ----D---- C:\OLD
2008-10-04 03:38:22 ----D---- C:\Program Files\DOSBox-0.72
2008-10-02 18:36:45 ----D---- C:\Documents and Settings\All Users\Application Data\Axis Readme Second Bat
2008-10-02 18:36:31 ----D---- C:\Documents and Settings\Sue\Application Data\BONEDVDDEFAULT
2008-10-01 13:02:12 ----D---- C:\Documents and Settings\Sue\Application Data\Yahoo!
2008-10-01 13:02:12 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2008-09-30 19:28:04 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
2008-09-28 05:06:23 ----D---- C:\Program Files\ConvertHelper
2008-09-11 17:59:41 ----D---- C:\Program Files\Sierra
2008-09-11 16:39:34 ----A---- C:\WINDOWS\system32\CmdLineExt03.dll
2008-09-11 16:37:57 ----A---- C:\Program Files\Readme.txt
2008-09-11 16:37:57 ----A---- C:\Program Files\EULA.txt
2008-09-10 13:50:20 ----D---- C:\Program Files\Ahead
2008-09-10 13:27:33 ----D---- C:\Documents and Settings\Sue\Application Data\ImgBurn
2008-09-10 00:35:36 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-10 00:35:20 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-08 00:11:52 ----A---- C:\WINDOWS\DexCompress.ini
2008-09-07 23:44:35 ----D---- C:\Documents and Settings\Sue\Application Data\Media Player Classic
2008-09-07 12:12:17 ----D---- C:\Program Files\Common Files\EasyInfo
2008-09-02 19:45:54 ----D---- C:\SIMS 2 STUFF
2008-09-01 17:19:51 ----D---- C:\Program Files\EA GAMES
2008-09-01 17:19:50 ----RA---- C:\WINDOWS\system32\vp6vfw.dll
2008-08-29 17:07:34 ----D---- C:\Documents and Settings\Sue\Application Data\OpenOffice.org2
2008-08-29 10:18:58 ----A---- C:\WINDOWS\system32\dns-sd.exe
2008-08-29 09:53:50 ----A---- C:\WINDOWS\system32\dnssd.dll
2008-08-27 16:16:58 ----D---- C:\Program Files\OpenOffice.org 2.4
2008-08-27 16:16:44 ----A---- C:\WINDOWS\system32\javaws.exe
2008-08-27 16:16:44 ----A---- C:\WINDOWS\system32\javaw.exe
2008-08-27 16:16:43 ----A---- C:\WINDOWS\system32\java.exe
2008-08-27 15:58:42 ----D---- C:\WINDOWS\Sun
2008-08-27 15:58:41 ----D---- C:\Documents and Settings\Sue\Application Data\Sun
2008-08-27 11:23:46 ----D---- C:\Program Files\2K Games
2008-08-22 01:59:53 ----D---- C:\Program Files\GameSpy
2008-08-22 01:55:12 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2008-08-22 01:55:11 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2008-08-22 01:55:10 ----A---- C:\WINDOWS\system32\pbsvc.exe
2008-08-22 01:45:39 ----D---- C:\Program Files\Electronic Arts
2008-08-21 22:14:22 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2008-08-20 14:39:07 ----A---- C:\WINDOWS\SysMech.INI
2008-08-19 09:41:24 ----D---- C:\Program Files\CCleaner
2008-08-19 00:51:27 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2008-08-19 00:51:27 ----A---- C:\WINDOWS\system32\pndx5032.dll
2008-08-19 00:51:27 ----A---- C:\WINDOWS\system32\pndx5016.dll
2008-08-19 00:51:26 ----A---- C:\WINDOWS\system32\unrar.dll
2008-08-19 00:51:26 ----A---- C:\WINDOWS\system32\pncrt.dll
2008-08-19 00:51:25 ----A---- C:\WINDOWS\avisplitter.ini
2008-08-19 00:51:20 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2008-08-19 00:51:20 ----A---- C:\WINDOWS\system32\dpl100.dll
2008-08-19 00:51:20 ----A---- C:\WINDOWS\system32\divx.dll
2008-08-19 00:51:19 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2008-08-19 00:51:19 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2008-08-19 00:51:18 ----D---- C:\Program Files\K-Lite Codec Pack
2008-08-19 00:51:18 ----D---- C:\Documents and Settings\All Users\Application Data\Real
2008-08-19 00:51:18 ----A---- C:\WINDOWS\system32\msvcr71.dll
2008-08-19 00:51:18 ----A---- C:\WINDOWS\system32\msvcp71.dll
2008-08-18 14:18:34 ----D---- C:\Program Files\Lexmark 730 Series
2008-08-18 14:18:33 ----D---- C:\Program Files\Lx_cats
2008-08-18 14:18:17 ----RA---- C:\WINDOWS\system32\lxcfcfg.dll
2008-08-18 14:04:53 ----D---- C:\Program Files\Common Files\Adobe AIR
2008-08-18 14:04:07 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-08-18 14:04:00 ----D---- C:\Program Files\Common Files\Adobe
2008-08-18 14:04:00 ----D---- C:\Program Files\Adobe
2008-08-18 02:25:12 ----D---- C:\Program Files\AviSynth 2.5
2008-08-18 02:25:04 ----D---- C:\Program Files\Winnydows
2008-08-16 03:33:26 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2008-08-15 02:23:03 ----D---- C:\Documents and Settings\Sue\Application Data\LimeWire
2008-08-14 15:27:55 ----D---- C:\Documents and Settings\Sue\Application Data\MySpace
2008-08-14 15:27:52 ----D---- C:\Program Files\MySpace
2008-08-12 14:26:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-08-12 14:26:54 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-08-12 14:26:49 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-08-12 14:26:44 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-08-12 14:25:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-08-12 14:25:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-08-12 14:25:41 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2008-08-12 14:25:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-08-12 14:24:57 ----A---- C:\WINDOWS\system32\wmpns.dll
2008-08-12 14:24:44 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2008-08-11 22:33:47 ----D---- C:\Program Files\Common Files\Real
2008-08-11 22:33:47 ----D---- C:\Documents and Settings\Sue\Application Data\Real
2008-08-11 22:29:04 ----D---- C:\Documents and Settings\Sue\Application Data\DivX
2008-08-11 22:25:27 ----D---- C:\Documents and Settings\Sue\Application Data\Apple Computer
2008-08-11 22:25:13 ----D---- C:\Program Files\iPod
2008-08-11 22:25:11 ----D---- C:\Program Files\iTunes
2008-08-11 22:24:40 ----D---- C:\Program Files\Common Files\Apple
2008-08-11 22:22:12 ----D---- C:\Program Files\Safari
2008-08-11 22:21:03 ----D---- C:\Program Files\QuickTime
2008-08-11 22:21:01 ----D---- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-08-11 22:19:12 ----D---- C:\Program Files\Apple Software Update
2008-08-11 22:19:12 ----D---- C:\Documents and Settings\All Users\Application Data\Apple
2008-08-11 22:15:53 ----N---- C:\WINDOWS\system32\pxsfs.dll
2008-08-11 22:15:53 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2008-08-11 22:15:53 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2008-08-11 22:15:53 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2008-08-11 22:15:53 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2008-08-11 22:15:53 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2008-08-11 22:15:53 ----N---- C:\WINDOWS\system32\pxafs.dll
2008-08-11 22:15:52 ----N---- C:\WINDOWS\system32\vxblock.dll
2008-08-11 22:15:52 ----N---- C:\WINDOWS\system32\pxwave.dll
2008-08-11 22:15:52 ----N---- C:\WINDOWS\system32\pxmas.dll
2008-08-11 22:15:52 ----N---- C:\WINDOWS\system32\pxdrv.dll
2008-08-11 22:15:52 ----N---- C:\WINDOWS\system32\px.dll
2008-08-11 22:15:34 ----D---- C:\Program Files\DivX
2008-08-11 22:11:48 ----D---- C:\Program Files\Common Files\AVSMedia
2008-08-11 22:11:47 ----D---- C:\Program Files\AVSMedia
2008-08-11 22:11:47 ----A---- C:\WINDOWS\system32\msxml3a.dll
2008-08-11 22:11:47 ----A---- C:\WINDOWS\system32\msvcr70.dll
2008-08-11 22:11:47 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2008-08-11 22:11:47 ----A---- C:\WINDOWS\system32\mfc70.dll
2008-08-11 22:11:47 ----A---- C:\WINDOWS\system32\mcdvd_32.dll
2008-08-11 22:11:47 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2008-08-10 23:53:39 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2008-08-10 23:39:32 ----HD---- C:\WINDOWS\PIF
2008-08-10 23:36:00 ----D---- C:\temp
2008-08-10 23:35:37 ----D---- C:\Documents and Settings\All Users\Application Data\Media Center Programs
2008-08-10 23:26:41 ----D---- C:\Program Files\THQ
2008-08-10 23:26:40 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2008-08-10 23:26:39 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2008-08-10 23:26:39 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2008-08-10 23:26:39 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2008-08-10 23:26:38 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2008-08-10 23:26:38 ----A---- C:\WINDOWS\system32\x3daudio1_2.dll
2008-08-10 23:26:36 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2008-08-10 23:26:36 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2008-08-10 23:26:36 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2008-08-10 23:26:35 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2008-08-10 23:26:31 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2008-08-10 23:26:27 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2008-08-10 23:26:27 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2008-08-10 23:26:24 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2008-08-10 23:26:23 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2008-08-10 23:26:23 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2008-08-10 23:26:22 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2008-08-10 23:26:21 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2008-08-10 23:26:21 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2008-08-10 23:26:21 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2008-08-10 23:26:20 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2008-08-10 23:26:20 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2008-08-10 23:26:20 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2008-08-10 23:26:19 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2008-08-10 23:26:19 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2008-08-10 23:26:06 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2008-08-10 23:26:05 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2008-08-10 23:26:05 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2008-08-10 23:26:04 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2008-08-10 23:26:04 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2008-08-10 23:26:03 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2008-08-10 23:26:02 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2008-08-10 23:26:02 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2008-08-10 23:26:01 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2008-08-10 23:25:59 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2008-08-10 23:25:43 ----D---- C:\Program Files\Java
2008-08-10 23:25:10 ----D---- C:\Program Files\Common Files\Java
2008-08-10 08:13:38 ----D---- C:\Program Files\MSBuild
2008-08-10 08:13:34 ----D---- C:\WINDOWS\system32\XPSViewer
2008-08-10 08:13:30 ----D---- C:\Program Files\Reference Assemblies
2008-08-10 08:13:08 ----N---- C:\WINDOWS\system32\spmsg2.dll
2008-08-10 08:07:52 ----D---- C:\Program Files\Windows Defender
2008-08-10 07:53:50 ----D---- C:\Program Files\Driver-Soft
2008-08-10 07:53:33 ----D---- C:\Documents and Settings\Sue\Application Data\WinRAR
2008-08-10 07:53:16 ----D---- C:\Program Files\WinRAR
2008-08-10 07:47:26 ----A---- C:\WINDOWS\system32\XceedZip.dll
2008-08-10 07:43:50 ----D---- C:\Documents and Settings\Sue\Application Data\Google
2008-08-10 07:43:46 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2008-08-10 07:43:03 ----D---- C:\Documents and Settings\All Users\Application Data\Google Updater
2008-08-10 07:43:01 ----D---- C:\Program Files\Google
2008-08-10 07:39:47 ----D---- C:\Documents and Settings\Sue\Application Data\BitTorrent
2008-08-10 07:39:15 ----D---- C:\Program Files\DNA
2008-08-10 07:39:15 ----D---- C:\Documents and Settings\Sue\Application Data\DNA
2008-08-10 07:39:14 ----D---- C:\Program Files\BitTorrent
2008-08-10 07:38:07 ----D---- C:\Program Files\ImgBurn
2008-08-10 07:37:57 ----D---- C:\Program Files\DVDFab HD Decrypter 4
2008-08-10 07:25:58 ----D---- C:\Documents and Settings\Sue\Application Data\Mozilla
2008-08-10 07:25:53 ----D---- C:\Program Files\Mozilla Firefox
2008-08-10 07:24:07 ----A---- C:\WINDOWS\system32\Incinerator.dll
2008-08-10 07:24:04 ----SHD---- C:\RECYCLER
2008-08-10 07:23:56 ----A---- C:\WINDOWS\system32\smrgdf.exe
2008-08-10 07:23:56 ----A---- C:\WINDOWS\system32\iolobtdfg.exe
2008-08-10 07:23:49 ----D---- C:\Program Files\iolo
2008-08-10 07:17:57 ----A---- C:\WINDOWS\system32\mfc45.dll
2008-08-10 07:17:08 ----D---- C:\Documents and Settings\Sue\Application Data\iolo
2008-08-10 07:17:08 ----D---- C:\Documents and Settings\All Users\Application Data\iolo
2008-08-10 07:04:40 ----D---- C:\Documents and Settings\Sue\Application Data\MSN6
2008-08-10 07:04:40 ----D---- C:\Documents and Settings\All Users\Application Data\MSN6
2008-08-10 06:50:46 ----HDC---- C:\WINDOWS\ie7
2008-08-10 06:21:48 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2008-08-10 06:21:27 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2008-08-10 06:13:45 ----D---- C:\Documents and Settings\Sue\Application Data\Windows Search
2008-08-10 06:08:35 ----D---- C:\Documents and Settings\Sue\Application Data\Windows Desktop Search
2008-08-10 06:08:18 ----D---- C:\WINDOWS\system32\GroupPolicy
2008-08-10 06:08:18 ----D---- C:\Program Files\Windows Desktop Search
2008-08-10 06:08:07 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2008-08-10 06:08:02 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2008-08-10 06:07:44 ----D---- C:\Program Files\Microsoft Silverlight
2008-08-10 06:07:37 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-08-10 06:07:36 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2008-08-10 06:07:25 ----D---- C:\Program Files\Windows Media Connect 2
2008-08-10 06:07:18 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2008-08-10 06:06:47 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2008-08-10 06:06:24 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2008-08-10 06:03:36 ----D---- C:\WINDOWS\nview
2008-08-10 06:03:36 ----A---- C:\WINDOWS\system32\nvudisp.exe
2008-08-10 06:03:26 ----RSD---- C:\WINDOWS\assembly
2008-08-10 06:03:25 ----D---- C:\WINDOWS\Microsoft.NET
2008-08-10 06:03:24 ----D---- C:\WINDOWS\system32\URTTemp
2008-08-10 06:03:16 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2008-08-10 06:03:04 ----D---- C:\NVIDIA
2008-08-10 05:48:20 ----D---- C:\WINDOWS\WBEM
2008-08-10 05:37:04 ----A---- C:\WINDOWS\system32\dunzip32.dll
2008-08-10 05:28:28 ----D---- C:\WINDOWS\Prefetch
2008-08-10 05:26:07 ----D---- C:\WINDOWS\system32\en
2008-08-10 04:50:26 ----HDC---- C:\WINDOWS\$NtUninstallKB950759$
2008-08-10 04:38:35 ----D---- C:\WINDOWS\OPTIONS
2008-08-10 04:38:29 ----D---- C:\Documents and Settings\Sue\Application Data\InstallShield
2008-08-10 04:37:57 ----D---- C:\WINDOWS\system32\Lang
2008-08-10 04:36:54 ----A---- C:\WINDOWS\system32\ChCfg.exe
2008-08-10 04:36:37 ----D---- C:\WINDOWS\system32\RTCOM
2008-08-10 04:36:35 ----A---- C:\WINDOWS\system32\ksuser.dll
2008-08-10 04:36:35 ----A---- C:\WINDOWS\system32\ksuser(2).dll
2008-08-10 04:36:32 ----A---- C:\WINDOWS\SoundMan.exe
2008-08-10 04:36:32 ----A---- C:\WINDOWS\SkyTel.exe
2008-08-10 04:36:32 ----A---- C:\WINDOWS\RtlUpd.exe
2008-08-10 04:36:31 ----A---- C:\WINDOWS\RTLCPL.exe
2008-08-10 04:36:26 ----A---- C:\WINDOWS\RTHDCPL.exe
2008-08-10 04:36:25 ----A---- C:\WINDOWS\MicCal.exe
2008-08-10 04:36:23 ----A---- C:\WINDOWS\Alcmtr.exe
2008-08-10 04:36:22 ----D---- C:\Program Files\Realtek
2008-08-10 04:36:22 ----A---- C:\WINDOWS\alcwzrd.exe
2008-08-10 04:36:21 ----HD---- C:\Program Files\InstallShield Installation Information
2008-08-10 04:36:20 ----A---- C:\WINDOWS\HideWin.exe
2008-08-10 04:36:19 ----A---- C:\WINDOWS\RtlExUpd.dll
2008-08-10 04:36:15 ----D---- C:\Program Files\Common Files\InstallShield
2008-08-10 04:35:55 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-08-10 04:35:54 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXP$
2008-08-10 04:35:25 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-08-10 04:35:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-08-10 04:35:16 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-08-10 04:35:12 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-08-10 04:35:09 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-08-10 04:35:05 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2008-08-10 04:35:00 ----HDC---- C:\WINDOWS\$NtUninstallKB942763$
2008-08-10 04:34:41 ----D---- C:\WINDOWS\ie7updates
2008-08-10 04:34:40 ----SD---- C:\WINDOWS\system32\Microsoft
2008-08-10 04:34:31 ----A---- C:\WINDOWS\system32\usbui.dll
2008-08-10 04:34:10 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-08-10 04:34:09 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-08-10 04:34:09 ----D---- C:\Program Files\Intel
2008-08-10 04:34:09 ----A---- C:\WINDOWS\system32\CSVer.dll
2008-08-10 04:34:06 ----D---- C:\Intel
2008-08-10 04:34:01 ----D---- C:\Program Files\Yahoo!
2008-08-10 04:33:13 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2008-08-10 04:33:01 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2008-08-10 04:28:04 ----SHD---- C:\WINDOWS\Installer
2008-08-10 04:28:02 ----D---- C:\Documents and Settings\Sue\Application Data\Identities
2008-08-10 04:27:58 ----HD---- C:\Program Files\Uninstall Information
2008-08-10 04:27:52 ----ASH---- C:\Documents and Settings\Sue\Application Data\desktop.ini
2008-08-10 04:27:51 ----SD---- C:\Documents and Settings\Sue\Application Data\Microsoft
2008-08-10 04:27:20 ----SHD---- C:\System Volume Information
2008-08-10 04:27:19 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-08-10 04:24:10 ----D---- C:\WINDOWS\system32\xircom
2008-08-10 04:24:10 ----D---- C:\Program Files\xerox
2008-08-10 04:24:10 ----D---- C:\Program Files\microsoft frontpage
2008-08-10 04:24:03 ----AC---- C:\WINDOWS\control.ini
2008-08-10 04:24:03 ----A---- C:\AUTOEXEC.BAT
2008-08-10 04:23:58 ----A---- C:\WINDOWS\system32\mapi32.dll
2008-08-10 04:23:35 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-08-10 04:23:35 ----RD---- C:\WINDOWS\Offline Web Pages
2008-08-10 04:23:35 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2008-08-10 04:23:32 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2008-08-10 04:23:14 ----D---- C:\WINDOWS\system32\DirectX
2008-08-10 04:22:42 ----A---- C:\WINDOWS\system32\safrslv.dll
2008-08-10 04:22:42 ----A---- C:\WINDOWS\system32\safrdm.dll
2008-08-10 04:22:42 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2008-08-10 04:22:42 ----A---- C:\WINDOWS\system32\racpldlg.dll
2008-08-10 04:22:42 ----A---- C:\WINDOWS\system32\atrace.dll
2008-08-10 04:22:38 ----A---- C:\WINDOWS\system32\desktop.ini
2008-08-10 04:22:38 ----A---- C:\WINDOWS\desktop.ini
2008-08-10 04:22:31 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2008-08-10 04:22:31 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2008-08-10 04:22:30 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2008-08-10 04:22:29 ----A---- C:\WINDOWS\system32\acctres.dll
2008-08-10 04:22:28 ----D---- C:\Program Files\Common Files\Services
2008-08-10 04:22:27 ----A---- C:\WINDOWS\system32\inetres.dll
2008-08-10 04:22:23 ----SD---- C:\WINDOWS\Tasks
2008-08-10 04:22:23 ----A---- C:\WINDOWS\system32\isign32.dll
2008-08-10 04:22:23 ----A---- C:\WINDOWS\system32\inetcfg.dll
2008-08-10 04:22:23 ----A---- C:\WINDOWS\system32\icwphbk.dll
2008-08-10 04:22:23 ----A---- C:\WINDOWS\system32\icwdial.dll
2008-08-10 04:22:23 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2008-08-10 04:22:20 ----D---- C:\Program Files\Common Files\MSSoap
2008-08-10 04:22:15 ----D---- C:\WINDOWS\srchasst
2008-08-10 04:22:14 ----D---- C:\WINDOWS\system32\Macromed
2008-08-10 04:22:13 ----A---- C:\WINDOWS\system32\qmgr.dll
2008-08-10 04:22:12 ----D---- C:\Program Files\Movie Maker
2008-08-10 04:22:07 ----D---- C:\WINDOWS\system32\Restore
2008-08-10 04:22:07 ----D---- C:\WINDOWS\PCHealth
2008-08-10 04:22:07 ----A---- C:\WINDOWS\system32\srsvc.dll
2008-08-10 04:22:07 ----A---- C:\WINDOWS\system32\srsvc(3).dll
2008-08-10 04:22:07 ----A---- C:\WINDOWS\system32\srrstr.dll
2008-08-10 04:22:07 ----A---- C:\WINDOWS\system32\srclient.dll
2008-08-10 04:22:07 ----A---- C:\WINDOWS\system32\srclient(3).dll
2008-08-10 04:22:06 ----A---- C:\WINDOWS\system32\mnmdd.dll
2008-08-10 04:22:06 ----A---- C:\WINDOWS\system32\ils.dll
2008-08-10 04:22:05 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2008-08-10 04:22:05 ----A---- C:\WINDOWS\system32\msconf.dll
2008-08-10 04:22:03 ----D---- C:\Program Files\NetMeeting
2008-08-10 04:22:03 ----A---- C:\WINDOWS\system32\msoert2.dll
2008-08-10 04:22:03 ----A---- C:\WINDOWS\system32\msoeacct.dll
2008-08-10 04:22:02 ----A---- C:\WINDOWS\system32\inetcomm.dll
2008-08-10 04:22:01 ----D---- C:\Program Files\Outlook Express
2008-08-10 04:22:01 ----A---- C:\WINDOWS\system32\schedsvc.dll
2008-08-10 04:22:01 ----A---- C:\WINDOWS\system32\schedsvc(3).dll
2008-08-10 04:22:01 ----A---- C:\WINDOWS\system32\mstinit.exe
2008-08-10 04:22:01 ----A---- C:\WINDOWS\system32\mstask.dll
2008-08-10 04:21:57 ----D---- C:\Program Files\Common Files\System
2008-08-10 04:21:56 ----D---- C:\Program Files\Internet Explorer
2008-08-10 04:21:54 ----D---- C:\Program Files\ComPlus Applications
2008-08-10 04:21:53 ----D---- C:\WINDOWS\Registration
2008-08-10 04:21:53 ----A---- C:\WINDOWS\vbaddin.ini
2008-08-10 04:21:53 ----A---- C:\WINDOWS\vb.ini
2008-08-10 04:21:44 ----HD---- C:\Program Files\WindowsUpdate
2008-08-10 04:21:44 ----D---- C:\Program Files\Online Services
2008-08-10 04:21:43 ----D---- C:\Program Files\Windows Media Player
2008-08-10 04:21:41 ----D---- C:\Program Files\Messenger
2008-08-10 04:21:35 ----D---- C:\Program Files\MSN Gaming Zone
2008-08-10 04:21:35 ----A---- C:\WINDOWS\system32\write.exe
2008-08-10 04:21:25 ----A---- C:\WINDOWS\system32\accwiz.exe
2008-08-10 04:21:24 ----A---- C:\WINDOWS\system32\sndvol32.exe
2008-08-10 04:21:24 ----A---- C:\WINDOWS\system32\sndrec32.exe
2008-08-10 04:21:23 ----A---- C:\WINDOWS\system32\hticons.dll
2008-08-10 04:21:23 ----A---- C:\WINDOWS\system32\avwav.dll
2008-08-10 04:21:23 ----A---- C:\WINDOWS\system32\avtapi.dll
2008-08-10 04:21:23 ----A---- C:\WINDOWS\system32\avmeter.dll
2008-08-10 04:21:22 ----A---- C:\WINDOWS\system32\winchat.exe
2008-08-10 04:21:15 ----A---- C:\WINDOWS\system32\getuname.dll
2008-08-10 04:21:15 ----A---- C:\WINDOWS\system32\charmap.exe
2008-08-10 04:21:14 ----A---- C:\WINDOWS\system32\winmine.exe
2008-08-10 04:21:14 ----A---- C:\WINDOWS\system32\sol.exe
2008-08-10 04:21:14 ----A---- C:\WINDOWS\system32\calc.exe
2008-08-10 04:21:13 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2008-08-10 04:21:13 ----A---- C:\WINDOWS\system32\tskill.exe
2008-08-10 04:21:13 ----A---- C:\WINDOWS\system32\reset.exe
2008-08-10 04:21:13 ----A---- C:\WINDOWS\system32\rdshost.exe
2008-08-10 04:21:13 ----A---- C:\WINDOWS\system32\mshearts.exe
2008-08-10 04:21:13 ----A---- C:\WINDOWS\system32\freecell.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\tslabels.ini
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\tscon.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\shadow.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\rwinsta.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\regini.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\qwinsta.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\qprocess.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\qappsrv.exe
2008-08-10 04:21:12 ----A---- C:\WINDOWS\system32\msg.exe
2008-08-10 04:21:11 ----A---- C:\WINDOWS\system32\xolehlp.dll
2008-08-10 04:21:11 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2008-08-10 04:21:11 ----A---- C:\WINDOWS\system32\msdtctm.dll
2008-08-10 04:21:11 ----A---- C:\WINDOWS\system32\logoff.exe
2008-08-10 04:21:11 ----A---- C:\WINDOWS\system32\cdmodem.dll
2008-08-10 04:21:10 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2008-08-10 04:21:10 ----A---- C:\WINDOWS\system32\msdtclog.dll
2008-08-10 04:21:10 ----A---- C:\WINDOWS\system32\msdtc.exe
2008-08-10 04:21:09 ----D---- C:\WINDOWS\system32\en-us
2008-08-10 04:21:09 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2008-08-10 04:21:09 ----A---- C:\WINDOWS\system32\mtxex.dll
2008-08-10 04:21:09 ----A---- C:\WINDOWS\system32\mtxdm.dll
2008-08-10 04:21:09 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2008-08-10 04:21:09 ----A---- C:\WINDOWS\system32\comaddin.dll
2008-08-10 04:21:08 ----D---- C:\WINDOWS\system32\scripting
2008-08-10 04:21:08 ----A---- C:\WINDOWS\system32\stclient.dll
2008-08-10 04:21:08 ----A---- C:\WINDOWS\system32\comuid.dll
2008-08-10 04:21:08 ----A---- C:\WINDOWS\system32\comrepl.dll
2008-08-10 04:21:08 ----A---- C:\WINDOWS\system32\clbcatex.dll
2008-08-10 04:21:08 ----A---- C:\WINDOWS\system32\catsrvps.dll
2008-08-10 04:21:07 ----D---- C:\WINDOWS\l2schemas
2008-08-10 04:21:07 ----A---- C:\WINDOWS\system32\comsnap.dll
2008-08-10 04:21:00 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2008-08-10 04:21:00 ----A---- C:\WINDOWS\system32\servdeps.dll
2008-08-10 04:21:00 ----A---- C:\WINDOWS\system32\mmfutil.dll
2008-08-10 04:21:00 ----A---- C:\WINDOWS\system32\cmprops.dll
2008-08-10 04:20:53 ----D---- C:\Program Files\MSN
2008-08-10 04:20:52 ----D---- C:\Program Files\Windows NT
2008-08-10 04:20:52 ----A---- C:\WINDOWS\system32\spider.exe
2008-08-10 04:20:52 ----A---- C:\WINDOWS\system32\mspaint.exe
2008-08-10 04:20:52 ----A---- C:\WINDOWS\system32\mplay32.exe
2008-08-10 04:20:52 ----A---- C:\WINDOWS\system32\clipbrd.exe
2008-08-10 04:20:51 ----A---- C:\WINDOWS\system32\wuauserv.dll
2008-08-10 04:20:51 ----A---- C:\WINDOWS\system32\wuauserv(3).dll
2008-08-10 04:20:51 ----A---- C:\WINDOWS\system32\wuaueng.dll
2008-08-10 04:20:51 ----A---- C:\WINDOWS\system32\wuauclt.exe
2008-08-10 04:20:51 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2008-08-10 04:20:50 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2008-08-10 04:20:50 ----A---- C:\WINDOWS\system32\sessmgr.exe
2008-08-10 04:20:50 ----A---- C:\WINDOWS\system32\remotepg.dll
2008-08-10 04:20:50 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2008-08-10 04:20:50 ----A---- C:\WINDOWS\system32\rdchost.dll
2008-08-10 04:20:50 ----A---- C:\WINDOWS\system32\mstscax.dll
2008-08-10 04:20:50 ----A---- C:\WINDOWS\system32\mstsc.exe
2008-08-10 04:20:49 ----D---- C:\WINDOWS\system32\MsDtc
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\termsrv.dll
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\termsrv(3).dll
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\rdpclip.exe
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\icaapi.dll
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\icaapi(3).dll
2008-08-10 04:20:49 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2008-08-10 04:20:48 ----D---- C:\WINDOWS\system32\Com
2008-08-10 04:20:40 ----A---- C:\WINDOWS\system32\licwmi.dll
2008-08-10 04:17:50 ----D---- C:\WINDOWS\network diagnostic
2008-08-10 04:08:36 ----D---- C:\WINDOWS\system32\LogFiles
2008-08-10 04:07:47 ----D---- C:\Documents and Settings\All Users\Application Data\SiteAdvisor
2008-08-10 04:06:52 ----N---- C:\WINDOWS\system32\xmllite.dll
2008-08-10 04:06:51 ----N---- C:\WINDOWS\system32\wmphoto.dll
2008-08-10 04:06:49 ----N---- C:\WINDOWS\system32\wlanapi.dll
2008-08-10 04:06:48 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2008-08-10 04:06:48 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2008-08-10 04:06:46 ----N---- C:\WINDOWS\system32\tzchange.exe
2008-08-10 04:06:46 ----N---- C:\WINDOWS\system32\tspkg.dll
2008-08-10 04:06:46 ----N---- C:\WINDOWS\system32\tsgqec.dll
2008-08-10 04:06:41 ----N---- C:\WINDOWS\system32\setupn.exe
2008-08-10 04:06:40 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2008-08-10 04:06:39 ----N---- C:\WINDOWS\system32\rasqec.dll
2008-08-10 04:06:39 ----N---- C:\WINDOWS\system32\qutil.dll
2008-08-10 04:06:39 ----N---- C:\WINDOWS\system32\qcliprov.dll
2008-08-10 04:06:38 ----N---- C:\WINDOWS\system32\qagentrt.dll
2008-08-10 04:06:38 ----N---- C:\WINDOWS\system32\qagent.dll
2008-08-10 04:06:38 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2008-08-10 04:06:37 ----N---- C:\WINDOWS\system32\onex.dll
2008-08-10 04:06:34 ----N---- C:\WINDOWS\system32\napstat.exe
2008-08-10 04:06:34 ----N---- C:\WINDOWS\system32\napmontr.dll
2008-08-10 04:06:34 ----N---- C:\WINDOWS\system32\napipsec.dll
2008-08-10 04:06:34 ----N---- C:\WINDOWS\system32\msxml6r.dll
2008-08-10 04:06:34 ----N---- C:\WINDOWS\system32\msxml6.dll
2008-08-10 04:06:34 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2008-08-10 04:06:34 ----N---- C:\WINDOWS\system32\mssha.dll
2008-08-10 04:06:28 ----N---- C:\WINDOWS\system32\mmcperf.exe
2008-08-10 04:06:27 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2008-08-10 04:06:27 ----N---- C:\WINDOWS\system32\mmcex.dll
2008-08-10 04:06:27 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2008-08-10 04:06:20 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2008-08-10 04:06:20 ----N---- C:\WINDOWS\system32\kmsvc.dll
2008-08-10 04:06:20 ----N---- C:\WINDOWS\system32\kbdpash.dll
2008-08-10 04:06:20 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2008-08-10 04:06:20 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2008-08-10 04:06:20 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eapsvc.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eapqec.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eappprxy.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eapphost.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eappgnui.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eappcfg.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2008-08-10 04:06:16 ----N---- C:\WINDOWS\system32\eapolqec.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dot3ui.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dot3svc.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dot3msm.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dot3api.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dimsroam.dll
2008-08-10 04:06:15 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2008-08-10 04:06:14 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2008-08-10 04:06:14 ----N---- C:\WINDOWS\system32\credssp.dll
2008-08-10 04:06:12 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2008-08-10 04:06:12 ----N---- C:\WINDOWS\system32\azroles.dll
2008-08-10 04:06:10 ----N---- C:\WINDOWS\system32\aaclient.dll
2008-08-10 04:03:54 ----D---- C:\Program Files\McAfee.com
2008-08-10 04:03:50 ----D---- C:\Program Files\Common Files\McAfee
2008-08-10 04:03:48 ----D---- C:\Program Files\McAfee
2008-08-10 03:55:26 ----D---- C:\Documents and Settings\All Users\Application Data\McAfee
2008-08-10 03:54:36 ----DC---- C:\WINDOWS\$NtUninstallKB911565$
2008-08-10 03:50:04 ----DC---- C:\WINDOWS\$NtUninstallKB924496$(2)
2008-08-10 03:49:57 ----HDC---- C:\WINDOWS\$NtUninstallKB924191$
2008-08-10 03:49:50 ----HDC---- C:\WINDOWS\$NtUninstallKB923414$
2008-08-10 03:49:42 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2008-08-10 03:49:34 ----HDC---- C:\WINDOWS\$NtUninstallKB922819$
2008-08-10 03:49:26 ----HDC---- C:\WINDOWS\$NtUninstallKB922616$
2008-08-10 03:49:19 ----HDC---- C:\WINDOWS\$NtUninstallKB921883$
2008-08-10 03:49:10 ----HDC---- C:\WINDOWS\$NtUninstallKB921398$
2008-08-10 03:49:02 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2008-08-10 03:48:55 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2008-08-10 03:48:48 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2008-08-10 03:48:41 ----HDC---- C:\WINDOWS\$NtUninstallKB919007$
2008-08-10 03:48:33 ----HDC---- C:\WINDOWS\$NtUninstallKB917953$
2008-08-10 03:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB917422$
2008-08-10 03:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB917344$
2008-08-10 03:48:09 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2008-08-10 03:48:02 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2008-08-10 03:47:54 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2008-08-10 03:47:47 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2008-08-10 03:47:39 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2008-08-10 03:47:32 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2008-08-10 03:47:25 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2008-08-10 03:47:18 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2008-08-10 03:47:10 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2008-08-10 03:47:02 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2008-08-10 03:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2008-08-10 03:46:47 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2008-08-10 03:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2008-08-10 03:46:30 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2008-08-10 03:46:22 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2008-08-10 03:46:13 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2008-08-10 03:46:05 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2008-08-10 03:45:57 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2008-08-10 03:45:50 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2008-08-10 03:45:42 ----HDC----