trafracp.dll -> %SystemRoot%\System32\trafracp.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] trk.dll -> %SystemRoot%\System32\trk.dll -> [Folder | Created Date = 3/17/2008 6:37:42 PM | Attr = RHS] tubby.dll -> %SystemRoot%\System32\tubby.dll -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] twain32.dll -> %SystemRoot%\System32\twain32.dll -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] twpkad.dll -> %SystemRoot%\System32\twpkad.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] twpr32.dll -> %SystemRoot%\System32\twpr32.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] twunk_65.exe -> %SystemRoot%\System32\twunk_65.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] uninmyad.exe -> %SystemRoot%\System32\uninmyad.exe -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] unsocul.exe -> %SystemRoot%\System32\unsocul.exe -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] unstsa2.exe -> %SystemRoot%\System32\unstsa2.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] update_bho.dll -> %SystemRoot%\System32\update_bho.dll -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] update_com.dll -> %SystemRoot%\System32\update_com.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] update_hosts.dll -> %SystemRoot%\System32\update_hosts.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] update_removeold.dll -> %SystemRoot%\System32\update_removeold.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] update_rsp.DLL -> %SystemRoot%\System32\update_rsp.DLL -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] updtscheduler.exe -> %SystemRoot%\System32\updtscheduler.exe -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] urncb.dll -> %SystemRoot%\System32\urncb.dll -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] urncbc.dll -> %SystemRoot%\System32\urncbc.dll -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] v4pbpt51.dll -> %SystemRoot%\System32\v4pbpt51.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] VACFix.exe -> %SystemRoot%\System32\VACFix.exe -> S!Ri.URZ [Ver = | Size = 86528 bytes | Created Date = 3/17/2008 6:51:29 PM | Attr = ] vb5dmspo.dll -> %SystemRoot%\System32\vb5dmspo.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] VCCLSID.exe -> %SystemRoot%\System32\VCCLSID.exe -> S!Ri [Ver = | Size = 289144 bytes | Created Date = 3/17/2008 6:51:29 PM | Attr = ] vdmt16.sys -> %SystemRoot%\System32\vdmt16.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] vdnt32.sys -> %SystemRoot%\System32\vdnt32.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] version.exe -> %SystemRoot%\System32\version.exe -> [Folder | Created Date = 3/17/2008 6:37:48 PM | Attr = RHS] VFind.exe -> %SystemRoot%\System32\VFind.exe -> [Ver = | Size = 49152 bytes | Created Date = 3/22/2008 6:41:56 PM | Attr = ] vistax.dll -> %SystemRoot%\System32\vistax.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] vlcx052.dll -> %SystemRoot%\System32\vlcx052.dll -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] vnetsmme.dll -> %SystemRoot%\System32\vnetsmme.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] vorbis.dll -> %SystemRoot%\System32\vorbis.dll -> [Ver = | Size = 974848 bytes | Created Date = 3/22/2008 9:49:14 PM | Attr = R ] vorbisfile.dll -> %SystemRoot%\System32\vorbisfile.dll -> [Ver = | Size = 28672 bytes | Created Date = 3/22/2008 9:49:14 PM | Attr = R ] vsxmpgpc.dll -> %SystemRoot%\System32\vsxmpgpc.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] vtd_16.exe -> %SystemRoot%\System32\vtd_16.exe -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] vtlbar1.dll -> %SystemRoot%\System32\vtlbar1.dll -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] vwix32.exe -> %SystemRoot%\System32\vwix32.exe -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] vx0.nls -> %SystemRoot%\System32\vx0.nls -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx0x.nls -> %SystemRoot%\System32\vx0x.nls -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx1.nls -> %SystemRoot%\System32\vx1.nls -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx1x.nls -> %SystemRoot%\System32\vx1x.nls -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx2.dll -> %SystemRoot%\System32\vx2.dll -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] vx2.nls -> %SystemRoot%\System32\vx2.nls -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx2x.nls -> %SystemRoot%\System32\vx2x.nls -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx3.nls -> %SystemRoot%\System32\vx3.nls -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx3x.nls -> %SystemRoot%\System32\vx3x.nls -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] w1nt5k.exe -> %SystemRoot%\System32\w1nt5k.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] w32ntupdt.exe -> %SystemRoot%\System32\w32ntupdt.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] w32_ss.exe -> %SystemRoot%\System32\w32_ss.exe -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] w3sskbda.dll -> %SystemRoot%\System32\w3sskbda.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] waeb.dll -> %SystemRoot%\System32\waeb.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] wbtvsffd.exe -> %SystemRoot%\System32\wbtvsffd.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] wcadw.dll -> %SystemRoot%\System32\wcadw.dll -> [Folder | Created Date = 3/17/2008 6:37:35 PM | Attr = RHS] wd.sys -> %SystemRoot%\System32\wd.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] wdns33.exe -> %SystemRoot%\System32\wdns33.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] webalize.dll -> %SystemRoot%\System32\webalize.dll -> [Folder | Created Date = 3/17/2008 6:37:56 PM | Attr = RHS] webinfo.dll -> %SystemRoot%\System32\webinfo.dll -> [Folder | Created Date = 3/17/2008 6:37:35 PM | Attr = RHS] wer1306.dll -> %SystemRoot%\System32\wer1306.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] wfdgmr.exe -> %SystemRoot%\System32\wfdgmr.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] wfdmgr.exe -> %SystemRoot%\System32\wfdmgr.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] wiatwain.dll -> %SystemRoot%\System32\wiatwain.dll -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] wid32.exe -> %SystemRoot%\System32\wid32.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] win type -> %SystemRoot%\System32\win type -> [Ver = | Size = 248 bytes | Created Date = 3/17/2008 6:37:28 PM | Attr = RH ] win24.exe -> %SystemRoot%\System32\win24.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] win32lib.exe -> %SystemRoot%\System32\win32lib.exe -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] winats.dll -> %SystemRoot%\System32\winats.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winctl3.ocx -> %SystemRoot%\System32\winctl3.ocx -> [Folder | Created Date = 3/17/2008 6:37:26 PM | Attr = RHS] winctl4.dll -> %SystemRoot%\System32\winctl4.dll -> [Folder | Created Date = 3/17/2008 6:37:26 PM | Attr = RHS] windasz-updote.exe -> %SystemRoot%\System32\windasz-updote.exe -> [Folder | Created Date = 3/17/2008 6:37:52 PM | Attr = RHS] windec32.dll -> %SystemRoot%\System32\windec32.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] windirect.exe -> %SystemRoot%\System32\windirect.exe -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] windll.exeopen -> %SystemRoot%\System32\windll.exeopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] windll.exeopenopen -> %SystemRoot%\System32\windll.exeopenopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] windmy.dll -> %SystemRoot%\System32\windmy.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] windowsfirewall.exe -> %SystemRoot%\System32\windowsfirewall.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] windowsie.dll -> %SystemRoot%\System32\windowsie.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] winds.exe -> %SystemRoot%\System32\winds.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] winenc32.dll -> %SystemRoot%\System32\winenc32.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] winf44.dll -> %SystemRoot%\System32\winf44.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] winftsap.dll -> %SystemRoot%\System32\winftsap.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] winftsap.exe -> %SystemRoot%\System32\winftsap.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] winga.exe -> %SystemRoot%\System32\winga.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] wingmt32.exe -> %SystemRoot%\System32\wingmt32.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] wingo.exe -> %SystemRoot%\System32\wingo.exe -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] wingo.exeopen -> %SystemRoot%\System32\wingo.exeopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] wingo.exeopenopen -> %SystemRoot%\System32\wingo.exeopenopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] winhlpapi.exe -> %SystemRoot%\System32\winhlpapi.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] wininfo.exe -> %SystemRoot%\System32\wininfo.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] winksl.exe -> %SystemRoot%\System32\winksl.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winlink.dll -> %SystemRoot%\System32\winlink.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] winlo.exe -> %SystemRoot%\System32\winlo.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] winlocator.dll -> %SystemRoot%\System32\winlocator.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winlocatorhelper.dll -> %SystemRoot%\System32\winlocatorhelper.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winlow.sys -> %SystemRoot%\System32\winlow.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] winm32.dll -> %SystemRoot%\System32\winm32.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] winnb40.dll -> %SystemRoot%\System32\winnb40.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb41.dll -> %SystemRoot%\System32\winnb41.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb42.dll -> %SystemRoot%\System32\winnb42.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb51.dll -> %SystemRoot%\System32\winnb51.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb52.dll -> %SystemRoot%\System32\winnb52.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb56.dll -> %SystemRoot%\System32\winnb56.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb57.dll -> %SystemRoot%\System32\winnb57.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb58.dll -> %SystemRoot%\System32\winnb58.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb60.dll -> %SystemRoot%\System32\winnb60.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] winns32.exe -> %SystemRoot%\System32\winns32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] winnt.exe -> %SystemRoot%\System32\winnt.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] winntcreate.exe -> %SystemRoot%\System32\winntcreate.exe -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] winproc32.exe -> %SystemRoot%\System32\winproc32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] winpup.exe -> %SystemRoot%\System32\winpup.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winpup32.exe -> %SystemRoot%\System32\winpup32.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winres.dll -> %SystemRoot%\System32\winres.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] winrvl.exe -> %SystemRoot%\System32\winrvl.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winsb.dll -> %SystemRoot%\System32\winsb.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winservn.exe -> %SystemRoot%\System32\winservn.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] winservs.exe -> %SystemRoot%\System32\winservs.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] winshow.dll -> %SystemRoot%\System32\winshow.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winsrm32.dll -> %SystemRoot%\System32\winsrm32.dll -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] winstart.exe -> %SystemRoot%\System32\winstart.exe -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] winstart.pif -> %SystemRoot%\System32\winstart.pif -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] winstart001.exe -> %SystemRoot%\System32\winstart001.exe -> [Folder | Created Date = 3/17/2008 6:37:47 PM | Attr = RHS] winsvc32.exe -> %SystemRoot%\System32\winsvc32.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] winsys.exe -> %SystemRoot%\System32\winsys.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] winsyscfg.exe -> %SystemRoot%\System32\winsyscfg.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] wintasker.exe -> %SystemRoot%\System32\wintasker.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] wintbp.exe -> %SystemRoot%\System32\wintbp.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] wintbpx.exe -> %SystemRoot%\System32\wintbpx.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] wintems.exe -> %SystemRoot%\System32\wintems.exe -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] wintft.dll -> %SystemRoot%\System32\wintft.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] wintsvsu.exe -> %SystemRoot%\System32\wintsvsu.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] winutil4.dll -> %SystemRoot%\System32\winutil4.dll -> [Folder | Created Date = 3/17/2008 6:37:26 PM | Attr = RHS] winvnc.exe -> %SystemRoot%\System32\winvnc.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] winwsl.exe -> %SystemRoot%\System32\winwsl.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winxp.exeopen -> %SystemRoot%\System32\winxp.exeopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] winxp.exeopenopen -> %SystemRoot%\System32\winxp.exeopenopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] winxp.exeopenopenopen -> %SystemRoot%\System32\winxp.exeopenopenopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] winxp.exeopenopenopenopen -> %SystemRoot%\System32\winxp.exeopenopenopenopen -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] winyw32.exe -> %SystemRoot%\System32\winyw32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] wnsapisu.exe -> %SystemRoot%\System32\wnsapisu.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnsapisv.exe -> %SystemRoot%\System32\wnsapisv.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnscpcc.exe -> %SystemRoot%\System32\wnscpcc.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnscpit.exe -> %SystemRoot%\System32\wnscpit.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnsintsv.exe -> %SystemRoot%\System32\wnsintsv.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnsinttr.exe -> %SystemRoot%\System32\wnsinttr.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] word10.dll -> %SystemRoot%\System32\word10.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] wpwmgrs.exe -> %SystemRoot%\System32\wpwmgrs.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] WS2Fix.exe -> %SystemRoot%\System32\WS2Fix.exe -> [Ver = | Size = 25600 bytes | Created Date = 3/17/2008 6:51:29 PM | Attr = ] wshnseri.exe -> %SystemRoot%\System32\wshnseri.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] wshtlprh.dll -> %SystemRoot%\System32\wshtlprh.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] wtoolsb.dll -> %SystemRoot%\System32\wtoolsb.dll -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] wuauclt.dll -> %SystemRoot%\System32\wuauclt.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] wxtwdx.dll -> %SystemRoot%\System32\wxtwdx.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] wz.dll -> %SystemRoot%\System32\wz.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] wzhelper.dll -> %SystemRoot%\System32\wzhelper.dll -> [Folder | Created Date = 3/17/2008 6:37:56 PM | Attr = RHS] xdpptp.sys -> %SystemRoot%\System32\xdpptp.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xdudtt.dll -> %SystemRoot%\System32\xdudtt.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xkrdk.dll -> %SystemRoot%\System32\xkrdk.dll -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] xmm13g.dll -> %SystemRoot%\System32\xmm13g.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xmsk32.dll -> %SystemRoot%\System32\xmsk32.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xmsk64.sys -> %SystemRoot%\System32\xmsk64.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xopptp.dll -> %SystemRoot%\System32\xopptp.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xopptp.sys -> %SystemRoot%\System32\xopptp.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xpfirewall.exe -> %SystemRoot%\System32\xpfirewall.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] xplugin.dll -> %SystemRoot%\System32\xplugin.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] xptp16.dll -> %SystemRoot%\System32\xptp16.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xptptt.dll -> %SystemRoot%\System32\xptptt.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] xxvyaj.exe -> %SystemRoot%\System32\xxvyaj.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] xxxvideo.hta -> %SystemRoot%\System32\xxxvideo.hta -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] ycsrgb.sys -> %SystemRoot%\System32\ycsrgb.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] ycsvga.sys -> %SystemRoot%\System32\ycsvga.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] ycsvgd.sys -> %SystemRoot%\System32\ycsvgd.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] ydsvgd.dll -> %SystemRoot%\System32\ydsvgd.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] ydsvgd.sys -> %SystemRoot%\System32\ydsvgd.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvbb01.dll -> %SystemRoot%\System32\yvbb01.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvpp01.dll -> %SystemRoot%\System32\yvpp01.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvpp01.sys -> %SystemRoot%\System32\yvpp01.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvpp02.sys -> %SystemRoot%\System32\yvpp02.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvprgb.dll -> %SystemRoot%\System32\yvprgb.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvsvga.dll -> %SystemRoot%\System32\yvsvga.dll -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvsvga.sys -> %SystemRoot%\System32\yvsvga.sys -> [Folder | Created Date = 3/17/2008 6:37:45 PM | Attr = RHS] zeropopupbar.dll -> %SystemRoot%\System32\zeropopupbar.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] zip.exe -> %SystemRoot%\System32\zip.exe -> [Ver = | Size = 68096 bytes | Created Date = 3/22/2008 6:41:56 PM | Attr = ] zp.dll -> %SystemRoot%\System32\zp.dll -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] zz.dll -> %SystemRoot%\System32\zz.dll -> [Folder | Created Date = 3/17/2008 6:37:42 PM | Attr = RHS] _dll.exe -> %SystemRoot%\System32\_dll.exe -> [Folder | Created Date = 3/17/2008 6:37:29 PM | Attr = RHS] _epnt.sys -> %SystemRoot%\System32\_epnt.sys -> [Folder | Created Date = 3/17/2008 6:37:40 PM | Attr = RHS] 2020install.exe -> %SystemRoot%\2020install.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] 1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> 2020search.dll -> %SystemRoot%\2020search.dll -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] 2020search2.dll -> %SystemRoot%\2020search2.dll -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] a64sddd.exe -> %SystemRoot%\a64sddd.exe -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] abiuninst.htm -> %SystemRoot%\abiuninst.htm -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] ac.aut -> %SystemRoot%\ac.aut -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] addkc32.exe -> %SystemRoot%\addkc32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] adrsb.exe -> %SystemRoot%\adrsb.exe -> [Folder | Created Date = 3/17/2008 6:37:56 PM | Attr = RHS] ads.js -> %SystemRoot%\ads.js -> [Folder | Created Date = 3/17/2008 6:38:00 PM | Attr = RHS] ahcb.exe -> %SystemRoot%\ahcb.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] apiac.exe -> %SystemRoot%\apiac.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] apifb.exe -> %SystemRoot%\apifb.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] apigj.exe -> %SystemRoot%\apigj.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] apijn32.exe -> %SystemRoot%\apijn32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] apivt.exe -> %SystemRoot%\apivt.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] appsh.exe -> %SystemRoot%\appsh.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] appwn32.exe -> %SystemRoot%\appwn32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] ast.exe -> %SystemRoot%\ast.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] atlfs32.exe -> %SystemRoot%\atlfs32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] atlrl32.dll -> %SystemRoot%\atlrl32.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] aurora.exe -> %SystemRoot%\aurora.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] aurorahandler.dll -> %SystemRoot%\aurorahandler.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] avbgle.exe -> %SystemRoot%\avbgle.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] avguard.exe -> %SystemRoot%\avguard.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] avpcc.dll -> %SystemRoot%\avpcc.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] avpguard.exe -> %SystemRoot%\avpguard.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] avprotect.exe -> %SystemRoot%\avprotect.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] avprotect9x.exe -> %SystemRoot%\avprotect9x.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] avserve2.exe -> %SystemRoot%\avserve2.exe -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] avserve3.exe -> %SystemRoot%\avserve3.exe -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] banner.dll -> %SystemRoot%\banner.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] bargain4.exe -> %SystemRoot%\bargain4.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] bbchk.exe -> %SystemRoot%\bbchk.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] bde -> %SystemRoot%\bde -> [Ver = | Size = 222 bytes | Created Date = 3/17/2008 6:37:30 PM | Attr = RH ] bi.dll -> %SystemRoot%\bi.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] biprep.exe -> %SystemRoot%\biprep.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] bipw.exe -> %SystemRoot%\bipw.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] bolger.dll -> %SystemRoot%\bolger.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] bs2.dll -> %SystemRoot%\bs2.dll -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] bs3.dll -> %SystemRoot%\bs3.dll -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] bsx32 -> %SystemRoot%\bsx32 -> [Ver = | Size = 238 bytes | Created Date = 3/17/2008 6:37:30 PM | Attr = RH ] bsx5.dll -> %SystemRoot%\bsx5.dll -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] btgrab.dll -> %SystemRoot%\btgrab.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] buddy.exe -> %SystemRoot%\buddy.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] bxxs5.dll -> %SystemRoot%\bxxs5.dll -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] ccsserv.exe -> %SystemRoot%\ccsserv.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] cdproxyserv.exe -> %SystemRoot%\cdproxyserv.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] ceres.dll -> %SystemRoot%\ceres.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] cfg32.exe -> %SystemRoot%\cfg32.exe -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] cfg32o.dll -> %SystemRoot%\cfg32o.dll -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] cfg32p.dll -> %SystemRoot%\cfg32p.dll -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] cfg32r.dll -> %SystemRoot%\cfg32r.dll -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] cfg32s.dll -> %SystemRoot%\cfg32s.dll -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] cleanhistories.dll -> %SystemRoot%\cleanhistories.dll -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] coder -> %SystemRoot%\coder -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:32 PM | Attr = RH ] comp.cpl -> %SystemRoot%\comp.cpl -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] configsys -> %SystemRoot%\configsys -> [Ver = | Size = 234 bytes | Created Date = 3/17/2008 6:37:32 PM | Attr = RH ] connectionstatus -> %SystemRoot%\connectionstatus -> [Ver = | Size = 236 bytes | Created Date = 3/17/2008 6:37:57 PM | Attr = RH ] conscorr.exe -> %SystemRoot%\conscorr.exe -> [Folder | Created Date = 3/17/2008 6:37:32 PM | Attr = RHS] crvl.exe -> %SystemRoot%\crvl.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] cserv32.exe -> %SystemRoot%\cserv32.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] csssupd.exe -> %SystemRoot%\csssupd.exe -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] cssswd.exe -> %SystemRoot%\cssswd.exe -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] ctb3_shared -> %SystemRoot%\ctb3_shared -> [Ver = | Size = 244 bytes | Created Date = 3/17/2008 6:37:31 PM | Attr = RH ] ctrlpan.dll -> %SystemRoot%\ctrlpan.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3cq.exe -> %SystemRoot%\d3cq.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3fd32.exe -> %SystemRoot%\d3fd32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3fl32.exe -> %SystemRoot%\d3fl32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3nr32.exe -> %SystemRoot%\d3nr32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3ue.exe -> %SystemRoot%\d3ue.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3zg.exe -> %SystemRoot%\d3zg.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] dealhlpr.dll -> %SystemRoot%\dealhlpr.dll -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] default.css -> %SystemRoot%\default.css -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] dhbrowser.exe -> %SystemRoot%\dhbrowser.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] dhbrwsr.exe -> %SystemRoot%\dhbrwsr.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] dhdom.bin -> %SystemRoot%\dhdom.bin -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] dhdom1.bin -> %SystemRoot%\dhdom1.bin -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhdomp.bin -> %SystemRoot%\dhdomp.bin -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhdomp1.bin -> %SystemRoot%\dhdomp1.bin -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhkw.bin -> %SystemRoot%\dhkw.bin -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhkw1.bin -> %SystemRoot%\dhkw1.bin -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhp.dll -> %SystemRoot%\dhp.dll -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhp2.dll -> %SystemRoot%\dhp2.dll -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhsigned.ocx -> %SystemRoot%\dhsigned.ocx -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhsvr.exe -> %SystemRoot%\dhsvr.exe -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhun.exe -> %SystemRoot%\dhun.exe -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhupdt.exe -> %SystemRoot%\dhupdt.exe -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dinst.exe -> %SystemRoot%\dinst.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] diskmonitor.exe -> %SystemRoot%\diskmonitor.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] dlder.exe -> %SystemRoot%\dlder.exe -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dlgb.exe -> %SystemRoot%\dlgb.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] dlmax.dll -> %SystemRoot%\dlmax.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] dpe.dll -> %SystemRoot%\dpe.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] druninst.exe -> %SystemRoot%\druninst.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] dsearch.bin -> %SystemRoot%\dsearch.bin -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dsearch1.bin -> %SystemRoot%\dsearch1.bin -> [Folder | Created Date = 3/17/2008 6:37:38 PM | Attr = RHS] dsr.dll -> %SystemRoot%\dsr.dll -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] dsr.exe -> %SystemRoot%\dsr.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] easyav.exe -> %SystemRoot%\easyav.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] easywww.exe -> %SystemRoot%\easywww.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] easywww2.exe -> %SystemRoot%\easywww2.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] easywww3.exe -> %SystemRoot%\easywww3.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] ejgekgpq.ini -> %SystemRoot%\ejgekgpq.ini -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] elitebar -> %SystemRoot%\elitebar -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:37:40 PM | Attr = RH ] elitesidebar -> %SystemRoot%\elitesidebar -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:37:40 PM | Attr = RH ] elitetoolbar -> %SystemRoot%\elitetoolbar -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:37:40 PM | Attr = RH ] ERUNT -> %SystemRoot%\ERUNT -> [Folder | Created Date = 3/23/2008 8:35:14 AM | Attr = ] etb -> %SystemRoot%\etb -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:37:40 PM | Attr = RH ] ewupdater.exe -> %SystemRoot%\ewupdater.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] exclean.exe -> %SystemRoot%\exclean.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] exdl.exe -> %SystemRoot%\exdl.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] exedialer.exe -> %SystemRoot%\exedialer.exe -> [Folder | Created Date = 3/17/2008 6:37:48 PM | Attr = RHS] explorer -> %SystemRoot%\explorer -> [Ver = | Size = 226 bytes | Created Date = 3/17/2008 6:37:38 PM | Attr = RH ] extract.exe -> %SystemRoot%\extract.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] exul.exe -> %SystemRoot%\exul.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] ezinstall.exe -> %SystemRoot%\ezinstall.exe -> [Folder | Created Date = 3/17/2008 6:37:40 PM | Attr = RHS] farmmext.exe -> %SystemRoot%\farmmext.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] fastseekersetup.ocx -> %SystemRoot%\fastseekersetup.ocx -> [Folder | Created Date = 3/17/2008 6:37:40 PM | Attr = RHS] fastseekersetupv2.ocx -> %SystemRoot%\fastseekersetupv2.ocx -> [Folder | Created Date = 3/17/2008 6:37:40 PM | Attr = RHS] fejgl.exe -> %SystemRoot%\fejgl.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] firewallsvr.exe -> %SystemRoot%\firewallsvr.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] fooding.exe -> %SystemRoot%\fooding.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] frsk.exe -> %SystemRoot%\frsk.exe -> [Folder | Created Date = 3/17/2008 6:37:42 PM | Attr = RHS] fvprotect.exe -> %SystemRoot%\fvprotect.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] goupdate.exe -> %SystemRoot%\goupdate.exe -> [Folder | Created Date = 3/17/2008 6:37:40 PM | Attr = RHS] gsim.dll -> %SystemRoot%\gsim.dll -> [Folder | Created Date = 3/17/2008 6:37:56 PM | Attr = RHS] help_dcc.dll -> %SystemRoot%\help_dcc.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] help_ecc.dll -> %SystemRoot%\help_ecc.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] hpsv.exe -> %SystemRoot%\hpsv.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] ib.exe -> %SystemRoot%\ib.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] id.exe -> %SystemRoot%\id.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Created Date = 1/5/2008 5:23:20 PM | Attr = ] iehelper.dll -> %SystemRoot%\iehelper.dll -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] iehook.dll -> %SystemRoot%\iehook.dll -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] iempg.dll -> %SystemRoot%\iempg.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] iempg2.dll -> %SystemRoot%\iempg2.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] ieoo -> %SystemRoot%\ieoo -> [Ver = | Size = 242 bytes | Created Date = 3/17/2008 6:37:36 PM | Attr = RH ] iewww.exe -> %SystemRoot%\iewww.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] iewwwint.exe -> %SystemRoot%\iewwwint.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] ihsn.exe -> %SystemRoot%\ihsn.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] ilookup -> %SystemRoot%\ilookup -> [Ver = | Size = 230 bytes | Created Date = 3/17/2008 6:37:47 PM | Attr = RH ] image.dll -> %SystemRoot%\image.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] imgiant.dll -> %SystemRoot%\imgiant.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] imguninst.exe -> %SystemRoot%\imguninst.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] imgurla.exe -> %SystemRoot%\imgurla.exe -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] infodll.dll -> %SystemRoot%\infodll.dll -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] invitessk.exe -> %SystemRoot%\invitessk.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] ipog.dll -> %SystemRoot%\ipog.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] ipyx32.exe -> %SystemRoot%\ipyx32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] isrvs -> %SystemRoot%\isrvs -> [Ver = | Size = 222 bytes | Created Date = 3/17/2008 6:38:01 PM | Attr = RH ] istsvc.exe -> %SystemRoot%\istsvc.exe -> [Folder | Created Date = 3/17/2008 6:37:48 PM | Attr = RHS] jammer2nd.exe -> %SystemRoot%\jammer2nd.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] kasperskyaveng.exe -> %SystemRoot%\kasperskyaveng.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] kernellos.dll -> %SystemRoot%\kernellos.dll -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] kk8pwxm634.exe -> %SystemRoot%\kk8pwxm634.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] lansas.exe -> %SystemRoot%\lansas.exe -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] maja.exe -> %SystemRoot%\maja.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] mc -> %SystemRoot%\mc -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] mfcbm32.dll -> %SystemRoot%\mfcbm32.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] mfckb.exe -> %SystemRoot%\mfckb.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] mfcui32.exe -> %SystemRoot%\mfcui32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] mm20.ocx -> %SystemRoot%\mm20.ocx -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] mm21.ocx -> %SystemRoot%\mm21.ocx -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] mm63.ocx -> %SystemRoot%\mm63.ocx -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] mmups.exe -> %SystemRoot%\mmups.exe -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] morphacl.dll -> %SystemRoot%\morphacl.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] mpgcom.dll -> %SystemRoot%\mpgcom.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] mrhop.dll -> %SystemRoot%\mrhop.dll -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] ms spool32.dat -> %SystemRoot%\ms spool32.dat -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] ms spool32.exe -> %SystemRoot%\ms spool32.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] mscache.dll -> %SystemRoot%\mscache.dll -> [Folder | Created Date = 3/17/2008 6:37:48 PM | Attr = RHS] mscache.exe -> %SystemRoot%\mscache.exe -> [Folder | Created Date = 3/17/2008 6:37:48 PM | Attr = RHS] msconfd.dll -> %SystemRoot%\msconfd.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] msew -> %SystemRoot%\msew -> [Ver = | Size = 242 bytes | Created Date = 3/17/2008 6:37:36 PM | Attr = RH ] mslagent -> %SystemRoot%\mslagent -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] msnarrator.exe -> %SystemRoot%\msnarrator.exe -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] msnc32.exe -> %SystemRoot%\msnc32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] msnmsgrs.exe -> %SystemRoot%\msnmsgrs.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] mssvr.exe -> %SystemRoot%\mssvr.exe -> [Folder | Created Date = 3/17/2008 6:37:27 PM | Attr = RHS] msupdtwiz.exe -> %SystemRoot%\msupdtwiz.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] msxct.exe -> %SystemRoot%\msxct.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] mszv32.exe -> %SystemRoot%\mszv32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] mxtarget.dll -> %SystemRoot%\mxtarget.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] my.css -> %SystemRoot%\my.css -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] nail.exe -> %SystemRoot%\nail.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] napatch.exe -> %SystemRoot%\napatch.exe -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] navext.dll -> %SystemRoot%\navext.dll -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] navpmc -> %SystemRoot%\navpmc -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] netmedia.exe -> %SystemRoot%\netmedia.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] Nircmd.exe -> %SystemRoot%\Nircmd.exe -> NirSoft [Ver = 2.05 | Size = 28160 bytes | Created Date = 3/22/2008 6:41:56 PM | Attr = ] ntwg.exe -> %SystemRoot%\ntwg.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] ntwn.exe -> %SystemRoot%\ntwn.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] ntyk32.exe -> %SystemRoot%\ntyk32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] ntyo32.exe -> %SystemRoot%\ntyo32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] offerssk.exe -> %SystemRoot%\offerssk.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] olehelp.exe -> %SystemRoot%\olehelp.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] oo4.dll -> %SystemRoot%\oo4.dll -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] pandaavengine.exe -> %SystemRoot%\pandaavengine.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] patch31345.exe -> %SystemRoot%\patch31345.exe -> [Folder | Created Date = 3/17/2008 6:37:50 PM | Attr = RHS] phantom.exe -> %SystemRoot%\phantom.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] pi1.exe -> %SystemRoot%\pi1.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] pnpasn32.exe -> %SystemRoot%\pnpasn32.exe -> [Folder | Created Date = 3/17/2008 6:38:03 PM | Attr = RHS] pool32.exe -> %SystemRoot%\pool32.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] psapi.dll -> %SystemRoot%\psapi.dll -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] pxckdla.exe -> %SystemRoot%\pxckdla.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] pxckdlauninstall.exe -> %SystemRoot%\pxckdlauninstall.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] pynix.dll -> %SystemRoot%\pynix.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] qttasks.exe -> %SystemRoot%\qttasks.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] redirect5.exe -> %SystemRoot%\redirect5.exe -> [Folder | Created Date = 3/17/2008 6:37:39 PM | Attr = RHS] reggserv.exe -> %SystemRoot%\reggserv.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] rgrt.exe -> %SystemRoot%\rgrt.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] roodyc -> %SystemRoot%\roodyc -> [Ver = | Size = 228 bytes | Created Date = 3/17/2008 6:37:37 PM | Attr = RH ] rundil.exe -> %SystemRoot%\rundil.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] rundil32.exe -> %SystemRoot%\rundil32.exe -> [Folder | Created Date = 3/17/2008 6:37:53 PM | Attr = RHS] rundll16.dll -> %SystemRoot%\rundll16.dll -> [Folder | Created Date = 3/17/2008 6:37:31 PM | Attr = RHS] rundll16.exe -> %SystemRoot%\rundll16.exe -> [Folder | Created Date = 3/17/2008 6:37:26 PM | Attr = RHS] savestartdate.exe -> %SystemRoot%\savestartdate.exe -> [Folder | Created Date = 3/17/2008 6:37:42 PM | Attr = RHS] sdkev.exe -> %SystemRoot%\sdkev.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] sdkrr32.exe -> %SystemRoot%\sdkrr32.exe -> [Folder | Created Date = 3/17/2008 6:37:36 PM | Attr = RHS] serrv.exe -> %SystemRoot%\serrv.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] sistem.exe -> %SystemRoot%\sistem.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] skynetave.exe -> %SystemRoot%\skynetave.exe -> [Folder | Created Date = 3/17/2008 6:37:55 PM | Attr = RHS] smss.exe -> %SystemRoot%\smss.exe -> [Folder | Created Date = 3/17/2008 6:37:32 PM | Attr = RHS] snbho.exe -> %SystemRoot%\snbho.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] speer2.dll -> %SystemRoot%\speer2.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] speeryox.dll -> %SystemRoot%\speeryox.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] sscrg.exe -> %SystemRoot%\sscrg.exe -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] ssdgt.exe -> %SystemRoot%\ssdgt.exe -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] sserrvv.exe -> %SystemRoot%\sserrvv.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] ssk.exe -> %SystemRoot%\ssk.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] ssls.exe -> %SystemRoot%\ssls.exe -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] ssmsgr.exe -> %SystemRoot%\ssmsgr.exe -> [Folder | Created Date = 3/17/2008 6:37:57 PM | Attr = RHS] svcproc.exe -> %SystemRoot%\svcproc.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] svrmgr.exe -> %SystemRoot%\svrmgr.exe -> [Folder | Created Date = 3/17/2008 6:37:56 PM | Attr = RHS] switpa.exe -> %SystemRoot%\switpa.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] switpb.exe -> %SystemRoot%\switpb.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] symav.exe -> %SystemRoot%\symav.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] sys.reg -> %SystemRoot%\sys.reg -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] sysbj -> %SystemRoot%\sysbj -> [Ver = | Size = 242 bytes | Created Date = 3/17/2008 6:37:37 PM | Attr = RH ] sysea.exe -> %SystemRoot%\sysea.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] sysjq.exe -> %SystemRoot%\sysjq.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] syskr.exe -> %SystemRoot%\syskr.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] syslr.exe -> %SystemRoot%\syslr.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] sysmonxp.exe -> %SystemRoot%\sysmonxp.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] syspi -> %SystemRoot%\syspi -> [Ver = | Size = 242 bytes | Created Date = 3/17/2008 6:37:37 PM | Attr = RH ] systb.dll -> %SystemRoot%\systb.dll -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] systb.exe -> %SystemRoot%\systb.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] t2serv.dll -> %SystemRoot%\t2serv.dll -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] t2serv.exe -> %SystemRoot%\t2serv.exe -> [Folder | Created Date = 3/17/2008 6:37:59 PM | Attr = RHS] TEMP -> %SystemRoot%\TEMP -> [Folder | Created Date = 3/23/2008 9:56:14 AM | Attr = ] ts.exe -> %SystemRoot%\ts.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] unast.exe -> %SystemRoot%\unast.exe -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] unstall.exe -> %SystemRoot%\unstall.exe -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] updatewinlocator.exe -> %SystemRoot%\updatewinlocator.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] uptodate.exe -> %SystemRoot%\uptodate.exe -> [Folder | Created Date = 3/17/2008 6:37:31 PM | Attr = RHS] userconfig9x.dll -> %SystemRoot%\userconfig9x.dll -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] visualguard.exe -> %SystemRoot%\visualguard.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] voiceip.dll -> %SystemRoot%\voiceip.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] vx2.dll -> %SystemRoot%\vx2.dll -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] waladhpr.exe -> %SystemRoot%\waladhpr.exe -> [Folder | Created Date = 3/17/2008 6:37:56 PM | Attr = RHS] wcby -> %SystemRoot%\wcby -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:37:46 PM | Attr = RH ] wdskctl.exe -> %SystemRoot%\wdskctl.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] wincomp -> %SystemRoot%\wincomp -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] windowsupd1.exe -> %SystemRoot%\windowsupd1.exe -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] windowsupd2.exe -> %SystemRoot%\windowsupd2.exe -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] windowsupd4.exe -> %SystemRoot%\windowsupd4.exe -> [Folder | Created Date = 3/17/2008 6:38:01 PM | Attr = RHS] winfj -> %SystemRoot%\winfj -> [Ver = | Size = 242 bytes | Created Date = 3/17/2008 6:37:37 PM | Attr = RH ] winlogon.scr -> %SystemRoot%\winlogon.scr -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] winmc.exe -> %SystemRoot%\winmc.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] winmgts -> %SystemRoot%\winmgts -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] winmuschi.exe -> %SystemRoot%\winmuschi.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] winnj32.exe -> %SystemRoot%\winnj32.exe -> [Folder | Created Date = 3/17/2008 6:37:37 PM | Attr = RHS] winobject.dll -> %SystemRoot%\winobject.dll -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] winsecurity -> %SystemRoot%\winsecurity -> [Ver = | Size = 236 bytes | Created Date = 3/17/2008 6:37:57 PM | Attr = RH ] wintrim -> %SystemRoot%\wintrim -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] winupie.exe -> %SystemRoot%\winupie.exe -> [Folder | Created Date = 3/17/2008 6:38:02 PM | Attr = RHS] woinstall.exe -> %SystemRoot%\woinstall.exe -> [Folder | Created Date = 3/17/2008 6:37:40 PM | Attr = RHS] wqzq -> %SystemRoot%\wqzq -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:37:46 PM | Attr = RH ] wserver.exe -> %SystemRoot%\wserver.exe -> [Folder | Created Date = 3/17/2008 6:37:54 PM | Attr = RHS] wupdt.exe -> %SystemRoot%\wupdt.exe -> [Folder | Created Date = 3/17/2008 6:37:46 PM | Attr = RHS] xwrm.exe -> %SystemRoot%\xwrm.exe -> [Folder | Created Date = 3/17/2008 6:37:49 PM | Attr = RHS] zeta.exe -> %SystemRoot%\zeta.exe -> [Folder | Created Date = 3/17/2008 6:37:30 PM | Attr = RHS] zserv.dll -> %SystemRoot%\zserv.dll -> [Folder | Created Date = 3/17/2008 6:37:28 PM | Attr = RHS] [Files Created - Additional Folder Scans - Non-Microsoft Only] nView_Profiles -> %AllUsersProfile%\Application Data\nView_Profiles -> [Folder | Created Date = 3/22/2008 9:11:24 PM | Attr = ] VTech Phonebook Manager -> %UserProfile%\My Documents\VTech Phonebook Manager -> [Folder | Created Date = 1/5/2008 5:37:25 PM | Attr = ] Ghost Master.lnk -> %AllUsersProfile%\Desktop\Ghost Master.lnk -> [Ver = | Size = 1671 bytes | Created Date = 3/22/2008 9:53:16 PM | Attr = ] BF1942 -> %UserProfile%\Desktop\BF1942 -> [Folder | Created Date = 3/22/2008 9:28:18 PM | Attr = ] BF1942.exe -> %UserProfile%\Desktop\BF1942.exe -> [Ver = | Size = 8617984 bytes | Created Date = 3/22/2008 9:23:42 PM | Attr = ] @Alternate Data Stream - 88 bytes -> %UserProfile%\Desktop\BF1942.exe:SummaryInformation @Alternate Data Stream - 0 bytes -> %UserProfile%\Desktop\BF1942.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} MALWARE PROGRAMS -> %UserProfile%\Desktop\MALWARE PROGRAMS -> [Folder | Created Date = 3/22/2008 7:34:01 PM | Attr = ] OTMoveIt2.exe -> %UserProfile%\Desktop\OTMoveIt2.exe -> OldTimer Tools [Ver = 1.0.21.0 | Size = 290304 bytes | Created Date = 3/23/2008 9:24:44 AM | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Created Date = 3/23/2008 10:19:07 AM | Attr = ] OTScanIt.exe -> %UserProfile%\Desktop\OTScanIt.exe -> [Ver = | Size = 482640 bytes | Created Date = 3/23/2008 10:18:11 AM | Attr = ] betterinternet -> %CommonProgramFiles%\betterinternet -> [Ver = | Size = 246 bytes | Created Date = 3/17/2008 6:37:27 PM | Attr = RH ] btlink -> %CommonProgramFiles%\btlink -> [Ver = | Size = 230 bytes | Created Date = 3/17/2008 6:37:46 PM | Attr = RH ] cmeii -> %CommonProgramFiles%\cmeii -> [Ver = | Size = 228 bytes | Created Date = 3/17/2008 6:37:31 PM | Attr = RH ] cpush -> %CommonProgramFiles%\cpush -> [Ver = | Size = 226 bytes | Created Date = 3/17/2008 6:37:37 PM | Attr = RH ] drivecleaner free -> %CommonProgramFiles%\drivecleaner free -> [Ver = | Size = 240 bytes | Created Date = 3/17/2008 6:37:39 PM | Attr = RH ] eacceleration -> %CommonProgramFiles%\eacceleration -> [Ver = | Size = 248 bytes | Created Date = 3/17/2008 6:37:38 PM | Attr = RH ] gmt -> %CommonProgramFiles%\gmt -> [Ver = | Size = 228 bytes | Created Date = 3/17/2008 6:37:31 PM | Attr = RH ] keenvalue -> %CommonProgramFiles%\keenvalue -> [Ver = | Size = 234 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] msiets -> %CommonProgramFiles%\msiets -> [Ver = | Size = 230 bytes | Created Date = 3/17/2008 6:37:46 PM | Attr = RH ] nsis -> %CommonProgramFiles%\nsis -> [Ver = | Size = 236 bytes | Created Date = 3/17/2008 6:37:54 PM | Attr = RH ] psd tools -> %CommonProgramFiles%\psd tools -> [Ver = | Size = 236 bytes | Created Date = 3/17/2008 6:37:31 PM | Attr = RH ] sogou pxp -> %CommonProgramFiles%\sogou pxp -> [Ver = | Size = 226 bytes | Created Date = 3/17/2008 6:37:57 PM | Attr = RH ] ucontrol -> %CommonProgramFiles%\ucontrol -> [Ver = | Size = 226 bytes | Created Date = 3/17/2008 6:38:01 PM | Attr = RH ] updater -> %CommonProgramFiles%\updater -> [Ver = | Size = 234 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] updmgr -> %CommonProgramFiles%\updmgr -> [Ver = | Size = 234 bytes | Created Date = 3/17/2008 6:37:49 PM | Attr = RH ] whenu -> %CommonProgramFiles%\whenu -> [Ver = | Size = 226 bytes | Created Date = 3/17/2008 6:38:01 PM | Attr = RH ] winfixer 2006 -> %CommonProgramFiles%\winfixer 2006 -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:38:02 PM | Attr = RH ] winsoftware -> %CommonProgramFiles%\winsoftware -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:38:02 PM | Attr = RH ] wintools -> %CommonProgramFiles%\wintools -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:38:02 PM | Attr = RH ] wqzq -> %CommonProgramFiles%\wqzq -> [Ver = | Size = 232 bytes | Created Date = 3/17/2008 6:37:46 PM | Attr = RH ] [Files/Folders - Modified Within 90 days] 327882R2FWJFW -> %SystemDrive%\327882R2FWJFW -> [Folder | Modified Date = 3/23/2008 9:57:35 AM | Attr = ] archivos de programa -> %SystemDrive%\archivos de programa -> [Ver = | Size = 234 bytes | Modified Date = 3/17/2008 6:37:59 PM | Attr = RH ] bde -> %SystemDrive%\bde -> [Ver = | Size = 222 bytes | Modified Date = 3/17/2008 6:37:30 PM | Attr = RH ] e2g -> %SystemDrive%\e2g -> [Ver = | Size = 228 bytes | Modified Date = 3/17/2008 6:37:39 PM | Attr = RH ] hellmsn.exe -> %SystemDrive%\hellmsn.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] ntldr.exe -> %SystemDrive%\ntldr.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] Program Files -> %ProgramFiles% -> [Folder | Modified Date = 3/23/2008 9:27:01 AM | Attr = ] QooBox -> %SystemDrive%\QooBox -> [Folder | Modified Date = 3/23/2008 9:56:10 AM | Attr = ] SDFix -> %SystemDrive%\SDFix -> [Folder | Modified Date = 3/23/2008 8:54:43 AM | Attr = ] spedia -> %SystemDrive%\spedia -> [Ver = | Size = 234 bytes | Modified Date = 3/17/2008 6:37:57 PM | Attr = RH ] Start_.cmd -> %SystemDrive%\Start_.cmd -> [Ver = | Size = 3592 bytes | Modified Date = 3/22/2008 9:43:17 AM | Attr = ] temp_kl -> %SystemDrive%\temp_kl -> [Ver = | Size = 234 bytes | Modified Date = 3/17/2008 6:37:59 PM | Attr = RH ] UnrealTournament -> %SystemDrive%\UnrealTournament -> [Folder | Modified Date = 3/22/2008 9:32:27 PM | Attr = ] WINDOWS -> %SystemRoot% -> [Folder | Modified Date = 3/23/2008 9:56:14 AM | Attr = ] windowsupdate -> %SystemRoot%update -> [Ver = | Size = 248 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] winssystem.exe -> %SystemDrive%\winssystem.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] _OTMoveIt -> %SystemDrive%\_OTMoveIt -> [Folder | Modified Date = 3/23/2008 9:27:00 AM | Attr = ] BANTExt.sys -> %SystemRoot%\System32\drivers\BANTExt.sys -> [Ver = | Size = 3840 bytes | Modified Date = 2/27/2008 2:49:00 PM | Attr = ] etc -> %SystemRoot%\System32\drivers\etc -> [Folder | Modified Date = 3/23/2008 8:43:32 AM | Attr = ] HOSTS -> %SystemRoot%\System32\drivers\etc\HOSTS -> [Ver = | Size = 686 bytes | Modified Date = 3/23/2008 8:43:32 AM | Attr = ] 0.exe -> %SystemRoot%\System32\0.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] 007guard.exe -> %SystemRoot%\System32\007guard.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] 1.00.07.dll -> %SystemRoot%\System32\1.00.07.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] 1hellbot.exe -> %SystemRoot%\System32\1hellbot.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] 2020search.dll -> %SystemRoot%\System32\2020search.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] 2020search2.dll -> %SystemRoot%\System32\2020search2.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] 2ndsrch.dll -> %SystemRoot%\System32\2ndsrch.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] 2searchinstaller.exe -> %SystemRoot%\System32\2searchinstaller.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] 2_0_1browserhelper2.dll -> %SystemRoot%\System32\2_0_1browserhelper2.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] 3_0_1browserhelper3.dll -> %SystemRoot%\System32\3_0_1browserhelper3.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] 4ccc3cea.exe -> %SystemRoot%\System32\4ccc3cea.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] 5_0_1browserhelper5.dll -> %SystemRoot%\System32\5_0_1browserhelper5.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] 666.exe -> %SystemRoot%\System32\666.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] 6fo4svc.dll -> %SystemRoot%\System32\6fo4svc.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] 7search.dll -> %SystemRoot%\System32\7search.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] a.exe -> %SystemRoot%\System32\a.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] abeb.dll -> %SystemRoot%\System32\abeb.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] abs.exe -> %SystemRoot%\System32\abs.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] absnro.dll -> %SystemRoot%\System32\absnro.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] acd.dll -> %SystemRoot%\System32\acd.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] actidmoc.exe -> %SystemRoot%\System32\actidmoc.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] adcache -> %SystemRoot%\System32\adcache -> [Ver = | Size = 228 bytes | Modified Date = 3/17/2008 6:37:37 PM | Attr = RH ] adchkr.exe -> %SystemRoot%\System32\adchkr.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] adddx.dll -> %SystemRoot%\System32\adddx.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] addgp32.exe -> %SystemRoot%\System32\addgp32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] addwh32.exe -> %SystemRoot%\System32\addwh32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] adimage.dll -> %SystemRoot%\System32\adimage.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] admeiolo.dll -> %SystemRoot%\System32\admeiolo.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] adv.dll -> %SystemRoot%\System32\adv.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] advert.dll -> %SystemRoot%\System32\advert.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] advertcontrolxcontrol.ocx -> %SystemRoot%\System32\advertcontrolxcontrol.ocx -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] aess2.dll -> %SystemRoot%\System32\aess2.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] amcis.dll -> %SystemRoot%\System32\amcis.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] amcis2.dll -> %SystemRoot%\System32\amcis2.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] amcis3.dll -> %SystemRoot%\System32\amcis3.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] anaamon.dll -> %SystemRoot%\System32\anaamon.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] anadsc.ocx -> %SystemRoot%\System32\anadsc.ocx -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] anadscb.ocx -> %SystemRoot%\System32\anadscb.ocx -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] angelex.exe -> %SystemRoot%\System32\angelex.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] anti_troj.exe -> %SystemRoot%\System32\anti_troj.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] apica.exe -> %SystemRoot%\System32\apica.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] apioe.exe -> %SystemRoot%\System32\apioe.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] apivy.exe -> %SystemRoot%\System32\apivy.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] aplsp.dll -> %SystemRoot%\System32\aplsp.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] appio.exe -> %SystemRoot%\System32\appio.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] appis32.exe -> %SystemRoot%\System32\appis32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] appjc32.exe -> %SystemRoot%\System32\appjc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] appoe32.exe -> %SystemRoot%\System32\appoe32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] arb1tal.dll -> %SystemRoot%\System32\arb1tal.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] askearth17.exe -> %SystemRoot%\System32\askearth17.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] ast.exe -> %SystemRoot%\System32\ast.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] astctl32.dll -> %SystemRoot%\System32\astctl32.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] astctl32.ocx -> %SystemRoot%\System32\astctl32.ocx -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] atlhy.exe -> %SystemRoot%\System32\atlhy.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] atlkt32.exe -> %SystemRoot%\System32\atlkt32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] atlpv32.exe -> %SystemRoot%\System32\atlpv32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] atmon.exe -> %SystemRoot%\System32\atmon.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] atpartners.dll -> %SystemRoot%\System32\atpartners.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] auole4.dll -> %SystemRoot%\System32\auole4.dll -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] aupdate.exe -> %SystemRoot%\System32\aupdate.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] aupdate_uninstall.exe -> %SystemRoot%\System32\aupdate_uninstall.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] autosearch.dll -> %SystemRoot%\System32\autosearch.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] avifipxr.dll -> %SystemRoot%\System32\avifipxr.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] avpcc.dll -> %SystemRoot%\System32\avpcc.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] avpe32.dll -> %SystemRoot%\System32\avpe32.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] avpi32.dll -> %SystemRoot%\System32\avpi32.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] avpp32.dll -> %SystemRoot%\System32\avpp32.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] avpr.exe -> %SystemRoot%\System32\avpr.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] avpx32.dll -> %SystemRoot%\System32\avpx32.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] avpx32.sys -> %SystemRoot%\System32\avpx32.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] avpx64.sys -> %SystemRoot%\System32\avpx64.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] axconfig.dll -> %SystemRoot%\System32\axconfig.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] axxt32.dll -> %SystemRoot%\System32\axxt32.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] barbho.dll -> %SystemRoot%\System32\barbho.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] bawindo.exe -> %SystemRoot%\System32\bawindo.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] bawindo.exeopen -> %SystemRoot%\System32\bawindo.exeopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] bawindo.exeopenopen -> %SystemRoot%\System32\bawindo.exeopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] bbchk.exe -> %SystemRoot%\System32\bbchk.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] bdedata2.dll -> %SystemRoot%\System32\bdedata2.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdedownloader.dll -> %SystemRoot%\System32\bdedownloader.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdefdi.dll -> %SystemRoot%\System32\bdefdi.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdeinsta2.dll -> %SystemRoot%\System32\bdeinsta2.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdeinstall.exe -> %SystemRoot%\System32\bdeinstall.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdesecureinstall.cab -> %SystemRoot%\System32\bdesecureinstall.cab -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdesecureinstall.exe -> %SystemRoot%\System32\bdesecureinstall.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdeverify.dll -> %SystemRoot%\System32\bdeverify.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bdle4012.exe -> %SystemRoot%\System32\bdle4012.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] belop.dll -> %SystemRoot%\System32\belop.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] bho001.dll -> %SystemRoot%\System32\bho001.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] bik.exe -> %SystemRoot%\System32\bik.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] bkmsf32.dat -> %SystemRoot%\System32\bkmsf32.dat -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] bmeb.dll -> %SystemRoot%\System32\bmeb.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] bmtdhh.dll -> %SystemRoot%\System32\bmtdhh.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] boot32.sys -> %SystemRoot%\System32\boot32.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] botzor.exe -> %SystemRoot%\System32\botzor.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] bpln.dll -> %SystemRoot%\System32\bpln.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] bpv1a.dll -> %SystemRoot%\System32\bpv1a.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] bpv2s.dll -> %SystemRoot%\System32\bpv2s.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] bpv2t.dll -> %SystemRoot%\System32\bpv2t.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] bridge.dll -> %SystemRoot%\System32\bridge.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] broweraidtoolbar.dll -> %SystemRoot%\System32\broweraidtoolbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] brwconf.exe -> %SystemRoot%\System32\brwconf.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] brwmgr32.dll -> %SystemRoot%\System32\brwmgr32.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] brwperf.exe -> %SystemRoot%\System32\brwperf.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] brwprf32.dll -> %SystemRoot%\System32\brwprf32.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] brwstat.dll -> %SystemRoot%\System32\brwstat.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] bs2.dll -> %SystemRoot%\System32\bs2.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bs3.dll -> %SystemRoot%\System32\bs3.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bsx5.dll -> %SystemRoot%\System32\bsx5.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] btiein.dll -> %SystemRoot%\System32\btiein.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] bundler_mpb_sb.exe -> %SystemRoot%\System32\bundler_mpb_sb.exe -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] bxsx5.dll -> %SystemRoot%\System32\bxsx5.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bxxs5.dll -> %SystemRoot%\System32\bxxs5.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] c3.dll -> %SystemRoot%\System32\c3.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] c3.sys -> %SystemRoot%\System32\c3.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] c4.sys -> %SystemRoot%\System32\c4.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] calsp.dll -> %SystemRoot%\System32\calsp.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] camodpnm.exe -> %SystemRoot%\System32\camodpnm.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] casldr.dll -> %SystemRoot%\System32\casldr.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] CatRoot2 -> %SystemRoot%\System32\CatRoot2 -> [Folder | Modified Date = 3/23/2008 9:54:30 AM | Attr = ] ccsrs.exe -> %SystemRoot%\System32\ccsrs.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] cdlsp.dll -> %SystemRoot%\System32\cdlsp.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cdsync.dll -> %SystemRoot%\System32\cdsync.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cd_clint.exe -> %SystemRoot%\System32\cd_clint.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cd_gif.dll -> %SystemRoot%\System32\cd_gif.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cd_htm.dll -> %SystemRoot%\System32\cd_htm.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cd_load.exe -> %SystemRoot%\System32\cd_load.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cd_swf.dll -> %SystemRoot%\System32\cd_swf.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cert32.dll -> %SystemRoot%\System32\cert32.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] chgrgs.dll -> %SystemRoot%\System32\chgrgs.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] chkmfdep.exe -> %SystemRoot%\System32\chkmfdep.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] cidrules.dll -> %SystemRoot%\System32\cidrules.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] cm.dll -> %SystemRoot%\System32\cm.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] comload.dll -> %SystemRoot%\System32\comload.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] comploader.dll -> %SystemRoot%\System32\comploader.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] comrkbdd.exe -> %SystemRoot%\System32\comrkbdd.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] confbrw.dll -> %SystemRoot%\System32\confbrw.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] coolbot.exe -> %SystemRoot%\System32\coolbot.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] coolwebsearch-info.dll -> %SystemRoot%\System32\coolwebsearch-info.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] crby32.exe -> %SystemRoot%\System32\crby32.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] crcz.exe -> %SystemRoot%\System32\crcz.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] criticalupdater.exe -> %SystemRoot%\System32\criticalupdater.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] crko.exe -> %SystemRoot%\System32\crko.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] crocopop32.exe -> %SystemRoot%\System32\crocopop32.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] crsw32.exe -> %SystemRoot%\System32\crsw32.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] crxa.exe -> %SystemRoot%\System32\crxa.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] csie.dll -> %SystemRoot%\System32\csie.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] csm.exe -> %SystemRoot%\System32\csm.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] ctbhooks.dll -> %SystemRoot%\System32\ctbhooks.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] ctf -> %SystemRoot%\System32\ctf -> [Ver = | Size = 248 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] ctfmon32.exe -> %SystemRoot%\System32\ctfmon32.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] ctrlpan.dll -> %SystemRoot%\System32\ctrlpan.dll -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] customtoolbar.dll -> %SystemRoot%\System32\customtoolbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] cz.dll -> %SystemRoot%\System32\cz.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] d3fm.exe -> %SystemRoot%\System32\d3fm.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] d3gj.exe -> %SystemRoot%\System32\d3gj.exe -> [Folder | Modified Date = 3/17/2008 6:37:33 PM | Attr = RHS] d3ul32.exe -> %SystemRoot%\System32\d3ul32.exe -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] dad.bat -> %SystemRoot%\System32\dad.bat -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] davctool.dll -> %SystemRoot%\System32\davctool.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] davctool.exe -> %SystemRoot%\System32\davctool.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] dcomcfg.exe -> %SystemRoot%\System32\dcomcfg.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] dcomuser.exe -> %SystemRoot%\System32\dcomuser.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] ddemdmco.dll -> %SystemRoot%\System32\ddemdmco.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] debugg.dll -> %SystemRoot%\System32\debugg.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] delj.dll -> %SystemRoot%\System32\delj.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] deltaclick.dll -> %SystemRoot%\System32\deltaclick.dll -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] deskmcd3.dll -> %SystemRoot%\System32\deskmcd3.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] dfe1.exe -> %SystemRoot%\System32\dfe1.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] dfrgsrv.exe -> %SystemRoot%\System32\dfrgsrv.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] df_kme.exe -> %SystemRoot%\System32\df_kme.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] dhcp32 -> %SystemRoot%\System32\dhcp32 -> [Ver = | Size = 248 bytes | Modified Date = 3/17/2008 6:37:28 PM | Attr = RH ] dhtmlaccess.dll -> %SystemRoot%\System32\dhtmlaccess.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] diabolo.exe -> %SystemRoot%\System32\diabolo.exe -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dialeroffline.dll -> %SystemRoot%\System32\dialeroffline.dll -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] disable.dll -> %SystemRoot%\System32\disable.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] disable1.dll -> %SystemRoot%\System32\disable1.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] dlgli.exe -> %SystemRoot%\System32\dlgli.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] dlh0st.dll -> %SystemRoot%\System32\dlh0st.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] dllcache -> %SystemRoot%\System32\dllcache -> [Folder | Modified Date = 3/22/2008 9:07:05 PM | Attr = RHS] dnse.dll -> %SystemRoot%\System32\dnse.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] dnserr.dll -> %SystemRoot%\System32\dnserr.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] dnsrelay.dll -> %SystemRoot%\System32\dnsrelay.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] dnsrxpob.exe -> %SystemRoot%\System32\dnsrxpob.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] dolsp.dll -> %SystemRoot%\System32\dolsp.dll -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] doriot.exe -> %SystemRoot%\System32\doriot.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] dpugmswe.dll -> %SystemRoot%\System32\dpugmswe.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] draw32.dll -> %SystemRoot%\System32\draw32.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] drbr.dll -> %SystemRoot%\System32\drbr.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] drct16.dll -> %SystemRoot%\System32\drct16.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] dreampopper.dll -> %SystemRoot%\System32\dreampopper.dll -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] dreplace.dll -> %SystemRoot%\System32\dreplace.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] drivers -> %SystemRoot%\System32\drivers -> [Folder | Modified Date = 3/23/2008 9:47:19 AM | Attr = ] drpmon.dll -> %SystemRoot%\System32\drpmon.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] drvddll.exe -> %SystemRoot%\System32\drvddll.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] drvddll.exeopen -> %SystemRoot%\System32\drvddll.exeopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] drvddll.exeopenopen -> %SystemRoot%\System32\drvddll.exeopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] ds.exe -> %SystemRoot%\System32\ds.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] dsseds32.dll -> %SystemRoot%\System32\dsseds32.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] dsseds32.exe -> %SystemRoot%\System32\dsseds32.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] duel.exe -> %SystemRoot%\System32\duel.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] dun.exe -> %SystemRoot%\System32\dun.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] dvb03a.dll -> %SystemRoot%\System32\dvb03a.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] dvb03a.sys -> %SystemRoot%\System32\dvb03a.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] dvb06a.sys -> %SystemRoot%\System32\dvb06a.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] dxm8vb.dll -> %SystemRoot%\System32\dxm8vb.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] dxmpp.dll -> %SystemRoot%\System32\dxmpp.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] dxtpdx.dll -> %SystemRoot%\System32\dxtpdx.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] easywww.exe -> %SystemRoot%\System32\easywww.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] easywww2.exe -> %SystemRoot%\System32\easywww2.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] easywww3.exe -> %SystemRoot%\System32\easywww3.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] eetvpn.dll -> %SystemRoot%\System32\eetvpn.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] eetvpn.sys -> %SystemRoot%\System32\eetvpn.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] eexvpn.sys -> %SystemRoot%\System32\eexvpn.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] egdhtml_1023.dll -> %SystemRoot%\System32\egdhtml_1023.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] egdhtml_1024.dll -> %SystemRoot%\System32\egdhtml_1024.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] egdhtml_1025.dll -> %SystemRoot%\System32\egdhtml_1025.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] egdhtml_1026.dll -> %SystemRoot%\System32\egdhtml_1026.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] egdhtml_1027.dll -> %SystemRoot%\System32\egdhtml_1027.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] egdial.dll -> %SystemRoot%\System32\egdial.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] eghtmldialer.dll -> %SystemRoot%\System32\eghtmldialer.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] ei.exe -> %SystemRoot%\System32\ei.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] emesx.dll -> %SystemRoot%\System32\emesx.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] en-US -> %SystemRoot%\System32\en-US -> [Folder | Modified Date = 1/5/2008 5:24:14 PM | Attr = ] eros.exe -> %SystemRoot%\System32\eros.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] estartlinkrotater.exe -> %SystemRoot%\System32\estartlinkrotater.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] evil.exe -> %SystemRoot%\System32\evil.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] excel10.dll -> %SystemRoot%\System32\excel10.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] exclean.exe -> %SystemRoot%\System32\exclean.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exdl.exe -> %SystemRoot%\System32\exdl.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exdl0.exe -> %SystemRoot%\System32\exdl0.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exdl1.exe -> %SystemRoot%\System32\exdl1.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exdl2.exe -> %SystemRoot%\System32\exdl2.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exdl3.exe -> %SystemRoot%\System32\exdl3.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exefld -> %SystemRoot%\System32\exefld -> [Ver = | Size = 236 bytes | Modified Date = 3/17/2008 6:37:29 PM | Attr = RH ] expext.dll -> %SystemRoot%\System32\expext.dll -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] expup.exe -> %SystemRoot%\System32\expup.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] exul.exe -> %SystemRoot%\System32\exul.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exul1.exe -> %SystemRoot%\System32\exul1.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] exul3.exe -> %SystemRoot%\System32\exul3.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] ezpopstub.exe -> %SystemRoot%\System32\ezpopstub.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] ezxiiyv.exe -> %SystemRoot%\System32\ezxiiyv.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] f0r0r -> %SystemRoot%\System32\f0r0r -> [Ver = | Size = 226 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] f1.dll -> %SystemRoot%\System32\f1.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] famcff.dll -> %SystemRoot%\System32\famcff.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] farmmext.exe -> %SystemRoot%\System32\farmmext.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] fastseekertoolbar.dll -> %SystemRoot%\System32\fastseekertoolbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] favboot.dll -> %SystemRoot%\System32\favboot.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] favman.dll -> %SystemRoot%\System32\favman.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] favorite.dll -> %SystemRoot%\System32\favorite.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] fcyberalert -> %SystemRoot%\System32\fcyberalert -> [Ver = | Size = 252 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] feeds -> %SystemRoot%\System32\feeds -> [Ver = | Size = 230 bytes | Modified Date = 3/17/2008 6:37:27 PM | Attr = RH ] filekiller.dll -> %SystemRoot%\System32\filekiller.dll -> [Folder | Modified Date = 3/17/2008 6:37:26 PM | Attr = RHS] fileserv.dll -> %SystemRoot%\System32\fileserv.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] filgmo.exe -> %SystemRoot%\System32\filgmo.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] fixupdattr.exe -> %SystemRoot%\System32\fixupdattr.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] fk.dll -> %SystemRoot%\System32\fk.dll -> [Folder | Modified Date = 3/17/2008 6:37:26 PM | Attr = RHS] flcp.dll -> %SystemRoot%\System32\flcp.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] flt.dll -> %SystemRoot%\System32\flt.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] fltlauto.exe -> %SystemRoot%\System32\fltlauto.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [Ver = | Size = 261432 bytes | Modified Date = 3/17/2008 5:27:22 PM | Attr = ] fone.dll -> %SystemRoot%\System32\fone.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] ftapp.dll -> %SystemRoot%\System32\ftapp.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] fuck.exe -> %SystemRoot%\System32\fuck.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] fuxx32.dll -> %SystemRoot%\System32\fuxx32.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] fwntoolbar.dll -> %SystemRoot%\System32\fwntoolbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] game1.exe -> %SystemRoot%\System32\game1.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] game2.exe -> %SystemRoot%\System32\game2.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] game3.exe -> %SystemRoot%\System32\game3.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] gcasctrl.exe -> %SystemRoot%\System32\gcasctrl.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] gdu.dll -> %SystemRoot%\System32\gdu.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] gegnba.dll -> %SystemRoot%\System32\gegnba.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] gejafa.dll -> %SystemRoot%\System32\gejafa.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] ginuerep.dll -> %SystemRoot%\System32\ginuerep.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] gln.dll -> %SystemRoot%\System32\gln.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] gold2.dll -> %SystemRoot%\System32\gold2.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] google.png.exe -> %SystemRoot%\System32\google.png.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] googlems.dll -> %SystemRoot%\System32\googlems.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] gothica.exe -> %SystemRoot%\System32\gothica.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] goupdate.exe -> %SystemRoot%\System32\goupdate.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] gr02.dll -> %SystemRoot%\System32\gr02.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] gsim.dll -> %SystemRoot%\System32\gsim.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] gws.dll -> %SystemRoot%\System32\gws.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] hbmail.exe -> %SystemRoot%\System32\hbmail.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] hhselz32.dll -> %SystemRoot%\System32\hhselz32.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] higehsg.dll -> %SystemRoot%\System32\higehsg.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] highlighthelper.dll -> %SystemRoot%\System32\highlighthelper.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] hldrrr.exe -> %SystemRoot%\System32\hldrrr.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] hlmk.dll -> %SystemRoot%\System32\hlmk.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] hm.sys -> %SystemRoot%\System32\hm.sys -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] hmepge.dll -> %SystemRoot%\System32\hmepge.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] homepage.dll -> %SystemRoot%\System32\homepage.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] hook1.dll -> %SystemRoot%\System32\hook1.dll -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] hook2.dll -> %SystemRoot%\System32\hook2.dll -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] hookpopup.dll -> %SystemRoot%\System32\hookpopup.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] host.dll -> %SystemRoot%\System32\host.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] hostdrvxp.exe -> %SystemRoot%\System32\hostdrvxp.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] hotlink.dll -> %SystemRoot%\System32\hotlink.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] htmdeng.exe -> %SystemRoot%\System32\htmdeng.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] httper.dll -> %SystemRoot%\System32\httper.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] hz.dll -> %SystemRoot%\System32\hz.dll -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] i4n27vl.exe -> %SystemRoot%\System32\i4n27vl.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] ia.dll -> %SystemRoot%\System32\ia.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iaspdpus.dll -> %SystemRoot%\System32\iaspdpus.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] icmpdx3j.dll -> %SystemRoot%\System32\icmpdx3j.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] ide -> %SystemRoot%\System32\ide -> [Ver = | Size = 248 bytes | Modified Date = 3/17/2008 6:37:28 PM | Attr = RH ] idleui.dll -> %SystemRoot%\System32\idleui.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] ie.dll -> %SystemRoot%\System32\ie.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] ieaccess2.dll -> %SystemRoot%\System32\ieaccess2.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iebhos.dll -> %SystemRoot%\System32\iebhos.dll -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] iebrw.dll -> %SystemRoot%\System32\iebrw.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] IEDFix.exe -> %SystemRoot%\System32\IEDFix.exe -> S!Ri.URZ [Ver = | Size = 82432 bytes | Modified Date = 3/15/2008 5:16:49 PM | Attr = ] iedriver -> %SystemRoot%\System32\iedriver -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:46 PM | Attr = RH ] iefeatsl.dll -> %SystemRoot%\System32\iefeatsl.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] iefeatures.exe -> %SystemRoot%\System32\iefeatures.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iefeaturesversion.exe -> %SystemRoot%\System32\iefeaturesversion.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iefi.exe -> %SystemRoot%\System32\iefi.exe -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] iefy.exe -> %SystemRoot%\System32\iefy.exe -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] iehook.dll -> %SystemRoot%\System32\iehook.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iehost.exe -> %SystemRoot%\System32\iehost.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iehost34.exe -> %SystemRoot%\System32\iehost34.exe -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] iemonit.dll -> %SystemRoot%\System32\iemonit.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iemsg.dll -> %SystemRoot%\System32\iemsg.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iesearchbar.dll -> %SystemRoot%\System32\iesearchbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] ietie.dll -> %SystemRoot%\System32\ietie.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] ietoolbar.dll -> %SystemRoot%\System32\ietoolbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] ieug32.exe -> %SystemRoot%\System32\ieug32.exe -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] iewe32.exe -> %SystemRoot%\System32\iewe32.exe -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] iexplorr11.dll -> %SystemRoot%\System32\iexplorr11.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iexplorr22.dll -> %SystemRoot%\System32\iexplorr22.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iexplorr23.dll -> %SystemRoot%\System32\iexplorr23.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iexplorr24.dll -> %SystemRoot%\System32\iexplorr24.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iexplorr25.dll -> %SystemRoot%\System32\iexplorr25.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iexplorr26.dll -> %SystemRoot%\System32\iexplorr26.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iexplorr27.dll -> %SystemRoot%\System32\iexplorr27.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] iexplorr29.dll -> %SystemRoot%\System32\iexplorr29.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] ie_clrsch.dll -> %SystemRoot%\System32\ie_clrsch.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] ifhelper.dll -> %SystemRoot%\System32\ifhelper.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] ifsomatic.dll -> %SystemRoot%\System32\ifsomatic.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] im64.dll -> %SystemRoot%\System32\im64.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] imesrdch.exe -> %SystemRoot%\System32\imesrdch.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] imgiant.dll -> %SystemRoot%\System32\imgiant.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] in10b6s.dll -> %SystemRoot%\System32\in10b6s.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] ineb.dll -> %SystemRoot%\System32\ineb.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] inetp60.dll -> %SystemRoot%\System32\inetp60.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] iniwin32.dll -> %SystemRoot%\System32\iniwin32.dll -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] install_all.dll -> %SystemRoot%\System32\install_all.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] instsrv.exe -> %SystemRoot%\System32\instsrv.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] internetfeatures.exe -> %SystemRoot%\System32\internetfeatures.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] intfaxui.exe -> %SystemRoot%\System32\intfaxui.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] intmon.exe -> %SystemRoot%\System32\intmon.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] ipcclient.dll -> %SystemRoot%\System32\ipcclient.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] ipclient.dll -> %SystemRoot%\System32\ipclient.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] ipgs.exe -> %SystemRoot%\System32\ipgs.exe -> [Folder | Modified Date = 3/17/2008 6:37:34 PM | Attr = RHS] iphj32.exe -> %SystemRoot%\System32\iphj32.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] ippy.exe -> %SystemRoot%\System32\ippy.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] ipst32.exe -> %SystemRoot%\System32\ipst32.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] ipxrmfc4.dll -> %SystemRoot%\System32\ipxrmfc4.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] ipxwshel.exe -> %SystemRoot%\System32\ipxwshel.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] ir32racp.exe -> %SystemRoot%\System32\ir32racp.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] ishost.exe -> %SystemRoot%\System32\ishost.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] ismon.exe -> %SystemRoot%\System32\ismon.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] isnotify.exe -> %SystemRoot%\System32\isnotify.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] issearch.exe -> %SystemRoot%\System32\issearch.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] itunegui.exe -> %SystemRoot%\System32\itunegui.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] iuennwcf.dll -> %SystemRoot%\System32\iuennwcf.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] java.exe -> %SystemRoot%\System32\java.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 135168 bytes | Modified Date = 2/22/2008 2:23:35 AM | Attr = ] javacpl.cpl -> %SystemRoot%\System32\javacpl.cpl -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 69632 bytes | Modified Date = 2/22/2008 3:33:31 AM | Attr = ] javaw.exe -> %SystemRoot%\System32\javaw.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 135168 bytes | Modified Date = 2/22/2008 2:23:39 AM | Attr = ] javaws.exe -> %SystemRoot%\System32\javaws.exe -> Sun Microsystems, Inc. [Ver = 6.0.50.13 | Size = 139264 bytes | Modified Date = 2/22/2008 3:33:32 AM | Attr = ] javex80.vxd -> %SystemRoot%\System32\javex80.vxd -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] javexulm.vxd -> %SystemRoot%\System32\javexulm.vxd -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] jehmbyxrubdb.dll -> %SystemRoot%\System32\jehmbyxrubdb.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] jeired.dll -> %SystemRoot%\System32\jeired.dll -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] jgdwadsn.dll -> %SystemRoot%\System32\jgdwadsn.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] jgdwadsn.exe -> %SystemRoot%\System32\jgdwadsn.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] jgsdrpcn.dll -> %SystemRoot%\System32\jgsdrpcn.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] jgsdrpcn.exe -> %SystemRoot%\System32\jgsdrpcn.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] jsdapi.exe -> %SystemRoot%\System32\jsdapi.exe -> [Folder | Modified Date = 3/17/2008 6:37:43 PM | Attr = RHS] jusched32.exe -> %SystemRoot%\System32\jusched32.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] kbdfwshe.exe -> %SystemRoot%\System32\kbdfwshe.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] kbdpkbdr.exe -> %SystemRoot%\System32\kbdpkbdr.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] keyactivex.ocx -> %SystemRoot%\System32\keyactivex.ocx -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] keyhost.exe -> %SystemRoot%\System32\keyhost.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] keymap.dll -> %SystemRoot%\System32\keymap.dll -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] kha.dll -> %SystemRoot%\System32\kha.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] klo5.sys -> %SystemRoot%\System32\klo5.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] kncjmlb.dll -> %SystemRoot%\System32\kncjmlb.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] ladchkr.exe -> %SystemRoot%\System32\ladchkr.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] lanh32.dll -> %SystemRoot%\System32\lanh32.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] lanmui.dll -> %SystemRoot%\System32\lanmui.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] laziqn.exe -> %SystemRoot%\System32\laziqn.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] lcch.dat -> %SystemRoot%\System32\lcch.dat -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] lcd32.exe -> %SystemRoot%\System32\lcd32.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lien van de kelder.exe -> %SystemRoot%\System32\lien van de kelder.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lien Van de kelderrr.exe -> %SystemRoot%\System32\lien Van de kelderrr.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lien vande kelder.exe -> %SystemRoot%\System32\lien vande kelder.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lien vd kelder.exe -> %SystemRoot%\System32\lien vd kelder.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lientjeuh.exe -> %SystemRoot%\System32\lientjeuh.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lienvandekelder.exe -> %SystemRoot%\System32\lienvandekelder.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lienvdk.exe -> %SystemRoot%\System32\lienvdk.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] links.dll -> %SystemRoot%\System32\links.dll -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] ljjhh.dll -> %SystemRoot%\System32\ljjhh.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] lmrtatkc.dll -> %SystemRoot%\System32\lmrtatkc.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] ln_reco.exe -> %SystemRoot%\System32\ln_reco.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] loader_name.exe -> %SystemRoot%\System32\loader_name.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] loader_name.exeopen -> %SystemRoot%\System32\loader_name.exeopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] loader_name.exeopenopen -> %SystemRoot%\System32\loader_name.exeopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] localnrd.dll -> %SystemRoot%\System32\localnrd.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] logic.exe -> %SystemRoot%\System32\logic.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] logitechwls.exe -> %SystemRoot%\System32\logitechwls.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] lp.dll -> %SystemRoot%\System32\lp.dll -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] lp.exe -> %SystemRoot%\System32\lp.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] lspak.dll -> %SystemRoot%\System32\lspak.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] lstb4drc.dll -> %SystemRoot%\System32\lstb4drc.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] lstb4drc.exe -> %SystemRoot%\System32\lstb4drc.exe -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] lut.dat -> %SystemRoot%\System32\lut.dat -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] lwz.dll -> %SystemRoot%\System32\lwz.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] madise.dll -> %SystemRoot%\System32\madise.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mailinfo.exe -> %SystemRoot%\System32\mailinfo.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] mapisvc32.exe -> %SystemRoot%\System32\mapisvc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mbr32.dll -> %SystemRoot%\System32\mbr32.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] mcd3mscm.dll -> %SystemRoot%\System32\mcd3mscm.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] mcscn.exe -> %SystemRoot%\System32\mcscn.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] memloader.exe -> %SystemRoot%\System32\memloader.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] memlow.sys -> %SystemRoot%\System32\memlow.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] messenger.lib.exe -> %SystemRoot%\System32\messenger.lib.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] mfcgt32.exe -> %SystemRoot%\System32\mfcgt32.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] mfcqc32.exe -> %SystemRoot%\System32\mfcqc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] mfcuo.exe -> %SystemRoot%\System32\mfcuo.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] mgeekremove.exe -> %SystemRoot%\System32\mgeekremove.exe -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] mgmtmtxc.exe -> %SystemRoot%\System32\mgmtmtxc.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] mgs_32.dll -> %SystemRoot%\System32\mgs_32.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] microsystem.exe -> %SystemRoot%\System32\microsystem.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] microupdate.exe -> %SystemRoot%\System32\microupdate.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] mid.dll -> %SystemRoot%\System32\mid.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] mmview_101.dll -> %SystemRoot%\System32\mmview_101.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] mmx17g.dll -> %SystemRoot%\System32\mmx17g.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] mmx432.dll -> %SystemRoot%\System32\mmx432.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] mmx4xt.dll -> %SystemRoot%\System32\mmx4xt.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] mmxf32.dll -> %SystemRoot%\System32\mmxf32.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] mmxf64.sys -> %SystemRoot%\System32\mmxf64.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] mouse.exe -> %SystemRoot%\System32\mouse.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] mpz300.dll -> %SystemRoot%\System32\mpz300.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] mqadscp3.exe -> %SystemRoot%\System32\mqadscp3.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] mqexdlm.srg -> %SystemRoot%\System32\mqexdlm.srg -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] mqoacdmo.dll -> %SystemRoot%\System32\mqoacdmo.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] mrkscr.exe -> %SystemRoot%\System32\mrkscr.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] MRT.INI -> %SystemRoot%\System32\MRT.INI -> [Ver = | Size = 118 bytes | Modified Date = 1/5/2008 5:35:42 PM | Attr = ] msa64chk.dll -> %SystemRoot%\System32\msa64chk.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] msafiasn.dll -> %SystemRoot%\System32\msafiasn.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] msapasrc.dll -> %SystemRoot%\System32\msapasrc.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] msbe.dll -> %SystemRoot%\System32\msbe.dll -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] mscache.dll -> %SystemRoot%\System32\mscache.dll -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] mscb.dll -> %SystemRoot%\System32\mscb.dll -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] msccof.exe -> %SystemRoot%\System32\msccof.exe -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mscdka.dll -> %SystemRoot%\System32\mscdka.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msconfd.dll -> %SystemRoot%\System32\msconfd.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] mscornet.exe -> %SystemRoot%\System32\mscornet.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] mscpbo.exe -> %SystemRoot%\System32\mscpbo.exe -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msdaim.dll -> %SystemRoot%\System32\msdaim.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msdev32.exe -> %SystemRoot%\System32\msdev32.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] msdlgk.dll -> %SystemRoot%\System32\msdlgk.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mseclk.dll -> %SystemRoot%\System32\mseclk.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msedah.dll -> %SystemRoot%\System32\msedah.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mseffm.dll -> %SystemRoot%\System32\mseffm.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msegcompid.dll -> %SystemRoot%\System32\msegcompid.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mseggrpid.dll -> %SystemRoot%\System32\mseggrpid.dll -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] msenfh.dll -> %SystemRoot%\System32\msenfh.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msexcred.exe -> %SystemRoot%\System32\msexcred.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] msexreg.exe -> %SystemRoot%\System32\msexreg.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] msfaol.dll -> %SystemRoot%\System32\msfaol.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msgdmf.exe -> %SystemRoot%\System32\msgdmf.exe -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msgmr.exe -> %SystemRoot%\System32\msgmr.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] mshelper.dll -> %SystemRoot%\System32\mshelper.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] msibkd.dll -> %SystemRoot%\System32\msibkd.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msiebho.dll -> %SystemRoot%\System32\msiebho.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] msiefr40.dll -> %SystemRoot%\System32\msiefr40.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] msiein.dll -> %SystemRoot%\System32\msiein.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] msielink.dll -> %SystemRoot%\System32\msielink.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] msiesh.dll -> %SystemRoot%\System32\msiesh.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] msietk1020.dll -> %SystemRoot%\System32\msietk1020.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] msinfosys.dll -> %SystemRoot%\System32\msinfosys.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] msipcsv.exe -> %SystemRoot%\System32\msipcsv.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] msjfbl.dll -> %SystemRoot%\System32\msjfbl.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mskceo.dll -> %SystemRoot%\System32\mskceo.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mskehb.dll -> %SystemRoot%\System32\mskehb.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mskhhe.dll -> %SystemRoot%\System32\mskhhe.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msklive.dll -> %SystemRoot%\System32\msklive.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mskpkc.dll -> %SystemRoot%\System32\mskpkc.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mslefh.dll -> %SystemRoot%\System32\mslefh.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] mslsicwd.dll -> %SystemRoot%\System32\mslsicwd.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] mslspcg.exe -> %SystemRoot%\System32\mslspcg.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] msmc.exe -> %SystemRoot%\System32\msmc.exe -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msmdld.DLL -> %SystemRoot%\System32\msmdld.DLL -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msmgrxp.exe -> %SystemRoot%\System32\msmgrxp.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] msmm.exe -> %SystemRoot%\System32\msmm.exe -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msnavc32.exe -> %SystemRoot%\System32\msnavc32.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] msncjk.dll -> %SystemRoot%\System32\msncjk.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msnkmi.dll -> %SystemRoot%\System32\msnkmi.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] msnl.exe -> %SystemRoot%\System32\msnl.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] msnsxole.dll -> %SystemRoot%\System32\msnsxole.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] msnsxole.exe -> %SystemRoot%\System32\msnsxole.exe -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] msobfl.dll -> %SystemRoot%\System32\msobfl.dll -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] msongn.exe -> %SystemRoot%\System32\msongn.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] msph32.exe -> %SystemRoot%\System32\msph32.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] msplus.dll -> %SystemRoot%\System32\msplus.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] msplus1.dll -> %SystemRoot%\System32\msplus1.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] msplus2.dll -> %SystemRoot%\System32\msplus2.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] msplus3.dll -> %SystemRoot%\System32\msplus3.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] msplus32.exe -> %SystemRoot%\System32\msplus32.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] msplus4.dll -> %SystemRoot%\System32\msplus4.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] msqsb.dll -> %SystemRoot%\System32\msqsb.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] mssck.exe -> %SystemRoot%\System32\mssck.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] mssearch.dll -> %SystemRoot%\System32\mssearch.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] mssearchnet.exe -> %SystemRoot%\System32\mssearchnet.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] msspi.dll -> %SystemRoot%\System32\msspi.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] msstersv.dll -> %SystemRoot%\System32\msstersv.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] mssz32.dll -> %SystemRoot%\System32\mssz32.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] msview.dll -> %SystemRoot%\System32\msview.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] msxct.exe -> %SystemRoot%\System32\msxct.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] msxml4r.exe -> %SystemRoot%\System32\msxml4r.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] msxmlpp.dll -> %SystemRoot%\System32\msxmlpp.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] msxver64.sqr -> %SystemRoot%\System32\msxver64.sqr -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] mtc.dll -> %SystemRoot%\System32\mtc.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mtrnqs.exe -> %SystemRoot%\System32\mtrnqs.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] mtwirl32.dll -> %SystemRoot%\System32\mtwirl32.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] mupdate.exe -> %SystemRoot%\System32\mupdate.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] myaccess.dll -> %SystemRoot%\System32\myaccess.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] myad.dll -> %SystemRoot%\System32\myad.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] mygeek.dll -> %SystemRoot%\System32\mygeek.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] n3tpa1p.dll -> %SystemRoot%\System32\n3tpa1p.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] nas.dll -> %SystemRoot%\System32\nas.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] navext.dll -> %SystemRoot%\System32\navext.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] ndrv.dll -> %SystemRoot%\System32\ndrv.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] ndrv.exe -> %SystemRoot%\System32\ndrv.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] netcog.exe -> %SystemRoot%\System32\netcog.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] netjh32.exe -> %SystemRoot%\System32\netjh32.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] netut80ex.vxd -> %SystemRoot%\System32\netut80ex.vxd -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] newmsrdk2.zip -> %SystemRoot%\System32\newmsrdk2.zip -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] nkgfs.sys -> %SystemRoot%\System32\nkgfs.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] nnmzoq.exe -> %SystemRoot%\System32\nnmzoq.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] nn_bar.dll -> %SystemRoot%\System32\nn_bar.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] nn_bar21.dll -> %SystemRoot%\System32\nn_bar21.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] nn_bar22.dll -> %SystemRoot%\System32\nn_bar22.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] nn_bar31.dll -> %SystemRoot%\System32\nn_bar31.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] norton update.exe -> %SystemRoot%\System32\norton update.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] ntdx.exe -> %SystemRoot%\System32\ntdx.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] nvapps.xml -> %SystemRoot%\System32\nvapps.xml -> [Ver = | Size = 164081 bytes | Modified Date = 3/22/2008 9:07:53 PM | Attr = ] nvctrl.exe -> %SystemRoot%\System32\nvctrl.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] nvms.dll -> %SystemRoot%\System32\nvms.dll -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] nvrcr32.dll -> %SystemRoot%\System32\nvrcr32.dll -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] NVUNINST.EXE -> %SystemRoot%\System32\NVUNINST.EXE -> NVIDIA Corporation [Ver = 1 , 3 , 8 , 0 | Size = 442368 bytes | Modified Date = 3/6/2008 5:23:32 PM | Attr = ] oebdfc.dll -> %SystemRoot%\System32\oebdfc.dll -> [Folder | Modified Date = 3/17/2008 6:37:58 PM | Attr = RHS] ofrg.dll -> %SystemRoot%\System32\ofrg.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] oifhhio.dll -> %SystemRoot%\System32\oifhhio.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] oipa.dll -> %SystemRoot%\System32\oipa.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] olehelp.exe -> %SystemRoot%\System32\olehelp.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] oo4.dll -> %SystemRoot%\System32\oo4.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] opc.dll -> %SystemRoot%\System32\opc.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] optserve.dll -> %SystemRoot%\System32\optserve.dll -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] optserve.exe -> %SystemRoot%\System32\optserve.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] osalogbe.exe -> %SystemRoot%\System32\osalogbe.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] otw0i.dll -> %SystemRoot%\System32\otw0i.dll -> [Folder | Modified Date = 3/17/2008 6:37:41 PM | Attr = RHS] patch31345.exe -> %SystemRoot%\System32\patch31345.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] pavb1u2.exe -> %SystemRoot%\System32\pavb1u2.exe -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] pdfzzy.dll -> %SystemRoot%\System32\pdfzzy.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] pdx.dll -> %SystemRoot%\System32\pdx.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] per.exe -> %SystemRoot%\System32\per.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] perfc009.dat -> %SystemRoot%\System32\perfc009.dat -> [Ver = | Size = 52764 bytes | Modified Date = 3/22/2008 7:21:06 PM | Attr = ] perfh009.dat -> %SystemRoot%\System32\perfh009.dat -> [Ver = | Size = 380350 bytes | Modified Date = 3/22/2008 7:21:06 PM | Attr = ] PerfStringBackup.INI -> %SystemRoot%\System32\PerfStringBackup.INI -> [Ver = | Size = 439552 bytes | Modified Date = 3/22/2008 7:21:06 PM | Attr = ] phantom.exe -> %SystemRoot%\System32\phantom.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] picx.exe -> %SystemRoot%\System32\picx.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] plugnplay32.exe -> %SystemRoot%\System32\plugnplay32.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] pnkeb.dll -> %SystemRoot%\System32\pnkeb.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] pnp.exe -> %SystemRoot%\System32\pnp.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] polau2c.exe -> %SystemRoot%\System32\polau2c.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] poller.exe -> %SystemRoot%\System32\poller.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] pptp16.dll -> %SystemRoot%\System32\pptp16.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] pptp24.sys -> %SystemRoot%\System32\pptp24.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] pptp32.dll -> %SystemRoot%\System32\pptp32.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] ppts16.dll -> %SystemRoot%\System32\ppts16.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] pqhelper.dll -> %SystemRoot%\System32\pqhelper.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] preload.ocx -> %SystemRoot%\System32\preload.ocx -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] protection.exe -> %SystemRoot%\System32\protection.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] prutpct.exe -> %SystemRoot%\System32\prutpct.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] prutsct.exe -> %SystemRoot%\System32\prutsct.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] pruttct.exe -> %SystemRoot%\System32\pruttct.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] ptech.exe -> %SystemRoot%\System32\ptech.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] pup.exe -> %SystemRoot%\System32\pup.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] qdvtscf.dll -> %SystemRoot%\System32\qdvtscf.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] qo.dll -> %SystemRoot%\System32\qo.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] qo.sys -> %SystemRoot%\System32\qo.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] quicklaunchie.dll -> %SystemRoot%\System32\quicklaunchie.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] qy.sys -> %SystemRoot%\System32\qy.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] qz.dll -> %SystemRoot%\System32\qz.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] qz.sys -> %SystemRoot%\System32\qz.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] randreco.exe -> %SystemRoot%\System32\randreco.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] rcbdwmpd.dll -> %SystemRoot%\System32\rcbdwmpd.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] rdpwmsjt.exe -> %SystemRoot%\System32\rdpwmsjt.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] reg2.exe -> %SystemRoot%\System32\reg2.exe -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] regp32.dll -> %SystemRoot%\System32\regp32.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] regperf.exe -> %SystemRoot%\System32\regperf.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] regsvc32.exe -> %SystemRoot%\System32\regsvc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:26 PM | Attr = RHS] ReinstallBackups -> %SystemRoot%\System32\ReinstallBackups -> [Folder | Modified Date = 3/22/2008 7:45:24 PM | Attr = ] rem00001.dll -> %SystemRoot%\System32\rem00001.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] replmap.dll -> %SystemRoot%\System32\replmap.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] re_file.exe -> %SystemRoot%\System32\re_file.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] rk.exe -> %SystemRoot%\System32\rk.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] rkinstaller.exe -> %SystemRoot%\System32\rkinstaller.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] rlvknlg.exe -> %SystemRoot%\System32\rlvknlg.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] rmashlex.dll -> %SystemRoot%\System32\rmashlex.dll -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] rsp.dll -> %SystemRoot%\System32\rsp.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] rsp001.dll -> %SystemRoot%\System32\rsp001.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] rsstoolbar.dll -> %SystemRoot%\System32\rsstoolbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] rulesak.dll -> %SystemRoot%\System32\rulesak.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] rundll.exe -> %SystemRoot%\System32\rundll.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = ] rundll16.dll -> %SystemRoot%\System32\rundll16.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] rundnm.exe -> %SystemRoot%\System32\rundnm.exe -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] rvreg.exe -> %SystemRoot%\System32\rvreg.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] s4helper.dll -> %SystemRoot%\System32\s4helper.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] safesearch.dll -> %SystemRoot%\System32\safesearch.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] sbus.dll -> %SystemRoot%\System32\sbus.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] scalpe91.exe -> %SystemRoot%\System32\scalpe91.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] scp3jgaw.dll -> %SystemRoot%\System32\scp3jgaw.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] scrigz.exe -> %SystemRoot%\System32\scrigz.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] sd.exe -> %SystemRoot%\System32\sd.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] sd16win.dll -> %SystemRoot%\System32\sd16win.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] sdkdh.exe -> %SystemRoot%\System32\sdkdh.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] sdkhb32.exe -> %SystemRoot%\System32\sdkhb32.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] sdkly.exe -> %SystemRoot%\System32\sdkly.exe -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] sdmapi.sys -> %SystemRoot%\System32\sdmapi.sys -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] seantb.dll -> %SystemRoot%\System32\seantb.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] searchaddon.dll -> %SystemRoot%\System32\searchaddon.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] searchsquire.dll -> %SystemRoot%\System32\searchsquire.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] searchsquire2.dll -> %SystemRoot%\System32\searchsquire2.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] searchsquire3.dll -> %SystemRoot%\System32\searchsquire3.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] searchsquire33.dll -> %SystemRoot%\System32\searchsquire33.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] searchupdate31.exe -> %SystemRoot%\System32\searchupdate31.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] searchupdate33.exe -> %SystemRoot%\System32\searchupdate33.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] secumsje.exe -> %SystemRoot%\System32\secumsje.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] semd32.dll -> %SystemRoot%\System32\semd32.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] seqsb.dll -> %SystemRoot%\System32\seqsb.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] sertgs.dll -> %SystemRoot%\System32\sertgs.dll -> [Folder | Modified Date = 3/17/2008 6:37:44 PM | Attr = RHS] servehost.exe -> %SystemRoot%\System32\servehost.exe -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] service5.exe -> %SystemRoot%\System32\service5.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] services -> %SystemRoot%\System32\services -> [Ver = | Size = 242 bytes | Modified Date = 3/17/2008 6:37:35 PM | Attr = RH ] servises.exe -> %SystemRoot%\System32\servises.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] shell.exe -> %SystemRoot%\System32\shell.exe -> [Folder | Modified Date = 3/17/2008 6:37:51 PM | Attr = RHS] shfoxpob.exe -> %SystemRoot%\System32\shfoxpob.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] shnlog.exe -> %SystemRoot%\System32\shnlog.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] sksdrvr2.sys -> %SystemRoot%\System32\sksdrvr2.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] skybot.exe -> %SystemRoot%\System32\skybot.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] skytown.exe -> %SystemRoot%\System32\skytown.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] skyx16.dll -> %SystemRoot%\System32\skyx16.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] slbipsch.dll -> %SystemRoot%\System32\slbipsch.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] slbipsch.exe -> %SystemRoot%\System32\slbipsch.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] slbrmqtr.exe -> %SystemRoot%\System32\slbrmqtr.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] slpube03.dll -> %SystemRoot%\System32\slpube03.dll -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] smdnn05.dll -> %SystemRoot%\System32\smdnn05.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] smtapi.sys -> %SystemRoot%\System32\smtapi.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] snda32.dll -> %SystemRoot%\System32\snda32.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] sndu32.dll -> %SystemRoot%\System32\sndu32.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] snmpmssw.exe -> %SystemRoot%\System32\snmpmssw.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] socul.dll -> %SystemRoot%\System32\socul.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] sodahk.dll -> %SystemRoot%\System32\sodahk.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] somatic.dll -> %SystemRoot%\System32\somatic.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] sp2fx.exe -> %SystemRoot%\System32\sp2fx.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] sp2winfix.exe -> %SystemRoot%\System32\sp2winfix.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] speeder.exe -> %SystemRoot%\System32\speeder.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] spwgoc.exe -> %SystemRoot%\System32\spwgoc.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] sqlbgb.dll -> %SystemRoot%\System32\sqlbgb.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] ss.dll -> %SystemRoot%\System32\ss.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] ss32.dll -> %SystemRoot%\System32\ss32.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] stagmr.exe -> %SystemRoot%\System32\stagmr.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] stcloader.exe -> %SystemRoot%\System32\stcloader.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] stlbad123.dll -> %SystemRoot%\System32\stlbad123.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] stlbdist.dll -> %SystemRoot%\System32\stlbdist.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] stlbupdt.dll -> %SystemRoot%\System32\stlbupdt.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] stmtreco.exe -> %SystemRoot%\System32\stmtreco.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] submithook.dll -> %SystemRoot%\System32\submithook.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] support.exe -> %SystemRoot%\System32\support.exe -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] susp_reco.exe -> %SystemRoot%\System32\susp_reco.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] svjvpn.sys -> %SystemRoot%\System32\svjvpn.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] svkvpn.dll -> %SystemRoot%\System32\svkvpn.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] svkvpn.sys -> %SystemRoot%\System32\svkvpn.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] sword.exe -> %SystemRoot%\System32\sword.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] sysconf.exe -> %SystemRoot%\System32\sysconf.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] sysdll32.dll -> %SystemRoot%\System32\sysdll32.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] sysldr.dll -> %SystemRoot%\System32\sysldr.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] sysmonnt.exe -> %SystemRoot%\System32\sysmonnt.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] systemout.exe -> %SystemRoot%\System32\systemout.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] sys_ext.dll -> %SystemRoot%\System32\sys_ext.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] sys_xp.exe -> %SystemRoot%\System32\sys_xp.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] sys_xp.exeopen -> %SystemRoot%\System32\sys_xp.exeopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] sys_xp.exeopenopen -> %SystemRoot%\System32\sys_xp.exeopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] tagmr.exe -> %SystemRoot%\System32\tagmr.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] taskgamr.exe -> %SystemRoot%\System32\taskgamr.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] taskgmr32.exe -> %SystemRoot%\System32\taskgmr32.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] tbc.dll -> %SystemRoot%\System32\tbc.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] tconini.dat -> %SystemRoot%\System32\tconini.dat -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] tcpr32.dll -> %SystemRoot%\System32\tcpr32.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] td1.dll -> %SystemRoot%\System32\td1.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] tfde.dll -> %SystemRoot%\System32\tfde.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] ticads.exe -> %SystemRoot%\System32\ticads.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] ticont.dll -> %SystemRoot%\System32\ticont.dll -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] timemanager.exe -> %SystemRoot%\System32\timemanager.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] timesrv.exe -> %SystemRoot%\System32\timesrv.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] tipp.dat -> %SystemRoot%\System32\tipp.dat -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] tippcls.dat -> %SystemRoot%\System32\tippcls.dat -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] tips.exe -> %SystemRoot%\System32\tips.exe -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] tisa.cnf -> %SystemRoot%\System32\tisa.cnf -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] tisa.dll -> %SystemRoot%\System32\tisa.dll -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] toolband.dll -> %SystemRoot%\System32\toolband.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] toolbar.dll -> %SystemRoot%\System32\toolbar.dll -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] tps108.dll -> %SystemRoot%\System32\tps108.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] trafracp.dll -> %SystemRoot%\System32\trafracp.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] trk.dll -> %SystemRoot%\System32\trk.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] tubby.dll -> %SystemRoot%\System32\tubby.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] twain32.dll -> %SystemRoot%\System32\twain32.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] twpkad.dll -> %SystemRoot%\System32\twpkad.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] twpr32.dll -> %SystemRoot%\System32\twpr32.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] twunk_65.exe -> %SystemRoot%\System32\twunk_65.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] uninmyad.exe -> %SystemRoot%\System32\uninmyad.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] unsocul.exe -> %SystemRoot%\System32\unsocul.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] unstsa2.exe -> %SystemRoot%\System32\unstsa2.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] update_bho.dll -> %SystemRoot%\System32\update_bho.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] update_com.dll -> %SystemRoot%\System32\update_com.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] update_hosts.dll -> %SystemRoot%\System32\update_hosts.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] update_removeold.dll -> %SystemRoot%\System32\update_removeold.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] update_rsp.DLL -> %SystemRoot%\System32\update_rsp.DLL -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] updtscheduler.exe -> %SystemRoot%\System32\updtscheduler.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] urncb.dll -> %SystemRoot%\System32\urncb.dll -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] urncbc.dll -> %SystemRoot%\System32\urncbc.dll -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] v4pbpt51.dll -> %SystemRoot%\System32\v4pbpt51.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] VACFix.exe -> %SystemRoot%\System32\VACFix.exe -> S!Ri.URZ [Ver = | Size = 86528 bytes | Modified Date = 3/14/2008 9:09:32 AM | Attr = ] vb5dmspo.dll -> %SystemRoot%\System32\vb5dmspo.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] vdmt16.sys -> %SystemRoot%\System32\vdmt16.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] vdnt32.sys -> %SystemRoot%\System32\vdnt32.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] version.exe -> %SystemRoot%\System32\version.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] vistax.dll -> %SystemRoot%\System32\vistax.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] vlcx052.dll -> %SystemRoot%\System32\vlcx052.dll -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] vnetsmme.dll -> %SystemRoot%\System32\vnetsmme.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] vsxmpgpc.dll -> %SystemRoot%\System32\vsxmpgpc.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] vtd_16.exe -> %SystemRoot%\System32\vtd_16.exe -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] vtlbar1.dll -> %SystemRoot%\System32\vtlbar1.dll -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] vwix32.exe -> %SystemRoot%\System32\vwix32.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] vx0.nls -> %SystemRoot%\System32\vx0.nls -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx0x.nls -> %SystemRoot%\System32\vx0x.nls -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx1.nls -> %SystemRoot%\System32\vx1.nls -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx1x.nls -> %SystemRoot%\System32\vx1x.nls -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx2.dll -> %SystemRoot%\System32\vx2.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] vx2.nls -> %SystemRoot%\System32\vx2.nls -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx2x.nls -> %SystemRoot%\System32\vx2x.nls -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] vx3.nls -> %SystemRoot%\System32\vx3.nls -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] vx3x.nls -> %SystemRoot%\System32\vx3x.nls -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] w1nt5k.exe -> %SystemRoot%\System32\w1nt5k.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] w32ntupdt.exe -> %SystemRoot%\System32\w32ntupdt.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] w32_ss.exe -> %SystemRoot%\System32\w32_ss.exe -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] w3sskbda.dll -> %SystemRoot%\System32\w3sskbda.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] waeb.dll -> %SystemRoot%\System32\waeb.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] wbtvsffd.exe -> %SystemRoot%\System32\wbtvsffd.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] wcadw.dll -> %SystemRoot%\System32\wcadw.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] wd.sys -> %SystemRoot%\System32\wd.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] wdns33.exe -> %SystemRoot%\System32\wdns33.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] webalize.dll -> %SystemRoot%\System32\webalize.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] webinfo.dll -> %SystemRoot%\System32\webinfo.dll -> [Folder | Modified Date = 3/17/2008 6:37:35 PM | Attr = RHS] wer1306.dll -> %SystemRoot%\System32\wer1306.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] wfdgmr.exe -> %SystemRoot%\System32\wfdgmr.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] wfdmgr.exe -> %SystemRoot%\System32\wfdmgr.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] wiatwain.dll -> %SystemRoot%\System32\wiatwain.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] wid32.exe -> %SystemRoot%\System32\wid32.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] win type -> %SystemRoot%\System32\win type -> [Ver = | Size = 248 bytes | Modified Date = 3/17/2008 6:37:28 PM | Attr = RH ] win24.exe -> %SystemRoot%\System32\win24.exe -> [Folder | Modified Date = 3/17/2008 6:37:52 PM | Attr = RHS] win32lib.exe -> %SystemRoot%\System32\win32lib.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] winats.dll -> %SystemRoot%\System32\winats.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winctl3.ocx -> %SystemRoot%\System32\winctl3.ocx -> [Folder | Modified Date = 3/17/2008 6:37:26 PM | Attr = RHS] winctl4.dll -> %SystemRoot%\System32\winctl4.dll -> [Folder | Modified Date = 3/17/2008 6:37:26 PM | Attr = RHS] windasz-updote.exe -> %SystemRoot%\System32\windasz-updote.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] windec32.dll -> %SystemRoot%\System32\windec32.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] windirect.exe -> %SystemRoot%\System32\windirect.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] windll.exeopen -> %SystemRoot%\System32\windll.exeopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] windll.exeopenopen -> %SystemRoot%\System32\windll.exeopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] windmy.dll -> %SystemRoot%\System32\windmy.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] windowsfirewall.exe -> %SystemRoot%\System32\windowsfirewall.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] windowsie.dll -> %SystemRoot%\System32\windowsie.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] winds.exe -> %SystemRoot%\System32\winds.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] winenc32.dll -> %SystemRoot%\System32\winenc32.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] winf44.dll -> %SystemRoot%\System32\winf44.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] winftsap.dll -> %SystemRoot%\System32\winftsap.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] winftsap.exe -> %SystemRoot%\System32\winftsap.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] winga.exe -> %SystemRoot%\System32\winga.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] wingmt32.exe -> %SystemRoot%\System32\wingmt32.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] wingo.exe -> %SystemRoot%\System32\wingo.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] wingo.exeopen -> %SystemRoot%\System32\wingo.exeopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] wingo.exeopenopen -> %SystemRoot%\System32\wingo.exeopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] winhlpapi.exe -> %SystemRoot%\System32\winhlpapi.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] wininfo.exe -> %SystemRoot%\System32\wininfo.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] winksl.exe -> %SystemRoot%\System32\winksl.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winlink.dll -> %SystemRoot%\System32\winlink.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] winlo.exe -> %SystemRoot%\System32\winlo.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] winlocator.dll -> %SystemRoot%\System32\winlocator.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winlocatorhelper.dll -> %SystemRoot%\System32\winlocatorhelper.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winlow.sys -> %SystemRoot%\System32\winlow.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] winm32.dll -> %SystemRoot%\System32\winm32.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] winnb40.dll -> %SystemRoot%\System32\winnb40.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb41.dll -> %SystemRoot%\System32\winnb41.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb42.dll -> %SystemRoot%\System32\winnb42.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb51.dll -> %SystemRoot%\System32\winnb51.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb52.dll -> %SystemRoot%\System32\winnb52.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb56.dll -> %SystemRoot%\System32\winnb56.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb57.dll -> %SystemRoot%\System32\winnb57.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb58.dll -> %SystemRoot%\System32\winnb58.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winnb60.dll -> %SystemRoot%\System32\winnb60.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] winns32.exe -> %SystemRoot%\System32\winns32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] winnt.exe -> %SystemRoot%\System32\winnt.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] winntcreate.exe -> %SystemRoot%\System32\winntcreate.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] winproc32.exe -> %SystemRoot%\System32\winproc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] winpup.exe -> %SystemRoot%\System32\winpup.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winpup32.exe -> %SystemRoot%\System32\winpup32.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winres.dll -> %SystemRoot%\System32\winres.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] winrvl.exe -> %SystemRoot%\System32\winrvl.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winsb.dll -> %SystemRoot%\System32\winsb.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winservn.exe -> %SystemRoot%\System32\winservn.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] winservs.exe -> %SystemRoot%\System32\winservs.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] winshow.dll -> %SystemRoot%\System32\winshow.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winsrm32.dll -> %SystemRoot%\System32\winsrm32.dll -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] winstart.exe -> %SystemRoot%\System32\winstart.exe -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] winstart.pif -> %SystemRoot%\System32\winstart.pif -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] winstart001.exe -> %SystemRoot%\System32\winstart001.exe -> [Folder | Modified Date = 3/17/2008 6:37:47 PM | Attr = RHS] winsvc32.exe -> %SystemRoot%\System32\winsvc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] winsys.exe -> %SystemRoot%\System32\winsys.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] winsyscfg.exe -> %SystemRoot%\System32\winsyscfg.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] wintasker.exe -> %SystemRoot%\System32\wintasker.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] wintbp.exe -> %SystemRoot%\System32\wintbp.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] wintbpx.exe -> %SystemRoot%\System32\wintbpx.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] wintems.exe -> %SystemRoot%\System32\wintems.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] wintft.dll -> %SystemRoot%\System32\wintft.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] wintsvsu.exe -> %SystemRoot%\System32\wintsvsu.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] winutil4.dll -> %SystemRoot%\System32\winutil4.dll -> [Folder | Modified Date = 3/17/2008 6:37:26 PM | Attr = RHS] winvnc.exe -> %SystemRoot%\System32\winvnc.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] winwsl.exe -> %SystemRoot%\System32\winwsl.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winxp.exeopen -> %SystemRoot%\System32\winxp.exeopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] winxp.exeopenopen -> %SystemRoot%\System32\winxp.exeopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] winxp.exeopenopenopen -> %SystemRoot%\System32\winxp.exeopenopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] winxp.exeopenopenopenopen -> %SystemRoot%\System32\winxp.exeopenopenopenopen -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] winyw32.exe -> %SystemRoot%\System32\winyw32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] wnsapisu.exe -> %SystemRoot%\System32\wnsapisu.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnsapisv.exe -> %SystemRoot%\System32\wnsapisv.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnscpcc.exe -> %SystemRoot%\System32\wnscpcc.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnscpit.exe -> %SystemRoot%\System32\wnscpit.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnsintsv.exe -> %SystemRoot%\System32\wnsintsv.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] wnsinttr.exe -> %SystemRoot%\System32\wnsinttr.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] word10.dll -> %SystemRoot%\System32\word10.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [Ver = | Size = 2262 bytes | Modified Date = 3/22/2008 7:12:03 PM | Attr = ] wpwmgrs.exe -> %SystemRoot%\System32\wpwmgrs.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] wshnseri.exe -> %SystemRoot%\System32\wshnseri.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] wshtlprh.dll -> %SystemRoot%\System32\wshtlprh.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] wtoolsb.dll -> %SystemRoot%\System32\wtoolsb.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] wuauclt.dll -> %SystemRoot%\System32\wuauclt.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] wxtwdx.dll -> %SystemRoot%\System32\wxtwdx.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] wz.dll -> %SystemRoot%\System32\wz.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] wzhelper.dll -> %SystemRoot%\System32\wzhelper.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] xdpptp.sys -> %SystemRoot%\System32\xdpptp.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xdudtt.dll -> %SystemRoot%\System32\xdudtt.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xkrdk.dll -> %SystemRoot%\System32\xkrdk.dll -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] xmm13g.dll -> %SystemRoot%\System32\xmm13g.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xmsk32.dll -> %SystemRoot%\System32\xmsk32.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xmsk64.sys -> %SystemRoot%\System32\xmsk64.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xopptp.dll -> %SystemRoot%\System32\xopptp.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xopptp.sys -> %SystemRoot%\System32\xopptp.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xpfirewall.exe -> %SystemRoot%\System32\xpfirewall.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] xplugin.dll -> %SystemRoot%\System32\xplugin.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] xptp16.dll -> %SystemRoot%\System32\xptp16.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xptptt.dll -> %SystemRoot%\System32\xptptt.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] xxvyaj.exe -> %SystemRoot%\System32\xxvyaj.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] xxxvideo.hta -> %SystemRoot%\System32\xxxvideo.hta -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] ycsrgb.sys -> %SystemRoot%\System32\ycsrgb.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] ycsvga.sys -> %SystemRoot%\System32\ycsvga.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] ycsvgd.sys -> %SystemRoot%\System32\ycsvgd.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] ydsvgd.dll -> %SystemRoot%\System32\ydsvgd.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] ydsvgd.sys -> %SystemRoot%\System32\ydsvgd.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvbb01.dll -> %SystemRoot%\System32\yvbb01.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvpp01.dll -> %SystemRoot%\System32\yvpp01.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvpp01.sys -> %SystemRoot%\System32\yvpp01.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvpp02.sys -> %SystemRoot%\System32\yvpp02.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvprgb.dll -> %SystemRoot%\System32\yvprgb.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvsvga.dll -> %SystemRoot%\System32\yvsvga.dll -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] yvsvga.sys -> %SystemRoot%\System32\yvsvga.sys -> [Folder | Modified Date = 3/17/2008 6:37:45 PM | Attr = RHS] zeropopupbar.dll -> %SystemRoot%\System32\zeropopupbar.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] zp.dll -> %SystemRoot%\System32\zp.dll -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] zz.dll -> %SystemRoot%\System32\zz.dll -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] _dll.exe -> %SystemRoot%\System32\_dll.exe -> [Folder | Modified Date = 3/17/2008 6:37:29 PM | Attr = RHS] _epnt.sys -> %SystemRoot%\System32\_epnt.sys -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] $hf_mig$ -> %SystemRoot%\$hf_mig$ -> [Folder | Modified Date = 3/16/2008 9:22:18 PM | Attr = H ] 1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> 2020install.exe -> %SystemRoot%\2020install.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] 2020search.dll -> %SystemRoot%\2020search.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] 2020search2.dll -> %SystemRoot%\2020search2.dll -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] a64sddd.exe -> %SystemRoot%\a64sddd.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] abiuninst.htm -> %SystemRoot%\abiuninst.htm -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] ac.aut -> %SystemRoot%\ac.aut -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] addkc32.exe -> %SystemRoot%\addkc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] adrsb.exe -> %SystemRoot%\adrsb.exe -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] ads.js -> %SystemRoot%\ads.js -> [Folder | Modified Date = 3/17/2008 6:38:00 PM | Attr = RHS] ahcb.exe -> %SystemRoot%\ahcb.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] apiac.exe -> %SystemRoot%\apiac.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] apifb.exe -> %SystemRoot%\apifb.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] apigj.exe -> %SystemRoot%\apigj.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] apijn32.exe -> %SystemRoot%\apijn32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] apivt.exe -> %SystemRoot%\apivt.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] appsh.exe -> %SystemRoot%\appsh.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] appwn32.exe -> %SystemRoot%\appwn32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] ast.exe -> %SystemRoot%\ast.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] atlfs32.exe -> %SystemRoot%\atlfs32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] atlrl32.dll -> %SystemRoot%\atlrl32.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] aurora.exe -> %SystemRoot%\aurora.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] aurorahandler.dll -> %SystemRoot%\aurorahandler.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] avbgle.exe -> %SystemRoot%\avbgle.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] avguard.exe -> %SystemRoot%\avguard.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] avpcc.dll -> %SystemRoot%\avpcc.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] avpguard.exe -> %SystemRoot%\avpguard.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] avprotect.exe -> %SystemRoot%\avprotect.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] avprotect9x.exe -> %SystemRoot%\avprotect9x.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] avserve2.exe -> %SystemRoot%\avserve2.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] avserve3.exe -> %SystemRoot%\avserve3.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] banner.dll -> %SystemRoot%\banner.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] bargain4.exe -> %SystemRoot%\bargain4.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bbchk.exe -> %SystemRoot%\bbchk.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bde -> %SystemRoot%\bde -> [Ver = | Size = 222 bytes | Modified Date = 3/17/2008 6:37:30 PM | Attr = RH ] bi.dll -> %SystemRoot%\bi.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] biprep.exe -> %SystemRoot%\biprep.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] bipw.exe -> %SystemRoot%\bipw.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] bolger.dll -> %SystemRoot%\bolger.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] bootstat.dat -> %SystemRoot%\bootstat.dat -> [Ver = | Size = 2048 bytes | Modified Date = 3/23/2008 8:47:42 AM | Attr = S] bs2.dll -> %SystemRoot%\bs2.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bs3.dll -> %SystemRoot%\bs3.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] bsx32 -> %SystemRoot%\bsx32 -> [Ver = | Size = 238 bytes | Modified Date = 3/17/2008 6:37:30 PM | Attr = RH ] bsx5.dll -> %SystemRoot%\bsx5.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] btgrab.dll -> %SystemRoot%\btgrab.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] buddy.exe -> %SystemRoot%\buddy.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] bxxs5.dll -> %SystemRoot%\bxxs5.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] CAVTemp -> %SystemRoot%\CAVTemp -> [Folder | Modified Date = 3/22/2008 8:51:12 PM | Attr = ] ccsserv.exe -> %SystemRoot%\ccsserv.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] cdproxyserv.exe -> %SystemRoot%\cdproxyserv.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] ceres.dll -> %SystemRoot%\ceres.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] cfg32.exe -> %SystemRoot%\cfg32.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] cfg32o.dll -> %SystemRoot%\cfg32o.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] cfg32p.dll -> %SystemRoot%\cfg32p.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] cfg32r.dll -> %SystemRoot%\cfg32r.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] cfg32s.dll -> %SystemRoot%\cfg32s.dll -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] cleanhistories.dll -> %SystemRoot%\cleanhistories.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] coder -> %SystemRoot%\coder -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:32 PM | Attr = RH ] comp.cpl -> %SystemRoot%\comp.cpl -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] configsys -> %SystemRoot%\configsys -> [Ver = | Size = 234 bytes | Modified Date = 3/17/2008 6:37:32 PM | Attr = RH ] connectionstatus -> %SystemRoot%\connectionstatus -> [Ver = | Size = 236 bytes | Modified Date = 3/17/2008 6:37:57 PM | Attr = RH ] conscorr.exe -> %SystemRoot%\conscorr.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] crvl.exe -> %SystemRoot%\crvl.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] cserv32.exe -> %SystemRoot%\cserv32.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] csssupd.exe -> %SystemRoot%\csssupd.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] cssswd.exe -> %SystemRoot%\cssswd.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] ctb3_shared -> %SystemRoot%\ctb3_shared -> [Ver = | Size = 244 bytes | Modified Date = 3/17/2008 6:37:31 PM | Attr = RH ] ctrlpan.dll -> %SystemRoot%\ctrlpan.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3cq.exe -> %SystemRoot%\d3cq.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3fd32.exe -> %SystemRoot%\d3fd32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3fl32.exe -> %SystemRoot%\d3fl32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3nr32.exe -> %SystemRoot%\d3nr32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3ue.exe -> %SystemRoot%\d3ue.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] d3zg.exe -> %SystemRoot%\d3zg.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] dealhlpr.dll -> %SystemRoot%\dealhlpr.dll -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] Debug -> %SystemRoot%\Debug -> [Folder | Modified Date = 3/16/2008 10:58:28 PM | Attr = ] default.css -> %SystemRoot%\default.css -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] dhbrowser.exe -> %SystemRoot%\dhbrowser.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] dhbrwsr.exe -> %SystemRoot%\dhbrwsr.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] dhdom.bin -> %SystemRoot%\dhdom.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhdom1.bin -> %SystemRoot%\dhdom1.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhdomp.bin -> %SystemRoot%\dhdomp.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhdomp1.bin -> %SystemRoot%\dhdomp1.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhkw.bin -> %SystemRoot%\dhkw.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhkw1.bin -> %SystemRoot%\dhkw1.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhp.dll -> %SystemRoot%\dhp.dll -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhp2.dll -> %SystemRoot%\dhp2.dll -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhsigned.ocx -> %SystemRoot%\dhsigned.ocx -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhsvr.exe -> %SystemRoot%\dhsvr.exe -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhun.exe -> %SystemRoot%\dhun.exe -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dhupdt.exe -> %SystemRoot%\dhupdt.exe -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dinst.exe -> %SystemRoot%\dinst.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] diskmonitor.exe -> %SystemRoot%\diskmonitor.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] dlder.exe -> %SystemRoot%\dlder.exe -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dlgb.exe -> %SystemRoot%\dlgb.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] dlmax.dll -> %SystemRoot%\dlmax.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] dpe.dll -> %SystemRoot%\dpe.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] druninst.exe -> %SystemRoot%\druninst.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] dsearch.bin -> %SystemRoot%\dsearch.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dsearch1.bin -> %SystemRoot%\dsearch1.bin -> [Folder | Modified Date = 3/17/2008 6:37:38 PM | Attr = RHS] dsr.dll -> %SystemRoot%\dsr.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] dsr.exe -> %SystemRoot%\dsr.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] easyav.exe -> %SystemRoot%\easyav.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] easywww.exe -> %SystemRoot%\easywww.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] easywww2.exe -> %SystemRoot%\easywww2.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] easywww3.exe -> %SystemRoot%\easywww3.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] ejgekgpq.ini -> %SystemRoot%\ejgekgpq.ini -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] elitebar -> %SystemRoot%\elitebar -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] elitesidebar -> %SystemRoot%\elitesidebar -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] elitetoolbar -> %SystemRoot%\elitetoolbar -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] ERDNT -> %SystemRoot%\ERDNT -> [Folder | Modified Date = 3/22/2008 6:48:49 PM | Attr = ] eReg.dat -> %SystemRoot%\eReg.dat -> [Ver = | Size = 872 bytes | Modified Date = 3/22/2008 9:24:40 PM | Attr = ] ERUNT -> %SystemRoot%\ERUNT -> [Folder | Modified Date = 3/23/2008 8:35:15 AM | Attr = ] etb -> %SystemRoot%\etb -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:40 PM | Attr = RH ] ewupdater.exe -> %SystemRoot%\ewupdater.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] exclean.exe -> %SystemRoot%\exclean.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] exdl.exe -> %SystemRoot%\exdl.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] exedialer.exe -> %SystemRoot%\exedialer.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] explorer -> %SystemRoot%\explorer -> [Ver = | Size = 226 bytes | Modified Date = 3/17/2008 6:37:38 PM | Attr = RH ] extract.exe -> %SystemRoot%\extract.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] exul.exe -> %SystemRoot%\exul.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] ezinstall.exe -> %SystemRoot%\ezinstall.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] farmmext.exe -> %SystemRoot%\farmmext.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] fastseekersetup.ocx -> %SystemRoot%\fastseekersetup.ocx -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] fastseekersetupv2.ocx -> %SystemRoot%\fastseekersetupv2.ocx -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] fejgl.exe -> %SystemRoot%\fejgl.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] firewallsvr.exe -> %SystemRoot%\firewallsvr.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] Fonts -> %SystemRoot%\Fonts -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = R S] fooding.exe -> %SystemRoot%\fooding.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] frsk.exe -> %SystemRoot%\frsk.exe -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] fvprotect.exe -> %SystemRoot%\fvprotect.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] goupdate.exe -> %SystemRoot%\goupdate.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] gsim.dll -> %SystemRoot%\gsim.dll -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] Help -> %SystemRoot%\Help -> [Folder | Modified Date = 3/22/2008 9:07:24 PM | Attr = ] help_dcc.dll -> %SystemRoot%\help_dcc.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] help_ecc.dll -> %SystemRoot%\help_ecc.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] hpsv.exe -> %SystemRoot%\hpsv.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] ib.exe -> %SystemRoot%\ib.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] id.exe -> %SystemRoot%\id.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] ie7updates -> %SystemRoot%\ie7updates -> [Folder | Modified Date = 1/5/2008 5:24:03 PM | Attr = ] iehelper.dll -> %SystemRoot%\iehelper.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] iehook.dll -> %SystemRoot%\iehook.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] iempg.dll -> %SystemRoot%\iempg.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] iempg2.dll -> %SystemRoot%\iempg2.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] ieoo -> %SystemRoot%\ieoo -> [Ver = | Size = 242 bytes | Modified Date = 3/17/2008 6:37:36 PM | Attr = RH ] iewww.exe -> %SystemRoot%\iewww.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] iewwwint.exe -> %SystemRoot%\iewwwint.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] ihsn.exe -> %SystemRoot%\ihsn.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] ilookup -> %SystemRoot%\ilookup -> [Ver = | Size = 230 bytes | Modified Date = 3/17/2008 6:37:47 PM | Attr = RH ] image.dll -> %SystemRoot%\image.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] imgiant.dll -> %SystemRoot%\imgiant.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] imguninst.exe -> %SystemRoot%\imguninst.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] imgurla.exe -> %SystemRoot%\imgurla.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] imsins.BAK -> %SystemRoot%\imsins.BAK -> [Ver = | Size = 1374 bytes | Modified Date = 3/16/2008 11:00:44 PM | Attr = ] infodll.dll -> %SystemRoot%\infodll.dll -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] invitessk.exe -> %SystemRoot%\invitessk.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] ipog.dll -> %SystemRoot%\ipog.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] ipyx32.exe -> %SystemRoot%\ipyx32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] isrvs -> %SystemRoot%\isrvs -> [Ver = | Size = 222 bytes | Modified Date = 3/17/2008 6:38:01 PM | Attr = RH ] istsvc.exe -> %SystemRoot%\istsvc.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] jammer2nd.exe -> %SystemRoot%\jammer2nd.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] kasperskyaveng.exe -> %SystemRoot%\kasperskyaveng.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] kernellos.dll -> %SystemRoot%\kernellos.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] kk8pwxm634.exe -> %SystemRoot%\kk8pwxm634.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] lansas.exe -> %SystemRoot%\lansas.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] maja.exe -> %SystemRoot%\maja.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] mc -> %SystemRoot%\mc -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] mfcbm32.dll -> %SystemRoot%\mfcbm32.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] mfckb.exe -> %SystemRoot%\mfckb.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] mfcui32.exe -> %SystemRoot%\mfcui32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] mm20.ocx -> %SystemRoot%\mm20.ocx -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mm21.ocx -> %SystemRoot%\mm21.ocx -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mm63.ocx -> %SystemRoot%\mm63.ocx -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] mmups.exe -> %SystemRoot%\mmups.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] morphacl.dll -> %SystemRoot%\morphacl.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] mpgcom.dll -> %SystemRoot%\mpgcom.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] mrhop.dll -> %SystemRoot%\mrhop.dll -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] ms spool32.dat -> %SystemRoot%\ms spool32.dat -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] ms spool32.exe -> %SystemRoot%\ms spool32.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] mscache.dll -> %SystemRoot%\mscache.dll -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] mscache.exe -> %SystemRoot%\mscache.exe -> [Folder | Modified Date = 3/17/2008 6:37:48 PM | Attr = RHS] msconfd.dll -> %SystemRoot%\msconfd.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] msew -> %SystemRoot%\msew -> [Ver = | Size = 242 bytes | Modified Date = 3/17/2008 6:37:36 PM | Attr = RH ] mslagent -> %SystemRoot%\mslagent -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] msnarrator.exe -> %SystemRoot%\msnarrator.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] msnc32.exe -> %SystemRoot%\msnc32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] msnmsgrs.exe -> %SystemRoot%\msnmsgrs.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] mssvr.exe -> %SystemRoot%\mssvr.exe -> [Folder | Modified Date = 3/17/2008 6:37:27 PM | Attr = RHS] msupdtwiz.exe -> %SystemRoot%\msupdtwiz.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] msxct.exe -> %SystemRoot%\msxct.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] mszv32.exe -> %SystemRoot%\mszv32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] mxtarget.dll -> %SystemRoot%\mxtarget.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] my.css -> %SystemRoot%\my.css -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] nail.exe -> %SystemRoot%\nail.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] napatch.exe -> %SystemRoot%\napatch.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] navext.dll -> %SystemRoot%\navext.dll -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] navpmc -> %SystemRoot%\navpmc -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] netmedia.exe -> %SystemRoot%\netmedia.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] ntwg.exe -> %SystemRoot%\ntwg.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] ntwn.exe -> %SystemRoot%\ntwn.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] ntyk32.exe -> %SystemRoot%\ntyk32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] ntyo32.exe -> %SystemRoot%\ntyo32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] nview -> %SystemRoot%\nview -> [Folder | Modified Date = 3/22/2008 9:09:21 PM | Attr = ] offerssk.exe -> %SystemRoot%\offerssk.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] olehelp.exe -> %SystemRoot%\olehelp.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] oo4.dll -> %SystemRoot%\oo4.dll -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] oplimit.ini -> %SystemRoot%\oplimit.ini -> [Ver = | Size = 673 bytes | Modified Date = 3/23/2008 8:32:41 AM | Attr = ] pandaavengine.exe -> %SystemRoot%\pandaavengine.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] patch31345.exe -> %SystemRoot%\patch31345.exe -> [Folder | Modified Date = 3/17/2008 6:37:50 PM | Attr = RHS] phantom.exe -> %SystemRoot%\phantom.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] pi1.exe -> %SystemRoot%\pi1.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] pnpasn32.exe -> %SystemRoot%\pnpasn32.exe -> [Folder | Modified Date = 3/17/2008 6:38:03 PM | Attr = RHS] pool32.exe -> %SystemRoot%\pool32.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] Prefetch -> %SystemRoot%\Prefetch -> [Folder | Modified Date = 3/23/2008 9:34:00 AM | Attr = ] psapi.dll -> %SystemRoot%\psapi.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] pxckdla.exe -> %SystemRoot%\pxckdla.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] pxckdlauninstall.exe -> %SystemRoot%\pxckdlauninstall.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] pynix.dll -> %SystemRoot%\pynix.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] qttasks.exe -> %SystemRoot%\qttasks.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] redirect5.exe -> %SystemRoot%\redirect5.exe -> [Folder | Modified Date = 3/17/2008 6:37:39 PM | Attr = RHS] reggserv.exe -> %SystemRoot%\reggserv.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] rgrt.exe -> %SystemRoot%\rgrt.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] roodyc -> %SystemRoot%\roodyc -> [Ver = | Size = 228 bytes | Modified Date = 3/17/2008 6:37:37 PM | Attr = RH ] rundil.exe -> %SystemRoot%\rundil.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] rundil32.exe -> %SystemRoot%\rundil32.exe -> [Folder | Modified Date = 3/17/2008 6:37:53 PM | Attr = RHS] rundll16.dll -> %SystemRoot%\rundll16.dll -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] rundll16.exe -> %SystemRoot%\rundll16.exe -> [Folder | Modified Date = 3/17/2008 6:37:26 PM | Attr = RHS] savestartdate.exe -> %SystemRoot%\savestartdate.exe -> [Folder | Modified Date = 3/17/2008 6:37:42 PM | Attr = RHS] sdkev.exe -> %SystemRoot%\sdkev.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] sdkrr32.exe -> %SystemRoot%\sdkrr32.exe -> [Folder | Modified Date = 3/17/2008 6:37:36 PM | Attr = RHS] security -> %SystemRoot%\security -> [Folder | Modified Date = 3/22/2008 9:08:32 PM | Attr = ] serrv.exe -> %SystemRoot%\serrv.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] sistem.exe -> %SystemRoot%\sistem.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] skynetave.exe -> %SystemRoot%\skynetave.exe -> [Folder | Modified Date = 3/17/2008 6:37:55 PM | Attr = RHS] smss.exe -> %SystemRoot%\smss.exe -> [Folder | Modified Date = 3/17/2008 6:37:32 PM | Attr = RHS] snbho.exe -> %SystemRoot%\snbho.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] speer2.dll -> %SystemRoot%\speer2.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] speeryox.dll -> %SystemRoot%\speeryox.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] sscrg.exe -> %SystemRoot%\sscrg.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] ssdgt.exe -> %SystemRoot%\ssdgt.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] sserrvv.exe -> %SystemRoot%\sserrvv.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] ssk.exe -> %SystemRoot%\ssk.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] ssls.exe -> %SystemRoot%\ssls.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] ssmsgr.exe -> %SystemRoot%\ssmsgr.exe -> [Folder | Modified Date = 3/17/2008 6:37:57 PM | Attr = RHS] svcproc.exe -> %SystemRoot%\svcproc.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] svrmgr.exe -> %SystemRoot%\svrmgr.exe -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] switpa.exe -> %SystemRoot%\switpa.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] switpb.exe -> %SystemRoot%\switpb.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] symav.exe -> %SystemRoot%\symav.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] sys.reg -> %SystemRoot%\sys.reg -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] sysbj -> %SystemRoot%\sysbj -> [Ver = | Size = 242 bytes | Modified Date = 3/17/2008 6:37:37 PM | Attr = RH ] sysea.exe -> %SystemRoot%\sysea.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] sysjq.exe -> %SystemRoot%\sysjq.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] syskr.exe -> %SystemRoot%\syskr.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] syslr.exe -> %SystemRoot%\syslr.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] sysmonxp.exe -> %SystemRoot%\sysmonxp.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] syspi -> %SystemRoot%\syspi -> [Ver = | Size = 242 bytes | Modified Date = 3/17/2008 6:37:37 PM | Attr = RH ] systb.dll -> %SystemRoot%\systb.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] systb.exe -> %SystemRoot%\systb.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] system.ini -> %SystemRoot%\system.ini -> [Ver = | Size = 274 bytes | Modified Date = 3/23/2008 9:53:48 AM | Attr = ] system32 -> %SystemRoot%\system32 -> [Folder | Modified Date = 3/23/2008 9:57:12 AM | Attr = ] t2serv.dll -> %SystemRoot%\t2serv.dll -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] t2serv.exe -> %SystemRoot%\t2serv.exe -> [Folder | Modified Date = 3/17/2008 6:37:59 PM | Attr = RHS] TEMP -> %SystemRoot%\TEMP -> [Folder | Modified Date = 3/23/2008 10:19:51 AM | Attr = ] ts.exe -> %SystemRoot%\ts.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] unast.exe -> %SystemRoot%\unast.exe -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] unstall.exe -> %SystemRoot%\unstall.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] updatewinlocator.exe -> %SystemRoot%\updatewinlocator.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] uptodate.exe -> %SystemRoot%\uptodate.exe -> [Folder | Modified Date = 3/17/2008 6:37:31 PM | Attr = RHS] userconfig9x.dll -> %SystemRoot%\userconfig9x.dll -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] visualguard.exe -> %SystemRoot%\visualguard.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] voiceip.dll -> %SystemRoot%\voiceip.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] vx2.dll -> %SystemRoot%\vx2.dll -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] waladhpr.exe -> %SystemRoot%\waladhpr.exe -> [Folder | Modified Date = 3/17/2008 6:37:56 PM | Attr = RHS] wcby -> %SystemRoot%\wcby -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:46 PM | Attr = RH ] wdskctl.exe -> %SystemRoot%\wdskctl.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] wincomp -> %SystemRoot%\wincomp -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] windowsupd1.exe -> %SystemRoot%\windowsupd1.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] windowsupd2.exe -> %SystemRoot%\windowsupd2.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] windowsupd4.exe -> %SystemRoot%\windowsupd4.exe -> [Folder | Modified Date = 3/17/2008 6:38:01 PM | Attr = RHS] winfj -> %SystemRoot%\winfj -> [Ver = | Size = 242 bytes | Modified Date = 3/17/2008 6:37:37 PM | Attr = RH ] winlogon.scr -> %SystemRoot%\winlogon.scr -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] winmc.exe -> %SystemRoot%\winmc.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] winmgts -> %SystemRoot%\winmgts -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] winmuschi.exe -> %SystemRoot%\winmuschi.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] winnj32.exe -> %SystemRoot%\winnj32.exe -> [Folder | Modified Date = 3/17/2008 6:37:37 PM | Attr = RHS] winobject.dll -> %SystemRoot%\winobject.dll -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] winsecurity -> %SystemRoot%\winsecurity -> [Ver = | Size = 236 bytes | Modified Date = 3/17/2008 6:37:57 PM | Attr = RH ] WinSxS -> %SystemRoot%\WinSxS -> [Folder | Modified Date = 1/5/2008 5:23:02 PM | Attr = ] wintrim -> %SystemRoot%\wintrim -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] winupie.exe -> %SystemRoot%\winupie.exe -> [Folder | Modified Date = 3/17/2008 6:38:02 PM | Attr = RHS] woinstall.exe -> %SystemRoot%\woinstall.exe -> [Folder | Modified Date = 3/17/2008 6:37:40 PM | Attr = RHS] wqzq -> %SystemRoot%\wqzq -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:46 PM | Attr = RH ] wserver.exe -> %SystemRoot%\wserver.exe -> [Folder | Modified Date = 3/17/2008 6:37:54 PM | Attr = RHS] wupdt.exe -> %SystemRoot%\wupdt.exe -> [Folder | Modified Date = 3/17/2008 6:37:46 PM | Attr = RHS] xwrm.exe -> %SystemRoot%\xwrm.exe -> [Folder | Modified Date = 3/17/2008 6:37:49 PM | Attr = RHS] zeta.exe -> %SystemRoot%\zeta.exe -> [Folder | Modified Date = 3/17/2008 6:37:30 PM | Attr = RHS] zserv.dll -> %SystemRoot%\zserv.dll -> [Folder | Modified Date = 3/17/2008 6:37:28 PM | Attr = RHS] HP Usg Daily.job -> %SystemRoot%\tasks\HP Usg Daily.job -> [Ver = | Size = 342 bytes | Modified Date = 3/22/2008 11:03:02 PM | Attr = ] RegistrySmart Scheduled Scan.job -> %SystemRoot%\tasks\RegistrySmart Scheduled Scan.job -> [Ver = | Size = 426 bytes | Modified Date = 3/23/2008 8:59:50 AM | Attr = ] SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [Ver = | Size = 6 bytes | Modified Date = 3/23/2008 8:47:49 AM | Attr = H ] qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [Ver = | Size = 4232 bytes | Modified Date = 3/16/2008 9:23:57 PM | Attr = ] qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [Ver = | Size = 4617 bytes | Modified Date = 3/16/2008 9:23:57 PM | Attr = ] [Files Modified - Additional Folder Scans - Non-Microsoft Only] nView_Profiles -> %AllUsersProfile%\Application Data\nView_Profiles -> [Folder | Modified Date = 3/22/2008 9:11:24 PM | Attr = ] TEMP -> %AllUsersProfile%\Application Data\TEMP -> [Folder | Modified Date = 3/17/2008 5:31:29 PM | Attr = ] @Alternate Data Stream - 118 bytes -> %AllUsersProfile%\Application Data\TEMP:B63300D1 @Alternate Data Stream - 98 bytes -> %AllUsersProfile%\Application Data\TEMP:DFC5A2B2 Real -> %AppData%\Real -> [Folder | Modified Date = 3/22/2008 7:27:16 PM | Attr = ] ApplicationHistory -> %UserProfile%\Local Settings\Application Data\ApplicationHistory -> [Folder | Modified Date = 3/23/2008 9:00:30 AM | Attr = ] GDIPFONTCACHEV1.DAT -> %UserProfile%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT -> [Ver = | Size = 76944 bytes | Modified Date = 3/22/2008 9:12:06 PM | Attr = ] IconCache.db -> %UserProfile%\Local Settings\Application Data\IconCache.db -> [Ver = | Size = 1577168 bytes | Modified Date = 3/23/2008 8:32:36 AM | Attr = H ] HALLOWEEN MUSIC -> %UserProfile%\My Documents\HALLOWEEN MUSIC -> [Folder | Modified Date = 1/5/2008 10:27:45 PM | Attr = ] VTech Phonebook Manager -> %UserProfile%\My Documents\VTech Phonebook Manager -> [Folder | Modified Date = 1/5/2008 5:37:25 PM | Attr = ] Ghost Master.lnk -> %AllUsersProfile%\Desktop\Ghost Master.lnk -> [Ver = | Size = 1671 bytes | Modified Date = 3/22/2008 9:53:16 PM | Attr = ] BF1942 -> %UserProfile%\Desktop\BF1942 -> [Folder | Modified Date = 3/22/2008 9:29:55 PM | Attr = ] BF1942.exe -> %UserProfile%\Desktop\BF1942.exe -> [Ver = | Size = 8617984 bytes | Modified Date = 3/22/2008 9:26:39 PM | Attr = ] @Alternate Data Stream - 88 bytes -> %UserProfile%\Desktop\BF1942.exe:SummaryInformation @Alternate Data Stream - 0 bytes -> %UserProfile%\Desktop\BF1942.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} MALWARE PROGRAMS -> %UserProfile%\Desktop\MALWARE PROGRAMS -> [Folder | Modified Date = 3/23/2008 9:00:30 AM | Attr = ] OTMoveIt2.exe -> %UserProfile%\Desktop\OTMoveIt2.exe -> OldTimer Tools [Ver = 1.0.21.0 | Size = 290304 bytes | Modified Date = 3/23/2008 9:24:46 AM | Attr = ] OTScanIt -> %UserProfile%\Desktop\OTScanIt -> [Folder | Modified Date = 3/23/2008 10:19:07 AM | Attr = ] OTScanIt.exe -> %UserProfile%\Desktop\OTScanIt.exe -> [Ver = | Size = 482640 bytes | Modified Date = 3/23/2008 10:18:18 AM | Attr = ] betterinternet -> %CommonProgramFiles%\betterinternet -> [Ver = | Size = 246 bytes | Modified Date = 3/17/2008 6:37:27 PM | Attr = RH ] btlink -> %CommonProgramFiles%\btlink -> [Ver = | Size = 230 bytes | Modified Date = 3/17/2008 6:37:46 PM | Attr = RH ] cmeii -> %CommonProgramFiles%\cmeii -> [Ver = | Size = 228 bytes | Modified Date = 3/17/2008 6:37:31 PM | Attr = RH ] cpush -> %CommonProgramFiles%\cpush -> [Ver = | Size = 226 bytes | Modified Date = 3/17/2008 6:37:37 PM | Attr = RH ] drivecleaner free -> %CommonProgramFiles%\drivecleaner free -> [Ver = | Size = 240 bytes | Modified Date = 3/17/2008 6:37:39 PM | Attr = RH ] eacceleration -> %CommonProgramFiles%\eacceleration -> [Ver = | Size = 248 bytes | Modified Date = 3/17/2008 6:37:38 PM | Attr = RH ] gmt -> %CommonProgramFiles%\gmt -> [Ver = | Size = 228 bytes | Modified Date = 3/17/2008 6:37:31 PM | Attr = RH ] keenvalue -> %CommonProgramFiles%\keenvalue -> [Ver = | Size = 234 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] msiets -> %CommonProgramFiles%\msiets -> [Ver = | Size = 230 bytes | Modified Date = 3/17/2008 6:37:46 PM | Attr = RH ] nsis -> %CommonProgramFiles%\nsis -> [Ver = | Size = 236 bytes | Modified Date = 3/17/2008 6:37:54 PM | Attr = RH ] psd tools -> %CommonProgramFiles%\psd tools -> [Ver = | Size = 236 bytes | Modified Date = 3/17/2008 6:37:31 PM | Attr = RH ] sogou pxp -> %CommonProgramFiles%\sogou pxp -> [Ver = | Size = 226 bytes | Modified Date = 3/17/2008 6:37:57 PM | Attr = RH ] ucontrol -> %CommonProgramFiles%\ucontrol -> [Ver = | Size = 226 bytes | Modified Date = 3/17/2008 6:38:01 PM | Attr = RH ] updater -> %CommonProgramFiles%\updater -> [Ver = | Size = 234 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] updmgr -> %CommonProgramFiles%\updmgr -> [Ver = | Size = 234 bytes | Modified Date = 3/17/2008 6:37:49 PM | Attr = RH ] whenu -> %CommonProgramFiles%\whenu -> [Ver = | Size = 226 bytes | Modified Date = 3/17/2008 6:38:01 PM | Attr = RH ] winfixer 2006 -> %CommonProgramFiles%\winfixer 2006 -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:38:02 PM | Attr = RH ] winsoftware -> %CommonProgramFiles%\winsoftware -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:38:02 PM | Attr = RH ] wintools -> %CommonProgramFiles%\wintools -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:38:02 PM | Attr = RH ] wqzq -> %CommonProgramFiles%\wqzq -> [Ver = | Size = 232 bytes | Modified Date = 3/17/2008 6:37:46 PM | Attr = RH ] [File - Purity Scan: Additional Folder Scans - Non-Microsoft Only] < End of report > [/code]