OTL logfile created on: 2009-07-27 17:56:37 - Run 1
OTL by OldTimer - Version 3.0.10.3     Folder = C:\Documents and Settings\Superman\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 100,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465,75 Gb Total Space | 460,90 Gb Free Space | 98,96% Space Free | Partition Type: NTFS
Drive D: | 91,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: ROYBANON
Current User Name: Superman
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2007-07-31 22:52:38 | 00,483,328 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe
PRC - [2009-02-05 16:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-02-05 16:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-02-05 16:08:45 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-02-05 16:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-02-05 16:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2008-04-13 23:42:20 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2009-07-27 17:50:38 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Superman\Desktop\OTL.exe
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2009-02-05 16:01:25 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv [Auto | Running])
SRV - [2007-07-31 22:52:38 | 00,483,328 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])
SRV - [2007-07-31 21:05:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped])
SRV - [2009-02-05 16:08:40 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus [Auto | Running])
SRV - [2009-02-05 16:08:26 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner [On_Demand | Running])
SRV - [2009-02-05 16:06:04 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner [On_Demand | Running])
SRV - [2008-04-13 23:42:04 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])
SRV - File not found --  -- (JFYCALC [On_Demand | Stopped])
SRV - File not found --  -- (KZGB [On_Demand | Stopped])
SRV - [2009-01-07 18:21:00 | 00,026,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe -- (spupdsvc [Auto | Stopped])
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
 
 
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
IE - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
IE - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003\S-1-5-21-1715567821-1788223648-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: (317925 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 127.0.0.1	1-2005-search.com
O1 - Hosts: 10906 more lines...
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [UserFaultCheck]  File not found
O4 - HKLM..\RunOnce: [KB923561] C:\WINDOWS\System32\apphelp.DLL (Microsoft Corporation)
O4 - HKLM..\RunOnce: [NoIE4StubProcessing]  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\.DEFAULT\..Trusted Domains: 56 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-18\..Trusted Domains: 56 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-1715567821-1788223648-1801674531-1003\..Trusted Domains: 63 domain(s) and sub-domain(s) not assigned to a zone.
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.200.241.37 24.201.245.77 24.200.243.189
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:AutorunsDisabled () - 
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-07-27 11:55:18 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008-02-16 19:38:31 | 00,000,077 | RH-- | M] () - D:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{5a89d7c3-7aa1-11de-9788-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{5a89d7c3-7aa1-11de-9788-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{5a89d7c3-7aa1-11de-9788-806d6172696f}\Shell\AutoRun\command - "" = D:\bootcd\wintools\autorun.exe -- [2008-02-16 19:38:31 | 00,012,288 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck) -  File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) -  File not found
 
[color=#E56717]========== Files/Folders - Created Within 14 Days ==========[/color]
 
[43 C:\WINDOWS\System32\*.tmp files]
[2009-07-27 17:52:57 | 00,000,000 | ---D | C] -- C:\ERDNT
[2009-07-27 17:52:56 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERUNT
[2009-07-27 17:52:53 | 00,000,000 | ---D | C] -- C:\!FixIEDef
[2009-07-27 17:52:46 | 01,130,036 | ---- | C] (Malwareteks.com) -- C:\Documents and Settings\Superman\Desktop\FixIEDef.exe
[2009-07-27 17:50:35 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Superman\Desktop\OTL.exe
[2009-07-27 17:49:40 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2009-07-27 17:49:31 | 00,000,873 | ---- | C] () -- C:\WINDOWS\System32\spupdsvc.inf
[2009-07-27 17:49:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2009-07-27 17:45:43 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2009-07-27 17:45:26 | 00,462,508 | ---- | C] () -- C:\Documents and Settings\Superman\Desktop\RootRepeal.zip
[2009-07-27 17:40:40 | 00,046,456 | R--- | C] () -- C:\WINDOWS\System32\exitwx.exe
[2009-07-27 17:40:35 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Superman\Desktop\IceSword122en
[2009-07-27 17:40:28 | 00,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2009-07-27 17:40:13 | 00,000,000 | -HSD | C] -- C:\Config.Msi
[2009-07-27 17:30:44 | 00,023,152 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2009-07-27 17:30:44 | 00,001,709 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk
[2009-07-27 17:30:43 | 00,051,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2009-07-27 17:30:43 | 00,026,944 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2009-07-27 17:30:42 | 00,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2009-07-27 17:30:42 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\AvastSS.scr
[2009-07-27 17:30:42 | 00,094,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2009-07-27 17:30:42 | 00,093,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2009-07-27 17:30:42 | 00,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2009-07-27 17:30:38 | 02,205,157 | ---- | C] () -- C:\Documents and Settings\Superman\Desktop\IceSword122en.zip
[2009-07-27 17:30:24 | 01,256,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2009-07-27 17:30:24 | 00,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2009-07-27 17:30:22 | 00,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2009-07-27 17:29:10 | 00,308,160 | ---- | C] (ALWIL Software) -- C:\Documents and Settings\Superman\Desktop\avast_home_setup.exe
[2009-07-27 17:25:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Superman\Application Data\Malwarebytes
[2009-07-27 17:25:03 | 00,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009-07-27 17:25:01 | 00,038,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-07-27 17:25:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009-07-27 17:24:59 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009-07-27 17:24:54 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009-07-27 17:24:00 | 00,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2009-07-27 17:23:18 | 00,000,611 | ---- | C] () -- C:\Documents and Settings\Superman\Desktop\NTREGOPT.lnk
[2009-07-27 17:23:18 | 00,000,592 | ---- | C] () -- C:\Documents and Settings\Superman\Desktop\ERUNT.lnk
[2009-07-27 17:23:17 | 00,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2009-07-27 17:18:29 | 00,000,000 | -HSD | C] -- C:\RECYCLER
[2009-07-27 17:18:04 | 00,021,504 | ---- | C] (Doug Knox) -- C:\Documents and Settings\Superman\Desktop\SysRestorePoint.exe
[2009-07-27 17:17:52 | 00,265,216 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Superman\Desktop\TFC.exe
[2009-07-27 17:17:38 | 00,791,393 | ---- | C] (Lars Hederer                                                ) -- C:\Documents and Settings\Superman\Desktop\erunt_setup.exe
[2009-07-27 17:02:31 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Superman\Desktop\SysProt
[2009-07-27 17:02:13 | 00,354,396 | ---- | C] () -- C:\Documents and Settings\Superman\Desktop\SysProt.zip
[2009-07-27 16:45:34 | 00,000,734 | ---- | C] () -- C:\WINDOWS\System32\drivers\etc\hosts.20090727-164534.backup
[2009-07-27 16:43:02 | 00,012,328 | ---- | C] () -- C:\Documents and Settings\Superman\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009-07-27 16:42:36 | 00,078,485 | ---- | C] (Safer Networking Limited                                    ) -- C:\Documents and Settings\Superman\Desktop\setup-spybotsd162.exe
[2009-07-27 16:42:32 | 00,000,000 | ---D | C] -- C:\Program Files\TeaTimer (Spybot - Search & Destroy)
[2009-07-27 16:42:32 | 00,000,000 | ---D | C] -- C:\Program Files\SDHelper (Spybot - Search & Destroy)
[2009-07-27 16:42:32 | 00,000,000 | ---D | C] -- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
[2009-07-27 16:42:31 | 00,000,000 | ---D | C] -- C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
[2009-07-27 16:41:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2009-07-27 16:33:43 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2009-07-27 16:33:41 | 00,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2009-07-27 16:29:21 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Superman\Local Settings\Application Data\Trend Micro
[2009-07-27 16:28:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\Trend Micro
[2009-07-27 16:27:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Trend Micro
[2009-07-27 16:27:49 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009-07-27 16:27:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop\TrendMicro_TISPro_17.10_en-US_32-bit
[2009-07-27 16:26:28 | 88,911,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\All Users\Desktop\TrendMicro_TISPro_17.10_en-US_32-bit.exe
[2009-07-27 16:25:03 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2009-07-27 16:21:44 | 00,000,000 | ---D | C] -- C:\WINDOWS\UfdApp
[2009-07-27 16:21:37 | 75,334,747 | ---- | C] () -- C:\Documents and Settings\Superman\Desktop\McAfee_Total[1].Protectionv2009_by_ABBY.rar
[2009-07-27 16:19:27 | 00,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2009-07-27 16:19:12 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009-07-27 16:19:05 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009-07-27 16:18:28 | 00,045,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativvpxx.vp
[2009-07-27 16:18:26 | 03,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2009-07-27 16:18:26 | 00,972,072 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009-07-27 16:18:25 | 03,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2009-07-27 16:18:25 | 00,002,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativdkxx.vp
[2009-07-27 16:18:25 | 00,002,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativckxx.vp
[2009-07-27 16:18:25 | 00,000,929 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativcaxx.vp
[2009-07-27 16:18:24 | 01,311,202 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativcaxx.cpa
[2009-07-27 16:18:22 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\ATIODE.exe
[2009-07-27 16:18:22 | 00,040,960 | ---- | C] () -- C:\WINDOWS\System32\ATIODCLI.exe
[2009-07-27 16:18:22 | 00,011,557 | ---- | C] () -- C:\WINDOWS\atiogl.xml
[2009-07-27 16:18:21 | 00,151,367 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2009-07-27 16:18:21 | 00,007,069 | ---- | C] () -- C:\WINDOWS\System32\atifglpf.xml
[2009-07-27 16:10:08 | 00,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2009-07-27 16:10:04 | 00,000,000 | ---D | C] -- C:\Program Files\ATI
[2009-07-27 15:27:21 | 00,000,000 | ---D | C] -- C:\Program Files\Intel
[2009-07-27 15:27:15 | 00,001,904 | ---- | C] () -- C:\WINDOWS\System32\SetupBD.din
[2009-07-27 15:25:56 | 00,002,889 | ---- | C] () -- C:\WINDOWS\System32\e1e5132.din
[2009-07-27 15:25:39 | 00,000,000 | ---D | C] -- C:\dell
[2009-07-27 15:23:15 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\vmm32
[2009-07-27 15:23:15 | 00,000,000 | ---D | C] -- C:\Program Files\Dell
[2009-07-27 14:57:27 | 03,215,574 | -H-- | C] () -- C:\Documents and Settings\Superman\Local Settings\Application Data\IconCache.db
[2009-07-27 13:10:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Superman\Application Data\Identities
[2009-07-27 13:10:57 | 00,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2009-07-27 13:10:54 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Superman\My Documents\My Pictures
[2009-07-27 13:10:54 | 00,000,000 | R--D | C] -- C:\Documents and Settings\Superman\My Documents\My Music
[2009-07-27 13:10:45 | 00,000,000 | --SD | C] -- C:\Documents and Settings\Superman\Application Data\Microsoft
[2009-07-27 13:10:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Superman\Local Settings\Application Data\Microsoft
[2009-07-27 13:09:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2009-07-27 13:09:20 | 00,000,006 | -H-- | C] () -- C:\WINDOWS\tasks\SA.DAT
[2009-07-27 13:09:20 | 00,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2009-07-27 13:09:20 | 00,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2009-07-27 12:33:28 | 00,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2009-07-27 11:56:52 | 00,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-07-27 11:56:44 | 00,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2009-07-27 11:56:30 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2009-07-27 11:56:30 | 00,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2009-07-27 11:56:30 | 00,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2009-07-27 11:56:27 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2009-07-27 11:56:27 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2009-07-27 11:56:26 | 00,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2009-07-27 11:56:17 | 00,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2009-07-27 11:56:16 | 01,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2009-07-27 11:56:12 | 00,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2009-07-27 11:56:12 | 00,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2009-07-27 11:56:10 | 00,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2009-07-27 11:56:05 | 13,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2009-07-27 11:56:02 | 00,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2009-07-27 11:55:59 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2009-07-27 11:55:53 | 00,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2009-07-27 11:55:51 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2009-07-27 11:55:51 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2009-07-27 11:55:51 | 00,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2009-07-27 11:55:50 | 00,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2009-07-27 11:55:50 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2009-07-27 11:55:50 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2009-07-27 11:55:50 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2009-07-27 11:55:50 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2009-07-27 11:55:50 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2009-07-27 11:55:50 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2009-07-27 11:55:49 | 00,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2009-07-27 11:55:49 | 00,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2009-07-27 11:55:49 | 00,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2009-07-27 11:55:49 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2009-07-27 11:55:49 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2009-07-27 11:55:49 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2009-07-27 11:55:49 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2009-07-27 11:55:48 | 00,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2009-07-27 11:55:48 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2009-07-27 11:55:47 | 00,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2009-07-27 11:55:47 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2009-07-27 11:55:47 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2009-07-27 11:55:47 | 00,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2009-07-27 11:55:47 | 00,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2009-07-27 11:55:47 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2009-07-27 11:55:47 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2009-07-27 11:55:47 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2009-07-27 11:55:47 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2009-07-27 11:55:46 | 00,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2009-07-27 11:55:33 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2009-07-27 11:55:33 | 00,000,000 | ---D | C] -- C:\Program Files\xerox
[2009-07-27 11:55:33 | 00,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2009-07-27 11:55:18 | 00,002,626 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-07-27 11:55:18 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2009-07-27 11:55:18 | 00,000,000 | RHS- | C] () -- C:\IO.SYS
[2009-07-27 11:55:18 | 00,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2009-07-27 11:55:18 | 00,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2009-07-27 11:55:15 | 00,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2009-07-27 11:55:15 | 00,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2009-07-27 11:55:14 | 00,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2009-07-27 11:54:28 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009-07-27 11:54:28 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009-07-27 11:54:28 | 00,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2009-07-27 11:54:28 | 00,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2009-07-27 11:54:23 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-07-27 11:54:20 | 00,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2009-07-27 11:54:10 | 04,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2009-07-27 11:54:04 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2009-07-27 11:53:56 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2009-07-27 11:53:56 | 00,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2009-07-27 11:53:49 | 00,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2009-07-27 11:53:46 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2009-07-27 11:53:44 | 00,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2009-07-27 11:53:42 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2009-07-27 11:53:39 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2009-07-27 11:53:39 | 00,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2009-07-27 11:53:31 | 00,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2009-07-27 11:53:09 | 00,376,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll
[2009-07-27 11:53:07 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2009-07-27 11:53:03 | 00,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2009-07-27 11:53:00 | 00,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2009-07-27 11:52:53 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2009-07-27 11:52:52 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
[2009-07-27 11:52:52 | 00,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2009-07-27 11:52:33 | 00,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-07-27 11:52:26 | 00,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2009-07-27 11:52:20 | 00,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2009-07-27 11:52:14 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
[2009-07-27 11:52:14 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2009-07-27 11:52:14 | 00,000,000 | ---D | C] -- C:\Program Files\Online Services
[2009-07-27 11:52:06 | 00,000,000 | ---D | C] -- C:\Program Files\Messenger
[2009-07-27 11:52:02 | 00,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2009-07-27 11:51:49 | 00,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2009-07-27 11:51:48 | 00,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2009-07-27 11:51:48 | 00,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2009-07-27 11:51:48 | 00,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2009-07-27 11:51:48 | 00,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2009-07-27 11:51:48 | 00,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2009-07-27 11:51:48 | 00,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2009-07-27 11:51:48 | 00,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
[2009-07-27 11:51:47 | 00,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2009-07-27 11:51:47 | 00,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
[2009-07-27 11:51:47 | 00,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
[2009-07-27 11:51:47 | 00,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2009-07-27 11:51:47 | 00,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2009-07-27 11:51:47 | 00,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2009-07-27 11:51:47 | 00,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2009-07-27 11:51:47 | 00,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
[2009-07-27 11:51:46 | 00,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2009-07-27 11:51:46 | 00,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2009-07-27 11:51:46 | 00,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2009-07-27 11:51:44 | 00,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2009-07-27 11:51:44 | 00,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2009-07-27 11:51:43 | 00,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2009-07-27 11:51:37 | 00,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2009-07-27 11:51:30 | 00,000,000 | ---D | C] -- C:\Program Files\MSN
[2009-07-27 11:51:29 | 00,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe
[2009-07-27 11:51:28 | 00,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2009-07-27 11:51:26 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2009-07-27 11:51:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2009-07-27 11:51:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2009-07-27 11:51:06 | 00,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
[2009-07-27 07:49:19 | 00,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2009-07-27 07:36:51 | 00,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2009-07-27 07:36:48 | 00,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2009-07-27 07:36:48 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2009-07-27 07:36:46 | 01,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2009-07-27 07:36:46 | 00,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2009-07-27 07:36:46 | 00,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2009-07-27 07:36:45 | 00,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2009-07-27 07:36:45 | 00,000,000 | R--D | C] -- C:\Program Files
[2009-07-27 07:36:45 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2009-07-27 07:36:45 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2009-07-27 07:36:45 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files
[2009-07-27 07:36:44 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2009-07-27 07:36:44 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2009-07-27 07:36:42 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2009-07-27 07:36:42 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2009-07-27 07:36:42 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2009-07-27 07:36:42 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2009-07-27 07:36:42 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2009-07-27 07:36:42 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2009-07-27 07:36:40 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2009-07-27 07:36:40 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2009-07-27 07:36:40 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2009-07-27 07:36:40 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2009-07-27 07:36:40 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2009-07-27 07:36:40 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2009-07-27 07:36:39 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2009-07-27 07:36:39 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2009-07-27 07:36:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2009-07-27 07:36:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2009-07-27 07:36:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2009-07-27 07:36:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2009-07-27 07:36:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2009-07-27 07:36:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2009-07-27 07:36:38 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2009-07-27 07:36:38 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2009-07-27 07:36:37 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2009-07-27 07:36:37 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2009-07-27 07:36:37 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2009-07-27 07:36:37 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2009-07-27 07:36:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2009-07-27 07:36:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2009-07-27 07:36:36 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls
[2009-07-27 07:36:36 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls
[2009-07-27 07:36:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2009-07-27 07:36:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2009-07-27 07:36:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2009-07-27 07:36:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2009-07-27 07:36:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2009-07-27 07:36:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2009-07-27 07:36:34 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2009-07-27 07:36:34 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2009-07-27 07:36:31 | 00,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2009-07-27 07:34:42 | 00,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2009-07-27 07:34:42 | 00,112,918 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2009-07-27 07:34:42 | 00,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2009-07-27 07:34:42 | 00,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2009-07-27 07:34:42 | 00,026,991 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat
[2009-07-27 07:34:42 | 00,016,535 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2009-07-27 07:34:42 | 00,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat
[2009-07-27 07:34:42 | 00,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2009-07-27 07:34:42 | 00,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2009-07-27 07:34:42 | 00,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2009-07-27 07:34:42 | 00,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2009-07-27 07:34:42 | 00,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2009-07-27 07:34:42 | 00,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2009-07-27 07:34:41 | 02,144,487 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2009-07-27 07:34:41 | 01,296,669 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2009-07-27 07:34:41 | 01,088,840 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NTPRINT.CAT
[2009-07-27 07:34:41 | 00,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2009-07-27 07:34:41 | 00,522,220 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2009-07-27 07:34:41 | 00,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2009-07-27 07:34:41 | 00,034,063 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2009-07-27 07:34:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2009-07-27 07:34:31 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2009-07-27 07:34:26 | 00,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2009-07-27 07:34:04 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2009-07-27 07:34:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings
[2009-07-27 07:34:03 | 00,090,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-07-27 07:04:16 | 00,000,211 | -HS- | C] () -- C:\boot.ini
[2009-07-27 07:04:13 | 00,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2009-07-27 07:00:22 | 00,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2009-07-27 07:00:22 | 00,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2009-07-27 07:00:22 | 00,000,000 | R--D | C] -- C:\WINDOWS\Web
[2009-07-27 07:00:22 | 00,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\system32
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\system
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\security
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\repair
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\mui
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Media
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\java
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\ime
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Help
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\Config
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\addins
[2009-07-27 07:00:22 | 00,000,000 | ---D | C] -- C:\WINDOWS
 
[color=#E56717]========== Files - Modified Within 14 Days ==========[/color]
 
[43 C:\WINDOWS\System32\*.tmp files]
[2009-07-27 17:52:50 | 01,130,036 | ---- | M] (Malwareteks.com) -- C:\Documents and Settings\Superman\Desktop\FixIEDef.exe
[2009-07-27 17:50:38 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Superman\Desktop\OTL.exe
[2009-07-27 17:49:54 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009-07-27 17:49:31 | 00,000,873 | ---- | M] () -- C:\WINDOWS\System32\spupdsvc.inf
[2009-07-27 17:45:29 | 00,462,508 | ---- | M] () -- C:\Documents and Settings\Superman\Desktop\RootRepeal.zip
[2009-07-27 17:38:22 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-07-27 17:38:16 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-07-27 17:31:10 | 03,215,574 | -H-- | M] () -- C:\Documents and Settings\Superman\Local Settings\Application Data\IconCache.db
[2009-07-27 17:30:44 | 00,001,709 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Antivirus.lnk
[2009-07-27 17:30:43 | 02,205,157 | ---- | M] () -- C:\Documents and Settings\Superman\Desktop\IceSword122en.zip
[2009-07-27 17:30:42 | 00,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009-07-27 17:29:13 | 00,308,160 | ---- | M] (ALWIL Software) -- C:\Documents and Settings\Superman\Desktop\avast_home_setup.exe
[2009-07-27 17:25:03 | 00,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009-07-27 17:23:18 | 00,000,611 | ---- | M] () -- C:\Documents and Settings\Superman\Desktop\NTREGOPT.lnk
[2009-07-27 17:23:18 | 00,000,592 | ---- | M] () -- C:\Documents and Settings\Superman\Desktop\ERUNT.lnk
[2009-07-27 17:18:15 | 00,265,216 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Superman\Desktop\TFC.exe
[2009-07-27 17:18:04 | 00,021,504 | ---- | M] (Doug Knox) -- C:\Documents and Settings\Superman\Desktop\SysRestorePoint.exe
[2009-07-27 17:17:40 | 00,791,393 | ---- | M] (Lars Hederer                                                ) -- C:\Documents and Settings\Superman\Desktop\erunt_setup.exe
[2009-07-27 17:02:16 | 00,354,396 | ---- | M] () -- C:\Documents and Settings\Superman\Desktop\SysProt.zip
[2009-07-27 16:45:34 | 00,317,925 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009-07-27 16:43:02 | 00,012,328 | ---- | M] () -- C:\Documents and Settings\Superman\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009-07-27 16:42:45 | 00,078,485 | ---- | M] (Safer Networking Limited                                    ) -- C:\Documents and Settings\Superman\Desktop\setup-spybotsd162.exe
[2009-07-27 16:27:17 | 88,911,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\All Users\Desktop\TrendMicro_TISPro_17.10_en-US_32-bit.exe
[2009-07-27 13:11:12 | 00,356,120 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-07-27 13:11:12 | 00,311,934 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-07-27 13:11:12 | 00,040,196 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-07-27 13:10:44 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-07-27 12:33:28 | 00,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2009-07-27 12:33:18 | 00,090,296 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-07-27 11:56:52 | 00,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2009-07-27 11:55:18 | 00,000,477 | ---- | M] () -- C:\WINDOWS\win.ini
[2009-07-27 11:55:18 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009-07-27 11:55:18 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2009-07-27 11:55:18 | 00,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2009-07-27 11:55:18 | 00,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009-07-27 11:55:18 | 00,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2009-07-27 11:55:16 | 00,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2009-07-27 11:55:15 | 00,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2009-07-27 11:55:15 | 00,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2009-07-27 11:55:06 | 00,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2009-07-27 11:54:28 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2009-07-27 11:54:28 | 00,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2009-07-27 11:54:23 | 00,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2009-07-27 11:52:33 | 00,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-07-27 11:52:25 | 00,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2009-07-27 11:52:25 | 00,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2009-07-27 11:50:29 | 00,000,211 | -HS- | M] () -- C:\boot.ini
[2009-07-27 07:49:19 | 00,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2009-07-27 07:36:44 | 00,000,231 | ---- | M] () -- C:\WINDOWS\system.ini
[2009-07-27 00:20:30 | 75,334,747 | ---- | M] () -- C:\Documents and Settings\Superman\Desktop\McAfee_Total[1].Protectionv2009_by_ABBY.rar
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009-07-27 17:25:00 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Application Data
[2009-07-27 07:36:21 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Default User\Application Data
[2009-07-27 13:09:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data
[2009-07-27 12:33:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data
[2009-07-27 17:25:06 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Superman\Application Data
[2001-08-23 08:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009-07-27 17:38:22 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
< End of report >