[Caben]

Hi, I would appreciate some advice as I am not sure if my computer is still infected or not. Originally my desktop didn’t load up for about 10-15 seconds and only the wallpaper was displayed. I had this problem for a few months and I think I remember my antivirus software picking up a java virus around that time and deleted it.

After a while the desktop just stopped loading up completely, I found if I ended “Marvell Yukon Service” process the desktop came back. Then my antivirus found a kazy virus so I decided to delete my system drive partition, format and reinstall Windows.

This seemed to work but after a few reboots the problem came back. This time when I ended the process “Marvell Yukon Service” it didn’t bring back the desktop.

I have installed SuperAntispyware and run it in safe mode. It picked up three tracking cookies: @ad.zanox[2].txt, @doubleclick[1].txt and @smartadserver[2].txt. After having quarantined them, my desktop now loads up normally again. I have done some reboots and a cold boot to see if the desktop would stall again but seems fine.

I’m not convinced it’s gone as the problem might have hidden itself for now due to installing the anti-spyware, I don’t know what the next step would be to make certain it’s gone or to find it if it’s still there.

So could someone please point me in the right direction or give me advice as what to do next?

Thanks for any replies.

Here is the OTL log file.

OTL logfile created on: 28/07/2011 00:39:07 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Administrator\Desktop
64bit-Windows Server 2003 Service Pack 2 (Version = 5.2.3790) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.43 Gb Available Physical Memory | 71.32% Memory free
3.87 Gb Paging File | 3.36 Gb Available in Paging File | 86.75% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 233.75 Gb Total Space | 218.16 Gb Free Space | 93.33% Space Free | Partition Type: NTFS
Drive D: | 465.76 Gb Total Space | 296.41 Gb Free Space | 63.64% Space Free | Partition Type: NTFS
Drive I: | 240.03 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: BLUE | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\Google\Gmail Notifier\gnotify.exe (Google Inc.)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\wow64_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.3790.4770_x-ww_8D2E3180\comctl32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\SysWOW64\xpsp2res.dll (Microsoft Corporation)
MOD - C:\WINDOWS\SysWOW64\ws03res.dll (Microsoft Corporation)
MOD - C:\WINDOWS\SysWOW64\mstask.dll (Microsoft Corporation)
MOD - C:\WINDOWS\SysWOW64\msctfime.ime (Microsoft Corporation)
MOD - C:\WINDOWS\SysWOW64\comres.dll (Microsoft Corporation)
MOD - C:\WINDOWS\SysWOW64\wbem\framedyn.dll (Microsoft Corporation)
MOD - C:\WINDOWS\SysWOW64\ws2help.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (!SASCORE) -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SRV:64bit: - (ForceWare Intelligent Application Manager (IAM)) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe ()
SRV:64bit: - (nSvcIp) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe ()
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (clr_optimization_v4.0.30319_32) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (helpsvc) -- C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Program Files (x86)\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (avgio) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgio64.sys (Avira GmbH)
DRV - (mnmdd) -- C:\WINDOWS\SysWow64\mnmdd.dll (Microsoft Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn...st/srchcust.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn...st/srchasst.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn...st/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn...st/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://www.microsoft...ie5update&O1=b1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = astroburn-search.com
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "DAEMON Search"
FF - prefs.js..browser.startup.homepage: "http://www.google.co.uk"
FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2011/07/16 03:42:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/07/16 16:35:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2011/07/16 16:35:23 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2011/07/27 18:41:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\do6mrd27.default\extensions
[2011/07/27 19:49:51 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\do6mrd27.default\extensions\[email protected]
[2011/07/27 19:55:04 | 000,002,071 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\do6mrd27.default\searchplugins\absearch-search.xml
[2011/07/27 19:49:43 | 000,002,055 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\do6mrd27.default\searchplugins\daemon-search.xml
[2011/07/26 22:21:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/07/16 16:35:07 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) --
[2011/07/16 03:42:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/06/16 05:32:38 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/01/01 09:00:00 | 000,001,538 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazon-en-GB.xml
[2010/01/01 09:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2010/01/01 09:00:00 | 000,000,947 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\chambers-en-GB.xml
[2010/01/01 09:00:00 | 000,001,180 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-en-GB.xml
[2010/01/01 09:00:00 | 000,002,364 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml
[2010/01/01 09:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia.xml
[2010/01/01 09:00:00 | 000,001,135 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-en-GB.xml

Hosts file not found
O3:64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O4:64bit: - HKLM..\Run: [NvCplDaemon] File not found
O4:64bit: - HKLM..\Run: [NvMediaCenter] File not found
O4:64bit: - HKLM..\Run: [nwiz] File not found
O4 - HKLM..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files (x86)\Google\Gmail Notifier\gnotify.exe (Google Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [SoundMAX] C:\Program Files (x86)\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\SysWOW64\ctfmon.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files (x86)\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9:64bit: - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - File not found
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\SysWOW64\nvLsp.dll (NVIDIA)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\SysWOW64\nvLsp.dll (NVIDIA)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.micros...b?1310777631078 (WUWebControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - File not found
O18:64bit: - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - File not found
O18:64bit: - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - File not found
O18:64bit: - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - File not found
O18:64bit: - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - File not found
O18:64bit: - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - File not found
O18:64bit: - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - File not found
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - File not found
O18:64bit: - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - File not found
O18:64bit: - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - File not found
O18:64bit: - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - File not found
O18:64bit: - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - File not found
O18:64bit: - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - File not found
O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - File not found
O18:64bit: - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - File not found
O18:64bit: - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - File not found
O18:64bit: - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - File not found
O18:64bit: - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - File not found
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\SysWOW64\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files (x86)\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\SysWOW64\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\SysWOW64\wiascr.dll (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found
O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found
O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found
O18:64bit: - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - File not found
O18:64bit: - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - File not found
O18:64bit: - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - File not found
O18:64bit: - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - File not found
O18:64bit: - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - File not found
O18:64bit: - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - Reg Error: Key error. File not found
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\SysWOW64\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - File not found
O20:64bit: - HKLM Winlogon: UIHost - (%SystemRoot%\system32\logonui.exe) - File not found
O20:64bit: - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\SysWow64\shell32.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: System - (lsass.exe) - File not found
O20 - HKLM Winlogon: UserInit - (userinit) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (%SystemRoot%\system32\logonui.exe) - C:\WINDOWS\SysWOW64\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\SysWow64\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\SysWow64\sysdm.cpl (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - File not found
O20:64bit: - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - File not found
O20:64bit: - Winlogon\Notify\cscdll: DllName - cscdll.dll - File not found
O20:64bit: - Winlogon\Notify\dimsntfy: DllName - dimsntfy.dll - File not found
O20:64bit: - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - File not found
O20:64bit: - Winlogon\Notify\Schedule: DllName - wlnotify.dll - File not found
O20:64bit: - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - File not found
O20:64bit: - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - File not found
O20:64bit: - Winlogon\Notify\termsrv: DllName - Reg Error: Key error. - File not found
O20:64bit: - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - File not found
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\SysWow64\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\SysWow64\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\SysWow64\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - dimsntfy.dll - C:\WINDOWS\SysWow64\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\EFS: DllName - sclgntfy.dll - C:\WINDOWS\SysWow64\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - File not found
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - File not found
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\SysWow64\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - File not found
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - File not found
O21:64bit: - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - File not found
O21:64bit: - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - File not found
O21:64bit: - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - File not found
O21:64bit: - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - File not found
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\SysWOW64\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\SysWOW64\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\SysWOW64\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\SysWOW64\webcheck.dll (Microsoft Corporation)
O22:64bit: - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - File not found
O22:64bit: - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - File not found
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\SysWOW64\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\SysWOW64\browseui.dll (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28:64bit: - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\SysWow64\shell32.dll (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\SysWow64\msapsspc.dll (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\SysWow64\schannel.dll (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\SysWow64\digest.dll (Microsoft Corporation)
O29:64bit: - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\SysWow64\msnsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\SysWow64\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\SysWow64\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\SysWow64\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\SysWow64\msnsspc.dll (Microsoft Corporation)
O30:64bit: - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (kerberos) - C:\WINDOWS\SysWow64\kerberos.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (schannel) - C:\WINDOWS\SysWow64\schannel.dll (Microsoft Corporation)
O30:64bit: - LSA: Security Packages - (wdigest) - C:\WINDOWS\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\SysWow64\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/07/16 01:13:28 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/07/28 00:26:11 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2011/07/27 20:08:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro
[2011/07/27 20:08:12 | 000,000,000 | ---D | C] -- C:\rsit
[2011/07/27 20:07:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\RSIT
[2011/07/27 19:55:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Astroburn Toolbar
[2011/07/27 19:55:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Astroburn Lite
[2011/07/27 19:55:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Astroburn Lite
[2011/07/27 19:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Astroburn Lite
[2011/07/27 19:52:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\DAEMON Tools Images
[2011/07/27 19:51:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\Msss
[2011/07/27 19:49:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\DAEMON Tools Lite
[2011/07/27 19:49:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2011/07/27 19:49:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\DAEMON Tools Lite
[2011/07/27 18:35:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop\Microsoft Rootkit
[2011/07/27 17:46:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR
[2011/07/27 17:46:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\WinRAR
[2011/07/27 17:46:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2011/07/27 03:41:10 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\Administrative Tools
[2011/07/26 20:28:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2011/07/26 20:28:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\SUPERAntiSpyware.com
[2011/07/26 20:28:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware
[2011/07/26 20:28:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\!SASCORE
[2011/07/26 20:28:32 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2011/07/25 23:01:33 | 000,607,017 | R--- | C] (Swearware) -- C:\Documents and Settings\Administrator\Desktop\dds.scr
[2011/07/25 15:34:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Malwarebytes
[2011/07/25 15:34:10 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysWow64\drivers\mbamswissarmy.sys
[2011/07/25 15:34:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/07/25 15:34:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/07/25 15:28:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Avira
[2011/07/24 23:14:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\Gmail Notifier
[2011/07/24 23:14:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2011/07/24 20:30:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2011/07/24 20:18:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office
[2011/07/24 20:17:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft ActiveSync
[2011/07/24 20:17:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER
[2011/07/24 20:17:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2011/07/24 20:16:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2011/07/24 20:09:43 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011/07/24 20:09:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\CCleaner
[2011/07/24 16:30:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\OpenOffice.org
[2011/07/24 01:52:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\AGEIA
[2011/07/24 01:52:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2011/07/24 01:52:27 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2011/07/24 01:52:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2011/07/24 01:52:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2011/07/24 01:52:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview
[2011/07/24 01:31:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/07/24 01:10:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)
[2011/07/24 00:57:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Philips Speech
[2011/07/24 00:57:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DSS2Wave
[2011/07/24 00:49:50 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011/07/18 23:18:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Toolbar
[2011/07/18 23:18:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011/07/16 16:49:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation
[2011/07/16 16:49:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NVIDIA
[2011/07/16 16:49:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2011/07/16 16:44:22 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2011/07/16 16:41:14 | 000,000,000 | ---D | C] -- C:\Program Files\PeerBlock
[2011/07/16 16:41:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\PeerBlock
[2011/07/16 16:39:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
[2011/07/16 16:39:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\My Documents\My Videos
[2011/07/16 16:35:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\My Documents\Downloads
[2011/07/16 16:35:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla
[2011/07/16 16:35:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Mozilla
[2011/07/16 16:35:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2011/07/16 16:32:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Avira
[2011/07/16 16:31:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2011/07/16 16:31:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2011/07/16 04:21:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2011/07/16 03:26:28 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\config
[2011/07/16 03:24:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2011/07/16 03:24:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2011/07/16 03:24:12 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2011/07/16 03:24:06 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2011/07/16 03:24:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2011/07/16 03:22:14 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2011/07/16 03:21:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2011/07/16 03:20:29 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 6.0
[2011/07/16 03:20:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 6.0
[2011/07/16 03:02:11 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2011/07/16 02:59:46 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2011/07/16 02:59:46 | 000,347,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxtmsft.dll
[2011/07/16 02:59:46 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dxtrans.dll
[2011/07/16 02:59:46 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iepeers.dll
[2011/07/16 02:59:46 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\url.dll
[2011/07/16 02:59:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie7updates
[2011/07/16 02:58:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2011/07/16 02:58:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en-US
[2011/07/16 02:55:36 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie7
[2011/07/16 02:55:27 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2011/07/16 02:55:17 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
[2011/07/16 02:37:14 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2011/07/16 02:17:19 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\icacls.exe
[2011/07/16 02:17:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdsmsno.dll
[2011/07/16 02:17:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdsmsfi.dll
[2011/07/16 02:17:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdno1.dll
[2011/07/16 02:17:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdfi1.dll
[2011/07/16 02:17:19 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdukx.dll
[2011/07/16 02:17:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdmlt48.dll
[2011/07/16 02:17:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdmlt47.dll
[2011/07/16 02:17:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdiultn.dll
[2011/07/16 02:17:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdbhc.dll
[2011/07/16 02:17:19 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdpash.dll
[2011/07/16 02:17:19 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdnepr.dll
[2011/07/16 02:17:19 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdmaori.dll
[2011/07/16 02:17:18 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\w03a2409.dll
[2011/07/16 02:17:18 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\verclsid.exe
[2011/07/16 02:17:18 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\setupn.exe
[2011/07/16 02:17:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\en
[2011/07/16 02:17:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\adfs
[2011/07/16 02:16:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2011/07/16 02:15:54 | 001,364,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2011/07/16 02:15:52 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\advpack.dll
[2011/07/16 02:15:51 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cabinet.dll
[2011/07/16 02:15:48 | 000,506,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cryptui.dll
[2011/07/16 02:15:48 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\corpol.dll
[2011/07/16 02:15:45 | 000,360,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dsound.dll
[2011/07/16 02:15:42 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hnetcfg.dll
[2011/07/16 02:15:41 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\imagehlp.dll
[2011/07/16 02:15:40 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iphlpapi.dll
[2011/07/16 02:15:38 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mlang.dll
[2011/07/16 02:15:36 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msacm32.dll
[2011/07/16 02:15:34 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msihnd.dll
[2011/07/16 02:15:27 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\olecli32.dll
[2011/07/16 02:15:27 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\olecnv32.dll
[2011/07/16 02:15:25 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasapi32.dll
[2011/07/16 02:15:25 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasman.dll
[2011/07/16 02:15:25 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasadhlp.dll
[2011/07/16 02:15:22 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sfc_os.dll
[2011/07/16 02:15:22 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sensapi.dll
[2011/07/16 02:15:19 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tapi32.dll
[2011/07/16 02:15:19 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\stdole2.tlb
[2011/07/16 02:15:12 | 000,812,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ws03res.dll
[2011/07/16 02:15:12 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wshtcpip.dll
[2011/07/16 02:15:11 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2011/07/16 02:15:11 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll
[2011/07/16 02:15:10 | 002,897,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsp2res.dll
[2011/07/16 02:09:31 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2011/07/16 02:09:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\PolicyBackup
[2011/07/16 01:59:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ODBC
[2011/07/16 01:59:00 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2011/07/16 01:58:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2011/07/16 01:58:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SpeechEngines
[2011/07/16 01:58:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Microsoft Shared
[2011/07/16 01:58:55 | 000,000,000 | R--D | C] -- C:\Program Files
[2011/07/16 01:58:55 | 000,000,000 | R--D | C] -- C:\Program Files (x86)
[2011/07/16 01:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2011/07/16 01:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2011/07/16 01:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2011/07/16 01:58:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files
[2011/07/16 01:58:54 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdtuq.dll
[2011/07/16 01:58:54 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdtuf.dll
[2011/07/16 01:58:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdazel.dll
[2011/07/16 01:58:53 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhept.dll
[2011/07/16 01:58:53 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhela3.dll
[2011/07/16 01:58:53 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhela2.dll
[2011/07/16 01:58:53 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdgkl.dll
[2011/07/16 01:58:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdru1.dll
[2011/07/16 01:58:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhe319.dll
[2011/07/16 01:58:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhe220.dll
[2011/07/16 01:58:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhe.dll
[2011/07/16 01:58:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdaze.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdycc.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbduzb.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdur.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdtat.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdru.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdmon.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdkyr.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdkaz.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdbu.dll
[2011/07/16 01:58:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdblr.dll
[2011/07/16 01:58:52 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdcz2.dll
[2011/07/16 01:58:52 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdcz.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdycl.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdsl1.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdsl.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdpl1.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdpl.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhu.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdcz1.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdcr.dll
[2011/07/16 01:58:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\KBDAL.DLL
[2011/07/16 01:58:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdlv1.dll
[2011/07/16 01:58:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdlv.dll
[2011/07/16 01:58:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdest.dll
[2011/07/16 01:58:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdro.dll
[2011/07/16 01:58:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdlt1.dll
[2011/07/16 01:58:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdlt.dll
[2011/07/16 01:58:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kbdhu1.dll
[2011/07/16 01:58:42 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\NOTEPAD.EXE
[2011/07/16 01:58:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup
[2011/07/16 01:58:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
[2011/07/16 01:58:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents
[2011/07/16 01:58:34 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Desktop
[2011/07/16 01:58:34 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
[2011/07/16 01:58:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites
[2011/07/16 01:58:18 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2011/07/16 01:58:18 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
[2011/07/16 01:58:10 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011/07/16 01:58:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2011/07/16 01:54:23 | 000,015,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuaucpl.cpl.mui
[2011/07/16 01:54:22 | 000,015,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll.mui
[2011/07/16 01:54:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\SoftwareDistribution
[2011/07/16 01:53:13 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator\UserData
[2011/07/16 01:51:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Marvell
[2011/07/16 01:50:52 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2011/07/16 01:50:52 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2011/07/16 01:50:52 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\wbem
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\usmt
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWOW64
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\mui
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent64
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\InstallShield
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime (x86)
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ias
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\export
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Drivers
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\3076
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\2052
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1054
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1042
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1041
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1037
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1033
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1031
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1028
[2011/07/16 01:50:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\1025
[2011/07/16 01:33:19 | 000,765,952 | R--- | C] (Sensaura Ltd) -- C:\WINDOWS\System\crlds3d.dll
[2011/07/16 01:33:18 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ksproxy.ax
[2011/07/16 01:33:12 | 001,285,632 | ---- | C] (Analog Devices) -- C:\WINDOWS\SysWow64\SMMedia.dll
[2011/07/16 01:33:12 | 000,053,248 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\SysWow64\wdmioctl.dll
[2011/07/16 01:33:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SoundMAX
[2011/07/16 01:33:11 | 000,049,152 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\SysWow64\DSndUp.exe
[2011/07/16 01:33:11 | 000,045,056 | ---- | C] (adi) -- C:\WINDOWS\SysWow64\CleanUp.exe
[2011/07/16 01:33:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Analog Devices
[2011/07/16 01:32:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2011/07/16 01:26:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\AsusInstAll
[2011/07/16 01:24:58 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2011/07/16 01:23:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\NVIDIA Corporation
[2011/07/16 01:22:25 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2011/07/16 01:22:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2011/07/16 01:22:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\InstallShield
[2011/07/16 01:18:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\Identities
[2011/07/16 01:18:04 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\My Documents\My Pictures
[2011/07/16 01:18:04 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\My Documents\My Music
[2011/07/16 01:17:59 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft
[2011/07/16 01:17:59 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrator\Application Data\Microsoft
[2011/07/16 01:17:59 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Application Data
[2011/07/16 01:17:59 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Favorites
[2011/07/16 01:17:59 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrator\Cookies
[2011/07/16 01:17:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Desktop
[2011/07/16 01:17:58 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\SendTo
[2011/07/16 01:17:58 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Recent
[2011/07/16 01:17:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\Startup
[2011/07/16 01:17:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Start Menu
[2011/07/16 01:17:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\My Documents
[2011/07/16 01:17:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Start Menu\Programs\Accessories
[2011/07/16 01:17:58 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\Templates
[2011/07/16 01:17:58 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\PrintHood
[2011/07/16 01:17:58 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\NetHood
[2011/07/16 01:17:58 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrator\Local Settings
[2011/07/16 01:17:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2011/07/16 01:17:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2011/07/16 01:17:51 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2011/07/16 01:17:50 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2011/07/16 01:17:49 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2011/07/16 01:17:49 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2011/07/16 01:13:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\system
[2011/07/16 01:13:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\speechengines
[2011/07/16 01:13:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\microsoft shared
[2011/07/16 01:13:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\inetsrv
[2011/07/16 01:13:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\ime
[2011/07/16 01:13:18 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mapi32.dll
[2011/07/16 01:12:51 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2011/07/16 01:12:38 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Uninstall Information
[2011/07/16 01:11:53 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ils.dll
[2011/07/16 01:11:53 | 000,024,576 | ---- | C] (Intel Corporation) -- C:\WINDOWS\SysWow64\isrdbg32.dll
[2011/07/16 01:11:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\nmevtmsg.dll
[2011/07/16 01:11:52 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msconf.dll
[2011/07/16 01:11:52 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mnmdd.dll
[2011/07/16 01:11:52 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\nmmkcert.dll
[2011/07/16 01:11:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NetMeeting
[2011/07/16 01:11:46 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2011/07/16 01:11:46 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2011/07/16 01:11:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Macromed
[2011/07/16 01:11:20 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
[2011/07/16 01:11:19 | 000,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuaucpl.cpl
[2011/07/16 01:11:19 | 000,209,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuweb.dll
[2011/07/16 01:11:19 | 000,044,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups2.dll
[2011/07/16 01:11:18 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\qmgrprxy.dll
[2011/07/16 01:11:18 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bitsprx2.dll
[2011/07/16 01:11:18 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bitsprx3.dll
[2011/07/16 01:11:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Movie Maker
[2011/07/16 01:11:02 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msoert2.dll
[2011/07/16 01:11:02 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\acctres.dll
[2011/07/16 01:11:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\PCHEALTH
[2011/07/16 01:11:01 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msoeacct.dll
[2011/07/16 01:11:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Services
[2011/07/16 01:11:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2011/07/16 01:10:59 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetres.dll
[2011/07/16 01:10:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Outlook Express
[2011/07/16 01:10:54 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstask.dll
[2011/07/16 01:10:54 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstinit.exe
[2011/07/16 01:10:54 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2011/07/16 01:10:53 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcfg.dll
[2011/07/16 01:10:53 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\isign32.dll
[2011/07/16 01:10:53 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\icwdial.dll
[2011/07/16 01:10:53 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\icwphbk.dll
[2011/07/16 01:10:53 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\icfgnt5.dll
[2011/07/16 01:10:53 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2011/07/16 01:10:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\System
[2011/07/16 01:10:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2011/07/16 01:10:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Explorer
[2011/07/16 01:10:40 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
[2011/07/16 01:10:40 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2011/07/16 01:10:37 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Games
[2011/07/16 01:10:25 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2011/07/16 01:10:17 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
[2011/07/16 01:10:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2011/07/16 01:09:53 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
[2011/07/16 01:09:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player
[2011/07/16 01:09:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\write.exe
[2011/07/16 01:09:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSN Gaming Zone
[2011/07/16 01:09:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows NT
[2011/07/16 01:09:41 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\accwiz.exe
[2011/07/16 01:09:41 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\access.cpl
[2011/07/16 01:09:37 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winchat.exe
[2011/07/16 01:09:37 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2011/07/16 01:09:35 | 000,343,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mspaint.exe
[2011/07/16 01:09:29 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\clipbrd.exe
[2011/07/16 01:09:28 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\getuname.dll
[2011/07/16 01:09:28 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\charmap.exe
[2011/07/16 01:09:27 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\calc.exe
[2011/07/16 01:09:26 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spider.exe
[2011/07/16 01:09:26 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmine.exe
[2011/07/16 01:09:26 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sol.exe
[2011/07/16 01:09:25 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshearts.exe
[2011/07/16 01:09:25 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\freecell.exe
[2011/07/16 01:09:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSN
[2011/07/16 01:09:19 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2011/07/16 01:09:18 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2011/07/16 01:09:18 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\qwinsta.exe
[2011/07/16 01:09:18 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\qprocess.exe
[2011/07/16 01:09:18 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\qappsrv.exe
[2011/07/16 01:09:16 | 000,593,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comuid.dll
[2011/07/16 01:09:16 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsnap.dll
[2011/07/16 01:09:16 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comadmin.dll
[2011/07/16 01:09:16 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mtxlegih.dll
[2011/07/16 01:09:16 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mtxdm.dll
[2011/07/16 01:09:16 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mtxex.dll
[2011/07/16 01:09:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\Com
[2011/07/16 01:09:15 | 001,295,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll
[2011/07/16 01:09:15 | 000,616,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\catsrvut.dll
[2011/07/16 01:09:15 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\catsrv.dll
[2011/07/16 01:09:15 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\clbcatex.dll
[2011/07/16 01:09:15 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\stclient.dll
[2011/07/16 01:09:15 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\colbact.dll
[2011/07/16 01:09:15 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comaddin.dll
[2011/07/16 01:09:15 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\catsrvps.dll
[2011/07/16 01:09:12 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mtxoci.dll
[2011/07/16 01:09:12 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xolehlp.dll
[2011/07/16 01:09:11 | 000,469,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcprx.dll
[2011/07/16 01:09:11 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcuiu.dll
[2011/07/16 01:09:09 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\servdeps.dll
[2011/07/16 01:09:08 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmfutil.dll
[2011/07/16 01:07:47 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Accessories
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/07/28 00:26:12 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2011/07/27 20:17:10 | 000,002,521 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Word.lnk
[2011/07/27 19:59:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/07/27 18:06:44 | 000,000,051 | ---- | M] () -- C:\WINDOWS\wininit.ini
[2011/07/26 20:28:34 | 000,001,662 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/07/25 23:01:34 | 000,607,017 | R--- | M] (Swearware) -- C:\Documents and Settings\Administrator\Desktop\dds.scr
[2011/07/25 16:35:19 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\420jdwpr.exe
[2011/07/25 15:34:11 | 000,000,844 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2011/07/25 02:19:24 | 000,000,830 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/07/24 20:18:52 | 000,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2011/07/24 20:09:43 | 000,000,676 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/07/24 00:58:02 | 000,000,760 | ---- | M] () -- C:\WINDOWS\unins000.dat
[2011/07/16 16:36:46 | 000,000,970 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/07/16 16:35:13 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2011/07/16 16:35:09 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/16 16:35:09 | 000,000,766 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/07/16 16:32:14 | 000,001,761 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Avira AntiVir Control Center.lnk
[2011/07/16 16:29:13 | 000,000,399 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Cubase Project.lnk
[2011/07/16 16:29:02 | 000,000,389 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Band Project.lnk
[2011/07/16 16:28:46 | 000,000,384 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Programming.lnk
[2011/07/16 16:28:33 | 000,000,350 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Video.lnk
[2011/07/16 16:28:10 | 000,000,369 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Installs.lnk
[2011/07/16 16:27:52 | 000,000,419 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\Party Music Folder.lnk
[2011/07/16 16:27:28 | 000,000,345 | ---- | M] () -- C:\Documents and Settings\Administrator\Desktop\MP3s.lnk
[2011/07/16 04:16:30 | 000,542,514 | ---- | M] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2011/07/16 03:19:27 | 000,023,392 | ---- | M] () -- C:\WINDOWS\SysWow64\nscompat.tlb
[2011/07/16 03:19:27 | 000,016,832 | ---- | M] () -- C:\WINDOWS\SysWow64\amcompat.tlb
[2011/07/16 03:02:16 | 000,000,845 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/07/16 02:14:00 | 000,297,072 | RHS- | M] () -- C:\ntldr
[2011/07/16 01:52:27 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2011/07/16 01:51:00 | 000,026,829 | ---- | M] () -- C:\WINDOWS\Ascd_tmp.ini
[2011/07/16 01:37:27 | 000,033,517 | ---- | M] () -- C:\WINDOWS\Ascd_log.ini
[2011/07/16 01:22:25 | 000,000,225 | RHS- | M] () -- C:\boot.ini
[2011/07/16 01:21:08 | 000,001,769 | ---- | M] () -- C:\WINDOWS\Language_trs.ini
[2011/07/16 01:18:06 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/07/16 01:13:28 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2011/07/16 01:13:28 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2011/07/16 01:13:28 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2011/07/16 01:13:28 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2011/07/16 01:13:25 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2011/07/16 01:13:18 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2011/07/06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\SysWow64\drivers\mbamswissarmy.sys
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/07/27 18:06:33 | 000,000,051 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2011/07/26 20:28:34 | 000,001,662 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/07/25 16:35:18 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\420jdwpr.exe
[2011/07/25 15:34:11 | 000,000,844 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2011/07/25 02:19:24 | 000,000,830 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/07/24 20:21:17 | 000,002,521 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Word.lnk
[2011/07/24 20:18:51 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011/07/24 20:09:43 | 000,000,676 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/07/24 00:58:02 | 000,000,760 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2011/07/24 00:57:11 | 000,050,688 | ---- | C] () -- C:\Documents and Settings\Administrator\My Documents\Sample DSS Pro.DS2
[2011/07/16 16:35:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011/07/16 16:35:09 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/16 16:35:09 | 000,000,772 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/07/16 16:35:09 | 000,000,766 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/07/16 16:32:14 | 000,001,761 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Avira AntiVir Control Center.lnk
[2011/07/16 16:29:13 | 000,000,399 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Cubase Project.lnk
[2011/07/16 16:29:02 | 000,000,389 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Band Project.lnk
[2011/07/16 16:28:46 | 000,000,384 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Programming.lnk
[2011/07/16 16:28:33 | 000,000,350 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Video.lnk
[2011/07/16 16:28:10 | 000,000,369 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Installs.lnk
[2011/07/16 16:27:52 | 000,000,419 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\Party Music Folder.lnk
[2011/07/16 16:27:28 | 000,000,345 | ---- | C] () -- C:\Documents and Settings\Administrator\Desktop\MP3s.lnk
[2011/07/16 03:22:49 | 000,542,514 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2011/07/16 03:02:16 | 000,000,833 | ---- | C] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer.lnk
[2011/07/16 02:17:18 | 001,099,264 | ---- | C] () -- C:\WINDOWS\adfs.msp
[2011/07/16 01:59:04 | 000,000,970 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2011/07/16 01:58:59 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011/07/16 01:56:52 | 000,000,225 | RHS- | C] () -- C:\boot.ini
[2011/07/16 01:52:27 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2011/07/16 01:22:00 | 000,033,517 | ---- | C] () -- C:\WINDOWS\Ascd_log.ini
[2011/07/16 01:21:08 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2011/07/16 01:21:03 | 000,026,829 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2011/07/16 01:21:03 | 000,010,296 | ---- | C] () -- C:\WINDOWS\SysWow64\drivers\ASUSHWIO.SYS
[2011/07/16 01:18:06 | 000,000,738 | ---- | C] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Outlook Express.lnk
[2011/07/16 01:18:06 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/07/16 01:18:05 | 000,000,845 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/07/16 01:18:05 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011/07/16 01:17:59 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Remote Assistance.lnk
[2011/07/16 01:17:59 | 000,000,818 | ---- | C] () -- C:\Documents and Settings\Administrator\Start Menu\Programs\Windows Media Player.lnk
[2011/07/16 01:16:30 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011/07/16 01:13:28 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2011/07/16 01:13:28 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2011/07/16 01:13:28 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2011/07/16 01:13:28 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2011/07/16 01:13:25 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2011/07/16 01:13:24 | 000,023,392 | ---- | C] () -- C:\WINDOWS\SysWow64\nscompat.tlb
[2011/07/16 01:13:24 | 000,016,832 | ---- | C] () -- C:\WINDOWS\SysWow64\amcompat.tlb
[2011/07/16 01:11:35 | 000,000,828 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
[2011/07/16 01:11:08 | 000,144,128 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2011/07/16 01:11:08 | 000,144,128 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2011/07/16 01:10:38 | 000,000,609 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
[2011/07/16 01:09:53 | 000,002,040 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk
[2011/07/16 01:09:30 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2011/07/16 01:09:30 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2011/07/16 01:09:30 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2011/07/16 01:09:30 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2011/07/16 01:09:30 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2011/07/16 01:09:29 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
[2011/07/16 01:09:29 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2011/07/16 01:09:29 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2011/07/16 01:09:29 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
[2011/07/16 01:09:29 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
[2011/07/16 01:09:29 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
[2008/10/07 06:33:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\SysWow64\nview.dll
[2008/10/07 06:33:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\SysWow64\nvwimg.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelTraditionalChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelSwedish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelSpanish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelPortugese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelKorean.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelJapanese.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelGerman.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\SysWow64\AgCPanelFrench.dll
[2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\SysWow64\physxcudart_20.dll
[2005/03/25 13:00:00 | 001,278,464 | ---- | C] () -- C:\WINDOWS\SysWow64\quartz.dll
[2005/03/25 13:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\SysWow64\qedwipes.dll
[2005/03/25 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2005/03/25 13:00:00 | 000,512,512 | ---- | C] () -- C:\WINDOWS\SysWow64\qedit.dll
[2005/03/25 13:00:00 | 000,498,742 | ---- | C] () -- C:\WINDOWS\SysWow64\dxmasf.dll
[2005/03/25 13:00:00 | 000,396,288 | ---- | C] () -- C:\WINDOWS\SysWow64\encdec.dll
[2005/03/25 13:00:00 | 000,385,536 | ---- | C] () -- C:\WINDOWS\SysWow64\qdvd.dll
[2005/03/25 13:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2005/03/25 13:00:00 | 000,279,040 | ---- | C] () -- C:\WINDOWS\SysWow64\qdv.dll
[2005/03/25 13:00:00 | 000,276,992 | ---- | C] () -- C:\WINDOWS\SysWow64\sbe.dll
[2005/03/25 13:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\SysWow64\ir32_32.dll
[2005/03/25 13:00:00 | 000,192,512 | ---- | C] () -- C:\WINDOWS\SysWow64\qcap.dll
[2005/03/25 13:00:00 | 000,114,688 | ---- | C] () -- C:\WINDOWS\SysWow64\msencode.dll
[2005/03/25 13:00:00 | 000,072,704 | ---- | C] () -- C:\WINDOWS\SysWow64\amstream.dll
[2005/03/25 13:00:00 | 000,062,464 | ---- | C] () -- C:\WINDOWS\SysWow64\mciqtz32.dll
[2005/03/25 13:00:00 | 000,061,440 | ---- | C] () -- C:\WINDOWS\SysWow64\devenum.dll
[2005/03/25 13:00:00 | 000,055,808 | ---- | C] () -- C:\WINDOWS\SysWow64\dvdplay.exe
[2005/03/25 13:00:00 | 000,046,907 | ---- | C] () -- C:\WINDOWS\mib.bin
[2005/03/25 13:00:00 | 000,016,896 | ---- | C] () -- C:\WINDOWS\SysWow64\tsd32.dll
[2005/03/25 13:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\SysWow64\msdmo.dll
[2005/03/25 13:00:00 | 000,012,498 | ---- | C] () -- C:\WINDOWS\SysWow64\append.exe
[2005/03/25 13:00:00 | 000,004,126 | ---- | C] () -- C:\WINDOWS\SysWow64\msdxmlc.dll
[2005/03/25 13:00:00 | 000,001,129 | ---- | C] () -- C:\WINDOWS\SysWow64\vwipxspx.exe
[2003/01/07 15:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\SysWow64\OUTLPERF.INI

========== LOP Check ==========

[2011/07/27 19:51:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\DAEMON Tools Lite
[2011/07/24 16:30:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\OpenOffice.org
[2011/07/26 20:28:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\!SASCORE
[2011/07/27 19:55:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Astroburn Lite
[2011/07/27 19:59:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011/07/27 19:58:08 | 000,014,308 | ---- | M] () -- C:\WINDOWS\Tasks\SchedLgU.Txt

========== Purity Check ==========



< End of report >

Edited by SweetTech, 28 July 2011 - 11:19 AM.
merged posts.--ST