OTL logfile created on: 5/9/2010 11:31:17 PM - Run 2 OTL by OldTimer - Version 3.2.4.1 Folder = C:\Documents and Settings\Mark\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 69.00% Memory free 4.00 Gb Paging File | 3.00 Gb Available in Paging File | 88.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74.39 Gb Total Space | 62.25 Gb Free Space | 83.68% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: D57JX7J1 Current User Name: Mark Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: On Skip Microsoft Files: On File Age = 90 Days Output = Minimal Quick Scan [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Documents and Settings\Mark\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.) PRC - C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\stacsv.exe (SigmaTel, Inc.) PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation) PRC - C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Documents and Settings\Mark\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (PSI_SVC_2) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.) SRV - (STacSV) -- C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\stacsv.exe (SigmaTel, Inc.) SRV - (SavRoam) -- C:\Program Files\Symantec AntiVirus\SavRoam.exe (symantec) SRV - (Symantec AntiVirus) -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation) SRV - (DefWatch) -- C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation) SRV - (LiveUpdate) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_1.EXE (Symantec Corporation) SRV - (SNDSrvc) -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation) SRV - (ccSetMgr) -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation) SRV - (ccEvtMgr) -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation) SRV - (SPBBCSvc) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (NAVEX15) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20100507.016\NAVEX15.SYS (Symantec Corporation) DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (NAVENG) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20100507.016\NAVENG.SYS (Symantec Corporation) DRV - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation) DRV - (ialm) -- C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider) DRV - (guardian2) -- C:\WINDOWS\system32\drivers\oz776.sys (O2Micro) DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.) DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.) DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.) DRV - (ApfiltrService) -- C:\WINDOWS\system32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.) DRV - (STHDA) -- C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.) DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation) DRV - (SymEvent) -- C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation) DRV - (SAVRT) -- C:\Program Files\Symantec AntiVirus\savrt.sys (Symantec Corporation) DRV - (SAVRTPEL) -- C:\Program Files\Symantec AntiVirus\Savrtpel.sys (Symantec Corporation) DRV - (SYMTDI) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation) DRV - (SYMREDRV) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation) DRV - (SPBBCDrv) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = FF - HKLM\software\mozilla\Firefox\Extensions\\copytolightning@corel.com: c:\Program Files\Corel\WordPerfect Lightning\Programs\FirefoxExtension\ [2010/04/19 13:33:43 | 000,000,000 | ---D | M] O1 HOSTS File: ([2010/05/09 20:04:15 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll File not found O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = corningibm.cocny.com O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com) O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010/04/19 10:33:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color] [2010/05/09 23:24:26 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010/05/09 23:24:09 | 000,000,000 | ---D | C] -- C:\_OTL [2010/05/09 19:37:35 | 000,000,000 | ---D | C] -- C:\Config.Msi [2010/05/09 18:33:29 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010/05/09 18:30:12 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010/05/09 18:30:12 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010/05/09 18:30:12 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010/05/09 18:30:12 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010/05/09 18:29:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010/05/09 11:54:22 | 000,570,880 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Mark\Desktop\OTL.exe [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-TW [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\zh-HK [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\tr-TR [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\sv-SE [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pt-BR [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\nl-NL [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\nb-NO [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ko-KR [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\it-IT [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\he-IL [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fr-FR [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\fi-FI [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\es-ES [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\el-GR [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-DE [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\da-DK [2010/05/09 08:46:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ar-SA [2010/05/09 01:32:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com [2010/05/09 01:32:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\SUPERAntiSpyware.com [2010/05/09 01:32:41 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware [2010/05/09 01:32:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2010/05/09 00:21:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2010/05/09 00:18:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun [2010/05/09 00:18:19 | 000,000,000 | ---D | C] -- C:\Program Files\Sun [2010/05/08 11:05:25 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2010/05/08 11:05:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy [2010/05/08 09:45:50 | 000,000,000 | ---D | C] -- C:\Qoobox [2010/05/07 23:06:00 | 000,095,024 | ---- | C] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys [2010/05/07 23:02:26 | 000,000,000 | ---D | C] -- C:\Program Files\Lavasoft [2010/05/07 23:02:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lavasoft [2010/05/07 22:49:24 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2010/05/07 20:48:02 | 000,000,000 | ---D | C] -- C:\Program Files\AVG [2010/05/07 16:40:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun [2010/05/06 00:35:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia [2010/05/06 00:35:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe [2010/05/05 23:50:02 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mark\Recent [2010/04/26 23:18:51 | 000,000,000 | ---D | C] -- C:\Program Files\YouTube Downloader [2010/04/26 23:09:33 | 000,000,000 | ---D | C] -- C:\music [2010/04/23 23:07:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun [2010/04/23 23:06:21 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2010/04/23 23:05:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\Sun [2010/04/22 08:36:50 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2 [2010/04/21 19:26:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\My Documents\PSST [2010/04/20 22:50:24 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2010/04/20 22:49:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NOS [2010/04/20 22:48:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Local Settings\Application Data\Adobe [2010/04/20 22:48:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe [2010/04/20 22:48:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2010/04/20 22:48:00 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2010/04/20 17:33:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\Adobe [2010/04/20 16:10:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\Macromedia [2010/04/20 16:09:15 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2010/04/20 14:35:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Local Settings\Application Data\Identities [2010/04/20 13:29:14 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works [2010/04/20 13:29:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2010/04/20 13:28:42 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2010/04/20 13:25:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft Help [2010/04/20 13:25:55 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2010/04/20 13:25:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help [2010/04/20 13:25:23 | 000,000,000 | R--D | C] -- C:\MSOCache [2010/04/20 12:00:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer [2010/04/20 11:59:57 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild [2010/04/20 11:59:52 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies [2010/04/20 11:59:28 | 000,000,000 | ---D | C] -- C:\f75ac42679d5b18408d4b2049642eb4a [2010/04/20 09:48:12 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0 [2010/04/20 09:47:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\Malwarebytes [2010/04/20 09:47:08 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/04/20 09:47:07 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/04/20 09:47:07 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010/04/20 09:47:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2010/04/20 09:45:10 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Mark\IECompatCache [2010/04/20 09:44:44 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Mark\PrivacIE [2010/04/19 15:27:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Local Settings\Application Data\Symantec [2010/04/19 15:26:56 | 000,109,744 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS [2010/04/19 15:26:56 | 000,048,816 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\S32EVNT1.DLL [2010/04/19 15:26:41 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec [2010/04/19 15:26:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared [2010/04/19 15:26:35 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec AntiVirus [2010/04/19 15:26:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Symantec [2010/04/19 14:41:26 | 000,000,000 | ---D | C] -- C:\Symantec Endpoint Protection 11 [2010/04/19 13:47:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\My Documents\Corel User Files [2010/04/19 13:45:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\Corel [2010/04/19 13:34:31 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly [2010/04/19 13:34:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET [2010/04/19 13:32:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Protexis [2010/04/19 13:32:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\My Documents\CCWin [2010/04/19 13:32:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ShellNew [2010/04/19 13:32:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Corel [2010/04/19 13:32:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Borland Shared [2010/04/19 13:32:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Borland [2010/04/19 13:31:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\WordPerfect Office [2010/04/19 13:31:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Corel [2010/04/19 13:28:29 | 000,000,000 | ---D | C] -- C:\Program Files\Corel [2010/04/19 13:26:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\CyberLink [2010/04/19 13:25:43 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Mark\My Documents\My Videos [2010/04/19 13:25:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Local Settings\Application Data\PowerDVD DX [2010/04/19 13:25:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Application Data\Identities [2010/04/19 13:25:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Mark\My Documents\My Pictures [2010/04/19 13:25:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Mark\My Documents\My Music [2010/04/19 13:25:33 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Mark\IETldCache [2010/04/19 13:25:30 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Mark\Application Data\Microsoft [2010/04/19 13:25:30 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mark\SendTo [2010/04/19 13:25:30 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mark\Application Data [2010/04/19 13:25:30 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Mark\Start Menu [2010/04/19 13:25:30 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Mark\My Documents [2010/04/19 13:25:30 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Mark\Favorites [2010/04/19 13:25:30 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Mark\Cookies [2010/04/19 13:25:30 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Mark\Templates [2010/04/19 13:25:30 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Mark\PrintHood [2010/04/19 13:25:30 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Mark\NetHood [2010/04/19 13:25:30 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Mark\Local Settings [2010/04/19 13:25:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft [2010/04/19 13:25:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mark\Desktop [2010/04/19 13:20:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Dell [2010/04/19 13:19:40 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink [2010/04/19 13:09:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage [2010/04/19 13:01:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2010/04/19 13:01:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2010/04/19 13:00:40 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2010/04/19 10:57:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2010/04/19 10:57:11 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$ [2010/04/19 10:54:26 | 000,033,664 | ---- | C] (CACE Technologies) -- C:\WINDOWS\System32\drivers\BCMWLNPF.SYS [2010/04/19 10:54:25 | 000,069,632 | ---- | C] (CACE Technologies) -- C:\WINDOWS\System32\bcmwlpkt.dll [2010/04/19 10:54:24 | 002,670,592 | ---- | C] (BCGSoft Ltd) -- C:\WINDOWS\System32\WLBCGCBPRO731.DLL [2010/04/19 10:54:24 | 000,155,648 | ---- | C] (Broadcom Corp.) -- C:\WINDOWS\System32\bcmwlapi.dll [2010/04/19 10:52:19 | 000,000,000 | ---D | C] -- C:\Program Files\DellTPad [2010/04/19 10:51:11 | 000,146,944 | ---- | C] (IDT, Inc.) -- C:\WINDOWS\System32\st325602.dll [2010/04/19 10:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\SigmaTel [2010/04/19 10:51:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield [2010/04/19 10:50:18 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT [2010/04/19 10:49:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution [2010/04/19 10:49:13 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom [2010/04/19 10:47:52 | 000,068,696 | ---- | C] (O2Micro) -- C:\WINDOWS\System32\drivers\oz776.sys [2010/04/19 10:47:51 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information [2010/04/19 10:47:50 | 000,000,000 | ---D | C] -- C:\Program Files\O2Micro OZ776 SCR Driver [2010/04/19 10:45:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang [2010/04/19 10:42:33 | 000,000,000 | ---D | C] -- C:\Program Files\Dell [2010/04/19 10:40:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2010/04/19 10:40:48 | 000,000,000 | ---D | C] -- C:\Program Files\Intel [2010/04/19 10:40:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2010/04/19 10:40:38 | 000,000,000 | ---D | C] -- C:\Intel [2010/04/19 10:39:10 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information [2010/04/19 10:38:52 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC [2010/04/19 10:37:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2010/04/19 10:37:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010/04/19 10:37:51 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2010/04/19 10:37:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft [2010/04/19 10:37:50 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft [2010/04/19 10:37:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft [2010/04/19 10:37:30 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft [2010/04/19 10:36:14 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2010/04/19 10:36:13 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2010/04/19 10:36:13 | 000,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll [2010/04/19 10:34:36 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2010/04/19 10:34:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom [2010/04/19 10:34:13 | 000,000,000 | ---D | C] -- C:\Program Files\xerox [2010/04/19 10:34:13 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage [2010/04/19 10:34:05 | 000,000,000 | ---D | C] -- C:\DELL [2010/04/19 10:33:08 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM [2010/04/19 10:33:00 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages [2010/04/19 10:32:59 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2010/04/19 10:32:51 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate [2010/04/19 10:32:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2010/04/19 10:32:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services [2010/04/19 10:32:15 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2010/04/19 10:32:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap [2010/04/19 10:32:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2010/04/19 10:32:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2010/04/19 10:32:01 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker [2010/04/19 10:31:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2010/04/19 10:31:37 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting [2010/04/19 10:31:34 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express [2010/04/19 10:31:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System [2010/04/19 10:31:23 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer [2010/04/19 10:31:22 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures [2010/04/19 10:30:52 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications [2010/04/19 10:30:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration [2010/04/19 10:30:37 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music [2010/04/19 10:30:37 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2010/04/19 10:30:37 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services [2010/04/19 10:30:30 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger [2010/04/19 10:30:27 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone [2010/04/19 10:29:52 | 000,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe [2010/04/19 10:29:52 | 000,000,000 | ---D | C] -- C:\Program Files\MSN [2010/04/19 10:29:50 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT [2010/04/19 10:29:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US [2010/04/19 10:29:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2010/04/19 10:29:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2010/04/19 10:29:30 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos [2010/04/19 06:19:16 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2010/04/19 06:19:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC [2010/04/19 06:19:11 | 000,000,000 | R--D | C] -- C:\Program Files [2010/04/19 06:19:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines [2010/04/19 06:19:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared [2010/04/19 06:19:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files [2010/04/19 06:18:48 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents [2010/04/19 06:18:48 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates [2010/04/19 06:18:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites [2010/04/19 06:18:47 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu [2010/04/19 06:18:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop [2010/04/19 06:18:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2010/04/19 06:18:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2010/04/19 06:18:29 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft [2010/04/19 06:18:29 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data [2010/04/19 06:17:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings [2010/04/19 06:17:50 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010/04/19 06:10:41 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2010/04/19 06:10:41 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache [2010/04/19 06:10:41 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web [2010/04/19 06:10:41 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\system [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\security [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\java [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Dell [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028 [2010/04/19 06:10:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025 [color=#E56717]========== Files - Modified Within 90 Days ==========[/color] [2010/05/09 23:30:08 | 000,508,956 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010/05/09 23:30:08 | 000,432,924 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010/05/09 23:30:08 | 000,067,714 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010/05/09 23:25:36 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/05/09 23:25:33 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010/05/09 23:24:43 | 002,359,296 | -H-- | M] () -- C:\Documents and Settings\Mark\NTUSER.DAT [2010/05/09 23:24:36 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Mark\ntuser.ini [2010/05/09 22:14:38 | 000,002,933 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Kaspersky_Report.html [2010/05/09 20:04:28 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010/05/09 20:04:15 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010/05/09 18:33:35 | 000,000,281 | RHS- | M] () -- C:\boot.ini [2010/05/09 18:24:56 | 003,684,526 | R--- | M] () -- C:\Documents and Settings\Mark\Desktop\ComboFix.exe [2010/05/09 12:09:49 | 000,293,376 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\esopyopn.exe [2010/05/09 11:54:00 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mark\Desktop\OTL.exe [2010/05/09 08:55:12 | 000,002,445 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\HiJackThis.lnk [2010/05/09 08:46:58 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job [2010/05/09 03:40:23 | 005,897,104 | -H-- | M] () -- C:\Documents and Settings\Mark\Local Settings\Application Data\IconCache.db [2010/05/09 01:32:45 | 000,000,780 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk [2010/05/09 01:10:43 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Microsoft Office Word 2007.lnk [2010/05/09 00:59:46 | 000,000,963 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Spybot - Search & Destroy.lnk [2010/05/08 15:47:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010/05/08 10:57:45 | 000,000,206 | ---- | M] () -- C:\Documents and Settings\Mark\My Documents\cc_20100508_105326.reg [2010/05/07 23:05:56 | 000,095,024 | ---- | M] (Sunbelt Software) -- C:\WINDOWS\System32\drivers\SBREDrv.sys [2010/05/07 19:32:57 | 000,001,708 | ---- | M] () -- C:\Documents and Settings\Mark\My Documents\cc_20100507_193244.reg [2010/05/07 18:30:40 | 000,036,896 | ---- | M] () -- C:\Documents and Settings\Mark\Local Settings\Application Data\GDIPFONTCACHEV1.DAT [2010/04/29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/04/29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/04/26 23:34:24 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Windows Media Player.lnk [2010/04/26 23:26:40 | 000,003,584 | ---- | M] () -- C:\Documents and Settings\Mark\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/04/26 23:22:20 | 000,379,904 | ---- | M] (Jacek Pazera) -- C:\Documents and Settings\Mark\Desktop\AudioExtractor.exe [2010/04/26 23:18:52 | 000,000,797 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\YouTube Downloader.lnk [2010/04/26 15:58:12 | 000,256,512 | ---- | M] () -- C:\WINDOWS\PEV.exe [2010/04/23 21:36:38 | 000,023,040 | ---- | M] () -- C:\Documents and Settings\Mark\My Documents\Public Administration.doc [2010/04/23 18:58:02 | 000,001,486 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Calculator.lnk [2010/04/22 08:55:52 | 000,165,912 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/04/20 22:50:34 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Acrobat_com.lnk [2010/04/20 22:48:12 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk [2010/04/20 16:09:19 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\CCleaner.lnk [2010/04/20 14:40:51 | 000,002,483 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Microsoft Office PowerPoint 2007.lnk [2010/04/20 13:31:57 | 000,002,485 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Microsoft Office Excel 2007.lnk [2010/04/20 09:47:11 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/04/19 15:37:38 | 000,000,000 | ---- | M] () -- C:\WINDOWS\vpc32.INI [2010/04/19 13:49:02 | 000,000,506 | ---- | M] () -- C:\WINDOWS\System32\mapisvc.inf [2010/04/19 13:47:29 | 000,000,952 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys [2010/04/19 13:45:22 | 000,002,627 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\WordPerfect X4.lnk [2010/04/19 13:33:43 | 000,002,112 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\WordPerfect Lightning.lnk [2010/04/19 13:32:36 | 000,001,135 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Presentations X4.lnk [2010/04/19 13:32:33 | 000,002,056 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Quattro Pro X4.lnk [2010/04/19 13:25:42 | 000,000,738 | ---- | M] () -- C:\Documents and Settings\Mark\Desktop\Outlook Express.lnk [2010/04/19 13:23:36 | 000,004,816 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol [2010/04/19 10:52:44 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_Apfiltr_01005.Wdf [2010/04/19 10:52:42 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf [2010/04/19 10:42:38 | 000,000,005 | ---- | M] () -- C:\WINDOWS\System32\drivers\DELL_LAT_D630.MRK [2010/04/19 10:42:38 | 000,000,005 | ---- | M] () -- C:\WINDOWS\System32\drivers\1028_DELL_LAT_D630.MRK [2010/04/19 10:37:34 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2010/04/19 10:36:50 | 000,000,290 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2010/04/19 10:33:56 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2010/04/19 10:33:56 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2010/04/19 10:33:56 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2010/04/19 10:33:56 | 000,000,000 | ---- | M] () -- C:\WINDOWS\control.ini [2010/04/19 10:33:56 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2010/04/19 10:33:56 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2010/04/19 10:33:55 | 000,000,477 | ---- | M] () -- C:\WINDOWS\win.ini [2010/04/19 10:33:53 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010/04/19 10:33:53 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2010/04/19 10:33:53 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2010/04/19 10:33:44 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2010/04/19 10:32:59 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest [2010/04/19 10:32:59 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2010/04/19 10:31:03 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat [2010/04/19 10:30:50 | 000,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini [2010/04/19 10:30:50 | 000,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini [2010/04/19 10:24:22 | 000,000,211 | ---- | M] () -- C:\Boot.bak [2010/04/19 06:19:20 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/05/09 22:14:38 | 000,002,933 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Kaspersky_Report.html [2010/05/09 18:33:35 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2010/05/09 18:33:31 | 000,260,272 | ---- | C] () -- C:\cmldr [2010/05/09 18:30:12 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010/05/09 18:30:12 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010/05/09 18:30:12 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010/05/09 18:30:12 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010/05/09 18:30:12 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010/05/09 18:24:42 | 003,684,526 | R--- | C] () -- C:\Documents and Settings\Mark\Desktop\ComboFix.exe [2010/05/09 12:09:46 | 000,293,376 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\esopyopn.exe [2010/05/09 08:46:57 | 000,000,236 | ---- | C] () -- C:\WINDOWS\tasks\OGALogon.job [2010/05/09 01:32:45 | 000,000,780 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk [2010/05/08 11:05:34 | 000,000,963 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Spybot - Search & Destroy.lnk [2010/05/08 10:57:43 | 000,000,206 | ---- | C] () -- C:\Documents and Settings\Mark\My Documents\cc_20100508_105326.reg [2010/05/07 22:49:26 | 000,002,445 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\HiJackThis.lnk [2010/05/07 19:32:55 | 000,001,708 | ---- | C] () -- C:\Documents and Settings\Mark\My Documents\cc_20100507_193244.reg [2010/04/26 23:26:40 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\Mark\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/04/26 23:18:52 | 000,000,797 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\YouTube Downloader.lnk [2010/04/23 18:50:28 | 000,023,040 | ---- | C] () -- C:\Documents and Settings\Mark\My Documents\Public Administration.doc [2010/04/20 22:50:34 | 000,000,732 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Acrobat_com.lnk [2010/04/20 22:48:12 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk [2010/04/20 16:09:19 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\CCleaner.lnk [2010/04/20 13:32:15 | 000,002,515 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Microsoft Office Word 2007.lnk [2010/04/20 13:32:08 | 000,002,483 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Microsoft Office PowerPoint 2007.lnk [2010/04/20 13:31:57 | 000,002,485 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Microsoft Office Excel 2007.lnk [2010/04/20 09:47:11 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/04/19 15:37:38 | 000,000,000 | ---- | C] () -- C:\WINDOWS\vpc32.INI [2010/04/19 13:45:25 | 000,000,952 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys [2010/04/19 13:35:50 | 000,002,627 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\WordPerfect X4.lnk [2010/04/19 13:35:50 | 000,002,112 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\WordPerfect Lightning.lnk [2010/04/19 13:35:50 | 000,002,056 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Quattro Pro X4.lnk [2010/04/19 13:35:50 | 000,001,135 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Presentations X4.lnk [2010/04/19 13:32:27 | 000,000,506 | ---- | C] () -- C:\WINDOWS\System32\mapisvc.inf [2010/04/19 13:25:36 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Outlook Express.lnk [2010/04/19 13:25:32 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Mark\ntuser.ini [2010/04/19 13:25:31 | 000,032,768 | -H-- | C] () -- C:\Documents and Settings\Mark\ntuser.dat.LOG [2010/04/19 13:25:30 | 002,359,296 | -H-- | C] () -- C:\Documents and Settings\Mark\NTUSER.DAT [2010/04/19 13:25:30 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Windows Media Player.lnk [2010/04/19 13:23:36 | 000,004,816 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol [2010/04/19 10:54:26 | 000,000,457 | ---- | C] () -- C:\WINDOWS\System32\vcredist_x86.bat [2010/04/19 10:54:25 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll [2010/04/19 10:54:24 | 000,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll [2010/04/19 10:54:24 | 000,025,088 | ---- | C] () -- C:\WINDOWS\System32\WLTRYSVC.EXE [2010/04/19 10:52:44 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_Apfiltr_01005.Wdf [2010/04/19 10:52:42 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf [2010/04/19 10:49:43 | 000,143,891 | ---- | C] () -- C:\WINDOWS\System32\drivers\del1028.cty [2010/04/19 10:45:13 | 001,498,560 | ---- | C] () -- C:\WINDOWS\System32\igkrng400.bin [2010/04/19 10:45:13 | 000,032,432 | ---- | C] () -- C:\WINDOWS\System32\igxpxs32.vp [2010/04/19 10:45:13 | 000,002,096 | ---- | C] () -- C:\WINDOWS\System32\igxpxk32.vp [2010/04/19 10:42:38 | 000,000,005 | ---- | C] () -- C:\WINDOWS\System32\drivers\DELL_LAT_D630.MRK [2010/04/19 10:42:38 | 000,000,005 | ---- | C] () -- C:\WINDOWS\System32\drivers\1028_DELL_LAT_D630.MRK [2010/04/19 10:42:32 | 000,000,666 | ---- | C] () -- C:\WINDOWS\speed.reg [2010/04/19 10:37:34 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2010/04/19 10:36:50 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010/04/19 10:36:37 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls [2010/04/19 10:36:10 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls [2010/04/19 10:36:10 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls [2010/04/19 10:36:07 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll [2010/04/19 10:35:48 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls [2010/04/19 10:35:47 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2010/04/19 10:35:11 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe [2010/04/19 10:35:10 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe [2010/04/19 10:35:08 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2010/04/19 10:34:57 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll [2010/04/19 10:34:51 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2010/04/19 10:34:47 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll [2010/04/19 10:34:40 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll [2010/04/19 10:34:36 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls [2010/04/19 10:34:36 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls [2010/04/19 10:34:35 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls [2010/04/19 10:34:35 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls [2010/04/19 10:34:35 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls [2010/04/19 10:34:35 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls [2010/04/19 10:34:35 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls [2010/04/19 10:34:35 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls [2010/04/19 10:34:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls [2010/04/19 10:34:34 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls [2010/04/19 10:34:34 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls [2010/04/19 10:34:34 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls [2010/04/19 10:34:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls [2010/04/19 10:34:33 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls [2010/04/19 10:34:33 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls [2010/04/19 10:34:33 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls [2010/04/19 10:34:33 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls [2010/04/19 10:34:33 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls [2010/04/19 10:34:33 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls [2010/04/19 10:34:32 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls [2010/04/19 10:34:32 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls [2010/04/19 10:34:32 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls [2010/04/19 10:34:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls [2010/04/19 10:34:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls [2010/04/19 10:34:31 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls [2010/04/19 10:34:31 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls [2010/04/19 10:33:56 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2010/04/19 10:33:56 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2010/04/19 10:33:56 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2010/04/19 10:33:56 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS [2010/04/19 10:33:56 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2010/04/19 10:33:53 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2010/04/19 10:33:53 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2010/04/19 10:33:52 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2010/04/19 10:32:59 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest [2010/04/19 10:32:59 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest [2010/04/19 10:32:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2010/04/19 10:32:39 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2010/04/19 10:32:25 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2010/04/19 10:32:25 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2010/04/19 10:32:20 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2010/04/19 10:31:43 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll [2010/04/19 10:31:04 | 000,001,486 | ---- | C] () -- C:\Documents and Settings\Mark\Desktop\Calculator.lnk [2010/04/19 10:31:03 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010/04/19 10:30:15 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp [2010/04/19 10:30:15 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp [2010/04/19 10:30:15 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp [2010/04/19 10:30:15 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp [2010/04/19 10:30:15 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp [2010/04/19 10:30:15 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp [2010/04/19 10:30:15 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp [2010/04/19 10:30:15 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp [2010/04/19 10:30:15 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp [2010/04/19 10:30:15 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp [2010/04/19 10:30:14 | 000,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce [2010/04/19 10:30:14 | 000,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce [2010/04/19 10:30:14 | 000,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce [2010/04/19 10:30:14 | 000,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce [2010/04/19 10:30:14 | 000,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce [2010/04/19 10:30:14 | 000,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce [2010/04/19 10:30:14 | 000,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce [2010/04/19 10:30:14 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp [2010/04/19 10:30:13 | 000,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce [2010/04/19 10:30:12 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2010/04/19 10:30:12 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2010/04/19 10:30:11 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2010/04/19 10:30:06 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2010/04/19 06:19:20 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF [2010/04/19 06:19:13 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd [2010/04/19 06:19:13 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf [2010/04/19 06:19:12 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa [2010/04/19 06:19:12 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa [2010/04/19 06:19:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls [2010/04/19 06:19:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls [2010/04/19 06:19:08 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls [2010/04/19 06:19:08 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls [2010/04/19 06:19:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls [2010/04/19 06:19:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls [2010/04/19 06:19:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls [2010/04/19 06:19:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls [2010/04/19 06:19:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls [2010/04/19 06:19:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS [2010/04/19 06:19:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls [2010/04/19 06:19:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls [2010/04/19 06:19:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls [2010/04/19 06:19:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls [2010/04/19 06:19:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls [2010/04/19 06:19:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls [2010/04/19 06:19:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls [2010/04/19 06:19:05 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls [2010/04/19 06:19:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls [2010/04/19 06:19:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls [2010/04/19 06:19:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls [2010/04/19 06:19:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS [2010/04/19 06:19:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls [2010/04/19 06:19:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls [2010/04/19 06:19:03 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls [2010/04/19 06:19:03 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls [2010/04/19 06:19:03 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls [2010/04/19 06:19:03 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls [2010/04/19 06:19:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls [2010/04/19 06:19:03 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS [2010/04/19 06:19:01 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls [2010/04/19 06:19:01 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls [2010/04/19 06:19:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls [2010/04/19 06:19:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls [2010/04/19 06:19:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls [2010/04/19 06:19:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls [2010/04/19 06:19:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls [2010/04/19 06:19:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls [2010/04/19 06:19:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls [2010/04/19 06:19:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls [2010/04/19 06:18:57 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2010/04/19 06:18:47 | 002,144,487 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT [2010/04/19 06:18:47 | 001,296,669 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT [2010/04/19 06:18:47 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2010/04/19 06:18:47 | 000,522,220 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT [2010/04/19 06:18:47 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2010/04/19 06:18:47 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat [2010/04/19 06:18:47 | 000,112,918 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat [2010/04/19 06:18:47 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2010/04/19 06:18:47 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat [2010/04/19 06:18:47 | 000,034,063 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT [2010/04/19 06:18:47 | 000,026,991 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat [2010/04/19 06:18:47 | 000,016,535 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT [2010/04/19 06:18:47 | 000,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat [2010/04/19 06:18:47 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2010/04/19 06:18:47 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT [2010/04/19 06:18:47 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2010/04/19 06:18:47 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2010/04/19 06:18:47 | 000,007,710 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2010/04/19 06:18:47 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2010/04/19 06:17:50 | 000,165,912 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/04/19 06:17:13 | 000,000,281 | RHS- | C] () -- C:\boot.ini [2010/04/19 06:17:09 | 000,000,290 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll [color=#E56717]========== LOP Check ==========[/color] [2010/04/19 13:32:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Borland [2010/05/09 08:46:58 | 000,000,236 | ---- | M] () -- C:\WINDOWS\Tasks\OGALogon.job [color=#E56717]========== Purity Check ==========[/color] < End of report >