Logfile of random's system information tool 1.06 (written by random/random)
Run by Superman at 2009-07-27 18:15:22
Microsoft Windows XP Professional Service Pack 3
System drive C: has 472 GB (99%) free of 477 GB
Total RAM: 3070 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:15:26, on 2009-07-27
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Superman\Desktop\RSIT.exe
C:\Program Files\trend micro\Superman.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: JFYCALC - Unknown owner - C:\DOCUME~1\Superman\LOCALS~1\Temp\JFYCALC.exe (file missing)
O23 - Service: KZGB - Unknown owner - C:\DOCUME~1\Superman\LOCALS~1\Temp\KZGB.exe (file missing)
O24 - Desktop Component AutorunsDisabled: (no name) - (no file)

--
End of file - 3411 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-07-27 18:15:22 ----D---- C:\rsit
2009-07-27 18:15:22 ----D---- C:\Program Files\trend micro
2009-07-27 18:07:56 ----A---- C:\ComboFix.txt
2009-07-27 18:06:00 ----A---- C:\Boot.bak
2009-07-27 18:05:58 ----RASHD---- C:\cmdcons
2009-07-27 18:05:30 ----A---- C:\WINDOWS\zip.exe
2009-07-27 18:05:30 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-07-27 18:05:30 ----A---- C:\WINDOWS\SWSC.exe
2009-07-27 18:05:30 ----A---- C:\WINDOWS\SWREG.exe
2009-07-27 18:05:30 ----A---- C:\WINDOWS\sed.exe
2009-07-27 18:05:30 ----A---- C:\WINDOWS\PEV.exe
2009-07-27 18:05:30 ----A---- C:\WINDOWS\NIRCMD.exe
2009-07-27 18:05:30 ----A---- C:\WINDOWS\grep.exe
2009-07-27 18:05:21 ----D---- C:\Qoobox
2009-07-27 18:02:37 ----D---- C:\VundoFix Backups
2009-07-27 18:02:37 ----A---- C:\VundoFix.txt
2009-07-27 17:52:57 ----D---- C:\ERDNT
2009-07-27 17:52:56 ----D---- C:\WINDOWS\ERUNT
2009-07-27 17:52:53 ----D---- C:\!FixIEDef
2009-07-27 17:49:40 ----D---- C:\WINDOWS\ie8updates
2009-07-27 17:49:26 ----D---- C:\WINDOWS\WBEM
2009-07-27 17:45:43 ----HDC---- C:\WINDOWS\ie8
2009-07-27 17:44:33 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-07-27 17:44:28 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-07-27 17:44:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-07-27 17:44:17 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-07-27 17:44:13 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-07-27 17:43:35 ----A---- C:\WINDOWS\system32\MRT.exe
2009-07-27 17:43:30 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-07-27 17:43:25 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-07-27 17:43:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-07-27 17:43:16 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-27 17:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-07-27 17:43:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-07-27 17:42:51 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-07-27 17:40:40 ----RA---- C:\WINDOWS\system32\exitwx.exe
2009-07-27 17:40:13 ----SHD---- C:\Config.Msi
2009-07-27 17:30:24 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2009-07-27 17:30:24 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2009-07-27 17:30:24 ----A---- C:\WINDOWS\system32\MFC71.dll
2009-07-27 17:30:24 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-07-27 17:30:22 ----D---- C:\Program Files\Alwil Software
2009-07-27 17:25:06 ----D---- C:\Documents and Settings\Superman\Application Data\Malwarebytes
2009-07-27 17:25:00 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-07-27 17:24:54 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-27 17:24:00 ----D---- C:\WINDOWS\ERDNT
2009-07-27 17:23:17 ----D---- C:\Program Files\ERUNT
2009-07-27 16:42:32 ----D---- C:\Program Files\TeaTimer (Spybot - Search & Destroy)
2009-07-27 16:42:32 ----D---- C:\Program Files\SDHelper (Spybot - Search & Destroy)
2009-07-27 16:42:32 ----D---- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
2009-07-27 16:42:31 ----D---- C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
2009-07-27 16:41:33 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-27 16:38:39 ----N---- C:\WINDOWS\system32\xpsp4res.dll
2009-07-27 16:33:43 ----D---- C:\WINDOWS\system32\PreInstall
2009-07-27 16:33:42 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-07-27 16:33:42 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-07-27 16:33:41 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-07-27 16:33:41 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-27 16:25:03 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-07-27 16:21:44 ----D---- C:\WINDOWS\UfdApp
2009-07-27 16:19:27 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-07-27 16:19:12 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-27 16:19:05 ----D---- C:\Program Files\Common Files\InstallShield
2009-07-27 16:18:28 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2009-07-27 16:18:27 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2009-07-27 16:18:25 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2009-07-27 16:18:24 ----A---- C:\WINDOWS\system32\atitvo32.dll
2009-07-27 16:18:24 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2009-07-27 16:18:24 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2009-07-27 16:18:22 ----A---- C:\WINDOWS\system32\atioglx2.dll
2009-07-27 16:18:22 ----A---- C:\WINDOWS\system32\ATIODE.exe
2009-07-27 16:18:22 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2009-07-27 16:18:21 ----A---- C:\WINDOWS\system32\atikvmag.dll
2009-07-27 16:18:21 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2009-07-27 16:18:21 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2009-07-27 16:18:21 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2009-07-27 16:18:20 ----A---- C:\WINDOWS\system32\ati3duag.dll
2009-07-27 16:18:19 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2009-07-27 16:18:19 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2009-07-27 16:18:19 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2009-07-27 16:18:19 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2009-07-27 16:18:19 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2009-07-27 16:18:19 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2009-07-27 16:10:08 ----D---- C:\Program Files\ATI Technologies
2009-07-27 16:10:04 ----D---- C:\Program Files\ATI
2009-07-27 15:27:21 ----D---- C:\Program Files\Intel
2009-07-27 15:25:56 ----A---- C:\WINDOWS\system32\Prounstl.exe
2009-07-27 15:25:56 ----A---- C:\WINDOWS\system32\NicInstE.dll
2009-07-27 15:25:56 ----A---- C:\WINDOWS\system32\NicEtCoE.dll
2009-07-27 15:25:56 ----A---- C:\WINDOWS\system32\NicCo.dll
2009-07-27 15:25:56 ----A---- C:\WINDOWS\system32\e1000msg.dll
2009-07-27 15:25:39 ----D---- C:\dell
2009-07-27 15:23:15 ----D---- C:\WINDOWS\system32\vmm32
2009-07-27 15:23:15 ----D---- C:\Program Files\Dell
2009-07-27 13:10:58 ----D---- C:\Documents and Settings\Superman\Application Data\Identities
2009-07-27 13:10:57 ----HD---- C:\Program Files\Uninstall Information
2009-07-27 13:10:46 ----ASH---- C:\Documents and Settings\Superman\Application Data\desktop.ini
2009-07-27 13:10:45 ----SD---- C:\Documents and Settings\Superman\Application Data\Microsoft
2009-07-27 13:09:22 ----D---- C:\WINDOWS\SoftwareDistribution
2009-07-27 13:09:20 ----SD---- C:\WINDOWS\system32\Microsoft
2009-07-27 13:09:20 ----D---- C:\WINDOWS\Prefetch
2009-07-27 13:09:20 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-07-27 11:55:33 ----D---- C:\WINDOWS\system32\xircom
2009-07-27 11:55:33 ----D---- C:\Program Files\xerox
2009-07-27 11:55:33 ----D---- C:\Program Files\microsoft frontpage
2009-07-27 11:55:18 ----A---- C:\WINDOWS\control.ini
2009-07-27 11:55:18 ----A---- C:\AUTOEXEC.BAT
2009-07-27 11:55:10 ----A---- C:\WINDOWS\OEWABLog.txt
2009-07-27 11:55:06 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-07-27 11:54:28 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-07-27 11:54:28 ----RD---- C:\WINDOWS\Offline Web Pages
2009-07-27 11:54:28 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-07-27 11:54:23 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-07-27 11:54:20 ----HD---- C:\Program Files\WindowsUpdate
2009-07-27 11:54:04 ----D---- C:\WINDOWS\system32\DirectX
2009-07-27 11:53:58 ----A---- C:\WINDOWS\system32\atrace.dll
2009-07-27 11:53:56 ----A---- C:\WINDOWS\system32\desktop.ini
2009-07-27 11:53:56 ----A---- C:\WINDOWS\desktop.ini
2009-07-27 11:53:48 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-07-27 11:53:47 ----A---- C:\WINDOWS\system32\acctres.dll
2009-07-27 11:53:46 ----D---- C:\Program Files\Common Files\Services
2009-07-27 11:53:44 ----SD---- C:\WINDOWS\Tasks
2009-07-27 11:53:44 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-07-27 11:53:42 ----D---- C:\Program Files\Common Files\MSSoap
2009-07-27 11:53:39 ----D---- C:\WINDOWS\system32\Macromed
2009-07-27 11:53:39 ----D---- C:\WINDOWS\srchasst
2009-07-27 11:53:36 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-07-27 11:53:36 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-07-27 11:53:36 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-07-27 11:53:35 ----A---- C:\WINDOWS\system32\wups.dll
2009-07-27 11:53:35 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-07-27 11:53:35 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-07-27 11:53:35 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-07-27 11:53:35 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-07-27 11:53:34 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-07-27 11:53:34 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-07-27 11:53:34 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-07-27 11:53:34 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-07-27 11:53:34 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-07-27 11:53:34 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-07-27 11:53:31 ----D---- C:\Program Files\Movie Maker
2009-07-27 11:53:10 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-07-27 11:53:10 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-07-27 11:53:10 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-07-27 11:53:10 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-07-27 11:53:07 ----D---- C:\WINDOWS\system32\Restore
2009-07-27 11:53:07 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-07-27 11:53:07 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-07-27 11:53:07 ----A---- C:\WINDOWS\system32\srclient.dll
2009-07-27 11:53:07 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-07-27 11:53:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-07-27 11:53:06 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-07-27 11:53:06 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-07-27 11:53:06 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-07-27 11:53:06 ----A---- C:\WINDOWS\system32\ils.dll
2009-07-27 11:53:05 ----A---- C:\WINDOWS\system32\msconf.dll
2009-07-27 11:53:05 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-07-27 11:53:03 ----D---- C:\Program Files\NetMeeting
2009-07-27 11:53:03 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-07-27 11:53:03 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-07-27 11:53:02 ----A---- C:\WINDOWS\system32\inetres.dll
2009-07-27 11:53:02 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-07-27 11:53:00 ----D---- C:\Program Files\Outlook Express
2009-07-27 11:53:00 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-07-27 11:53:00 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-07-27 11:53:00 ----A---- C:\WINDOWS\system32\mstask.dll
2009-07-27 11:52:59 ----A---- C:\WINDOWS\system32\isign32.dll
2009-07-27 11:52:59 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-07-27 11:52:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-07-27 11:52:59 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-07-27 11:52:53 ----D---- C:\Program Files\Common Files\System
2009-07-27 11:52:52 ----D---- C:\Program Files\Internet Explorer
2009-07-27 11:52:26 ----D---- C:\Program Files\ComPlus Applications
2009-07-27 11:52:25 ----A---- C:\WINDOWS\vbaddin.ini
2009-07-27 11:52:25 ----A---- C:\WINDOWS\vb.ini
2009-07-27 11:52:20 ----D---- C:\WINDOWS\Registration
2009-07-27 11:52:14 ----D---- C:\Program Files\Windows Media Player
2009-07-27 11:52:14 ----D---- C:\Program Files\Online Services
2009-07-27 11:52:06 ----D---- C:\Program Files\Messenger
2009-07-27 11:52:02 ----D---- C:\Program Files\MSN Gaming Zone
2009-07-27 11:52:02 ----A---- C:\WINDOWS\system32\write.exe
2009-07-27 11:51:54 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-07-27 11:51:54 ----A---- C:\WINDOWS\system32\hticons.dll
2009-07-27 11:51:54 ----A---- C:\WINDOWS\system32\avwav.dll
2009-07-27 11:51:54 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-07-27 11:51:54 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-07-27 11:51:53 ----A---- C:\WINDOWS\system32\winchat.exe
2009-07-27 11:51:46 ----A---- C:\WINDOWS\system32\sol.exe
2009-07-27 11:51:46 ----A---- C:\WINDOWS\system32\getuname.dll
2009-07-27 11:51:46 ----A---- C:\WINDOWS\system32\charmap.exe
2009-07-27 11:51:46 ----A---- C:\WINDOWS\system32\calc.exe
2009-07-27 11:51:45 ----A---- C:\WINDOWS\system32\winmine.exe
2009-07-27 11:51:45 ----A---- C:\WINDOWS\system32\reset.exe
2009-07-27 11:51:45 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-07-27 11:51:45 ----A---- C:\WINDOWS\system32\freecell.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\tskill.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\tscon.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\shadow.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\regini.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-07-27 11:51:44 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-07-27 11:51:43 ----A---- C:\WINDOWS\system32\msg.exe
2009-07-27 11:51:43 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-07-27 11:51:43 ----A---- C:\WINDOWS\system32\logoff.exe
2009-07-27 11:51:43 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-07-27 11:51:37 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-07-27 11:51:30 ----D---- C:\Program Files\MSN
2009-07-27 11:51:29 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-07-27 11:51:28 ----D---- C:\Program Files\Windows NT
2009-07-27 11:51:28 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-07-27 11:51:28 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-07-27 11:51:28 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-07-27 11:51:27 ----A---- C:\WINDOWS\system32\spider.exe
2009-07-27 11:51:27 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-07-27 11:51:27 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-07-27 11:51:26 ----D---- C:\WINDOWS\system32\en-US
2009-07-27 11:51:26 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-07-27 11:51:26 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-07-27 11:51:26 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-07-27 11:51:25 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-07-27 11:51:25 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-07-27 11:51:25 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-07-27 11:51:23 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-07-27 11:51:22 ----D---- C:\WINDOWS\system32\MsDtc
2009-07-27 11:51:22 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-07-27 11:51:22 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-07-27 11:51:22 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-07-27 11:51:22 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-07-27 11:51:22 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-07-27 11:51:22 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-07-27 11:51:22 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-07-27 11:51:21 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-07-27 11:51:21 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-07-27 11:51:21 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-07-27 11:51:21 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-07-27 11:51:19 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-07-27 11:51:19 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-07-27 11:51:19 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-07-27 11:51:18 ----D---- C:\WINDOWS\system32\Com
2009-07-27 11:51:18 ----A---- C:\WINDOWS\system32\stclient.dll
2009-07-27 11:51:18 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-07-27 11:51:18 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-07-27 11:51:18 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-07-27 11:51:18 ----A---- C:\WINDOWS\system32\colbact.dll
2009-07-27 11:51:18 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-07-27 11:51:18 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-07-27 11:51:17 ----A---- C:\WINDOWS\system32\comuid.dll
2009-07-27 11:51:17 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-07-27 11:51:17 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-07-27 11:51:17 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-07-27 11:51:16 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-07-27 11:51:16 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-07-27 11:51:11 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-07-27 11:51:10 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-07-27 11:51:10 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-07-27 11:51:10 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-07-27 07:50:03 ----A---- C:\WINDOWS\system32\h323log.txt
2009-07-27 07:37:33 ----A---- C:\WINDOWS\system32\usbui.dll
2009-07-27 07:36:51 ----A---- C:\WINDOWS\imsins.BAK
2009-07-27 07:36:48 ----SHD---- C:\WINDOWS\Installer
2009-07-27 07:36:48 ----D---- C:\Program Files\Common Files\ODBC
2009-07-27 07:36:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-27 07:36:48 ----A---- C:\WINDOWS\ODBCINST.INI
2009-07-27 07:36:45 ----RD---- C:\Program Files
2009-07-27 07:36:45 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-07-27 07:36:45 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-07-27 07:36:45 ----D---- C:\Program Files\Common Files
2009-07-27 07:36:42 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-07-27 07:36:42 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-07-27 07:36:42 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-07-27 07:36:41 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-07-27 07:36:41 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-07-27 07:36:41 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-07-27 07:36:41 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-07-27 07:36:41 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-07-27 07:36:40 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-07-27 07:36:40 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-07-27 07:36:40 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-07-27 07:36:40 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-07-27 07:36:40 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-07-27 07:36:40 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-07-27 07:36:40 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-07-27 07:36:39 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-07-27 07:36:39 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-07-27 07:36:39 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-07-27 07:36:39 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-07-27 07:36:39 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-07-27 07:36:39 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-07-27 07:36:39 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-07-27 07:36:38 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-07-27 07:36:38 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-07-27 07:36:37 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-07-27 07:36:37 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-07-27 07:36:37 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-07-27 07:36:36 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-07-27 07:36:33 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-07-27 07:36:33 ----A---- C:\WINDOWS\system32\irclass.dll
2009-07-27 07:36:33 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-07-27 07:36:33 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-07-27 07:36:33 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-07-27 07:36:31 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-07-27 07:36:31 ----A---- C:\WINDOWS\system32\batt.dll
2009-07-27 07:36:30 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-07-27 07:36:29 ----A---- C:\WINDOWS\system32\storprop.dll
2009-07-27 07:36:21 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-07-27 07:34:31 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-27 07:34:31 ----D---- C:\WINDOWS\system32\CatRoot
2009-07-27 07:34:26 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-07-27 07:34:07 ----A---- C:\WINDOWS\setuplog.txt
2009-07-27 07:34:04 ----SHD---- C:\System Volume Information
2009-07-27 07:34:04 ----D---- C:\Documents and Settings
2009-07-27 07:04:16 ----RASH---- C:\boot.ini
2009-07-27 07:00:22 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-07-27 07:00:22 ----RSD---- C:\WINDOWS\Fonts
2009-07-27 07:00:22 ----RD---- C:\WINDOWS\Web
2009-07-27 07:00:22 ----HD---- C:\WINDOWS\inf
2009-07-27 07:00:22 ----D---- C:\WINDOWS\WinSxS
2009-07-27 07:00:22 ----D---- C:\WINDOWS\twain_32
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Temp
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\wins
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\wbem
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\usmt
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\spool
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\ShellExt
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\Setup
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\scripting
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\ras
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\oobe
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\npp
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\mui
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\inetsrv
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\IME
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\icsxml
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\ias
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\export
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\en
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\drivers
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\dhcp
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\config
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\3com_dmi
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\3076
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\2052
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1054
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1042
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1041
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1037
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1033
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1031
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1028
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32\1025
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system32
2009-07-27 07:00:22 ----D---- C:\WINDOWS\system
2009-07-27 07:00:22 ----D---- C:\WINDOWS\security
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Resources
2009-07-27 07:00:22 ----D---- C:\WINDOWS\repair
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Provisioning
2009-07-27 07:00:22 ----D---- C:\WINDOWS\PeerNet
2009-07-27 07:00:22 ----D---- C:\WINDOWS\pchealth
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Network Diagnostic
2009-07-27 07:00:22 ----D---- C:\WINDOWS\mui
2009-07-27 07:00:22 ----D---- C:\WINDOWS\msapps
2009-07-27 07:00:22 ----D---- C:\WINDOWS\msagent
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Media
2009-07-27 07:00:22 ----D---- C:\WINDOWS\L2Schemas
2009-07-27 07:00:22 ----D---- C:\WINDOWS\java
2009-07-27 07:00:22 ----D---- C:\WINDOWS\ime
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Help
2009-07-27 07:00:22 ----D---- C:\WINDOWS\ehome
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Driver Cache
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Debug
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Cursors
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Connection Wizard
2009-07-27 07:00:22 ----D---- C:\WINDOWS\Config
2009-07-27 07:00:22 ----D---- C:\WINDOWS\AppPatch
2009-07-27 07:00:22 ----D---- C:\WINDOWS\addins
2009-07-27 07:00:22 ----D---- C:\WINDOWS

======List of files/folders modified in the last 1 months======

2009-07-27 18:07:12 ----A---- C:\WINDOWS\system.ini
2009-07-27 11:55:18 ----A---- C:\WINDOWS\win.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-07-31 2371584]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-04-13 254872]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12160]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 catchme;catchme; \??\C:\Combo-Fix\catchme.sys []
S3 neokdss;neokdss; C:\WINDOWS\system32\Drivers\neokdss.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-07-31 483328]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-07-31 593920]
S3 JFYCALC;JFYCALC; C:\DOCUME~1\Superman\LOCALS~1\Temp\JFYCALC.exe []
S3 KZGB;KZGB; C:\DOCUME~1\Superman\LOCALS~1\Temp\KZGB.exe []

-----------------EOF-----------------