[ON3P]

First, thanks for the help in advance!

My girlfriend was using my computer, download something I guess. As soon as she did, McAfee sent a warning saying that my computer had been inflected with "New Poly Win32". I immediately scanned my computer with McAfee and the virus showed up. I was not able to clean it, quarantine it, or delete it.

I rebooted in Safe Mood, again was not able to delete it, clean it, quarantine it.

So, here I am now. This just happened a few hours ago. I haven't noticed any problems on my computer yet.

here is the HijackThis report.
Logfile of HijackThis v1.99.1
Scan saved at 7:41:04 PM, on 10/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Ati2evxx.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\BCMSMMSG.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Messenger\msmsgs.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Scott Andrus\Desktop\hijackthis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE /P30 "EPSON Stylus Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [spywarebot] C:\Program Files\SpywareBot\SpywareBot.exe -boot
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Epson printer Registration.lnk = D:\E_reg\EpsonReg.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1128306323789
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1128306306093
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe


Any help would be appreciated. Thanks!

[Advertisements]

hi



Please download ComboFix and save it to your desktop.
Double click combofix.exe and follow the prompts.
When it's done running it will produce a log for you. Please post that log in your next reply.

Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

[loophole]

hi



Please download ComboFix and save it to your desktop.
Double click combofix.exe and follow the prompts.
When it's done running it will produce a log for you. Please post that log in your next reply.

Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

[ON3P]

Here is the ComboFix Report:

Scott Andrus - 06-10-09 8:15:23.91 Service Pack 2
ComboFix 06.09.28 - Running from: "C:\Documents and Settings\Scott Andrus\Desktop"

((((((((((((((((((((((((((((((( Files Created from 2006-09-09 to 2006-10-09 ))))))))))))))))))))))))))))))))))


2006-10-08 15:54 223,128 --a------ C:\WINDOWS\system32\drivers\dtscsi.sys
2006-10-08 15:51 96,256 --a------ C:\WINDOWS\system32\drivers\sptd3101.sys
2006-10-08 15:51 643,072 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2006-10-02 23:33 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2006-10-02 22:31 97,280 --a------ C:\WINDOWS\system32\dpcdll.dll
2006-10-02 22:31 937,984 --a------ C:\WINDOWS\system32\winbrand.dll
2006-10-02 22:31 8,192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2006-10-02 22:31 755,200 --a------ C:\WINDOWS\system32\ir50_32.dll
2006-10-02 22:31 7,168 --a------ C:\WINDOWS\system32\hccoin.dll
2006-10-02 22:31 7,168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2006-10-02 22:31 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2006-10-02 22:31 537,088 --a------ C:\WINDOWS\system32\msftedit.dll
2006-10-02 22:31 438,784 --a------ C:\WINDOWS\system32\xpob2res.dll
2006-10-02 22:31 4,096 --a------ C:\WINDOWS\system32\dsprpres.dll
2006-10-02 22:31 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2006-10-02 22:31 37,376 --a------ C:\WINDOWS\system32\drivers\amdk7.sys
2006-10-02 22:31 351,232 --a------ C:\WINDOWS\system32\winhttp.dll
2006-10-02 22:31 338,432 --a------ C:\WINDOWS\system32\ir41_qcx.dll
2006-10-02 22:31 270,848 --a------ C:\WINDOWS\system32\sbe.dll
2006-10-02 22:31 26,624 --a------ C:\WINDOWS\system32\drivers\usbehci.sys
2006-10-02 22:31 24,064 --a------ C:\WINDOWS\system32\pidgen.dll
2006-10-02 22:31 200,192 --a------ C:\WINDOWS\system32\ir50_qc.dll
2006-10-02 22:31 20,480 --a------ C:\WINDOWS\system32\encapi.dll
2006-10-02 22:31 2,897,920 --a------ C:\WINDOWS\system32\xpsp2res.dll
2006-10-02 22:31 187,392 --a------ C:\WINDOWS\system32\xpsp1res.dll
2006-10-02 22:31 186,368 --a------ C:\WINDOWS\system32\encdec.dll
2006-10-02 22:31 183,808 --a------ C:\WINDOWS\system32\ir50_qcx.dll
2006-10-02 22:31 159,232 --a------ C:\WINDOWS\system32\sbeio.dll
2006-10-02 22:31 134,656 --a------ C:\WINDOWS\system32\mssap.dll
2006-10-02 22:31 120,320 --a------ C:\WINDOWS\system32\ir41_qc.dll
2006-10-02 22:31 12,416 --a------ C:\WINDOWS\system32\drivers\tunmp.sys
2006-10-02 22:30 99,840 --a------ C:\WINDOWS\system32\advpack.dll
2006-10-02 22:30 98,304 --a------ C:\WINDOWS\system32\cscript.exe
2006-10-02 22:30 98,304 --a------ C:\WINDOWS\system32\ahui.exe
2006-10-02 22:30 92,672 --a------ C:\WINDOWS\system32\dskquota.dll
2006-10-02 22:30 9,728 --a------ C:\WINDOWS\system32\gpkrsrc.dll
2006-10-02 22:30 9,344 --a------ C:\WINDOWS\system32\framebuf.dll
2006-10-02 22:30 87,552 --a------ C:\WINDOWS\system32\fldrclnr.dll
2006-10-02 22:30 87,040 --a------ C:\WINDOWS\system32\drmstor.dll
2006-10-02 22:30 85,504 --a------ C:\WINDOWS\system32\diantz.exe
2006-10-02 22:30 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2006-10-02 22:30 84,992 --a------ C:\WINDOWS\system32\avifil32.dll
2006-10-02 22:30 84,480 --a------ C:\WINDOWS\system32\cabview.dll
2006-10-02 22:30 83,456 --a------ C:\WINDOWS\system32\dpvsetup.exe
2006-10-02 22:30 825,344 --a------ C:\WINDOWS\system32\d3dim700.dll
2006-10-02 22:30 82,432 --a------ C:\WINDOWS\system32\dmscript.dll
2006-10-02 22:30 82,432 --a------ C:\WINDOWS\system32\dfrgfat.exe
2006-10-02 22:30 81,920 --a------ C:\WINDOWS\system32\isign32.dll
2006-10-02 22:30 81,920 --a------ C:\WINDOWS\system32\ils.dll
2006-10-02 22:30 80,384 --a------ C:\WINDOWS\system32\iccvid.dll
2006-10-02 22:30 80,384 --a------ C:\WINDOWS\system32\faultrep.dll
2006-10-02 22:30 8,704 --a------ C:\WINDOWS\system32\dciman32.dll
2006-10-02 22:30 8,704 --a------ C:\WINDOWS\system32\batt.dll
2006-10-02 22:30 8,192 --a------ C:\WINDOWS\system32\igmpagnt.dll
2006-10-02 22:30 8,192 --a------ C:\WINDOWS\system32\d3d8thk.dll
2006-10-02 22:30 8,192 --a------ C:\WINDOWS\system32\asferror.dll
2006-10-02 22:30 792,064 --a------ C:\WINDOWS\system32\comres.dll
2006-10-02 22:30 78,336 --a------ C:\WINDOWS\system32\browsewm.dll
2006-10-02 22:30 77,824 --a------ C:\WINDOWS\system32\cliconfg.dll
2006-10-02 22:30 77,312 --a------ C:\WINDOWS\system32\browser.dll
2006-10-02 22:30 75,264 --a------ C:\WINDOWS\system32\inetpp.dll
2006-10-02 22:30 74,752 --a------ C:\WINDOWS\system32\cryptdlg.dll
2006-10-02 22:30 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2006-10-02 22:30 71,680 --a------ C:\WINDOWS\system32\dsdmoprp.dll
2006-10-02 22:30 70,656 --a------ C:\WINDOWS\system32\amstream.dll
2006-10-02 22:30 7,424 --a------ C:\WINDOWS\system32\kd1394.dll
2006-10-02 22:30 695,296 --a------ C:\WINDOWS\system32\drmv2clt.dll
2006-10-02 22:30 69,120 --a------ C:\WINDOWS\system32\ciodm.dll
2006-10-02 22:30 68,608 --a------ C:\WINDOWS\system32\digest.dll
2006-10-02 22:30 68,096 --a------ C:\WINDOWS\system32\adsmsext.dll
2006-10-02 22:30 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-10-02 22:30 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2006-10-02 22:30 65,024 --a------ C:\WINDOWS\system32\asycfilt.dll
2006-10-02 22:30 640,000 --a------ C:\WINDOWS\system32\dbghelp.dll
2006-10-02 22:30 64,000 --a------ C:\WINDOWS\system32\cleanmgr.exe
2006-10-02 22:30 63,488 --a------ C:\WINDOWS\system32\cryptnet.dll
2006-10-02 22:30 63,488 --a------ C:\WINDOWS\system32\cmstp.exe
2006-10-02 22:30 63,488 --a------ C:\WINDOWS\system32\browselc.dll
2006-10-02 22:30 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2006-10-02 22:30 62,976 --a------ C:\WINDOWS\system32\iesetup.dll
2006-10-02 22:30 619,008 --a------ C:\WINDOWS\system32\dx7vb.dll
2006-10-02 22:30 614,912 --a------ C:\WINDOWS\system32\h323msp.dll
2006-10-02 22:30 61,440 --a------ C:\WINDOWS\system32\dmcompos.dll
2006-10-02 22:30 61,440 --a------ C:\WINDOWS\system32\admparse.dll
2006-10-02 22:30 60,928 --a------ C:\WINDOWS\system32\dpnhupnp.dll
2006-10-02 22:30 60,416 --a------ C:\WINDOWS\system32\cryptsvc.dll
2006-10-02 22:30 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2006-10-02 22:30 597,504 --a------ C:\WINDOWS\system32\crypt32.dll
2006-10-02 22:30 59,904 --a------ C:\WINDOWS\system32\ipv6mon.dll
2006-10-02 22:30 59,904 --a------ C:\WINDOWS\system32\devenum.dll
2006-10-02 22:30 59,904 --a------ C:\WINDOWS\system32\cabinet.dll
2006-10-02 22:30 580,608 --a------ C:\WINDOWS\system32\autofmt.exe
2006-10-02 22:30 58,880 --a------ C:\WINDOWS\system32\atl.dll
2006-10-02 22:30 57,856 --a------ C:\WINDOWS\system32\clusapi.dll
2006-10-02 22:30 57,344 --a------ C:\WINDOWS\system32\dpwsockx.dll
2006-10-02 22:30 56,832 --a------ C:\WINDOWS\system32\authz.dll
2006-10-02 22:30 55,808 --a------ C:\WINDOWS\system32\ipconfig.exe
2006-10-02 22:30 55,808 --a------ C:\WINDOWS\system32\eventlog.dll
2006-10-02 22:30 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2006-10-02 22:30 54,272 --a------ C:\WINDOWS\system32\ixsso.dll
2006-10-02 22:30 54,272 --a------ C:\WINDOWS\system32\dataclen.dll
2006-10-02 22:30 53,840 --a------ C:\WINDOWS\system32\dosx.exe
2006-10-02 22:30 53,760 --a------ C:\WINDOWS\system32\cryptext.dll
2006-10-02 22:30 53,248 --a------ C:\WINDOWS\system32\ipv6.exe
2006-10-02 22:30 52,736 --a------ C:\WINDOWS\system32\basesrv.dll
2006-10-02 22:30 52,224 --a------ C:\WINDOWS\system32\dmutil.dll
2006-10-02 22:30 512,512 --a------ C:\WINDOWS\system32\cryptui.dll
2006-10-02 22:30 51,200 --a------ C:\WINDOWS\system32\dssec.dll
2006-10-02 22:30 50,688 --a------ C:\WINDOWS\twain_32.dll
2006-10-02 22:30 50,688 --a------ C:\WINDOWS\system32\camocx.dll
2006-10-02 22:30 5,632 --a------ C:\WINDOWS\system32\cisvc.exe
2006-10-02 22:30 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2006-10-02 22:30 498,205 --a------ C:\WINDOWS\system32\dxmasf.dll
2006-10-02 22:30 48,640 --a------ C:\WINDOWS\system32\iernonce.dll
2006-10-02 22:30 48,128 --a------ C:\WINDOWS\system32\inetres.dll
2006-10-02 22:30 48,128 --a------ C:\WINDOWS\system32\docprop2.dll
2006-10-02 22:30 47,616 --a------ C:\WINDOWS\system32\iyuv_32.dll
2006-10-02 22:30 47,104 --a------ C:\WINDOWS\system32\cnbjmon.dll
2006-10-02 22:30 47,104 --a------ C:\WINDOWS\system32\cmdl32.exe
2006-10-02 22:30 457,728 --a------ C:\WINDOWS\system32\certmgr.dll
2006-10-02 22:30 45,568 --a------ C:\WINDOWS\system32\extrac32.exe
2006-10-02 22:30 45,568 --a------ C:\WINDOWS\system32\dnsrslvr.dll
2006-10-02 22:30 44,544 --a------ C:\WINDOWS\system32\alg.exe
2006-10-02 22:30 42,496 --a------ C:\WINDOWS\system32\audiosrv.dll
2006-10-02 22:30 42,368 --a------ C:\WINDOWS\system32\drivers\agp440.sys
2006-10-02 22:30 41,984 --a------ C:\WINDOWS\system32\htui.dll
2006-10-02 22:30 41,472 --a------ C:\WINDOWS\system32\hhsetup.dll
2006-10-02 22:30 4,096 --a------ C:\WINDOWS\system32\actmovie.exe
2006-10-02 22:30 39,936 --a------ C:\WINDOWS\system32\cmutil.dll
2006-10-02 22:30 39,936 --a------ C:\WINDOWS\system32\cmmon32.exe
2006-10-02 22:30 39,424 --a------ C:\WINDOWS\system32\grpconv.exe
2006-10-02 22:30 384,000 --a------ C:\WINDOWS\system32\ipsmsnap.dll
2006-10-02 22:30 382,976 --a------ C:\WINDOWS\system32\fontext.dll
2006-10-02 22:30 380,957 --a------ C:\WINDOWS\system32\expsrv.dll
2006-10-02 22:30 38,912 --a------ C:\WINDOWS\system32\dfrgsnap.dll
2006-10-02 22:30 38,912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2006-10-02 22:30 375,296 --a------ C:\WINDOWS\system32\dpnet.dll
2006-10-02 22:30 367,616 --a------ C:\WINDOWS\system32\dsound.dll
2006-10-02 22:30 36,921 --a------ C:\WINDOWS\system32\imeshare.dll
2006-10-02 22:30 35,840 --a------ C:\WINDOWS\system32\imgutil.dll
2006-10-02 22:30 35,840 --a------ C:\WINDOWS\system32\dmloader.dll
2006-10-02 22:30 35,328 --a------ C:\WINDOWS\system32\dpnhpast.dll
2006-10-02 22:30 35,328 --a------ C:\WINDOWS\system32\corpol.dll
2006-10-02 22:30 349,696 --a------ C:\WINDOWS\system32\ipsecsnp.dll
2006-10-02 22:30 344,064 --a------ C:\WINDOWS\system32\hnetcfg.dll
2006-10-02 22:30 343,040 --a------ C:\WINDOWS\system32\cmdial32.dll
2006-10-02 22:30 34,304 --a------ C:\WINDOWS\system32\ie4uinit.exe
2006-10-02 22:30 337,920 --a------ C:\WINDOWS\system32\filemgmt.dll
2006-10-02 22:30 331,264 --a------ C:\WINDOWS\system32\ipnathlp.dll
2006-10-02 22:30 330,752 --a------ C:\WINDOWS\system32\ippromon.dll
2006-10-02 22:30 330,752 --a------ C:\WINDOWS\system32\hnetwiz.dll
2006-10-02 22:30 33,280 --a------ C:\WINDOWS\system32\inetmib1.dll
2006-10-02 22:30 33,280 --a------ C:\WINDOWS\system32\cryptdll.dll
2006-10-02 22:30 33,280 --a------ C:\WINDOWS\system32\clipsrv.exe
2006-10-02 22:30 326,656 --a------ C:\WINDOWS\system32\cscui.dll
2006-10-02 22:30 323,584 --a------ C:\WINDOWS\system32\iedkcs32.dll
2006-10-02 22:30 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2006-10-02 22:30 304,128 --a------ C:\WINDOWS\system32\duser.dll
2006-10-02 22:30 30,208 --a------ C:\WINDOWS\system32\dplaysvr.exe
2006-10-02 22:30 30,208 --a------ C:\WINDOWS\system32\ddeshare.exe
2006-10-02 22:30 30,208 --a------ C:\WINDOWS\system32\atmlib.dll
2006-10-02 22:30 3,584 --a------ C:\WINDOWS\system32\icmp.dll
2006-10-02 22:30 3,584 --a------ C:\WINDOWS\system32\dpnlobby.dll
2006-10-02 22:30 3,584 --a------ C:\WINDOWS\system32\dpnaddr.dll
2006-10-02 22:30 299,520 --a------ C:\WINDOWS\system32\drmclien.dll
2006-10-02 22:30 295,936 --a------ C:\WINDOWS\system32\kerberos.dll
2006-10-02 22:30 286,208 --a------ C:\WINDOWS\system32\blackbox.dll
2006-10-02 22:30 285,696 --a------ C:\WINDOWS\system32\atmfd.dll
2006-10-02 22:30 283,648 --a------ C:\WINDOWS\winhlp32.exe
2006-10-02 22:30 282,624 --a------ C:\WINDOWS\system32\devmgr.dll
2006-10-02 22:30 280,064 --a------ C:\WINDOWS\system32\gdi32.dll
2006-10-02 22:30 28,672 --a------ C:\WINDOWS\system32\dmband.dll
2006-10-02 22:30 28,672 --a------ C:\WINDOWS\system32\dfsshlex.dll
2006-10-02 22:30 28,672 --a------ C:\WINDOWS\system32\dbnmpntw.dll
2006-10-02 22:30 28,672 --a------ C:\WINDOWS\system32\batmeter.dll
2006-10-02 22:30 274,432 --a------ C:\WINDOWS\system32\inetcfg.dll
2006-10-02 22:30 27,648 --a------ C:\WINDOWS\system32\conime.exe
2006-10-02 22:30 27,136 --a------ C:\WINDOWS\system32\findstr.exe
2006-10-02 22:30 27,136 --a------ C:\WINDOWS\system32\ddrawex.dll
2006-10-02 22:30 266,240 --a------ C:\WINDOWS\system32\ddraw.dll
2006-10-02 22:30 263,680 --a------ C:\WINDOWS\system32\adsnt.dll
2006-10-02 22:30 254,976 --a------ C:\WINDOWS\system32\icm32.dll
2006-10-02 22:30 252,928 --a------ C:\WINDOWS\system32\compatui.dll
2006-10-02 22:30 25,088 --a------ C:\WINDOWS\system32\defrag.exe
2006-10-02 22:30 25,088 --a------ C:\WINDOWS\system32\at.exe
2006-10-02 22:30 243,200 --a------ C:\WINDOWS\system32\es.dll
2006-10-02 22:30 24,576 --a------ C:\WINDOWS\system32\dbmsrpcn.dll
2006-10-02 22:30 24,576 --a------ C:\WINDOWS\system32\davclnt.dll
2006-10-02 22:30 239,104 --a------ C:\WINDOWS\system32\dsquery.dll
2006-10-02 22:30 23,552 --a------ C:\WINDOWS\system32\ipxroute.exe
2006-10-02 22:30 23,552 --a------ C:\WINDOWS\system32\dpmodemx.dll
2006-10-02 22:30 23,552 --a------ C:\WINDOWS\system32\dmserver.dll
2006-10-02 22:30 23,040 --a------ C:\WINDOWS\system32\ersvc.dll
2006-10-02 22:30 229,888 --a------ C:\WINDOWS\system32\dplayx.dll
2006-10-02 22:30 229,376 --a------ C:\WINDOWS\system32\compstui.dll
2006-10-02 22:30 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2006-10-02 22:30 224,768 --a------ C:\WINDOWS\system32\dmadmin.exe
2006-10-02 22:30 216,576 --a------ C:\WINDOWS\system32\ieaksie.dll
2006-10-02 22:30 212,480 --a------ C:\WINDOWS\system32\dpvoice.dll
2006-10-02 22:30 21,504 --a------ C:\WINDOWS\system32\feclient.dll
2006-10-02 22:30 21,504 --a------ C:\WINDOWS\system32\dpvacm.dll
2006-10-02 22:30 200,704 --a------ C:\WINDOWS\system32\dmdskmgr.dll
2006-10-02 22:30 20,992 --a------ C:\WINDOWS\system32\hid.dll
2006-10-02 22:30 20,992 --a------ C:\WINDOWS\system32\fontview.exe
2006-10-02 22:30 20,480 --a------ C:\WINDOWS\system32\cliconfg.exe
2006-10-02 22:30 2,067,968 --a------ C:\WINDOWS\system32\cdosys.dll
2006-10-02 22:30 194,560 --a------ C:\WINDOWS\system32\certcli.dll
2006-10-02 22:30 194,048 --a------ C:\WINDOWS\system32\activeds.dll
2006-10-02 22:30 193,024 --a------ C:\WINDOWS\system32\eudcedit.exe
2006-10-02 22:30 19,456 --a------ C:\WINDOWS\system32\dswave.dll
2006-10-02 22:30 185,344 --a------ C:\WINDOWS\system32\cmprops.dll
2006-10-02 22:30 183,808 --a------ C:\WINDOWS\system32\accwiz.exe
2006-10-02 22:30 183,296 --a------ C:\WINDOWS\system32\els.dll
2006-10-02 22:30 182,784 --a------ C:\WINDOWS\system32\ipsecsvc.dll
2006-10-02 22:30 181,760 --a------ C:\WINDOWS\system32\dsdmo.dll
2006-10-02 22:30 181,760 --a------ C:\WINDOWS\system32\dinput8.dll
2006-10-02 22:30 181,248 --a------ C:\WINDOWS\system32\dmime.dll
2006-10-02 22:30 180,224 --a------ C:\WINDOWS\system32\dwwin.exe
2006-10-02 22:30 18,432 --a------ C:\WINDOWS\system32\dpnsvr.exe
2006-10-02 22:30 175,616 --a------ C:\WINDOWS\system32\adsldp.dll
2006-10-02 22:30 17,920 --a------ C:\WINDOWS\system32\dvdupgrd.exe
2006-10-02 22:30 17,408 --a------ C:\WINDOWS\system32\bidispl.dll
2006-10-02 22:30 17,408 --a------ C:\WINDOWS\system32\alrsvc.dll
2006-10-02 22:30 163,840 --a------ C:\WINDOWS\system32\diskpart.exe
2006-10-02 22:30 163,840 --a------ C:\WINDOWS\system32\credui.dll
2006-10-02 22:30 16,896 --a------ C:\WINDOWS\system32\cfgmgr32.dll
2006-10-02 22:30 16,384 --a------ C:\WINDOWS\system32\ds32gt.dll
2006-10-02 22:30 159,232 --a------ C:\WINDOWS\system32\dinput.dll
2006-10-02 22:30 159,232 --a------ C:\WINDOWS\system32\cewmdm.dll
2006-10-02 22:30 155,136 --a------ C:\WINDOWS\system32\itircl.dll
2006-10-02 22:30 150,528 --a------ C:\WINDOWS\system32\keymgr.dll
2006-10-02 22:30 150,016 --a------ C:\WINDOWS\system32\imapi.exe
2006-10-02 22:30 15,872 --a------ C:\WINDOWS\system32\inetppui.dll
2006-10-02 22:30 15,872 --a------ C:\WINDOWS\system32\dmremote.exe
2006-10-02 22:30 15,872 --a------ C:\WINDOWS\system32\cmcfg32.dll
2006-10-02 22:30 15,360 --a------ C:\WINDOWS\system32\ctfmon.exe
2006-10-02 22:30 147,456 --a------ C:\WINDOWS\system32\initpki.dll
2006-10-02 22:30 146,432 --a------ C:\WINDOWS\regedit.exe
2006-10-02 22:30 144,896 --a------ C:\WINDOWS\system32\hotplug.dll
2006-10-02 22:30 143,360 --a------ C:\WINDOWS\system32\adsldpc.dll
2006-10-02 22:30 142,336 --a------ C:\WINDOWS\system32\dsprop.dll
2006-10-02 22:30 14,336 --a------ C:\WINDOWS\system32\drprov.dll
2006-10-02 22:30 139,264 --a------ C:\WINDOWS\system32\ieakeng.dll
2006-10-02 22:30 137,216 --a------ C:\WINDOWS\system32\itss.dll
2006-10-02 22:30 137,216 --a------ C:\WINDOWS\system32\dssenh.dll
2006-10-02 22:30 135,680 --a------ C:\WINDOWS\system32\ifmon.dll
2006-10-02 22:30 126,976 --a------ C:\WINDOWS\system32\apphelp.dll
2006-10-02 22:30 123,904 --a------ C:\WINDOWS\system32\dfrgui.dll
2006-10-02 22:30 123,392 --a------ C:\WINDOWS\system32\input.dll
2006-10-02 22:30 122,880 --a------ C:\WINDOWS\system32\glu32.dll
2006-10-02 22:30 120,832 --a------ C:\WINDOWS\system32\idq.dll
2006-10-02 22:30 119,808 --a------ C:\WINDOWS\system32\iasrad.dll
2006-10-02 22:30 116,736 --a------ C:\WINDOWS\system32\dpvvox.dll
2006-10-02 22:30 114,688 --a------ C:\WINDOWS\system32\iexpress.exe
2006-10-02 22:30 114,688 --a------ C:\WINDOWS\system32\aclui.dll
2006-10-02 22:30 113,152 --a------ C:\WINDOWS\system32\dsuiext.dll
2006-10-02 22:30 111,104 --a------ C:\WINDOWS\system32\dgnet.dll
2006-10-02 22:30 110,592 --a------ C:\WINDOWS\system32\dbnetlib.dll
2006-10-02 22:30 110,080 --a------ C:\WINDOWS\system32\imm32.dll
2006-10-02 22:30 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2006-10-02 22:30 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2006-10-02 22:30 11,264 --a------ C:\WINDOWS\system32\autolfn.exe
2006-10-02 22:30 11,264 --a------ C:\WINDOWS\system32\atmadm.exe
2006-10-02 22:30 105,984 --a------ C:\WINDOWS\system32\dmstyle.dll
2006-10-02 22:30 104,448 --a------ C:\WINDOWS\system32\dmusic.dll
2006-10-02 22:30 103,424 --a------ C:\WINDOWS\system32\dmsynth.dll
2006-10-02 22:30 102,912 --a------ C:\WINDOWS\system32\clipbrd.exe
2006-10-02 22:30 101,888 --a------ C:\WINDOWS\system32\cscdll.dll
2006-10-02 22:30 101,888 --a------ C:\WINDOWS\system32\actxprxy.dll
2006-10-02 22:30 100,352 --a------ C:\WINDOWS\system32\6to4svc.dll
2006-10-02 22:30 10,752 --a------ C:\WINDOWS\system32\dumprep.exe
2006-10-02 22:30 10,752 --a------ C:\WINDOWS\hh.exe
2006-10-02 22:30 1,298,432 --a------ C:\WINDOWS\system32\dxdiag.exe
2006-10-02 22:30 1,294,336 --a------ C:\WINDOWS\system32\dsound3d.dll
2006-10-02 22:30 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2006-10-02 22:30 1,227,264 --a------ C:\WINDOWS\system32\dx8vb.dll
2006-10-02 22:30 1,179,648 --a------ C:\WINDOWS\system32\d3d8.dll
2006-10-02 22:30 1,082,368 --a------ C:\WINDOWS\system32\esent.dll
2006-10-02 22:30 1,032,192 --a------ C:\WINDOWS\explorer.exe
2006-10-02 22:29 994,304 --a------ C:\WINDOWS\system32\msgina.dll
2006-10-02 22:29 99,328 --a------ C:\WINDOWS\system32\winscard.dll
2006-10-02 22:29 984,576 --a------ C:\WINDOWS\system32\syssetup.dll
2006-10-02 22:29 983,552 --a------ C:\WINDOWS\system32\setupapi.dll
2006-10-02 22:29 98,304 --a------ C:\WINDOWS\system32\slbiop.dll
2006-10-02 22:29 97,280 --a------ C:\WINDOWS\system32\loadperf.dll
2006-10-02 22:29 96,768 --a------ C:\WINDOWS\system32\srvsvc.dll
2006-10-02 22:29 96,768 --a------ C:\WINDOWS\system32\psbase.dll
2006-10-02 22:29 96,256 --a------ C:\WINDOWS\system32\occache.dll
2006-10-02 22:29 96,256 --a------ C:\WINDOWS\system32\drivers\scsiport.sys
2006-10-02 22:29 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2006-10-02 22:29 95,744 --a------ C:\WINDOWS\system32\scardsvr.exe
2006-10-02 22:29 95,360 --a------ C:\WINDOWS\system32\drivers\atapi.sys
2006-10-02 22:29 94,208 --a------ C:\WINDOWS\system32\odbcint.dll
2006-10-02 22:29 93,696 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2006-10-02 22:29 92,672 --a------ C:\WINDOWS\system32\wlnotify.dll
2006-10-02 22:29 92,224 --a------ C:\WINDOWS\system32\krnl386.exe
2006-10-02 22:29 92,168 --a------ C:\WINDOWS\system32\rdpdd.dll
2006-10-02 22:29 92,032 --a------ C:\WINDOWS\system32\drivers\ksecdd.sys
2006-10-02 22:29 91,776 --a------ C:\WINDOWS\system32\drivers\ndiswan.sys
2006-10-02 22:29 91,648 --a------ C:\WINDOWS\system32\xactsrv.dll
2006-10-02 22:29 91,136 --a------ C:\WINDOWS\system32\ntprint.dll
2006-10-02 22:29 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2006-10-02 22:29 90,624 --a------ C:\WINDOWS\system32\trkwks.dll
2006-10-02 22:29 90,624 --a------ C:\WINDOWS\system32\mydocs.dll
2006-10-02 22:29 9,216 --a------ C:\WINDOWS\system32\scrnsave.scr
2006-10-02 22:29 89,600 --a------ C:\WINDOWS\system32\smlogsvc.exe
2006-10-02 22:29 89,088 --a------ C:\WINDOWS\system32\rasauto.dll
2006-10-02 22:29 88,448 --a------ C:\WINDOWS\system32\drivers\nwlnkipx.sys
2006-10-02 22:29 875,008 --a------ C:\WINDOWS\system32\netplwiz.dll
2006-10-02 22:29 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2006-10-02 22:29 87,040 --a------ C:\WINDOWS\system32\mprapi.dll
2006-10-02 22:29 86,016 --a------ C:\WINDOWS\system32\netsh.exe
2006-10-02 22:29 86,016 --a------ C:\WINDOWS\system32\msapsspc.dll
2006-10-02 22:29 858,624 --a------ C:\WINDOWS\system32\tapi3.dll
2006-10-02 22:29 85,504 --a------ C:\WINDOWS\system32\makecab.exe
2006-10-02 22:29 84,480 --a------ C:\WINDOWS\system32\mciavi32.dll
2006-10-02 22:29 831,519 --a------ C:\WINDOWS\system32\mswdat10.dll
2006-10-02 22:29 83,456 --a------ C:\WINDOWS\system32\olepro32.dll
2006-10-02 22:29 82,944 --a------ C:\WINDOWS\system32\ws2_32.dll
2006-10-02 22:29 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2006-10-02 22:29 815,104 --a------ C:\WINDOWS\system32\mmc.exe
2006-10-02 22:29 809,984 --a------ C:\WINDOWS\system32\wmvdmod.dll
2006-10-02 22:29 80,896 --a------ C:\WINDOWS\system32\netui0.dll
2006-10-02 22:29 80,128 --a------ C:\WINDOWS\system32\drivers\parport.sys
2006-10-02 22:29 8,192 --a------ C:\WINDOWS\system32\ntlsapi.dll
2006-10-02 22:29 799,744 --a------ C:\WINDOWS\system32\drivers\dmboot.sys
2006-10-02 22:29 79,744 --a------ C:\WINDOWS\system32\drivers\videoprt.sys
2006-10-02 22:29 77,824 --a------ C:\WINDOWS\system32\shrpubw.exe
2006-10-02 22:29 77,312 --a------ C:\WINDOWS\system32\sdbinst.exe
2006-10-02 22:29 77,312 --a------ C:\WINDOWS\system32\rtcshare.exe
2006-10-02 22:29 764,928 --a------ C:\WINDOWS\system32\winntbbu.dll
2006-10-02 22:29 76,800 --a------ C:\WINDOWS\system32\nslookup.exe
2006-10-02 22:29 759,296 --a------ C:\WINDOWS\system32\wmsdmod.dll
2006-10-02 22:29 75,776 --a------ C:\WINDOWS\system32\wiascr.dll
2006-10-02 22:29 75,776 --a------ C:\WINDOWS\system32\telnet.exe
2006-10-02 22:29 75,264 --a------ C:\WINDOWS\system32\locator.exe
2006-10-02 22:29 74,752 --a------ C:\WINDOWS\system32\storprop.dll
2006-10-02 22:29 74,752 --a------ C:\WINDOWS\system32\spoolss.dll
2006-10-02 22:29 74,752 --a------ C:\WINDOWS\system32\drivers\ipsec.sys
2006-10-02 22:29 74,240 --a------ C:\WINDOWS\system32\usbui.dll
2006-10-02 22:29 74,240 --a------ C:\WINDOWS\system32\unimdmat.dll
2006-10-02 22:29 74,240 --a------ C:\WINDOWS\system32\mscms.dll
2006-10-02 22:29 733,696 --a------ C:\WINDOWS\system32\qedwipes.dll
2006-10-02 22:29 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2006-10-02 22:29 723,456 --a------ C:\WINDOWS\system32\userenv.dll
2006-10-02 22:29 721,920 --a------ C:\WINDOWS\system32\lsasrv.dll
2006-10-02 22:29 72,704 --a------ C:\WINDOWS\system32\msw3prt.dll
2006-10-02 22:29 72,704 --a------ C:\WINDOWS\system32\magnify.exe
2006-10-02 22:29 713,728 --a------ C:\WINDOWS\system32\opengl32.dll
2006-10-02 22:29 713,216 --a------ C:\WINDOWS\system32\sxs.dll
2006-10-02 22:29 71,680 --a------ C:\WINDOWS\system32\ssdpsrv.dll
2006-10-02 22:29 71,680 --a------ C:\WINDOWS\system32\msacm32.dll
2006-10-02 22:29 71,552 --a------ C:\WINDOWS\system32\drivers\bridge.sys
2006-10-02 22:29 71,040 --a------ C:\WINDOWS\system32\drivers\dxg.sys
2006-10-02 22:29 708,096 --a------ C:\WINDOWS\system32\ntdll.dll
2006-10-02 22:29 704,512 --a------ C:\WINDOWS\system32\ss3dfo.scr
2006-10-02 22:29 701,440 --a------ C:\WINDOWS\system32\msxml2.dll
2006-10-02 22:29 70,656 --a------ C:\WINDOWS\system32\mmcbase.dll
2006-10-02 22:29 70,144 --a------ C:\WINDOWS\system32\sigverif.exe
2006-10-02 22:29 7,552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2006-10-02 22:29 69,632 --a------ C:\WINDOWS\system32\scarddlg.dll
2006-10-02 22:29 69,632 --a------ C:\WINDOWS\system32\raschap.dll
2006-10-02 22:29 69,632 --a------ C:\WINDOWS\system32\odbcconf.exe
2006-10-02 22:29 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2006-10-02 22:29 69,120 --a------ C:\WINDOWS\system32\notepad.exe
2006-10-02 22:29 69,120 --a------ C:\WINDOWS\system32\msctfp.dll
2006-10-02 22:29 69,120 --a------ C:\WINDOWS\system32\drivers\psched.sys
2006-10-02 22:29 69,120 --a------ C:\WINDOWS\notepad.exe
2006-10-02 22:29 68,768 --a------ C:\WINDOWS\system32\mmsystem.dll
2006-10-02 22:29 68,224 --a------ C:\WINDOWS\system32\drivers\pci.sys
2006-10-02 22:29 68,096 --a------ C:\WINDOWS\system32\webclnt.dll
2006-10-02 22:29 68,096 --a------ C:\WINDOWS\system32\shgina.dll
2006-10-02 22:29 679,936 --a------ C:\WINDOWS\system32\sstext3d.scr
2006-10-02 22:29 670,720 --a------ C:\WINDOWS\system32\wmadmoe.dll
2006-10-02 22:29 67,584 --a------ C:\WINDOWS\system32\sti.dll
2006-10-02 22:29 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2006-10-02 22:29 67,584 --a------ C:\WINDOWS\system32\osuninst.dll
2006-10-02 22:29 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2006-10-02 22:29 67,072 --a------ C:\WINDOWS\system32\ntdsapi.dll
2006-10-02 22:29 66,560 --a------ C:\WINDOWS\system32\mtxclu.dll
2006-10-02 22:29 66,176 --a------ C:\WINDOWS\system32\drivers\udfs.sys
2006-10-02 22:29 657,920 --a------ C:\WINDOWS\system32\rasdlg.dll
2006-10-02 22:29 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2006-10-02 22:29 65,536 --a------ C:\WINDOWS\system32\wshext.dll
2006-10-02 22:29 65,536 --a------ C:\WINDOWS\system32\wextract.exe
2006-10-02 22:29 65,536 --a------ C:\WINDOWS\system32\shimeng.dll
2006-10-02 22:29 65,536 --a------ C:\WINDOWS\system32\odbccu32.dll
2006-10-02 22:29 65,536 --a------ C:\WINDOWS\system32\odbccr32.dll
2006-10-02 22:29 64,896 --a------ C:\WINDOWS\system32\drivers\serial.sys
2006-10-02 22:29 64,000 --a------ C:\WINDOWS\system32\samlib.dll
2006-10-02 22:29 63,744 --a------ C:\WINDOWS\system32\drivers\mf.sys
2006-10-02 22:29 63,744 --a------ C:\WINDOWS\system32\drivers\cdfs.sys
2006-10-02 22:29 622,080 --a------ C:\WINDOWS\system32\netcfgx.dll
2006-10-02 22:29 62,976 --a------ C:\WINDOWS\system32\pautoenr.dll
2006-10-02 22:29 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2006-10-02 22:29 616,960 --a------ C:\WINDOWS\system32\advapi32.dll
2006-10-02 22:29 614,429 --a------ C:\WINDOWS\system32\mswstr10.dll
2006-10-02 22:29 611,328 --a------ C:\WINDOWS\system32\comctl32.dll
2006-10-02 22:29 610,304 --a------ C:\WINDOWS\system32\sspipes.scr
2006-10-02 22:29 61,824 --a------ C:\WINDOWS\system32\drivers\nic1394.sys
2006-10-02 22:29 61,440 --a------ C:\WINDOWS\system32\rasman.dll
2006-10-02 22:29 61,440 --a------ C:\WINDOWS\system32\msvcrt40.dll
2006-10-02 22:29 602,624 --a------ C:\WINDOWS\system32\autoconv.exe
2006-10-02 22:29 60,928 --a------ C:\WINDOWS\system32\miglibnt.dll
2006-10-02 22:29 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2006-10-02 22:29 60,800 --a------ C:\WINDOWS\system32\drivers\arp1394.sys
2006-10-02 22:29 60,416 --a------ C:\WINDOWS\system32\remotepg.dll
2006-10-02 22:29 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2006-10-02 22:29 6,656 --a------ C:\WINDOWS\system32\sensapi.dll
2006-10-02 22:29 6,656 --a------ C:\WINDOWS\system32\msidle.dll
2006-10-02 22:29 6,656 --a------ C:\WINDOWS\system32\laprxy.dll
2006-10-02 22:29 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2006-10-02 22:29 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2006-10-02 22:29 59,904 --a------ C:\WINDOWS\system32\regsvc.dll
2006-10-02 22:29 59,904 --a------ C:\WINDOWS\system32\mpr.dll
2006-10-02 22:29 59,904 --a------ C:\WINDOWS\system32\drivers\atmarpc.sys
2006-10-02 22:29 589,312 --a------ C:\WINDOWS\system32\wiashext.dll
2006-10-02 22:29 588,800 --a------ C:\WINDOWS\system32\autochk.exe
2006-10-02 22:29 586,240 --a------ C:\WINDOWS\system32\mlang.dll
2006-10-02 22:29 581,120 --a------ C:\WINDOWS\system32\rpcrt4.dll
2006-10-02 22:29 58,880 --a------ C:\WINDOWS\system32\resutils.dll
2006-10-02 22:29 58,880 --a------ C:\WINDOWS\system32\rastapi.dll
2006-10-02 22:29 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2006-10-02 22:29 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2006-10-02 22:29 58,368 --a------ C:\WINDOWS\system32\packager.exe
2006-10-02 22:29 577,024 --a------ C:\WINDOWS\system32\user32.dll
2006-10-02 22:29 574,592 --a------ C:\WINDOWS\system32\drivers\ntfs.sys
2006-10-02 22:29 57,856 --a------ C:\WINDOWS\system32\synceng.dll
2006-10-02 22:29 57,856 --a------ C:\WINDOWS\system32\spoolsv.exe
2006-10-02 22:29 57,600 --a------ C:\WINDOWS\system32\drivers\usbhub.sys
2006-10-02 22:29 57,472 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2006-10-02 22:29 57,344 --a------ C:\WINDOWS\system32\msasn1.dll
2006-10-02 22:29 562,176 --a------ C:\WINDOWS\system32\qedit.dll
2006-10-02 22:29 560,640 --a------ C:\WINDOWS\system32\printui.dll
2006-10-02 22:29 56,832 --a------ C:\WINDOWS\system32\rasphone.exe
2006-10-02 22:29 56,832 --a------ C:\WINDOWS\system32\mshtmler.dll
2006-10-02 22:29 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2006-10-02 22:29 553,472 --a------ C:\WINDOWS\system32\oleaut32.dll
2006-10-02 22:29 552,989 --a------ C:\WINDOWS\system32\msrepl40.dll
2006-10-02 22:29 55,936 --a------ C:\WINDOWS\system32\drivers\atmlane.sys
2006-10-02 22:29 55,808 --a------ C:\WINDOWS\system32\secur32.dll
2006-10-02 22:29 55,296 --a------ C:\WINDOWS\system32\sendmail.dll
2006-10-02 22:29 549,376 --a------ C:\WINDOWS\system32\shdoclc.dll
2006-10-02 22:29 54,784 --a------ C:\WINDOWS\system32\npptools.dll
2006-10-02 22:29 54,784 --a------ C:\WINDOWS\system32\msvcirt.dll
2006-10-02 22:29 538,624 --a------ C:\WINDOWS\system32\spider.exe
2006-10-02 22:29 53,760 --a------ C:\WINDOWS\system32\winsta.dll
2006-10-02 22:29 53,760 --a------ C:\WINDOWS\system32\narrator.exe
2006-10-02 22:29 53,279 --a------ C:\WINDOWS\system32\odbcji32.dll
2006-10-02 22:29 53,279 --a------ C:\WINDOWS\system32\msjter40.dll
2006-10-02 22:29 52,864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2006-10-02 22:29 52,736 --a------ C:\WINDOWS\system32\drivers\i8042prt.sys
2006-10-02 22:29 52,352 --a------ C:\WINDOWS\system32\drivers\volsnap.sys
2006-10-02 22:29 514,560 --a------ C:\WINDOWS\system32\logonui.exe
2006-10-02 22:29 512,029 --a------ C:\WINDOWS\system32\msexch40.dll
2006-10-02 22:29 51,712 --a------ C:\WINDOWS\system32\wzcsapi.dll
2006-10-02 22:29 51,712 --a------ C:\WINDOWS\system32\vdmredir.dll
2006-10-02 22:29 51,712 --a------ C:\WINDOWS\system32\msident.dll
2006-10-02 22:29 51,328 --a------ C:\WINDOWS\system32\drivers\rasl2tp.sys
2006-10-02 22:29 506,368 --a------ C:\WINDOWS\system32\msxml.dll
2006-10-02 22:29 502,272 --a------ C:\WINDOWS\system32\winlogon.exe
2006-10-02 22:29 50,688 --a------ C:\WINDOWS\system32\wstdecod.dll
2006-10-02 22:29 50,688 --a------ C:\WINDOWS\system32\smss.exe
2006-10-02 22:29 50,688 --a------ C:\WINDOWS\system32\mmcshext.dll
2006-10-02 22:29 50,176 --a------ C:\WINDOWS\system32\utilman.exe
2006-10-02 22:29 50,176 --a------ C:\WINDOWS\system32\reg.exe
2006-10-02 22:29 50,176 --a------ C:\WINDOWS\system32\proquota.exe
2006-10-02 22:29 5,632 --a------ C:\WINDOWS\system32\wmi.dll
2006-10-02 22:29 5,632 --a------ C:\WINDOWS\system32\winver.exe
2006-10-02 22:29 5,632 --a------ C:\WINDOWS\system32\security.dll
2006-10-02 22:29 5,504 --a------ C:\WINDOWS\system32\drivers\intelide.sys
2006-10-02 22:29 5,376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2006-10-02 22:29 5,120 --a------ C:\WINDOWS\system32\sfc.dll
2006-10-02 22:29 49,664 --a------ C:\WINDOWS\system32\regapi.dll
2006-10-02 22:29 49,664 --a------ C:\WINDOWS\system32\drivers\classpnp.sys
2006-10-02 22:29 49,536 --a------ C:\WINDOWS\system32\drivers\cdrom.sys
2006-10-02 22:29 49,152 --a------ C:\WINDOWS\system32\wdigest.dll
2006-10-02 22:29 488,448 --a------ C:\WINDOWS\system32\ntmsmgr.dll
2006-10-02 22:29 48,640 --a------ C:\WINDOWS\system32\drivers\stream.sys
2006-10-02 22:29 48,384 --a------ C:\WINDOWS\system32\drivers\raspptp.sys
2006-10-02 22:29 48,128 --a------ C:\WINDOWS\system32\msprivs.dll
2006-10-02 22:29 47,104 --a------ C:\WINDOWS\system32\ssmypics.scr
2006-10-02 22:29 463,360 --a------ C:\WINDOWS\system32\wiadefui.dll
2006-10-02 22:29 453,120 --a------ C:\WINDOWS\system32\drivers\mrxsmb.sys
2006-10-02 22:29 45,568 --a------ C:\WINDOWS\system32\tcpmonui.dll
2006-10-02 22:29 45,568 --a------ C:\WINDOWS\system32\tcpmon.dll
2006-10-02 22:29 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2006-10-02 22:29 442,368 --a------ C:\WINDOWS\system32\sqlsrv32.dll
2006-10-02 22:29 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2006-10-02 22:29 44,032 --a------ C:\WINDOWS\system32\rtutils.dll
2006-10-02 22:29 438,272 --a------ C:\WINDOWS\system32\shimgvw.dll
2006-10-02 22:29 435,200 --a------ C:\WINDOWS\system32\ntmssvc.dll
2006-10-02 22:29 433,664 --a------ C:\WINDOWS\system32\wiaacmgr.exe
2006-10-02 22:29 431,616 --a------ C:\WINDOWS\system32\riched20.dll
2006-10-02 22:29 430,592 --a------ C:\WINDOWS\system32\vssapi.dll
2006-10-02 22:29 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2006-10-02 22:29 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2006-10-02 22:29 43,520 --a------ C:\WINDOWS\system32\pstorec.dll
2006-10-02 22:29 43,520 --a------ C:\WINDOWS\system32\ntlanman.dll
2006-10-02 22:29 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2006-10-02 22:29 423,936 --a------ C:\WINDOWS\system32\licdll.dll
2006-10-02 22:29 421,919 --a------ C:\WINDOWS\system32\msrd2x40.dll
2006-10-02 22:29 42,496 --a------ C:\WINDOWS\system32\wsnmp32.dll
2006-10-02 22:29 42,496 --a------ C:\WINDOWS\system32\shmgrate.exe
2006-10-02 22:29 42,496 --a------ C:\WINDOWS\system32\net.exe
2006-10-02 22:29 42,496 --a------ C:\WINDOWS\system32\ftp.exe
2006-10-02 22:29 42,496 --a------ C:\WINDOWS\system32\drivers\p3.sys
2006-10-02 22:29 42,240 --a------ C:\WINDOWS\system32\drivers\mountmgr.sys
2006-10-02 22:29 419,840 --a------ C:\WINDOWS\system32\ntvdm.exe
2006-10-02 22:29 417,792 --a------ C:\WINDOWS\system32\vbscript.dll
2006-10-02 22:29 415,744 --a------ C:\WINDOWS\system32\samsrv.dll
2006-10-02 22:29 413,696 --a------ C:\WINDOWS\system32\msvcp60.dll
2006-10-02 22:29 41,856 --a------ C:\WINDOWS\system32\drivers\imapi.sys
2006-10-02 22:29 41,472 --a------ C:\WINDOWS\system32\drivers\raspppoe.sys
2006-10-02 22:29 408,064 --a------ C:\WINDOWS\system32\wmadmod.dll
2006-10-02 22:29 407,552 --a------ C:\WINDOWS\system32\mstsc.exe
2006-10-02 22:29 407,040 --a------ C:\WINDOWS\system32\netlogon.dll
2006-10-02 22:29 406,528 --a------ C:\WINDOWS\system32\usp10.dll
2006-10-02 22:29 40,960 --a------ C:\WINDOWS\system32\ntmsapi.dll
2006-10-02 22:29 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2006-10-02 22:29 40,320 --a------ C:\WINDOWS\system32\drivers\nmnt.sys
2006-10-02 22:29 4,992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2006-10-02 22:29 4,608 --a------ C:\WINDOWS\system32\msimg32.dll
2006-10-02 22:29 4,352 --a------ C:\WINDOWS\system32\drivers\swenum.sys
2006-10-02 22:29 4,126 --a------ C:\WINDOWS\system32\msdxmlc.dll
2006-10-02 22:29 4,096 --a------ C:\WINDOWS\system32\nddeapir.exe
2006-10-02 22:29 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2006-10-02 22:29 399,872 --a------ C:\WINDOWS\system32\lmrt.dll
2006-10-02 22:29 397,824 --a------ C:\WINDOWS\system32\rpcss.dll
2006-10-02 22:29 397,824 --a------ C:\WINDOWS\system32\regwizc.dll
2006-10-02 22:29 393,216 --a------ C:\WINDOWS\system32\ssflwbox.scr
2006-10-02 22:29 39,936 --a------ C:\WINDOWS\system32\rshx32.dll
2006-10-02 22:29 39,936 --a------ C:\WINDOWS\system32\perfctrs.dll
2006-10-02 22:29 39,936 --a------ C:\WINDOWS\system32\mf3216.dll
2006-10-02 22:29 388,608 --a------ C:\WINDOWS\system32\cmd.exe
2006-10-02 22:29 385,536 --a------ C:\WINDOWS\system32\themeui.dll
2006-10-02 22:29 385,024 --a------ C:\WINDOWS\system32\qdvd.dll
2006-10-02 22:29 38,912 --a------ C:\WINDOWS\system32\sens.dll
2006-10-02 22:29 378,368 --a------ C:\WINDOWS\system32\wzcdlg.dll
2006-10-02 22:29 37,888 --a------ C:\WINDOWS\system32\url.dll
2006-10-02 22:29 363,008 --a------ C:\WINDOWS\system32\smlogcfg.dll
2006-10-02 22:29 36,992 --a------ C:\WINDOWS\system32\drivers\amdk6.sys
2006-10-02 22:29 36,864 --a------ C:\WINDOWS\system32\netstat.exe
2006-10-02 22:29 36,864 --a------ C:\WINDOWS\system32\mscpxl32.dll
2006-10-02 22:29 36,480 --a------ C:\WINDOWS\system32\drivers\crusoe.sys
2006-10-02 22:29 36,352 --a------ C:\WINDOWS\system32\ncobjapi.dll
2006-10-02 22:29 36,352 --a------ C:\WINDOWS\system32\drivers\disk.sys
2006-10-02 22:29 36,224 --a------ C:\WINDOWS\system32\drivers\hidclass.sys
2006-10-02 22:29 359,936 --a------ C:\WINDOWS\system32\wzcsvc.dll
2006-10-02 22:29 359,808 --a------ C:\WINDOWS\system32\drivers\tcpip.sys
2006-10-02 22:29 358,976 --a------ C:\WINDOWS\system32\msjetoledb40.dll
2006-10-02 22:29 358,400 --a------ C:\WINDOWS\system32\termmgr.dll
2006-10-02 22:29 356,352 --a------ C:\WINDOWS\system32\msscp.dll
2006-10-02 22:29 35,840 --a------ C:\WINDOWS\system32\umandlg.dll
2006-10-02 22:29 35,840 --a------ C:\WINDOWS\system32\rcimlby.exe
2006-10-02 22:29 35,648 --a------ C:\WINDOWS\system32\ntio411.sys
2006-10-02 22:29 35,424 --a------ C:\WINDOWS\system32\ntio412.sys
2006-10-02 22:29 35,328 --a------ C:\WINDOWS\system32\pid.dll
2006-10-02 22:29 35,328 --a------ C:\WINDOWS\system32\mciqtz32.dll
2006-10-02 22:29 35,328 --a------ C:\WINDOWS\system32\drivers\processr.sys
2006-10-02 22:29 35,072 --a------ C:\WINDOWS\system32\drivers\msgpc.sys
2006-10-02 22:29 348,189 --a------ C:\WINDOWS\system32\msxbde40.dll
2006-10-02 22:29 348,189 --a------ C:\WINDOWS\system32\mspbde40.dll
2006-10-02 22:29 347,136 --a------ C:\WINDOWS\system32\tourstart.exe
2006-10-02 22:29 347,136 --a------ C:\WINDOWS\system32\hypertrm.dll
2006-10-02 22:29 343,040 --a------ C:\WINDOWS\system32\msvcrt.dll
2006-10-02 22:29 343,040 --a------ C:\WINDOWS\system32\mspaint.exe
2006-10-02 22:29 341,504 --a------ C:\WINDOWS\system32\localspl.dll
2006-10-02 22:29 34,816 --a------ C:\WINDOWS\system32\ssdpapi.dll
2006-10-02 22:29 34,816 --a------ C:\WINDOWS\system32\perfproc.dll
2006-10-02 22:29 34,560 --a------ C:\WINDOWS\system32\ntio804.sys
2006-10-02 22:29 34,560 --a------ C:\WINDOWS\system32\ntio404.sys
2006-10-02 22:29 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2006-10-02 22:29 34,560 --a------ C:\WINDOWS\system32\drivers\wanarp.sys
2006-10-02 22:29 34,560 --a------ C:\WINDOWS\system32\drivers\netbios.sys
2006-10-02 22:29 34,304 --a------ C:\WINDOWS\system32\pstorsvc.dll
2006-10-02 22:29 337,920 --a------ C:\WINDOWS\system32\zipfldr.dll
2006-10-02 22:29 333,312 --a------ C:\WINDOWS\system32\wiaservc.dll
2006-10-02 22:29 332,800 --a------ C:\WINDOWS\system32\drivers\srv.sys
2006-10-02 22:29 33,840 --a------ C:\WINDOWS\system32\ntio.sys
2006-10-02 22:29 33,792 --a------ C:\WINDOWS\system32\msgsvc.dll
2006-10-02 22:29 33,280 --a------ C:\WINDOWS\system32\rundll32.exe
2006-10-02 22:29 329,728 --a------ C:\WINDOWS\system32\netsetup.exe
2006-10-02 22:29 32,768 --a------ C:\WINDOWS\system32\winipsec.dll
2006-10-02 22:29 32,768 --a------ C:\WINDOWS\system32\odbcad32.exe
2006-10-02 22:29 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2006-10-02 22:29 32,768 --a------ C:\WINDOWS\system32\csrsrv.dll
2006-10-02 22:29 32,256 --a------ C:\WINDOWS\system32\wpnpinst.exe
2006-10-02 22:29 32,256 --a------ C:\WINDOWS\system32\wpabaln.exe
2006-10-02 22:29 319,517 --a------ C:\WINDOWS\system32\msexcl40.dll
2006-10-02 22:29 316,416 --a------ C:\WINDOWS\system32\untfs.dll
2006-10-02 22:29 315,423 --a------ C:\WINDOWS\system32\msrd3x40.dll
2006-10-02 22:29 313,856 --a------ C:\WINDOWS\system32\scesrv.dll
2006-10-02 22:29 31,744 --a------ C:\WINDOWS\system32\rtipxmib.dll
2006-10-02 22:29 31,232 --a------ C:\WINDOWS\system32\sethc.exe
2006-10-02 22:29 306,176 --a------ C:\WINDOWS\system32\slbcsp.dll
2006-10-02 22:29 303,616 --a------ C:\WINDOWS\system32\wmstream.dll
2006-10-02 22:29 30,848 --a------ C:\WINDOWS\system32\drivers\npfs.sys
2006-10-02 22:29 30,749 --a------ C:\WINDOWS\system32\vbajet32.dll
2006-10-02 22:29 30,720 --a------ C:\WINDOWS\system32\xcopy.exe
2006-10-02 22:29 30,208 --a------ C:\WINDOWS\system32\mspatcha.dll
2006-10-02 22:29 30,080 --a------ C:\WINDOWS\system32\drivers\rndismp.sys
2006-10-02 22:29 30,080 --a------ C:\WINDOWS\system32\drivers\modem.sys
2006-10-02 22:29 3,584 --a------ C:\WINDOWS\system32\msafd.dll
2006-10-02 22:29 3,338 --a------ C:\WINDOWS\system32\redir.exe
2006-10-02 22:29 295,424 --a------ C:\WINDOWS\system32\termsrv.dll
2006-10-02 22:29 294,400 --a------ C:\WINDOWS\system32\msctf.dll
2006-10-02 22:29 291,840 --a------ C:\WINDOWS\system32\winsrv.dll
2006-10-02 22:29 290,816 --a------ C:\WINDOWS\system32\msnsspc.dll
2006-10-02 22:29 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2006-10-02 22:29 29,184 --a------ C:\WINDOWS\system32\sendcmsg.dll
2006-10-02 22:29 29,184 --a------ C:\WINDOWS\system32\mshta.exe
2006-10-02 22:29 289,792 --a------ C:\WINDOWS\system32\vssvc.exe
2006-10-02 22:29 285,696 --a------ C:\WINDOWS\system32\objsel.dll
2006-10-02 22:29 283,648 --a------ C:\WINDOWS\system32\pdh.dll
2006-10-02 22:29 28,672 --a------ C:\WINDOWS\system32\wshcon.dll
2006-10-02 22:29 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2006-10-02 22:29 279,040 --a------ C:\WINDOWS\system32\qdv.dll
2006-10-02 22:29 278,559 --a------ C:\WINDOWS\system32\odbcjt32.dll
2006-10-02 22:29 276,992 --a------ C:\WINDOWS\system32\comdlg32.dll
2006-10-02 22:29 276,480 --a------ C:\WINDOWS\system32\webcheck.dll
2006-10-02 22:29 275,456 --a------ C:\WINDOWS\system32\ulib.dll
2006-10-02 22:29 274,944 --a------ C:\WINDOWS\system32\mstask.dll
2006-10-02 22:29 27,648 --a------ C:\WINDOWS\system32\shscrap.dll
2006-10-02 22:29 27,648 --a------ C:\WINDOWS\system32\profmap.dll
2006-10-02 22:29 27,392 --a------ C:\WINDOWS\system32\drivers\fdc.sys
2006-10-02 22:29 27,136 --a------ C:\WINDOWS\system32\wmdmlog.dll
2006-10-02 22:29 266,752 --a------ C:\WINDOWS\system32\oakley.dll
2006-10-02 22:29 264,192 --a------ C:\WINDOWS\system32\wow32.dll
2006-10-02 22:29 26,624 --a------ C:\WINDOWS\system32\perfdisk.dll
2006-10-02 22:29 26,496 --a------ C:\WINDOWS\system32\drivers\usbstor.sys
2006-10-02 22:29 26,112 --a------ C:\WINDOWS\system32\vdmdbg.dll
2006-10-02 22:29 26,112 --a------ C:\WINDOWS\system32\skeys.exe
2006-10-02 22:29 259,072 --a------ C:\WINDOWS\system32\msnetobj.dll
2006-10-02 22:29 258,077 --a------ C:\WINDOWS\system32\mstext40.dll
2006-10-02 22:29 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2006-10-02 22:29 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2006-10-02 22:29 25,600 --a------ C:\WINDOWS\system32\udhisapi.dll
2006-10-02 22:29 25,472 --a------ C:\WINDOWS\system32\drivers\sonydcam.sys
2006-10-02 22:29 25,088 --a------ C:\WINDOWS\system32\slayerxp.dll
2006-10-02 22:29 25,088 --a------ C:\WINDOWS\system32\shfolder.dll
2006-10-02 22:29 25,088 --a------ C:\WINDOWS\system32\perfos.dll
2006-10-02 22:29 25,088 --a------ C:\WINDOWS\system32\mslbui.dll
2006-10-02 22:29 25,088 --a------ C:\WINDOWS\system32\drivers\pciidex.sys
2006-10-02 22:29 249,856 --a------ C:\WINDOWS\system32\odbc32.dll
2006-10-02 22:29 249,344 --a------ C:\WINDOWS\system32\tapisrv.dll
2006-10-02 22:29 248,832 --a------ C:\WINDOWS\system32\newdev.dll
2006-10-02 22:29 248,832 --a------ C:\WINDOWS\system32\msieftp.dll
2006-10-02 22:29 246,302 --a------ C:\WINDOWS\system32\strmdll.dll
2006-10-02 22:29 245,760 --a------ C:\WINDOWS\system32\netui1.dll
2006-10-02 22:29 245,760 --a------ C:\WINDOWS\system32\mswmdm.dll
2006-10-02 22:29 245,248 --a------ C:\WINDOWS\system32\mswsock.dll
2006-10-02 22:29 241,693 --a------ C:\WINDOWS\system32\msjtes40.dll
2006-10-02 22:29 240,640 --a------ C:\WINDOWS\system32\mpg4dmod.dll
2006-10-02 22:29 24,960 --a------ C:\WINDOWS\system32\drivers\hidparse.sys
2006-10-02 22:29 24,576 --a------ C:\WINDOWS\system32\userinit.exe
2006-10-02 22:29 24,576 --a------ C:\WINDOWS\system32\odbcbcp.dll
2006-10-02 22:29 24,576 --a------ C:\WINDOWS\system32\drivers\kbdclass.sys
2006-10-02 22:29 239,616 --a------ C:\WINDOWS\system32\upnpui.dll
2006-10-02 22:29 239,104 --a------ C:\WINDOWS\system32\srrstr.dll
2006-10-02 22:29 237,568 --a------ C:\WINDOWS\system32\qasf.dll
2006-10-02 22:29 236,544 --a------ C:\WINDOWS\system32\rasapi32.dll
2006-10-02 22:29 230,400 --a------ C:\WINDOWS\system32\wmasf.dll
2006-10-02 22:29 23,552 --a------ C:\WINDOWS\system32\wmdmps.dll
2006-10-02 22:29 23,552 --a------ C:\WINDOWS\system32\mciwave.dll
2006-10-02 22:29 23,040 --a------ C:\WINDOWS\system32\setup.exe
2006-10-02 22:29 23,040 --a------ C:\WINDOWS\system32\psapi.dll
2006-10-02 22:29 23,040 --a------ C:\WINDOWS\system32\mciseq.dll
2006-10-02 22:29 23,040 --a------ C:\WINDOWS\system32\drivers\mouclass.sys
2006-10-02 22:29 223,616 --a------ C:\WINDOWS\system32\drivers\tcpip6.sys
2006-10-02 22:29 221,696 --a------ C:\WINDOWS\system32\localsec.dll
2006-10-02 22:29 220,672 --a------ C:\WINDOWS\system32\logon.scr
2006-10-02 22:29 22,528 --a------ C:\WINDOWS\system32\wsock32.dll
2006-10-02 22:29 22,528 --a------ C:\WINDOWS\system32\mfcsubs.dll
2006-10-02 22:29 22,016 --a------ C:\WINDOWS\system32\lpk.dll
2006-10-02 22:29 22,016 --a------ C:\WINDOWS\system32\licmgr10.dll
2006-10-02 22:29 218,624 --a------ C:\WINDOWS\system32\uxtheme.dll
2006-10-02 22:29 216,064 --a------ C:\WINDOWS\system32\moricons.dll
2006-10-02 22:29 215,552 --a------ C:\WINDOWS\system32\osk.exe
2006-10-02 22:29 213,023 --a------ C:\WINDOWS\system32\msltus40.dll
2006-10-02 22:29 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2006-10-02 22:29 21,504 --a------ C:\WINDOWS\system32\rcp.exe
2006-10-02 22:29 209,408 --a------ C:\WINDOWS\system32\drivers\update.sys
2006-10-02 22:29 207,360 --a------ C:\WINDOWS\system32\mobsync.dll
2006-10-02 22:29 206,336 --a------ C:\WINDOWS\system32\rasppp.dll
2006-10-02 22:29 204,288 --a------ C:\WINDOWS\system32\mswebdvd.dll
2006-10-02 22:29 201,728 --a------ C:\WINDOWS\system32\mspmsp.dll
2006-10-02 22:29 20,992 --a------ C:\WINDOWS\system32\ssmarque.scr
2006-10-02 22:29 20,992 --a------ C:\WINDOWS\system32\sclgntfy.dll
2006-10-02 22:29 20,992 --a------ C:\WINDOWS\system32\drivers\vga.sys
2006-10-02 22:29 20,992 --a------ C:\WINDOWS\system32\drivers\ipinip.sys
2006-10-02 22:29 20,511 --a------ C:\WINDOWS\system32\odtext32.dll
2006-10-02 22:29 20,511 --a------ C:\WINDOWS\system32\oddbse32.dll
2006-10-02 22:29 20,510 --a------ C:\WINDOWS\system32\odpdx32.dll
2006-10-02 22:29 20,510 --a------ C:\WINDOWS\system32\odfox32.dll
2006-10-02 22:29 20,510 --a------ C:\WINDOWS\system32\odexl32.dll
2006-10-02 22:29 20,480 --a------ C:\WINDOWS\system32\wmpui.dll
2006-10-02 22:29 20,480 --a------ C:\WINDOWS\system32\wmpcore.dll
2006-10-02 22:29 20,480 --a------ C:\WINDOWS\system32\wmpcd.dll
2006-10-02 22:29 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2006-10-02 22:29 20,480 --a------ C:\WINDOWS\system32\msorc32r.dll
2006-10-02 22:29 20,480 --a------ C:\WINDOWS\system32\drivers\usbuhci.sys
2006-10-02 22:29 20,480 --a------ C:\WINDOWS\system32\drivers\flpydisk.sys
2006-10-02 22:29 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2006-10-02 22:29 2,940,928 --a------ C:\WINDOWS\system32\wmploc.dll
2006-10-02 22:29 2,179,328 --a------ C:\WINDOWS\system32\ntoskrnl.exe
2006-10-02 22:29 2,105,344 --a------ C:\WINDOWS\system32\wmvcore.dll
2006-10-02 22:29 2,056,832 --a------ C:\WINDOWS\system32\ntkrnlpa.exe
2006-10-02 22:29 197,632 --a------ C:\WINDOWS\system32\netman.dll
2006-10-02 22:29 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2006-10-02 22:29 195,072 --a------ C:\WINDOWS\system32\msutb.dll
2006-10-02 22:29 192,512 --a------ C:\WINDOWS\system32\qcap.dll
2006-10-02 22:29 191,488 --a------ C:\WINDOWS\system32\syncui.dll
2006-10-02 22:29 190,976 --a------ C:\WINDOWS\system32\schedsvc.dll
2006-10-02 22:29 19,968 --a------ C:\WINDOWS\system32\wshtcpip.dll
2006-10-02 22:29 19,968 --a------ C:\WINDOWS\system32\ws2help.dll
2006-10-02 22:29 19,968 --a------ C:\WINDOWS\system32\ssbezier.scr
2006-10-02 22:29 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2006-10-02 22:29 19,968 --a------ C:\WINDOWS\system32\linkinfo.dll
2006-10-02 22:29 19,456 --a------ C:\WINDOWS\system32\shutdown.exe
2006-10-02 22:29 19,072 --a------ C:\WINDOWS\system32\drivers\msfs.sys
2006-10-02 22:29 187,776 --a------ C:\WINDOWS\system32\drivers\acpi.sys
2006-10-02 22:29 185,344 --a------ C:\WINDOWS\system32\upnphost.dll
2006-10-02 22:29 182,912 --a------ C:\WINDOWS\system32\drivers\ndis.sys
2006-10-02 22:29 182,272 --a------ C:\WINDOWS\system32\snmpsnap.dll
2006-10-02 22:29 181,760 --a------ C:\WINDOWS\system32\tapi32.dll
2006-10-02 22:29 181,248 --a------ C:\WINDOWS\system32\drivers\mrxdav.sys
2006-10-02 22:29 180,800 --a------ C:\WINDOWS\system32\sqlunirl.dll
2006-10-02 22:29 180,224 --a------ C:\WINDOWS\system32\scecli.dll
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\version.dll
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\ssmyst.scr
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\snmpapi.dll
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\seclogon.dll
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\rsmps.dll
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\nddenb32.dll
2006-10-02 22:29 18,944 --a------ C:\WINDOWS\system32\midimap.dll
2006-10-02 22:29 18,560 --a------ C:\WINDOWS\system32\drivers\tdi.sys
2006-10-02 22:29 18,432 --a------ C:\WINDOWS\system32\wtsapi32.dll
2006-10-02 22:29 18,432 --a------ C:\WINDOWS\system32\ups.exe
2006-10-02 22:29 179,712 --a------ C:\WINDOWS\system32\ntmsdba.dll
2006-10-02 22:29 176,640 --a------ C:\WINDOWS\system32\wintrust.dll
2006-10-02 22:29 176,128 --a------ C:\WINDOWS\system32\winmm.dll
2006-10-02 22:29 176,128 --a------ C:\WINDOWS\system32\photowiz.dll
2006-10-02 22:29 174,592 --a------ C:\WINDOWS\system32\w32time.dll
2006-10-02

[loophole]

Hi

Nothing looks out of place, can you do this

Please go HERE to run Panda's ActiveScan

• Once you are on the Panda site click the Scan your PC button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• Select either Home User or Company
• Click the big Scan Now button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report along with a new hijackthis log.

[ON3P]

Here is the ActiveScan Report:


Incident Status Location

Adware:adware/whenusearch Not disinfected Windows Registry
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.2o7.net/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.zedo.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.z1.adserver.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Scott Andrus\Application Data\Mozilla\Firefox\Profiles\xpe3jfrw.default\cookies.txt[ad.yieldmanager.com/]
Adware:Adware/SaveNow Not disinfected C:\Program Files\DAEMON Tools\SetupDTSB.exe
Adware:Adware/DLPlugin Not disinfected C:\Program Files\Download Plugin\DlPlugin-Moz\npdlplug.dll
Adware:Adware/DLPlugin Not disinfected C:\Program Files\Download Plugin\DlPlugin-Moz\setup2.exe


Here is an updated HijackThis
Logfile of HijackThis v1.99.1
Scan saved at 9:55:29 PM, on 10/9/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\BCMSMMSG.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Messenger\msmsgs.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Scott Andrus\Desktop\hijackthis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo R200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2H1.EXE /P30 "EPSON Stylus Photo R200 Series" /O6 "USB001" /M "Stylus Photo R200"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [spywarebot] C:\Program Files\SpywareBot\SpywareBot.exe -boot
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Epson printer Registration.lnk = D:\E_reg\EpsonReg.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1128306323789
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1128306306093
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe



My Virus scan warned me again today that the Poly Win32 virus it on my computer. I cannot delete it, quarantine it, or clean it. It says the virus is write-protected.

Thanks for your help.

[loophole]

Hi

Does it say where it is finding it? a path, for example.

[ON3P]

So the issue seems to be resolved.

I re-scanned my computer with VirusScan. It said the virus was located in the E-drive, which seemed strange to me.

I opened up My computer, and there was something in the E-drive. I ejected it from the E-Drive, and it appears to have disappeared. My VirusScan now says my computer is Virus-free.

Not exactly sure what happened, but wanted to post a thanks you for the help. I will be back if any more issues arise. Thanks!

[loophole]

Ok, that was a strange one. Glad you got it figured out