Everytime when windows starts up I get a Windows Installer window then much later I get another window saying Please run setup.exe to install quickbooks.
This PC takes a long time to open web pages.
It takes a long time to download any file.
Running:
XP Pro sp3 with all current updates.
Bitdefender
I have uninstalled ZoneAlarm for testing.
OTL logfile created on: 3/21/2012 3:02:27 PM - Run 2
OTL by OldTimer - Version 3.2.29.1 Folder = C:\Dnload\SpywareRemovers
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.93 Gb Total Physical Memory | 0.74 Gb Available Physical Memory | 38.24% Memory free
3.77 Gb Paging File | 2.56 Gb Available in Paging File | 67.97% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 61.48 Gb Total Space | 8.17 Gb Free Space | 13.28% Space Free | Partition Type: NTFS
Computer Name: DOCFXITLT | User Name: Gary | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/03/01 11:05:18 | 001,183,080 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe
PRC - [2012/03/01 11:05:15 | 001,552,368 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
PRC - [2012/02/20 18:39:54 | 000,224,920 | ---- | M] () -- C:\Program Files\Macrium\Reflect\ReflectService.exe
PRC - [2012/02/16 07:40:41 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Firefox\firefox.exe
PRC - [2012/02/16 07:40:41 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Firefox\plugin-container.exe
PRC - [2012/02/09 09:22:22 | 000,136,584 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\ramaint.exe
PRC - [2012/02/09 09:21:59 | 000,374,152 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
PRC - [2012/01/23 20:23:06 | 000,050,128 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
PRC - [2011/12/28 13:40:48 | 006,148,096 | ---- | M] (FreeDownloadManager.ORG) -- C:\Program Files\Free Download Manager\fdm.exe
PRC - [2011/12/06 09:48:02 | 000,045,056 | ---- | M] (Intuit) -- C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
PRC - [2011/10/13 23:01:48 | 000,399,416 | ---- | M] (Secunia) -- C:\Program Files\PSI\sua.exe
PRC - [2011/10/02 03:42:52 | 000,665,608 | ---- | M] (NTWind Software) -- C:\Program Files\WinSnap\WinSnap.exe
PRC - [2011/09/23 17:59:43 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Dnload\SpywareRemovers\OTL ver. 3.2.29.1.exe
PRC - [2011/08/27 12:16:10 | 000,434,960 | ---- | M] (SANDBOXIE L.T.D) -- C:\Program Files\Sandboxie\SbieCtrl.exe
PRC - [2011/08/27 12:16:10 | 000,072,976 | ---- | M] (SANDBOXIE L.T.D) -- C:\Program Files\Sandboxie\SbieSvc.exe
PRC - [2011/08/19 22:31:14 | 001,248,256 | ---- | M] (Intuit Inc.) -- C:\Program Files\Common Files\Intuit\DataProtect\QBIDPService.exe
PRC - [2011/06/22 20:32:46 | 001,407,248 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
PRC - [2011/06/22 20:32:40 | 000,370,960 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe
PRC - [2011/06/22 20:32:36 | 000,882,960 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
PRC - [2011/06/22 19:49:24 | 000,866,576 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe
PRC - [2011/06/22 19:33:14 | 001,210,640 | ---- | M] (Intel® Corporation) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
PRC - [2011/05/26 19:43:12 | 000,328,040 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
PRC - [2011/05/18 22:40:06 | 002,016,504 | ---- | M] (UltraVNC) -- C:\Program Files\ultravnc\winvnc.exe
PRC - [2011/04/20 10:04:40 | 000,130,920 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe
PRC - [2011/04/07 16:41:32 | 000,138,680 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\ZOOM\TpScrex.exe
PRC - [2011/04/04 11:43:36 | 000,135,528 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
PRC - [2011/04/04 10:27:20 | 000,045,496 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe
PRC - [2011/03/31 19:31:34 | 000,132,392 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
PRC - [2011/03/29 13:41:08 | 000,064,952 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
PRC - [2011/01/14 15:51:56 | 000,041,320 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe
PRC - [2010/11/29 16:32:44 | 000,069,560 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
PRC - [2010/11/12 06:54:50 | 000,819,291 | ---- | M] () -- C:\Program Files\TVMOBiLi\bin\tvMobiliService.exe
PRC - [2010/11/08 13:04:20 | 000,390,528 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LogMeIn.exe
PRC - [2010/10/29 20:25:12 | 000,142,696 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
PRC - [2010/09/22 14:18:46 | 001,463,672 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\ThinkPad\Bluetooth Software\BTStackServer.exe
PRC - [2010/09/22 14:18:46 | 000,607,584 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
PRC - [2010/09/22 14:18:46 | 000,349,528 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
PRC - [2010/09/19 14:00:02 | 000,097,792 | ---- | M] () -- C:\Program Files\Stunnel\stunnel.exe
PRC - [2010/09/17 16:40:06 | 000,063,048 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
PRC - [2010/09/02 00:57:48 | 001,774,992 | ---- | M] (ALTAP) -- C:\Program Files\Salamander 2.5\salamand.exe
PRC - [2010/08/09 05:47:54 | 000,248,832 | ---- | M] (FileHippo.com) -- C:\Program Files\Filehippo.com\UpdateChecker.exe
PRC - [2010/05/03 12:54:36 | 002,533,400 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2010/05/03 12:54:32 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2010/05/03 12:54:28 | 001,522,200 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe
PRC - [2010/04/01 14:50:44 | 000,043,960 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
PRC - [2009/11/18 14:22:26 | 000,226,304 | ---- | M] (Uwe Sieber - www.uwe-sieber.de) -- C:\Program Files\USBDLM\USBDLM.exe
PRC - [2009/09/04 16:22:56 | 001,391,136 | ---- | M] (Hagel Technologies Ltd.) -- C:\Program Files\DU Meter\DUMeterSvc.exe
PRC - [2009/06/02 13:49:56 | 000,020,480 | ---- | M] (Intuit, Inc.) -- C:\Program Files\Common Files\Intuit\Entitlement Client\v6.0\Server\Intuit.Spc.Map.EntitlementClient.Server.Service.exe
PRC - [2009/01/14 10:29:18 | 003,981,312 | ---- | M] (Brooks Internet Software, Inc.) -- C:\Program Files\RPM\RpmSrv.exe
PRC - [2008/12/09 20:54:40 | 000,143,360 | ---- | M] (PFU LIMITED) -- C:\WINDOWS\twain_32\Fjscan32\SOP\FtLnSOP.exe
PRC - [2008/10/30 15:23:52 | 000,031,744 | ---- | M] (Ricoh co.,Ltd.) -- C:\Program Files\Integrated Camera Driver\RCIMGDIR.exe
PRC - [2008/09/03 19:27:58 | 000,186,360 | ---- | M] () -- C:\WINDOWS\system32\MNSFramework.exe
PRC - [2008/04/13 17:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/03/19 12:30:46 | 002,558,464 | R--- | M] (Aladdin Knowledge Systems Ltd.) -- C:\WINDOWS\system32\hasplms.exe
PRC - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2007/02/21 01:15:02 | 000,112,208 | ---- | M] (Corel, Inc.) -- C:\Program Files\Photo Album 6\MediaDetect.exe
PRC - [2007/02/08 18:14:10 | 000,174,656 | ---- | M] () -- C:\WINDOWS\system32\PSIService.exe
PRC - [2005/11/30 14:34:18 | 000,068,608 | ---- | M] () -- C:\Program Files\ClipX\clipx.exe
PRC - [2005/04/27 14:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) -- C:\Program Files\UPHClean\uphclean.exe
PRC - [2005/03/11 20:26:46 | 000,622,592 | ---- | M] () -- C:\Program Files\SpyTheSpy\SpyTheSpy.exe
PRC - [2004/01/12 05:59:14 | 000,110,592 | ---- | M] () -- C:\Program Files\IconSaver\IconSaver.exe
PRC - [2002/03/19 17:30:00 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe
PRC - [2001/12/28 22:33:14 | 000,214,016 | ---- | M] (Actiontec Electronics, Inc) -- C:\WINDOWS\system32\AEIWLSTA.exe
========== Modules (No Company Name) ==========
MOD - [2012/03/14 05:12:09 | 000,578,024 | ---- | M] () -- C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\bdsmartdb.dll
MOD - [2012/03/14 05:12:09 | 000,092,328 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\bdmetrics.dll
MOD - [2012/03/01 11:05:20 | 000,107,520 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\UI\popup.ui
MOD - [2012/03/01 11:05:17 | 001,226,400 | ---- | M] () -- \\?\C:\Program Files\Bitdefender\Bitdefender 2012\wslib.dll
MOD - [2012/03/01 11:05:08 | 000,270,536 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\avc3al.dll
MOD - [2012/02/28 18:14:34 | 008,527,008 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2012/02/22 10:27:20 | 000,221,696 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\f9977bade8fa997882aa57b430820765\System.ServiceProcess.ni.dll
MOD - [2012/02/22 09:31:55 | 009,091,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\9c4788acc8f93c33214865395cee2e1c\System.ni.dll
MOD - [2012/02/20 18:39:54 | 000,224,920 | ---- | M] () -- C:\Program Files\Macrium\Reflect\ReflectService.exe
MOD - [2012/02/16 07:40:41 | 001,911,768 | ---- | M] () -- C:\Program Files\Firefox\mozjs.dll
MOD - [2012/02/01 18:20:16 | 000,004,608 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\UI\imsecurityal.ui
MOD - [2012/01/23 20:27:20 | 000,035,208 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\procinfo.dll
MOD - [2012/01/23 20:20:54 | 000,139,208 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\popup.dll
MOD - [2012/01/23 20:15:40 | 000,059,392 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\bdmltusrsrv.dll
MOD - [2012/01/23 20:14:56 | 000,110,880 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\connector.dll
MOD - [2012/01/23 20:14:00 | 000,061,440 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\excludemgr.dll
MOD - [2012/01/23 20:13:40 | 000,154,152 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\framework.dll
MOD - [2012/01/19 15:36:40 | 000,157,200 | ---- | M] () -- \\?\C:\Program Files\Bitdefender\Bitdefender 2012\bdnimbus.dll
MOD - [2012/01/09 10:03:32 | 001,712,128 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a86c12788293105a0d9fda1bc90c90bc\Microsoft.VisualBasic.ni.dll
MOD - [2012/01/09 10:03:30 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll
MOD - [2012/01/09 10:03:25 | 011,817,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\62e34cfb5a8b233667c7c5a47a32ad93\System.Web.ni.dll
MOD - [2012/01/09 10:03:19 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3c272cad7afb127e2a2bdb8a5a808512\System.Runtime.Remoting.ni.dll
MOD - [2012/01/09 09:52:49 | 000,679,936 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Security\36c12de583ee81e9c99acb72b09d77ac\System.Security.ni.dll
MOD - [2012/01/09 09:52:46 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll
MOD - [2012/01/09 09:12:34 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll
MOD - [2012/01/09 09:12:31 | 012,430,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll
MOD - [2012/01/09 09:12:23 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll
MOD - [2012/01/09 09:12:10 | 007,950,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll
MOD - [2012/01/09 09:12:04 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
MOD - [2012/01/09 09:09:13 | 014,407,680 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\a774bd593b8420bae4a8cf1d46af3ba2\mscorlib.ni.dll
MOD - [2012/01/06 16:27:34 | 000,035,720 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\strdecoder.dll
MOD - [2012/01/06 16:27:28 | 000,202,032 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\txmlutil.dll
MOD - [2012/01/06 16:27:20 | 000,003,072 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\UI\accessl.ui
MOD - [2011/12/28 14:13:24 | 003,522,048 | ---- | M] () -- C:\Program Files\Free Download Manager\fdmbtsupp.dll
MOD - [2011/12/28 12:49:14 | 000,086,528 | ---- | M] () -- C:\Program Files\Free Download Manager\fdmumsp.dll
MOD - [2011/12/28 12:48:54 | 000,230,400 | ---- | M] () -- C:\Program Files\Free Download Manager\iefdm2.dll
MOD - [2011/11/03 08:28:36 | 001,292,288 | ---- | M] () -- C:\WINDOWS\system32\quartz.dll
MOD - [2011/10/27 15:07:06 | 000,362,736 | ---- | M] () -- \\?\C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\trufos.dll
MOD - [2011/10/21 14:04:28 | 001,910,272 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpfr.mdl
MOD - [2011/10/21 14:04:28 | 001,909,760 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpph.mdl
MOD - [2011/10/21 14:04:28 | 001,858,560 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimf.mdl
MOD - [2011/10/21 14:04:28 | 000,952,832 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttprbl.mdl
MOD - [2011/10/21 14:04:28 | 000,632,832 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpbr.mdl
MOD - [2011/10/21 14:04:28 | 000,444,416 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimdsp.mdl
MOD - [2011/10/21 14:04:26 | 002,054,144 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpf.mdl
MOD - [2011/10/21 14:04:26 | 000,509,440 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpdsp.mdl
MOD - [2011/10/21 14:04:26 | 000,389,632 | ---- | M] () -- C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimbr.mdl
MOD - [2011/05/19 19:34:22 | 000,056,224 | ---- | M] () -- \\?\C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\Antivirus_08314_136\avxdisk.dll
MOD - [2011/03/31 19:31:02 | 000,066,856 | ---- | M] () -- C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll
MOD - [2011/02/18 18:47:09 | 002,228,224 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.Common\6.0.1.0__7ce6deabcb36a8ea\Intuit.Spc.Map.EntitlementClient.Common.dll
MOD - [2011/02/18 18:29:24 | 000,229,376 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\Intuit.Spc.Map.EntitlementClient.Api\6.0.1.0__7ce6deabcb36a8ea\Intuit.Spc.Map.EntitlementClient.Api.dll
MOD - [2010/11/12 06:54:50 | 000,819,291 | ---- | M] () -- C:\Program Files\TVMOBiLi\bin\tvMobiliService.exe
MOD - [2010/09/22 14:18:56 | 002,860,384 | ---- | M] () -- C:\WINDOWS\system32\btwicons.dll
MOD - [2010/09/22 14:18:56 | 000,075,112 | ---- | M] () -- C:\Program Files\ThinkPad\Bluetooth Software\BTKeyInd.dll
MOD - [2010/09/19 14:00:02 | 000,097,792 | ---- | M] () -- C:\Program Files\Stunnel\stunnel.exe
MOD - [2010/06/07 07:26:46 | 000,101,376 | ---- | M] () -- C:\Program Files\Stunnel\zlib1.dll
MOD - [2009/01/14 10:29:18 | 000,010,752 | ---- | M] () -- C:\Program Files\RPM\udf\fbudf.dll
MOD - [2008/09/03 19:27:58 | 000,186,360 | ---- | M] () -- C:\WINDOWS\system32\MNSFramework.exe
MOD - [2008/04/13 17:11:59 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007/02/08 18:14:10 | 000,174,656 | ---- | M] () -- C:\WINDOWS\system32\PSIService.exe
MOD - [2005/11/30 14:34:18 | 000,068,608 | ---- | M] () -- C:\Program Files\ClipX\clipx.exe
MOD - [2005/10/28 20:29:52 | 000,208,896 | ---- | M] () -- C:\Program Files\Lenovo\PkgMgr\HOTKEY\tpfnf7.dll
MOD - [2005/03/11 20:26:46 | 000,622,592 | ---- | M] () -- C:\Program Files\SpyTheSpy\SpyTheSpy.exe
MOD - [2004/02/27 12:24:30 | 000,026,448 | ---- | M] () -- C:\WINDOWS\system32\smfaxmon.dll
MOD - [2004/01/12 05:59:14 | 000,110,592 | ---- | M] () -- C:\Program Files\IconSaver\IconSaver.exe
MOD - [2004/01/12 05:58:35 | 000,061,440 | ---- | M] () -- C:\WINDOWS\system32\IconSaver.cpl
MOD - [2004/01/12 05:40:08 | 000,049,152 | ---- | M] () -- C:\Program Files\IconSaver\Shell Extension.dll
MOD - [2003/10/19 07:12:58 | 000,061,440 | ---- | M] () -- C:\Program Files\IconSaver\IconSaverLib.dll
MOD - [2003/10/19 05:11:40 | 000,094,208 | ---- | M] () -- C:\Program Files\IconSaver\IconSaver Editor.dll
MOD - [2003/07/03 23:49:30 | 000,024,576 | ---- | M] () -- C:\Program Files\Lenovo\PkgMgr\HOTKEY_2\tphk_2k.dll
MOD - [2002/03/19 17:30:00 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe
MOD - [2001/07/31 10:17:12 | 000,094,274 | ---- | M] () -- C:\WINDOWS\system32\HPBHealr.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- -- (GSService)
SRV - File not found [On_Demand | Stopped] -- -- (B-Service)
SRV - [2012/03/01 11:05:15 | 001,552,368 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe -- (vsserv)
SRV - [2012/02/20 18:39:54 | 000,224,920 | ---- | M] () [Auto | Running] -- C:\Program Files\Macrium\Reflect\ReflectService.exe -- (ReflectService.exe)
SRV - [2012/02/09 09:22:22 | 000,136,584 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\RaMaint.exe -- (LMIMaint)
SRV - [2012/02/09 09:21:59 | 000,374,152 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2012/01/23 20:23:06 | 000,050,128 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe -- (UPDATESRV)
SRV - [2011/12/06 09:48:02 | 000,045,056 | ---- | M] (Intuit) [Auto | Running] -- C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe -- (QBCFMonitorService)
SRV - [2011/10/14 23:57:36 | 000,307,544 | ---- | M] (BitDefender) [On_Demand | Stopped] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe -- (Update Server)
SRV - [2011/10/13 23:01:50 | 000,994,360 | ---- | M] (Secunia) [On_Demand | Stopped] -- C:\Program Files\PSI\PSIA.exe -- (Secunia PSI Agent)
SRV - [2011/10/13 23:01:48 | 000,399,416 | ---- | M] (Secunia) [Auto | Running] -- C:\Program Files\PSI\sua.exe -- (Secunia Update Agent)
SRV - [2011/08/27 12:16:10 | 000,072,976 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV - [2011/08/19 22:31:14 | 001,248,256 | ---- | M] (Intuit Inc.) [Auto | Running] -- C:\Program Files\Common Files\Intuit\DataProtect\QBIDPService.exe -- (QBVSS)
SRV - [2011/08/19 22:30:58 | 000,061,440 | ---- | M] (Intuit Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe -- (QBFCService)
SRV - [2011/06/22 20:32:40 | 000,370,960 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\WLKEEPER.exe -- (WLANKEEPER) Intel®
SRV - [2011/06/22 20:32:36 | 000,882,960 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel®
SRV - [2011/06/22 19:49:24 | 000,866,576 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel®
SRV - [2011/05/18 22:40:06 | 002,016,504 | ---- | M] (UltraVNC) [Auto | Running] -- C:\Program Files\UltraVNC\WinVNC.exe -- (uvnc_service)
SRV - [2011/04/20 10:04:40 | 000,130,920 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD)
SRV - [2011/04/04 10:27:20 | 000,045,496 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE)
SRV - [2011/03/29 13:41:08 | 000,064,952 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC)
SRV - [2011/01/14 15:51:56 | 000,041,320 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\Communications Utility\CamMute.exe -- (LENOVO.CAMMUTE)
SRV - [2010/12/23 08:20:24 | 000,245,760 | ---- | M] (SMServer) [Disabled | Stopped] -- C:\WINDOWS\System32\snmvtsvc.exe -- (SMServer)
SRV - [2010/12/23 06:03:32 | 000,385,024 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\SoundTaxi Media Suite\STSService.exe -- (STSService)
SRV - [2010/11/12 06:54:50 | 000,819,291 | ---- | M] () [Auto | Running] -- C:\Program Files\TVMOBiLi\bin\tvMobiliService.exe -- (tvMobiliService)
SRV - [2010/11/08 13:04:20 | 000,390,528 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\LogMeIn.exe -- (LogMeIn)
SRV - [2010/10/04 13:33:40 | 002,735,992 | ---- | M] (Intuit Inc.) [On_Demand | Stopped] -- C:\Program Files\Intuit\QuickBooks Point of Sale 9.0\DatabaseServer\QBPOSDBService.exe -- (QBPOSDBServiceV9)
SRV - [2010/09/22 14:18:46 | 000,349,528 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2010/09/19 14:00:02 | 000,097,792 | ---- | M] () [Auto | Running] -- C:\Program Files\Stunnel\stunnel.exe -- (stunnel)
SRV - [2010/08/23 20:21:40 | 000,013,672 | ---- | M] (Intuit Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe -- (IntuitUpdateService)
SRV - [2010/07/01 23:55:40 | 003,827,056 | ---- | M] (MediaMall Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\MediaMall\MediaMallServer.exe -- (MediaMall Server)
SRV - [2010/06/25 10:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2010/05/03 12:54:36 | 002,533,400 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel®
SRV - [2010/05/03 12:54:32 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel®
SRV - [2010/02/24 04:13:24 | 001,313,368 | ---- | M] (South River Technologies, LLC) [Disabled | Stopped] -- C:\Program Files\WebDrive\wdService.exe -- (WebDriveService)
SRV - [2009/12/29 15:57:56 | 000,057,344 | ---- | M] (Gravic) [On_Demand | Stopped] -- C:\Program Files\Common Files\Gravic\RemarkFTPUtility12.exe -- (Remark FTP Utility)
SRV - [2009/11/18 14:22:26 | 000,226,304 | ---- | M] (Uwe Sieber - www.uwe-sieber.de) [Auto | Running] -- C:\Program Files\USBDLM\USBDLM.exe -- (USBDLM)
SRV - [2009/09/04 16:22:56 | 001,391,136 | ---- | M] (Hagel Technologies Ltd.) [On_Demand | Running] -- C:\Program Files\DU Meter\DUMeterSvc.exe -- (DUMeterSvc)
SRV - [2009/06/02 13:49:56 | 000,020,480 | ---- | M] (Intuit, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Intuit\Entitlement Client\v6.0\Server\Intuit.Spc.Map.EntitlementClient.Server.Service.exe -- (Intuit Entitlement Service v6.0)
SRV - [2009/04/20 14:17:39 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/01/14 10:29:18 | 003,981,312 | ---- | M] (Brooks Internet Software, Inc.) [Auto | Running] -- C:\Program Files\RPM\rpmsrv.exe -- (rpm)
SRV - [2008/09/03 19:27:58 | 000,186,360 | ---- | M] () [Auto | Running] -- C:\WINDOWS\System32\MNSFramework.exe -- (MNSFramework)
SRV - [2008/03/19 12:30:46 | 002,558,464 | R--- | M] (Aladdin Knowledge Systems Ltd.) [Auto | Running] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms)
SRV - [2007/07/24 12:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2007/06/26 22:20:16 | 000,010,240 | ---- | M] (NeoSmart Technologies) [Disabled | Stopped] -- C:\Program Files\NeoSmart Technologies\ToolTipFixer\ToolTipFixer.exe -- (TTFixerService)
SRV - [2007/03/21 11:57:56 | 000,516,096 | ---- | M] (Locktime Software) [On_Demand | Stopped] -- C:\Program Files\NetLimiter 2 Pro\nlsvc.exe -- (nlsvc)
SRV - [2007/03/08 17:23:04 | 000,045,056 | ---- | M] (PFU LIMITED) [Disabled | Stopped] -- C:\WINDOWS\twain_32\Fjscan32\FJTWMKSV.exe -- (FJTWMKSV)
SRV - [2007/02/08 18:14:10 | 000,174,656 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\PSIService.exe -- (ProtexisLicensing)
SRV - [2006/06/29 21:57:50 | 000,032,768 | ---- | M] () [Disabled | Stopped] -- C:\WINDOWS\system32\TpKmpSvc.exe -- (TpKmpSVC)
SRV - [2005/04/27 14:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\UPHClean\uphclean.exe -- (UPHClean)
SRV - [2001/05/08 05:10:00 | 000,053,248 | ---- | M] (IBM Corporation) [On_Demand | Stopped] -- C:\WINDOWS\cwbrxd.exe -- (Cwbrxd)
========== Driver Services (SafeList) ==========
DRV - [2012/03/01 11:05:15 | 000,447,208 | ---- | M] (BitDefender) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avckf.sys -- (avckf)
DRV - [2012/03/01 11:05:11 | 000,130,384 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Bitdefender\Bitdefender 2012\bdselfpr.sys -- (bdselfpr)
DRV - [2012/03/01 11:05:10 | 000,609,984 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avc3.sys -- (avc3)
DRV - [2012/02/29 20:43:08 | 000,340,624 | ---- | M] (BitDefender S.R.L.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\trufos.sys -- (trufos)
DRV - [2012/02/29 20:43:06 | 000,360,976 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\bdfsfltr.sys -- (bdfsfltr)
DRV - [2012/02/20 18:40:18 | 000,012,952 | ---- | M] (Paramount Software UK Ltd) [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\PSVolAcc.sys -- (PSVolAcc)
DRV - [2012/02/20 18:40:08 | 000,016,024 | ---- | M] (Macrium Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\pssnap.sys -- (pssnap)
DRV - [2012/02/09 09:22:03 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2012/02/03 09:37:08 | 000,063,056 | ---- | M] (BitDefender SRL) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\bdsandbox.sys -- (bdsandbox)
DRV - [2011/11/25 14:59:40 | 000,240,184 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\avchv.sys -- (avchv)
DRV - [2011/11/14 20:16:28 | 000,130,640 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdftdif.sys -- (bdftdif)
DRV - [2011/10/26 10:45:27 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2011/10/03 09:15:22 | 000,025,984 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VSPE.sys -- (EterlogicVirtualSerialDriver)
DRV - [2011/09/13 10:36:24 | 000,011,496 | ---- | M] (UVNC BVBA) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mv2.sys -- (mv2)
DRV - [2011/08/31 03:58:00 | 000,130,320 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV - [2011/08/03 18:15:00 | 007,473,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETwNx32.sys -- (NETwNx32) ___ Intel®
DRV - [2011/07/13 07:16:56 | 000,141,432 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CprDrvr.sys -- (CprDrvr)
DRV - [2011/06/02 11:08:34 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv)
DRV - [2011/03/30 17:16:18 | 000,170,464 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2011/03/30 16:04:56 | 000,581,984 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2011/03/18 09:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\WINDOWS\system32\speedfan.sys -- (speedfan)
DRV - [2011/01/19 18:47:12 | 000,022,504 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz135_x32.sys -- (cpuz135)
DRV - [2011/01/13 11:18:50 | 000,132,608 | ---- | M] (Ricoh co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\5U877.sys -- (5U877)
DRV - [2010/12/23 13:43:12 | 000,023,608 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SndTAudio.sys -- (SndTAudio)
DRV - [2010/11/25 14:59:16 | 000,606,056 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rtl8192su.sys -- (RTL8192su)
DRV - [2010/10/20 02:09:58 | 001,761,920 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\CHDAU32.sys -- (CnxtHdAudService)
DRV - [2010/09/23 09:14:30 | 000,993,576 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2010/09/17 16:40:06 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2010/09/17 16:40:06 | 000,012,856 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files\LogMeIn\x86\rainfo.sys -- (LMIInfo)
DRV - [2010/09/16 19:00:00 | 000,051,752 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2010/09/07 14:09:06 | 000,013,680 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\smiif32.sys -- (lenovo.smi)
DRV - [2010/09/01 01:30:58 | 000,015,544 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\psi_mf.sys -- (PSI)
DRV - [2010/08/16 15:31:26 | 000,016,472 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pwdrvio.sys -- (pwdrvio)
DRV - [2010/08/16 15:31:22 | 000,011,104 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\pwdspio.sys -- (pwdspio)
DRV - [2010/07/22 09:38:14 | 000,167,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\e1k5132.sys -- (e1kexpress) Intel®
DRV - [2010/06/25 10:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2010/06/22 03:37:40 | 000,091,496 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2010/06/16 13:44:38 | 000,120,432 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\Apsx86.sys -- (Shockprf)
DRV - [2010/06/16 13:44:38 | 000,020,592 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\ApsHM86.sys -- (TPDIGIMN)
DRV - [2010/05/19 23:15:04 | 000,013,952 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2010/05/11 12:00:34 | 000,020,072 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cpuz133_x32.sys -- (cpuz133)
DRV - [2010/02/24 14:11:40 | 000,023,920 | ---- | M] (MediaMall Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\povrtdev.sys -- (msvad_simple)
DRV - [2010/02/24 04:13:20 | 000,201,176 | ---- | M] () [File_System | Auto | Running] -- C:\Program Files\WebDrive\wdfsd.sys -- (WebDriveFSD)
DRV - [2010/01/19 19:32:40 | 000,085,128 | ---- | M] (BitDefender) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\bdvedisk.sys -- (BDVEDISK)
DRV - [2009/12/30 11:20:56 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\revoflt.sys -- (Revoflt)
DRV - [2009/11/11 10:48:00 | 000,027,519 | ---- | M] (Billionton Corporation Reserved.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBKR100.SYS -- (USB-100)
DRV - [2009/10/26 12:39:04 | 000,125,696 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Impcd.sys -- (Impcd)
DRV - [2009/09/18 13:54:38 | 000,533,152 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2009/09/17 12:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HECI.sys -- (HECI) Intel®
DRV - [2009/09/08 01:40:26 | 000,114,304 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssecmdm.sys -- (ssecmdm)
DRV - [2009/09/08 01:40:26 | 000,086,528 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssecbus.sys -- (ssecbus) Samsung Mobile Modem Device driver (WDM)
DRV - [2009/09/08 01:40:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssecmdfl.sys -- (ssecmdfl)
DRV - [2009/07/06 11:09:06 | 000,051,200 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2009/06/30 11:59:00 | 000,986,240 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2009/06/30 11:58:00 | 000,731,264 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2009/06/30 11:58:00 | 000,210,304 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2009/05/22 11:46:42 | 000,010,536 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Hmonitor.sys -- (hmonitor)
DRV - [2009/04/15 23:53:20 | 000,340,736 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rtl8187B.sys -- (RTL8187B)
DRV - [2009/03/13 13:47:26 | 000,012,560 | ---- | M] (UPEK Inc.) [Kernel | Auto | Running] -- C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys -- (smihlp) SMI Helper Driver (smihlp)
DRV - [2009/02/12 14:43:00 | 000,045,056 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\rimspe86.sys -- (rimspci)
DRV - [2008/11/16 19:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dne2000.sys -- (DNE)
DRV - [2008/07/24 17:37:10 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008/07/03 10:59:54 | 000,193,696 | ---- | M] (Jungo) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2008/03/18 15:09:16 | 000,350,720 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2008/02/27 13:49:00 | 000,003,840 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\BANTExt.sys -- (BANTExt)
DRV - [2008/02/11 15:55:04 | 000,586,240 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2008/02/04 17:57:44 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2007/12/17 16:57:14 | 000,045,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\intelsmb.sys -- (smbusp) Intel®
DRV - [2007/07/19 16:16:54 | 000,016,512 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\iPig\Client\tcpredir.sys -- (tcpredir)
DRV - [2007/06/19 23:35:40 | 000,024,096 | ---- | M] (TamoSoft) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ts_lb.sys -- (ts_lb)
DRV - [2007/06/08 09:58:46 | 000,021,504 | ---- | M] (STMicroelectronics, INC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\stm_tpm.sys -- (stmtpm)
DRV - [2007/04/23 04:03:04 | 000,082,200 | ---- | M] (Locktime Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\nltdi.sys -- (nltdi)
DRV - [2007/04/09 09:56:22 | 000,021,248 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2007/04/09 09:55:08 | 000,022,912 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2007/04/09 09:53:24 | 000,012,672 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2007/02/18 22:56:46 | 000,021,376 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psadd.sys -- (psadd)
DRV - [2007/02/06 23:38:32 | 001,133,568 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006/12/28 14:44:40 | 000,260,096 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbvm323.sys -- (ZSMC326) VIMICRO USB2.0 PC Camera(VC0323)
DRV - [2006/12/25 15:32:52 | 000,049,489 | ---- | M] (Mobile Action Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mamotou.sys -- (mamotou)
DRV - [2006/12/07 22:04:48 | 000,019,240 | ---- | M] (TamoSoft) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cv2k1.sys -- (CV2K1)
DRV - [2006/11/02 08:00:08 | 000,039,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB)
DRV - [2006/10/02 01:55:00 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SMAPINT.SYS -- (Smapint)
DRV - [2006/10/02 01:55:00 | 000,009,343 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\TDSMAPI.SYS -- (TDSMAPI)
DRV - [2006/08/08 12:25:40 | 000,476,672 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmfilter323.sys -- (vmfilter323)
DRV - [2006/06/09 05:49:41 | 000,019,200 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2006/05/18 09:49:00 | 000,061,067 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2006/05/18 09:48:00 | 000,047,249 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2005/08/18 12:44:44 | 000,011,473 | ---- | M] (Mobile Action Technology Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\MaVc2K.sys -- (MaVctrl)
DRV - [2005/04/20 01:38:00 | 000,016,384 | ---- | M] (IBM Corp.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\TPPWR.SYS -- (TPPWR)
DRV - [2005/03/03 01:14:18 | 000,004,736 | ---- | M] (RDV Soft) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vncdrv.sys -- (vncdrv)
DRV - [2005/03/03 01:14:04 | 000,006,016 | ---- | M] (RDV Soft) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vnccom.SYS -- (vnccom)
DRV - [2004/08/24 15:16:54 | 000,003,584 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\SMDRV.SYS -- (SMDRV)
DRV - [2002/05/02 12:52:22 | 000,018,189 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCAMPR5.SYS -- (PCAMPR5)
DRV - [2002/05/02 12:52:22 | 000,017,134 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5)
DRV - [2002/01/23 08:28:32 | 000,089,984 | ---- | M] (Philips Semiconductors) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PhilDecN.sys -- (phildecn) Philips WDM Video Decoder (PHILDECN)
DRV - [2002/01/15 13:04:06 | 001,088,352 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2001/12/28 22:10:16 | 000,050,688 | ---- | M] (Actiontec Electronics, Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AEIWLNDS.sys -- (AEIWL)
DRV - [1996/04/03 12:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..network.proxy.type: 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=0.8.1: "C:\Program Files\VideoLAN\VLC\mozilla\npvlc.dll" File not found
FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Firefox\components [2012/02/22 11:31:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Firefox\plugins [2012/02/18 15:58:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\
[2011/09/01 16:58:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Gary\Application Data\Mozilla\Extensions
[2012/03/11 10:25:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Gary\Application Data\Mozilla\Firefox\Profiles\go3ojoq5.default\extensions
[2011/12/02 10:32:12 | 000,000,000 | ---D | M] (Qualys BrowserCheck) -- C:\Documents and Settings\Gary\Application Data\Mozilla\Firefox\Profiles\go3ojoq5.default\extensions\{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D}
[2012/01/28 09:55:04 | 000,000,000 | ---D | M] (PriceBlink) -- C:\Documents and Settings\Gary\Application Data\Mozilla\Firefox\Profiles\go3ojoq5.default\extensions\[email protected]
[2012/02/07 18:43:57 | 000,000,000 | ---D | M] (LogMeIn, Inc. Remote Access Plugin) -- C:\Documents and Settings\Gary\Application Data\Mozilla\Firefox\Profiles\go3ojoq5.default\extensions\[email protected]
() (No name found) -- C:\DOCUMENTS AND SETTINGS\GARY\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\GO3OJOQ5.DEFAULT\EXTENSIONS\[email protected]
() (No name found) -- C:\DOCUMENTS AND SETTINGS\GARY\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\GO3OJOQ5.DEFAULT\EXTENSIONS\[email protected]
() (No name found) -- C:\DOCUMENTS AND SETTINGS\GARY\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\GO3OJOQ5.DEFAULT\EXTENSIONS\[email protected]
O1 HOSTS File: ([2012/03/15 23:07:06 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.
O4 - HKLM..\Run: [AEIWLSTA.EXE] C:\WINDOWS\System32\AEIWLSTA.exe (Actiontec Electronics, Inc)
O4 - HKLM..\Run: [BDAgent] C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [BMMGAG] C:\Program Files\ThinkPad\Utilities\PWRMONIT.DLL (IBM Corp.)
O4 - HKLM..\Run: [Client Access Express Welcome] C:\Program Files\Client Access\cwbwlwiz.exe (IBM Corporation)
O4 - HKLM..\Run: [Client Access Service] C:\Program Files\Client Access\cwbsvstr.exe (IBM Corporation)
O4 - HKLM..\Run: [ClipX] C:\Program Files\ClipX\clipx.exe ()
O4 - HKLM..\Run: [CoolSwitch] C:\WINDOWS\system32\TaskSwitch.exe ()
O4 - HKLM..\Run: [Corel Photo Downloader] C:\Program Files\Photo Album 6\MediaDetect.exe (Corel, Inc.)
O4 - HKLM..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd.)
O4 - HKLM..\Run: [frymxins] C:\Program Files\ATI Technologies\Fire GL 3D Studio Max\atiimxgl.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [FtLnSOP_setup] C:\WINDOWS\twain_32\Fjscan32\SOP\FtLnSOP.exe (PFU LIMITED)
O4 - HKLM..\Run: [IconSaver] C:\Program Files\IconSaver\IconSaver.exe ()
O4 - HKLM..\Run: [IMSS] C:\Program Files\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel® Corporation)
O4 - HKLM..\Run: [Intuit SyncManager] C:\Program Files\Common Files\Intuit\Sync\IntuitSyncManager.exe (Intuit Inc. All rights reserved.)
O4 - HKLM..\Run: [LenovoAutoScrollUtility] C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [pdfFactory Pro Dispatcher v3] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
O4 - HKLM..\Run: [RotateImage] C:\Program Files\Integrated Camera Driver\RCIMGDIR.exe (Ricoh co.,Ltd.)
O4 - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4 - HKLM..\Run: [SMSI Loader] C:\Program Files\Common Files\Smith Micro Shared\Fax\SMLoader.exe (Smith Micro Software, Inc.)
O4 - HKLM..\Run: [StartupDelayer] C:\Program Files\Startup Delayer\Startup Launcher GUI.exe (r2 studios)
O4 - HKLM..\Run: [TP4EX] C:\WINDOWS\System32\TP4EX.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe (Lenovo)
O4 - HKCU..\Run: [AnyTime Organizer] C:\Program Files\AnyTime Deluxe\AtDem.exe (Individual Software, Inc.)
O4 - HKCU..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe (Hagel Technologies Ltd.)
O4 - HKCU..\Run: [Free Download Manager] C:\Program Files\Free Download Manager\fdm.exe (FreeDownloadManager.ORG)
O4 - HKCU..\Run: [ISUSPM] C:\Documents and Settings\All Users\Application Data\FLEXnet\Connect\11\ISUSPM.exe (Acresso Corporation)
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O4 - HKCU..\Run: [WinSnap] C:\Program Files\WinSnap\WinSnap.exe (NTWind Software)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk = C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Intuit Data Protect.lnk = C:\Program Files\Common Files\Intuit\DataProtect\IntuitDataProtect.exe (Intuit Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\SpyTheSpy.lnk = C:\Program Files\SpyTheSpy\SpyTheSpy.exe ()
O4 - Startup: C:\Documents and Settings\Gary\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCloseDragDropBands = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMovingBands = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: Download all with Free Download Manager - C:\Program Files\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Download selected with Free Download Manager - C:\Program Files\Free Download Manager\dlselected.htm ()
O8 - Extra context menu item: Download video with Free Download Manager - C:\Program Files\Free Download Manager\dlfvideo.htm ()
O8 - Extra context menu item: Download with Free Download Manager - C:\Program Files\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Open with WordPerfect - c:\Program Files\WordPerfectX5\WordPerfect Office X5\Programs\WPLauncher.hta ()
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\HTTrack\WinHTTrackIEBar.dll ()
O9 - Extra 'Tools' menuitem : Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\HTTrack\WinHTTrackIEBar.dll ()
O9 - Extra Button: Rip YouTube File - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\SoundTaxi\YouTubeRipper.dll ()
O9 - Extra 'Tools' menuitem : Rip YouTube file embedded in this page - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files\SoundTaxi\YouTubeRipper.dll ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: download.microsoft.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: endicia.com ([www.postage] https in Trusted sites)
O15 - HKCU\..Trusted Domains: ibm.com ([icm1.teleweb.ca] https in Trusted sites)
O15 - HKCU\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites)
O15 - HKCU\..Trusted Domains: lenovo.com ([chat.lel] https in Trusted sites)
O15 - HKCU\..Trusted Domains: lenovo.com ([expertslive] https in Trusted sites)
O15 - HKCU\..Trusted Domains: lenovo.com ([rto1.lel] https in Trusted sites)
O15 - HKCU\..Trusted Domains: lenovo.com ([rto2.lel] https in Trusted sites)
O15 - HKCU\..Trusted Domains: magicjack.com ([my] * in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([update] http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([update] https in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([windowsupdate] http in Trusted sites)
O15 - HKCU\..Trusted Domains: talk4free.com ([reg] * in Trusted sites)
O15 - HKCU\..Trusted Domains: update.microsoft.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: update.microsoft.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: windowsupdate.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: windowsupdate.microsoft.com ([]http in Trusted sites)
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} http://h20364.www2.h...DataManager.CAB (Hewlett-Packard Online Support Services)
O16 - DPF: {43E3F87D-DE7F-4087-BD4F-0DC854981158} http://download.micr...dd/clearadj.CAB (Reg Error: Key error.)
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} https://www-secure.s...abs/tgctlsr.cab (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.micros...b?1306702878968 (WUWebControl Class)
O16 - DPF: {6e32070a-766d-4ee6-879c-dc1fa91d2fc3} http://update.micros...b?1306702799546 (MUWebControl Class)
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} http://www.ca.com/us...nfo/webscan.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {99FE5072-78AA-4FEE-89BA-69A5FA55343F} http://download.micr...44/igdtoolx.cab (IGDTester Class)
O16 - DPF: {BEA7310D-06C4-4339-A784-DC3804819809} http://images3.pnime...veX_Control.cab (Photo Upload Plugin Class)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macr...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} http://download.micr...04/clearadj.cab (Reg Error: Key error.)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://akamaicdn.we...ort/ieatgpc.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://static.garmi...inAxControl.CAB (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 66.51.205.100 66.51.206.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{250DB406-BC7D-4209-B3DC-8B44D1C7A457}: NameServer = 66.51.205.100,66.51.206.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{30ECAD80-1BF9-4942-B34F-08F80B882B76}: DhcpNameServer = 66.51.205.100 66.51.206.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{30ECAD80-1BF9-4942-B34F-08F80B882B76}: NameServer = 66.51.205.100,66.51.206.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7084C14A-C055-4B77-B74E-52C57C1D665D}: NameServer = 66.51.205.100,66.51.206.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B3F3ED5D-F192-4913-9E8E-DFC35EACD207}: NameServer = 66.51.205.100,66.51.206.100
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\g7ps {9EACF0FB-4FC7-436E-989B-3197142AD979} - C:\Program Files\Common Files\G7PS\Shared Files\G7PSDLL\G7PS.dll (G7 Productivity Systems, Inc.)
O18 - Protocol\Handler\intu-help-qb5 {867FCB77-9823-4cd6-8210-D85F968D466F} - C:\Program Files\QuickBooks 2008\HelpAsyncPluggableProtocol.dll (Intuit, Inc.)
O18 - Protocol\Handler\qbpos {662E7FAE-5C17-491C-AD9D-98C1F66CC6A0} - C:\Program Files\Common Files\Intuit\QuickBooks\QBPOSProtocol.dll (Intuit Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) -C:\WINDOWS\System32\vrlogon.dll (UPEK Inc.)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Gary\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Gary\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2002/08/28 19:41:20 | 000,565,760 | ---- | M] (Microsoft Corporation) - C:\AUTOCHK.EXE -- [ NTFS ]
O32 - AutoRun File - [2002/07/24 09:55:44 | 000,000,000 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2003/09/01 17:37:41 | 000,001,094 | ---- | M] () - C:\AUTOEXEC2.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012/03/21 12:24:59 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012/03/15 22:54:13 | 004,436,988 | R--- | C] (Swearware) -- C:\Documents and Settings\Gary\Desktop\ComboFix.exe
[2012/03/11 10:25:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Gary\Application Data\Free Download Manager
[2012/03/11 10:25:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Free Download Manager
[2012/03/11 10:25:25 | 000,000,000 | ---D | C] -- C:\Program Files\Free Download Manager
[2012/03/04 11:28:47 | 000,114,304 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ssecmdm.sys
[2012/03/04 11:28:47 | 000,086,528 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ssecbus.sys
[2012/03/04 11:28:47 | 000,014,976 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ssecmdfl.sys
[2012/03/04 11:28:47 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ssecwhnt.sys
[2012/03/04 11:28:47 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\ssecwh.sys
[2012/03/04 11:28:47 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sseccmnt.sys
[2012/03/04 11:28:47 | 000,012,160 | ---- | C] (MCCI Corporation) -- C:\WINDOWS\System32\drivers\sseccm.sys
[2012/03/04 11:28:26 | 000,000,000 | ---D | C] -- C:\Program Files\SAMSUNG
[2012/03/04 11:27:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Samsung
[2012/02/29 20:14:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\bdch
[2012/02/29 20:10:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Gary\Application Data\Bitdefender
[2012/02/29 20:05:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Bitdefender
[2012/02/29 19:30:48 | 000,340,624 | ---- | C] (BitDefender S.R.L.) -- C:\WINDOWS\System32\drivers\trufos.sys
[2012/02/29 19:30:47 | 000,360,976 | ---- | C] (BitDefender) -- C:\WINDOWS\System32\drivers\bdfsfltr.sys
[2012/02/29 18:35:50 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender
[2012/02/29 16:49:52 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Bitdefender
[2012/02/22 11:38:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Macrium
[2012/02/22 11:38:16 | 000,000,000 | ---D | C] -- C:\Program Files\Macrium
[2012/02/20 18:40:18 | 000,012,952 | ---- | C] (Paramount Software UK Ltd) -- C:\WINDOWS\System32\drivers\PSVolAcc.sys
[2012/02/20 18:40:08 | 000,016,024 | ---- | C] (Macrium Software) -- C:\WINDOWS\System32\drivers\pssnap.sys
[2012/02/20 18:40:00 | 000,047,256 | ---- | C] (Macrium Software) -- C:\WINDOWS\System32\drivers\psmounter.sys
[2004/11/05 12:09:41 | 000,098,304 | ---- | C] ( ) -- C:\WINDOWS\System32\Uwimm.dll
========== Files - Modified Within 30 Days ==========
[2012/03/21 14:43:11 | 000,000,220 | ---- | M] () -- C:\WINDOWS\System32\checkdnsid.xml
[2012/03/21 14:40:36 | 000,034,805 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001
[2012/03/20 22:53:34 | 000,003,140 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2012/03/15 23:23:47 | 000,001,024 | ---- | M] () -- C:\.rnd
[2012/03/15 23:23:40 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/03/15 23:22:49 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/03/15 23:22:41 | 2067,443,712 | -HS- | M] () -- C:\hiberfil.sys
[2012/03/15 23:07:06 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012/03/15 22:54:26 | 004,436,988 | R--- | M] (Swearware) -- C:\Documents and Settings\Gary\Desktop\ComboFix.exe
[2012/03/15 07:32:37 | 2067,447,808 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2012/03/12 13:09:50 | 000,000,385 | ---- | M] () -- C:\WINDOWS\SMDebug.ini
[2012/03/12 13:01:50 | 000,000,430 | ---- | M] () -- C:\WINDOWS\System32\HFMC.CFG
[2012/03/12 13:00:13 | 000,000,369 | ---- | M] () -- C:\WINDOWS\SMSI.INI
[2012/03/12 12:42:35 | 000,000,718 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\HotFax Message Center.lnk
[2012/03/12 11:49:48 | 000,000,396 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012/03/12 11:45:53 | 000,000,268 | ---- | M] () -- C:\WINDOWS\tasks\talkShakeIcon.job
[2012/03/12 11:44:15 | 000,000,758 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Express Talk.lnk
[2012/03/11 10:25:27 | 000,000,770 | ---- | M] () -- C:\Documents and Settings\Gary\Application Data\Microsoft\Internet Explorer\Quick Launch\Free Download Manager.lnk
[2012/03/01 11:05:15 | 000,447,208 | ---- | M] (BitDefender) -- C:\WINDOWS\System32\drivers\avckf.sys
[2012/03/01 11:05:10 | 000,609,984 | ---- | M] (BitDefender) -- C:\WINDOWS\System32\drivers\avc3.sys
[2012/02/29 20:53:44 | 000,444,564 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\1330569044.bdinstall.bin
[2012/02/29 20:43:08 | 000,340,624 | ---- | M] (BitDefender S.R.L.) -- C:\WINDOWS\System32\drivers\trufos.sys
[2012/02/29 20:43:06 | 000,360,976 | ---- | M] (BitDefender) -- C:\WINDOWS\System32\drivers\bdfsfltr.sys
[2012/02/29 20:12:01 | 000,000,385 | ---- | M] () -- C:\WINDOWS\System32\user_gensett.xml
[2012/02/29 20:10:27 | 000,001,873 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Bitdefender Antivirus Plus 2012.lnk
[2012/02/29 18:35:50 | 000,139,870 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\1330559400.bdinstall.bin
[2012/02/29 18:32:07 | 000,000,089 | ---- | M] () -- C:\WINDOWS\Spell Catcher.INI
[2012/02/29 09:48:59 | 000,000,229 | ---- | M] () -- C:\WINDOWS\vuepro32.ini
[2012/02/28 18:14:34 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/02/26 10:54:48 | 000,497,916 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/02/26 10:54:48 | 000,087,224 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/02/23 09:47:17 | 002,536,744 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/22 11:43:27 | 000,002,285 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Reflect.lnk
[2012/02/22 11:31:26 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\Gary\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/02/22 11:31:26 | 000,000,676 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2012/02/20 18:40:18 | 000,012,952 | ---- | M] (Paramount Software UK Ltd) -- C:\WINDOWS\System32\drivers\PSVolAcc.sys
[2012/02/20 18:40:08 | 000,016,024 | ---- | M] (Macrium Software) -- C:\WINDOWS\System32\drivers\pssnap.sys
[2012/02/20 18:40:00 | 000,047,256 | ---- | M] (Macrium Software) -- C:\WINDOWS\System32\drivers\psmounter.sys
========== Files Created - No Company Name ==========
[2012/03/12 11:49:48 | 000,000,396 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012/03/12 11:45:52 | 000,000,268 | ---- | C] () -- C:\WINDOWS\tasks\talkShakeIcon.job
[2012/03/12 09:45:48 | 2067,443,712 | -HS- | C] () -- C:\hiberfil.sys
[2012/03/11 10:25:27 | 000,000,770 | ---- | C] () -- C:\Documents and Settings\Gary\Application Data\Microsoft\Internet Explorer\Quick Launch\Free Download Manager.lnk
[2012/03/08 09:11:24 | 000,000,220 | ---- | C] () -- C:\WINDOWS\System32\checkdnsid.xml
[2012/02/29 20:53:44 | 000,444,564 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1330569044.bdinstall.bin
[2012/02/29 20:12:01 | 000,000,385 | ---- | C] () -- C:\WINDOWS\System32\user_gensett.xml
[2012/02/29 20:10:27 | 000,001,873 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Bitdefender Antivirus Plus 2012.lnk
[2012/02/29 18:35:50 | 000,139,870 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1330559400.bdinstall.bin
[2012/02/22 11:38:52 | 000,002,285 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Reflect.lnk
[2012/02/22 09:15:21 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/02/22 09:15:21 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/02/14 11:28:51 | 000,005,120 | ---- | C] () -- C:\Documents and Settings\Gary\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/02/02 17:50:29 | 000,639,320 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-133707808-2752991226-3942243025-1004-0.dat
[2012/02/02 17:50:27 | 000,602,918 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2012/02/01 19:33:13 | 000,000,090 | ---- | C] () -- C:\WINDOWS\QBChanUtil_Trigger.ini
[2012/01/27 20:02:35 | 000,171,164 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1327718518.bdinstall.bin
[2012/01/27 17:23:43 | 000,302,042 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1327708936.bdinstall.bin
[2012/01/27 10:20:01 | 000,617,052 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\1327682970.bdinstall.bin
[2012/01/26 21:19:03 | 000,000,022 | -HS- | C] () -- C:\Documents and Settings\Gary\Application Data\Sys2662.Config.Repository.bin
[2011/12/17 10:15:18 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\0782A18B0A.sys
[2011/10/26 10:45:27 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2011/10/03 09:15:22 | 000,025,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\VSPE.sys
[2011/09/25 14:17:39 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\A4DABE9A09.sys
[2011/09/22 21:01:03 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/09/22 21:01:03 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/09/22 21:01:03 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/09/22 21:01:03 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/09/22 21:01:03 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/09/21 11:04:44 | 000,034,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\rootrepeal.sys
[2011/09/18 23:09:23 | 000,000,220 | ---- | C] () -- C:\Documents and Settings\Gary\Local Settings\Application Data\profile.wkp
[2011/09/06 22:04:43 | 000,000,116 | ---- | C] () -- C:\Documents and Settings\Gary\Application Data\archCalc.Prefs
[2011/08/31 09:31:08 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\587E447A25.sys
[2011/08/26 09:54:51 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\51B05C58E0.sys
[2011/08/23 22:38:41 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\1617EC5C27.sys
[2011/08/22 09:46:49 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\215AFABA7D.sys
[2011/08/15 12:31:05 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\B21765FADC.sys
[2011/08/12 12:55:32 | 000,000,251 | ---- | C] () -- C:\WINDOWS\System32\drivers\hlldrvr.sys
[2011/08/12 12:55:01 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\cwbwiz.dll
[2011/08/12 12:55:00 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\cwbrw.dll
[2011/07/13 07:16:56 | 000,141,432 | ---- | C] () -- C:\WINDOWS\System32\drivers\CprDrvr.sys
[2011/07/13 07:15:14 | 000,106,208 | ---- | C] () -- C:\WINDOWS\System32\CprIf.dll
[2011/06/16 07:14:40 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\D09F512B2C.sys
[2011/05/31 09:14:36 | 000,725,064 | ---- | C] () -- C:\WINDOWS\System32\pwNative.exe
[2011/05/31 09:14:26 | 000,016,472 | ---- | C] () -- C:\WINDOWS\System32\pwdrvio.sys
[2011/05/31 09:14:25 | 000,011,104 | ---- | C] () -- C:\WINDOWS\System32\pwdspio.sys
[2011/05/31 07:29:57 | 000,463,864 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2011/05/31 07:21:02 | 000,000,661 | ---- | C] () -- C:\WINDOWS\System32\VoipUpdate.ini
[2011/05/30 08:41:21 | 000,034,805 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2011/05/30 08:09:15 | 000,217,928 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011/05/30 08:09:12 | 000,217,928 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011/05/30 08:09:12 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011/05/30 08:08:11 | 002,186,342 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2011/01/21 10:58:31 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\SMDRV.SYS
[2011/01/21 08:58:45 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011/01/21 08:58:43 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2011/01/21 08:58:40 | 000,810,496 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/21 08:58:39 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/21 08:58:38 | 000,080,896 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/12/17 21:32:59 | 000,451,072 | ---- | C] () -- C:\WINDOWS\System32\ISSRemoveSP.exe
[2010/12/02 22:50:13 | 000,099,877 | ---- | C] () -- C:\Documents and Settings\Gary\Application Data\Talk.dmp
[2010/11/12 22:24:48 | 000,003,140 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2010/11/12 22:24:48 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\ECB69BB7BF.sys
[2010/11/09 18:09:07 | 000,093,417 | ---- | C] () -- C:\WINDOWS\LookDisk Uninstaller.exe
[2010/11/04 04:53:49 | 000,005,904 | ---- | C] () -- C:\WINDOWS\System32\CLIP.EXE
[2010/09/22 14:18:56 | 002,860,384 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2010/09/19 11:32:42 | 000,000,698 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini
[2010/09/19 10:26:48 | 000,100,584 | ---- | C] () -- C:\WINDOWS\hpgins14.dat
[2010/09/14 12:58:18 | 000,094,215 | ---- | C] () -- C:\WINDOWS\hpqins09.dat.temp
[2010/09/09 15:49:27 | 000,116,987 | ---- | C] () -- C:\WINDOWS\hpoins11.dat.temp
[2010/09/09 15:49:27 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat.temp
[2010/09/09 13:09:35 | 000,094,215 | ---- | C] () -- C:\WINDOWS\hpqins09.dat
[2010/08/17 19:22:02 | 000,070,721 | ---- | C] () -- C:\WINDOWS\hpqins01.dat
[2010/06/27 10:11:30 | 000,065,536 | ---- | C] () -- C:\Program Files\Logger Pro 3
[2010/06/25 10:03:12 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2010/06/18 10:31:02 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2010/05/14 15:59:12 | 000,097,697 | ---- | C] () -- C:\WINDOWS\hpqins05.dat
[2010/05/05 17:54:08 | 000,000,036 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2010/04/24 15:27:03 | 000,000,178 | ---- | C] () -- C:\WINDOWS\WattsUpUSB.ini
[2010/04/09 08:13:36 | 000,000,400 | ---- | C] () -- C:\WINDOWS\crackpdf.INI
[2010/03/08 11:36:17 | 000,001,571 | ---- | C] () -- C:\WINDOWS\Faxcpp1.ini
[2010/03/08 11:36:17 | 000,000,422 | ---- | C] () -- C:\WINDOWS\Faxcpp.ini
[2010/03/08 11:35:01 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\Twscan32.dll
[2010/03/08 11:35:00 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\Png32.dll
[2010/03/08 11:35:00 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\Tga32.dll
[2010/03/08 11:34:59 | 000,241,664 | ---- | C] () -- C:\WINDOWS\System32\Image32.dll
[2010/03/08 11:34:59 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\Jpeg32.dll
[2010/03/08 11:34:59 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\Pcx32.dll
[2010/02/23 14:06:14 | 000,000,225 | ---- | C] () -- C:\WINDOWS\DAZZLE.INI
[2009/12/30 22:31:24 | 000,000,173 | -H-- | C] () -- C:\Documents and Settings\Gary\Application Data\lakerda1967.sys
[2009/12/30 22:30:44 | 000,010,584 | ---- | C] () -- C:\Documents and Settings\Gary\Application Data\docXConverter (3).ini
[2009/12/18 11:35:06 | 000,212,992 | ---- | C] () -- C:\WINDOWS\VMSnap23.exe
[2009/12/18 11:35:06 | 000,081,920 | ---- | C] () -- C:\WINDOWS\VMCap323.exe
[2009/11/28 11:37:36 | 000,000,712 | ---- | C] () -- C:\WINDOWS\FJTWSTI.INI
[2009/11/27 15:32:35 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi60fex0419.dll
[2009/11/27 15:32:34 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex0419.dll
[2009/11/27 15:32:33 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex0419.dll
[2009/11/27 15:32:32 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex0419.dll
[2009/11/27 15:32:31 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0C0A.dll
[2009/11/27 15:32:31 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0419.dll
[2009/11/27 15:32:31 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0416.dll
[2009/11/27 15:32:31 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0410.dll
[2009/11/27 15:32:31 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex040C.dll
[2009/11/27 15:32:31 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0412.dll
[2009/11/27 15:32:31 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0411.dll
[2009/11/27 15:32:31 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0409.dll
[2009/11/27 15:32:31 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0804.dll
[2009/11/27 15:32:30 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0407.dll
[2009/11/27 15:32:30 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5900ex0404.dll
[2009/11/27 15:32:28 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0C0A.dll
[2009/11/27 15:32:28 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0419.dll
[2009/11/27 15:32:28 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0804.dll
[2009/11/27 15:32:27 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0410.dll
[2009/11/27 15:32:27 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex040C.dll
[2009/11/27 15:32:27 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0409.dll
[2009/11/27 15:32:27 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0407.dll
[2009/11/27 15:32:27 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0412.dll
[2009/11/27 15:32:27 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi55302ex0411.dll
[2009/11/27 15:32:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0C0A.dll
[2009/11/27 15:32:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0419.dll
[2009/11/27 15:32:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0416.dll
[2009/11/27 15:32:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0410.dll
[2009/11/27 15:32:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex040C.dll
[2009/11/27 15:32:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0407.dll
[2009/11/27 15:32:26 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0409.dll
[2009/11/27 15:32:26 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0804.dll
[2009/11/27 15:32:26 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0412.dll
[2009/11/27 15:32:26 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0411.dll
[2009/11/27 15:32:26 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6750ex0404.dll
[2009/11/27 15:32:25 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0C0A.dll
[2009/11/27 15:32:25 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0419.dll
[2009/11/27 15:32:25 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0416.dll
[2009/11/27 15:32:25 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0410.dll
[2009/11/27 15:32:25 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex040C.dll
[2009/11/27 15:32:25 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0407.dll
[2009/11/27 15:32:25 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0409.dll
[2009/11/27 15:32:25 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0804.dll
[2009/11/27 15:32:25 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0412.dll
[2009/11/27 15:32:25 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0411.dll
[2009/11/27 15:32:25 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6670ex0404.dll
[2009/11/27 15:32:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0C0A.dll
[2009/11/27 15:32:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0419.dll
[2009/11/27 15:32:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0416.dll
[2009/11/27 15:32:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0410.dll
[2009/11/27 15:32:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex040C.dll
[2009/11/27 15:32:23 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0407.dll
[2009/11/27 15:32:23 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0409.dll
[2009/11/27 15:32:23 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0804.dll
[2009/11/27 15:32:23 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0412.dll
[2009/11/27 15:32:23 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0411.dll
[2009/11/27 15:32:23 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6770ex0404.dll
[2009/11/27 15:32:22 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0C0A.dll
[2009/11/27 15:32:22 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0419.dll
[2009/11/27 15:32:22 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0412.dll
[2009/11/27 15:32:22 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0411.dll
[2009/11/27 15:32:22 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0804.dll
[2009/11/27 15:32:21 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0410.dll
[2009/11/27 15:32:21 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex040C.dll
[2009/11/27 15:32:21 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0409.dll
[2009/11/27 15:32:21 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0407.dll
[2009/11/27 15:32:21 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6230Tex0404.dll
[2009/11/27 15:32:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0C0A.dll
[2009/11/27 15:32:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0419.dll
[2009/11/27 15:32:20 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0410.dll
[2009/11/27 15:32:20 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0412.dll
[2009/11/27 15:32:20 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0411.dll
[2009/11/27 15:32:20 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0804.dll
[2009/11/27 15:32:19 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex040C.dll
[2009/11/27 15:32:19 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0409.dll
[2009/11/27 15:32:19 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0407.dll
[2009/11/27 15:32:19 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6130Tex0404.dll
[2009/11/27 15:32:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0C0A.dll
[2009/11/27 15:32:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0419.dll
[2009/11/27 15:32:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0416.dll
[2009/11/27 15:32:18 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0804.dll
[2009/11/27 15:32:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0410.dll
[2009/11/27 15:32:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex040C.dll
[2009/11/27 15:32:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0409.dll
[2009/11/27 15:32:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0407.dll
[2009/11/27 15:32:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0412.dll
[2009/11/27 15:32:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0411.dll
[2009/11/27 15:32:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6230ex0404.dll
[2009/11/27 15:32:15 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0C0A.dll
[2009/11/27 15:32:15 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0804.dll
[2009/11/27 15:32:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0419.dll
[2009/11/27 15:32:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0416.dll
[2009/11/27 15:32:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0410.dll
[2009/11/27 15:32:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex040C.dll
[2009/11/27 15:32:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0409.dll
[2009/11/27 15:32:14 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0407.dll
[2009/11/27 15:32:14 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0412.dll
[2009/11/27 15:32:14 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0411.dll
[2009/11/27 15:32:14 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6130ex0404.dll
[2009/11/27 15:32:11 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0C0A.dll
[2009/11/27 15:32:11 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0419.dll
[2009/11/27 15:32:11 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0416.dll
[2009/11/27 15:32:11 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0410.dll
[2009/11/27 15:32:11 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0412.dll
[2009/11/27 15:32:11 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0411.dll
[2009/11/27 15:32:11 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0804.dll
[2009/11/27 15:32:10 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex040C.dll
[2009/11/27 15:32:10 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0409.dll
[2009/11/27 15:32:10 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0407.dll
[2009/11/27 15:32:10 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6240ex0404.dll
[2009/11/27 15:32:09 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0C0A.dll
[2009/11/27 15:32:09 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0419.dll
[2009/11/27 15:32:09 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0416.dll
[2009/11/27 15:32:09 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0412.dll
[2009/11/27 15:32:09 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0804.dll
[2009/11/27 15:32:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0410.dll
[2009/11/27 15:32:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex040C.dll
[2009/11/27 15:32:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0409.dll
[2009/11/27 15:32:08 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0407.dll
[2009/11/27 15:32:08 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0411.dll
[2009/11/27 15:32:08 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi6140ex0404.dll
[2009/11/02 17:10:33 | 000,001,927 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Principia Products.zip
[2009/10/05 14:46:40 | 000,003,116 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini
[2009/09/09 16:07:30 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\GkSui18.EXE
[2009/09/06 16:50:05 | 000,000,239 | ---- | C] () -- C:\WINDOWS\AQUALAND.INI
[2009/09/01 14:25:19 | 000,009,216 | ---- | C] () -- C:\WINDOWS\nvapi.dll
[2009/07/17 20:13:34 | 000,010,536 | ---- | C] () -- C:\WINDOWS\System32\drivers\Hmonitor.sys
[2009/07/17 19:15:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\windowfx3.ini
[2009/07/17 19:12:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\windowfx2.ini
[2009/07/17 13:12:11 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\setupfilter.exe
[2009/07/16 08:49:02 | 000,009,343 | ---- | C] () -- C:\WINDOWS\System32\drivers\TDSMAPI.SYS
[2009/05/12 14:35:00 | 000,857,307 | ---- | C] () -- C:\WINDOWS\System32\SSCProt.dll
[2009/03/19 08:57:34 | 000,000,052 | ---- | C] () -- C:\WINDOWS\pdf2rtf.INI
[2009/03/19 08:56:44 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\pdf2word.DAT
[2009/02/13 12:36:32 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\REGISTRY.INI
[2009/01/31 15:42:47 | 000,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe
[2009/01/28 23:40:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OODCNT.INI
[2008/11/06 09:33:02 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008/10/18 19:30:26 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\8DC136AF17.sys
[2008/09/17 12:19:12 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\Gary\Local Settings\Application Data\fusioncache.dat
[2008/09/17 10:53:58 | 000,089,277 | ---- | C] () -- C:\WINDOWS\hpoins06.dat.temp
[2008/09/17 10:53:58 | 000,005,389 | ---- | C] () -- C:\WINDOWS\hpomdl06.dat.temp
[2008/09/03 19:27:58 | 000,186,360 | ---- | C] () -- C:\WINDOWS\System32\MNSFramework.exe
[2008/08/27 00:52:46 | 000,180,134 | ---- | C] () -- C:\WINDOWS\hpwins14.dat.temp
[2008/08/27 00:52:46 | 000,001,108 | ---- | C] () -- C:\WINDOWS\hpwmdl14.dat.temp
[2008/08/26 17:42:33 | 000,012,998 | R--- | C] () -- C:\WINDOWS\hpwscr14.dat
[2008/08/15 23:15:40 | 000,164,623 | ---- | C] () -- C:\WINDOWS\hpoins21.dat
[2008/08/15 23:15:40 | 000,007,262 | ---- | C] () -- C:\WINDOWS\hpomdl21.dat
[2008/07/13 18:49:45 | 000,000,008 | RHS- | C] () -- C:\WINDOWS\System32\D626B87732.sys
[2008/07/04 17:13:29 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\FPCALL.dll
[2008/07/04 17:08:00 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\TpKmpSvc.exe
[2008/07/04 16:26:56 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\default_user_class.dat
[2008/07/04 15:33:19 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008/07/04 15:18:46 | 000,061,440 | ---- | C] () -- C:\WINDOWS\ContextMenuExt.dll
[2008/05/27 22:42:20 | 000,000,029 | ---- | C] () -- C:\WINDOWS\Atw.INI
[2008/05/15 13:34:14 | 000,026,448 | ---- | C] () -- C:\WINDOWS\System32\smfaxmon.dll
[2008/05/04 09:41:26 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008/04/17 22:34:20 | 000,000,395 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2008/03/13 21:26:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2008/01/30 15:34:18 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Gary\Local Settings\Application Data\PUTTY.RND
[2008/01/14 16:47:06 | 000,099,712 | ---- | C] () -- C:\WINDOWS\HPBroker.dll
[2008/01/03 21:23:41 | 000,098,304 | R--- | C] () -- C:\WINDOWS\Opdirdel.exe
[2007/12/30 15:55:16 | 000,000,050 | ---- | C] () -- C:\WINDOWS\winzipme.ini
[2007/12/11 09:40:07 | 000,000,099 | ---- | C] () -- C:\WINDOWS\(null)toolkit.ini
[2007/11/17 20:21:27 | 000,000,230 | ---- | C] () -- C:\WINDOWS\hpbafd.ini
[2007/11/15 07:51:27 | 000,011,254 | ---- | C] () -- C:\WINDOWS\System32\locate.com
[2007/11/13 07:56:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\SBRC.dat
[2007/11/13 07:56:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\SBFC.dat
[2007/10/17 08:34:27 | 000,133,632 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe
[2007/10/17 08:34:27 | 000,003,300 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall-dBpowerAMP Windows Media Audio 9 Codec.dat
[2007/08/27 09:12:43 | 000,004,964 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2007/08/23 16:57:43 | 000,092,192 | ---- | C] () -- C:\WINDOWS\System32\mapi32x.dll
[2007/08/09 04:26:44 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\ac3config.exe
[2007/06/18 22:10:11 | 000,026,641 | ---- | C] () -- C:\WINDOWS\CONSETUP.EXE
[2007/05/29 11:57:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\pp.ini
[2007/03/08 15:47:15 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\ftdiunin.exe
[2007/03/08 15:47:15 | 000,000,089 | R--- | C] () -- C:\WINDOWS\System32\FTD2XXUN.ini
[2007/03/05 13:34:28 | 000,676,224 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.DLL
[2007/02/08 18:14:10 | 000,174,656 | ---- | C] () -- C:\WINDOWS\System32\PSIService.exe
[2007/01/07 17:57:01 | 000,000,968 | ---- | C] () -- C:\WINDOWS\seRapid.INI
[2006/11/26 13:25:26 | 000,000,028 | ---- | C] () -- C:\WINDOWS\Progs_.ini
[2006/11/15 10:54:47 | 000,000,283 | ---- | C] () -- C:\WINDOWS\MLTCLIP.INI
[2006/11/14 16:48:49 | 000,025,600 | ---- | C] () -- C:\WINDOWS\System32\CBNDLL.DLL
[2006/11/14 16:48:49 | 000,015,408 | ---- | C] () -- C:\WINDOWS\System32\CB560WIN.DLL
[2006/11/14 16:48:49 | 000,009,216 | ---- | C] () -- C:\WINDOWS\System32\CBNVDD.DLL
[2006/11/12 22:34:51 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHealr.dll
[2006/11/12 15:53:06 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpspmins.dll
[2006/11/07 23:45:26 | 000,001,385 | ---- | C] () -- C:\WINDOWS\PhoneDialer.ini
[2006/11/05 11:24:09 | 000,130,560 | ---- | C] () -- C:\WINDOWS\System32\ZIPDLL.DLL
[2006/11/05 11:24:09 | 000,125,440 | ---- | C] () -- C:\WINDOWS\System32\UNZDLL.DLL
[2006/11/05 11:24:08 | 000,090,112 | ---- | C] () -- C:\WINDOWS\inst_tsp.exe
[2006/11/02 08:10:16 | 000,080,912 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2006/10/28 08:48:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\graphedit.INI
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi60Fex0C0A.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi60Fex0410.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi60Fex040C.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi60Fex0407.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0C0A.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0419.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0410.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex040C.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0409.dll
[2006/10/27 21:27:18 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0407.dll
[2006/10/27 21:27:18 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi60Fex0409.dll
[2006/10/27 21:27:18 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0412.dll
[2006/10/27 21:27:18 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0411.dll
[2006/10/27 21:27:18 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi60Fex0804.dll
[2006/10/27 21:27:18 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi60Fex0411.dll
[2006/10/27 21:27:18 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5220ex0804.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0C0A.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0419.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0410.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex040C.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0409.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0407.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0C0A.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0419.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0410.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex040C.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0409.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0407.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex0C0A.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex0410.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex040C.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex0409.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex0407.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi4340ex0C0A.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi4340ex0410.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi4340ex040C.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi4340ex0407.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi42202ex0C0A.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi42202ex0410.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi42202ex040C.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi42202ex0407.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi41202ex0C0A.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi41202ex0410.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi41202ex040C.dll
[2006/10/27 21:27:17 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi41202ex0407.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0412.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0411.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0412.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0411.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex0411.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4340ex0409.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi42202ex0409.dll
[2006/10/27 21:27:17 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi41202ex0409.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5530ex0804.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5120ex0804.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5110ex0804.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4340ex0804.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4340ex0411.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi42202ex0804.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi42202ex0411.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi41202ex0804.dll
[2006/10/27 21:27:17 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi41202ex0411.dll
[2006/10/27 21:27:16 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex.dll
[2006/10/27 21:27:16 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex.dll
[2006/10/27 21:27:16 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex0C0A.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex0410.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex040C.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex0407.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex0C0A.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex0410.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex040C.dll
[2006/10/27 21:27:16 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex0407.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex0409.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex0409.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex0c0a.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex0410.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex040C.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex0409.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex0407.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex0C0A.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex0410.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex040C.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex0409.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex0407.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex0C0A.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex0410.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex040C.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex0409.dll
[2006/10/27 21:27:16 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex0407.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex0804.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5750ex0411.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex0804.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi5650ex0411.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex0804.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4530ex0411.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex0804.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4220ex0411.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex0804.dll
[2006/10/27 21:27:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\fi4120ex0411.dll
[2006/10/26 13:10:28 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/10/14 21:33:51 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\nmocod.dll
[2006/10/14 12:51:03 | 000,000,305 | ---- | C] () -- C:\WINDOWS\PICKLIST.INI
[2006/10/14 12:30:09 | 000,000,298 | ---- | C] () -- C:\WINDOWS\MIREPAIR.INI
[2006/10/14 12:30:09 | 000,000,058 | ---- | C] () -- C:\WINDOWS\MITCHELL.INI
[2006/10/14 12:28:22 | 000,003,299 | ---- | C] () -- C:\WINDOWS\ODWIN.INI
[2006/10/14 12:28:22 | 000,000,754 | ---- | C] () -- C:\WINDOWS\BTI.INI
[2006/08/27 22:34:27 | 000,000,229 | ---- | C] () -- C:\WINDOWS\vuepro32.ini
[2006/08/26 11:39:11 | 000,003,120 | ---- | C] () -- C:\WINDOWS\System32\syswd36.ini
[2006/08/25 22:15:31 | 000,003,120 | ---- | C] () -- C:\WINDOWS\System32\syswd31.ini
[2006/08/25 22:15:30 | 000,003,120 | ---- | C] () -- C:\WINDOWS\System32\syswd1.ini
[2006/07/26 23:28:24 | 000,012,499 | ---- | C] () -- C:\WINDOWS\System32\Seagate.bin
[2006/07/03 15:02:51 | 000,000,030 | ---- | C] () -- C:\WINDOWS\Print.ini
[2006/06/20 12:42:49 | 000,000,385 | ---- | C] () -- C:\WINDOWS\SMDebug.ini
[2006/06/14 14:48:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2006/05/13 11:20:14 | 000,000,044 | ---- | C] () -- C:\WINDOWS\SMWizard.INI
[2006/04/14 15:16:06 | 000,111,376 | ---- | C] () -- C:\WINDOWS\System32\expat.dll
[2006/04/14 15:16:06 | 000,040,792 | ---- | C] () -- C:\WINDOWS\System32\agcrypto.dll
[2006/04/03 21:54:39 | 000,000,221 | ---- | C] () -- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini
[2006/04/01 12:30:09 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\rfwdui.dll
[2006/04/01 12:30:08 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\rfstrres.dll
[2006/03/25 23:41:30 | 000,000,131 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini
[2006/02/28 10:27:40 | 000,684,100 | ---- | C] () -- C:\WINDOWS\System32\PC_ExplorerExtension.dll
[2006/02/04 14:19:07 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/01/23 15:53:25 | 000,000,745 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/01/22 22:33:05 | 000,393,264 | ---- | C] () -- C:\WINDOWS\System32\D125UR.DAT
[2006/01/22 22:33:05 | 000,008,575 | ---- | C] () -- C:\WINDOWS\System32\D125UFW.INI
[2006/01/09 13:46:04 | 000,000,283 | ---- | C] () -- C:\WINDOWS\vuepro32.ini.org
[2005/12/27 17:03:41 | 000,000,369 | ---- | C] () -- C:\WINDOWS\SMSI.INI
[2005/12/27 15:47:30 | 000,000,076 | ---- | C] () -- C:\WINDOWS\eFaxView.ini
[2005/12/21 17:53:06 | 000,000,459 | ---- | C] () -- C:\WINDOWS\qpw.INI
[2005/12/21 09:19:08 | 000,831,600 | ---- | C] () -- C:\WINDOWS\System32\Ctaa1.dat
[2005/12/19 23:11:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\TEXTART.INI
[2005/12/19 21:44:14 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2005/12/19 21:00:29 | 000,107,134 | ---- | C] () -- C:\WINDOWS\UninstallFirefox.exe
[2005/12/19 20:59:53 | 000,004,590 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2005/12/19 13:23:54 | 000,000,089 | ---- | C] () -- C:\WINDOWS\Spell Catcher.INI
[2005/11/30 20:16:02 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\tphklock.dll
[2005/09/05 13:52:38 | 000,009,728 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2005/08/31 21:01:13 | 000,000,577 | ---- | C] () -- C:\WINDOWS\System32\gmsblist.dll
[2005/08/26 14:28:34 | 000,143,360 | ---- | C] () -- C:\WINDOWS\unzip.exe
[2005/08/26 14:28:20 | 000,024,576 | ---- | C] () -- C:\WINDOWS\shortcut.exe
[2005/08/26 14:27:58 | 000,045,056 | ---- | C] () -- C:\WINDOWS\devenum.exe
[2005/08/19 22:49:28 | 000,000,033 | ---- | C] () -- C:\WINDOWS\System32\gr6rlzay.dll
[2005/07/05 23:45:08 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\notifyf2.dll
[2005/04/08 17:42:06 | 000,087,540 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2005/03/25 16:42:50 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005/03/11 11:34:10 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2005/03/11 11:34:10 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2005/03/11 11:34:10 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2005/03/11 11:34:09 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2005/03/11 11:34:09 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2005/03/11 11:34:08 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2005/02/01 17:00:46 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\ProgressTrace.dll
[2005/02/01 17:00:44 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\PcdrKernelModeServices.dll
[2004/10/27 12:59:40 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\RSADLLACE.DLL
[2004/10/27 12:59:40 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\RSADLL32.DLL
[2004/08/03 19:38:34 | 000,047,564 | ---- | C] () -- C:\WINDOWS\ntdetect.com
[2004/08/03 17:07:22 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/02 06:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/06/30 16:04:46 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\SDelete.dll
[2004/05/27 09:44:03 | 000,143,414 | ---- | C] () -- C:\WINDOWS\System32\pdfmona.dll
[2004/05/27 09:44:03 | 000,049,852 | ---- | C] () -- C:\WINDOWS\System32\pdf995mon.dll
[2004/05/20 20:47:20 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\Elmdll1.dll
[2004/03/07 14:51:00 | 000,024,924 | ---- | C] () -- C:\WINDOWS\System32\openports.dll
[2004/01/30 10:37:50 | 000,000,133 | ---- | C] () -- C:\WINDOWS\System32\ftdiun2k.ini
[2003/11/09 20:00:35 | 000,385,072 | ---- | C] () -- C:\WINDOWS\System32\HPRrm.dll
[2003/10/15 20:02:25 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\DrvTrNTl.dll
[2003/09/22 13:11:48 | 000,001,003 | ---- | C] () -- C:\WINDOWS\Corpscon.ini
[2003/05/15 17:19:08 | 000,294,400 | ---- | C] () -- C:\WINDOWS\System32\RSTOOL32.DLL
[2003/04/10 15:04:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\JAWTAccessBridge.dll
[2003/02/28 22:29:39 | 000,000,002 | ---- | C] () -- C:\WINDOWS\zdbui.ini
[2003/01/23 20:24:47 | 000,003,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\BANTExt.sys
[2003/01/07 16:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/11/01 20:17:28 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\PnPscan.exe
[2002/11/01 19:15:44 | 000,200,765 | ---- | C] () -- C:\WINDOWS\System32\scandll.dll
[2002/10/10 11:03:08 | 000,151,610 | ---- | C] () -- C:\WINDOWS\System32\uddliv.exe
[2002/10/10 11:03:08 | 000,151,610 | ---- | C] () -- C:\WINDOWS\System32\uddbraxs.exe
[2002/10/10 11:03:08 | 000,151,610 | ---- | C] () -- C:\WINDOWS\System32\uddbraxp.exe
[2002/10/10 11:03:06 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\DrvInit.exe
[2002/10/07 18:15:36 | 000,016,384 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll
[2002/09/05 08:58:15 | 001,213,440 | ---- | C] () -- C:\WINDOWS\System32\opengl.dll
[2002/09/05 08:58:14 | 000,315,904 | ---- | C] () -- C:\WINDOWS\System32\glu.dll
[2002/09/05 08:58:14 | 000,154,624 | ---- | C] () -- C:\WINDOWS\System32\glut.dll
[2002/07/19 15:34:03 | 000,106,496 | ---- | C] () -- C:\WINDOWS\desktopset.exe
[2002/07/19 15:33:53 | 000,377,600 | ---- | C] () -- C:\WINDOWS\System32\BOCOLE.DLL
[2002/07/19 15:33:53 | 000,167,456 | ---- | C] () -- C:\WINDOWS\System32\Bocof.dll
[2002/07/19 15:33:53 | 000,004,052 | ---- | C] () -- C:\WINDOWS\unwise.ini
[2002/07/19 15:27:00 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2002/07/19 15:23:40 | 000,184,320 | ---- | C] () -- C:\WINDOWS\TPBATHLP.EXE
[2002/07/19 15:20:34 | 000,000,791 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2002/07/19 15:20:16 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat
[2002/07/19 15:17:50 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2002/07/19 15:11:28 | 000,022,024 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2002/07/19 15:04:35 | 000,004,387 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2002/07/19 15:03:41 | 002,536,744 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2002/04/16 08:14:44 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\Lfkodak.dll
[2002/04/16 08:14:42 | 000,338,944 | R--- | C] () -- C:\WINDOWS\System32\Lffpx7.dll
[2002/03/21 15:39:02 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2002/03/21 13:51:52 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\MrSIDD.dll
[2002/03/21 12:51:52 | 000,503,808 | ---- | C] () -- C:\WINDOWS\System32\lt_xtrans.dll
[2002/03/21 12:51:52 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\lt_common.dll
[2002/03/21 12:51:52 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\lt_trans.dll
[2002/03/21 12:51:52 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lt_meta.dll
[2002/03/21 12:51:52 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\lt_encrypt.dll
[2002/03/21 12:51:52 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\lt_messagetext.dll
[2002/03/20 21:00:20 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\TransportUSB.dll
[2002/03/20 21:00:20 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\TransportSerial.dll
[2002/03/20 21:00:20 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\TransportIrDA.dll
[2002/03/20 21:00:20 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\TransportIrCOMM.dll
[2002/03/19 19:30:00 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\mag.dll
[2002/03/19 18:30:00 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\msvdm.dll
[2002/03/19 17:30:00 | 000,045,632 | ---- | C] () -- C:\WINDOWS\System32\TaskSwitch.exe
[2002/03/04 19:45:46 | 000,151,610 | ---- | C] () -- C:\WINDOWS\System32\UpdateDD.exe
[2002/03/01 15:43:34 | 000,028,008 | ---- | C] () -- C:\WINDOWS\System32\SUSUSB.SYS
[2001/12/03 17:50:58 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\LTTLS13N.DLL
[2001/12/03 17:50:20 | 000,708,608 | ---- | C] () -- C:\WINDOWS\System32\LTCRY13N.DLL
[2001/11/14 13:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[2001/10/02 13:32:26 | 000,000,319 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2001/08/31 15:33:58 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\VxDMDcDlg.dll
[2001/08/29 20:57:40 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\addurl41.DLL
[2001/08/23 05:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 05:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 05:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 05:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 05:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 05:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 05:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/07/19 09:03:04 | 000,002,858 | ---- | C] () -- C:\WINDOWS\System32\egathdrv.sys
[2001/07/10 15:43:16 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\winwatch.DLL
[2001/07/06 16:30:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
[2001/06/08 14:54:30 | 000,003,478 | ---- | C] () -- C:\WINDOWS\translat.ini
[2000/07/22 16:49:46 | 000,431,104 | ---- | C] () -- C:\WINDOWS\System32\VFCodec.dll
[2000/07/07 07:49:30 | 000,069,120 | ---- | C] () -- C:\WINDOWS\System32\LTDLL.DLL
[1996/04/03 12:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys
[1980/01/01 00:00:00 | 000,497,916 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[1980/01/01 00:00:00 | 000,087,224 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[1980/01/01 00:00:00 | 000,076,800 | ---- | C] () -- C:\WINDOWS\System32\tp4uires.dll
[1980/01/01 00:00:00 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\tp4unins.exe
[1980/01/01 00:00:00 | 000,003,745 | ---- | C] () -- C:\WINDOWS\System32\tp4table.dat
[1980/01/01 00:00:00 | 000,002,481 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[1980/01/01 00:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
< End of report >
Please help me remove any Malware/Virus/Trojans
Thank you,
Docfxit