Serious Help Needed in regards to Think Point Virus Removal!

View previous topic View next topic Go down

Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 29th October 2010, 6:03 pm

My computer was infected with the thinkpoint virus. I went through all of the steps (ending the hotfix.exe process, enabling explorer.exe), and starting running malwarebytes to remove it. I got partially through the malwarebytes scan, when my computer showed a blue screen message. It stated that I needed to reboot, uninstall affected programs (?), and if it happened again to run my computer in safe mode.

The only problem is that now I cannot run my computer at all. At first, when I went to start it in safe mode, my screen was straight black, with no actions. After that, I ran an image burn of the Dr. Web program to clear my system. Ran the program twice, for both hard drives, and eventually they came back clean. But when I went back to start up in safe mode to do a full system clean, instead of a black screen, I'm getting script back.... and that's it.

What am I supposed to do now?

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 29th October 2010, 9:08 pm

Hi,

Welcome to GeekPolice.net!

We are going to be using a Windows Recovery Environment to help disinfect the system so it may boot again.

Step 1: you need to get the appropriate burning software for this task.

Download [You must be registered and logged in to see this link.]
  • This will allow you to burn OTLPE ISO to a cd and make it bootable. Just install the program, from there on in it is fairly automatic.
  • See the [You must be registered and logged in to see this link.] page for more info.
Step 2: download the OTLPE REATOGO Windows Recovery Environment.
  • Download [You must be registered and logged in to see this link.] and burn to a CD using ISO Burner. NOTE: This file is 292Mb in size so it may take some time to download.
  • When downloaded double click and this will then open ISOBurner to burn the file to CD
  • Reboot your system using the boot CD you just created.

    Note : If you do not know how to set your computer to boot from CD follow the steps [You must be registered and logged in to see this link.]
  • Your system should now display a REATOGO-X-PE desktop.
  • Double-click on the OTLPE icon.
  • When asked "Do you wish to load the remote registry", select Yes
  • When asked "Do you wish to load remote user profile(s) for scanning", select Yes
  • Ensure the box "Automatically Load All Remaining Users" is checked and press OK
  • OTL should now start. Change the following settings
    • Change Drivers to Non-Microsoft
    • Press Run Scan to start the scan.
    • When finished, the file will be saved in drive C:\_OTL\MovedFiles
    • Copy this file to your USB drive if you do not have internet connection on this system
    • Please post the contents of the OTL.txt file in your reply.


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 29th October 2010, 10:12 pm

Alright, I have the ISO burner downloaded and installed, but the link for the OTLPE.iso file says it is broken.

Is there another place to download the file from?

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 29th October 2010, 11:19 pm

Hi,

Are you able to boot into Windows at all? If not try Last Known Good Configuration.


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 31st October 2010, 4:17 pm

I tried the Last Known Configuration, but it takes me back to the blank screen again. Is there any other place to download the OTLPE.iso file?

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 31st October 2010, 4:47 pm

Hi,

Please use [You must be registered and logged in to see this link.]


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 31st October 2010, 5:17 pm

Will that still work to boot the computer since it's the .exe file? Or would I need to .iso to boot?

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 31st October 2010, 11:18 pm

Hi,

You should be able to boot with that.


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 2nd November 2010, 9:39 pm

My computer won't let me boot up with the .exe file. Is ther any other way I can get that up and running?

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 3rd November 2010, 1:11 am

Hi,

Do you have your XP disk?


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 3rd November 2010, 10:49 pm

Alright, I re-burned the img of the OTLPE file, and ran it on my main hard drive. It wouldn't run on my secondary drive, either on it's own (it does not have a windows file on it), or running as a slave to the CD-ROM drive.

But here is the OTL.txt file from the main hard drive:

OTL logfile created on: 11/3/2010 6:57:31 PM - Run
OTLPE by OldTimer - Version 3.1.43.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

254.00 Mb Total Physical Memory | 93.00 Mb Available Physical Memory | 37.00% Memory free
222.00 Mb Paging File | 107.00 Mb Available in Paging File | 48.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 34.44 Gb Total Space | 11.31 Gb Free Space | 32.85% Space Free | Partition Type: NTFS
Drive X: | 434.99 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/10/27 14:08:44 | 000,307,200 | ---- | M] (CJSC Computing Forces) [Auto] -- C:\WINDOWS\SYSTEM32\sshnas21.dll -- (SSHNAS)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2010/10/27 18:27:55 | 000,000,000 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\System32\drivers\myiqtsc.sys -- (myiqtsc)
DRV - [2010/09/27 19:21:58 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\sptd.sys -- (sptd)
DRV - [2008/04/13 14:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008/04/13 14:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2004/08/04 00:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\NV4_MINI.SYS -- (nv)
DRV - [2004/06/16 00:52:40 | 000,061,157 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC53.sys -- (IntelC53)
DRV - [2004/04/26 11:49:56 | 000,381,056 | ---- | M] (Sensaura) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\senfilt.sys -- (senfilt)
DRV - [2004/03/06 00:15:34 | 000,647,929 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC52.sys -- (IntelC52)
DRV - [2004/03/06 00:14:42 | 001,233,525 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC51.sys -- (IntelC51)
DRV - [2004/03/06 00:13:38 | 000,037,048 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\mohfilt.sys -- (mohfilt)
DRV - [2003/05/23 14:58:30 | 000,043,136 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2002/11/08 15:45:06 | 000,017,217 | ---- | M] (Dell Computer Corporation) [Kernel | System] -- C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys -- (omci)
DRV - [2001/08/17 16:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SPARROW.SYS -- (Sparrow)
DRV - [2001/08/17 16:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYM_U3.SYS -- (sym_u3)
DRV - [2001/08/17 16:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYM_HI.SYS -- (sym_hi)
DRV - [2001/08/17 16:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYMC8XX.SYS -- (symc8xx)
DRV - [2001/08/17 16:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYMC810.SYS -- (symc810)
DRV - [2001/08/17 15:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ULTRA.SYS -- (ultra)
DRV - [2001/08/17 15:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\QL12160.SYS -- (ql12160)
DRV - [2001/08/17 15:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\QL1080.SYS -- (ql1080)
DRV - [2001/08/17 15:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\QL1280.SYS -- (ql1280)
DRV - [2001/08/17 15:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\DAC2W2K.SYS -- (dac2w2k)
DRV - [2001/08/17 15:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\MRAID35X.SYS -- (mraid35x)
DRV - [2001/08/17 15:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ASC.SYS -- (asc)
DRV - [2001/08/17 15:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ASC3550.SYS -- (asc3550)
DRV - [2001/08/17 15:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ALIIDE.SYS -- (AliIde)
DRV - [2001/08/17 15:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\CMDIDE.SYS -- (CmdIde)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]


IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = [You must be registered and logged in to see this link.]
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Jules_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKU\Jules_ON_C\..\URLSearchHook: {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - Reg Error: Key error. File not found
IE - HKU\Jules_ON_C\..\URLSearchHook: ~4D25F926-B9FE-4682-BF72-8AB8210D6D75} - Reg Error: Key error. File not found
IE - HKU\Jules_ON_C\..\URLSearchHook: ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found
IE - HKU\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\Mikey_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
IE - HKU\Mikey_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKU\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



========== FireFox ==========

FF - prefs.js..browser.search.order.1: "Google"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.facebook.com/"
FF - prefs.js..extensions.enabledItems: {22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}:1.9.1
FF - prefs.js..extensions.enabledItems: {FD57B90C-AEA6-44E8-A343-C6A2E427491D}:1.9.1
FF - prefs.js..keyword.URL: "http://search.fast-find.net/?sid=10101067100&s="
FF - prefs.js..network.proxy.type: 0

FF - user.js..browser.search.selectedEngine: "Google"
FF - user.js..browser.search.order.1: "Google"
FF - user.js..keyword.URL: "http://search.fast-find.net/?sid=10101067100&s="

FF - HKLM\software\mozilla\Firefox\Extensions\\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}: C:\Documents and Settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2} [2010/10/27 14:12:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}: C:\Documents and Settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}\ [2010/10/27 14:50:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/20 22:48:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/22 18:02:58 | 000,000,000 | ---D | M]

[2010/08/07 22:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Mozilla\Extensions
[2010/09/06 12:30:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\extensions
[2010/08/07 22:32:54 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/10/24 07:52:18 | 000,002,074 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google_search.xml

O1 HOSTS File: ([2004/08/04 07:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {81EA3F36-357A-435A-8741-52C27CCC9F21} - C:\WINDOWS\System32\ssqPGwwX.dll File not found
O2 - BHO: (C:\WINDOWS\system32\xeetnkw8sg.dll) - {B6BA40C1-A501-59BD-F413-03B03A2C8952} - C:\WINDOWS\System32\xeetnkw8sg.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - No CLSID value found.
O3 - HKU\Jules_ON_C\..\Toolbar\WebBrowser: (AIM Search) - {40D41A8B-D79B-43D7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll File not found
O4 - HKLM..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
O4 - HKLM..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
O4 - HKLM..\Run: [HNUhcIXnd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp.exe File not found
O4 - HKLM..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
O4 - HKLM..\Run: [HNUhcIXnf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win.exe File not found
O4 - HKLM..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
O4 - HKLM..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
O4 - HKLM..\Run: [HNUhcIXnoc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\debug.exe File not found
O4 - HKLM..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
O4 - HKLM..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
O4 - HKLM..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
O4 - HKLM..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
O4 - HKLM..\Run: [HNUhcIXnsd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKLM..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
O4 - HKLM..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
O4 - HKLM..\Run: [HNUhcIXnth] C:\DOCUME~1\Mikey\LOCALS~1\Temp\svchost.exe File not found
O4 - HKLM..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
O4 - HKLM..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
O4 - HKLM..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
O4 - HKLM..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
O4 - HKLM..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
O4 - HKLM..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKLM..\Run: [HNUhcIXnwpc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\services.exe File not found
O4 - HKLM..\Run: [HNUhcIXnxb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKLM..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
O4 - HKLM..\Run: [HNUhcIXnY] C:\DOCUME~1\Mikey\LOCALS~1\Temp\cmd.exe File not found
O4 - HKLM..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKLM..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
O4 - HKLM..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
O4 - HKLM..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
O4 - HKLM..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKLM..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
O4 - HKLM..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
O4 - HKLM..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKLM..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKLM..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKLM..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
O4 - HKLM..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
O4 - HKLM..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
O4 - HKLM..\Run: [MKaZ] C:\WINDOWS\cmd.exe File not found
O4 - HKLM..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
O4 - HKLM..\Run: [MKbta] C:\WINDOWS\install.exe File not found
O4 - HKLM..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
O4 - HKLM..\Run: [MKbuqc] C:\WINDOWS\iexplarer.exe File not found
O4 - HKLM..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
O4 - HKLM..\Run: [MKee] C:\WINDOWS\user.exe File not found
O4 - HKLM..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
O4 - HKLM..\Run: [MKeta] C:\WINDOWS\services.exe File not found
O4 - HKLM..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
O4 - HKLM..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
O4 - HKLM..\Run: [MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/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==] C:\WINDOWS\spoolsv.exe File not found
O4 - HKLM..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
O4 - HKLM..\Run: [MKexe] C:\WINDOWS\system.exe File not found
O4 - HKLM..\Run: [MKfa] C:\WINDOWS\win.exe File not found
O4 - HKLM..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
O4 - HKLM..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
O4 - HKLM..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
O4 - HKLM..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
O4 - HKLM..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
O4 - HKLM..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
O4 - HKLM..\Run: [OSCD_Creator] C:\DELL\PREODM.EXE ()
O4 - HKLM..\Run: [Recordpad] C:\Program Files\NCH Swift Sound\Recordpad\recordpad.exe (NCH Software)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe ()
O4 - HKLM..\Run: [Tpinudepiguyoru] C:\WINDOWS\ogudenenor.DLL ()
O4 - HKLM..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
O4 - HKU\Jules_ON_C..\Run: [E6TaskPanel] C:\Program Files\EarthLink TotalAccess\TaskPanl.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKbta] C:\WINDOWS\install.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKee] C:\WINDOWS\user.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKeta] C:\WINDOWS\services.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKexe] C:\WINDOWS\system.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [SpySweeper] File not found
O4 - HKU\Jules_ON_C..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
O4 - HKU\Jules_ON_C..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\Mikey_ON_C..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnth] C:\DOCUME~1\Mikey\LOCALS~1\Temp\svchost.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwpc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\services.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKbta] C:\WINDOWS\install.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKee] C:\WINDOWS\user.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKeta] C:\WINDOWS\services.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKexe] C:\WINDOWS\system.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [Snosesicogoto] C:\WINDOWS\werowp.DLL ()
O4 - HKU\Mikey_ON_C..\Run: [U36VRSFLG6] C:\DOCUME~1\Mikey\LOCALS~1\Temp\Uwl.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
O4 - HKLM..\RunOnce: [OSCD_Creator] C:\Dell\PreODM.EXE ()
O4 - Startup: C:\Documents and Settings\Mikey\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\Mikey\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Jules_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Mikey_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [You must be registered and logged in to see this link.] (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.4.2_03)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} [You must be registered and logged in to see this link.] (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.247.15.53 24.247.24.53 68.115.71.53
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (%windir%\XP ARENA.exe) - C:\WINDOWS\XP ARENA.EXE (Microsoft Corporation)
O20 - HKU\Mikey_ON_C Winlogon: Shell - (C:\Documents and Settings\Mikey\Application Data\hotfix.exe) - C:\Documents and Settings\Mikey\Application Data\hotfix.exe ()
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\ssqPGwwX: DllName - ssqPGwwX.dll - File not found
O22 - SharedTaskScheduler: {B6BA40C1-A501-59BD-F413-03B03A2C8952} - dfskea98e4iagjiufhg87df87u - C:\WINDOWS\System32\xeetnkw8sg.dll File not found
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {81EA3F36-357A-435A-8741-52C27CCC9F21} - C:\WINDOWS\System32\ssqPGwwX.dll File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 15:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: FSUTonui - (C:\WINDOWS\system32\magnyi64.dll) - C:\WINDOWS\SYSTEM32\magnyi64.dll ()
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/10/27 17:47:10 | 000,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2010/10/27 17:47:09 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2010/10/27 15:33:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010/10/27 15:31:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Malwarebytes
[2010/10/27 15:31:24 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/10/27 15:31:21 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/10/27 15:31:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Desktop\Malwarebytes' Anti-Malware
[2010/10/27 14:50:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}
[2010/10/27 14:50:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\My Documents\Recordpad
[2010/10/27 14:50:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\Application Data\Recordpad
[2010/10/27 14:50:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\Application Data\NCH Swift Sound
[2010/10/27 14:17:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/10/27 14:16:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LocalService\Favorites
[2010/10/27 14:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}
[2010/10/27 14:08:43 | 000,307,200 | ---- | C] (CJSC Computing Forces) -- C:\WINDOWS\System32\sshnas21.dll
[2010/10/27 13:06:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\My Documents\Gygan Downloads
[2010/10/27 13:06:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Gygan
[2010/10/27 13:06:00 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2010/10/27 13:06:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Xenocode
[2010/10/27 12:57:22 | 000,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010/10/26 23:31:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2010/10/24 19:42:13 | 000,000,000 | ---D | C] -- C:\Program Files\Veetle
[2010/10/24 02:05:19 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mikey\Recent
[2010/10/24 00:38:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Unity
[2010/10/23 17:15:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Temp
[2010/10/23 17:15:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Google
[2010/10/23 17:08:37 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Mikey\UserData
[2010/10/22 22:45:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Opera
[2010/10/22 18:25:22 | 000,000,000 | ---D | C] -- C:\Program Files\GoldWave
[2010/10/22 18:01:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010/10/22 18:01:11 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010/10/22 18:00:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Apple
[2010/10/22 18:00:11 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010/10/22 17:59:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Apple Computer
[2010/10/22 17:59:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DigiDesign
[2010/10/22 17:59:03 | 000,000,000 | ---D | C] -- C:\Program Files\Steinberg
[2010/10/22 17:59:02 | 000,000,000 | ---D | C] -- C:\Program Files\IK Multimedia
[2010/10/22 17:58:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\InstallShield
[2010/10/20 23:58:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\My Documents\Recordpad
[2010/10/20 23:58:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Recordpad
[2010/10/20 23:33:03 | 007,034,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\XP ARENA.EXE
[2010/10/20 19:35:36 | 000,000,000 | ---D | C] -- C:\Program Files\War2Combat
[2010/10/19 13:38:51 | 000,000,000 | ---D | C] -- C:\Program Files\NCH Software
[2010/10/19 13:37:55 | 000,000,000 | ---D | C] -- C:\Program Files\NCH Swift Sound
[2010/10/19 13:37:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\NCH Swift Sound
[2010/10/19 02:49:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\IObit
[2010/10/19 02:49:58 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2010/10/19 02:14:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\FriendBlasterPro
[2010/10/19 02:11:30 | 000,241,664 | ---- | C] (Namtuk.com) -- C:\WINDOWS\System32\MyFramePanel.ocx
[2010/10/19 02:11:27 | 000,609,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ComCtl32.ocx
[2010/10/19 02:11:25 | 000,245,760 | ---- | C] (LansSoft Studio) -- C:\WINDOWS\System32\aUpdateNow.ocx
[2010/10/19 02:11:25 | 000,140,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMDLG32.OCX
[2010/10/19 02:11:25 | 000,132,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msinet.ocx
[2010/10/19 02:11:24 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCTL.OCX
[2010/10/19 02:11:22 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VB6STKIT.DLL
[2010/10/19 02:11:18 | 000,000,000 | ---D | C] -- C:\Program Files\FriendBlasterPro
[2010/10/17 14:42:07 | 000,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache
[2010/10/17 11:28:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Sandlot Shared
[2010/10/14 05:18:33 | 000,000,000 | ---D | C] -- C:\Program Files\LucasArts
[2010/10/13 20:23:58 | 000,000,000 | ---D | C] -- C:\Program Files\Infogrames
[2010/10/13 20:13:54 | 000,000,000 | ---D | C] -- C:\Program Files\Infogrames Interactive
[2010/10/13 20:08:25 | 000,000,000 | ---D | C] -- C:\Program Files\GameHouse Games Collection
[2010/10/13 00:48:09 | 000,000,000 | ---D | C] -- C:\Program Files\Postal2
[2010/10/13 00:38:08 | 000,000,000 | ---D | C] -- C:\Program Files\Core Design
[2010/10/11 20:44:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\My Documents\EMULATORS
[2010/10/10 20:31:02 | 000,000,000 | ---D | C] -- C:\Program Files\Bethesda Softworks
[2010/10/07 18:40:29 | 000,000,000 | ---D | C] -- C:\Program Files\ElcomSoft
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/11/02 12:53:37 | 517,783,552 | ---- | M] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2010/10/27 18:27:55 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\myiqtsc.sys
[2010/10/27 18:27:44 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/27 18:27:28 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2010/10/27 18:27:25 | 000,000,246 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/10/27 18:26:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT
[2010/10/27 18:26:21 | 266,407,936 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/27 18:24:46 | 000,000,782 | ---- | M] () -- C:\Documents and Settings\Jules\Desktop\Windows Media Player.lnk
[2010/10/27 18:24:33 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2010/10/27 17:24:12 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2010/10/27 17:20:26 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008UA.job
[2010/10/27 17:20:25 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008Core.job
[2010/10/27 16:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2010/10/27 15:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2010/10/27 15:23:50 | 000,000,228 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\shell.reg
[2010/10/27 14:24:11 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2010/10/27 14:21:39 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\start
[2010/10/27 14:21:21 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\completescan
[2010/10/27 14:13:12 | 000,000,013 | ---- | M] () -- C:\WINDOWS\popcinfo.dat
[2010/10/27 14:12:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\Ubobecahexofi.bin
[2010/10/27 14:12:40 | 000,000,120 | ---- | M] () -- C:\WINDOWS\Wwehikicilucipi.dat
[2010/10/27 14:12:39 | 000,000,849 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\ThinkPoint.lnk
[2010/10/27 14:12:25 | 000,000,010 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\install
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2010/10/27 14:11:28 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2010/10/27 14:10:08 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2010/10/27 14:09:32 | 000,525,824 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\hotfix.exe
[2010/10/27 14:09:03 | 000,030,000 | ---- | M] () -- C:\WINDOWS\System32\zh0ycwd.dll
[2010/10/27 14:08:44 | 000,307,200 | ---- | M] (CJSC Computing Forces) -- C:\WINDOWS\System32\sshnas21.dll
[2010/10/27 14:08:43 | 000,053,248 | -H-- | M] () -- C:\WINDOWS\System32\magnyi64.dll
[2010/10/27 13:04:16 | 000,000,800 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/27 13:04:16 | 000,000,782 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\Windows Media Player.lnk
[2010/10/27 12:57:08 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/10/27 12:56:51 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/27 12:56:51 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/27 12:52:34 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL
[2010/10/26 23:31:12 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/10/26 22:29:40 | 000,053,454 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Game Setup.exe
[2010/10/25 22:39:36 | 000,235,960 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/25 17:55:05 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\wavepadShakeIcon.job
[2010/10/23 17:19:37 | 000,002,284 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\Google Chrome.lnk
[2010/10/23 17:19:37 | 000,002,262 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/22 23:59:58 | 000,014,336 | ---- | M] () -- C:\Documents and Settings\Mikey\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/22 18:05:35 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\w3data.vss
[2010/10/22 18:05:35 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\msvcsv60.dll
[2010/10/22 18:05:35 | 000,000,016 | ---- | M] () -- C:\WINDOWS\msocreg32.dat
[2010/10/22 18:02:24 | 000,001,802 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk
[2010/10/22 16:41:07 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010/10/22 15:01:00 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\switchShakeIcon.job
[2010/10/20 19:35:41 | 000,001,668 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\War2Combat.lnk
[2010/10/19 02:50:02 | 000,000,755 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Booster.lnk
[2010/10/19 02:50:02 | 000,000,146 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\IObit Freeware.url
[2010/10/19 02:23:34 | 000,402,406 | ---- | M] () -- C:\WINDOWS\System32\PERFH009.DAT
[2010/10/19 02:23:34 | 000,063,016 | ---- | M] () -- C:\WINDOWS\System32\PERFC009.DAT
[2010/10/15 06:12:39 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2010/10/13 20:19:48 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Mikey\My Documents\Games Collection.lnk
[2010/10/13 20:14:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\PowerReg.dat
[2010/10/11 20:50:02 | 000,000,407 | ---- | M] () -- C:\Documents and Settings\Mikey\My Documents\EMULATORS.lnk
[2010/10/09 20:22:27 | 000,000,025 | ---- | M] () -- C:\WINDOWS\popcinfot.dat
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/27 19:13:48 | 517,783,552 | ---- | C] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2010/10/27 15:23:49 | 000,000,228 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\shell.reg
[2010/10/27 14:21:39 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\start
[2010/10/27 14:17:02 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\completescan
[2010/10/27 14:12:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Ubobecahexofi.bin
[2010/10/27 14:12:40 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Wwehikicilucipi.dat
[2010/10/27 14:12:33 | 000,000,849 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\ThinkPoint.lnk
[2010/10/27 14:12:25 | 000,000,010 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\install
[2010/10/27 14:11:31 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At23.job
[2010/10/27 14:11:30 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At22.job
[2010/10/27 14:11:30 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At21.job
[2010/10/27 14:11:26 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At20.job
[2010/10/27 14:11:23 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At19.job
[2010/10/27 14:11:08 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At18.job
[2010/10/27 14:11:04 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At17.job
[2010/10/27 14:10:49 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At16.job
[2010/10/27 14:10:48 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At15.job
[2010/10/27 14:10:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\myiqtsc.sys
[2010/10/27 14:10:42 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At14.job
[2010/10/27 14:10:37 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At13.job
[2010/10/27 14:10:35 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At12.job
[2010/10/27 14:10:35 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At11.job
[2010/10/27 14:10:34 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At10.job
[2010/10/27 14:10:32 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At9.job
[2010/10/27 14:10:28 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At8.job
[2010/10/27 14:10:27 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At7.job
[2010/10/27 14:10:25 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At6.job
[2010/10/27 14:10:12 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At5.job
[2010/10/27 14:10:08 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At4.job
[2010/10/27 14:10:01 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At3.job
[2010/10/27 14:09:58 | 000,000,282 | -H-- | C] () -- C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2010/10/27 14:09:55 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2010/10/27 14:09:53 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2010/10/27 14:09:47 | 000,000,282 | -H-- | C] () -- C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/27 14:09:41 | 000,000,246 | -H-- | C] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/10/27 14:09:31 | 000,525,824 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\hotfix.exe
[2010/10/27 14:09:03 | 000,030,000 | ---- | C] () -- C:\WINDOWS\System32\zh0ycwd.dll
[2010/10/27 14:08:43 | 000,053,248 | -H-- | C] () -- C:\WINDOWS\System32\magnyi64.dll
[2010/10/27 13:04:16 | 000,000,800 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/27 12:55:56 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/27 12:55:56 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/27 12:51:23 | 000,000,782 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\Windows Media Player.lnk
[2010/10/26 22:29:40 | 000,053,454 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Game Setup.exe
[2010/10/23 17:19:37 | 000,002,284 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\Google Chrome.lnk
[2010/10/23 17:19:37 | 000,002,262 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/23 17:15:45 | 000,000,978 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008UA.job
[2010/10/23 17:15:43 | 000,000,926 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008Core.job
[2010/10/22 18:05:32 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\w3data.vss
[2010/10/22 18:05:32 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\msvcsv60.dll
[2010/10/22 18:05:32 | 000,000,016 | ---- | C] () -- C:\WINDOWS\msocreg32.dat
[2010/10/22 18:02:24 | 000,001,802 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk
[2010/10/22 18:00:25 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/10/22 17:55:53 | 000,000,282 | ---- | C] () -- C:\WINDOWS\tasks\wavepadShakeIcon.job
[2010/10/20 19:35:41 | 000,001,668 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\War2Combat.lnk
[2010/10/19 15:01:58 | 000,000,278 | ---- | C] () -- C:\WINDOWS\tasks\switchShakeIcon.job
[2010/10/19 02:50:02 | 000,000,755 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Booster.lnk
[2010/10/19 02:50:02 | 000,000,146 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\IObit Freeware.url
[2010/10/15 06:12:39 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010/10/15 06:12:39 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2010/10/13 20:19:48 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\Mikey\My Documents\Games Collection.lnk
[2010/10/13 20:14:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2010/10/12 22:22:58 | 000,000,013 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2010/10/11 20:50:02 | 000,000,407 | ---- | C] () -- C:\Documents and Settings\Mikey\My Documents\EMULATORS.lnk
[2010/09/28 02:57:12 | 000,000,751 | ---- | C] () -- C:\WINDOWS\Rtcwplat.INI
[2010/09/28 00:16:16 | 000,000,561 | ---- | C] () -- C:\Documents and Settings\Mikey\BnetLog.txt
[2010/09/21 22:05:02 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2010/09/21 13:38:24 | 000,014,336 | ---- | C] () -- C:\Documents and Settings\Mikey\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/04/30 16:36:27 | 000,061,678 | ---- | C] () -- C:\Documents and Settings\Jules\Application Data\PFP120JPR.{PB
[2005/04/30 16:36:27 | 000,012,358 | ---- | C] () -- C:\Documents and Settings\Jules\Application Data\PFP120JCM.{PB
[2005/04/17 18:53:39 | 000,035,328 | ---- | C] () -- C:\Documents and Settings\Jules\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/04/13 17:30:19 | 000,000,034 | ---- | C] () -- C:\WINDOWS\AuthMgr.INI
[2004/12/20 01:42:22 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/12/20 00:56:12 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2004/08/10 15:13:12 | 000,000,780 | ---- | C] () -- C:\WINDOWS\ORUN32.INI
[2004/08/10 15:03:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/08/04 07:00:00 | 000,206,848 | ---- | C] () -- C:\WINDOWS\ogudenenor.dll
[2004/08/04 07:00:00 | 000,081,408 | ---- | C] () -- C:\WINDOWS\werowp.dll
[2004/08/04 07:00:00 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\FXSPERF.INI
[2002/03/13 16:46:46 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\zlib.dll

========== LOP Check ==========

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 3rd November 2010, 10:50 pm

CON'T:

[2005/04/13 19:26:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Aim
[2005/04/12 18:11:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Earthlink
[2005/04/13 17:35:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\EarthLink Toolbar
[2010/10/27 14:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\NCH Swift Sound
[2010/10/27 14:50:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Recordpad
[2010/10/27 15:11:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\uTorrent
[2010/09/27 20:34:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\DAEMON Tools Lite
[2010/09/13 12:55:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\EarthLink Toolbar
[2010/10/27 14:30:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\Gygan
[2010/09/28 19:27:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\HD Tune Pro
[2010/10/19 02:49:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\IObit
[2010/10/22 17:42:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\NCH Swift Sound
[2010/10/22 22:45:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\Opera
[2010/10/20 23:58:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\Recordpad
[2010/10/27 14:11:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\uTorrent
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2010/10/27 14:24:11 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2010/10/27 15:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2010/10/27 16:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2010/10/27 17:24:12 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2010/10/27 18:24:33 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2010/10/27 14:11:28 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2010/10/27 14:10:08 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
[2010/10/22 15:01:00 | 000,000,278 | ---- | M] () -- C:\WINDOWS\Tasks\switchShakeIcon.job
[2010/10/25 17:55:05 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\wavepadShakeIcon.job
[2010/10/27 18:27:44 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/27 18:27:25 | 000,000,246 | -H-- | M] () -- C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/10/27 18:27:28 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job

========== Purity Check ==========


< End of report >

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2010/10/27 14:08:44 | 000,307,200 | ---- | M] (CJSC Computing Forces) [Auto] -- C:\WINDOWS\SYSTEM32\sshnas21.dll -- (SSHNAS)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- C:\WINDOWS\System32\DRIVERS\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2010/10/27 18:27:55 | 000,000,000 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\System32\drivers\myiqtsc.sys -- (myiqtsc)
DRV - [2010/09/27 19:21:58 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\sptd.sys -- (sptd)
DRV - [2008/04/13 14:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008/04/13 14:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2004/08/04 00:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\NV4_MINI.SYS -- (nv)
DRV - [2004/06/16 00:52:40 | 000,061,157 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC53.sys -- (IntelC53)
DRV - [2004/04/26 11:49:56 | 000,381,056 | ---- | M] (Sensaura) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\senfilt.sys -- (senfilt)
DRV - [2004/03/06 00:15:34 | 000,647,929 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC52.sys -- (IntelC52)
DRV - [2004/03/06 00:14:42 | 001,233,525 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\IntelC51.sys -- (IntelC51)
DRV - [2004/03/06 00:13:38 | 000,037,048 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\mohfilt.sys -- (mohfilt)
DRV - [2003/05/23 14:58:30 | 000,043,136 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\DRIVERS\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2002/11/08 15:45:06 | 000,017,217 | ---- | M] (Dell Computer Corporation) [Kernel | System] -- C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys -- (omci)
DRV - [2001/08/17 16:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SPARROW.SYS -- (Sparrow)
DRV - [2001/08/17 16:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYM_U3.SYS -- (sym_u3)
DRV - [2001/08/17 16:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYM_HI.SYS -- (sym_hi)
DRV - [2001/08/17 16:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYMC8XX.SYS -- (symc8xx)
DRV - [2001/08/17 16:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\SYMC810.SYS -- (symc810)
DRV - [2001/08/17 15:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ULTRA.SYS -- (ultra)
DRV - [2001/08/17 15:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\QL12160.SYS -- (ql12160)
DRV - [2001/08/17 15:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\QL1080.SYS -- (ql1080)
DRV - [2001/08/17 15:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\QL1280.SYS -- (ql1280)
DRV - [2001/08/17 15:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\DAC2W2K.SYS -- (dac2w2k)
DRV - [2001/08/17 15:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\MRAID35X.SYS -- (mraid35x)
DRV - [2001/08/17 15:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ASC.SYS -- (asc)
DRV - [2001/08/17 15:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ASC3550.SYS -- (asc3550)
DRV - [2001/08/17 15:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\ALIIDE.SYS -- (AliIde)
DRV - [2001/08/17 15:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Boot] -- C:\WINDOWS\SYSTEM32\DRIVERS\CMDIDE.SYS -- (CmdIde)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]


IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = [You must be registered and logged in to see this link.]
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\Jules_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKU\Jules_ON_C\..\URLSearchHook: {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - Reg Error: Key error. File not found
IE - HKU\Jules_ON_C\..\URLSearchHook: ~4D25F926-B9FE-4682-BF72-8AB8210D6D75} - Reg Error: Key error. File not found
IE - HKU\Jules_ON_C\..\URLSearchHook: ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found
IE - HKU\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


IE - HKU\Mikey_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [You must be registered and logged in to see this link.]
IE - HKU\Mikey_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKU\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



========== FireFox ==========

FF - prefs.js..browser.search.order.1: "Google"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.facebook.com/"
FF - prefs.js..extensions.enabledItems: {22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}:1.9.1
FF - prefs.js..extensions.enabledItems: {FD57B90C-AEA6-44E8-A343-C6A2E427491D}:1.9.1
FF - prefs.js..keyword.URL: "http://search.fast-find.net/?sid=10101067100&s="
FF - prefs.js..network.proxy.type: 0

FF - user.js..browser.search.selectedEngine: "Google"
FF - user.js..browser.search.order.1: "Google"
FF - user.js..keyword.URL: "http://search.fast-find.net/?sid=10101067100&s="

FF - HKLM\software\mozilla\Firefox\Extensions\\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}: C:\Documents and Settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2} [2010/10/27 14:12:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}: C:\Documents and Settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}\ [2010/10/27 14:50:57 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/20 22:48:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/22 18:02:58 | 000,000,000 | ---D | M]

[2010/08/07 22:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Mozilla\Extensions
[2010/09/06 12:30:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\extensions
[2010/08/07 22:32:54 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/10/24 07:52:18 | 000,002,074 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google_search.xml

O1 HOSTS File: ([2004/08/04 07:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {81EA3F36-357A-435A-8741-52C27CCC9F21} - C:\WINDOWS\System32\ssqPGwwX.dll File not found
O2 - BHO: (C:\WINDOWS\system32\xeetnkw8sg.dll) - {B6BA40C1-A501-59BD-F413-03B03A2C8952} - C:\WINDOWS\System32\xeetnkw8sg.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - No CLSID value found.
O3 - HKU\Jules_ON_C\..\Toolbar\WebBrowser: (AIM Search) - {40D41A8B-D79B-43D7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll File not found
O4 - HKLM..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
O4 - HKLM..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
O4 - HKLM..\Run: [HNUhcIXnd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp.exe File not found
O4 - HKLM..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
O4 - HKLM..\Run: [HNUhcIXnf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win.exe File not found
O4 - HKLM..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
O4 - HKLM..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
O4 - HKLM..\Run: [HNUhcIXnoc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\debug.exe File not found
O4 - HKLM..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
O4 - HKLM..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
O4 - HKLM..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
O4 - HKLM..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
O4 - HKLM..\Run: [HNUhcIXnsd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKLM..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
O4 - HKLM..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
O4 - HKLM..\Run: [HNUhcIXnth] C:\DOCUME~1\Mikey\LOCALS~1\Temp\svchost.exe File not found
O4 - HKLM..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
O4 - HKLM..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
O4 - HKLM..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
O4 - HKLM..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
O4 - HKLM..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
O4 - HKLM..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKLM..\Run: [HNUhcIXnwpc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\services.exe File not found
O4 - HKLM..\Run: [HNUhcIXnxb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKLM..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
O4 - HKLM..\Run: [HNUhcIXnY] C:\DOCUME~1\Mikey\LOCALS~1\Temp\cmd.exe File not found
O4 - HKLM..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKLM..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
O4 - HKLM..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
O4 - HKLM..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
O4 - HKLM..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKLM..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
O4 - HKLM..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
O4 - HKLM..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKLM..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKLM..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKLM..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
O4 - HKLM..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
O4 - HKLM..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
O4 - HKLM..\Run: [MKaZ] C:\WINDOWS\cmd.exe File not found
O4 - HKLM..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
O4 - HKLM..\Run: [MKbta] C:\WINDOWS\install.exe File not found
O4 - HKLM..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
O4 - HKLM..\Run: [MKbuqc] C:\WINDOWS\iexplarer.exe File not found
O4 - HKLM..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
O4 - HKLM..\Run: [MKee] C:\WINDOWS\user.exe File not found
O4 - HKLM..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
O4 - HKLM..\Run: [MKeta] C:\WINDOWS\services.exe File not found
O4 - HKLM..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
O4 - HKLM..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
O4 - HKLM..\Run: [MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/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==] C:\WINDOWS\spoolsv.exe File not found
O4 - HKLM..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
O4 - HKLM..\Run: [MKexe] C:\WINDOWS\system.exe File not found
O4 - HKLM..\Run: [MKfa] C:\WINDOWS\win.exe File not found
O4 - HKLM..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
O4 - HKLM..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
O4 - HKLM..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
O4 - HKLM..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
O4 - HKLM..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
O4 - HKLM..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
O4 - HKLM..\Run: [OSCD_Creator] C:\DELL\PREODM.EXE ()
O4 - HKLM..\Run: [Recordpad] C:\Program Files\NCH Swift Sound\Recordpad\recordpad.exe (NCH Software)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe ()
O4 - HKLM..\Run: [Tpinudepiguyoru] C:\WINDOWS\ogudenenor.DLL ()
O4 - HKLM..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
O4 - HKU\Jules_ON_C..\Run: [E6TaskPanel] C:\Program Files\EarthLink TotalAccess\TaskPanl.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKbta] C:\WINDOWS\install.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKee] C:\WINDOWS\user.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKeta] C:\WINDOWS\services.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKexe] C:\WINDOWS\system.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
O4 - HKU\Jules_ON_C..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
O4 - HKU\Jules_ON_C..\Run: [SpySweeper] File not found
O4 - HKU\Jules_ON_C..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
O4 - HKU\Jules_ON_C..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\Mikey_ON_C..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnth] C:\DOCUME~1\Mikey\LOCALS~1\Temp\svchost.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwpc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\services.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKbta] C:\WINDOWS\install.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKee] C:\WINDOWS\user.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKeta] C:\WINDOWS\services.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKexe] C:\WINDOWS\system.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [Snosesicogoto] C:\WINDOWS\werowp.DLL ()
O4 - HKU\Mikey_ON_C..\Run: [U36VRSFLG6] C:\DOCUME~1\Mikey\LOCALS~1\Temp\Uwl.exe File not found
O4 - HKU\Mikey_ON_C..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
O4 - HKLM..\RunOnce: [OSCD_Creator] C:\Dell\PreODM.EXE ()
O4 - Startup: C:\Documents and Settings\Mikey\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\Mikey\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Jules_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Mikey_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [You must be registered and logged in to see this link.] (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.4.2_03)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} [You must be registered and logged in to see this link.] (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.247.15.53 24.247.24.53 68.115.71.53
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (%windir%\XP ARENA.exe) - C:\WINDOWS\XP ARENA.EXE (Microsoft Corporation)
O20 - HKU\Mikey_ON_C Winlogon: Shell - (C:\Documents and Settings\Mikey\Application Data\hotfix.exe) - C:\Documents and Settings\Mikey\Application Data\hotfix.exe ()
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\ssqPGwwX: DllName - ssqPGwwX.dll - File not found
O22 - SharedTaskScheduler: {B6BA40C1-A501-59BD-F413-03B03A2C8952} - dfskea98e4iagjiufhg87df87u - C:\WINDOWS\System32\xeetnkw8sg.dll File not found
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {81EA3F36-357A-435A-8741-52C27CCC9F21} - C:\WINDOWS\System32\ssqPGwwX.dll File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 15:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: FSUTonui - (C:\WINDOWS\system32\magnyi64.dll) - C:\WINDOWS\SYSTEM32\magnyi64.dll ()
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/10/27 17:47:10 | 000,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2010/10/27 17:47:09 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2010/10/27 15:33:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2010/10/27 15:31:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Malwarebytes
[2010/10/27 15:31:24 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/10/27 15:31:21 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/10/27 15:31:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Desktop\Malwarebytes' Anti-Malware
[2010/10/27 14:50:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}
[2010/10/27 14:50:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\My Documents\Recordpad
[2010/10/27 14:50:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\Application Data\Recordpad
[2010/10/27 14:50:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jules\Application Data\NCH Swift Sound
[2010/10/27 14:17:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/10/27 14:16:58 | 000,000,000 | R--D | C] -- C:\Documents and Settings\LocalService\Favorites
[2010/10/27 14:12:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}
[2010/10/27 14:08:43 | 000,307,200 | ---- | C] (CJSC Computing Forces) -- C:\WINDOWS\System32\sshnas21.dll
[2010/10/27 13:06:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\My Documents\Gygan Downloads
[2010/10/27 13:06:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Gygan
[2010/10/27 13:06:00 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2010/10/27 13:06:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Xenocode
[2010/10/27 12:57:22 | 000,014,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010/10/26 23:31:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2010/10/24 19:42:13 | 000,000,000 | ---D | C] -- C:\Program Files\Veetle
[2010/10/24 02:05:19 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mikey\Recent
[2010/10/24 00:38:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Unity
[2010/10/23 17:15:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Temp
[2010/10/23 17:15:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Google
[2010/10/23 17:08:37 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Mikey\UserData
[2010/10/22 22:45:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Opera
[2010/10/22 18:25:22 | 000,000,000 | ---D | C] -- C:\Program Files\GoldWave
[2010/10/22 18:01:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2010/10/22 18:01:11 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2010/10/22 18:00:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Apple
[2010/10/22 18:00:11 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2010/10/22 17:59:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\Apple Computer
[2010/10/22 17:59:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DigiDesign
[2010/10/22 17:59:03 | 000,000,000 | ---D | C] -- C:\Program Files\Steinberg
[2010/10/22 17:59:02 | 000,000,000 | ---D | C] -- C:\Program Files\IK Multimedia
[2010/10/22 17:58:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\InstallShield
[2010/10/20 23:58:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\My Documents\Recordpad
[2010/10/20 23:58:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\Recordpad
[2010/10/20 23:33:03 | 007,034,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\XP ARENA.EXE
[2010/10/20 19:35:36 | 000,000,000 | ---D | C] -- C:\Program Files\War2Combat
[2010/10/19 13:38:51 | 000,000,000 | ---D | C] -- C:\Program Files\NCH Software
[2010/10/19 13:37:55 | 000,000,000 | ---D | C] -- C:\Program Files\NCH Swift Sound
[2010/10/19 13:37:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\NCH Swift Sound
[2010/10/19 02:49:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Application Data\IObit
[2010/10/19 02:49:58 | 000,000,000 | ---D | C] -- C:\Program Files\IObit
[2010/10/19 02:14:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\Local Settings\Application Data\FriendBlasterPro
[2010/10/19 02:11:30 | 000,241,664 | ---- | C] (Namtuk.com) -- C:\WINDOWS\System32\MyFramePanel.ocx
[2010/10/19 02:11:27 | 000,609,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ComCtl32.ocx
[2010/10/19 02:11:25 | 000,245,760 | ---- | C] (LansSoft Studio) -- C:\WINDOWS\System32\aUpdateNow.ocx
[2010/10/19 02:11:25 | 000,140,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMDLG32.OCX
[2010/10/19 02:11:25 | 000,132,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msinet.ocx
[2010/10/19 02:11:24 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCTL.OCX
[2010/10/19 02:11:22 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\VB6STKIT.DLL
[2010/10/19 02:11:18 | 000,000,000 | ---D | C] -- C:\Program Files\FriendBlasterPro
[2010/10/17 14:42:07 | 000,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache
[2010/10/17 11:28:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Sandlot Shared
[2010/10/14 05:18:33 | 000,000,000 | ---D | C] -- C:\Program Files\LucasArts
[2010/10/13 20:23:58 | 000,000,000 | ---D | C] -- C:\Program Files\Infogrames
[2010/10/13 20:13:54 | 000,000,000 | ---D | C] -- C:\Program Files\Infogrames Interactive
[2010/10/13 20:08:25 | 000,000,000 | ---D | C] -- C:\Program Files\GameHouse Games Collection
[2010/10/13 00:48:09 | 000,000,000 | ---D | C] -- C:\Program Files\Postal2
[2010/10/13 00:38:08 | 000,000,000 | ---D | C] -- C:\Program Files\Core Design
[2010/10/11 20:44:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mikey\My Documents\EMULATORS
[2010/10/10 20:31:02 | 000,000,000 | ---D | C] -- C:\Program Files\Bethesda Softworks
[2010/10/07 18:40:29 | 000,000,000 | ---D | C] -- C:\Program Files\ElcomSoft
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/11/02 12:53:37 | 517,783,552 | ---- | M] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2010/10/27 18:27:55 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\myiqtsc.sys
[2010/10/27 18:27:44 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/27 18:27:28 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2010/10/27 18:27:25 | 000,000,246 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/10/27 18:26:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT
[2010/10/27 18:26:21 | 266,407,936 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/27 18:24:46 | 000,000,782 | ---- | M] () -- C:\Documents and Settings\Jules\Desktop\Windows Media Player.lnk
[2010/10/27 18:24:33 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2010/10/27 17:24:12 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2010/10/27 17:20:26 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008UA.job
[2010/10/27 17:20:25 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008Core.job
[2010/10/27 16:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2010/10/27 15:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2010/10/27 15:23:50 | 000,000,228 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\shell.reg
[2010/10/27 14:24:11 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2010/10/27 14:21:39 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\start
[2010/10/27 14:21:21 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\completescan
[2010/10/27 14:13:12 | 000,000,013 | ---- | M] () -- C:\WINDOWS\popcinfo.dat
[2010/10/27 14:12:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\Ubobecahexofi.bin
[2010/10/27 14:12:40 | 000,000,120 | ---- | M] () -- C:\WINDOWS\Wwehikicilucipi.dat
[2010/10/27 14:12:39 | 000,000,849 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\ThinkPoint.lnk
[2010/10/27 14:12:25 | 000,000,010 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\install
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2010/10/27 14:11:28 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2010/10/27 14:10:08 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2010/10/27 14:09:32 | 000,525,824 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\hotfix.exe
[2010/10/27 14:09:03 | 000,030,000 | ---- | M] () -- C:\WINDOWS\System32\zh0ycwd.dll
[2010/10/27 14:08:44 | 000,307,200 | ---- | M] (CJSC Computing Forces) -- C:\WINDOWS\System32\sshnas21.dll
[2010/10/27 14:08:43 | 000,053,248 | -H-- | M] () -- C:\WINDOWS\System32\magnyi64.dll
[2010/10/27 13:04:16 | 000,000,800 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/27 13:04:16 | 000,000,782 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\Windows Media Player.lnk
[2010/10/27 12:57:08 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/10/27 12:56:51 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/27 12:56:51 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/27 12:52:34 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL
[2010/10/26 23:31:12 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/10/26 22:29:40 | 000,053,454 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Game Setup.exe
[2010/10/25 22:39:36 | 000,235,960 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/25 17:55:05 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\wavepadShakeIcon.job
[2010/10/23 17:19:37 | 000,002,284 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\Google Chrome.lnk
[2010/10/23 17:19:37 | 000,002,262 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/22 23:59:58 | 000,014,336 | ---- | M] () -- C:\Documents and Settings\Mikey\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/22 18:05:35 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\w3data.vss
[2010/10/22 18:05:35 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\msvcsv60.dll
[2010/10/22 18:05:35 | 000,000,016 | ---- | M] () -- C:\WINDOWS\msocreg32.dat
[2010/10/22 18:02:24 | 000,001,802 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk
[2010/10/22 16:41:07 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010/10/22 15:01:00 | 000,000,278 | ---- | M] () -- C:\WINDOWS\tasks\switchShakeIcon.job
[2010/10/20 19:35:41 | 000,001,668 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\War2Combat.lnk
[2010/10/19 02:50:02 | 000,000,755 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Booster.lnk
[2010/10/19 02:50:02 | 000,000,146 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\IObit Freeware.url
[2010/10/19 02:23:34 | 000,402,406 | ---- | M] () -- C:\WINDOWS\System32\PERFH009.DAT
[2010/10/19 02:23:34 | 000,063,016 | ---- | M] () -- C:\WINDOWS\System32\PERFC009.DAT
[2010/10/15 06:12:39 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2010/10/13 20:19:48 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\Mikey\My Documents\Games Collection.lnk
[2010/10/13 20:14:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\PowerReg.dat
[2010/10/11 20:50:02 | 000,000,407 | ---- | M] () -- C:\Documents and Settings\Mikey\My Documents\EMULATORS.lnk
[2010/10/09 20:22:27 | 000,000,025 | ---- | M] () -- C:\WINDOWS\popcinfot.dat
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/10/27 19:13:48 | 517,783,552 | ---- | C] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2010/10/27 15:23:49 | 000,000,228 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\shell.reg
[2010/10/27 14:21:39 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\start
[2010/10/27 14:17:02 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\completescan
[2010/10/27 14:12:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Ubobecahexofi.bin
[2010/10/27 14:12:40 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Wwehikicilucipi.dat
[2010/10/27 14:12:33 | 000,000,849 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\ThinkPoint.lnk
[2010/10/27 14:12:25 | 000,000,010 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\install
[2010/10/27 14:11:31 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At23.job
[2010/10/27 14:11:30 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At22.job
[2010/10/27 14:11:30 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At21.job
[2010/10/27 14:11:26 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At20.job
[2010/10/27 14:11:23 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At19.job
[2010/10/27 14:11:08 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At18.job
[2010/10/27 14:11:04 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At17.job
[2010/10/27 14:10:49 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At16.job
[2010/10/27 14:10:48 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At15.job
[2010/10/27 14:10:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\myiqtsc.sys
[2010/10/27 14:10:42 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At14.job
[2010/10/27 14:10:37 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At13.job
[2010/10/27 14:10:35 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At12.job
[2010/10/27 14:10:35 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At11.job
[2010/10/27 14:10:34 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At10.job
[2010/10/27 14:10:32 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At9.job
[2010/10/27 14:10:28 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At8.job
[2010/10/27 14:10:27 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At7.job
[2010/10/27 14:10:25 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At6.job
[2010/10/27 14:10:12 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At5.job
[2010/10/27 14:10:08 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At4.job
[2010/10/27 14:10:01 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At3.job
[2010/10/27 14:09:58 | 000,000,282 | -H-- | C] () -- C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
[2010/10/27 14:09:55 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2010/10/27 14:09:53 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2010/10/27 14:09:47 | 000,000,282 | -H-- | C] () -- C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/27 14:09:41 | 000,000,246 | -H-- | C] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/10/27 14:09:31 | 000,525,824 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\hotfix.exe
[2010/10/27 14:09:03 | 000,030,000 | ---- | C] () -- C:\WINDOWS\System32\zh0ycwd.dll
[2010/10/27 14:08:43 | 000,053,248 | -H-- | C] () -- C:\WINDOWS\System32\magnyi64.dll
[2010/10/27 13:04:16 | 000,000,800 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/10/27 12:55:56 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/27 12:55:56 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/27 12:51:23 | 000,000,782 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\Windows Media Player.lnk
[2010/10/26 22:29:40 | 000,053,454 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Game Setup.exe
[2010/10/23 17:19:37 | 000,002,284 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\Google Chrome.lnk
[2010/10/23 17:19:37 | 000,002,262 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/10/23 17:15:45 | 000,000,978 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008UA.job
[2010/10/23 17:15:43 | 000,000,926 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008Core.job
[2010/10/22 18:05:32 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\w3data.vss
[2010/10/22 18:05:32 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\msvcsv60.dll
[2010/10/22 18:05:32 | 000,000,016 | ---- | C] () -- C:\WINDOWS\msocreg32.dat
[2010/10/22 18:02:24 | 000,001,802 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk
[2010/10/22 18:00:25 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/10/22 17:55:53 | 000,000,282 | ---- | C] () -- C:\WINDOWS\tasks\wavepadShakeIcon.job
[2010/10/20 19:35:41 | 000,001,668 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\War2Combat.lnk
[2010/10/19 15:01:58 | 000,000,278 | ---- | C] () -- C:\WINDOWS\tasks\switchShakeIcon.job
[2010/10/19 02:50:02 | 000,000,755 | ---- | C] () -- C:\Documents and Settings\Mikey\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Booster.lnk
[2010/10/19 02:50:02 | 000,000,146 | ---- | C] () -- C:\Documents and Settings\Mikey\Desktop\IObit Freeware.url
[2010/10/15 06:12:39 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2010/10/15 06:12:39 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2010/10/13 20:19:48 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\Mikey\My Documents\Games Collection.lnk
[2010/10/13 20:14:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2010/10/12 22:22:58 | 000,000,013 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2010/10/11 20:50:02 | 000,000,407 | ---- | C] () -- C:\Documents and Settings\Mikey\My Documents\EMULATORS.lnk
[2010/09/28 02:57:12 | 000,000,751 | ---- | C] () -- C:\WINDOWS\Rtcwplat.INI
[2010/09/28 00:16:16 | 000,000,561 | ---- | C] () -- C:\Documents and Settings\Mikey\BnetLog.txt
[2010/09/21 22:05:02 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2010/09/21 13:38:24 | 000,014,336 | ---- | C] () -- C:\Documents and Settings\Mikey\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/04/30 16:36:27 | 000,061,678 | ---- | C] () -- C:\Documents and Settings\Jules\Application Data\PFP120JPR.{PB
[2005/04/30 16:36:27 | 000,012,358 | ---- | C] () -- C:\Documents and Settings\Jules\Application Data\PFP120JCM.{PB
[2005/04/17 18:53:39 | 000,035,328 | ---- | C] () -- C:\Documents and Settings\Jules\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/04/13 17:30:19 | 000,000,034 | ---- | C] () -- C:\WINDOWS\AuthMgr.INI
[2004/12/20 01:42:22 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/12/20 00:56:12 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2004/08/10 15:13:12 | 000,000,780 | ---- | C] () -- C:\WINDOWS\ORUN32.INI
[2004/08/10 15:03:52 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/08/04 07:00:00 | 000,206,848 | ---- | C] () -- C:\WINDOWS\ogudenenor.dll
[2004/08/04 07:00:00 | 000,081,408 | ---- | C] () -- C:\WINDOWS\werowp.dll
[2004/08/04 07:00:00 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\FXSPERF.INI
[2002/03/13 16:46:46 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\zlib.dll

========== LOP Check ==========

[2005/04/13 19:26:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Aim
[2005/04/12 18:11:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Earthlink
[2005/04/13 17:35:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\EarthLink Toolbar
[2010/10/27 14:50:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\NCH Swift Sound
[2010/10/27 14:50:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\Recordpad
[2010/10/27 15:11:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jules\Application Data\uTorrent
[2010/09/27 20:34:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\DAEMON Tools Lite
[2010/09/13 12:55:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\EarthLink Toolbar
[2010/10/27 14:30:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\Gygan
[2010/09/28 19:27:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\HD Tune Pro
[2010/10/19 02:49:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\IObit
[2010/10/22 17:42:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\NCH Swift Sound
[2010/10/22 22:45:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\Opera
[2010/10/20 23:58:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\Recordpad
[2010/10/27 14:11:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mikey\Application Data\uTorrent
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At1.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At10.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At11.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At12.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At13.job
[2010/10/27 14:24:11 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At14.job
[2010/10/27 15:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At15.job
[2010/10/27 16:24:10 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At16.job
[2010/10/27 17:24:12 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At17.job
[2010/10/27 18:24:33 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At18.job
[2010/10/27 14:11:28 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At19.job
[2010/10/27 14:10:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At2.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At20.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At21.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At22.job
[2010/10/27 14:11:36 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At23.job
[2010/10/27 14:10:08 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At3.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At4.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At5.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At6.job
[2010/10/27 14:10:30 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At7.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At8.job
[2010/10/27 14:10:39 | 000,000,404 | ---- | M] () -- C:\WINDOWS\Tasks\At9.job
[2010/10/22 15:01:00 | 000,000,278 | ---- | M] () -- C:\WINDOWS\Tasks\switchShakeIcon.job
[2010/10/25 17:55:05 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\wavepadShakeIcon.job
[2010/10/27 18:27:44 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010/10/27 18:27:25 | 000,000,246 | -H-- | M] () -- C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/10/27 18:27:28 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job

========== Purity Check ==========



< End of report >

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 4th November 2010, 1:10 am

What do I do now? I tried running my hard drive in safe mode, but it still went to the blank screen.

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 4th November 2010, 3:52 am

Hi,

This machine is severely infected chances of cleaning it are slim if OTL freezes.

Please run OTL.exe.

  • Copy the commands with file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):


    :OTL
    SRV - [2010/10/27 14:08:44 | 000,307,200 | ---- | M] (CJSC Computing Forces) [Auto] -- C:\WINDOWS\SYSTEM32\sshnas21.dll -- (SSHNAS)
    DRV - [2010/10/27 18:27:55 | 000,000,000 | ---- | M] () [Kernel | Boot] -- C:\WINDOWS\System32\drivers\myiqtsc.sys -- (myiqtsc)
    O2 - BHO: (no name) - {81EA3F36-357A-435A-8741-52C27CCC9F21} - C:\WINDOWS\System32\ssqPGwwX.dll File not found
    O2 - BHO: (C:\WINDOWS\system32\xeetnkw8sg.dll) - {B6BA40C1-A501-59BD-F413-03B03A2C8952} - C:\WINDOWS\System32\xeetnkw8sg.dll File not found
    O3 - HKLM\..\Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - No CLSID value found.
    O4 - HKLM..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp.exe File not found
    O4 - HKLM..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
    O4 - HKLM..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnoc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\debug.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnsd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\taskmgr.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
    O4 - HKLM..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnth] C:\DOCUME~1\Mikey\LOCALS~1\Temp\svchost.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnwpc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\services.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnxb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\sysedit.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnY] C:\DOCUME~1\Mikey\LOCALS~1\Temp\cmd.exe File not found
    O4 - HKLM..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
    O4 - HKLM..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
    O4 - HKLM..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
    O4 - HKLM..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
    O4 - HKLM..\Run: [KernelFaultCheck] File not found
    O4 - HKLM..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
    O4 - HKLM..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
    O4 - HKLM..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
    O4 - HKLM..\Run: [MKaZ] C:\WINDOWS\cmd.exe File not found
    O4 - HKLM..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
    O4 - HKLM..\Run: [MKbta] C:\WINDOWS\install.exe File not found
    O4 - HKLM..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
    O4 - HKLM..\Run: [MKbuqc] C:\WINDOWS\iexplarer.exe File not found
    O4 - HKLM..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
    O4 - HKLM..\Run: [MKee] C:\WINDOWS\user.exe File not found
    O4 - HKLM..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
    O4 - HKLM..\Run: [MKeta] C:\WINDOWS\services.exe File not found
    O4 - HKLM..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
    O4 - HKLM..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
    O4 - HKLM..\Run: [MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/
    /////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm
    AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/
    MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm
    ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/
    mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm
    zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/
    /5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ
    AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA
    M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ
    ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A
    mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z
    zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAADIADwA
    AAj/AP8JHEiwoMGDCBMqXMiwocJUqfw4XJhqosWLGDP+k0iQmsaPHv1U/HgQIsSEHi+OFJiyoMeX
    A0UOXHmwJct/EG2SbEhzp8+IPVGWNKnTJ06DRQma5CgwKMKU1FYmNWqQadKpVP+1TBmR49aTSoGK
    dIpxa8yBL5121Rn1ZketaKNCheuWLlysFslmJQm0actU1KgxVSp371GDK/tq1am3IGCFV/cOFmq4
    oEy0dMX6uby4LdKoYO3itSvQaszNHAEXHdnStFanXGEqvWt0cuW8g0FXrCjSdueSOHOORhg04sbf
    dQ87RvsYc9iaUqm6FirbqM7eEH1vNO4ScPPFcU1S/89882/o1UhLqxbN3DRUswRFDgcOMqvJk9kX
    jnUsN7Be78NNFhhXxJHlHUqCfedSQqFRRtx8lUXV24CtbTcaao5VVJhzYXlG22EHVlhXdDOFSCGF
    3HHY3HVBQRhffSqNpaGCaQUWHFmtGQfVY/1R5GFwNsZn3GQ9+QfagMU1xlZT2j2lUJMNwYRVdjQ1
    uJVVSEq05E29zeThgW+FBZhE2KEG1EkD+nGieFVl1qRHGqK1GY+kadQYSGcidud0cOqoH5tBsjTg
    ZzuC1tma96npnVhnLqUYSjTNCeVHdzr41oZ3AXrWi0vmqKWN8OGEYVtSIumZpG0RteJxqlYqanBm
    yv8IJmry1VTna9g9eRtieHE2qWU0DUrhTGN92Vaux/kFqnjMuhqcck/R+iqMjJbp1UJbcvhVnHit
    dau2TBo4rGBzgtYlnEeSmtl9bC54HVy+ocuUfIFGZieV2DWY0Y8T1ZqRcKAGCt6EbKU5KEvfFSZX
    Yw0GtVmoLvIl0hRTDNYVdkFOBegUKExRXXkCcTyFqDIlpVrAIfkZJL7MnbwSU4vepCDMwsXU4mMY
    auhfersmmwrFU+jrmGuYDgT0t30CPZJEJ59oq8wjUVkwymmBibDAm3ZkdVVNc+WsRfZqxZHSKU8H
    sqHV+SGyWbSq+Q/QRm6m7IJhMvmwzMN+lh2pSJb/KKXDu1nt9MCs0RZ2baVRzFhONfFbUMUjq9cU
    TUcPjdlw1AAto+Nerriwwn+ruVqwRn4XZ4rQfb6edY9RjEJRaZ1L45U/d+yem5qjbmFcIV3LEtC2
    v9ZTu2epZma7glUMYMkHIwWgqqqXDjnFCjJ0oVZwe/gevPpKqFjlT6tNMfdlgnVm3i+J70fHL+vG
    oGfH6ihXxZspb6NwAB4ZOICNi0o/avSbj1mkJLaoBM8v3lkfZ8rmLSnB7UmZGx+oaFO+fPUocx1z
    Xe+W1iLdRC87D1MfCF9iqur0KVm6YU3vAggnESLuZ0FbDfVwQjV2PW58ugJfjoQ0uIgERnxBk5HS
    /1Rzn4V172or9FXQXDLB5vnmeWpzG2LU9rUnwTA6EclgvYa1PB9iMHKh0tIDaZisQz3PiBAZolyA
    eEBYRY1QJIzI/5hSsSXxT1B5E00Up0TFuuFGbV+J4AzTIyy4pFFxLhORFlmzm+hNziWaQ9eAOCZC
    KlGpPFjLDg63U7/qiYqEsxHUXfb4LbuVxTIiu5FWMihBcnEpYRQCniw7xkpWbi9OT2nUF7m1GKBx
    jE6v4WSePEUxf3nkaBXyZPoKiT1ACuw6S4yYYyC3FV8ukUtkKuZcfmdN1/lyfb4sIXIyxCYg1jFI
    Imxi1lSEnzoiDCfUy1cp13kaj13qmZHTyDG1yf/NirURJt/sSEpENhZJ0UqOm1TRjYhXP5HRsp3U
    m2B5qjcjOqoNM0DkTeB8xx+k9JFDmMTaRSQ0yLdR74pvqV1JC4KC9W3kYWm6ETIhY5P+CNKcxQSi
    1mxComehhXrK02QI3ymqFjVFoHN6GhzzMhINbsR12bymIUXmMVeWh6CH2siJsOqkj/30pDB0qOIK
    NqbuaGmU7lQf/WYkUrm1SSmArIvCQOqQrUWxoRVLXD6bojlRli97lrkhChYKGebcdHJh1aZNV8dY
    H0LyMpljWrA8ORNo5SavSKEfpZySQZNiVpDVzGCVyPUw8BnNIMj0z6NqYs7X4SebKHjdt8aUwt3/
    2AWGxJIqDQvFs5dCy1uX+5kzwTaV6fXVaPE85AxRtTN4JvSogmViCiXqWX4qRWnzPIp4TuQfKnJF
    cXQVFMM48zYpcqh+v2KPW0oLvMu2lCXgXOvzzhdWGaGmiWM0XJoAJci10YUaWgxVZf2UKf9oUz5g
    xaW76oXRrsDTbWwT7q8IGB+3JRbCvcyrYES7ukcSBG4wVVQRRUthvUkxeeA1GhWFZp7eojdoL4Pp
    Ypt3NfqQbE7s4o1bu8pai0VSNIrbDC1rihnGva1jp2Grah6Ila2YimSBMa49D8OijxUOezGMWsd2
    BrszbjdT9r3rbT96EfLqdcrxiWd+H1IRai7t/5MAReTnRIq1YeHUYgrmDd3WJbzFyJGybF5UfuAq
    X7Fh1lKnPYg2l7bGYpL4Q4abSSoPlbKBbrlx+eMcCbupYJkMac8pe5BmsWJfsSDMtnosZleUtxd3
    9oivvqxiyCQoSmKFNbwg87M4YR3FkqSGQbAh1R7vl2NTQ+rK8G2bbmGE40fuk2zzJCFjeFrTHdet
    w5DJCUJFZ6PLnJVr0AERevFVLpWoE2EYsg54ygjdjDZZpHoSKLDilRw/Svd+6pIcXJ2nutOtFY8V
    PmhRRCfriXTrLRKBqpNpDGmTFY6Z24lLckYjG+3x7odk4qCsVichg06sbdJySGrO4y7JlKSYuf+m
    FulI49h6n/LV5MyT8SZU6nSru0jSBFso3RLZbPWW4j71Cybvaz1c47JaRTyjBa+9k6S4J9+7ipfo
    euZnrZHGqhiZUKJ+NmjDKsqmpZM4oieCI85Jp26xwTWPIea3GtdFbq0BuaMYdzCROoqAOhuUl5N+
    uZIjZFLYPju2Cl6WQPmwgjguNoroxEthjUvehHS5smAucmzBmy+S51R2/8vdzuPbSJ733p4+lCAz
    Nbd/1IF60UtsdZ6Y/ZR1bUhvDjp7ouHl8gWy2X52lHmvUqaQvjd4FQG9r75b5uMgt7mApQuuhduK
    K7W/FIvVzp6/6PeZUQrsz53zejzFqqdKtZ6ONOHNsgcVFkZUxwjxI2RUE/bd/ct3f2kk1XBVwqb5
    kCYO9SOErfR/JvxjV3jQxStHJ0DF53/pdzh+12cph3ZzAXSk5kloclv5h2ths029VXSRB3sIuBwd
    iBi1VjR7dhuE94EmWBoIKBv6YmQBmBU5d4IwKDR7wVMZknkdWIIwSHXo0TNelS0v2HQ52BABAQA7
    ==] C:\WINDOWS\spoolsv.exe File not found
    O4 - HKLM..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
    O4 - HKLM..\Run: [MKexe] C:\WINDOWS\system.exe File not found
    O4 - HKLM..\Run: [MKfa] C:\WINDOWS\win.exe File not found
    O4 - HKLM..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
    O4 - HKLM..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
    O4 - HKLM..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
    O4 - HKLM..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
    O4 - HKLM..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
    O4 - HKLM..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
    O4 - HKLM..\Run: [Tpinudepiguyoru] C:\WINDOWS\ogudenenor.DLL ()
    O4 - HKLM..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKbta] C:\WINDOWS\install.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKee] C:\WINDOWS\user.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKeta] C:\WINDOWS\services.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKexe] C:\WINDOWS\system.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
    O4 - HKU\Jules_ON_C..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXn0Z] C:\DOCUME~1\Mikey\LOCALS~1\Temp\system.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\mdm.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnd] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXneP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\avp32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnfQ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win16.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXngP] C:\DOCUME~1\Mikey\LOCALS~1\Temp\win32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnqe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\login.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnqg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\hexdump.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnrc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winamp.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnsb] C:\DOCUME~1\Mikey\LOCALS~1\Temp\drweb.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnsf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\lsass.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXntg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\wininst.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnth] C:\DOCUME~1\Mikey\LOCALS~1\Temp\svchost.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnUf] C:\DOCUME~1\Mikey\LOCALS~1\Temp\z77hqz.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnusc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\winlogon.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnvc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\user.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnvZ] C:\DOCUME~1\Mikey\LOCALS~1\Temp\install.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwe] C:\DOCUME~1\Mikey\LOCALS~1\Temp\setup.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwg] C:\DOCUME~1\Mikey\LOCALS~1\Temp\spoolsv.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnwpc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\services.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnxc] C:\DOCUME~1\Mikey\LOCALS~1\Temp\smss.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUhcIXnz9] C:\DOCUME~1\Mikey\LOCALS~1\Temp\nvsvc32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnd] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXneP] C:\DOCUME~1\Jules\LOCALS~1\Temp\avp32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnfQ] C:\DOCUME~1\Jules\LOCALS~1\Temp\win16.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnsd] C:\DOCUME~1\Jules\LOCALS~1\Temp\taskmgr.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXntg] C:\DOCUME~1\Jules\LOCALS~1\Temp\wininst.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnvZ] C:\DOCUME~1\Jules\LOCALS~1\Temp\install.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnwg] C:\DOCUME~1\Jules\LOCALS~1\Temp\spoolsv.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnxb] C:\DOCUME~1\Jules\LOCALS~1\Temp\sysedit.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnz9] C:\DOCUME~1\Jules\LOCALS~1\Temp\nvsvc32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [HNUkaIXnZP] C:\DOCUME~1\Jules\LOCALS~1\Temp\gdi32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKaoc] C:\WINDOWS\debug.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKasc] C:\WINDOWS\drweb.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKayc] C:\WINDOWS\csrss.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKbMc] C:\WINDOWS\gdi32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKbta] C:\WINDOWS\install.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKbtc] C:\WINDOWS\hexdump.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKcZ] C:\WINDOWS\mdm.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKee] C:\WINDOWS\user.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKeg] C:\WINDOWS\smss.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKeta] C:\WINDOWS\services.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKetc] C:\WINDOWS\sysedit.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKeuf] C:\WINDOWS\spoolsv.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKevc] C:\WINDOWS\setup.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKexe] C:\WINDOWS\system.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKfPc] C:\WINDOWS\win32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKfre] C:\WINDOWS\wininst.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKfsc] C:\WINDOWS\winlogon.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKWPtg] C:\WINDOWS\TEMP\wininst.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKZe] C:\WINDOWS\avp.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [MKZSc] C:\WINDOWS\avp32.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [Snosesicogoto] C:\WINDOWS\werowp.DLL ()
    O4 - HKU\Mikey_ON_C..\Run: [U36VRSFLG6] C:\DOCUME~1\Mikey\LOCALS~1\Temp\Uwl.exe File not found
    O4 - HKU\Mikey_ON_C..\Run: [uPc+MV0NbtaGuo] C:\WINDOWS\System32\zh0ycwd.DLL ()
    O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\Jules_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
    O7 - HKU\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
    O7 - HKU\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\Mikey_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
    O7 - HKU\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
    O7 - HKU\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.247.15.53 24.247.24.53 68.115.71.53
    O20 - HKU\Mikey_ON_C Winlogon: Shell - (C:\Documents and Settings\Mikey\Application Data\hotfix.exe) - C:\Documents and Settings\Mikey\Application Data\hotfix.exe ()
    O20 - Winlogon\Notify\ssqPGwwX: DllName - ssqPGwwX.dll - File not found
    O22 - SharedTaskScheduler: {B6BA40C1-A501-59BD-F413-03B03A2C8952} - dfskea98e4iagjiufhg87df87u - C:\WINDOWS\System32\xeetnkw8sg.dll File not found
    O36 - AppCertDlls: FSUTonui - (C:\WINDOWS\system32\magnyi64.dll) - C:\WINDOWS\SYSTEM32\magnyi64.dll ()
    [2010/10/27 18:27:44 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
    [2010/10/27 18:27:28 | 000,000,282 | -H-- | M] () -- C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
    [2010/10/27 18:27:25 | 000,000,246 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
    [2010/10/27 15:23:50 | 000,000,228 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\shell.reg
    [2010/10/27 14:21:39 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\start
    [2010/10/27 14:21:21 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\completescan
    [2010/10/27 14:13:12 | 000,000,013 | ---- | M] () -- C:\WINDOWS\popcinfo.dat
    [2010/10/27 14:12:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\Ubobecahexofi.bin
    [2010/10/27 14:12:40 | 000,000,120 | ---- | M] () -- C:\WINDOWS\Wwehikicilucipi.dat
    [2010/10/27 14:12:39 | 000,000,849 | ---- | M] () -- C:\Documents and Settings\Mikey\Desktop\ThinkPoint.lnk
    [2010/10/27 14:12:25 | 000,000,010 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\install
    [2010/10/27 14:09:32 | 000,525,824 | ---- | M] () -- C:\Documents and Settings\Mikey\Application Data\hotfix.exe
    [2010/10/27 14:09:03 | 000,030,000 | ---- | M] () -- C:\WINDOWS\System32\zh0ycwd.dll
    [2010/10/27 14:08:44 | 000,307,200 | ---- | M] (CJSC Computing Forces) -- C:\WINDOWS\System32\sshnas21.dll
    [2010/10/27 14:08:43 | 000,053,248 | -H-- | M] () -- C:\WINDOWS\System32\magnyi64.dll

    :Files
    C:\WINDOWS\tasks\At*.job

    :commands
    [emptytemp]
    [resethosts]
    [purity]



  • Return to OTL.exe, right click in the "Custom Scans/Fixes" window (under the light green bar) and choose Paste.

  • Click the red Run Fix button.
  • A fix log in Notepad will appear. Copy the contents of the fix log to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTL.exe

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.=

======================

Please download ComboFix from [You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

Rename ComboFix.exe to commy.exe before you save it to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found [You must be registered and logged in to see this link.]
  • Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.exe" /stepdel
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console


Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


  • Click on Yes, to continue scanning for malware.
  • When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.



I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 4th November 2010, 11:08 pm

OTL Report:

========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SSHNAS deleted successfully.
C:\WINDOWS\SYSTEM32\sshnas21.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\myiqtsc deleted successfully.
C:\WINDOWS\SYSTEM32\DRIVERS\myiqtsc.sys moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{81EA3F36-357A-435A-8741-52C27CCC9F21}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{81EA3F36-357A-435A-8741-52C27CCC9F21}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B6BA40C1-A501-59BD-F413-03B03A2C8952}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B6BA40C1-A501-59BD-F413-03B03A2C8952}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{BA52B914-B692-46c4-B683-905236F6F655} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BA52B914-B692-46c4-B683-905236F6F655}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXn0Z deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnb deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnd deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXneP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnf deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnfQ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXngP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnoc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnqe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnqg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnrc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnsb deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnsd deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnsf deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXntg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnth deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnUf deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnusc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnvc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnvZ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwpc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnxb deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnxc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnY deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnz9 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnd deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXneP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnfQ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnsd deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXntg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnvZ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnwg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnxb deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnz9 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnZP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKaoc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKasc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKayc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKaZ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKbMc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKbta deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKbtc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKbuqc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKcZ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKee deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKeg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKeta deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKetc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKeuf deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
File MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKevc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKexe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKfa deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKfPc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKfre deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKfsc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKWPtg deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKZe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\MKZSc deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Tpinudepiguyoru deleted successfully.
C:\WINDOWS\ogudenenor.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\uPc+MV0NbtaGuo deleted successfully.
C:\WINDOWS\SYSTEM32\zh0ycwd.dll moved successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXn0Z deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnb deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXneP deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnfQ deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXngP deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnqe deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnqg deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnrc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnsb deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnsf deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXntg deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnUf deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnusc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnvc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnvZ deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwe deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwg deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnxc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnz9 deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnd deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXneP deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnfQ deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnsd deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXntg deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnvZ deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnwg deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnxb deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnz9 deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnZP deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKaoc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKasc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKayc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKbMc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKbta deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKbtc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKcZ deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKee deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKeg deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKeta deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKetc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKeuf deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKevc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKexe deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKfPc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKfre deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKfsc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKWPtg deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKZe deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKZSc deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\uPc+MV0NbtaGuo deleted successfully.
File C:\WINDOWS\System32\zh0ycwd.DLL not found.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXn0Z deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnb deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnd deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXneP deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnf deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnfQ deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXngP deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnqe deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnqg deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnrc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnsb deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnsf deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXntg deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnth deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnUf deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnusc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnvc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnvZ deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwe deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwg deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnwpc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnxc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUhcIXnz9 deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnd deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXneP deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnfQ deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnsd deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXntg deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnvZ deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnwg deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnxb deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnz9 deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\HNUkaIXnZP deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKaoc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKasc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKayc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKbMc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKbta deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKbtc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKcZ deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKee deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKeg deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKeta deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKetc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKeuf deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKevc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKexe deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKfPc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKfre deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKfsc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKWPtg deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKZe deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\MKZSc deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Snosesicogoto deleted successfully.
C:\WINDOWS\werowp.dll moved successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\U36VRSFLG6 deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\uPc+MV0NbtaGuo deleted successfully.
File C:\WINDOWS\System32\zh0ycwd.DLL not found.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\Jules_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoFolderOptions deleted successfully.
Registry value HKEY_USERS\Jules_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools deleted successfully.
Registry key HKEY_USERS\LocalService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\Mikey_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry value HKEY_USERS\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoFolderOptions deleted successfully.
Registry value HKEY_USERS\Mikey_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools deleted successfully.
Registry key HKEY_USERS\NetworkService_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\systemprofile_ON_C\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\\DhcpNameServer| /E : value set successfully!
Registry value HKEY_USERS\Mikey_ON_C\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Documents and Settings\Mikey\Application Data\hotfix.exe deleted successfully.
C:\Documents and Settings\Mikey\Application Data\hotfix.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ssqPGwwX\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\\{B6BA40C1-A501-59BD-F413-03B03A2C8952} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B6BA40C1-A501-59BD-F413-03B03A2C8952}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls\\FSUTonui:C:\WINDOWS\system32\magnyi64.dll deleted successfully.
C:\WINDOWS\SYSTEM32\magnyi64.dll moved successfully.
C:\WINDOWS\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job moved successfully.
C:\WINDOWS\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job moved successfully.
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job moved successfully.
C:\Documents and Settings\Mikey\Desktop\shell.reg moved successfully.
C:\Documents and Settings\Mikey\Application Data\start moved successfully.
C:\Documents and Settings\Mikey\Application Data\completescan moved successfully.
C:\WINDOWS\popcinfo.dat moved successfully.
C:\WINDOWS\Ubobecahexofi.bin moved successfully.
C:\WINDOWS\Wwehikicilucipi.dat moved successfully.
C:\Documents and Settings\Mikey\Desktop\ThinkPoint.lnk moved successfully.
C:\Documents and Settings\Mikey\Application Data\install moved successfully.
File C:\Documents and Settings\Mikey\Application Data\hotfix.exe not found.
File C:\WINDOWS\System32\zh0ycwd.dll not found.
File C:\WINDOWS\System32\sshnas21.dll not found.
File C:\WINDOWS\System32\magnyi64.dll not found.
========== FILES ==========
C:\WINDOWS\tasks\At1.job moved successfully.
C:\WINDOWS\tasks\At10.job moved successfully.
C:\WINDOWS\tasks\At11.job moved successfully.
C:\WINDOWS\tasks\At12.job moved successfully.
C:\WINDOWS\tasks\At13.job moved successfully.
C:\WINDOWS\tasks\At14.job moved successfully.
C:\WINDOWS\tasks\At15.job moved successfully.
C:\WINDOWS\tasks\At16.job moved successfully.
C:\WINDOWS\tasks\At17.job moved successfully.
C:\WINDOWS\tasks\At18.job moved successfully.
C:\WINDOWS\tasks\At19.job moved successfully.
C:\WINDOWS\tasks\At2.job moved successfully.
C:\WINDOWS\tasks\At20.job moved successfully.
C:\WINDOWS\tasks\At21.job moved successfully.
C:\WINDOWS\tasks\At22.job moved successfully.
C:\WINDOWS\tasks\At23.job moved successfully.
C:\WINDOWS\tasks\At3.job moved successfully.
C:\WINDOWS\tasks\At4.job moved successfully.
C:\WINDOWS\tasks\At5.job moved successfully.
C:\WINDOWS\tasks\At6.job moved successfully.
C:\WINDOWS\tasks\At7.job moved successfully.
C:\WINDOWS\tasks\At8.job moved successfully.
C:\WINDOWS\tasks\At9.job moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes

User: Jules
->Temp folder emptied: 614986831 bytes
->Temporary Internet Files folder emptied: 2431511 bytes
->FireFox cache emptied: 93617972 bytes
->Flash cache emptied: 47235 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 180162 bytes

User: Mikey
->Temp folder emptied: 182500386 bytes
->Temporary Internet Files folder emptied: 49713342 bytes
->FireFox cache emptied: 43919867 bytes
->Google Chrome cache emptied: 56915911 bytes
->Flash cache emptied: 8359 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 554332 bytes

%systemdrive% .tmp files removed: 6597 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 1940497 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2612102 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 34318 bytes

Total Files Cleaned = 1,001.00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTLPE by OldTimer - Version 3.1.43.0 log created on 11042010_214353

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 4th November 2010, 11:09 pm

ComboFix Report:

ComboFix 10-11-03.04 - Jules 11/04/2010 22:14:44.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.254.98 [GMT -4:00]
Running from: c:\documents and settings\Mikey\My Documents\Downloads\ComboFix.exe
( Other Deletions )
c:\documents and settings\All Users\Application Data\Update\seupd.exe
c:\documents and settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}
c:\documents and settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}\chrome.manifest
c:\documents and settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}\chrome\content\_cfg.js
c:\documents and settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}\chrome\content\overlay.xul
c:\documents and settings\Jules\Local Settings\Application Data\{FD57B90C-AEA6-44E8-A343-C6A2E427491D}\install.rdf
c:\documents and settings\Mikey\Application Data\Game Setup.exe
c:\documents and settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}
c:\documents and settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}\chrome.manifest
c:\documents and settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}\chrome\content\_cfg.js
c:\documents and settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}\chrome\content\overlay.xul
c:\documents and settings\Mikey\Local Settings\Application Data\{22BCE474-26A4-41D6-BC8F-CD0F4ECAC1E2}\install.rdf
c:\program files\Mozilla Firefox\searchplugins\google_search.xml
c:\windows\system32\msvcsv60.dll

.
((((((((((((((((((((((((( Files Created from 2010-10-05 to 2010-11-05 )))))))))))))))))))))))))))))))
.

2010-11-05 01:56 . 2010-11-05 01:56 -------- d-----w- c:\windows\LastGood
2010-11-05 01:44 . 2010-10-23 17:55 553984 ----a-r- C:\OTLPE.exe
2010-11-05 01:43 . 2010-11-05 01:43 -------- d-----w- C:\_OTL
2010-10-27 21:47 . 2009-08-06 23:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-10-27 21:47 . 2009-08-06 23:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-10-27 19:31 . 2010-10-27 19:31 -------- d-----w- c:\documents and settings\Mikey\Application Data\Malwarebytes
2010-10-27 19:31 . 2010-04-29 19:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-27 19:31 . 2010-10-27 19:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-10-27 19:31 . 2010-04-29 19:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-27 18:50 . 2010-10-27 18:50 -------- d-----w- c:\documents and settings\Jules\Application Data\Recordpad
2010-10-27 18:50 . 2010-10-27 18:50 -------- d-----w- c:\documents and settings\Jules\Application Data\NCH Swift Sound
2010-10-27 18:08 . 2010-11-05 02:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Update
2010-10-27 17:06 . 2010-10-27 18:30 -------- d-----w- c:\documents and settings\Mikey\Application Data\Gygan
2010-10-27 17:06 . 2010-10-27 17:06 -------- d-----w- c:\program files\Xenocode
2010-10-27 17:06 . 2010-10-27 17:06 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Xenocode
2010-10-27 03:31 . 2010-10-27 03:31 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-10-24 23:42 . 2010-10-24 23:42 -------- d-----w- c:\program files\Veetle
2010-10-24 04:38 . 2010-10-24 04:38 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Unity
2010-10-23 21:15 . 2010-10-23 21:16 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Temp
2010-10-23 21:15 . 2010-10-23 21:18 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Google
2010-10-23 21:08 . 2010-10-23 21:08 -------- d-s---w- c:\documents and settings\Mikey\UserData
2010-10-22 22:32 . 2010-10-22 22:32 -------- d-----w- c:\documents and settings\All Users\Application Data\GoldWave
2010-10-22 22:25 . 2010-10-22 22:25 -------- d-----w- c:\program files\GoldWave
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin7.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-22 22:01 . 2010-10-22 22:01 -------- d-----w- c:\program files\Common Files\Apple
2010-10-22 22:01 . 2010-10-22 22:02 -------- d-----w- c:\program files\QuickTime
2010-10-22 22:01 . 2010-10-22 22:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Apple
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\program files\Apple Software Update
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Apple Computer
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\Common Files\DigiDesign
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\Steinberg
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\IK Multimedia
2010-10-22 21:58 . 2010-10-22 21:58 -------- d-----w- c:\documents and settings\Mikey\Application Data\InstallShield
2010-10-21 03:58 . 2010-10-21 03:58 -------- d-----w- c:\documents and settings\Mikey\Application Data\Recordpad
2010-10-21 03:33 . 2010-02-16 17:04 7034880 ----a-w- c:\windows\XP ARENA.EXE
2010-10-20 23:35 . 2010-10-22 19:53 -------- d-----w- c:\program files\War2Combat
2010-10-19 17:38 . 2010-10-19 17:38 -------- d-----w- c:\program files\NCH Software
2010-10-19 17:38 . 2010-10-22 21:42 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2010-10-19 17:37 . 2010-10-19 17:38 -------- d-----w- c:\program files\NCH Swift Sound
2010-10-19 17:37 . 2010-10-22 21:42 -------- d-----w- c:\documents and settings\Mikey\Application Data\NCH Swift Sound
2010-10-19 06:49 . 2010-10-19 06:49 -------- d-----w- c:\documents and settings\Mikey\Application Data\IObit
2010-10-19 06:49 . 2010-10-19 06:49 -------- d-----w- c:\program files\IObit
2010-10-19 06:14 . 2010-10-19 06:15 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\FriendBlasterPro
2010-10-19 06:11 . 2005-10-11 17:25 241664 ----a-w- c:\windows\system32\MyFramePanel.ocx
2010-10-19 06:11 . 2004-03-09 00:30 609824 ----a-w- c:\windows\system32\ComCtl32.ocx
2010-10-19 06:11 . 2005-07-15 16:49 245760 ----a-w- c:\windows\system32\aUpdateNow.ocx
2010-10-19 06:11 . 2004-03-08 22:00 132880 ----a-w- c:\windows\system32\msinet.ocx
2010-10-19 06:11 . 2000-05-22 04:00 140488 ----a-w- c:\windows\system32\COMDLG32.OCX
2010-10-19 06:11 . 2004-03-08 22:00 1081616 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2010-10-19 06:11 . 2000-07-15 04:00 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2010-10-19 06:11 . 2010-10-19 06:18 -------- d-----w- c:\program files\FriendBlasterPro
2010-10-17 18:42 . 2010-10-17 18:42 -------- d-sh--w- c:\windows\ftpcache
2010-10-17 15:28 . 2010-10-28 11:28 -------- d-----w- c:\program files\Common Files\Sandlot Shared
2010-10-17 15:28 . 2010-10-17 15:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Sandlot Games
2010-10-15 10:12 . 2010-10-15 10:12 1409 ----a-w- c:\windows\QTFont.for
2010-10-14 09:18 . 2010-10-14 09:18 -------- d-----w- c:\program files\LucasArts
2010-10-14 00:23 . 2010-10-14 00:23 -------- d-----w- c:\program files\Infogrames
2010-10-14 00:13 . 2010-10-14 00:13 -------- d-----w- c:\program files\Infogrames Interactive
2010-10-14 00:08 . 2010-10-14 00:13 -------- d-----w- c:\program files\GameHouse Games Collection
2010-10-13 04:48 . 2010-10-13 04:54 -------- d-----w- c:\program files\Postal2
2010-10-13 04:38 . 2010-10-13 04:38 -------- d-----w- c:\program files\Core Design
2010-10-11 00:31 . 2010-10-11 00:31 -------- d-----w- c:\program files\Bethesda Softworks
2010-10-11 00:28 . 2001-09-05 10:18 225280 ------w- c:\program files\Common Files\InstallShield\IScript\iscript.dll
2010-10-11 00:28 . 2001-09-05 10:14 176128 ------w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2010-10-11 00:28 . 2001-09-05 10:13 32768 ------w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2010-10-11 00:28 . 2001-09-05 10:18 77824 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2010-10-11 00:27 . 2001-09-05 10:24 610436 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2010-10-07 22:40 . 2010-10-19 06:41 -------- d-----w- c:\program files\ElcomSoft

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-28 22:08 . 2010-09-28 22:08 74 ----a-w- C:\start.vbs
2010-09-27 23:21 . 2010-09-27 23:21 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-08-12 18:29 . 2010-08-12 18:29 2772992 ----a-w- c:\windows\system32\GPhotos.scr
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\SYSTEM32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\asyncmac.sys
[-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys

[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\BEEP.SYS

[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ndis.sys
[-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ntfs.sys
[-] 2004-08-04 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys

[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\NULL.SYS

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DLLCACHE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DRIVERS\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2005-03-14 . 6129E70F3D2F1E60860C930EBEAF92C2 . 359936 . . [5.1.2600.2631] . . c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[-] 2005-03-14 . 0E66B538096A6529D1AC66E78EB0D5C8 . 359808 . . [5.1.2600.2631] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893066$\tcpip.sys

[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\browser.dll
[-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\lsass.exe
[-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\netman.dll
[-] 2004-08-04 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll

[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SYSTEM32\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SYSTEM32\bits\qmgr.dll
[-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\DLLCACHE\rpcss.dll
[-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2009-02-09 . 24B5D53B9ACCC1E2EDCF0A878D6659D4 . 401408 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2005-01-14 . 419899803CA479B73B02390318C787C0 . 395776 . . [5.1.2600.2595] . . c:\windows\$NtUninstallKB956572_0$\rpcss.dll
[-] 2005-01-14 . 94456045BEB4545B5EBE1DCC85951AFA . 395776 . . [5.1.2600.2595] . . c:\windows\$hf_mig$\KB873333\SP2QFE\rpcss.dll
[-] 2004-08-04 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB873333$\rpcss.dll

[-] 2009-02-06 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\DLLCACHE\services.exe
[-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-06 . 4712531AB7A01B7EE059853CA17D39BD . 110592 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956572_0$\services.exe

[-] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\SoftwareDistribution\Download\9460002f6d8231358fc1eb590f9b1dce\sp3qfe\spoolsv.exe
[-] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\SoftwareDistribution\Download\9460002f6d8231358fc1eb590f9b1dce\sp3gdr\spoolsv.exe
[-] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\spoolsv.exe
[-] 2004-08-04 . 7435B108B935E42EA92CA94F59C8E717 . 57856 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe

[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\winlogon.exe
[-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2010-08-23 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82] . . c:\windows\SoftwareDistribution\Download\21cbd3f70584651805685eba1753505f\SP3QFE\comctl32.dll
[-] 2010-08-23 . 736B12B725AEB2B07F0241A9F680CB10 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\21cbd3f70584651805685eba1753505f\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2010-08-23 . 736B12B725AEB2B07F0241A9F680CB10 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\21cbd3f70584651805685eba1753505f\SP3QFE\asms\60\msft\windows\common\controls\comctl32.dll
[-] 2008-04-14 . BD38D1EBE24A46BD3EDA059560AFBA12 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82] . . c:\windows\SYSTEM32\comctl32.dll
[-] 2004-08-04 . A77DFB85FAEE49D66C74DA6024EBC69B . 611328 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-04 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\COMCTL32.DLL
[-] 2004-08-04 . 5AF68A5E44734A082442668E9C787743 . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\COMCTL32.DLL

[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\cryptsvc.dll
[-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\SYSTEM32\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\SYSTEM32\DLLCACHE\es.dll
[-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2004-08-04 11:00 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB950974_0$\es.dll

[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\imm32.dll
[-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3GDR\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\SYSTEM32\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\SYSTEM32\DLLCACHE\kernel32.dll
[-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2009-03-21 . 80202858D245FF07DAA1739C57A3E19B . 989184 . . [5.1.2600.3541] . . c:\windows\$hf_mig$\KB959426\SP2QFE\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2004-08-04 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB959426_0$\kernel32.dll

[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\linkinfo.dll
[-] 2004-08-04 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\lpk.dll
[-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2010-09-09 . 575FBCB3E2C6E848F0386F38AAF0E4ED . 3074560 . . [6.00.2900.6036] . . c:\windows\SoftwareDistribution\Download\3fcddeb58b831e5d95534882e96f16af\sp3qfe\mshtml.dll
[-] 2010-09-09 . 565EA6D4DF8638CE9143A20DE5B229F6 . 3073536 . . [6.00.2900.6036] . . c:\windows\SoftwareDistribution\Download\3fcddeb58b831e5d95534882e96f16af\sp3gdr\mshtml.dll
[-] 2010-06-24 . E833C8A9918DA80DBE80ABD2917B9292 . 3073536 . . [6.00.2900.6003] . . c:\windows\$hf_mig$\KB2183461\SP3QFE\mshtml.dll
[-] 2010-06-24 . 2CA3A0836EF47AEE5D471B43B7639B6C . 3073024 . . [6.00.2900.6003] . . c:\windows\SYSTEM32\mshtml.dll
[-] 2010-06-24 . 2CA3A0836EF47AEE5D471B43B7639B6C . 3073024 . . [6.00.2900.6003] . . c:\windows\SYSTEM32\DLLCACHE\mshtml.dll
[-] 2010-04-16 . 6B930309A4A246D133A49EADE11E5773 . 3073024 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3GDR\mshtml.dll
[-] 2010-04-16 . 6B930309A4A246D133A49EADE11E5773 . 3073024 . . [6.00.2900.5969] . . c:\windows\$NtUninstallKB2183461$\mshtml.dll
[-] 2010-04-16 . 9574D5B0C784DA0FD8F6A9BB37936A52 . 3073536 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3QFE\mshtml.dll
[-] 2010-04-16 . 44A6BB3DE8FF814209A1CDFEC4BB51BD . 3065344 . . [6.00.2900.3698] . . c:\windows\$NtServicePackUninstall$\mshtml.dll
[-] 2010-04-16 . 149F37C9702F24A50741E56FBC7AE56B . 3073024 . . [6.00.2900.3698] . . c:\windows\$hf_mig$\KB982381\SP2QFE\mshtml.dll
[-] 2008-04-14 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512] . . c:\windows\$NtUninstallKB982381$\mshtml.dll
[-] 2008-04-14 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2005-03-10 . 84A1B9B0C362051E68BB131F14C6DAAD . 3010560 . . [6.00.2900.2627] . . c:\windows\$NtUninstallKB982381_0$\mshtml.dll
[-] 2005-03-10 . 255C2CE965543ABDC3E0A25A5DA1874A . 3011072 . . [6.00.2900.2627] . . c:\windows\$hf_mig$\KB890923\SP2QFE\mshtml.dll
[-] 2004-09-29 . D94E6405E420373161467ACD3DA65640 . 3004928 . . [6.00.2900.2523] . . c:\windows\$NtUninstallKB890923$\mshtml.dll
[-] 2004-09-29 . 087FF7C54E7EBE4A59BD4DFC1D0EE9B8 . 3004928 . . [6.00.2900.2524] . . c:\windows\$hf_mig$\KB834707\SP2QFE\mshtml.dll
[-] 2004-08-04 . 376E0843B2356CA91CEC8D9837A56FF7 . 3003392 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB834707$\mshtml.dll

[-] 2008-04-14 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\SYSTEM32\msvcrt.dll
[-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-04 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\MSVCRT.DLL
[-] 2004-08-04 . 98EC447E00229AFD88D5161A25D065DA . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\MSVCRT.DLL

[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DLLCACHE\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-04 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll

[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\netlogon.dll
[-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\Driver Cache\I386\ntoskrnl.exe
[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\ntoskrnl.exe
[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\DLLCACHE\ntoskrnl.exe
[-] 2010-04-27 . A2ABBEC40CDB57454645D06B7EBD22F5 . 2190080 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[-] 2010-02-16 . 97E2BF68857818A4D142B872404DC41B . 2186880 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntoskrnl.exe
[-] 2010-02-16 . EBB75B113E74E90074382347B74D652B . 2181376 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2010-02-16 . E1F653A542449D54FA2D27463D99B6B6 . 2190080 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-02-07 . EFE8EACE83EAAD5849A7A548FB75B584 . 2189184 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-06 . FACEBB0CA3154F77009CDFEE78A00BBB . 2180480 . . [5.1.2600.3520] . . c:\windows\$NtUninstallKB979683_0$\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-02-06 . 6A936E9D7BADAF3CAAEED1E1966EC1B0 . 2186112 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2005-03-02 . 28187802B7C368C0D3AEF7D4C382AABB . 2179456 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2005-03-02 . 4D4CF2C14550A4B7718E94A6E581856E . 2179328 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB956572_0$\ntoskrnl.exe
[-] 2004-08-04 . CE218BC7088681FAA06633E218596CA7 . 2180992 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntoskrnl.exe

[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\SYSTEM32\powrprof.dll
[-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\scecli.dll
[-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\sfc.dll
[-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\svchost.exe
[-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\tapisrv.dll
[-] 2004-08-04 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\user32.dll
[-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . DE2DB164BBB35DB061AF0997E4499054 . 577024 . . [5.1.2600.2622] . . c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2004-08-04 . C72661F8552ACE7C5C85E16A3CF505C4 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\user32.dll

[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\userinit.exe
[-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2010-09-09 . D7275E6DA8D1A8BEB36468548899522C . 668672 . . [6.00.2900.6036] . . c:\windows\SoftwareDistribution\Download\3fcddeb58b831e5d95534882e96f16af\sp3qfe\wininet.dll
[-] 2010-09-09 . 118767E386CBAE1AD67D934BC9402E08 . 667136 . . [6.00.2900.6036] . . c:\windows\SoftwareDistribution\Download\3fcddeb58b831e5d95534882e96f16af\sp3gdr\wininet.dll
[-] 2010-06-24 . 7F489AED93B4AA2B170025DF0670E17F . 668672 . . [6.00.2900.6003] . . c:\windows\$hf_mig$\KB2183461\SP3QFE\wininet.dll
[-] 2010-06-24 . CD8CAE4012D9A5E6B6C6A46D80460527 . 667136 . . [6.00.2900.6003] . . c:\windows\SYSTEM32\wininet.dll
[-] 2010-06-24 . CD8CAE4012D9A5E6B6C6A46D80460527 . 667136 . . [6.00.2900.6003] . . c:\windows\SYSTEM32\DLLCACHE\wininet.dll
[-] 2010-04-16 . B43B18FB0EB577856883E5A0708AB9EF . 667136 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3GDR\wininet.dll
[-] 2010-04-16 . B43B18FB0EB577856883E5A0708AB9EF . 667136 . . [6.00.2900.5969] . . c:\windows\$NtUninstallKB2183461$\wininet.dll
[-] 2010-04-16 . C3052A99A24F462B418632A05328BB38 . 668672 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3QFE\wininet.dll
[-] 2010-04-16 . 602BB82E56758BC6E50B17741CD5F081 . 662016 . . [6.00.2900.3698] . . c:\windows\$NtServicePackUninstall$\wininet.dll
[-] 2010-04-16 . 9CE5DEF97E55E52C23201098DB755280 . 668672 . . [6.00.2900.3698] . . c:\windows\$hf_mig$\KB982381\SP2QFE\wininet.dll
[-] 2008-04-14 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512] . . c:\windows\$NtUninstallKB982381$\wininet.dll
[-] 2008-04-14 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2005-03-10 . 6F018D6319BE4F96426EA829B79E05D5 . 656896 . . [6.00.2900.2627] . . c:\windows\$NtUninstallKB982381_0$\wininet.dll
[-] 2005-03-10 . C8663B488996E89A84C3D17C1D12B79E . 657920 . . [6.00.2900.2627] . . c:\windows\$hf_mig$\KB890923\SP2QFE\wininet.dll
[-] 2004-09-29 . CBA65B573C66FE23F647FF96E3A10994 . 656896 . . [6.00.2900.2518] . . c:\windows\$NtUninstallKB890923$\wininet.dll
[-] 2004-09-29 . 2C07195588D69A067C2AFDAA31759295 . 656896 . . [6.00.2900.2518] . . c:\windows\$hf_mig$\KB834707\SP2QFE\wininet.dll
[-] 2004-08-04 . C0823FC5469663BA63E7DB88F9919D70 . 656384 . . [6.00.2900.2180] . . c:\windows\$NtUninstallKB834707$\wininet.dll

[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ws2_32.dll
[-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ws2help.dll
[-] 2004-08-04 . 9BEACB911CA61E5881102188AB7FB431 . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2004-08-04 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe

[-] 2010-07-16 . 7A6A7900B5E322763430BA6FD9A31224 . 1288192 . . [5.1.2600.6010] . . c:\windows\SoftwareDistribution\Download\e104dcd29adf1c6c473a5efad2d509be\sp3gdr\ole32.dll
[-] 2010-07-16 . 8D51FB47062F2A1A9EFECCEF338A4C46 . 1289216 . . [5.1.2600.6010] . . c:\windows\SoftwareDistribution\Download\e104dcd29adf1c6c473a5efad2d509be\sp3qfe\ole32.dll
[-] 2008-04-14 . ECCE74BC6168375016450A86A164D976 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2008-04-14 . ECCE74BC6168375016450A86A164D976 . 1287168 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ole32.dll
[-] 2005-01-14 . ABDEF60CED7C04AB35A415EFB6B96D81 . 1285120 . . [5.1.2600.2595] . . c:\windows\$NtServicePackUninstall$\ole32.dll
[-] 2005-01-14 . 2E752611C9A9AE1B6BFD0DA03CF7F17E . 1284608 . . [5.1.2600.2595] . . c:\windows\$hf_mig$\KB873333\SP2QFE\ole32.dll
[-] 2004-08-04 . 4FE9D9FA62D020E35E0AC6D1AEEB96F0 . 1281536 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB873333$\ole32.dll

[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\srsvc.dll
[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\wscntfy.exe
[-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\xmlprov.dll
[-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\eventlog.dll
[-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\sfcfiles.dll
[-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ctfmon.exe
[-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\SYSTEM32\shsvcs.dll
[-] 2004-08-04 . E7518DC542D3EBDCB80EDD98462C7821 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll

[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\regsvc.dll
[-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\schedsvc.dll
[-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ssdpsrv.dll
[-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\termsrv.dll
[-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\ACPIEC.SYS

[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SYSTEM32\DLLCACHE\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SYSTEM32\DRIVERS\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2004-08-04 04:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\agp440.sys
[-] 2004-08-04 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ip6fw.sys
[-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2010-09-18 07:18 . 842900DEDBC8E3E8DBCCCB298FD88F65 . 953856 . . [4.1.6151] . . c:\windows\SoftwareDistribution\Download\b91377d1d56820d9d699c0c2dc7c8e80\SP3QFE\mfc40u.dll
[-] 2010-09-18 06:53 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . c:\windows\SoftwareDistribution\Download\b91377d1d56820d9d699c0c2dc7c8e80\SP3GDR\mfc40u.dll
[-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 00:11 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . c:\windows\SYSTEM32\mfc40u.dll
[-] 2004-08-04 11:00 . DDF8D47ACF8FC3FE5F7F2B95C4D4D136 . 924432 . . [4.1.6140] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll

[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\msgsvc.dll
[-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2009-01-31 00:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\SYSTEM32\mspmsnsv.dll
[-] 2009-01-31 00:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\SYSTEM32\DLLCACHE\mspmsnsv.dll
[-] 2004-09-15 18:27 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-09-15 18:27 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[-] 2004-08-04 11:00 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll

[-] 2010-04-28 . 756362706DE8BC92F11E197C98A73844 . 2066944 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\Driver Cache\I386\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\DLLCACHE\ntkrnlpa.exe
[-] 2010-02-17 . 1811AFC2FADB60B88947E3D08E250860 . 2063744 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[-] 2010-02-16 . 1EE6B94ACA7BE115A1813BBCA65099A8 . 2058368 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2010-02-16 . DED8B5A89B085284634502E9D75AC78C . 2066944 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-02-07 . 5BA7F2141BC6DB06100D0E5A732C617A . 2066048 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe
[-] 2009-02-07 . 5BA7F2141BC6DB06100D0E5A732C617A . 2066048 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-02-06 . 3006410E24772CC6953F0B5C01BEB35F . 2057728 . . [5.1.2600.3520] . . c:\windows\$NtUninstallKB979683_0$\ntkrnlpa.exe
[-] 2009-02-06 . 607352B9CB3D708C67F6039097801B5A . 2066176 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2009-02-06 . 9D832AF3FD1917DB0E1E8B2F000A2E3A . 2062976 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2005-03-02 . D8ABA3EAB509627E707A3B14F00FBB6B . 2056832 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2005-03-02 . 81013F36B21C7F72CF784CC6731E0002 . 2056832 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB956572_0$\ntkrnlpa.exe
[-] 2004-08-04 . 947FB1D86D14AFCFFDB54BF837EC25D0 . 2056832 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe

[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\SYSTEM32\ntmssvc.dll
[-] 2004-08-04 11:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\upnphost.dll
[-] 2004-08-04 . 0546477BDE979E33294FE97F6B3DE84A . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll

[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\SYSTEM32\dsound.dll
[-] 2004-08-04 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll

[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\SYSTEM32\d3d9.dll
[-] 2004-08-04 . D67BDBBDA86CC9AEEBBAF3217C1717D8 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\SYSTEM32\ddraw.dll
[-] 2004-08-04 . 7ED462F353B3D915A418A689FA881F96 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll

[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\olepro32.dll
[-] 2004-08-04 11:00 . B48D3193DD1474DCBCC32BF4779AC698 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\perfctrs.dll
[-] 2004-08-04 . 96492C721C6EA517E2BFD5381FEF55E3 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll

[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\version.dll
[-] 2004-08-04 . D38408967BE738D0C1B47005BCE8CEEB . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll

[-] 2008-04-14 . 55794B97A7FAABD2910873C85274F409 . 93184 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\iexplore.exe
[-] 2004-08-04 . E7484514C0464642BE7B4DC2689354C8 . 93184 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\iexplore.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-09-03 328568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2003-10-02 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2003-10-02 118784]
"OSCD_Creator"="c:\dell\PreODM.EXE" [2004-10-31 408576]
"SunJavaUpdateSched"="c:\program files\Java\j2re1.4.2_03\bin\jusched.exe" [2003-11-19 32881]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"Recordpad"="c:\program files\NCH Swift Sound\Recordpad\recordpad.exe" [2010-10-19 913412]

c:\documents and settings\Mikey\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [2010-9-28 3450608]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="%windir%\XP ARENA.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Starcraft\\StarCraft.exe"=

R0 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [9/27/2010 7:21 PM 691696]
.
Contents of the 'Scheduled Tasks' folder

2010-10-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

2010-10-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008Core.job
- c:\documents and settings\Mikey\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-10-23 21:15]

2010-10-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008UA.job
- c:\documents and settings\Mikey\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-10-23 21:15]

2010-10-22 c:\windows\Tasks\switchShakeIcon.job
- c:\program files\NCH Swift Sound\Switch\switch.exe [2010-10-19 17:37]

2010-10-25 c:\windows\Tasks\wavepadShakeIcon.job
- c:\program files\NCH Swift Sound\WavePad\wavepad.exe [2010-10-19 17:38]
.
.
------- Supplementary Scan -------
.
uStart Page = [You must be registered and logged in to see this link.]
mStart Page = [You must be registered and logged in to see this link.]
uInternet Connection Wizard,ShellNext = iexplore
IE: &AIM Search - c:\program files\AIM Toolbar\AIMBar.dll/aimsearch.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
FF - ProfilePath - c:\documents and settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - [You must be registered and logged in to see this link.]
FF - prefs.js: keyword.URL - [You must be registered and logged in to see this link.]
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\Jules\Local Settings\Application Data\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJPI142_03.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
FF - user.js: keyword.URL - [You must be registered and logged in to see this link.] files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHANS REMOVED - - - -

URLSearchHooks-~4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
URLSearchHooks-~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
HKCU-Run-SpySweeper - (no file)
HKCU-Run-E6TaskPanel - c:\program files\EarthLink TotalAccess\TaskPanl.exe
HKLM-Run-== - c:\windows\spoolsv.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2010-11-04 22:23
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/ /////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/ MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/ mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/ /5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAADIADwA AAj/AP8JHEiwoMGDCBMqXMiwocJUqfw4XJhqosWLGDP+k0iQmsaPHv1U/HgQIsSEHi+OFJiyoMeX A0UOXHmwJct/EG2SbEhzp8+IPVGWNKnTJ06DRQma5CgwKMKU1FYmNWqQadKpVP+1TBmR49aTSoGK dIpxa8yBL5121Rn1ZketaKNCheuWLlysFslmJQm0actU1KgxVSp371GDK/tq1am3IGCFV/cOFmq4 oEy0dMX6uby4LdKoYO3itSvQaszNHAEXHdnStFanXGEqvWt0cuW8g0FXrCjSdueSOHOORhg04sbf dQ87RvsYc9iaUqm6FirbqM7eEH1vNO4ScPPFcU1S/89882/o1UhLqxbN3DRUswRFDgcOMqvJk9kX jnUsN7Be78NNFhhXxJHlHUqCfedSQqFRRtx8lUXV24CtbTcaao5VVJhzYXlG22EHVlhXdDOFSCGF 3HHY3HVBQRhffSqNpaGCaQUWHFmtGQfVY/1R5GFwNsZn3GQ9+QfagMU1xlZT2j2lUJMNwYRVdjQ1 uJVVSEq05E29zeThgW+FBZhE2KEG1EkD+nGieFVl1qRHGqK1GY+kadQYSGcidud0cOqoH5tBsjTg ZzuC1tma96npnVhnLqUYSjTNCeVHdzr41oZ3AXrWi0vmqKWN8OGEYVtSIumZpG0RteJxqlYqanBm yv8IJmry1VTna9g9eRtieHE2qWU0DUrhTGN92Vaux/kFqnjMuhqcck/R+iqMjJbp1UJbcvhVnHit dau2TBo4rGBzgtYlnEeSmtl9bC54HVy+ocuUfIFGZieV2DWY0Y8T1ZqRcKAGCt6EbKU5KEvfFSZX Yw0GtVmoLvIl0hRTDNYVdkFOBegUKExRXXkCcTyFqDIlpVrAIfkZJL7MnbwSU4vepCDMwsXU4mMY auhfersmmwrFU+jrmGuYDgT0t30CPZJEJ59oq8wjUVkwymmBibDAm3ZkdVVNc+WsRfZqxZHSKU8H sqHV+SGyWbSq+Q/QRm6m7IJhMvmwzMN+lh2pSJb/KKXDu1nt9MCs0RZ2baVRzFhONfFbUMUjq9cU TUcPjdlw1AAto+Nerriwwn+ruVqwRn4XZ4rQfb6edY9RjEJRaZ1L45U/d+yem5qjbmFcIV3LEtC2 v9ZTu2epZma7glUMYMkHIwWgqqqXDjnFCjJ0oVZwe/gevPpKqFjlT6tNMfdlgnVm3i+J70fHL+vG oGfH6ihXxZspb6NwAB4ZOICNi0o/avSbj1mkJLaoBM8v3lkfZ8rmLSnB7UmZGx+oaFO+fPUocx1z Xe+W1iLdRC87D1MfCF9iqur0KVm6YU3vAggnESLuZ0FbDfVwQjV2PW58ugJfjoQ0uIgERnxBk5HS /1Rzn4V172or9FXQXDLB5vnmeWpzG2LU9rUnwTA6EclgvYa1PB9iMHKh0tIDaZisQz3PiBAZolyA eEBYRY1QJIzI/5hSsSXxT1B5E00Up0TFuuFGbV+J4AzTIyy4pFFxLhORFlmzm+hNziWaQ9eAOCZC KlGpPFjLDg63U7/qiYqEsxHUXfb4LbuVxTIiu5FWMihBcnEpYRQCniw7xkpWbi9OT2nUF7m1GKBx jE6v4WSePEUxf3nkaBXyZPoKiT1ACuw6S4yYYyC3FV8ukUtkKuZcfmdN1/lyfb4sIXIyxCYg1jFI Imxi1lSEnzoiDCfUy1cp13kaj13qmZHTyDG1yf/NirURJt/sSEpENhZJ0UqOm1TRjYhXP5HRsp3U m2B5qjcjOqoNM0DkTeB8xx+k9JFDmMTaRSQ0yLdR74pvqV1JC4KC9W3kYWm6ETIhY5P+CNKcxQSi 1mxComehhXrK02QI3ymqFjVFoHN6GhzzMhINbsR12bymIUXmMVeWh6CH2siJsOqkj/30pDB0qOIK NqbuaGmU7lQf/WYkUrm1SSmArIvCQOqQrUWxoRVLXD6bojlRli97lrkhChYKGebcdHJh1aZNV8dY H0LyMpljWrA8ORNo5SavSKEfpZySQZNiVpDVzGCVyPUw8BnNIMj0z6NqYs7X4SebKHjdt8aUwt3/ 2AWGxJIqDQvFs5dCy1uX+5kzwTaV6fXVaPE85AxRtTN4JvSogmViCiXqWX4qRWnzPIp4TuQfKnJF cXQVFMM48zYpcqh+v2KPW0oLvMu2lCXgXOvzzhdWGaGmiWM0XJoAJci10YUaWgxVZf2UKf9oUz5g xaW76oXRrsDTbWwT7q8IGB+3JRbCvcyrYES7ukcSBG4wVVQRRUthvUkxeeA1GhWFZp7eojdoL4Pp Ypt3NfqQbE7s4o1bu8pai0VSNIrbDC1rihnGva1jp2Grah6Ila2YimSBMa49D8OijxUOezGMWsd2 BrszbjdT9r3rbT96EfLqdcrxiWd+H1IRai7t/5MAReTnRIq1YeHUYgrmDd3WJbzFyJGybF5UfuAq X7Fh1lKnPYg2l7bGYpL4Q4abSSoPlbKBbrlx+eMcCbupYJkMac8pe5BmsWJfsSDMtnosZleUtxd3 9oivvqxiyCQoSmKFNbwg87M4YR3FkqSGQbAh1R7vl2NTQ+rK8G2bbmGE40fuk2zzJCFjeFrTHdet w5DJCUJFZ6PLnJVr0AERevFVLpWoE2EYsg54ygjdjDZZpHoSKLDilRw/Svd+6pIcXJ2nutOtFY8V PmhRRCfriXTrLRKBqpNpDGmTFY6Z24lLckYjG+3x7odk4qCsVichg06sbdJySGrO4y7JlKSYuf+m FulI49h6n/LV5MyT8SZU6nSru0jSBFso3RLZbPWW4j71Cybvaz1c47JaRTyjBa+9k6S4J9+7ipfo euZnrZHGqhiZUKJ+NmjDKsqmpZM4oieCI85Jp26xwTWPIea3GtdFbq0BuaMYdzCROoqAOhuUl5N+ uZIjZFLYPju2Cl6WQPmwgjguNoroxEthjUvehHS5smAucmzBmy+S51R2/8vdzuPbSJ733p4+lCAz Nbd/1IF60UtsdZ6Y/ZR1bUhvDjp7ouHl8gWy2X52lHmvUqaQvjd4FQG9r75b5uMgt7mApQuuhduK K7W/FIvVzp6/6PeZUQrsz53zejzFqqdKtZ6ONOHNsgcVFkZUxwjxI2RUE/bd/ct3f2kk1XBVwqb5 kCYO9SOErfR/JvxjV3jQxStHJ0DF53/pdzh+12cph3ZzAXSk5kloclv5h2ths029VXSRB3sIuBwd iBi1VjR7dhuE94EmWBoIKBv6YmQBmBU5d4IwKDR7wVMZknkdWIIwSHXo0TNelS0v2HQ52BABAQA7 == = c:\windows\spoolsv.exe

scanning hidden files ...

scan completed successfully
hidden files: 0

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 4th November 2010, 11:10 pm

CONTINUED:


**************************************************************************

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/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=="="c:\\WINDOWS\\spoolsv.exe"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(648)
c:\windows\system32\igfxsrvc.dll
c:\windows\system32\hccutils.DLL
.
Completion time: 2010-11-04 22:28:28
ComboFix-quarantined-files.txt 2010-11-05 02:28

Pre-Run: 12,930,301,952 bytes free
Post-Run: 12,923,678,720 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

- - End Of File - - 568B07A1999B54C3A359E28ECB67E61C

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 4th November 2010, 11:20 pm

Alright, I have everything up and running on my computer. Now what is a good virus removal program? Preferably a free one for the time being

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 5th November 2010, 3:53 am

Hi,

You're computer is still infected.

Please download Malwarebytes Anti-Malware from [You must be registered and logged in to see this link.].


Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 5th November 2010, 5:09 pm

Alright, ran Malwarebytes - here's the log:

--------------

Malwarebytes' Anti-Malware 1.46
[You must be registered and logged in to see this link.]

Database version: 5052

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

11/5/2010 1:08:07 PM
mbam-log-2010-11-05 (13-08-07).txt

Scan type: Quick scan
Objects scanned: 142756
Time elapsed: 10 minute(s), 53 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 5th November 2010, 10:59 pm

Hi,

Please run a free online scan with the [You must be registered and logged in to see this link.]
Note: You will need to use Internet Explorer for this scan

  • Tick the box next to YES, I accept the Terms of Use
  • Click Start
  • When asked, allow the ActiveX control to install
  • Click Start
  • Make sure that the options Remove found threats and the option Scan unwanted applications is checked
  • Click Scan (This scan can take several hours, so please be patient)
  • Once the scan is completed, you may close the window
  • Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
  • Copy and paste that log as a reply to this topic


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 12:52 am

ESET Log:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# IEXPLORE.EXE=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=3700ba6180aa324d9b5b69fd598daad1
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-11-06 12:49:14
# local_time=2010-11-05 08:49:14 (-0500, Eastern Daylight Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=76006
# found=9
# cleaned=9
# scan_time=2629
C:\Documents and Settings\Mikey\My Documents\Downloads\Quake and Doom Pack\zdoom-2.5.0\ZDL.exe probably a variant of Win32/Agent.LSLSWGD trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\Qoobox\Quarantine\C\Documents and Settings\Mikey\Application Data\Game Setup.exe.vir multiple threats (deleted - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\11042010_214353\C_Documents and Settings\Mikey\Application Data\hotfix.exe a variant of Win32/Adware.FakeAntiSpy.M application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\11042010_214353\C_WINDOWS\ogudenenor.dll a variant of Win32/Cimag.DX trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\11042010_214353\C_WINDOWS\werowp.dll a variant of Win32/Cimag.DW trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\11042010_214353\C_WINDOWS\SYSTEM32\magnyi64.dll a variant of Win32/Kryptik.HTA trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\11042010_214353\C_WINDOWS\SYSTEM32\sshnas21.dll Win32/TrojanDownloader.FakeAlert.ARF trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\_OTL\MovedFiles\11042010_214353\C_WINDOWS\SYSTEM32\zh0ycwd.dll a variant of Win32/TrojanDownloader.Small.PAF trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
D:\MISC-ISOS\StarCraft Keygen\STAR-KEY.EXE Win32/Adware.Virtumonde application (deleted - quarantined) 00000000000000000000000000000000 C

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 6th November 2010, 3:04 pm

Hi,

Please run ComboFix again.


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:03 pm

ComboFix 10-11-06.01 - Jules 11/06/2010 11:42:00.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.254.101 [GMT -4:00]
Running from: c:\documents and settings\Jules\My Documents\Downloads\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((( Files Created from 2010-10-06 to 2010-11-06 )))))))))))))))))))))))))))))))
.

2010-11-06 01:12 . 2010-11-06 01:12 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2010-11-06 00:02 . 2010-11-06 01:12 -------- d-----w- c:\program files\ESET
2010-11-05 23:48 . 2010-11-05 23:48 -------- d-sh--w- c:\documents and settings\Jules\PrivacIE
2010-11-05 23:39 . 2010-11-05 23:39 -------- d-sh--w- c:\documents and settings\Jules\IETldCache
2010-11-05 23:24 . 2010-11-05 23:29 -------- dc-h--w- c:\windows\ie8
2010-11-05 23:17 . 2010-08-26 11:08 13312 ------w- c:\windows\system32\dllcache\iecompat.dll
2010-11-05 23:17 . 2010-09-10 05:58 602112 ------w- c:\windows\system32\dllcache\msfeeds.dll
2010-11-05 23:17 . 2010-09-10 05:58 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-11-05 23:17 . 2010-09-10 05:58 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2010-11-05 23:17 . 2010-09-10 05:58 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll
2010-11-05 23:17 . 2010-09-10 05:58 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll
2010-11-05 23:17 . 2010-09-10 05:58 1986560 ------w- c:\windows\system32\dllcache\iertutil.dll
2010-11-05 23:17 . 2010-09-10 05:58 11080192 ------w- c:\windows\system32\dllcache\ieframe.dll
2010-11-05 16:49 . 2010-11-05 16:49 -------- d-----w- c:\documents and settings\Jules\Application Data\Malwarebytes
2010-11-05 07:08 . 2010-11-05 07:08 -------- d-----w- c:\windows\system32\XPSViewer
2010-11-05 07:08 . 2010-11-05 07:08 -------- d-----w- c:\program files\MSBuild
2010-11-05 07:07 . 2010-11-05 07:07 -------- d-----w- c:\program files\Reference Assemblies
2010-11-05 07:07 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-11-05 07:07 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-11-05 07:07 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-11-05 07:07 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-11-05 07:07 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-11-05 07:07 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-11-05 07:07 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll
2010-11-05 07:07 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-11-05 07:07 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-11-05 02:01 . 2010-08-23 16:12 617472 ------w- c:\windows\system32\dllcache\comctl32.dll
2010-11-05 01:58 . 2010-09-18 06:53 953856 ------w- c:\windows\system32\dllcache\mfc40u.dll
2010-11-05 01:58 . 2010-09-18 06:53 974848 ------w- c:\windows\system32\dllcache\mfc42.dll
2010-11-05 01:44 . 2010-10-23 17:55 553984 ----a-r- C:\OTLPE.exe
2010-11-05 01:43 . 2010-11-05 01:43 -------- d-----w- C:\_OTL
2010-10-27 21:47 . 2009-08-06 23:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-10-27 21:47 . 2009-08-06 23:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-10-27 19:31 . 2010-10-27 19:31 -------- d-----w- c:\documents and settings\Mikey\Application Data\Malwarebytes
2010-10-27 19:31 . 2010-04-29 19:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-27 19:31 . 2010-10-27 19:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-10-27 19:31 . 2010-04-29 19:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-27 18:50 . 2010-10-27 18:50 -------- d-----w- c:\documents and settings\Jules\Application Data\Recordpad
2010-10-27 18:50 . 2010-10-27 18:50 -------- d-----w- c:\documents and settings\Jules\Application Data\NCH Swift Sound
2010-10-27 18:08 . 2010-11-05 02:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Update
2010-10-27 17:06 . 2010-10-27 18:30 -------- d-----w- c:\documents and settings\Mikey\Application Data\Gygan
2010-10-27 17:06 . 2010-10-27 17:06 -------- d-----w- c:\program files\Xenocode
2010-10-27 17:06 . 2010-10-27 17:06 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Xenocode
2010-10-27 03:31 . 2010-10-27 03:31 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-10-24 23:42 . 2010-10-24 23:42 -------- d-----w- c:\program files\Veetle
2010-10-24 04:38 . 2010-10-24 04:38 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Unity
2010-10-23 21:15 . 2010-10-23 21:16 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Temp
2010-10-23 21:15 . 2010-10-23 21:18 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Google
2010-10-23 21:08 . 2010-10-23 21:08 -------- d-s---w- c:\documents and settings\Mikey\UserData
2010-10-22 22:32 . 2010-10-22 22:32 -------- d-----w- c:\documents and settings\All Users\Application Data\GoldWave
2010-10-22 22:25 . 2010-10-22 22:25 -------- d-----w- c:\program files\GoldWave
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin7.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-22 22:01 . 2010-10-22 22:01 -------- d-----w- c:\program files\Common Files\Apple
2010-10-22 22:01 . 2010-10-22 22:02 -------- d-----w- c:\program files\QuickTime
2010-10-22 22:01 . 2010-10-22 22:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Apple
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\program files\Apple Software Update
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Apple Computer
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\Common Files\DigiDesign
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\Steinberg
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\IK Multimedia
2010-10-22 21:58 . 2010-10-22 21:58 -------- d-----w- c:\documents and settings\Mikey\Application Data\InstallShield
2010-10-21 03:58 . 2010-10-21 03:58 -------- d-----w- c:\documents and settings\Mikey\Application Data\Recordpad
2010-10-21 03:33 . 2010-02-16 17:04 7034880 ----a-w- c:\windows\XP ARENA.EXE
2010-10-20 23:35 . 2010-10-22 19:53 -------- d-----w- c:\program files\War2Combat
2010-10-19 17:38 . 2010-10-19 17:38 -------- d-----w- c:\program files\NCH Software
2010-10-19 17:38 . 2010-10-22 21:42 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2010-10-19 17:37 . 2010-10-19 17:38 -------- d-----w- c:\program files\NCH Swift Sound
2010-10-19 17:37 . 2010-10-22 21:42 -------- d-----w- c:\documents and settings\Mikey\Application Data\NCH Swift Sound
2010-10-19 06:49 . 2010-10-19 06:49 -------- d-----w- c:\documents and settings\Mikey\Application Data\IObit
2010-10-19 06:49 . 2010-10-19 06:49 -------- d-----w- c:\program files\IObit
2010-10-19 06:14 . 2010-10-19 06:15 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\FriendBlasterPro
2010-10-19 06:11 . 2005-10-11 17:25 241664 ----a-w- c:\windows\system32\MyFramePanel.ocx
2010-10-19 06:11 . 2004-03-09 00:30 609824 ----a-w- c:\windows\system32\ComCtl32.ocx
2010-10-19 06:11 . 2005-07-15 16:49 245760 ----a-w- c:\windows\system32\aUpdateNow.ocx
2010-10-19 06:11 . 2004-03-08 22:00 132880 ----a-w- c:\windows\system32\msinet.ocx
2010-10-19 06:11 . 2000-05-22 04:00 140488 ----a-w- c:\windows\system32\COMDLG32.OCX
2010-10-19 06:11 . 2004-03-08 22:00 1081616 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2010-10-19 06:11 . 2000-07-15 04:00 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2010-10-19 06:11 . 2010-10-19 06:18 -------- d-----w- c:\program files\FriendBlasterPro
2010-10-17 18:42 . 2010-10-17 18:42 -------- d-sh--w- c:\windows\ftpcache
2010-10-17 15:28 . 2010-10-28 11:28 -------- d-----w- c:\program files\Common Files\Sandlot Shared
2010-10-17 15:28 . 2010-10-17 15:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Sandlot Games
2010-10-15 10:12 . 2010-10-15 10:12 1409 ----a-w- c:\windows\QTFont.for
2010-10-14 09:18 . 2010-10-14 09:18 -------- d-----w- c:\program files\LucasArts
2010-10-14 00:23 . 2010-10-14 00:23 -------- d-----w- c:\program files\Infogrames
2010-10-14 00:13 . 2010-10-14 00:13 -------- d-----w- c:\program files\Infogrames Interactive
2010-10-14 00:08 . 2010-10-14 00:13 -------- d-----w- c:\program files\GameHouse Games Collection
2010-10-13 04:48 . 2010-10-13 04:54 -------- d-----w- c:\program files\Postal2
2010-10-13 04:38 . 2010-10-13 04:38 -------- d-----w- c:\program files\Core Design
2010-10-11 00:31 . 2010-10-11 00:31 -------- d-----w- c:\program files\Bethesda Softworks
2010-10-11 00:28 . 2001-09-05 10:18 225280 ------w- c:\program files\Common Files\InstallShield\IScript\iscript.dll
2010-10-11 00:28 . 2001-09-05 10:14 176128 ------w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2010-10-11 00:28 . 2001-09-05 10:13 32768 ------w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2010-10-11 00:28 . 2001-09-05 10:18 77824 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2010-10-11 00:27 . 2001-09-05 10:24 610436 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe
2010-10-07 22:40 . 2010-10-19 06:41 -------- d-----w- c:\program files\ElcomSoft

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:04 pm

CON'T:

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-28 22:08 . 2010-09-28 22:08 74 ----a-w- C:\start.vbs
2010-09-27 23:21 . 2010-09-27 23:21 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-09-18 16:23 . 2004-08-04 11:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2004-08-04 11:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2004-08-04 11:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2004-08-04 11:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:58 . 2004-08-04 11:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:58 . 2004-08-04 11:00 43520 ------w- c:\windows\system32\licmgr10.dll
2010-09-10 05:58 . 2004-08-04 11:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:51 . 2004-08-04 11:00 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-08-31 13:42 . 2004-08-04 11:00 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:02 . 2004-08-04 11:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:57 . 2004-08-04 11:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-26 13:39 . 2004-08-04 11:00 357248 ----a-w- c:\windows\system32\drivers\srv.sys
2010-08-26 12:52 . 2010-08-08 07:19 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2010-08-23 16:12 . 2004-08-04 11:00 617472 ----a-w- c:\windows\system32\comctl32.dll
2010-08-17 13:17 . 2004-08-04 11:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-08-16 08:45 . 2004-08-04 11:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll
2010-08-12 18:29 . 2010-08-12 18:29 2772992 ----a-w- c:\windows\system32\GPhotos.scr
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\SYSTEM32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\asyncmac.sys
[-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys

[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\BEEP.SYS

[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ndis.sys
[-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ntfs.sys
[-] 2004-08-04 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys

[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\NULL.SYS

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DLLCACHE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DRIVERS\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2005-03-14 . 6129E70F3D2F1E60860C930EBEAF92C2 . 359936 . . [5.1.2600.2631] . . c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[-] 2005-03-14 . 0E66B538096A6529D1AC66E78EB0D5C8 . 359808 . . [5.1.2600.2631] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893066$\tcpip.sys

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:04 pm


[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\browser.dll
[-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\lsass.exe
[-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\netman.dll
[-] 2004-08-04 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll

[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SYSTEM32\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SYSTEM32\bits\qmgr.dll
[-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\DLLCACHE\rpcss.dll
[-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2009-02-09 . 24B5D53B9ACCC1E2EDCF0A878D6659D4 . 401408 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2005-01-14 . 419899803CA479B73B02390318C787C0 . 395776 . . [5.1.2600.2595] . . c:\windows\$NtUninstallKB956572_0$\rpcss.dll
[-] 2005-01-14 . 94456045BEB4545B5EBE1DCC85951AFA . 395776 . . [5.1.2600.2595] . . c:\windows\$hf_mig$\KB873333\SP2QFE\rpcss.dll
[-] 2004-08-04 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB873333$\rpcss.dll

[-] 2009-02-06 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\DLLCACHE\services.exe
[-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-06 . 4712531AB7A01B7EE059853CA17D39BD . 110592 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956572_0$\services.exe

[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\winlogon.exe
[-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\cryptsvc.dll
[-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\SYSTEM32\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\SYSTEM32\DLLCACHE\es.dll
[-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2004-08-04 11:00 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB950974_0$\es.dll

[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\imm32.dll
[-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3GDR\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\SYSTEM32\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\SYSTEM32\DLLCACHE\kernel32.dll
[-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2009-03-21 . 80202858D245FF07DAA1739C57A3E19B . 989184 . . [5.1.2600.3541] . . c:\windows\$hf_mig$\KB959426\SP2QFE\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2004-08-04 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB959426_0$\kernel32.dll

[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\linkinfo.dll
[-] 2004-08-04 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\lpk.dll
[-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2008-04-14 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\SYSTEM32\msvcrt.dll
[-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-04 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\MSVCRT.DLL
[-] 2004-08-04 . 98EC447E00229AFD88D5161A25D065DA . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\MSVCRT.DLL

[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DLLCACHE\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-04 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll

[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\netlogon.dll
[-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\Driver Cache\I386\ntoskrnl.exe
[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\ntoskrnl.exe
[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\DLLCACHE\ntoskrnl.exe
[-] 2010-04-27 . A2ABBEC40CDB57454645D06B7EBD22F5 . 2190080 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[-] 2010-02-16 . 97E2BF68857818A4D142B872404DC41B . 2186880 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntoskrnl.exe
[-] 2010-02-16 . EBB75B113E74E90074382347B74D652B . 2181376 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2010-02-16 . E1F653A542449D54FA2D27463D99B6B6 . 2190080 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-02-07 . EFE8EACE83EAAD5849A7A548FB75B584 . 2189184 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-06 . FACEBB0CA3154F77009CDFEE78A00BBB . 2180480 . . [5.1.2600.3520] . . c:\windows\$NtUninstallKB979683_0$\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-02-06 . 6A936E9D7BADAF3CAAEED1E1966EC1B0 . 2186112 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2005-03-02 . 28187802B7C368C0D3AEF7D4C382AABB . 2179456 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2005-03-02 . 4D4CF2C14550A4B7718E94A6E581856E . 2179328 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB956572_0$\ntoskrnl.exe
[-] 2004-08-04 . CE218BC7088681FAA06633E218596CA7 . 2180992 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntoskrnl.exe

[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\SYSTEM32\powrprof.dll
[-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\scecli.dll
[-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\sfc.dll
[-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\svchost.exe
[-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\tapisrv.dll
[-] 2004-08-04 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\user32.dll
[-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . DE2DB164BBB35DB061AF0997E4499054 . 577024 . . [5.1.2600.2622] . . c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2004-08-04 . C72661F8552ACE7C5C85E16A3CF505C4 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\user32.dll

[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\userinit.exe
[-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ws2_32.dll
[-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ws2help.dll
[-] 2004-08-04 . 9BEACB911CA61E5881102188AB7FB431 . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2004-08-04 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe

[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\srsvc.dll
[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\wscntfy.exe
[-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\xmlprov.dll
[-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\eventlog.dll
[-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\sfcfiles.dll
[-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ctfmon.exe
[-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\SYSTEM32\shsvcs.dll
[-] 2004-08-04 . E7518DC542D3EBDCB80EDD98462C7821 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll

[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\regsvc.dll
[-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\schedsvc.dll
[-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ssdpsrv.dll
[-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\termsrv.dll
[-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\ACPIEC.SYS

[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SYSTEM32\DLLCACHE\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SYSTEM32\DRIVERS\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2004-08-04 04:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\agp440.sys
[-] 2004-08-04 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ip6fw.sys
[-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\msgsvc.dll
[-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2009-01-31 00:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\SYSTEM32\mspmsnsv.dll
[-] 2009-01-31 00:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\SYSTEM32\DLLCACHE\mspmsnsv.dll
[-] 2004-09-15 18:27 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-09-15 18:27 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[-] 2004-08-04 11:00 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll

[-] 2010-04-28 . 756362706DE8BC92F11E197C98A73844 . 2066944 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\Driver Cache\I386\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\DLLCACHE\ntkrnlpa.exe
[-] 2010-02-17 . 1811AFC2FADB60B88947E3D08E250860 . 2063744 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[-] 2010-02-16 . 1EE6B94ACA7BE115A1813BBCA65099A8 . 2058368 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2010-02-16 . DED8B5A89B085284634502E9D75AC78C . 2066944 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-02-07 . 5BA7F2141BC6DB06100D0E5A732C617A . 2066048 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe
[-] 2009-02-07 . 5BA7F2141BC6DB06100D0E5A732C617A . 2066048 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-02-06 . 3006410E24772CC6953F0B5C01BEB35F . 2057728 . . [5.1.2600.3520] . . c:\windows\$NtUninstallKB979683_0$\ntkrnlpa.exe
[-] 2009-02-06 . 607352B9CB3D708C67F6039097801B5A . 2066176 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2009-02-06 . 9D832AF3FD1917DB0E1E8B2F000A2E3A . 2062976 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2005-03-02 . D8ABA3EAB509627E707A3B14F00FBB6B . 2056832 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2005-03-02 . 81013F36B21C7F72CF784CC6731E0002 . 2056832 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB956572_0$\ntkrnlpa.exe
[-] 2004-08-04 . 947FB1D86D14AFCFFDB54BF837EC25D0 . 2056832 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:06 pm


[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\SYSTEM32\ntmssvc.dll
[-] 2004-08-04 11:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\upnphost.dll
[-] 2004-08-04 . 0546477BDE979E33294FE97F6B3DE84A . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll

[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\SYSTEM32\dsound.dll
[-] 2004-08-04 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll

[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\SYSTEM32\d3d9.dll
[-] 2004-08-04 . D67BDBBDA86CC9AEEBBAF3217C1717D8 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\SYSTEM32\ddraw.dll
[-] 2004-08-04 . 7ED462F353B3D915A418A689FA881F96 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll

[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\olepro32.dll
[-] 2004-08-04 11:00 . B48D3193DD1474DCBCC32BF4779AC698 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\perfctrs.dll
[-] 2004-08-04 . 96492C721C6EA517E2BFD5381FEF55E3 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll

[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\version.dll
[-] 2004-08-04 . D38408967BE738D0C1B47005BCE8CEEB . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
.
((((((((((((((((((((((((((((( [You must be registered and logged in to see this link.] )))))))))))))))))))))))))))))))))))))))))
.
- 2010-08-08 07:26 . 2010-04-21 13:28 46080 c:\windows\SYSTEM32\tzchange.exe
+ 2010-08-08 07:26 . 2010-06-21 14:46 46080 c:\windows\SYSTEM32\tzchange.exe
+ 2008-07-30 01:10 . 2008-07-30 01:10 26112 c:\windows\SYSTEM32\TsWpfWrp.exe
+ 2010-08-08 07:00 . 2009-01-07 22:21 26144 c:\windows\SYSTEM32\spupdsvc.exe
+ 2010-10-27 16:57 . 2009-01-07 22:20 16928 c:\windows\SYSTEM32\spmsg.dll
+ 2010-03-31 04:16 . 2010-03-31 04:16 99176 c:\windows\SYSTEM32\PresentationHostProxy.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 46592 c:\windows\SYSTEM32\pngfilt.dll
+ 2004-12-20 05:15 . 2010-11-06 02:04 71732 c:\windows\SYSTEM32\PERFC009.DAT
+ 2009-01-07 22:20 . 2009-01-07 22:20 23552 c:\windows\SYSTEM32\normaliz.dll
+ 2009-01-07 22:20 . 2009-01-07 22:20 24576 c:\windows\SYSTEM32\nlsdl.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 49488 c:\windows\SYSTEM32\netfxperf.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 48128 c:\windows\SYSTEM32\mshtmler.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 66560 c:\windows\SYSTEM32\mshtmled.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 45568 c:\windows\SYSTEM32\mshta.exe
+ 2009-03-08 08:31 . 2009-03-08 08:31 13312 c:\windows\SYSTEM32\msfeedssync.exe
+ 2009-03-08 08:31 . 2010-09-10 05:58 55296 c:\windows\SYSTEM32\msfeedsbs.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 83968 c:\windows\SYSTEM32\mscories.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 25600 c:\windows\SYSTEM32\jsproxy.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 94720 c:\windows\SYSTEM32\inseng.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 97800 c:\windows\SYSTEM32\infocardapi.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 34816 c:\windows\SYSTEM32\imgutil.dll
+ 2009-03-08 08:32 . 2009-03-08 08:32 36864 c:\windows\SYSTEM32\ieudinit.exe
+ 2004-08-04 11:00 . 2009-03-08 08:32 71680 c:\windows\SYSTEM32\iesetup.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 55808 c:\windows\SYSTEM32\iernonce.dll
+ 2009-01-07 22:20 . 2009-01-07 22:20 26112 c:\windows\SYSTEM32\idndl.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 11264 c:\windows\SYSTEM32\icardres.dll
+ 2009-03-08 08:31 . 2009-03-08 08:31 59904 c:\windows\SYSTEM32\icardie.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 73720 c:\windows\SYSTEM32\dxva2.dll
+ 2010-08-03 17:28 . 2010-08-03 17:28 95896 c:\windows\SYSTEM32\DRIVERS\epfwtdir.sys
+ 2010-08-27 05:57 . 2010-08-27 05:57 99840 c:\windows\SYSTEM32\DLLCACHE\srvsvc.dll
+ 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\SYSTEM32\DLLCACHE\spoolsv.exe
+ 2009-03-08 08:31 . 2009-03-08 08:31 46592 c:\windows\SYSTEM32\DLLCACHE\pngfilt.dll
+ 2009-03-08 08:31 . 2009-03-08 08:31 48128 c:\windows\SYSTEM32\DLLCACHE\mshtmler.dll
+ 2010-09-09 14:16 . 2010-09-10 05:58 66560 c:\windows\SYSTEM32\DLLCACHE\mshtmled.dll
+ 2009-03-08 08:31 . 2009-03-08 08:31 45568 c:\windows\SYSTEM32\DLLCACHE\mshta.exe
+ 2009-03-08 08:34 . 2010-09-10 05:58 43520 c:\windows\SYSTEM32\DLLCACHE\licmgr10.dll
+ 2009-03-08 08:33 . 2010-09-10 05:58 25600 c:\windows\SYSTEM32\DLLCACHE\jsproxy.dll
+ 2009-03-08 08:32 . 2009-03-08 08:32 94720 c:\windows\SYSTEM32\DLLCACHE\inseng.dll
+ 2009-03-08 08:31 . 2009-03-08 08:31 34816 c:\windows\SYSTEM32\DLLCACHE\imgutil.dll
+ 2009-03-08 08:32 . 2009-03-08 08:32 71680 c:\windows\SYSTEM32\DLLCACHE\iesetup.dll
+ 2009-03-08 08:32 . 2009-03-08 08:32 55808 c:\windows\SYSTEM32\DLLCACHE\iernonce.dll
+ 2009-03-08 08:24 . 2009-03-08 08:24 68608 c:\windows\SYSTEM32\DLLCACHE\hmmapi.dll
+ 2009-03-08 08:33 . 2009-03-08 08:33 18944 c:\windows\SYSTEM32\DLLCACHE\corpol.dll
+ 2009-03-08 08:32 . 2009-03-08 08:32 72704 c:\windows\SYSTEM32\DLLCACHE\admparse.dll
+ 2004-08-04 11:00 . 2009-03-08 08:33 18944 c:\windows\SYSTEM32\corpol.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 72704 c:\windows\SYSTEM32\admparse.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe
+ 2008-07-30 01:10 . 2008-07-30 01:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
+ 2008-07-29 23:59 . 2008-07-29 23:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll
+ 2008-07-29 23:32 . 2008-07-29 23:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
+ 2010-04-08 03:48 . 2010-04-08 03:48 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13648 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- 2005-09-23 11:28 . 2005-09-23 11:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2010-09-22 13:43 . 2010-09-22 13:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2010-09-23 19:55 . 2010-09-23 19:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2010-09-23 07:17 . 2010-09-23 07:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2010-03-31 19:32 . 2010-03-31 19:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-09-23 07:17 . 2010-09-23 07:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2010-03-31 19:32 . 2010-03-31 19:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13648 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13648 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13664 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13688 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13664 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13696 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13656 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13672 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 13664 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2009-11-07 05:07 . 2009-11-07 05:07 86864 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2008-07-30 01:07 . 2008-07-30 01:07 23040 c:\windows\Installer\1c17e40.msp
+ 2010-11-05 07:05 . 2010-11-05 07:05 88576 c:\windows\Installer\1bbf03c.msi
+ 2010-11-06 01:13 . 2010-11-06 01:13 10134 c:\windows\Installer\{D02EDDE7-B5C5-40A2-AF57-73A3278F4EEB}\callmsi.exe
- 2010-09-16 00:08 . 2010-09-16 00:08 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2010-09-16 00:08 . 2010-11-05 02:37 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:06 pm

+ 2010-11-05 23:30 . 2009-03-08 08:33 12288 c:\windows\ie8updates\KB982381-IE8\xpshims.dll
+ 2010-11-05 23:29 . 2009-03-08 08:31 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll
+ 2010-11-05 23:29 . 2009-03-08 08:33 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 12800 c:\windows\ie8updates\KB2360131-IE8\xpshims.dll
+ 2010-11-05 23:31 . 2009-03-08 08:31 66560 c:\windows\ie8updates\KB2360131-IE8\mshtmled.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 55296 c:\windows\ie8updates\KB2360131-IE8\msfeedsbs.dll
+ 2010-11-05 23:31 . 2009-03-08 08:34 43008 c:\windows\ie8updates\KB2360131-IE8\licmgr10.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 25600 c:\windows\ie8updates\KB2360131-IE8\jsproxy.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 37888 c:\windows\ie8\url.dll
+ 2010-11-05 23:26 . 2009-03-08 18:23 58464 c:\windows\ie8\spuninst\iecustom.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 39424 c:\windows\ie8\pngfilt.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 96256 c:\windows\ie8\occache.dll
+ 2010-11-05 23:24 . 2008-04-13 16:26 56832 c:\windows\ie8\mshtmler.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 29184 c:\windows\ie8\mshta.exe
+ 2010-11-05 23:24 . 2008-04-14 00:11 22016 c:\windows\ie8\licmgr10.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 15872 c:\windows\ie8\jsproxy.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 96256 c:\windows\ie8\inseng.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 35840 c:\windows\ie8\imgutil.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 93184 c:\windows\ie8\iexplore.exe
+ 2010-11-05 23:24 . 2008-04-14 00:11 62976 c:\windows\ie8\iesetup.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 48640 c:\windows\ie8\iernonce.dll
+ 2010-11-05 23:24 . 2010-09-09 14:16 81920 c:\windows\ie8\ieencode.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 34304 c:\windows\ie8\ie4uinit.exe
+ 2010-11-05 23:24 . 2008-04-14 00:11 38912 c:\windows\ie8\hmmapi.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 35328 c:\windows\ie8\corpol.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 99840 c:\windows\ie8\advpack.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 61440 c:\windows\ie8\admparse.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\I386\filterpipelineprintproc.dll
+ 2010-11-05 02:31 . 2010-11-05 02:31 90112 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_31241184\System.Drawing.Design.dll
+ 2010-11-05 02:31 . 2010-11-05 02:31 61440 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_0abeb0ef\CustomMarshalers.dll
+ 2010-11-06 02:22 . 2010-11-06 02:22 60928 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 37888 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 36864 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 94208 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 82944 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
+ 2010-11-06 02:13 . 2010-11-06 02:13 47104 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe
+ 2010-11-06 02:06 . 2010-11-06 02:06 39424 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 55296 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 74752 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 65024 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 14336 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
+ 2010-11-06 02:25 . 2010-11-06 02:25 25600 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 94208 c:\windows\ASSEMBLY\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 98304 c:\windows\ASSEMBLY\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 40960 c:\windows\ASSEMBLY\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 12288 c:\windows\ASSEMBLY\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2010-11-05 07:10 . 2010-11-05 07:10 61440 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 77824 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 32768 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 77824 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll
+ 2010-11-06 01:37 . 2010-11-06 01:37 32768 c:\windows\ASSEMBLY\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
+ 2010-11-05 07:07 . 2010-11-05 07:07 73728 c:\windows\ASSEMBLY\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 81920 c:\windows\ASSEMBLY\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 81920 c:\windows\ASSEMBLY\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 53248 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 81920 c:\windows\ASSEMBLY\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 81920 c:\windows\ASSEMBLY\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 57344 c:\windows\ASSEMBLY\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 45056 c:\windows\ASSEMBLY\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 46104 c:\windows\ASSEMBLY\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe
+ 2010-11-05 07:07 . 2010-11-05 07:07 32768 c:\windows\ASSEMBLY\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 32768 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 32768 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 12800 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 12800 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 41984 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 28672 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 28672 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 77824 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 94208 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 36864 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 36864 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 36864 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 77824 c:\windows\ASSEMBLY\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 13312 c:\windows\ASSEMBLY\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 13312 c:\windows\ASSEMBLY\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 10752 c:\windows\ASSEMBLY\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 10752 c:\windows\ASSEMBLY\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 72192 c:\windows\ASSEMBLY\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 72192 c:\windows\ASSEMBLY\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 69120 c:\windows\ASSEMBLY\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-11-05 02:30 . 2010-11-05 02:30 81920 c:\windows\ASSEMBLY\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
- 2010-08-09 07:18 . 2010-08-09 07:18 81920 c:\windows\ASSEMBLY\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-11-05 02:35 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB981322\update\spcustom.dll
+ 2010-11-05 02:35 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB981322\spmsg.dll
+ 2010-11-05 02:37 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB2347290\update\spcustom.dll
+ 2010-11-05 02:37 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB2347290\spmsg.dll
+ 2010-08-17 13:19 . 2010-08-17 13:19 58880 c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
+ 2010-11-05 02:29 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2141007\update\spcustom.dll
+ 2010-11-05 02:29 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2141007\spmsg.dll
+ 2010-11-05 02:37 . 2010-02-22 14:23 26488 c:\windows\$hf_mig$\KB2121546\update\spcustom.dll
+ 2010-11-05 02:37 . 2010-02-22 14:23 17272 c:\windows\$hf_mig$\KB2121546\spmsg.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2010-11-05 23:31 . 2009-03-08 08:35 2048 c:\windows\ie8updates\KB2362765-IE8\iecompat.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 5632 c:\windows\ASSEMBLY\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 7168 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 7168 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 5632 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 5632 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 6656 c:\windows\ASSEMBLY\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 8192 c:\windows\ASSEMBLY\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 8192 c:\windows\ASSEMBLY\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2007-11-07 06:19 . 2007-11-07 06:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
+ 2007-11-07 06:19 . 2007-11-07 06:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-07 01:23 . 2007-11-07 01:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
+ 2008-07-30 01:26 . 2008-07-30 01:26 301568 c:\windows\SYSTEM32\XPSViewer\XPSViewer.exe
+ 2008-04-14 00:12 . 2009-01-07 22:21 121856 c:\windows\SYSTEM32\xmllite.dll
- 2008-04-14 00:12 . 2008-04-14 00:12 121856 c:\windows\SYSTEM32\xmllite.dll
+ 2004-08-04 11:00 . 2009-07-14 03:43 286208 c:\windows\SYSTEM32\wmpdxm.dll
- 2004-08-04 11:00 . 2008-04-14 00:12 293376 c:\windows\SYSTEM32\winsrv.dll
+ 2004-08-04 11:00 . 2010-06-18 17:45 293376 c:\windows\SYSTEM32\winsrv.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 208384 c:\windows\SYSTEM32\WinFXDocObj.exe
+ 2004-08-04 11:00 . 2009-03-08 08:34 236544 c:\windows\SYSTEM32\webcheck.dll
+ 2004-08-04 11:00 . 2010-03-10 06:15 420352 c:\windows\SYSTEM32\vbscript.dll
- 2004-08-04 11:00 . 2008-04-14 00:12 406016 c:\windows\SYSTEM32\usp10.dll
+ 2004-08-04 11:00 . 2010-04-16 15:36 406016 c:\windows\SYSTEM32\usp10.dll
+ 2004-08-04 11:00 . 2009-03-08 08:34 105984 c:\windows\SYSTEM32\url.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 161296 c:\windows\SYSTEM32\UIAutomationCore.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\i386\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 748032 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 748032 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 147456 c:\windows\SYSTEM32\SPOOL\PRTPROCS\x64\filterpipelineprintproc.dll
+ 2010-11-05 07:07 . 2008-03-13 04:52 761344 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unires.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 744960 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unidrvui.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 373248 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unidrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 198656 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\mxdwdui.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\mxdwdrv.dll
+ 2006-08-24 20:15 . 2006-08-24 20:15 150808 c:\windows\SYSTEM32\rgb9rast_2.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 781344 c:\windows\SYSTEM32\PresentationNative_v0300.dll
+ 2010-03-31 04:10 . 2010-03-31 04:10 295264 c:\windows\SYSTEM32\PresentationHost.exe
+ 2008-07-29 23:59 . 2008-07-29 23:59 105016 c:\windows\SYSTEM32\PresentationCFFRasterizerNative_v0300.dll
+ 2004-12-20 05:15 . 2010-11-06 02:04 442466 c:\windows\SYSTEM32\PERFH009.DAT
+ 2004-08-04 11:00 . 2010-09-10 05:58 206848 c:\windows\SYSTEM32\occache.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 611840 c:\windows\SYSTEM32\mstime.dll
+ 2004-08-04 11:00 . 2009-03-08 08:34 193536 c:\windows\SYSTEM32\msrating.dll
+ 2004-08-04 11:00 . 2009-03-08 08:22 156160 c:\windows\SYSTEM32\msls31.dll
+ 2009-03-08 08:32 . 2010-09-10 05:58 602112 c:\windows\SYSTEM32\msfeeds.dll
+ 2009-01-07 22:20 . 2009-01-07 22:20 265720 c:\windows\SYSTEM32\msdbg2.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 158720 c:\windows\SYSTEM32\mscorier.dll
+ 2009-11-06 02:17 . 2009-11-06 02:17 297808 c:\windows\SYSTEM32\mscoree.dll
+ 2006-10-19 01:47 . 2010-03-30 16:24 317440 c:\windows\SYSTEM32\mp4sdecd.dll
- 2006-10-19 01:47 . 2009-01-31 00:33 317440 c:\windows\SYSTEM32\MP4SDECD.dll
+ 2004-08-04 11:00 . 2009-12-09 05:53 726528 c:\windows\SYSTEM32\jscript.dll
+ 2004-08-04 11:00 . 2010-06-09 07:43 692736 c:\windows\SYSTEM32\inetcomm.dll
+ 2009-03-08 08:22 . 2009-03-08 08:22 164352 c:\windows\SYSTEM32\ieui.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 184320 c:\windows\SYSTEM32\iepeers.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 387584 c:\windows\SYSTEM32\iedkcs32.dll
+ 2009-03-08 08:11 . 2009-03-08 08:11 445952 c:\windows\SYSTEM32\ieapfltr.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 163840 c:\windows\SYSTEM32\ieakui.dll
+ 2004-08-04 11:00 . 2009-03-08 08:33 229376 c:\windows\SYSTEM32\ieaksie.dll
+ 2004-08-04 11:00 . 2009-03-08 08:33 125952 c:\windows\SYSTEM32\ieakeng.dll
+ 2004-08-04 11:00 . 2010-08-26 12:22 173056 c:\windows\SYSTEM32\ie4uinit.exe
+ 2008-07-29 23:24 . 2008-07-29 23:24 622080 c:\windows\SYSTEM32\icardagt.exe
+ 2004-08-10 19:08 . 2010-11-05 07:32 239144 c:\windows\SYSTEM32\FNTCACHE.DAT
+ 2008-07-30 01:10 . 2008-07-30 01:10 493048 c:\windows\SYSTEM32\evr.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 216064 c:\windows\SYSTEM32\dxtrans.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 348160 c:\windows\SYSTEM32\dxtmsft.dll
+ 2010-07-29 17:31 . 2010-07-29 17:31 115008 c:\windows\SYSTEM32\DRIVERS\ehdrv.sys
+ 2010-08-04 15:50 . 2010-08-04 15:50 140752 c:\windows\SYSTEM32\DRIVERS\eamon.sys
+ 2010-08-08 07:19 . 2010-07-12 12:55 218112 c:\windows\SYSTEM32\DLLCACHE\wordpad.exe
+ 2004-08-04 11:00 . 2009-07-14 03:43 286208 c:\windows\SYSTEM32\DLLCACHE\wmpdxm.dll
+ 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\SYSTEM32\DLLCACHE\winsrv.dll
+ 2010-04-16 16:09 . 2010-09-10 05:58 916480 c:\windows\SYSTEM32\DLLCACHE\wininet.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 236544 c:\windows\SYSTEM32\DLLCACHE\webcheck.dll
+ 2009-03-08 08:33 . 2009-03-08 08:33 759296 c:\windows\SYSTEM32\DLLCACHE\VGX.dll
+ 2010-03-09 11:09 . 2010-03-10 06:15 420352 c:\windows\SYSTEM32\DLLCACHE\vbscript.dll
+ 2010-04-16 15:36 . 2010-04-16 15:36 406016 c:\windows\SYSTEM32\DLLCACHE\usp10.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 105984 c:\windows\SYSTEM32\DLLCACHE\url.dll
- 2010-08-08 07:28 . 2009-10-15 16:28 119808 c:\windows\SYSTEM32\DLLCACHE\t2embed.dll
+ 2010-08-08 07:28 . 2010-08-27 08:02 119808 c:\windows\SYSTEM32\DLLCACHE\t2embed.dll
+ 2010-08-08 07:29 . 2010-08-26 13:39 357248 c:\windows\SYSTEM32\DLLCACHE\srv.sys
+ 2009-01-07 22:20 . 2009-01-07 22:20 134144 c:\windows\SYSTEM32\DLLCACHE\sqmapi.dll
+ 2009-04-15 14:51 . 2010-08-16 08:45 590848 c:\windows\SYSTEM32\DLLCACHE\rpcrt4.dll
+ 2009-03-08 08:34 . 2010-09-10 05:58 206848 c:\windows\SYSTEM32\DLLCACHE\occache.dll
+ 2009-03-08 08:32 . 2010-09-10 05:58 611840 c:\windows\SYSTEM32\DLLCACHE\mstime.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 193536 c:\windows\SYSTEM32\DLLCACHE\msrating.dll
+ 2009-03-08 08:22 . 2009-03-08 08:22 156160 c:\windows\SYSTEM32\DLLCACHE\msls31.dll
+ 2010-03-30 16:24 . 2010-03-30 16:24 317440 c:\windows\SYSTEM32\DLLCACHE\mp4sdecd.dll
+ 2010-09-18 16:23 . 2010-09-18 16:23 974848 c:\windows\SYSTEM32\DLLCACHE\mfc42u.dll
+ 2004-08-04 11:00 . 2010-09-18 06:53 954368 c:\windows\SYSTEM32\DLLCACHE\mfc40.dll
+ 2010-09-07 13:03 . 2009-12-09 05:53 726528 c:\windows\SYSTEM32\DLLCACHE\jscript.dll
+ 2010-01-29 15:01 . 2010-06-09 07:43 692736 c:\windows\SYSTEM32\DLLCACHE\inetcomm.dll
+ 2009-03-08 18:09 . 2009-03-08 18:09 638816 c:\windows\SYSTEM32\DLLCACHE\iexplore.exe
+ 2010-04-16 16:09 . 2010-09-10 05:58 184320 c:\windows\SYSTEM32\DLLCACHE\iepeers.dll
+ 2009-03-08 18:09 . 2010-09-10 05:58 387584 c:\windows\SYSTEM32\DLLCACHE\iedkcs32.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 163840 c:\windows\SYSTEM32\DLLCACHE\ieakui.dll
+ 2009-03-08 08:33 . 2009-03-08 08:33 229376 c:\windows\SYSTEM32\DLLCACHE\ieaksie.dll
+ 2009-03-08 08:33 . 2009-03-08 08:33 125952 c:\windows\SYSTEM32\DLLCACHE\ieakeng.dll
+ 2009-03-08 08:32 . 2010-08-26 12:22 173056 c:\windows\SYSTEM32\DLLCACHE\ie4uinit.exe
+ 2009-03-08 08:31 . 2009-03-08 08:31 216064 c:\windows\SYSTEM32\DLLCACHE\dxtrans.dll
+ 2009-03-08 08:31 . 2009-03-08 08:31 348160 c:\windows\SYSTEM32\DLLCACHE\dxtmsft.dll
+ 2010-04-20 05:51 . 2010-09-01 11:51 285824 c:\windows\SYSTEM32\DLLCACHE\atmfd.dll
+ 2009-03-08 08:32 . 2009-03-08 08:32 128512 c:\windows\SYSTEM32\DLLCACHE\advpack.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 128512 c:\windows\SYSTEM32\advpack.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-07-29 22:47 . 2008-07-29 22:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-29 22:47 . 2008-07-29 22:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-30 03:15 . 2008-07-30 03:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-30 03:40 . 2008-07-30 03:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-07-30 00:35 . 2008-07-30 00:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2010-03-31 04:16 . 2010-03-31 04:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 806928 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2010-04-08 03:48 . 2010-04-08 03:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2010-04-08 03:48 . 2010-04-08 03:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2010-09-22 13:43 . 2010-09-22 13:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2010-02-09 16:22 . 2010-02-09 16:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2010-05-11 10:40 . 2010-05-11 10:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2010-05-11 10:40 . 2010-05-11 10:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 06:25 . 2010-09-23 06:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-03-31 18:49 . 2010-03-31 18:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-03-31 19:32 . 2010-03-31 19:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 07:17 . 2010-09-23 07:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:08 pm

+ 2010-11-05 23:31 . 2009-03-08 08:35 2048 c:\windows\ie8updates\KB2362765-IE8\iecompat.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 5632 c:\windows\ASSEMBLY\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 7168 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 7168 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 5632 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 5632 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 6656 c:\windows\ASSEMBLY\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 8192 c:\windows\ASSEMBLY\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 8192 c:\windows\ASSEMBLY\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2007-11-07 06:19 . 2007-11-07 06:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
+ 2007-11-07 06:19 . 2007-11-07 06:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-07 01:23 . 2007-11-07 01:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll
+ 2008-07-30 01:26 . 2008-07-30 01:26 301568 c:\windows\SYSTEM32\XPSViewer\XPSViewer.exe
+ 2008-04-14 00:12 . 2009-01-07 22:21 121856 c:\windows\SYSTEM32\xmllite.dll
- 2008-04-14 00:12 . 2008-04-14 00:12 121856 c:\windows\SYSTEM32\xmllite.dll
+ 2004-08-04 11:00 . 2009-07-14 03:43 286208 c:\windows\SYSTEM32\wmpdxm.dll
- 2004-08-04 11:00 . 2008-04-14 00:12 293376 c:\windows\SYSTEM32\winsrv.dll
+ 2004-08-04 11:00 . 2010-06-18 17:45 293376 c:\windows\SYSTEM32\winsrv.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 208384 c:\windows\SYSTEM32\WinFXDocObj.exe
+ 2004-08-04 11:00 . 2009-03-08 08:34 236544 c:\windows\SYSTEM32\webcheck.dll
+ 2004-08-04 11:00 . 2010-03-10 06:15 420352 c:\windows\SYSTEM32\vbscript.dll
- 2004-08-04 11:00 . 2008-04-14 00:12 406016 c:\windows\SYSTEM32\usp10.dll
+ 2004-08-04 11:00 . 2010-04-16 15:36 406016 c:\windows\SYSTEM32\usp10.dll
+ 2004-08-04 11:00 . 2009-03-08 08:34 105984 c:\windows\SYSTEM32\url.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 161296 c:\windows\SYSTEM32\UIAutomationCore.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\i386\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 748032 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 748032 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\amd64\mxdwdrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 147456 c:\windows\SYSTEM32\SPOOL\PRTPROCS\x64\filterpipelineprintproc.dll
+ 2010-11-05 07:07 . 2008-03-13 04:52 761344 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unires.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 744960 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unidrvui.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 373248 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\unidrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 198656 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\mxdwdui.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 765440 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\mxdwdrv.dll
+ 2006-08-24 20:15 . 2006-08-24 20:15 150808 c:\windows\SYSTEM32\rgb9rast_2.dll
+ 2008-07-29 23:59 . 2008-07-29 23:59 781344 c:\windows\SYSTEM32\PresentationNative_v0300.dll
+ 2010-03-31 04:10 . 2010-03-31 04:10 295264 c:\windows\SYSTEM32\PresentationHost.exe
+ 2008-07-29 23:59 . 2008-07-29 23:59 105016 c:\windows\SYSTEM32\PresentationCFFRasterizerNative_v0300.dll
+ 2004-12-20 05:15 . 2010-11-06 02:04 442466 c:\windows\SYSTEM32\PERFH009.DAT
+ 2004-08-04 11:00 . 2010-09-10 05:58 206848 c:\windows\SYSTEM32\occache.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 611840 c:\windows\SYSTEM32\mstime.dll
+ 2004-08-04 11:00 . 2009-03-08 08:34 193536 c:\windows\SYSTEM32\msrating.dll
+ 2004-08-04 11:00 . 2009-03-08 08:22 156160 c:\windows\SYSTEM32\msls31.dll
+ 2009-03-08 08:32 . 2010-09-10 05:58 602112 c:\windows\SYSTEM32\msfeeds.dll
+ 2009-01-07 22:20 . 2009-01-07 22:20 265720 c:\windows\SYSTEM32\msdbg2.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 158720 c:\windows\SYSTEM32\mscorier.dll
+ 2009-11-06 02:17 . 2009-11-06 02:17 297808 c:\windows\SYSTEM32\mscoree.dll
+ 2006-10-19 01:47 . 2010-03-30 16:24 317440 c:\windows\SYSTEM32\mp4sdecd.dll
- 2006-10-19 01:47 . 2009-01-31 00:33 317440 c:\windows\SYSTEM32\MP4SDECD.dll
+ 2004-08-04 11:00 . 2009-12-09 05:53 726528 c:\windows\SYSTEM32\jscript.dll
+ 2004-08-04 11:00 . 2010-06-09 07:43 692736 c:\windows\SYSTEM32\inetcomm.dll
+ 2009-03-08 08:22 . 2009-03-08 08:22 164352 c:\windows\SYSTEM32\ieui.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 184320 c:\windows\SYSTEM32\iepeers.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 387584 c:\windows\SYSTEM32\iedkcs32.dll
+ 2009-03-08 08:11 . 2009-03-08 08:11 445952 c:\windows\SYSTEM32\ieapfltr.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 163840 c:\windows\SYSTEM32\ieakui.dll
+ 2004-08-04 11:00 . 2009-03-08 08:33 229376 c:\windows\SYSTEM32\ieaksie.dll
+ 2004-08-04 11:00 . 2009-03-08 08:33 125952 c:\windows\SYSTEM32\ieakeng.dll
+ 2004-08-04 11:00 . 2010-08-26 12:22 173056 c:\windows\SYSTEM32\ie4uinit.exe
+ 2008-07-29 23:24 . 2008-07-29 23:24 622080 c:\windows\SYSTEM32\icardagt.exe
+ 2004-08-10 19:08 . 2010-11-05 07:32 239144 c:\windows\SYSTEM32\FNTCACHE.DAT
+ 2008-07-30 01:10 . 2008-07-30 01:10 493048 c:\windows\SYSTEM32\evr.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 216064 c:\windows\SYSTEM32\dxtrans.dll
+ 2004-08-04 11:00 . 2009-03-08 08:31 348160 c:\windows\SYSTEM32\dxtmsft.dll
+ 2010-07-29 17:31 . 2010-07-29 17:31 115008 c:\windows\SYSTEM32\DRIVERS\ehdrv.sys
+ 2010-08-04 15:50 . 2010-08-04 15:50 140752 c:\windows\SYSTEM32\DRIVERS\eamon.sys
+ 2010-08-08 07:19 . 2010-07-12 12:55 218112 c:\windows\SYSTEM32\DLLCACHE\wordpad.exe
+ 2004-08-04 11:00 . 2009-07-14 03:43 286208 c:\windows\SYSTEM32\DLLCACHE\wmpdxm.dll
+ 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\SYSTEM32\DLLCACHE\winsrv.dll
+ 2010-04-16 16:09 . 2010-09-10 05:58 916480 c:\windows\SYSTEM32\DLLCACHE\wininet.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 236544 c:\windows\SYSTEM32\DLLCACHE\webcheck.dll
+ 2009-03-08 08:33 . 2009-03-08 08:33 759296 c:\windows\SYSTEM32\DLLCACHE\VGX.dll
+ 2010-03-09 11:09 . 2010-03-10 06:15 420352 c:\windows\SYSTEM32\DLLCACHE\vbscript.dll
+ 2010-04-16 15:36 . 2010-04-16 15:36 406016 c:\windows\SYSTEM32\DLLCACHE\usp10.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 105984 c:\windows\SYSTEM32\DLLCACHE\url.dll
- 2010-08-08 07:28 . 2009-10-15 16:28 119808 c:\windows\SYSTEM32\DLLCACHE\t2embed.dll
+ 2010-08-08 07:28 . 2010-08-27 08:02 119808 c:\windows\SYSTEM32\DLLCACHE\t2embed.dll
+ 2010-08-08 07:29 . 2010-08-26 13:39 357248 c:\windows\SYSTEM32\DLLCACHE\srv.sys
+ 2009-01-07 22:20 . 2009-01-07 22:20 134144 c:\windows\SYSTEM32\DLLCACHE\sqmapi.dll
+ 2009-04-15 14:51 . 2010-08-16 08:45 590848 c:\windows\SYSTEM32\DLLCACHE\rpcrt4.dll
+ 2009-03-08 08:34 . 2010-09-10 05:58 206848 c:\windows\SYSTEM32\DLLCACHE\occache.dll
+ 2009-03-08 08:32 . 2010-09-10 05:58 611840 c:\windows\SYSTEM32\DLLCACHE\mstime.dll
+ 2009-03-08 08:34 . 2009-03-08 08:34 193536 c:\windows\SYSTEM32\DLLCACHE\msrating.dll
+ 2009-03-08 08:22 . 2009-03-08 08:22 156160 c:\windows\SYSTEM32\DLLCACHE\msls31.dll
+ 2010-03-30 16:24 . 2010-03-30 16:24 317440 c:\windows\SYSTEM32\DLLCACHE\mp4sdecd.dll
+ 2010-09-18 16:23 . 2010-09-18 16:23 974848 c:\windows\SYSTEM32\DLLCACHE\mfc42u.dll
+ 2004-08-04 11:00 . 2010-09-18 06:53 954368 c:\windows\SYSTEM32\DLLCACHE\mfc40.dll
+ 2010-09-07 13:03 . 2009-12-09 05:53 726528 c:\windows\SYSTEM32\DLLCACHE\jscript.dll
+ 2010-01-29 15:01 . 2010-06-09 07:43 692736 c:\windows\SYSTEM32\DLLCACHE\inetcomm.dll
+ 2009-03-08 18:09 . 2009-03-08 18:09 638816 c:\windows\SYSTEM32\DLLCACHE\iexplore.exe
+ 2010-04-16 16:09 . 2010-09-10 05:58 184320 c:\windows\SYSTEM32\DLLCACHE\iepeers.dll
+ 2009-03-08 18:09 . 2010-09-10 05:58 387584 c:\windows\SYSTEM32\DLLCACHE\iedkcs32.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 163840 c:\windows\SYSTEM32\DLLCACHE\ieakui.dll
+ 2009-03-08 08:33 . 2009-03-08 08:33 229376 c:\windows\SYSTEM32\DLLCACHE\ieaksie.dll
+ 2009-03-08 08:33 . 2009-03-08 08:33 125952 c:\windows\SYSTEM32\DLLCACHE\ieakeng.dll
+ 2009-03-08 08:32 . 2010-08-26 12:22 173056 c:\windows\SYSTEM32\DLLCACHE\ie4uinit.exe
+ 2009-03-08 08:31 . 2009-03-08 08:31 216064 c:\windows\SYSTEM32\DLLCACHE\dxtrans.dll
+ 2009-03-08 08:31 . 2009-03-08 08:31 348160 c:\windows\SYSTEM32\DLLCACHE\dxtmsft.dll
+ 2010-04-20 05:51 . 2010-09-01 11:51 285824 c:\windows\SYSTEM32\DLLCACHE\atmfd.dll
+ 2009-03-08 08:32 . 2009-03-08 08:32 128512 c:\windows\SYSTEM32\DLLCACHE\advpack.dll
+ 2004-08-04 11:00 . 2009-03-08 08:32 128512 c:\windows\SYSTEM32\advpack.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
+ 2008-07-30 03:40 . 2008-07-30 03:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2008-07-29 22:47 . 2008-07-29 22:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
+ 2008-07-29 22:47 . 2008-07-29 22:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll
+ 2008-07-30 03:15 . 2008-07-30 03:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat
+ 2008-07-30 03:40 . 2008-07-30 03:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll
+ 2008-07-30 00:35 . 2008-07-30 00:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll
+ 2010-03-31 04:16 . 2010-03-31 04:16 130408 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 806928 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
+ 2010-04-08 03:48 . 2010-04-08 03:48 970752 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
+ 2010-04-08 03:48 . 2010-04-08 03:48 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll
+ 2008-07-29 23:16 . 2008-07-29 23:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll
+ 2008-07-29 23:24 . 2008-07-29 23:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
+ 2008-07-29 23:16 . 2008-07-29 23:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
+ 2010-09-22 13:43 . 2010-09-22 13:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2010-02-09 16:22 . 2010-02-09 16:22 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2010-05-11 10:40 . 2010-05-11 10:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2008-11-25 08:59 . 2008-11-25 08:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2010-05-11 10:40 . 2010-05-11 10:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
- 2005-09-23 11:29 . 2005-09-23 11:29 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
- 2005-09-23 11:28 . 2005-09-23 11:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 15:16 . 2008-07-25 15:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2008-07-25 15:17 . 2008-07-25 15:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2010-03-31 18:51 . 2010-03-31 18:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 06:25 . 2010-09-23 06:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-03-31 18:49 . 2010-03-31 18:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-03-31 19:32 . 2010-03-31 19:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 07:17 . 2010-09-23 07:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-24 01:02 . 2010-09-24 01:02 798208 c:\windows\Installer\62df89.msp
+ 2010-02-25 04:14 . 2010-02-25 04:14 543232 c:\windows\Installer\62df45.msp
+ 2009-03-20 15:48 . 2009-03-20 15:48 183808 c:\windows\Installer\62df21.msp
+ 2010-11-06 01:13 . 2010-11-06 01:13 968192 c:\windows\Installer\556d94.msi
+ 2008-12-13 13:58 . 2008-12-13 13:58 754688 c:\windows\Installer\1c34560.msp
+ 2010-11-05 07:10 . 2010-11-05 07:10 648192 c:\windows\Installer\1c3453a.msi
+ 2008-07-30 01:23 . 2008-07-30 01:23 250880 c:\windows\Installer\1c17e49.msp
+ 2008-07-30 01:28 . 2008-07-30 01:28 278016 c:\windows\Installer\1c17e47.msp
+ 2008-07-29 23:40 . 2008-07-29 23:40 291840 c:\windows\Installer\1c17e45.msp
+ 2010-11-05 07:08 . 2010-11-05 07:08 137728 c:\windows\Installer\1c17e3f.msi
+ 2008-07-29 21:35 . 2008-07-29 21:35 553472 c:\windows\Installer\1bbf041.msp
+ 2008-07-29 21:33 . 2008-07-29 21:33 506368 c:\windows\Installer\1bbf03f.msp
+ 2008-07-29 21:37 . 2008-07-29 21:37 911360 c:\windows\Installer\1bbf03e.msp
+ 2010-11-06 01:13 . 2010-11-06 01:13 101504 c:\windows\Installer\{D02EDDE7-B5C5-40A2-AF57-73A3278F4EEB}\egui.exe
+ 2010-11-05 23:29 . 2009-03-08 08:34 914944 c:\windows\ie8updates\KB982381-IE8\wininet.dll
+ 2010-11-05 23:30 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll
+ 2010-11-05 23:30 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe
+ 2010-11-05 23:29 . 2009-03-08 08:34 109568 c:\windows\ie8updates\KB982381-IE8\occache.dll
+ 2010-11-05 23:29 . 2009-03-08 08:32 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll
+ 2010-11-05 23:29 . 2009-03-08 08:32 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll
+ 2010-11-05 23:30 . 2009-03-08 08:33 246784 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll
+ 2010-11-05 23:29 . 2009-03-08 08:31 183808 c:\windows\ie8updates\KB982381-IE8\iepeers.dll
+ 2010-11-05 23:30 . 2009-03-08 08:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll
+ 2010-11-05 23:30 . 2009-03-08 18:09 391536 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll
+ 2010-11-05 23:30 . 2009-03-08 08:32 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe
+ 2010-11-06 01:28 . 2009-03-08 08:33 420352 c:\windows\ie8updates\KB981332-IE8\vbscript.dll
+ 2010-11-06 01:28 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB981332-IE8\spuninst\updspapi.dll
+ 2010-11-06 01:28 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB981332-IE8\spuninst\spuninst.exe
+ 2010-11-06 01:28 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll
+ 2010-11-06 01:28 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe
+ 2010-11-06 01:28 . 2009-06-22 06:44 726528 c:\windows\ie8updates\KB976662-IE8\jscript.dll
+ 2010-11-06 01:27 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2010-11-06 01:27 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2010-11-06 01:27 . 2009-03-08 08:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2010-11-05 23:31 . 2010-02-22 14:23 382840 c:\windows\ie8updates\KB2362765-IE8\spuninst\updspapi.dll
+ 2010-11-05 23:31 . 2010-02-22 14:23 231288 c:\windows\ie8updates\KB2362765-IE8\spuninst\spuninst.exe
+ 2010-11-05 23:31 . 2010-05-06 10:41 916480 c:\windows\ie8updates\KB2360131-IE8\wininet.dll
+ 2010-11-05 23:31 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2360131-IE8\spuninst\updspapi.dll
+ 2010-11-05 23:31 . 2009-05-26 09:01 231288 c:\windows\ie8updates\KB2360131-IE8\spuninst\spuninst.exe
+ 2010-11-05 23:31 . 2010-05-06 10:41 206848 c:\windows\ie8updates\KB2360131-IE8\occache.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 611840 c:\windows\ie8updates\KB2360131-IE8\mstime.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 599040 c:\windows\ie8updates\KB2360131-IE8\msfeeds.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 247808 c:\windows\ie8updates\KB2360131-IE8\ieproxy.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 184320 c:\windows\ie8updates\KB2360131-IE8\iepeers.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 743424 c:\windows\ie8updates\KB2360131-IE8\iedvtool.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 387584 c:\windows\ie8updates\KB2360131-IE8\iedkcs32.dll
+ 2010-11-05 23:31 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2360131-IE8\ie4uinit.exe
+ 2010-11-05 23:24 . 2010-09-09 14:16 667136 c:\windows\ie8\wininet.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 276480 c:\windows\ie8\webcheck.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 851968 c:\windows\ie8\vgx.dll
+ 2010-11-05 23:24 . 2010-03-09 11:09 430080 c:\windows\ie8\vbscript.dll
+ 2010-11-05 23:24 . 2010-09-09 14:16 627712 c:\windows\ie8\urlmon.dll
+ 2010-11-05 23:26 . 2009-01-07 22:21 382496 c:\windows\ie8\spuninst\updspapi.dll
+ 2010-11-05 23:26 . 2009-01-07 22:20 231456 c:\windows\ie8\spuninst\spuninst.exe
+ 2010-11-05 23:24 . 2008-04-14 00:12 532480 c:\windows\ie8\mstime.dll
+ 2010-11-05 23:24 . 2008-04-14 00:12 146432 c:\windows\ie8\msrating.dll
+ 2010-11-05 23:24 . 2004-08-04 11:00 146432 c:\windows\ie8\msls31.dll
+ 2010-11-05 23:24 . 2010-09-09 14:16 449024 c:\windows\ie8\mshtmled.dll
+ 2010-11-05 23:24 . 2009-08-13 15:16 512000 c:\windows\ie8\jscript.dll
+ 2010-11-05 23:24 . 2010-09-09 14:16 251904 c:\windows\ie8\iepeers.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 323584 c:\windows\ie8\iedkcs32.dll
+ 2010-11-05 23:24 . 2004-08-04 11:00 221184 c:\windows\ie8\ieakui.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 216576 c:\windows\ie8\ieaksie.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 143360 c:\windows\ie8\ieakeng.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 205312 c:\windows\ie8\dxtrans.dll
+ 2010-11-05 23:24 . 2008-04-14 00:11 357888 c:\windows\ie8\dxtmsft.dll

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:08 pm

+ 2010-11-05 07:07 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\I386\unires.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\I386\unidrvui.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\I386\unidrv.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\I386\mxdwdui.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\I386\mxdwdrv.dll
+ 2010-11-05 02:32 . 2010-11-05 02:32 835584 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_64be2538\System.Drawing.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 321536 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe
+ 2010-11-06 02:22 . 2010-11-06 02:22 240128 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
+ 2010-11-06 02:22 . 2010-11-06 02:22 187904 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
+ 2010-11-06 02:22 . 2010-11-06 02:22 447488 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll
+ 2010-11-06 02:31 . 2010-11-06 02:31 400896 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 129536 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 202240 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 859648 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 328704 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 301056 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 547328 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 141312 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 627200 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 212992 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 679936 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 311296 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 621056 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 998400 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 330752 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll
+ 2010-11-06 02:23 . 2010-11-06 02:23 381440 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 212992 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 280064 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 627712 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
+ 2010-11-06 02:21 . 2010-11-06 02:21 208384 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 881152 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 455680 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 354816 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 939008 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 756736 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 135680 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 971264 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 141312 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 633856 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 366080 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe
+ 2010-11-06 02:25 . 2010-11-06 02:25 256000 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 320512 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
+ 2010-11-06 02:16 . 2010-11-06 02:16 368128 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll
+ 2010-11-06 02:18 . 2010-11-06 02:18 258048 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
+ 2010-11-06 02:17 . 2010-11-06 02:17 224768 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
+ 2010-11-06 02:18 . 2010-11-06 02:18 539648 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 133632 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe
+ 2010-11-06 02:25 . 2010-11-06 02:25 386560 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 144384 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 175104 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 839680 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 222720 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 220672 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 410112 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe
+ 2010-11-06 02:25 . 2010-11-06 02:25 842240 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 385024 c:\windows\ASSEMBLY\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 167936 c:\windows\ASSEMBLY\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 139264 c:\windows\ASSEMBLY\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 507904 c:\windows\ASSEMBLY\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 540672 c:\windows\ASSEMBLY\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 839680 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 835584 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 835584 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 335872 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2010-11-05 07:16 . 2010-11-05 07:16 139264 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 131072 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2010-11-05 07:16 . 2010-11-05 07:16 229376 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 688128 c:\windows\ASSEMBLY\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 114688 c:\windows\ASSEMBLY\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 114688 c:\windows\ASSEMBLY\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 569344 c:\windows\ASSEMBLY\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 258048 c:\windows\ASSEMBLY\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 258048 c:\windows\ASSEMBLY\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-11-06 01:37 . 2010-11-06 01:37 970752 c:\windows\ASSEMBLY\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 131072 c:\windows\ASSEMBLY\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 131072 c:\windows\ASSEMBLY\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 303104 c:\windows\ASSEMBLY\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 233472 c:\windows\ASSEMBLY\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 258048 c:\windows\ASSEMBLY\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 258048 c:\windows\ASSEMBLY\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 372736 c:\windows\ASSEMBLY\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 143360 c:\windows\ASSEMBLY\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2010-11-05 07:07 . 2010-11-05 07:07 131072 c:\windows\ASSEMBLY\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2010-11-06 01:37 . 2010-11-06 01:37 438272 c:\windows\ASSEMBLY\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 126976 c:\windows\ASSEMBLY\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 626688 c:\windows\ASSEMBLY\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 401408 c:\windows\ASSEMBLY\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 188416 c:\windows\ASSEMBLY\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 188416 c:\windows\ASSEMBLY\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 286720 c:\windows\ASSEMBLY\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 970752 c:\windows\ASSEMBLY\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 745472 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-11-05 07:16 . 2010-11-05 07:16 442368 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 114688 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2010-11-05 07:16 . 2010-11-05 07:16 294912 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 684032 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 229376 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 667648 c:\windows\ASSEMBLY\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 425984 c:\windows\ASSEMBLY\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 163840 c:\windows\ASSEMBLY\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 110592 c:\windows\ASSEMBLY\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 110592 c:\windows\ASSEMBLY\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-11-06 01:37 . 2010-11-06 01:37 110592 c:\windows\ASSEMBLY\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 528384 c:\windows\ASSEMBLY\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 864256 c:\windows\ASSEMBLY\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 163840 c:\windows\ASSEMBLY\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 397312 c:\windows\ASSEMBLY\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 139264 c:\windows\ASSEMBLY\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 196608 c:\windows\ASSEMBLY\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 598016 c:\windows\ASSEMBLY\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 659456 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 372736 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 372736 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 110592 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2010-10-19 06:17 . 2010-10-19 06:17 110592 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-11-05 07:07 . 2010-11-05 07:07 397312 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 749568 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 655360 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 802816 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 733184 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 348160 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 106496 c:\windows\ASSEMBLY\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 507904 c:\windows\ASSEMBLY\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 261632 c:\windows\ASSEMBLY\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 368640 c:\windows\ASSEMBLY\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 113664 c:\windows\ASSEMBLY\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-10-19 06:16 . 2010-10-19 06:16 258048 c:\windows\ASSEMBLY\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 258048 c:\windows\ASSEMBLY\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 486400 c:\windows\ASSEMBLY\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-11-05 07:07 . 2010-11-05 07:07 163840 c:\windows\ASSEMBLY\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2010-11-05 02:35 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB981322\update\updspapi.dll
+ 2010-11-05 02:35 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB981322\update\update.exe
+ 2010-11-05 02:35 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB981322\spuninst.exe
+ 2010-04-16 15:29 . 2010-04-16 15:29 406016 c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
+ 2010-11-05 02:37 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB2347290\update\updspapi.dll
+ 2010-11-05 02:37 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB2347290\update\update.exe
+ 2010-11-05 02:37 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB2347290\spuninst.exe
+ 2010-11-05 02:29 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2141007\update\updspapi.dll
+ 2010-11-05 02:29 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2141007\update\update.exe
+ 2010-11-05 02:29 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2141007\spuninst.exe
+ 2010-06-09 07:41 . 2010-06-09 07:41 692736 c:\windows\$hf_mig$\KB2141007\SP3QFE\inetcomm.dll
+ 2010-11-05 02:37 . 2010-02-22 14:23 382840 c:\windows\$hf_mig$\KB2121546\update\updspapi.dll
+ 2010-11-05 02:37 . 2010-02-22 14:23 755576 c:\windows\$hf_mig$\KB2121546\update\update.exe
+ 2010-11-05 02:37 . 2010-02-22 14:23 231288 c:\windows\$hf_mig$\KB2121546\spuninst.exe
+ 2010-06-18 17:43 . 2010-06-18 17:43 293376 c:\windows\$hf_mig$\KB2121546\SP3QFE\winsrv.dll
+ 2010-11-05 02:01 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 1210880 c:\windows\SYSTEM32\urlmon.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 1676288 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\xpssvcs.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 1676288 c:\windows\SYSTEM32\SPOOL\XPSEP\i386\i386\xpssvcs.dll
+ 2010-11-05 07:07 . 2008-07-06 21:36 2936832 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\xpssvcs.dll
+ 2010-11-05 07:07 . 2008-07-06 21:36 2936832 c:\windows\SYSTEM32\SPOOL\XPSEP\amd64\amd64\xpssvcs.dll
+ 2010-11-05 07:07 . 2008-07-06 12:06 1676288 c:\windows\SYSTEM32\SPOOL\DRIVERS\W32X86\3\XpsSvcs.dll
+ 2004-08-04 11:00 . 2010-09-09 14:16 1510400 c:\windows\SYSTEM32\shdocvw.dll
+ 2004-08-04 11:00 . 2010-07-16 12:05 1288192 c:\windows\SYSTEM32\ole32.dll
+ 2004-08-04 11:00 . 2010-09-10 05:58 5957120 c:\windows\SYSTEM32\mshtml.dll
+ 2008-03-20 22:06 . 2008-03-20 22:06 1480232 c:\windows\SYSTEM32\LegitCheckControl.dll
+ 2009-03-08 08:32 . 2010-09-10 05:58 1986560 c:\windows\SYSTEM32\iertutil.dll
+ 2009-02-07 01:07 . 2009-02-07 01:07 3698584 c:\windows\SYSTEM32\ieapfltr.dat
+ 2010-05-02 05:22 . 2010-08-31 13:42 1852800 c:\windows\SYSTEM32\DLLCACHE\win32k.sys
+ 2010-04-16 16:09 . 2010-09-10 05:58 1210880 c:\windows\SYSTEM32\DLLCACHE\urlmon.dll
+ 2010-04-16 16:09 . 2010-09-09 14:16 1510400 c:\windows\SYSTEM32\DLLCACHE\shdocvw.dll
+ 2010-07-16 12:05 . 2010-07-16 12:05 1288192 c:\windows\SYSTEM32\DLLCACHE\ole32.dll
+ 2010-04-16 16:09 . 2010-09-10 05:58 5957120 c:\windows\SYSTEM32\DLLCACHE\mshtml.dll
- 2010-04-16 16:09 . 2010-06-24 12:10 1025024 c:\windows\SYSTEM32\DLLCACHE\browseui.dll
+ 2010-04-16 16:09 . 2010-09-09 14:16 1025024 c:\windows\SYSTEM32\DLLCACHE\browseui.dll
+ 2009-11-07 05:06 . 2009-11-07 05:06 1130824 c:\windows\SYSTEM32\dfshim.dll
- 2004-08-04 11:00 . 2010-06-24 12:10 1025024 c:\windows\SYSTEM32\browseui.dll
+ 2004-08-04 11:00 . 2010-09-09 14:16 1025024 c:\windows\SYSTEM32\browseui.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-29 22:47 . 2008-07-29 22:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-29 22:47 . 2008-07-29 22:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-30 03:40 . 2008-07-30 03:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-12-05 23:35 . 2008-12-05 23:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 2637840 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
+ 2008-07-30 01:10 . 2008-07-30 01:10 4883464 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
+ 2010-04-08 03:48 . 2010-04-08 03:48 5967872 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-11-25 08:59 . 2008-11-25 08:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2010-09-22 13:44 . 2010-09-22 13:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-03-23 09:32 . 2010-03-23 09:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-25 15:17 . 2008-07-25 15:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2010-05-11 10:40 . 2010-05-11 10:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2010-05-11 10:40 . 2010-05-11 10:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-07-25 15:16 . 2008-07-25 15:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2010-09-23 19:55 . 2010-09-23 19:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-23 19:55 . 2010-09-23 19:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2010-03-31 18:50 . 2010-03-31 18:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-09-23 06:26 . 2010-09-23 06:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-09-23 06:25 . 2010-09-23 06:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2010-09-23 19:55 . 2010-09-23 19:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2010-04-01 15:42 . 2010-04-01 15:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-09-23 11:39 . 2010-09-23 11:39 4265472 c:\windows\Installer\62df81.msp
+ 2009-11-09 04:25 . 2009-11-09 04:25 1935360 c:\windows\Installer\62df5e.msp
+ 2010-04-12 02:17 . 2010-04-12 02:17 2607104 c:\windows\Installer\62df2e.msp
+ 2010-04-12 02:17 . 2010-04-12 02:17 4210688 c:\windows\Installer\62df2d.msp
+ 2008-12-13 13:57 . 2008-12-13 13:57 8397824 c:\windows\Installer\1c34549.msp
+ 2008-07-29 23:26 . 2008-07-29 23:26 1043456 c:\windows\Installer\1c17e48.msp
+ 2008-07-30 00:37 . 2008-07-30 00:37 2679808 c:\windows\Installer\1c17e46.msp
+ 2008-07-30 01:15 . 2008-07-30 01:15 3697664 c:\windows\Installer\1c17e44.msp
+ 2008-07-29 23:34 . 2008-07-29 23:34 1448448 c:\windows\Installer\1c17e43.msp
+ 2008-07-30 00:22 . 2008-07-30 00:22 4137984 c:\windows\Installer\1c17e42.msp
+ 2008-07-29 23:18 . 2008-07-29 23:18 3376640 c:\windows\Installer\1c17e41.msp
+ 2008-07-29 21:45 . 2008-07-29 21:45 2543616 c:\windows\Installer\1bbf045.msp
+ 2008-07-29 21:29 . 2008-07-29 21:29 2926080 c:\windows\Installer\1bbf044.msp
+ 2008-07-29 21:41 . 2008-07-29 21:41 6487040 c:\windows\Installer\1bbf043.msp
+ 2008-07-29 21:39 . 2008-07-29 21:39 3403264 c:\windows\Installer\1bbf042.msp
+ 2008-07-29 21:43 . 2008-07-29 21:43 1013248 c:\windows\Installer\1bbf040.msp
+ 2008-07-29 21:31 . 2008-07-29 21:31 6083072 c:\windows\Installer\1bbf03d.msp
+ 2010-11-05 23:29 . 2009-03-08 08:34 1206784 c:\windows\ie8updates\KB982381-IE8\urlmon.dll
+ 2010-11-05 23:29 . 2009-03-08 08:41 5937152 c:\windows\ie8updates\KB982381-IE8\mshtml.dll
+ 2010-11-05 23:29 . 2009-03-08 08:32 1985024 c:\windows\ie8updates\KB982381-IE8\iertutil.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 1209344 c:\windows\ie8updates\KB2360131-IE8\urlmon.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 5950976 c:\windows\ie8updates\KB2360131-IE8\mshtml.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 1985536 c:\windows\ie8updates\KB2360131-IE8\iertutil.dll
+ 2010-11-05 23:24 . 2010-09-09 14:16 3073536 c:\windows\ie8\mshtml.dll
+ 2010-11-05 02:31 . 2010-11-05 02:31 1966080 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_06de6ea9\System.dll
+ 2010-11-05 02:31 . 2010-11-05 02:31 2088960 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_904320b8\System.Xml.dll
+ 2010-11-05 02:31 . 2010-11-05 02:31 3018752 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_9d431eda\System.Windows.Forms.dll
+ 2010-11-05 02:31 . 2010-11-05 02:31 1470464 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_048482cc\System.Design.dll
+ 2010-11-05 02:32 . 2010-11-05 02:32 3391488 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\MSCORLIB\1.0.5000.0__b77a5c561934e089_32738045\mscorlib.dll
+ 2010-11-06 02:07 . 2010-11-06 02:07 3325440 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll
+ 2010-11-06 02:22 . 2010-11-06 02:22 1049600 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll
+ 2010-11-06 02:05 . 2010-11-06 02:05 7676928 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Temp\ZAP142E.tmp\System.dll
+ 2010-11-06 02:06 . 2010-11-06 02:06 7949824 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll
+ 2010-11-06 02:22 . 2010-11-06 02:22 5450752 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
+ 2010-11-06 02:31 . 2010-11-06 02:31 1356288 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
+ 2010-11-06 02:31 . 2010-11-06 02:31 1908224 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
+ 2010-11-06 02:31 . 2010-11-06 02:31 4514304 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 2992640 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 1840640 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
+ 2010-11-06 02:30 . 2010-11-06 02:30 2209280 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 2405376 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
+ 2010-11-06 02:21 . 2010-11-06 02:21 1917952 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 1706496 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
+ 2010-11-06 02:23 . 2010-11-06 02:23 2345472 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
+ 2010-11-06 02:21 . 2010-11-06 02:21 1035776 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
+ 2010-11-06 02:23 . 2010-11-06 02:23 1070080 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
+ 2010-11-06 02:20 . 2010-11-06 02:21 1587200 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 1116672 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 1801216 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
+ 2010-11-06 02:20 . 2010-11-06 02:20 6616576 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 2510336 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 1328128 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
+ 2010-11-06 02:20 . 2010-11-06 02:20 2516480 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
+ 2010-11-06 02:28 . 2010-11-06 02:28 9924096 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll
+ 2010-11-06 02:19 . 2010-11-06 02:19 2295296 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
+ 2010-11-06 02:19 . 2010-11-06 02:19 2128896 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
+ 2010-11-06 02:19 . 2010-11-06 02:19 1657856 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
+ 2010-11-06 02:06 . 2010-11-06 02:06 1451008 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 1712128 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 1093120 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 2332160 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 1620992 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
+ 2010-11-06 02:26 . 2010-11-06 02:26 1966080 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 1888768 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
+ 2010-11-06 01:52 . 2010-11-06 01:52 1249280 c:\windows\ASSEMBLY\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 3182592 c:\windows\ASSEMBLY\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 2048000 c:\windows\ASSEMBLY\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 1630208 c:\windows\ASSEMBLY\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2010-11-05 07:08 . 2010-11-05 07:08 1138688 c:\windows\ASSEMBLY\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 5025792 c:\windows\ASSEMBLY\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-11-06 02:05 . 2010-11-06 02:05 1277952 c:\windows\ASSEMBLY\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2010-11-06 01:37 . 2010-11-06 01:37 5967872 c:\windows\ASSEMBLY\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 5062656 c:\windows\ASSEMBLY\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-11-05 07:09 . 2010-11-05 07:09 2879488 c:\windows\ASSEMBLY\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2010-11-06 01:52 . 2010-11-06 01:52 5279744 c:\windows\ASSEMBLY\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 5242880 c:\windows\ASSEMBLY\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 2933248 c:\windows\ASSEMBLY\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-11-06 01:52 . 2010-11-06 01:52 4210688 c:\windows\ASSEMBLY\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2010-11-06 02:03 . 2010-11-06 02:03 4550656 c:\windows\ASSEMBLY\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2010-08-09 07:18 . 2010-08-09 07:18 1232896 c:\windows\ASSEMBLY\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-11-05 02:30 . 2010-11-05 02:30 1232896 c:\windows\ASSEMBLY\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-11-05 02:30 . 2010-11-05 02:30 1265664 c:\windows\ASSEMBLY\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-08-09 07:18 . 2010-08-09 07:18 1265664 c:\windows\ASSEMBLY\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2004-08-04 11:00 . 2010-08-26 03:36 10841088 c:\windows\SYSTEM32\wmp.dll
+ 2010-08-09 23:50 . 2010-10-07 14:46 35385288 c:\windows\SYSTEM32\MRT.exe
+ 2009-03-08 08:39 . 2010-09-10 05:58 11080192 c:\windows\SYSTEM32\ieframe.dll
+ 2004-08-04 11:00 . 2010-08-26 03:36 10841088 c:\windows\SYSTEM32\DLLCACHE\wmp.dll
+ 2010-09-24 18:08 . 2010-09-24 18:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
+ 2010-05-19 17:08 . 2010-05-19 17:08 11408896 c:\windows\Installer\62df76.msp
+ 2010-03-31 05:23 . 2010-03-31 05:23 15638528 c:\windows\Installer\62df6b.msp
+ 2010-04-12 02:17 . 2010-04-12 02:17 14599680 c:\windows\Installer\62df3d.msp
+ 2010-11-05 02:35 . 2010-11-05 02:35 20303872 c:\windows\Installer\21d5bf.msp
+ 2010-09-24 11:08 . 2010-09-24 11:08 17518080 c:\windows\Installer\21d5b5.msp
+ 2008-12-13 14:21 . 2008-12-13 14:21 10473472 c:\windows\Installer\1c34554.msp
+ 2010-11-05 23:30 . 2009-03-08 08:39 11063808 c:\windows\ie8updates\KB982381-IE8\ieframe.dll
+ 2010-11-05 23:31 . 2010-05-06 10:41 11076096 c:\windows\ie8updates\KB2360131-IE8\ieframe.dll
+ 2010-11-05 07:12 . 2010-11-05 07:12 11072000 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Temp\ZAP18E.tmp\mscorlib.dll
+ 2010-11-06 01:42 . 2010-11-06 01:42 12216320 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\Temp\ZAP1082.tmp\PresentationCore.dll
+ 2010-11-06 02:21 . 2010-11-06 02:21 12430848 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
+ 2010-11-06 02:29 . 2010-11-06 02:29 11800576 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
+ 2010-11-06 02:25 . 2010-11-06 02:25 17403904 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.ServiceModel\75aeb590008d6e166f7be18f935c52d2\System.ServiceModel.ni.dll
+ 2010-11-06 02:20 . 2010-11-06 02:20 10683392 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
+ 2010-11-06 02:16 . 2010-11-06 02:16 14328320 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll
+ 2010-11-06 02:11 . 2010-11-06 02:11 12215808 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
+ 2010-11-06 02:01 . 2010-11-06 02:01 11490816 c:\windows\ASSEMBLY\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll
.
-- Snapshot reset to current date --

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 6th November 2010, 4:09 pm

.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-09-03 328568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2003-10-02 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2003-10-02 118784]
"OSCD_Creator"="c:\dell\PreODM.EXE" [2004-10-31 408576]
"SunJavaUpdateSched"="c:\program files\Java\j2re1.4.2_03\bin\jusched.exe" [2003-11-19 32881]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"Recordpad"="c:\program files\NCH Swift Sound\Recordpad\recordpad.exe" [2010-10-19 913412]
"=="="c:\windows\spoolsv.exe" [BU]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-08-12 2215064]

c:\documents and settings\Mikey\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [2010-9-28 3450608]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="%windir%\XP ARENA.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Starcraft\\StarCraft.exe"=

R0 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [9/27/2010 7:21 PM 691696]
R1 ehdrv;ehdrv;c:\windows\SYSTEM32\DRIVERS\ehdrv.sys [7/29/2010 1:31 PM 115008]
R1 epfwtdir;epfwtdir;c:\windows\SYSTEM32\DRIVERS\epfwtdir.sys [8/3/2010 1:28 PM 95896]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [8/12/2010 2:16 PM 810144]
.
Contents of the 'Scheduled Tasks' folder

2010-10-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

2010-11-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008Core.job
- c:\documents and settings\Mikey\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-10-23 21:15]

2010-11-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008UA.job
- c:\documents and settings\Mikey\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-10-23 21:15]

2010-10-22 c:\windows\Tasks\switchShakeIcon.job
- c:\program files\NCH Swift Sound\Switch\switch.exe [2010-10-19 17:37]

2010-10-25 c:\windows\Tasks\wavepadShakeIcon.job
- c:\program files\NCH Swift Sound\WavePad\wavepad.exe [2010-10-19 17:38]
.
.
------- Supplementary Scan -------
.
uStart Page = [You must be registered and logged in to see this link.]
uInternet Connection Wizard,ShellNext = iexplore
IE: &AIM Search - c:\program files\AIM Toolbar\AIMBar.dll/aimsearch.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
FF - ProfilePath - c:\documents and settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - [You must be registered and logged in to see this link.]
FF - prefs.js: keyword.URL - [You must be registered and logged in to see this link.]
FF - prefs.js: network.proxy.type - 0
FF - component: c:\documents and settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\documents and settings\Jules\Local Settings\Application Data\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJPI142_03.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
FF - user.js: keyword.URL - [You must be registered and logged in to see this link.] files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2010-11-06 11:52
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/ /////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/ MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/ mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/ /5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAADIADwA AAj/AP8JHEiwoMGDCBMqXMiwocJUqfw4XJhqosWLGDP+k0iQmsaPHv1U/HgQIsSEHi+OFJiyoMeX A0UOXHmwJct/EG2SbEhzp8+IPVGWNKnTJ06DRQma5CgwKMKU1FYmNWqQadKpVP+1TBmR49aTSoGK dIpxa8yBL5121Rn1ZketaKNCheuWLlysFslmJQm0actU1KgxVSp371GDK/tq1am3IGCFV/cOFmq4 oEy0dMX6uby4LdKoYO3itSvQaszNHAEXHdnStFanXGEqvWt0cuW8g0FXrCjSdueSOHOORhg04sbf dQ87RvsYc9iaUqm6FirbqM7eEH1vNO4ScPPFcU1S/89882/o1UhLqxbN3DRUswRFDgcOMqvJk9kX jnUsN7Be78NNFhhXxJHlHUqCfedSQqFRRtx8lUXV24CtbTcaao5VVJhzYXlG22EHVlhXdDOFSCGF 3HHY3HVBQRhffSqNpaGCaQUWHFmtGQfVY/1R5GFwNsZn3GQ9+QfagMU1xlZT2j2lUJMNwYRVdjQ1 uJVVSEq05E29zeThgW+FBZhE2KEG1EkD+nGieFVl1qRHGqK1GY+kadQYSGcidud0cOqoH5tBsjTg ZzuC1tma96npnVhnLqUYSjTNCeVHdzr41oZ3AXrWi0vmqKWN8OGEYVtSIumZpG0RteJxqlYqanBm yv8IJmry1VTna9g9eRtieHE2qWU0DUrhTGN92Vaux/kFqnjMuhqcck/R+iqMjJbp1UJbcvhVnHit dau2TBo4rGBzgtYlnEeSmtl9bC54HVy+ocuUfIFGZieV2DWY0Y8T1ZqRcKAGCt6EbKU5KEvfFSZX Yw0GtVmoLvIl0hRTDNYVdkFOBegUKExRXXkCcTyFqDIlpVrAIfkZJL7MnbwSU4vepCDMwsXU4mMY auhfersmmwrFU+jrmGuYDgT0t30CPZJEJ59oq8wjUVkwymmBibDAm3ZkdVVNc+WsRfZqxZHSKU8H sqHV+SGyWbSq+Q/QRm6m7IJhMvmwzMN+lh2pSJb/KKXDu1nt9MCs0RZ2baVRzFhONfFbUMUjq9cU TUcPjdlw1AAto+Nerriwwn+ruVqwRn4XZ4rQfb6edY9RjEJRaZ1L45U/d+yem5qjbmFcIV3LEtC2 v9ZTu2epZma7glUMYMkHIwWgqqqXDjnFCjJ0oVZwe/gevPpKqFjlT6tNMfdlgnVm3i+J70fHL+vG oGfH6ihXxZspb6NwAB4ZOICNi0o/avSbj1mkJLaoBM8v3lkfZ8rmLSnB7UmZGx+oaFO+fPUocx1z Xe+W1iLdRC87D1MfCF9iqur0KVm6YU3vAggnESLuZ0FbDfVwQjV2PW58ugJfjoQ0uIgERnxBk5HS /1Rzn4V172or9FXQXDLB5vnmeWpzG2LU9rUnwTA6EclgvYa1PB9iMHKh0tIDaZisQz3PiBAZolyA eEBYRY1QJIzI/5hSsSXxT1B5E00Up0TFuuFGbV+J4AzTIyy4pFFxLhORFlmzm+hNziWaQ9eAOCZC KlGpPFjLDg63U7/qiYqEsxHUXfb4LbuVxTIiu5FWMihBcnEpYRQCniw7xkpWbi9OT2nUF7m1GKBx jE6v4WSePEUxf3nkaBXyZPoKiT1ACuw6S4yYYyC3FV8ukUtkKuZcfmdN1/lyfb4sIXIyxCYg1jFI Imxi1lSEnzoiDCfUy1cp13kaj13qmZHTyDG1yf/NirURJt/sSEpENhZJ0UqOm1TRjYhXP5HRsp3U m2B5qjcjOqoNM0DkTeB8xx+k9JFDmMTaRSQ0yLdR74pvqV1JC4KC9W3kYWm6ETIhY5P+CNKcxQSi 1mxComehhXrK02QI3ymqFjVFoHN6GhzzMhINbsR12bymIUXmMVeWh6CH2siJsOqkj/30pDB0qOIK NqbuaGmU7lQf/WYkUrm1SSmArIvCQOqQrUWxoRVLXD6bojlRli97lrkhChYKGebcdHJh1aZNV8dY H0LyMpljWrA8ORNo5SavSKEfpZySQZNiVpDVzGCVyPUw8BnNIMj0z6NqYs7X4SebKHjdt8aUwt3/ 2AWGxJIqDQvFs5dCy1uX+5kzwTaV6fXVaPE85AxRtTN4JvSogmViCiXqWX4qRWnzPIp4TuQfKnJF cXQVFMM48zYpcqh+v2KPW0oLvMu2lCXgXOvzzhdWGaGmiWM0XJoAJci10YUaWgxVZf2UKf9oUz5g xaW76oXRrsDTbWwT7q8IGB+3JRbCvcyrYES7ukcSBG4wVVQRRUthvUkxeeA1GhWFZp7eojdoL4Pp Ypt3NfqQbE7s4o1bu8pai0VSNIrbDC1rihnGva1jp2Grah6Ila2YimSBMa49D8OijxUOezGMWsd2 BrszbjdT9r3rbT96EfLqdcrxiWd+H1IRai7t/5MAReTnRIq1YeHUYgrmDd3WJbzFyJGybF5UfuAq X7Fh1lKnPYg2l7bGYpL4Q4abSSoPlbKBbrlx+eMcCbupYJkMac8pe5BmsWJfsSDMtnosZleUtxd3 9oivvqxiyCQoSmKFNbwg87M4YR3FkqSGQbAh1R7vl2NTQ+rK8G2bbmGE40fuk2zzJCFjeFrTHdet w5DJCUJFZ6PLnJVr0AERevFVLpWoE2EYsg54ygjdjDZZpHoSKLDilRw/Svd+6pIcXJ2nutOtFY8V PmhRRCfriXTrLRKBqpNpDGmTFY6Z24lLckYjG+3x7odk4qCsVichg06sbdJySGrO4y7JlKSYuf+m FulI49h6n/LV5MyT8SZU6nSru0jSBFso3RLZbPWW4j71Cybvaz1c47JaRTyjBa+9k6S4J9+7ipfo euZnrZHGqhiZUKJ+NmjDKsqmpZM4oieCI85Jp26xwTWPIea3GtdFbq0BuaMYdzCROoqAOhuUl5N+ uZIjZFLYPju2Cl6WQPmwgjguNoroxEthjUvehHS5smAucmzBmy+S51R2/8vdzuPbSJ733p4+lCAz Nbd/1IF60UtsdZ6Y/ZR1bUhvDjp7ouHl8gWy2X52lHmvUqaQvjd4FQG9r75b5uMgt7mApQuuhduK K7W/FIvVzp6/6PeZUQrsz53zejzFqqdKtZ6ONOHNsgcVFkZUxwjxI2RUE/bd/ct3f2kk1XBVwqb5 kCYO9SOErfR/JvxjV3jQxStHJ0DF53/pdzh+12cph3ZzAXSk5kloclv5h2ths029VXSRB3sIuBwd iBi1VjR7dhuE94EmWBoIKBv6YmQBmBU5d4IwKDR7wVMZknkdWIIwSHXo0TNelS0v2HQ52BABAQA7 == = c:\windows\spoolsv.exe
egui = "c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/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=="="c:\\WINDOWS\\spoolsv.exe"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3584)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-11-06 11:58:15
ComboFix-quarantined-files.txt 2010-11-06 15:58
ComboFix2.txt 2010-11-05 02:28

Pre-Run: 11,493,343,232 bytes free
Post-Run: 11,564,957,696 bytes free

- - End Of File - - 990AC07C1D284C95A74670226855F0CE

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Sneakyone on 6th November 2010, 11:27 pm

Hi,

Re-running ComboFix to remove infections:

  1. Close any open browsers.
  2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  3. Open notepad and copy/paste the text in the quotebox below into it:

    File::
    c:\windows\spoolsv.exe

    Registry::
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "=="=-
    "MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/
    /////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm
    AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/
    MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm
    ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/
    mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm
    zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/
    /5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ
    AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA
    M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ
    ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A
    mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z
    zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAADIADwA
    AAj/AP8JHEiwoMGDCBMqXMiwocJUqfw4XJhqosWLGDP+k0iQmsaPHv1U/HgQIsSEHi+OFJiyoMeX
    A0UOXHmwJct/EG2SbEhzp8+IPVGWNKnTJ06DRQma5CgwKMKU1FYmNWqQadKpVP+1TBmR49aTSoGK
    dIpxa8yBL5121Rn1ZketaKNCheuWLlysFslmJQm0actU1KgxVSp371GDK/tq1am3IGCFV/cOFmq4
    oEy0dMX6uby4LdKoYO3itSvQaszNHAEXHdnStFanXGEqvWt0cuW8g0FXrCjSdueSOHOORhg04sbf
    dQ87RvsYc9iaUqm6FirbqM7eEH1vNO4ScPPFcU1S/89882/o1UhLqxbN3DRUswRFDgcOMqvJk9kX
    jnUsN7Be78NNFhhXxJHlHUqCfedSQqFRRtx8lUXV24CtbTcaao5VVJhzYXlG22EHVlhXdDOFSCGF
    3HHY3HVBQRhffSqNpaGCaQUWHFmtGQfVY/1R5GFwNsZn3GQ9+QfagMU1xlZT2j2lUJMNwYRVdjQ1
    uJVVSEq05E29zeThgW+FBZhE2KEG1EkD+nGieFVl1qRHGqK1GY+kadQYSGcidud0cOqoH5tBsjTg
    ZzuC1tma96npnVhnLqUYSjTNCeVHdzr41oZ3AXrWi0vmqKWN8OGEYVtSIumZpG0RteJxqlYqanBm
    yv8IJmry1VTna9g9eRtieHE2qWU0DUrhTGN92Vaux/kFqnjMuhqcck/R+iqMjJbp1UJbcvhVnHit
    dau2TBo4rGBzgtYlnEeSmtl9bC54HVy+ocuUfIFGZieV2DWY0Y8T1ZqRcKAGCt6EbKU5KEvfFSZX
    Yw0GtVmoLvIl0hRTDNYVdkFOBegUKExRXXkCcTyFqDIlpVrAIfkZJL7MnbwSU4vepCDMwsXU4mMY
    auhfersmmwrFU+jrmGuYDgT0t30CPZJEJ59oq8wjUVkwymmBibDAm3ZkdVVNc+WsRfZqxZHSKU8H
    sqHV+SGyWbSq+Q/QRm6m7IJhMvmwzMN+lh2pSJb/KKXDu1nt9MCs0RZ2baVRzFhONfFbUMUjq9cU
    TUcPjdlw1AAto+Nerriwwn+ruVqwRn4XZ4rQfb6edY9RjEJRaZ1L45U/d+yem5qjbmFcIV3LEtC2
    v9ZTu2epZma7glUMYMkHIwWgqqqXDjnFCjJ0oVZwe/gevPpKqFjlT6tNMfdlgnVm3i+J70fHL+vG
    oGfH6ihXxZspb6NwAB4ZOICNi0o/avSbj1mkJLaoBM8v3lkfZ8rmLSnB7UmZGx+oaFO+fPUocx1z
    Xe+W1iLdRC87D1MfCF9iqur0KVm6YU3vAggnESLuZ0FbDfVwQjV2PW58ugJfjoQ0uIgERnxBk5HS
    /1Rzn4V172or9FXQXDLB5vnmeWpzG2LU9rUnwTA6EclgvYa1PB9iMHKh0tIDaZisQz3PiBAZolyA
    eEBYRY1QJIzI/5hSsSXxT1B5E00Up0TFuuFGbV+J4AzTIyy4pFFxLhORFlmzm+hNziWaQ9eAOCZC
    KlGpPFjLDg63U7/qiYqEsxHUXfb4LbuVxTIiu5FWMihBcnEpYRQCniw7xkpWbi9OT2nUF7m1GKBx
    jE6v4WSePEUxf3nkaBXyZPoKiT1ACuw6S4yYYyC3FV8ukUtkKuZcfmdN1/lyfb4sIXIyxCYg1jFI
    Imxi1lSEnzoiDCfUy1cp13kaj13qmZHTyDG1yf/NirURJt/sSEpENhZJ0UqOm1TRjYhXP5HRsp3U
    m2B5qjcjOqoNM0DkTeB8xx+k9JFDmMTaRSQ0yLdR74pvqV1JC4KC9W3kYWm6ETIhY5P+CNKcxQSi
    1mxComehhXrK02QI3ymqFjVFoHN6GhzzMhINbsR12bymIUXmMVeWh6CH2siJsOqkj/30pDB0qOIK
    NqbuaGmU7lQf/WYkUrm1SSmArIvCQOqQrUWxoRVLXD6bojlRli97lrkhChYKGebcdHJh1aZNV8dY
    H0LyMpljWrA8ORNo5SavSKEfpZySQZNiVpDVzGCVyPUw8BnNIMj0z6NqYs7X4SebKHjdt8aUwt3/
    2AWGxJIqDQvFs5dCy1uX+5kzwTaV6fXVaPE85AxRtTN4JvSogmViCiXqWX4qRWnzPIp4TuQfKnJF
    cXQVFMM48zYpcqh+v2KPW0oLvMu2lCXgXOvzzhdWGaGmiWM0XJoAJci10YUaWgxVZf2UKf9oUz5g
    xaW76oXRrsDTbWwT7q8IGB+3JRbCvcyrYES7ukcSBG4wVVQRRUthvUkxeeA1GhWFZp7eojdoL4Pp
    Ypt3NfqQbE7s4o1bu8pai0VSNIrbDC1rihnGva1jp2Grah6Ila2YimSBMa49D8OijxUOezGMWsd2
    BrszbjdT9r3rbT96EfLqdcrxiWd+H1IRai7t/5MAReTnRIq1YeHUYgrmDd3WJbzFyJGybF5UfuAq
    X7Fh1lKnPYg2l7bGYpL4Q4abSSoPlbKBbrlx+eMcCbupYJkMac8pe5BmsWJfsSDMtnosZleUtxd3
    9oivvqxiyCQoSmKFNbwg87M4YR3FkqSGQbAh1R7vl2NTQ+rK8G2bbmGE40fuk2zzJCFjeFrTHdet
    w5DJCUJFZ6PLnJVr0AERevFVLpWoE2EYsg54ygjdjDZZpHoSKLDilRw/Svd+6pIcXJ2nutOtFY8V
    PmhRRCfriXTrLRKBqpNpDGmTFY6Z24lLckYjG+3x7odk4qCsVichg06sbdJySGrO4y7JlKSYuf+m
    FulI49h6n/LV5MyT8SZU6nSru0jSBFso3RLZbPWW4j71Cybvaz1c47JaRTyjBa+9k6S4J9+7ipfo
    euZnrZHGqhiZUKJ+NmjDKsqmpZM4oieCI85Jp26xwTWPIea3GtdFbq0BuaMYdzCROoqAOhuUl5N+
    uZIjZFLYPju2Cl6WQPmwgjguNoroxEthjUvehHS5smAucmzBmy+S51R2/8vdzuPbSJ733p4+lCAz
    Nbd/1IF60UtsdZ6Y/ZR1bUhvDjp7ouHl8gWy2X52lHmvUqaQvjd4FQG9r75b5uMgt7mApQuuhduK
    K7W/FIvVzp6/6PeZUQrsz53zejzFqqdKtZ6ONOHNsgcVFkZUxwjxI2RUE/bd/ct3f2kk1XBVwqb5
    kCYO9SOErfR/JvxjV3jQxStHJ0DF53/pdzh+12cph3ZzAXSk5kloclv5h2ths029VXSRB3sIuBwd
    iBi1VjR7dhuE94EmWBoIKBv6YmQBmBU5d4IwKDR7wVMZknkdWIIwSHXo0TNelS0v2HQ52BABAQA7
    =="=-
  4. Save this as CFScript.txt, in the same location as ComboFix.exe



  5. Referring to the picture above, drag CFScript into ComboFix.exe
  6. When finished, it shall produce a log for you at C:\ComboFix.txt
  7. Please post the contents of the log in your next reply.


I'm livin' life in the fast lane.

Sneakyone
Master
Master

Posts Posts : 2707
Joined Joined : 2010-01-10
Gender Gender : Male
OS OS : Windows 7 Ultimate 64-bit
Protection Protection : Avast, Comodo Firewall, and Malwarebytes' Anti-Malware
Points Points : 56094
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 7th November 2010, 7:13 pm

ComboFix 10-11-07.05 - Jules 11/07/2010 13:55:31.4.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.254.114 [GMT -5:00]
Running from: c:\documents and settings\Jules\My Documents\Downloads\ComboFix.exe
Command switches used :: c:\documents and settings\Jules\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 4.2 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

FILE ::
"c:\windows\spoolsv.exe"
.

((((((((((((((((((((((((( Files Created from 2010-10-07 to 2010-11-07 )))))))))))))))))))))))))))))))
.

2010-11-06 01:12 . 2010-11-06 01:12 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2010-11-06 00:02 . 2010-11-06 01:12 -------- d-----w- c:\program files\ESET
2010-11-05 23:48 . 2010-11-05 23:48 -------- d-sh--w- c:\documents and settings\Jules\PrivacIE
2010-11-05 23:39 . 2010-11-05 23:39 -------- d-sh--w- c:\documents and settings\Jules\IETldCache
2010-11-05 23:24 . 2010-11-05 23:29 -------- dc-h--w- c:\windows\ie8
2010-11-05 23:17 . 2010-08-26 11:08 13312 ------w- c:\windows\system32\dllcache\iecompat.dll
2010-11-05 23:17 . 2010-09-10 05:58 602112 ------w- c:\windows\system32\dllcache\msfeeds.dll
2010-11-05 23:17 . 2010-09-10 05:58 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-11-05 23:17 . 2010-09-10 05:58 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2010-11-05 23:17 . 2010-09-10 05:58 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll
2010-11-05 23:17 . 2010-09-10 05:58 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll
2010-11-05 23:17 . 2010-09-10 05:58 1986560 ------w- c:\windows\system32\dllcache\iertutil.dll
2010-11-05 23:17 . 2010-09-10 05:58 11080192 ------w- c:\windows\system32\dllcache\ieframe.dll
2010-11-05 16:49 . 2010-11-05 16:49 -------- d-----w- c:\documents and settings\Jules\Application Data\Malwarebytes
2010-11-05 07:08 . 2010-11-05 07:08 -------- d-----w- c:\windows\system32\XPSViewer
2010-11-05 07:08 . 2010-11-05 07:08 -------- d-----w- c:\program files\MSBuild
2010-11-05 07:07 . 2010-11-05 07:07 -------- d-----w- c:\program files\Reference Assemblies
2010-11-05 07:07 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-11-05 07:07 . 2008-07-06 12:06 89088 ------w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-11-05 07:07 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-11-05 07:07 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-11-05 07:07 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-11-05 07:07 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-11-05 07:07 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\dllcache\xpssvcs.dll
2010-11-05 07:07 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-11-05 07:07 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-11-05 02:01 . 2010-08-23 16:12 617472 ------w- c:\windows\system32\dllcache\comctl32.dll
2010-11-05 01:58 . 2010-09-18 06:53 953856 ------w- c:\windows\system32\dllcache\mfc40u.dll
2010-11-05 01:58 . 2010-09-18 06:53 974848 ------w- c:\windows\system32\dllcache\mfc42.dll
2010-11-05 01:44 . 2010-10-23 17:55 553984 ----a-r- C:\OTLPE.exe
2010-11-05 01:43 . 2010-11-05 01:43 -------- d-----w- C:\_OTL
2010-10-27 21:47 . 2009-08-06 23:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-10-27 21:47 . 2009-08-06 23:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-10-27 19:31 . 2010-10-27 19:31 -------- d-----w- c:\documents and settings\Mikey\Application Data\Malwarebytes
2010-10-27 19:31 . 2010-04-29 19:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-27 19:31 . 2010-10-27 19:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-10-27 19:31 . 2010-04-29 19:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-27 18:50 . 2010-10-27 18:50 -------- d-----w- c:\documents and settings\Jules\Application Data\Recordpad
2010-10-27 18:50 . 2010-10-27 18:50 -------- d-----w- c:\documents and settings\Jules\Application Data\NCH Swift Sound
2010-10-27 18:08 . 2010-11-05 02:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Update
2010-10-27 17:06 . 2010-10-27 18:30 -------- d-----w- c:\documents and settings\Mikey\Application Data\Gygan
2010-10-27 17:06 . 2010-10-27 17:06 -------- d-----w- c:\program files\Xenocode
2010-10-27 17:06 . 2010-10-27 17:06 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Xenocode
2010-10-27 03:31 . 2010-10-27 03:31 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-10-24 23:42 . 2010-10-24 23:42 -------- d-----w- c:\program files\Veetle
2010-10-24 04:38 . 2010-10-24 04:38 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Unity
2010-10-23 21:15 . 2010-10-23 21:16 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Temp
2010-10-23 21:15 . 2010-10-23 21:18 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Google
2010-10-23 21:08 . 2010-10-23 21:08 -------- d-s---w- c:\documents and settings\Mikey\UserData
2010-10-22 22:32 . 2010-10-22 22:32 -------- d-----w- c:\documents and settings\All Users\Application Data\GoldWave
2010-10-22 22:25 . 2010-10-22 22:25 -------- d-----w- c:\program files\GoldWave
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin7.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin6.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin5.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin4.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin3.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin2.dll
2010-10-22 22:02 . 2010-10-22 22:02 143360 ----a-w- c:\program files\Mozilla Firefox\plugins\npqtplugin.dll
2010-10-22 22:01 . 2010-10-22 22:01 -------- d-----w- c:\program files\Common Files\Apple
2010-10-22 22:01 . 2010-10-22 22:02 -------- d-----w- c:\program files\QuickTime
2010-10-22 22:01 . 2010-10-22 22:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Apple
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\program files\Apple Software Update
2010-10-22 22:00 . 2010-10-22 22:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\Apple Computer
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\Common Files\DigiDesign
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\Steinberg
2010-10-22 21:59 . 2010-10-22 21:59 -------- d-----w- c:\program files\IK Multimedia
2010-10-22 21:58 . 2010-10-22 21:58 -------- d-----w- c:\documents and settings\Mikey\Application Data\InstallShield
2010-10-21 03:58 . 2010-10-21 03:58 -------- d-----w- c:\documents and settings\Mikey\Application Data\Recordpad
2010-10-21 03:33 . 2010-02-16 17:04 7034880 ----a-w- c:\windows\XP ARENA.EXE
2010-10-20 23:35 . 2010-10-22 19:53 -------- d-----w- c:\program files\War2Combat
2010-10-19 17:38 . 2010-10-19 17:38 -------- d-----w- c:\program files\NCH Software
2010-10-19 17:38 . 2010-10-22 21:42 -------- d-----w- c:\documents and settings\All Users\Application Data\NCH Swift Sound
2010-10-19 17:37 . 2010-10-19 17:38 -------- d-----w- c:\program files\NCH Swift Sound
2010-10-19 17:37 . 2010-10-22 21:42 -------- d-----w- c:\documents and settings\Mikey\Application Data\NCH Swift Sound
2010-10-19 06:49 . 2010-10-19 06:49 -------- d-----w- c:\documents and settings\Mikey\Application Data\IObit
2010-10-19 06:49 . 2010-10-19 06:49 -------- d-----w- c:\program files\IObit
2010-10-19 06:14 . 2010-10-19 06:15 -------- d-----w- c:\documents and settings\Mikey\Local Settings\Application Data\FriendBlasterPro
2010-10-19 06:11 . 2005-10-11 17:25 241664 ----a-w- c:\windows\system32\MyFramePanel.ocx
2010-10-19 06:11 . 2004-03-09 00:30 609824 ----a-w- c:\windows\system32\ComCtl32.ocx
2010-10-19 06:11 . 2005-07-15 16:49 245760 ----a-w- c:\windows\system32\aUpdateNow.ocx
2010-10-19 06:11 . 2004-03-08 22:00 132880 ----a-w- c:\windows\system32\msinet.ocx
2010-10-19 06:11 . 2000-05-22 04:00 140488 ----a-w- c:\windows\system32\COMDLG32.OCX
2010-10-19 06:11 . 2004-03-08 22:00 1081616 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2010-10-19 06:11 . 2000-07-15 04:00 101888 ----a-w- c:\windows\system32\VB6STKIT.DLL
2010-10-19 06:11 . 2010-10-19 06:18 -------- d-----w- c:\program files\FriendBlasterPro
2010-10-17 18:42 . 2010-10-17 18:42 -------- d-sh--w- c:\windows\ftpcache
2010-10-17 15:28 . 2010-10-28 11:28 -------- d-----w- c:\program files\Common Files\Sandlot Shared
2010-10-17 15:28 . 2010-10-17 15:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Sandlot Games
2010-10-15 10:12 . 2010-10-15 10:12 1409 ----a-w- c:\windows\QTFont.for
2010-10-14 09:18 . 2010-10-14 09:18 -------- d-----w- c:\program files\LucasArts
2010-10-14 00:23 . 2010-10-14 00:23 -------- d-----w- c:\program files\Infogrames
2010-10-14 00:13 . 2010-10-14 00:13 -------- d-----w- c:\program files\Infogrames Interactive
2010-10-14 00:08 . 2010-10-14 00:13 -------- d-----w- c:\program files\GameHouse Games Collection
2010-10-13 04:48 . 2010-10-13 04:54 -------- d-----w- c:\program files\Postal2
2010-10-13 04:38 . 2010-10-13 04:38 -------- d-----w- c:\program files\Core Design
2010-10-11 00:31 . 2010-10-11 00:31 -------- d-----w- c:\program files\Bethesda Softworks
2010-10-11 00:28 . 2001-09-05 10:18 225280 ------w- c:\program files\Common Files\InstallShield\IScript\iscript.dll
2010-10-11 00:28 . 2001-09-05 10:14 176128 ------w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll
2010-10-11 00:28 . 2001-09-05 10:13 32768 ------w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll
2010-10-11 00:28 . 2001-09-05 10:18 77824 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll
2010-10-11 00:27 . 2001-09-05 10:24 610436 ----a-w- c:\program files\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-28 22:08 . 2010-09-28 22:08 74 ----a-w- C:\start.vbs
2010-09-27 23:21 . 2010-09-27 23:21 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-09-18 16:23 . 2004-08-04 11:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2004-08-04 11:00 974848 ----a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2004-08-04 11:00 954368 ----a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2004-08-04 11:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:58 . 2004-08-04 11:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-09-10 05:58 . 2004-08-04 11:00 43520 ------w- c:\windows\system32\licmgr10.dll
2010-09-10 05:58 . 2004-08-04 11:00 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:51 . 2004-08-04 11:00 285824 ----a-w- c:\windows\system32\atmfd.dll
2010-08-31 13:42 . 2004-08-04 11:00 1852800 ----a-w- c:\windows\system32\win32k.sys
2010-08-27 08:02 . 2004-08-04 11:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:57 . 2004-08-04 11:00 99840 ----a-w- c:\windows\system32\srvsvc.dll
2010-08-26 13:39 . 2004-08-04 11:00 357248 ----a-w- c:\windows\system32\drivers\srv.sys
2010-08-26 12:52 . 2010-08-08 07:19 5120 ----a-w- c:\windows\system32\xpsp4res.dll
2010-08-23 16:12 . 2004-08-04 11:00 617472 ----a-w- c:\windows\system32\comctl32.dll
2010-08-17 13:17 . 2004-08-04 11:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-08-16 08:45 . 2004-08-04 11:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll
2010-08-12 18:29 . 2010-08-12 18:29 2772992 ----a-w- c:\windows\system32\GPhotos.scr
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
[-] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\SYSTEM32\ReinstallBackups\0003\DriverFiles\i386\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\asyncmac.sys
[-] 2004-08-04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys

[-] 2004-08-04 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\BEEP.SYS

[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\kbdclass.sys
[-] 2004-08-04 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ndis.sys
[-] 2004-08-04 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ntfs.sys
[-] 2004-08-04 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys

[-] 2004-08-04 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\NULL.SYS

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DLLCACHE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DRIVERS\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2005-03-14 . 6129E70F3D2F1E60860C930EBEAF92C2 . 359936 . . [5.1.2600.2631] . . c:\windows\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[-] 2005-03-14 . 0E66B538096A6529D1AC66E78EB0D5C8 . 359808 . . [5.1.2600.2631] . . c:\windows\$NtUninstallKB951748_0$\tcpip.sys
[-] 2004-08-04 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB893066$\tcpip.sys

[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\browser.dll
[-] 2004-08-04 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\lsass.exe
[-] 2004-08-04 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\netman.dll
[-] 2004-08-04 . DAB9E6C7105D2EF49876FE92C524F565 . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll

[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SYSTEM32\qmgr.dll
[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SYSTEM32\bits\qmgr.dll
[-] 2004-08-04 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\rpcss.dll
[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\DLLCACHE\rpcss.dll
[-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2009-02-09 . 24B5D53B9ACCC1E2EDCF0A878D6659D4 . 401408 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2005-01-14 . 419899803CA479B73B02390318C787C0 . 395776 . . [5.1.2600.2595] . . c:\windows\$NtUninstallKB956572_0$\rpcss.dll
[-] 2005-01-14 . 94456045BEB4545B5EBE1DCC85951AFA . 395776 . . [5.1.2600.2595] . . c:\windows\$hf_mig$\KB873333\SP2QFE\rpcss.dll
[-] 2004-08-04 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB873333$\rpcss.dll

[-] 2009-02-06 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\SYSTEM32\DLLCACHE\services.exe
[-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-06 . 4712531AB7A01B7EE059853CA17D39BD . 110592 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-04 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956572_0$\services.exe

[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\winlogon.exe
[-] 2004-08-04 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\cryptsvc.dll
[-] 2004-08-04 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\SYSTEM32\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\SYSTEM32\DLLCACHE\es.dll
[-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2004-08-04 11:00 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB950974_0$\es.dll

[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\imm32.dll
[-] 2004-08-04 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3GDR\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\SYSTEM32\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\SYSTEM32\DLLCACHE\kernel32.dll
[-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2009-03-21 . 80202858D245FF07DAA1739C57A3E19B . 989184 . . [5.1.2600.3541] . . c:\windows\$hf_mig$\KB959426\SP2QFE\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2004-08-04 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB959426_0$\kernel32.dll

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 7th November 2010, 7:13 pm


[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\linkinfo.dll
[-] 2004-08-04 . C2BBD044C741EA4292016C36F718D2E4 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\lpk.dll
[-] 2004-08-04 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2008-04-14 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\SYSTEM32\msvcrt.dll
[-] 2004-08-04 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
[-] 2004-08-04 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\MSVCRT.DLL
[-] 2004-08-04 . 98EC447E00229AFD88D5161A25D065DA . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\MSVCRT.DLL

[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\mswsock.dll
[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\SYSTEM32\DLLCACHE\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-04 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748_0$\mswsock.dll

[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\netlogon.dll
[-] 2004-08-04 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\Driver Cache\I386\ntoskrnl.exe
[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\ntoskrnl.exe
[-] 2010-04-28 . 472059774023F80EB7227EAF9A7ACDA1 . 2189952 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\DLLCACHE\ntoskrnl.exe
[-] 2010-04-27 . A2ABBEC40CDB57454645D06B7EBD22F5 . 2190080 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntoskrnl.exe
[-] 2010-02-17 . D41C3CBAD0E1C0728D1CDFD541F60CFA . 2189952 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[-] 2010-02-16 . 97E2BF68857818A4D142B872404DC41B . 2186880 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntoskrnl.exe
[-] 2010-02-16 . EBB75B113E74E90074382347B74D652B . 2181376 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2010-02-16 . E1F653A542449D54FA2D27463D99B6B6 . 2190080 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-02-07 . EFE8EACE83EAAD5849A7A548FB75B584 . 2189184 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-06 . FACEBB0CA3154F77009CDFEE78A00BBB . 2180480 . . [5.1.2600.3520] . . c:\windows\$NtUninstallKB979683_0$\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe
[-] 2009-02-06 . 7A95B10A73737EBF24139AAA63F5212B . 2189056 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-02-06 . 6A936E9D7BADAF3CAAEED1E1966EC1B0 . 2186112 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-13 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2005-03-02 . 28187802B7C368C0D3AEF7D4C382AABB . 2179456 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2005-03-02 . 4D4CF2C14550A4B7718E94A6E581856E . 2179328 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB956572_0$\ntoskrnl.exe
[-] 2004-08-04 . CE218BC7088681FAA06633E218596CA7 . 2180992 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntoskrnl.exe

[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\SYSTEM32\powrprof.dll
[-] 2004-08-04 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\scecli.dll
[-] 2004-08-04 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\sfc.dll
[-] 2004-08-04 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\svchost.exe
[-] 2004-08-04 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\tapisrv.dll
[-] 2004-08-04 . EB4A4187D74A8EFDCBEA3EA2CB1BDFBD . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\user32.dll
[-] 2005-03-02 . 1800F293BCCC8EDE8A70E12B88D80036 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . DE2DB164BBB35DB061AF0997E4499054 . 577024 . . [5.1.2600.2622] . . c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2004-08-04 . C72661F8552ACE7C5C85E16A3CF505C4 . 577024 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\user32.dll

[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\userinit.exe
[-] 2004-08-04 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ws2_32.dll
[-] 2004-08-04 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ws2help.dll
[-] 2004-08-04 . 9BEACB911CA61E5881102188AB7FB431 . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2004-08-04 . A0732187050030AE399B241436565E64 . 1032192 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe

[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\srsvc.dll
[-] 2004-08-04 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\wscntfy.exe
[-] 2004-08-04 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\xmlprov.dll
[-] 2004-08-04 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\eventlog.dll
[-] 2004-08-04 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\sfcfiles.dll
[-] 2004-08-04 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ctfmon.exe
[-] 2004-08-04 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512] . . c:\windows\SYSTEM32\shsvcs.dll
[-] 2004-08-04 . E7518DC542D3EBDCB80EDD98462C7821 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll

[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\regsvc.dll
[-] 2004-08-04 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\schedsvc.dll
[-] 2004-08-04 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\ssdpsrv.dll
[-] 2004-08-04 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\termsrv.dll
[-] 2004-08-04 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2004-08-04 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\SYSTEM32\DRIVERS\ACPIEC.SYS

[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SYSTEM32\DLLCACHE\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SYSTEM32\DRIVERS\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2004-08-04 04:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\agp440.sys
[-] 2004-08-04 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\agp440.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\DRIVERS\ip6fw.sys
[-] 2004-08-04 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\msgsvc.dll
[-] 2004-08-04 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2009-01-31 00:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\SYSTEM32\mspmsnsv.dll
[-] 2009-01-31 00:33 . 051B1BDECD6DEE18C771B5D5EC7F044D . 27136 . . [11.0.5721.5262] . . c:\windows\SYSTEM32\DLLCACHE\mspmsnsv.dll
[-] 2004-09-15 18:27 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-09-15 18:27 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[-] 2004-08-04 11:00 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll

[-] 2010-04-28 . 756362706DE8BC92F11E197C98A73844 . 2066944 . . [5.1.2600.5973] . . c:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\Driver Cache\I386\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\ntkrnlpa.exe
[-] 2010-04-27 . DC57ABED7BDE1487E658968B4423BED7 . 2066816 . . [5.1.2600.5973] . . c:\windows\SYSTEM32\DLLCACHE\ntkrnlpa.exe
[-] 2010-02-17 . 1811AFC2FADB60B88947E3D08E250860 . 2063744 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntkrnlpa.exe
[-] 2010-02-16 . A046C627EC20456E2959B7BD628E1FD0 . 2066816 . . [5.1.2600.5938] . . c:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[-] 2010-02-16 . 1EE6B94ACA7BE115A1813BBCA65099A8 . 2058368 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2010-02-16 . DED8B5A89B085284634502E9D75AC78C . 2066944 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-02-07 . 5BA7F2141BC6DB06100D0E5A732C617A . 2066048 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe
[-] 2009-02-07 . 5BA7F2141BC6DB06100D0E5A732C617A . 2066048 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-02-06 . 3006410E24772CC6953F0B5C01BEB35F . 2057728 . . [5.1.2600.3520] . . c:\windows\$NtUninstallKB979683_0$\ntkrnlpa.exe
[-] 2009-02-06 . 607352B9CB3D708C67F6039097801B5A . 2066176 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2009-02-06 . 9D832AF3FD1917DB0E1E8B2F000A2E3A . 2062976 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-13 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2005-03-02 . D8ABA3EAB509627E707A3B14F00FBB6B . 2056832 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2005-03-02 . 81013F36B21C7F72CF784CC6731E0002 . 2056832 . . [5.1.2600.2622] . . c:\windows\$NtUninstallKB956572_0$\ntkrnlpa.exe
[-] 2004-08-04 . 947FB1D86D14AFCFFDB54BF837EC25D0 . 2056832 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe

[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\SYSTEM32\ntmssvc.dll
[-] 2004-08-04 11:00 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\upnphost.dll
[-] 2004-08-04 . 0546477BDE979E33294FE97F6B3DE84A . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll

[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\SYSTEM32\dsound.dll
[-] 2004-08-04 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll

[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512] . . c:\windows\SYSTEM32\d3d9.dll
[-] 2004-08-04 . D67BDBBDA86CC9AEEBBAF3217C1717D8 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512] . . c:\windows\SYSTEM32\ddraw.dll
[-] 2004-08-04 . 7ED462F353B3D915A418A689FA881F96 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll

[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 00:12 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\olepro32.dll
[-] 2004-08-04 11:00 . B48D3193DD1474DCBCC32BF4779AC698 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\perfctrs.dll
[-] 2004-08-04 . 96492C721C6EA517E2BFD5381FEF55E3 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll

[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
[-] 2008-04-14 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512] . . c:\windows\SYSTEM32\version.dll
[-] 2004-08-04 . D38408967BE738D0C1B47005BCE8CEEB . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-09-03 328568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2003-10-02 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2003-10-02 118784]
"OSCD_Creator"="c:\dell\PreODM.EXE" [2004-10-31 408576]
"SunJavaUpdateSched"="c:\program files\Java\j2re1.4.2_03\bin\jusched.exe" [2003-11-19 32881]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"Recordpad"="c:\program files\NCH Swift Sound\Recordpad\recordpad.exe" [2010-10-19 913412]
"=="="c:\windows\spoolsv.exe" [BU]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-08-12 2215064]

c:\documents and settings\Mikey\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [2010-9-28 3450608]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="%windir%\XP ARENA.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Starcraft\\StarCraft.exe"=

R0 sptd;sptd;c:\windows\SYSTEM32\DRIVERS\sptd.sys [9/27/2010 6:21 PM 691696]
R1 ehdrv;ehdrv;c:\windows\SYSTEM32\DRIVERS\ehdrv.sys [7/29/2010 12:31 PM 115008]
R1 epfwtdir;epfwtdir;c:\windows\SYSTEM32\DRIVERS\epfwtdir.sys [8/3/2010 12:28 PM 95896]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [8/12/2010 1:16 PM 810144]
.
Contents of the 'Scheduled Tasks' folder

2010-10-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 16:34]

2010-11-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008Core.job
- c:\documents and settings\Mikey\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-10-23 21:15]

2010-11-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2069859330-2289683646-104145182-1008UA.job
- c:\documents and settings\Mikey\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-10-23 21:15]

2010-10-22 c:\windows\Tasks\switchShakeIcon.job
- c:\program files\NCH Swift Sound\Switch\switch.exe [2010-10-19 17:37]

2010-10-25 c:\windows\Tasks\wavepadShakeIcon.job
- c:\program files\NCH Swift Sound\WavePad\wavepad.exe [2010-10-19 17:38]
.
.
------- Supplementary Scan -------
.
uStart Page = [You must be registered and logged in to see this link.]
uInternet Connection Wizard,ShellNext = iexplore
IE: &AIM Search - c:\program files\AIM Toolbar\AIMBar.dll/aimsearch.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
FF - ProfilePath - c:\documents and settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - [You must be registered and logged in to see this link.]
FF - prefs.js: keyword.URL - [You must be registered and logged in to see this link.]
FF - prefs.js: network.proxy.type - 0
FF - component: c:\documents and settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\Jules\Application Data\Mozilla\Firefox\Profiles\06yof9ee.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\documents and settings\Jules\Local Settings\Application Data\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Java\j2re1.4.2_03\bin\NPJPI142_03.dll
FF - plugin: c:\program files\Veetle\Player\npvlc.dll
FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
FF - user.js: keyword.URL - [You must be registered and logged in to see this link.] files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2010-11-07 14:05
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/ /////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/ MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/ mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/ /5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAADIADwA AAj/AP8JHEiwoMGDCBMqXMiwocJUqfw4XJhqosWLGDP+k0iQmsaPHv1U/HgQIsSEHi+OFJiyoMeX A0UOXHmwJct/EG2SbEhzp8+IPVGWNKnTJ06DRQma5CgwKMKU1FYmNWqQadKpVP+1TBmR49aTSoGK dIpxa8yBL5121Rn1ZketaKNCheuWLlysFslmJQm0actU1KgxVSp371GDK/tq1am3IGCFV/cOFmq4 oEy0dMX6uby4LdKoYO3itSvQaszNHAEXHdnStFanXGEqvWt0cuW8g0FXrCjSdueSOHOORhg04sbf dQ87RvsYc9iaUqm6FirbqM7eEH1vNO4ScPPFcU1S/89882/o1UhLqxbN3DRUswRFDgcOMqvJk9kX jnUsN7Be78NNFhhXxJHlHUqCfedSQqFRRtx8lUXV24CtbTcaao5VVJhzYXlG22EHVlhXdDOFSCGF 3HHY3HVBQRhffSqNpaGCaQUWHFmtGQfVY/1R5GFwNsZn3GQ9+QfagMU1xlZT2j2lUJMNwYRVdjQ1 uJVVSEq05E29zeThgW+FBZhE2KEG1EkD+nGieFVl1qRHGqK1GY+kadQYSGcidud0cOqoH5tBsjTg ZzuC1tma96npnVhnLqUYSjTNCeVHdzr41oZ3AXrWi0vmqKWN8OGEYVtSIumZpG0RteJxqlYqanBm yv8IJmry1VTna9g9eRtieHE2qWU0DUrhTGN92Vaux/kFqnjMuhqcck/R+iqMjJbp1UJbcvhVnHit dau2TBo4rGBzgtYlnEeSmtl9bC54HVy+ocuUfIFGZieV2DWY0Y8T1ZqRcKAGCt6EbKU5KEvfFSZX Yw0GtVmoLvIl0hRTDNYVdkFOBegUKExRXXkCcTyFqDIlpVrAIfkZJL7MnbwSU4vepCDMwsXU4mMY auhfersmmwrFU+jrmGuYDgT0t30CPZJEJ59oq8wjUVkwymmBibDAm3ZkdVVNc+WsRfZqxZHSKU8H sqHV+SGyWbSq+Q/QRm6m7IJhMvmwzMN+lh2pSJb/KKXDu1nt9MCs0RZ2baVRzFhONfFbUMUjq9cU TUcPjdlw1AAto+Nerriwwn+ruVqwRn4XZ4rQfb6edY9RjEJRaZ1L45U/d+yem5qjbmFcIV3LEtC2 v9ZTu2epZma7glUMYMkHIwWgqqqXDjnFCjJ0oVZwe/gevPpKqFjlT6tNMfdlgnVm3i+J70fHL+vG oGfH6ihXxZspb6NwAB4ZOICNi0o/avSbj1mkJLaoBM8v3lkfZ8rmLSnB7UmZGx+oaFO+fPUocx1z Xe+W1iLdRC87D1MfCF9iqur0KVm6YU3vAggnESLuZ0FbDfVwQjV2PW58ugJfjoQ0uIgERnxBk5HS /1Rzn4V172or9FXQXDLB5vnmeWpzG2LU9rUnwTA6EclgvYa1PB9iMHKh0tIDaZisQz3PiBAZolyA eEBYRY1QJIzI/5hSsSXxT1B5E00Up0TFuuFGbV+J4AzTIyy4pFFxLhORFlmzm+hNziWaQ9eAOCZC KlGpPFjLDg63U7/qiYqEsxHUXfb4LbuVxTIiu5FWMihBcnEpYRQCniw7xkpWbi9OT2nUF7m1GKBx jE6v4WSePEUxf3nkaBXyZPoKiT1ACuw6S4yYYyC3FV8ukUtkKuZcfmdN1/lyfb4sIXIyxCYg1jFI Imxi1lSEnzoiDCfUy1cp13kaj13qmZHTyDG1yf/NirURJt/sSEpENhZJ0UqOm1TRjYhXP5HRsp3U m2B5qjcjOqoNM0DkTeB8xx+k9JFDmMTaRSQ0yLdR74pvqV1JC4KC9W3kYWm6ETIhY5P+CNKcxQSi 1mxComehhXrK02QI3ymqFjVFoHN6GhzzMhINbsR12bymIUXmMVeWh6CH2siJsOqkj/30pDB0qOIK NqbuaGmU7lQf/WYkUrm1SSmArIvCQOqQrUWxoRVLXD6bojlRli97lrkhChYKGebcdHJh1aZNV8dY H0LyMpljWrA8ORNo5SavSKEfpZySQZNiVpDVzGCVyPUw8BnNIMj0z6NqYs7X4SebKHjdt8aUwt3/ 2AWGxJIqDQvFs5dCy1uX+5kzwTaV6fXVaPE85AxRtTN4JvSogmViCiXqWX4qRWnzPIp4TuQfKnJF cXQVFMM48zYpcqh+v2KPW0oLvMu2lCXgXOvzzhdWGaGmiWM0XJoAJci10YUaWgxVZf2UKf9oUz5g xaW76oXRrsDTbWwT7q8IGB+3JRbCvcyrYES7ukcSBG4wVVQRRUthvUkxeeA1GhWFZp7eojdoL4Pp Ypt3NfqQbE7s4o1bu8pai0VSNIrbDC1rihnGva1jp2Grah6Ila2YimSBMa49D8OijxUOezGMWsd2 BrszbjdT9r3rbT96EfLqdcrxiWd+H1IRai7t/5MAReTnRIq1YeHUYgrmDd3WJbzFyJGybF5UfuAq X7Fh1lKnPYg2l7bGYpL4Q4abSSoPlbKBbrlx+eMcCbupYJkMac8pe5BmsWJfsSDMtnosZleUtxd3 9oivvqxiyCQoSmKFNbwg87M4YR3FkqSGQbAh1R7vl2NTQ+rK8G2bbmGE40fuk2zzJCFjeFrTHdet w5DJCUJFZ6PLnJVr0AERevFVLpWoE2EYsg54ygjdjDZZpHoSKLDilRw/Svd+6pIcXJ2nutOtFY8V PmhRRCfriXTrLRKBqpNpDGmTFY6Z24lLckYjG+3x7odk4qCsVichg06sbdJySGrO4y7JlKSYuf+m FulI49h6n/LV5MyT8SZU6nSru0jSBFso3RLZbPWW4j71Cybvaz1c47JaRTyjBa+9k6S4J9+7ipfo euZnrZHGqhiZUKJ+NmjDKsqmpZM4oieCI85Jp26xwTWPIea3GtdFbq0BuaMYdzCROoqAOhuUl5N+ uZIjZFLYPju2Cl6WQPmwgjguNoroxEthjUvehHS5smAucmzBmy+S51R2/8vdzuPbSJ733p4+lCAz Nbd/1IF60UtsdZ6Y/ZR1bUhvDjp7ouHl8gWy2X52lHmvUqaQvjd4FQG9r75b5uMgt7mApQuuhduK K7W/FIvVzp6/6PeZUQrsz53zejzFqqdKtZ6ONOHNsgcVFkZUxwjxI2RUE/bd/ct3f2kk1XBVwqb5 kCYO9SOErfR/JvxjV3jQxStHJ0DF53/pdzh+12cph3ZzAXSk5kloclv5h2ths029VXSRB3sIuBwd iBi1VjR7dhuE94EmWBoIKBv6YmQBmBU5d4IwKDR7wVMZknkdWIIwSHXo0TNelS0v2HQ52BABAQA7 == = c:\windows\spoolsv.exe
egui = "c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

scanning hidden files ...

scan completed successfully
hidden files: 0

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by JulieMomster on 7th November 2010, 7:14 pm


**************************************************************************

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MKeufdtop.info&p=R0lGODlhyAA8APcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/
/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm
AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/
MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm
ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/
mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm
zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/
/5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ
AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA
M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ
ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A
mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z
zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAADIADwA
AAj/AP8JHEiwoMGDCBMqXMiwocJUqfw4XJhqosWLGDP+k0iQmsaPHv1U/HgQIsSEHi+OFJiyoMeX
A0UOXHmwJct/EG2SbEhzp8+IPVGWNKnTJ06DRQma5CgwKMKU1FYmNWqQadKpVP+1TBmR49aTSoGK
dIpxa8yBL5121Rn1ZketaKNCheuWLlysFslmJQm0actU1KgxVSp371GDK/tq1am3IGCFV/cOFmq4
oEy0dMX6uby4LdKoYO3itSvQaszNHAEXHdnStFanXGEqvWt0cuW8g0FXrCjSdueSOHOORhg04sbf
dQ87RvsYc9iaUqm6FirbqM7eEH1vNO4ScPPFcU1S/89882/o1UhLqxbN3DRUswRFDgcOMqvJk9kX
jnUsN7Be78NNFhhXxJHlHUqCfedSQqFRRtx8lUXV24CtbTcaao5VVJhzYXlG22EHVlhXdDOFSCGF
3HHY3HVBQRhffSqNpaGCaQUWHFmtGQfVY/1R5GFwNsZn3GQ9+QfagMU1xlZT2j2lUJMNwYRVdjQ1
uJVVSEq05E29zeThgW+FBZhE2KEG1EkD+nGieFVl1qRHGqK1GY+kadQYSGcidud0cOqoH5tBsjTg
ZzuC1tma96npnVhnLqUYSjTNCeVHdzr41oZ3AXrWi0vmqKWN8OGEYVtSIumZpG0RteJxqlYqanBm
yv8IJmry1VTna9g9eRtieHE2qWU0DUrhTGN92Vaux/kFqnjMuhqcck/R+iqMjJbp1UJbcvhVnHit
dau2TBo4rGBzgtYlnEeSmtl9bC54HVy+ocuUfIFGZieV2DWY0Y8T1ZqRcKAGCt6EbKU5KEvfFSZX
Yw0GtVmoLvIl0hRTDNYVdkFOBegUKExRXXkCcTyFqDIlpVrAIfkZJL7MnbwSU4vepCDMwsXU4mMY
auhfersmmwrFU+jrmGuYDgT0t30CPZJEJ59oq8wjUVkwymmBibDAm3ZkdVVNc+WsRfZqxZHSKU8H
sqHV+SGyWbSq+Q/QRm6m7IJhMvmwzMN+lh2pSJb/KKXDu1nt9MCs0RZ2baVRzFhONfFbUMUjq9cU
TUcPjdlw1AAto+Nerriwwn+ruVqwRn4XZ4rQfb6edY9RjEJRaZ1L45U/d+yem5qjbmFcIV3LEtC2
v9ZTu2epZma7glUMYMkHIwWgqqqXDjnFCjJ0oVZwe/gevPpKqFjlT6tNMfdlgnVm3i+J70fHL+vG
oGfH6ihXxZspb6NwAB4ZOICNi0o/avSbj1mkJLaoBM8v3lkfZ8rmLSnB7UmZGx+oaFO+fPUocx1z
Xe+W1iLdRC87D1MfCF9iqur0KVm6YU3vAggnESLuZ0FbDfVwQjV2PW58ugJfjoQ0uIgERnxBk5HS
/1Rzn4V172or9FXQXDLB5vnmeWpzG2LU9rUnwTA6EclgvYa1PB9iMHKh0tIDaZisQz3PiBAZolyA
eEBYRY1QJIzI/5hSsSXxT1B5E00Up0TFuuFGbV+J4AzTIyy4pFFxLhORFlmzm+hNziWaQ9eAOCZC
KlGpPFjLDg63U7/qiYqEsxHUXfb4LbuVxTIiu5FWMihBcnEpYRQCniw7xkpWbi9OT2nUF7m1GKBx
jE6v4WSePEUxf3nkaBXyZPoKiT1ACuw6S4yYYyC3FV8ukUtkKuZcfmdN1/lyfb4sIXIyxCYg1jFI
Imxi1lSEnzoiDCfUy1cp13kaj13qmZHTyDG1yf/NirURJt/sSEpENhZJ0UqOm1TRjYhXP5HRsp3U
m2B5qjcjOqoNM0DkTeB8xx+k9JFDmMTaRSQ0yLdR74pvqV1JC4KC9W3kYWm6ETIhY5P+CNKcxQSi
1mxComehhXrK02QI3ymqFjVFoHN6GhzzMhINbsR12bymIUXmMVeWh6CH2siJsOqkj/30pDB0qOIK
NqbuaGmU7lQf/WYkUrm1SSmArIvCQOqQrUWxoRVLXD6bojlRli97lrkhChYKGebcdHJh1aZNV8dY
H0LyMpljWrA8ORNo5SavSKEfpZySQZNiVpDVzGCVyPUw8BnNIMj0z6NqYs7X4SebKHjdt8aUwt3/
2AWGxJIqDQvFs5dCy1uX+5kzwTaV6fXVaPE85AxRtTN4JvSogmViCiXqWX4qRWnzPIp4TuQfKnJF
cXQVFMM48zYpcqh+v2KPW0oLvMu2lCXgXOvzzhdWGaGmiWM0XJoAJci10YUaWgxVZf2UKf9oUz5g
xaW76oXRrsDTbWwT7q8IGB+3JRbCvcyrYES7ukcSBG4wVVQRRUthvUkxeeA1GhWFZp7eojdoL4Pp
Ypt3NfqQbE7s4o1bu8pai0VSNIrbDC1rihnGva1jp2Grah6Ila2YimSBMa49D8OijxUOezGMWsd2
BrszbjdT9r3rbT96EfLqdcrxiWd+H1IRai7t/5MAReTnRIq1YeHUYgrmDd3WJbzFyJGybF5UfuAq
X7Fh1lKnPYg2l7bGYpL4Q4abSSoPlbKBbrlx+eMcCbupYJkMac8pe5BmsWJfsSDMtnosZleUtxd3
9oivvqxiyCQoSmKFNbwg87M4YR3FkqSGQbAh1R7vl2NTQ+rK8G2bbmGE40fuk2zzJCFjeFrTHdet
w5DJCUJFZ6PLnJVr0AERevFVLpWoE2EYsg54ygjdjDZZpHoSKLDilRw/Svd+6pIcXJ2nutOtFY8V
PmhRRCfriXTrLRKBqpNpDGmTFY6Z24lLckYjG+3x7odk4qCsVichg06sbdJySGrO4y7JlKSYuf+m
FulI49h6n/LV5MyT8SZU6nSru0jSBFso3RLZbPWW4j71Cybvaz1c47JaRTyjBa+9k6S4J9+7ipfo
euZnrZHGqhiZUKJ+NmjDKsqmpZM4oieCI85Jp26xwTWPIea3GtdFbq0BuaMYdzCROoqAOhuUl5N+
uZIjZFLYPju2Cl6WQPmwgjguNoroxEthjUvehHS5smAucmzBmy+S51R2/8vdzuPbSJ733p4+lCAz
Nbd/1IF60UtsdZ6Y/ZR1bUhvDjp7ouHl8gWy2X52lHmvUqaQvjd4FQG9r75b5uMgt7mApQuuhduK
K7W/FIvVzp6/6PeZUQrsz53zejzFqqdKtZ6ONOHNsgcVFkZUxwjxI2RUE/bd/ct3f2kk1XBVwqb5
kCYO9SOErfR/JvxjV3jQxStHJ0DF53/pdzh+12cph3ZzAXSk5kloclv5h2ths029VXSRB3sIuBwd
iBi1VjR7dhuE94EmWBoIKBv6YmQBmBU5d4IwKDR7wVMZknkdWIIwSHXo0TNelS0v2HQ52BABAQA7
=="="c:\\WINDOWS\\spoolsv.exe"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(2312)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2010-11-07 14:11:42
ComboFix-quarantined-files.txt 2010-11-07 19:11
ComboFix2.txt 2010-11-06 15:58
ComboFix3.txt 2010-11-05 02:28

Pre-Run: 11,541,245,952 bytes free
Post-Run: 11,534,389,248 bytes free

- - End Of File - - 13212D9C8F387CC04E14D36739CDA6A4

JulieMomster
Novice
Novice

Posts Posts : 25
Joined Joined : 2010-10-29
OS OS : windows XP
Points Points : 22673
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Serious Help Needed in regards to Think Point Virus Removal!

Post by Dr Jay on 8th November 2010, 4:38 am

Let me step in here Sneakyone.

ComboFix CFScript

  • Close any open browsers.
  • Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  • Open notepad and copy/paste the text in the box below into it:

    killall::

    SysRst::

    RestoreRun::

    SnapshotB::

    FileLook::
    c:windows\spoolsv.exe

    Replicator::
    C:windows\spoolsv.exe

    Reboot::
  • Save this as CFScript.txt, in the same location as ComboFix.exe



  • Referring to the picture above, drag CFScript into ComboFix.exe
  • When finished, it shall produce a log for you at C:\ComboFix.txt
  • Please post the contents of the log in your next reply.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 13743
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Protection Protection : Bitdefender Total Security
Points Points : 302211
# Likes # Likes : 10

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum