AV Security Sphere malware... Please help!!

View previous topic View next topic Go down

AV Security Sphere malware... Please help!!

Post by r0naldo on Fri 16 Dec 2011, 1:17 pm

I have some type of malware on my computer. It continually pops up an AV program named security sphere 2012. It will not allow me to run any kind of fix or program. Please help!! Whenever I try to shut the AV program down it leads me towards a pay site to sign up for the program. Please help me get rid of this virus!!!!

I downloaded the malware remover but it will not allow me to run the exe file. I've read the instructions to use the OTL and the aswMBR. I have downloaded both items but I am unable to run these programs. This virus has stopped any .exe program to start. What can I do? Thanks for your help....


r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by Gabethebabe on Sat 17 Dec 2011, 1:25 am

Hi there r0naldo and welcome to GeekPolice!

I am Gabethebabe and I will be helping you with this issue. Before we start some general remarks/rules:
  • Whilst Im helping you, please follow my instructions carefully and do not experiment on your own or accept help from other persons.
  • Feel free to ask questions! Especially if my instructions are not clear. Im here to help, not confuse you.
  • I will try and respond quickly, but please understand I do have a real life (job, wife, 3 kids, kinky hobbies).
  • Stick with me till the end. If your computer starts running better, doesnt mean it is clean yet!

====================

Please download RKill by Grinler from Download Mirror #1 and save it to your desktop.
Download Mirror #1 (rkill.exe)
Download Mirror #2 (rkill.scr)
Download Mirror #3 (rkill.com)
Download Mirror #4 (WiNlOgOn.exe)
Download Mirror #5 (uSeRiNiT.exe)
Download Mirror #6 (iExplore.exe)
Download Mirror #7 (eXplorer.exe)

  • Double click the RKill desktop icon (rightclick > Run as Administrator for Vista/WIN7).
  • A black screen will briefly flash indicating a successful run.
  • If this does not occur please delete that application and try using Mirror #2
  • Continue process until the tool runs.
  • Important: RKill only temporarily disables the malware. If you reboot the computer, it will be active again. So do not reboot until we kill the infection.

====================

Please download OTL by OldTimer from here and save it to your desktop.
  • Close all windows and double click OTL.exe.
  • The Extra Registry setting should be Use Safelist
  • Copy and paste the following text into the Custom Scans/Fixes box:

Code:
%APPDATA%\Microsoft\*.*
%systemroot%\system32\config\systemprofile\*.dat /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\winn32\*.*
%USERPROFILE%\My Documents\*.exe
%USERPROFILE%\*.exe
%PROGRAMFILES%\Mozilla Firefox\*.exe
%ProgramFiles%\TinyProxy.
%systemroot%\system32\*.* /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.* /lockedfiles
%PROGRAMFILES%\*.
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
/md5start
netlogon.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
disk.sys
explorer.exe
userinit.exe
winlogon.exe
/md5stop
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
  • Click the Run Scan button and allow it to run.
  • It will produce two logs for you, OTL.txt and Extras.txt. Please post both logs in this thread.
  • You may need multiple posts to get it all.

Gabethebabe

Tech Advisor
Tech Advisor

Posts : 1568
Joined : 2010-03-07
Operating System : WIN7 64bit, Ubuntu 12.04 LTS

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Sat 17 Dec 2011, 2:58 am

Tried all 7 download mirrors. Three of them worked but only for @10 seconds until the malware shut them down and popped up again. Wasn't sufficient time to run the scan. Any suggestions on how to keep the rkill programs running? Thanks for the help...

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by Gabethebabe on Sat 17 Dec 2011, 4:44 am

Try this way, then:

Please download OTH by OldTimer from here and save it to your Desktop (if you use Firefox, right click the link and choose Save Link As ...)
Please download OTL by OldTimer from here and save it to your Desktop

Print the following instructions. You will not have access to them during their execution.

  • Save all your work and close all programs, the next step will stop nearly every process on your computer!
  • Double click OTH.scr to run the tool
  • Click Kill All Processes: your desktop will go blank
  • Click Start OTL to run OTL
  • Click the Run Scan button.
  • When the scan completes, it will open a text file named OTL.txt. Close it.
  • Click the Run Misc Program button. Browse to (or type) c:\windows\explorer.exe. That will bring back your desktop.
  • Right click OT Helper in the taskbar > choose Close. It has done its job.
  • NOTE: your computer will now be running with minimum processes (e.g. no antivirus). Reboot if you want to go back to normal. I recommend not to do so, because rebooting will also bring the malware back.
  • Find the OTL.txt file (it will be in the same folder as OTL.exe, on the desktop) and paste its contents in your next reply.



Gabethebabe

Tech Advisor
Tech Advisor

Posts : 1568
Joined : 2010-03-07
Operating System : WIN7 64bit, Ubuntu 12.04 LTS

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Sat 17 Dec 2011, 3:55 pm

OTL logfile created on: 8/20/2009 1:09:45 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Ron\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.93 Gb Total Physical Memory | 2.25 Gb Available Physical Memory | 76.96% Memory free
5.85 Gb Paging File | 5.14 Gb Available in Paging File | 87.90% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 68.36 Gb Total Space | 34.86 Gb Free Space | 50.99% Space Free | Partition Type: NTFS
Drive D: | 397.30 Gb Total Space | 397.20 Gb Free Space | 99.97% Space Free | Partition Type: NTFS

Computer Name: RON-PC | User Name: Ron | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/12/15 14:22:42 | 001,085,440 | ---- | M] () -- C:\Program Files\Flip Video\FlipShareServer\FlipShareServer.exe
PRC - [2009/08/20 13:06:21 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Ron\Desktop\OTL.exe
PRC - [2009/08/20 13:05:44 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Users\Ron\Desktop\OTH.scr


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/05/05 20:50:22 | 001,045,256 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/12/19 15:10:28 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010/12/15 14:31:20 | 000,460,144 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Flip Video\FlipShare\FlipShareService.exe -- (FlipShare Service)
SRV - [2010/12/15 14:22:42 | 001,085,440 | ---- | M] () [Auto | Running] -- C:\Program Files\Flip Video\FlipShareServer\FlipShareServer.exe -- (FlipShareServer)
SRV - [2010/05/17 14:45:32 | 001,615,176 | ---- | M] (Rosetta Stone Ltd.) [Auto | Stopped] -- C:\Program Files\RosettaStoneLtdServices\RosettaStoneDaemon.exe -- (RosettaStoneDaemon)
SRV - [2010/01/15 05:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/07/17 10:06:20 | 000,026,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE -- (wltrysvc)
SRV - [2009/07/13 18:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 18:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 18:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - [2010/11/20 05:30:17 | 000,296,064 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vpcvmm.sys -- (vpcvmm)
DRV - [2010/11/20 05:30:17 | 000,172,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vpchbus.sys -- (vpcbus)
DRV - [2010/11/20 05:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 05:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 05:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 03:50:38 | 000,078,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vpcusb.sys -- (vpcusb)
DRV - [2010/11/20 03:50:37 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vpcnfltr.sys -- (vpcnfltr)
DRV - [2010/11/20 03:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 03:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 02:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 02:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 02:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/02/27 00:31:24 | 000,132,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Impcd.sys -- (Impcd)
DRV - [2009/07/17 10:06:08 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2009/06/15 14:05:16 | 000,143,968 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV - [2009/05/28 11:48:20 | 000,134,144 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CtAudDrv.sys -- (CtAudDrv)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [You must be registered and logged in to see this link.]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4D 3D B7 EB 45 9E CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.order.1: "Yahoo"
FF - prefs.js..browser.search.order.2: ""
FF - prefs.js..browser.search.param.yahoo-fr: "w3i&type=W3i_DS,157,0_0,Search,20111146,6902,0,16,0"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.startup.homepage: "http://www.search.yahoo.com/?fr=w3i&type=W3i_SP,205,0_0,StartPage,20111146,16900,0,16,0"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.6.0.8442
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {b9dbe2c0-031f-4cad-911a-f4a7381d79c0}:1.0.28
FF - prefs.js..extensions.enabledItems: {1266764D-FC4F-4FA7-B63B-884D53B1680F}:3.6.5


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Ron\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Ron\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Ron\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Ron\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/09 21:24:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/12/09 21:24:20 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{1266764D-FC4F-4FA7-B63B-884D53B1680F}: C:\Users\Ron\AppData\Roaming\NetAssistant\ [2011/11/06 14:49:15 | 000,000,000 | ---D | M]

[2010/12/19 22:58:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ron\AppData\Roaming\Mozilla\Extensions
[2011/12/11 20:12:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\geiz0urb.default\extensions
[2011/12/11 20:12:02 | 000,000,000 | ---D | M] (ShopToWin13) -- C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\geiz0urb.default\extensions\{b9dbe2c0-031f-4cad-911a-f4a7381d79c0}
[2011/12/09 21:24:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/10/28 09:42:52 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011/12/09 21:24:20 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/05/04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/12/09 21:24:17 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/12/09 21:24:17 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========


O1 HOSTS File: ([2009/06/10 14:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll (Google Inc.)
O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Runtime\YontooIEClient.dll (Yontoo LLC)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4 - HKCU..\Run: [DealRunner] C:\Program Files\DealRunner\DealRunner.exe (Jackpot Rewards)
O4 - HKCU..\Run: [gJ37855LdKdD37855] C:\ProgramData\gJ37855LdKdD37855\gJ37855LdKdD37855.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki... - [You must be registered and logged in to see this link.] Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [You must be registered and logged in to see this link.] (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} [You must be registered and logged in to see this link.] (Reg Error: Key error.)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} [You must be registered and logged in to see this link.] (JuniperSetupClientControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F01D4D05-88FD-4E99-9241-5FE8DB1F064A}: DhcpNameServer = 68.87.66.249 68.87.64.245
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FB4D7C18-B093-42E9-BBEE-C4C7ADC1D2D1}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) -explorer.exe ()
O20 - HKLM Winlogon: Shell - (C:\ProgramData\gJ37855LdKdD37855\gJ37855LdKdD37855.exe) -C:\ProgramData\gJ37855LdKdD37855\gJ37855LdKdD37855.exe ()
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 14:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/12/15 08:56:39 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2011/12/15 08:48:53 | 001,916,416 | ---- | C] (AVAST Software) -- C:\Users\Ron\Desktop\aswMBR.exe
[2011/12/15 08:46:23 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Ron\Desktop\OTL.exe
[2011/12/14 20:04:03 | 000,000,000 | ---D | C] -- C:\ProgramData\gJ37855LdKdD37855
[2011/11/18 21:12:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011/11/08 21:13:00 | 002,341,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011/11/06 14:49:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mplayer
[2011/11/06 14:49:15 | 000,000,000 | ---D | C] -- C:\Program Files\Mplayer
[2011/11/06 14:49:14 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\NetAssistant
[2011/11/06 14:49:13 | 000,000,000 | ---D | C] -- C:\Users\Ron\Documents\DealRunner
[2011/11/06 14:49:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealRunner
[2011/11/06 14:49:12 | 000,000,000 | ---D | C] -- C:\Program Files\DealRunner
[2011/11/06 14:49:00 | 000,000,000 | ---D | C] -- C:\Program Files\Shop To Win
[2011/11/06 14:48:59 | 000,000,000 | ---D | C] -- C:\Program Files\Yontoo Layers Runtime
[2011/11/06 14:48:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer
[2011/10/11 15:44:15 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2011/10/11 15:44:15 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2011/10/11 15:44:03 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011/10/11 15:44:02 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011/10/11 15:44:02 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011/10/11 15:44:02 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011/10/11 15:44:01 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011/10/10 18:44:06 | 000,000,000 | ---D | C] -- C:\Users\Ron\Desktop\facebook
[2011/10/10 17:43:45 | 000,000,000 | ---D | C] -- C:\Users\Ron\Desktop\muddy buddy
[2011/09/20 21:56:03 | 000,000,000 | ---D | C] -- C:\Users\Ron\Desktop\kentucky pics
[2011/09/14 20:22:37 | 000,000,000 | ---D | C] -- C:\Users\Ron\Desktop\pics
[2011/09/12 21:41:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011/09/12 21:39:10 | 000,000,000 | ---D | C] -- C:\Program Files\Veetle
[2011/09/08 21:01:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011/08/23 21:13:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011/08/09 21:37:09 | 003,912,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011/08/09 21:37:08 | 003,967,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011/08/09 21:36:54 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2011/08/09 21:36:54 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2011/08/09 21:36:54 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2011/08/09 21:36:54 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2011/08/09 21:36:54 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2011/08/09 21:36:54 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2011/08/09 21:36:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2011/08/09 21:36:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2011/08/09 21:36:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2011/08/09 21:36:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2011/08/09 21:36:54 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2011/08/09 21:36:54 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2011/08/09 21:36:53 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2011/08/09 21:36:52 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2011/08/09 21:36:52 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2011/08/09 21:36:52 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2011/08/09 21:36:52 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2011/06/30 08:31:24 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2011/06/30 08:31:24 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2011/06/30 08:31:24 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2011/06/30 08:31:24 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2011/06/30 08:31:24 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2011/06/30 08:31:24 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2011/06/25 07:42:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2011/06/25 07:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2011/06/21 15:13:21 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011/06/20 22:27:46 | 003,330,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpc.exe
[2011/06/20 22:27:46 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VMWindow.exe
[2011/06/20 22:27:46 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmsal.exe
[2011/06/20 22:27:45 | 002,171,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VPCWizard.exe
[2011/06/20 22:27:45 | 001,260,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VPCSettings.exe
[2011/06/20 22:27:45 | 000,559,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VMCPropertyHandler.dll
[2011/06/20 22:27:42 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LSCSHostPolicy.dll
[2011/06/20 22:27:42 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2011/06/20 22:27:42 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2011/06/20 22:27:39 | 001,171,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2011/06/20 22:27:38 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2011/06/20 22:27:38 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2011/06/20 22:27:38 | 000,915,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2011/06/20 22:27:38 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tssrvlic.dll
[2011/06/20 22:27:37 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2011/06/20 22:27:37 | 000,296,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpcvmm.sys
[2011/06/20 22:27:36 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2011/06/20 22:27:36 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2011/06/20 22:27:35 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2011/06/20 22:27:34 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
[2011/06/20 22:27:33 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2011/06/20 22:27:33 | 000,520,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2011/06/20 22:27:32 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2011/06/20 22:27:31 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2011/06/20 22:27:31 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2011/06/20 22:27:30 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
[2011/06/20 22:27:30 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2011/06/20 22:27:29 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2011/06/20 22:27:28 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2011/06/20 22:27:28 | 000,172,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpchbus.sys
[2011/06/20 22:27:28 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpcusb.sys
[2011/06/20 22:27:28 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpcnfltr.sys
[2011/06/20 22:27:27 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
[2011/06/20 22:27:26 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2011/06/20 22:27:26 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
[2011/06/20 22:27:26 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
[2011/06/20 22:27:26 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PushPrinterConnections.exe
[2011/06/20 22:27:25 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2011/06/20 22:27:24 | 003,367,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
[2011/06/20 22:27:24 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
[2011/06/20 22:27:24 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2011/06/20 22:27:24 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
[2011/06/20 22:27:24 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011/06/20 22:27:24 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
[2011/06/20 22:27:23 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
[2011/06/20 22:27:23 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011/06/20 22:27:23 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
[2011/06/20 22:27:22 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
[2011/06/20 22:27:22 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2011/06/20 22:27:21 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpshell.exe
[2011/06/20 22:27:20 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2011/06/20 22:27:20 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2011/06/20 22:27:19 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpprefcl.dll
[2011/06/20 22:27:18 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
[2011/06/20 22:27:18 | 001,792,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2011/06/20 22:27:18 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
[2011/06/20 22:27:18 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
[2011/06/20 22:27:18 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2011/06/20 22:27:18 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2011/06/20 22:27:18 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
[2011/06/20 22:27:18 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2011/06/20 22:27:17 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
[2011/06/20 22:27:17 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
[2011/06/20 22:27:17 | 000,508,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2011/06/20 22:27:17 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2011/06/20 22:27:16 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
[2011/06/20 22:27:16 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
[2011/06/20 22:27:16 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
[2011/06/20 22:27:16 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
[2011/06/20 22:27:15 | 002,414,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2011/06/20 22:27:15 | 000,442,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2011/06/20 22:27:15 | 000,240,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2011/06/20 22:27:15 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpendp.dll
[2011/06/20 22:27:14 | 001,063,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
[2011/06/20 22:27:14 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
[2011/06/20 22:27:14 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appmgr.dll
[2011/06/20 22:27:14 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpclip.exe
[2011/06/20 22:27:14 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2011/06/20 22:27:13 | 000,508,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2011/06/20 22:27:13 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2011/06/20 22:27:13 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
[2011/06/20 22:27:12 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2011/06/20 22:27:12 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2011/06/20 22:27:12 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
[2011/06/20 22:27:12 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
[2011/06/20 22:27:12 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
[2011/06/20 22:27:12 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
[2011/06/20 22:27:12 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2011/06/20 22:27:12 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
[2011/06/20 22:27:12 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpinit.exe
[2011/06/20 22:27:11 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
[2011/06/20 22:27:11 | 000,271,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
[2011/06/20 22:27:11 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011/06/20 22:27:11 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tspubwmi.dll
[2011/06/20 22:27:10 | 000,690,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2011/06/20 22:27:10 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2011/06/20 22:27:10 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2011/06/20 22:27:10 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2011/06/20 22:27:10 | 000,175,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmbus.sys
[2011/06/20 22:27:10 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
[2011/06/20 22:27:10 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
[2011/06/20 22:27:10 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2011/06/20 22:27:10 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
[2011/06/20 22:27:10 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
[2011/06/20 22:27:09 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
[2011/06/20 22:27:08 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2011/06/20 22:27:08 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
[2011/06/20 22:27:08 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
[2011/06/20 22:27:08 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrptadm.dll
[2011/06/20 22:27:08 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
[2011/06/20 22:27:08 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2011/06/20 22:27:08 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
[2011/06/20 22:27:08 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2011/06/20 22:27:08 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2011/06/20 22:27:08 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2011/06/20 22:27:07 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
[2011/06/20 22:27:07 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
[2011/06/20 22:27:07 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2011/06/20 22:27:07 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
[2011/06/20 22:27:07 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmicsvc.exe
[2011/06/20 22:27:07 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tscfgwmi.dll
[2011/06/20 22:27:07 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
[2011/06/20 22:27:07 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2011/06/20 22:27:07 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2011/06/20 22:27:06 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
[2011/06/20 22:27:06 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2011/06/20 22:27:06 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
[2011/06/20 22:27:06 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2011/06/20 22:27:06 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011/06/20 22:27:06 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
[2011/06/20 22:27:06 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
[2011/06/20 22:27:06 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
[2011/06/20 22:27:05 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2011/06/20 22:27:05 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
[2011/06/20 22:27:05 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2011/06/20 22:27:04 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
[2011/06/20 22:27:04 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
[2011/06/20 22:27:04 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
[2011/06/20 22:27:04 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
[2011/06/20 22:27:04 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
[2011/06/20 22:27:04 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2011/06/20 22:27:04 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2011/06/20 22:27:04 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
[2011/06/20 22:27:04 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
[2011/06/20 22:27:04 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
[2011/06/20 22:27:04 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
[2011/06/20 22:27:04 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
[2011/06/20 22:27:03 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
[2011/06/20 22:27:03 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
[2011/06/20 22:27:03 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2011/06/20 22:27:03 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2011/06/20 22:27:03 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
[2011/06/20 22:27:03 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2011/06/20 22:27:03 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2011/06/20 22:27:03 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2011/06/20 22:27:02 | 001,466,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011/06/20 22:27:02 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
[2011/06/20 22:27:02 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayCpl.dll
[2011/06/20 22:27:02 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2011/06/20 22:27:02 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
[2011/06/20 22:27:02 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
[2011/06/20 22:27:02 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2011/06/20 22:27:02 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
[2011/06/20 22:27:02 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2011/06/20 22:27:02 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
[2011/06/20 22:27:02 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
[2011/06/20 22:27:02 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2011/06/20 22:27:02 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
[2011/06/20 22:27:02 | 000,035,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\winusb.sys
[2011/06/20 22:27:01 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
[2011/06/20 22:27:01 | 000,132,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2011/06/20 22:27:00 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2011/06/20 22:27:00 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
[2011/06/20 22:27:00 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
[2011/06/20 22:26:59 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
[2011/06/20 22:26:59 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2011/06/20 22:26:59 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011/06/20 22:26:58 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
[2011/06/20 22:26:58 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
[2011/06/20 22:26:58 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2011/06/20 22:26:58 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2011/06/20 22:26:58 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\System32\Robocopy.exe

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Sat 17 Dec 2011, 3:56 pm

[2011/06/20 22:26:57 | 001,188,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
[2011/06/20 22:26:57 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
[2011/06/20 22:26:57 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
[2011/06/20 22:26:57 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
[2011/06/20 22:26:57 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
[2011/06/20 22:26:57 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
[2011/06/20 22:26:57 | 000,043,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\winhv.sys
[2011/06/20 22:26:57 | 000,040,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmstorfl.sys
[2011/06/20 22:26:57 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
[2011/06/20 22:26:56 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensorsCpl.dll
[2011/06/20 22:26:56 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
[2011/06/20 22:26:56 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
[2011/06/20 22:26:56 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
[2011/06/20 22:26:56 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
[2011/06/20 22:26:56 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
[2011/06/20 22:26:56 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
[2011/06/20 22:26:56 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
[2011/06/20 22:26:56 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2011/06/20 22:26:56 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
[2011/06/20 22:26:56 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
[2011/06/20 22:26:56 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
[2011/06/20 22:26:56 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
[2011/06/20 22:26:56 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storvsc.sys
[2011/06/20 22:26:55 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
[2011/06/20 22:26:55 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
[2011/06/20 22:26:55 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2011/06/20 22:26:55 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2011/06/20 22:26:55 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
[2011/06/20 22:26:55 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
[2011/06/20 22:26:55 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
[2011/06/20 22:26:55 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2011/06/20 22:26:55 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
[2011/06/20 22:26:54 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
[2011/06/20 22:26:54 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
[2011/06/20 22:26:54 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mblctr.exe
[2011/06/20 22:26:54 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
[2011/06/20 22:26:54 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
[2011/06/20 22:26:54 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
[2011/06/20 22:26:54 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2011/06/20 22:26:54 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2011/06/20 22:26:54 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
[2011/06/20 22:26:54 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
[2011/06/20 22:26:54 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
[2011/06/20 22:26:54 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
[2011/06/20 22:26:54 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2011/06/20 22:26:54 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2011/06/20 22:26:54 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
[2011/06/20 22:26:54 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
[2011/06/20 22:26:54 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
[2011/06/20 22:26:54 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
[2011/06/20 22:26:53 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
[2011/06/20 22:26:53 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
[2011/06/20 22:26:53 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspbda.dll
[2011/06/20 22:26:53 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2011/06/20 22:26:53 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2011/06/20 22:26:53 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
[2011/06/20 22:26:53 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
[2011/06/20 22:26:53 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
[2011/06/20 22:26:53 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
[2011/06/20 22:26:52 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
[2011/06/20 22:26:52 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
[2011/06/20 22:26:52 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
[2011/06/20 22:26:52 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
[2011/06/20 22:26:52 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
[2011/06/20 22:26:52 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
[2011/06/20 22:26:52 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2011/06/20 22:26:52 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
[2011/06/20 22:26:52 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
[2011/06/20 22:26:52 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
[2011/06/20 22:26:52 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
[2011/06/20 22:26:52 | 000,137,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2011/06/20 22:26:52 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2011/06/20 22:26:52 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
[2011/06/20 22:26:52 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2011/06/20 22:26:52 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2011/06/20 22:26:52 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\[You must be registered and logged in to see this link.]
[2011/06/20 22:26:51 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
[2011/06/20 22:26:51 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
[2011/06/20 22:26:51 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
[2011/06/20 22:26:51 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2011/06/20 22:26:51 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
[2011/06/20 22:26:51 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
[2011/06/20 22:26:51 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
[2011/06/20 22:26:51 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
[2011/06/20 22:26:51 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
[2011/06/20 22:26:51 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
[2011/06/20 22:26:51 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011/06/20 22:26:51 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
[2011/06/20 22:26:51 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011/06/20 22:26:51 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2011/06/20 22:26:51 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
[2011/06/20 22:26:50 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
[2011/06/20 22:26:50 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2011/06/20 22:26:50 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2011/06/20 22:26:50 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
[2011/06/20 22:26:50 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
[2011/06/20 22:26:50 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2011/06/20 22:26:50 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
[2011/06/20 22:26:50 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
[2011/06/20 22:26:50 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2011/06/20 22:26:50 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
[2011/06/20 22:26:50 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvecpl.dll
[2011/06/20 22:26:50 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2011/06/20 22:26:50 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
[2011/06/20 22:26:50 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
[2011/06/20 22:26:50 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
[2011/06/20 22:26:50 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
[2011/06/20 22:26:50 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpsign.exe
[2011/06/20 22:26:49 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
[2011/06/20 22:26:48 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2011/06/20 22:26:48 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
[2011/06/20 22:26:48 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
[2011/06/20 22:26:48 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
[2011/06/20 22:26:48 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
[2011/06/20 22:26:48 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayServices.dll
[2011/06/20 22:26:48 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
[2011/06/20 22:26:48 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
[2011/06/20 22:26:48 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
[2011/06/20 22:26:48 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
[2011/06/20 22:26:48 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2011/06/20 22:26:48 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpchbuspipe.dll
[2011/06/20 22:26:47 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2011/06/20 22:26:47 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
[2011/06/20 22:26:47 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2011/06/20 22:26:47 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
[2011/06/20 22:26:47 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
[2011/06/20 22:26:47 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
[2011/06/20 22:26:47 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
[2011/06/20 22:26:47 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
[2011/06/20 22:26:47 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2011/06/20 22:26:47 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
[2011/06/20 22:26:46 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
[2011/06/20 22:26:46 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AdmTmpl.dll
[2011/06/20 22:26:46 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
[2011/06/20 22:26:46 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
[2011/06/20 22:26:46 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
[2011/06/20 22:26:46 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
[2011/06/20 22:26:46 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011/06/20 22:26:46 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
[2011/06/20 22:26:46 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationSettings.exe
[2011/06/20 22:26:46 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
[2011/06/20 22:26:46 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
[2011/06/20 22:26:46 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011/06/20 22:26:46 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2011/06/20 22:26:46 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2011/06/20 22:26:45 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
[2011/06/20 22:26:45 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2011/06/20 22:26:45 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
[2011/06/20 22:26:45 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
[2011/06/20 22:26:45 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
[2011/06/20 22:26:45 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
[2011/06/20 22:26:45 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2011/06/20 22:26:45 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
[2011/06/20 22:26:45 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2011/06/20 22:26:45 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
[2011/06/20 22:26:45 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011/06/20 22:26:44 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
[2011/06/20 22:26:44 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
[2011/06/20 22:26:44 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
[2011/06/20 22:26:44 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
[2011/06/20 22:26:44 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iTVData.dll
[2011/06/20 22:26:44 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
[2011/06/20 22:26:44 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\input.dll
[2011/06/20 22:26:44 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
[2011/06/20 22:26:44 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
[2011/06/20 22:26:44 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
[2011/06/20 22:26:44 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
[2011/06/20 22:26:44 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011/06/20 22:26:44 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2011/06/20 22:26:44 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011/06/20 22:26:44 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
[2011/06/20 22:26:44 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2011/06/20 22:26:44 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
[2011/06/20 22:26:44 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
[2011/06/20 22:26:44 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
[2011/06/20 22:26:44 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2011/06/20 22:26:43 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
[2011/06/20 22:26:43 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
[2011/06/20 22:26:43 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2011/06/20 22:26:43 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
[2011/06/20 22:26:43 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
[2011/06/20 22:26:43 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
[2011/06/20 22:26:43 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
[2011/06/20 22:26:43 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2011/06/20 22:26:43 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
[2011/06/20 22:26:43 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2011/06/20 22:26:43 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
[2011/06/20 22:26:43 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
[2011/06/20 22:26:43 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
[2011/06/20 22:26:43 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
[2011/06/20 22:26:43 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
[2011/06/20 22:26:43 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
[2011/06/20 22:26:42 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
[2011/06/20 22:26:42 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
[2011/06/20 22:26:42 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
[2011/06/20 22:26:42 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
[2011/06/20 22:26:42 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2011/06/20 22:26:42 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
[2011/06/20 22:26:42 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
[2011/06/20 22:26:42 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
[2011/06/20 22:26:42 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
[2011/06/20 22:26:42 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2011/06/20 22:26:42 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
[2011/06/20 22:26:42 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
[2011/06/20 22:26:42 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
[2011/06/20 22:26:42 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CscMig.dll
[2011/06/20 22:26:42 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
[2011/06/20 22:26:42 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
[2011/06/20 22:26:42 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
[2011/06/20 22:26:42 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
[2011/06/20 22:26:42 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
[2011/06/20 22:26:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
[2011/06/20 22:26:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
[2011/06/20 22:26:42 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2011/06/20 22:26:42 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
[2011/06/20 22:26:42 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
[2011/06/20 22:26:42 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
[2011/06/20 22:26:42 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2011/06/20 22:26:42 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2011/06/20 22:26:42 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
[2011/06/20 22:26:41 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
[2011/06/20 22:26:41 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
[2011/06/20 22:26:41 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdv.dll
[2011/06/20 22:26:41 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
[2011/06/20 22:26:41 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
[2011/06/20 22:26:41 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
[2011/06/20 22:26:41 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
[2011/06/20 22:26:41 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
[2011/06/20 22:26:41 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
[2011/06/20 22:26:41 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
[2011/06/20 22:26:41 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
[2011/06/20 22:26:41 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
[2011/06/20 22:26:41 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
[2011/06/20 22:26:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2011/06/20 22:26:40 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
[2011/06/20 22:26:40 | 000,567,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2011/06/20 22:26:40 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
[2011/06/20 22:26:40 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
[2011/06/20 22:26:40 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
[2011/06/20 22:26:40 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
[2011/06/20 22:26:40 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
[2011/06/20 22:26:40 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
[2011/06/20 22:26:40 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
[2011/06/20 22:26:40 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
[2011/06/20 22:26:40 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
[2011/06/20 22:26:40 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2011/06/20 22:26:40 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
[2011/06/20 22:26:40 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qprocess.exe
[2011/06/20 22:26:40 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msg.exe
[2011/06/20 22:26:39 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
[2011/06/20 22:26:39 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2011/06/20 22:26:39 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
[2011/06/20 22:26:39 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qwinsta.exe
[2011/06/20 22:26:39 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chglogon.exe
[2011/06/20 22:26:38 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
[2011/06/20 22:26:38 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
[2011/06/20 22:26:38 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
[2011/06/20 22:26:38 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
[2011/06/20 22:26:38 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
[2011/06/20 22:26:38 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
[2011/06/20 22:26:38 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfg.exe
[2011/06/20 22:26:38 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2011/06/20 22:26:38 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2011/06/20 22:26:38 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amstream.dll
[2011/06/20 22:26:38 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
[2011/06/20 22:26:38 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
[2011/06/20 22:26:38 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
[2011/06/20 22:26:38 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2011/06/20 22:26:38 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
[2011/06/20 22:26:38 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
[2011/06/20 22:26:38 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
[2011/06/20 22:26:38 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
[2011/06/20 22:26:38 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2011/06/20 22:26:38 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
[2011/06/20 22:26:38 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quser.exe
[2011/06/20 22:26:38 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chgport.exe
[2011/06/20 22:26:38 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qappsrv.exe
[2011/06/20 22:26:38 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chgusr.exe
[2011/06/20 22:26:38 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
[2011/06/20 22:26:38 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
[2011/06/20 22:26:37 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
[2011/06/20 22:26:37 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2011/06/20 22:26:37 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2011/06/20 22:26:37 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
[2011/06/20 22:26:37 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
[2011/06/20 22:26:37 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2011/06/20 22:26:37 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
[2011/06/20 22:26:37 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
[2011/06/20 22:26:37 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2011/06/20 22:26:37 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciqtz32.dll
[2011/06/20 22:26:37 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2011/06/20 22:26:37 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
[2011/06/20 22:26:37 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
[2011/06/20 22:26:37 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tskill.exe
[2011/06/20 22:26:37 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsdiscon.exe
[2011/06/20 22:26:37 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
[2011/06/20 22:26:37 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tscon.exe
[2011/06/20 22:26:37 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoff.exe
[2011/06/20 22:26:37 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shadow.exe
[2011/06/20 22:26:37 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rwinsta.exe
[2011/06/20 22:26:37 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
[2011/06/20 22:26:36 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
[2011/06/20 22:26:36 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
[2011/06/20 22:26:36 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmicres.dll
[2011/06/20 22:26:36 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
[2011/06/20 22:26:36 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
[2011/06/20 22:26:36 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
[2011/06/20 22:26:36 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmstorfltres.dll
[2011/06/20 22:26:36 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2011/06/20 22:26:36 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
[2011/06/20 22:26:36 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
[2011/06/20 22:26:36 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
[2011/06/20 22:26:36 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
[2011/06/20 22:26:36 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2011/06/20 22:26:36 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
[2011/06/20 22:26:36 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
[2011/06/20 22:26:36 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
[2011/06/20 22:26:36 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
[2011/06/20 22:26:36 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\reset.exe
[2011/06/20 22:26:36 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\change.exe
[2011/06/20 22:26:36 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\query.exe
[2011/06/20 22:26:35 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2011/06/20 22:26:35 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmbusres.dll
[2011/06/20 22:26:35 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2011/06/20 22:26:35 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
[2011/06/20 22:26:35 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2011/06/20 22:26:35 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
[2011/06/20 22:26:35 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2011/06/20 22:26:35 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
[2011/06/20 22:26:34 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
[2011/06/20 22:26:34 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
[2011/06/20 22:26:34 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
[2011/06/20 22:26:34 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
[2011/06/20 22:26:34 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
[2011/06/20 22:26:34 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
[2011/06/20 22:26:34 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
[2011/06/20 22:26:34 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
[2011/06/20 22:26:34 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011/06/20 22:26:33 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
[2011/06/20 22:26:33 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011/06/20 22:26:33 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2011/06/20 22:26:33 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
[2011/06/20 22:26:33 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\VMBusHID.sys
[2011/06/20 22:26:33 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
[2011/06/20 22:26:33 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2011/06/20 22:26:33 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
[2011/06/20 22:26:32 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VmbusCoinstaller.dll
[2011/06/20 22:26:32 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VmdCoinstall.dll
[2011/06/20 22:26:32 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IcCoinstall.dll
[2011/06/20 22:26:32 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmictimeprovider.dll
[2011/06/20 22:26:32 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
[2011/06/20 22:26:32 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
[2011/06/20 22:26:32 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
[2011/06/20 22:26:32 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmbuspipe.dll
[2011/06/20 22:26:32 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
[2011/06/20 22:26:32 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
[2011/06/20 22:26:32 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2011/06/20 22:26:31 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2011/06/20 22:26:31 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
[2011/06/20 22:26:31 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2011/06/20 22:26:31 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2011/06/20 22:26:30 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
[2011/06/20 22:26:30 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
[2011/06/20 22:26:30 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
[2011/06/20 22:26:30 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
[2011/06/20 22:26:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
[2011/06/20 22:26:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
[2011/06/20 22:26:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
[2011/06/20 22:26:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
[2011/06/20 22:26:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
[2011/06/20 22:26:30 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vms3cap.sys
[2011/06/20 22:26:30 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
[2011/06/20 22:26:30 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
[2011/06/20 22:26:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcvmm.sys.mui
[2011/06/20 22:26:26 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpchbus.sys.mui
[2011/06/20 22:26:26 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcuxd.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcusb.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcnfltr.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcnfltr.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcnfltr.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcnfltr.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcnfltr.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcnfltr.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcnfltr.sys.mui
[2011/06/20 22:26:26 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcvmm.sys.mui
[2011/06/20 22:26:25 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpchbus.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcuxd.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcusb.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcnfltr.sys.mui
[2011/06/20 22:26:25 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcnfltr.sys.mui
[2011/06/20 22:26:12 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
[2011/06/20 22:26:12 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2011/06/20 22:26:08 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
[2011/06/20 22:26:06 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
[2011/06/20 22:26:06 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
[2011/06/20 22:25:56 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
[2011/06/20 22:25:56 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2011/06/20 22:06:50 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Sat 17 Dec 2011, 3:57 pm

[2011/06/20 22:06:34 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2011/06/20 22:06:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2011/06/20 22:06:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2011/06/17 09:31:19 | 000,187,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2011/06/17 09:31:10 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2011/06/17 09:31:10 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2011/06/11 14:30:37 | 000,086,016 | ---- | C] (MindVision Software) -- C:\Windows\unvise32.exe
[2011/06/11 14:30:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aleks 3.14
[2011/06/11 14:30:37 | 000,000,000 | ---D | C] -- C:\Program Files\Aleks 3.14
[2011/05/31 19:45:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype Extras
[2011/05/24 21:18:42 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2011/05/24 06:30:31 | 000,414,368 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2011/05/17 13:51:01 | 000,000,000 | ---D | C] -- C:\Users\Ron\Desktop\work pics
[2011/05/12 06:09:17 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2011/05/10 20:58:38 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2011/05/10 20:58:38 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2011/05/05 20:50:26 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2011/05/05 20:50:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2011/05/05 20:49:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Rosetta Stone
[2011/05/05 20:49:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rosetta Stone
[2011/05/05 20:49:07 | 000,000,000 | ---D | C] -- C:\Program Files\Rosetta Stone
[2011/05/05 20:48:32 | 000,000,000 | ---D | C] -- C:\ProgramData\RosettaStoneLtdServices
[2011/05/05 20:48:32 | 000,000,000 | ---D | C] -- C:\Program Files\RosettaStoneLtdServices
[2011/04/29 21:54:49 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2011/04/29 21:54:24 | 000,148,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2011/04/29 21:54:24 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2011/04/29 21:54:11 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/04/29 21:54:06 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011/04/19 20:26:24 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Juniper Networks
[2011/04/14 20:52:20 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011/04/14 20:52:18 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011/04/14 20:52:18 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011/04/14 20:51:47 | 000,802,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WFS.exe
[2011/04/14 20:51:47 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2011/04/14 20:51:46 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011/04/14 20:51:43 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011/04/14 20:51:43 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011/03/08 22:47:05 | 001,076,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011/03/08 22:47:05 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2011/03/08 22:47:03 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2011/03/08 22:47:03 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2011/03/08 22:47:03 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2011/03/08 22:47:03 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2011/03/02 22:39:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/03/02 22:39:38 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2011/03/02 22:39:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2011/03/02 22:39:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2011/03/02 22:39:03 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\Apple
[2011/03/02 22:39:01 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2011/03/02 22:39:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2011/02/15 23:47:57 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\WinRAR
[2011/02/15 23:44:02 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011/02/15 23:44:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011/02/15 23:43:59 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2011/02/08 19:16:09 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2011/02/08 19:16:01 | 000,219,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2011/02/08 19:16:01 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2011/01/22 16:54:54 | 000,000,000 | ---D | C] -- C:\Users\Ron\Documents\Dell WebCam Central
[2011/01/22 16:54:54 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Creative
[2011/01/22 16:54:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2011/01/14 23:46:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011/01/14 23:46:05 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2011/01/11 22:57:03 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2011/01/11 22:56:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2011/01/11 22:55:56 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2011/01/11 22:55:49 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/12/23 18:38:31 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Flip Video
[2010/12/23 18:36:54 | 000,000,000 | ---D | C] -- C:\Program Files\Flip Video
[2010/12/23 18:29:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Flip Video
[2010/12/23 16:37:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2010/12/23 15:31:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec
[2010/12/23 15:31:09 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan
[2010/12/23 15:31:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NSS
[2010/12/23 15:31:09 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Security Scan
[2010/12/23 15:31:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2010/12/23 15:31:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NSS\0300000.067
[2010/12/23 15:31:07 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2010/12/23 15:31:07 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2010/12/22 22:21:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
[2010/12/20 20:35:11 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[2010/12/20 20:28:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010/12/20 20:28:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010/12/20 20:28:01 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010/12/20 20:28:00 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\Adobe
[2010/12/20 20:26:23 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee Security Scan
[2010/12/20 20:26:23 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2010/12/20 20:26:21 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan
[2010/12/19 23:24:30 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\skypePM
[2010/12/19 23:22:47 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2010/12/19 23:22:47 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Skype
[2010/12/19 23:22:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2010/12/19 22:58:20 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Mozilla
[2010/12/19 22:58:20 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\Mozilla
[2010/12/19 22:58:12 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/12/19 22:50:52 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Google
[2010/12/19 15:11:03 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Macromedia
[2010/12/19 15:10:50 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Adobe
[2010/12/19 15:10:45 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2010/12/19 15:10:29 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2010/12/19 15:10:14 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\Google
[2010/12/19 15:09:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2010/12/19 15:09:53 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010/12/17 17:45:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/12/17 17:15:54 | 000,132,480 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\Impcd.sys
[2010/12/17 17:09:37 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2010/12/17 17:09:11 | 000,000,000 | ---D | C] -- C:\ATI
[2010/12/17 17:06:44 | 000,000,000 | ---D | C] -- C:\AMD
[2010/12/17 16:58:08 | 000,222,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2010/12/17 16:07:36 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\ElevatedDiagnostics
[2010/12/17 15:50:33 | 000,143,968 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\System32\drivers\CtClsFlt.sys
[2010/12/17 15:50:33 | 000,134,144 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\System32\drivers\CtAudDrv.sys
[2010/12/17 15:50:30 | 000,000,000 | ---D | C] -- C:\Program Files\Creative Live! Cam
[2010/12/17 15:48:23 | 000,212,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RICHTX32.OCX
[2010/12/17 15:48:23 | 000,040,960 | ---- | C] (vbAccelerator) -- C:\Windows\System32\SSubTmr6.dll
[2010/12/17 15:48:19 | 000,036,921 | ---- | C] (Hauppauge Computer Works) -- C:\Windows\System32\hcwutl32.dll
[2010/12/17 15:48:19 | 000,000,000 | ---D | C] -- C:\Program Files\HCW72
[2010/12/17 15:24:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Dell
[2010/12/17 15:19:29 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\Diagnostics
[2010/12/17 15:13:20 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\System32\CSVer.dll
[2010/12/17 15:10:10 | 000,094,208 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
[2010/12/17 15:10:10 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2010/12/17 14:57:30 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2010/12/17 14:55:28 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2010/12/17 14:55:20 | 000,000,000 | ---D | C] -- C:\Intel
[2010/12/17 14:51:43 | 000,000,000 | ---D | C] -- C:\Program Files\Cisco
[2010/12/17 14:50:38 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Wireless
[2010/12/17 14:50:06 | 001,054,720 | ---- | C] (Dell Inc.) -- C:\Windows\System32\BCMLogon.dll
[2010/12/17 14:49:56 | 007,334,400 | ---- | C] (Dell Inc.) -- C:\Windows\System32\BCMWLCPL.CPL
[2010/12/17 14:49:56 | 004,534,272 | ---- | C] (Dell Inc.) -- C:\Windows\System32\bcmttls.dll
[2010/12/17 14:49:56 | 002,682,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vcredist_x86.exe
[2010/12/17 14:49:56 | 000,051,712 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\wltrynt.dll
[2010/12/17 14:49:56 | 000,018,424 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\bcm42rly.sys
[2010/12/17 14:49:56 | 000,000,000 | ---D | C] -- C:\Windows\System32\vs08
[2010/12/17 14:49:54 | 004,210,688 | ---- | C] (Dell Inc.) -- C:\Windows\System32\bcmihvsrv.dll
[2010/12/17 14:49:54 | 003,903,488 | ---- | C] (Dell Inc.) -- C:\Windows\System32\bcmihvui.dll
[2010/12/17 14:49:54 | 000,091,376 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\bcmwlcoi.dll
[2010/12/17 14:45:50 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Reallusion
[2010/12/17 14:45:46 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Reallusion
[2010/12/17 14:45:34 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\InstallShield
[2010/12/17 14:45:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Webcam
[2010/12/17 14:45:21 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2010/12/17 14:45:04 | 000,000,000 | ---D | C] -- C:\Program Files\Dell Webcam
[2010/12/17 14:44:40 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010/12/17 14:44:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010/12/17 14:44:32 | 000,000,000 | ---D | C] -- C:\Dell
[2010/12/17 14:38:47 | 000,000,000 | ---D | C] -- C:\Windows\System32\vmm32
[2010/12/17 14:38:47 | 000,000,000 | ---D | C] -- C:\Program Files\Dell
[2010/12/17 14:38:21 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010/12/17 14:33:32 | 000,000,000 | R--D | C] -- C:\Users\Ron\Virtual Machines
[2010/12/17 14:33:32 | 000,000,000 | R--D | C] -- C:\Users\Ron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2010/12/17 14:33:32 | 000,000,000 | R--D | C] -- C:\Users\Ron\Searches
[2010/12/17 14:33:32 | 000,000,000 | R--D | C] -- C:\Users\Ron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2010/12/17 14:33:32 | 000,000,000 | -H-D | C] -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2010/12/17 14:33:23 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Identities
[2010/12/17 14:33:21 | 000,000,000 | R--D | C] -- C:\Users\Ron\Contacts
[2010/12/17 14:33:16 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\VirtualStore
[2010/12/17 14:33:13 | 000,000,000 | --SD | C] -- C:\Users\Ron\AppData\Roaming\Microsoft
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Videos
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Saved Games
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Pictures
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Music
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Links
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Favorites
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Downloads
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Documents
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\Desktop
[2010/12/17 14:33:13 | 000,000,000 | R--D | C] -- C:\Users\Ron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\AppData\Local\Temporary Internet Files
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Templates
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Start Menu
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\SendTo
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Recent
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\PrintHood
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\NetHood
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Documents\My Videos
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Documents\My Pictures
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Documents\My Music
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\My Documents
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Local Settings
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\AppData\Local\History
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Cookies
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\Application Data
[2010/12/17 14:33:13 | 000,000,000 | -HSD | C] -- C:\Users\Ron\AppData\Local\Application Data
[2010/12/17 14:33:13 | 000,000,000 | -H-D | C] -- C:\Users\Ron\AppData
[2010/12/17 14:33:13 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\Temp
[2010/12/17 14:33:13 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Local\Microsoft
[2010/12/17 14:33:13 | 000,000,000 | ---D | C] -- C:\Users\Ron\AppData\Roaming\Media Center Programs
[2010/12/17 14:32:53 | 000,000,000 | -HSD | C] -- C:\Recovery
[2010/12/17 14:29:23 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010/12/17 14:26:27 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010/12/17 14:26:07 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010/12/17 14:25:18 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010/11/29 18:38:30 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2010/11/29 18:38:30 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2010/08/25 20:46:02 | 008,198,680 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\TVWSetup.exe
[2010/08/25 20:45:32 | 003,156,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe
[2010/08/25 20:39:46 | 000,081,920 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxCoIn_v2202.dll
[2010/08/25 20:31:30 | 004,967,424 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll
[2010/08/25 20:28:22 | 000,571,904 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igdumdx32.dll
[2010/08/25 20:23:14 | 004,411,904 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
[2010/08/25 20:09:34 | 011,040,256 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll
[2010/08/25 20:02:36 | 000,086,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc
[2010/08/25 20:02:36 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc
[2010/08/25 20:02:34 | 000,086,528 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc
[2010/08/25 20:02:34 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc
[2010/08/25 20:02:34 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc
[2010/08/25 20:02:34 | 000,084,992 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc
[2010/08/25 20:02:32 | 000,086,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc
[2010/08/25 20:02:32 | 000,086,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc
[2010/08/25 20:02:32 | 000,086,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc
[2010/08/25 20:02:32 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc
[2010/08/25 20:02:32 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc
[2010/08/25 20:02:30 | 000,086,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc
[2010/08/25 20:02:30 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc
[2010/08/25 20:02:30 | 000,084,480 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc
[2010/08/25 20:02:30 | 000,082,944 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc
[2010/08/25 20:02:30 | 000,082,944 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc
[2010/08/25 20:02:28 | 000,086,528 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
[2010/08/25 20:02:28 | 000,086,528 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc
[2010/08/25 20:02:28 | 000,086,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc
[2010/08/25 20:02:28 | 000,086,016 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc
[2010/08/25 20:02:28 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc
[2010/08/25 20:02:26 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc
[2010/08/25 20:02:26 | 000,084,992 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc
[2010/08/25 20:02:26 | 000,084,480 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc
[2010/08/25 20:02:26 | 000,081,920 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc
[2010/08/25 20:02:26 | 000,081,920 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc
[2010/08/25 20:00:00 | 000,194,560 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll
[2010/08/25 20:00:00 | 000,023,552 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll
[2010/08/25 19:59:58 | 000,261,632 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll
[2010/08/25 19:59:58 | 000,115,200 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl
[2010/08/25 19:59:42 | 000,057,344 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
[2010/08/25 19:59:24 | 000,130,048 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll
[2010/08/25 19:59:16 | 000,094,720 | ---- | C] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
[2010/08/25 19:59:10 | 000,120,320 | ---- | C] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll
[2010/08/25 19:59:08 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2010/08/25 19:59:06 | 000,828,928 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxress.dll
[2010/08/25 19:59:06 | 000,085,504 | ---- | C] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc
[2010/08/25 19:52:00 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2010/03/18 14:16:28 | 000,771,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr100_clr0400.dll
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\zh-TW
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\zh-CN
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Virtual PC
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\tr-TR
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\th-TH
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\sv-SE
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\ru-RU
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\ro-RO
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\pt-PT
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\pt-BR
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\pl-PL
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\nl-NL
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\nb-NO
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\ko-KR
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\ja-JP
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\it-IT
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\hu-HU
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\he-IL
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\fr-FR
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\fi-FI
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\es-ES
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\el-GR
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\de-DE
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\da-DK
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\cs-CZ
[2009/10/21 14:42:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\ar-SA
[2009/10/21 14:42:06 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Virtual PC
[2009/08/20 13:08:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2009/08/20 13:05:42 | 000,258,560 | ---- | C] (OldTimer Tools) -- C:\Users\Ron\Desktop\OTH.scr
[2009/08/20 01:06:58 | 009,852,544 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Ron\Desktop\mbam-setup-1.51.2.1300.exe

========== Files - Modified Within 30 Days ==========

[2011/12/15 08:56:37 | 236,728,380 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011/12/15 08:49:47 | 001,916,416 | ---- | M] (AVAST Software) -- C:\Users\Ron\Desktop\aswMBR.exe
[2011/12/15 08:23:33 | 000,625,770 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/12/15 08:23:33 | 000,107,104 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/12/14 20:20:00 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3781001262-1337088569-1083179482-1000UA.job
[2011/12/14 20:01:00 | 000,000,880 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/12/14 19:05:15 | 000,000,848 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3781001262-1337088569-1083179482-1000Core.job
[2011/12/12 20:33:22 | 000,000,406 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Ron.job
[2011/12/09 21:25:11 | 000,002,002 | ---- | M] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/11/20 21:08:33 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2011/11/18 21:12:59 | 000,002,170 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011/11/18 08:13:39 | 000,002,290 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2011/11/10 20:51:27 | 000,266,808 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/11/06 14:49:45 | 000,001,005 | ---- | M] () -- C:\Users\Public\Desktop\Mplayer.lnk
[2011/09/30 19:42:56 | 001,638,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011/09/28 20:37:56 | 002,341,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011/09/12 21:41:30 | 000,002,189 | ---- | M] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/09/08 21:01:26 | 000,002,503 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2011/09/08 21:00:26 | 000,001,346 | ---- | M] () -- C:\Users\Ron\Desktop\Norton Installation Files.lnk
[2011/08/19 21:30:50 | 000,132,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011/08/19 21:27:45 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011/08/19 21:27:07 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011/08/19 21:26:56 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011/08/16 21:24:12 | 000,465,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2011/08/16 21:19:27 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2011/07/15 21:15:46 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2011/07/15 21:15:46 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2011/07/15 21:15:46 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2011/07/15 21:15:45 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2011/07/15 21:15:45 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2011/07/15 21:15:45 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2011/07/15 21:15:45 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2011/07/15 21:15:45 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2011/07/15 21:15:45 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2011/07/15 19:17:19 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2011/07/15 19:17:19 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2011/07/15 19:17:19 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2011/07/15 19:17:19 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2011/07/08 21:29:46 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011/06/25 07:51:22 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
[2011/06/23 21:27:01 | 000,169,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2011/06/23 21:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2011/06/22 21:33:57 | 003,967,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011/06/22 21:33:57 | 003,912,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011/06/21 15:13:28 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011/06/15 01:55:19 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2011/06/15 01:55:19 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2011/06/15 01:55:19 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2011/06/15 01:55:19 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2011/06/15 01:55:19 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2011/05/24 19:14:10 | 000,222,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2011/05/05 20:51:27 | 000,001,089 | ---- | M] () -- C:\Users\Public\Desktop\Rosetta Stone TOTALe.lnk
[2011/05/04 04:52:34 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2011/05/04 04:52:33 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2011/05/04 04:52:32 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2011/05/04 04:52:22 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deployJava1.dll
[2011/05/03 21:34:43 | 001,549,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2011/05/03 21:32:02 | 000,666,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2011/05/03 21:32:01 | 001,401,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2011/05/03 21:32:01 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2011/05/03 21:32:01 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2011/05/03 21:32:00 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2011/04/22 12:14:16 | 000,027,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2011/04/08 22:56:38 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2011/03/24 19:58:07 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2011/03/24 19:57:53 | 000,005,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2011/03/12 04:23:45 | 000,870,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/03/10 22:39:05 | 000,148,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2011/03/10 22:33:59 | 001,164,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011/03/10 22:33:59 | 001,137,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011/03/10 22:31:07 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2011/03/02 22:39:49 | 000,001,815 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011/03/02 22:36:16 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011/02/24 22:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011/02/23 22:38:54 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2011/02/18 23:30:51 | 001,076,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2011/02/18 23:30:50 | 000,739,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2011/02/18 23:30:46 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011/02/18 21:34:54 | 000,294,912 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011/02/17 22:39:44 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2011/02/15 23:44:02 | 000,000,997 | ---- | M] () -- C:\Users\Ron\Desktop\WinRAR.lnk
[2011/02/11 22:35:31 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2011/02/04 23:53:30 | 000,895,054 | ---- | M] () -- C:\Users\Ron\Desktop\IMG_3298.JPG
[2011/02/02 22:54:43 | 000,219,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2011/01/16 22:47:13 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2011/01/12 23:18:55 | 003,962,295 | ---- | M] () -- C:\Users\Ron\Desktop\IMG_3970.JPG
[2011/01/12 07:45:10 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/12/23 18:38:35 | 000,004,608 | ---- | M] () -- C:\Users\Ron\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/23 18:36:57 | 000,001,052 | ---- | M] () -- C:\Users\Public\Desktop\FlipShare.lnk
[2010/12/23 18:29:59 | 000,001,015 | R--- | M] () -- C:\logFile.xsl

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Sat 17 Dec 2011, 3:58 pm

[2010/12/23 15:31:12 | 000,001,317 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Scan.lnk
[2010/12/22 22:54:17 | 000,642,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2010/12/22 22:50:23 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2010/12/22 22:21:44 | 000,001,812 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2010/12/22 22:21:44 | 000,001,810 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2010/12/19 23:24:31 | 000,000,056 | -H-- | M] () -- C:\Windows\System32\ezsidmv.dat
[2010/12/19 22:58:21 | 000,000,000 | ---- | M] () -- C:\Windows\nsreg.dat
[2010/12/19 22:58:14 | 000,001,889 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/12/17 16:05:44 | 000,001,411 | ---- | M] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/12/17 15:51:45 | 000,000,074 | RHS- | M] () -- C:\Windows\CT4CET.bin
[2010/12/17 14:50:28 | 000,899,942 | ---- | M] () -- C:\Windows\System32\oem2.inf
[2010/12/17 14:30:13 | 000,042,045 | ---- | M] () -- C:\Windows\System32\license.rtf
[2010/12/17 14:28:05 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/12/12 23:26:46 | 000,000,172 | ---- | M] () -- C:\Windows\System32\drivers\NSS\0300000.067\isolate.ini
[2010/11/29 18:38:30 | 000,094,208 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2010/11/29 18:38:30 | 000,069,632 | ---- | M] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2010/11/20 06:43:57 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpchbus.sys.mui
[2010/11/20 06:43:19 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcvmm.sys.mui
[2010/11/20 06:43:12 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcuxd.sys.mui
[2010/11/20 06:42:12 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcnfltr.sys.mui
[2010/11/20 06:39:38 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcvmm.sys.mui
[2010/11/20 06:39:07 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcuxd.sys.mui
[2010/11/20 06:39:00 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcvmm.sys.mui
[2010/11/20 06:38:30 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpchbus.sys.mui
[2010/11/20 06:37:10 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpcusb.sys.mui
[2010/11/20 06:36:58 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcnfltr.sys.mui
[2010/11/20 06:36:47 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcusb.sys.mui
[2010/11/20 06:35:57 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcusb.sys.mui
[2010/11/20 06:35:37 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-TW\vpcuxd.sys.mui
[2010/11/20 06:35:15 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\zh-CN\vpchbus.sys.mui
[2010/11/20 06:33:42 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ko-KR\vpcnfltr.sys.mui
[2010/11/20 06:03:33 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpchbus.sys.mui
[2010/11/20 06:03:33 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpchbus.sys.mui
[2010/11/20 06:00:30 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcvmm.sys.mui
[2010/11/20 06:00:30 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcvmm.sys.mui
[2010/11/20 06:00:25 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcuxd.sys.mui
[2010/11/20 06:00:25 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcuxd.sys.mui
[2010/11/20 05:58:37 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcvmm.sys.mui
[2010/11/20 05:57:14 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcvmm.sys.mui
[2010/11/20 05:56:18 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpchbus.sys.mui
[2010/11/20 05:56:17 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpchbus.sys.mui
[2010/11/20 05:56:06 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpchbus.sys.mui
[2010/11/20 05:55:47 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcvmm.sys.mui
[2010/11/20 05:55:32 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpchbus.sys.mui
[2010/11/20 05:55:24 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcuxd.sys.mui
[2010/11/20 05:55:20 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcuxd.sys.mui
[2010/11/20 05:55:14 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcvmm.sys.mui
[2010/11/20 05:55:10 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcuxd.sys.mui
[2010/11/20 05:54:34 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcnfltr.sys.mui
[2010/11/20 05:53:50 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcvmm.sys.mui
[2010/11/20 05:53:41 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcvmm.sys.mui
[2010/11/20 05:53:11 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcnfltr.sys.mui
[2010/11/20 05:53:10 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpchbus.sys.mui
[2010/11/20 05:52:52 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcnfltr.sys.mui
[2010/11/20 05:52:52 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcnfltr.sys.mui
[2010/11/20 05:52:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcuxd.sys.mui
[2010/11/20 05:51:21 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcnfltr.sys.mui
[2010/11/20 05:51:21 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcnfltr.sys.mui
[2010/11/20 05:51:19 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcusb.sys.mui
[2010/11/20 05:51:19 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcusb.sys.mui
[2010/11/20 05:51:16 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcusb.sys.mui
[2010/11/20 05:51:06 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-BR\vpcusb.sys.mui
[2010/11/20 05:50:00 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpchbus.sys.mui
[2010/11/20 05:49:02 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tr-TR\vpcuxd.sys.mui
[2010/11/20 05:48:59 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcuxd.sys.mui
[2010/11/20 05:48:30 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpchbus.sys.mui
[2010/11/20 05:48:28 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpchbus.sys.mui
[2010/11/20 05:48:24 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcvmm.sys.mui
[2010/11/20 05:48:06 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpchbus.sys.mui
[2010/11/20 05:48:03 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpchbus.sys.mui
[2010/11/20 05:47:57 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcvmm.sys.mui
[2010/11/20 05:47:55 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcuxd.sys.mui
[2010/11/20 05:47:49 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcvmm.sys.mui
[2010/11/20 05:47:47 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ru-RU\vpcuxd.sys.mui
[2010/11/20 05:47:46 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pl-PL\vpcuxd.sys.mui
[2010/11/20 05:47:45 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcvmm.sys.mui
[2010/11/20 05:47:45 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpchbus.sys.mui
[2010/11/20 05:47:44 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcuxd.sys.mui
[2010/11/20 05:47:37 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcuxd.sys.mui
[2010/11/20 05:47:31 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcuxd.sys.mui
[2010/11/20 05:47:27 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcusb.sys.mui
[2010/11/20 05:47:25 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hu-HU\vpcnfltr.sys.mui
[2010/11/20 05:47:20 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcusb.sys.mui
[2010/11/20 05:47:17 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcvmm.sys.mui
[2010/11/20 05:47:15 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcuxd.sys.mui
[2010/11/20 05:47:12 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcuxd.sys.mui
[2010/11/20 05:47:09 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcvmm.sys.mui
[2010/11/20 05:46:06 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcusb.sys.mui
[2010/11/20 05:45:29 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcnfltr.sys.mui
[2010/11/20 05:45:23 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcnfltr.sys.mui
[2010/11/20 05:45:18 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcnfltr.sys.mui
[2010/11/20 05:45:08 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\th-TH\vpcusb.sys.mui
[2010/11/20 05:45:08 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ro-RO\vpcusb.sys.mui
[2010/11/20 05:45:07 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcnfltr.sys.mui
[2010/11/20 05:44:34 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpchbus.sys.mui
[2010/11/20 05:44:30 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcnfltr.sys.mui
[2010/11/20 05:43:52 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sv-SE\vpcusb.sys.mui
[2010/11/20 05:43:52 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pt-PT\vpcusb.sys.mui
[2010/11/20 05:43:34 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcusb.sys.mui
[2010/11/20 05:43:30 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpchbus.sys.mui
[2010/11/20 05:43:25 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\it-IT\vpcnfltr.sys.mui
[2010/11/20 05:42:13 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcnfltr.sys.mui
[2010/11/20 05:41:46 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpchbus.sys.mui
[2010/11/20 05:41:36 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcnfltr.sys.mui
[2010/11/20 05:41:09 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpchbus.sys.mui
[2010/11/20 05:41:07 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcvmm.sys.mui
[2010/11/20 05:41:04 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpchbus.sys.mui
[2010/11/20 05:40:46 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcvmm.sys.mui
[2010/11/20 05:40:39 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcuxd.sys.mui
[2010/11/20 05:40:31 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcvmm.sys.mui
[2010/11/20 05:40:14 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fi-FI\vpcuxd.sys.mui
[2010/11/20 05:39:13 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcvmm.sys.mui
[2010/11/20 05:38:44 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcnfltr.sys.mui
[2010/11/20 05:38:41 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcnfltr.sys.mui
[2010/11/20 05:37:32 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ar-SA\vpcnfltr.sys.mui
[2010/11/20 05:37:10 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cs-CZ\vpcusb.sys.mui
[2010/11/20 05:36:42 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nb-NO\vpcusb.sys.mui
[2010/11/20 05:36:34 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\he-IL\vpcusb.sys.mui
[2010/11/20 05:36:30 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\da-DK\vpcusb.sys.mui
[2010/11/20 05:36:22 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nl-NL\vpcusb.sys.mui
[2010/11/20 05:36:11 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\el-GR\vpcusb.sys.mui
[2010/11/20 05:36:00 | 001,077,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
[2010/11/20 05:36:00 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
[2010/11/20 05:36:00 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
[2010/11/20 05:32:20 | 005,066,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
[2010/11/20 05:30:17 | 000,296,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpcvmm.sys
[2010/11/20 05:30:17 | 000,172,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpchbus.sys
[2010/11/20 05:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmbus.sys
[2010/11/20 05:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmstorfl.sys
[2010/11/20 05:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\storvsc.sys
[2010/11/20 05:30:10 | 000,140,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
[2010/11/20 05:30:05 | 000,240,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2010/11/20 05:29:59 | 000,520,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2010/11/20 05:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2010/11/20 05:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2010/11/20 05:29:53 | 000,187,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2010/11/20 05:29:53 | 000,137,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2010/11/20 05:29:53 | 000,043,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\winhv.sys
[2010/11/20 05:29:22 | 002,217,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
[2010/11/20 05:29:22 | 000,101,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2010/11/20 05:29:12 | 000,132,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2010/11/20 05:24:31 | 000,271,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
[2010/11/20 05:24:30 | 000,690,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2010/11/20 05:24:30 | 000,508,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2010/11/20 05:24:30 | 000,442,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2010/11/20 05:23:09 | 000,144,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
[2010/11/20 05:21:40 | 002,414,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2010/11/20 05:21:40 | 001,712,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
[2010/11/20 05:21:40 | 000,567,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2010/11/20 05:21:40 | 000,444,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
[2010/11/20 05:21:40 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
[2010/11/20 05:21:40 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2010/11/20 05:21:40 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2010/11/20 05:21:40 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2010/11/20 05:21:40 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2010/11/20 05:21:40 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2010/11/20 05:21:40 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2010/11/20 05:21:40 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2010/11/20 05:21:40 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2010/11/20 05:21:39 | 000,560,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2010/11/20 05:21:39 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2010/11/20 05:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
[2010/11/20 05:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2010/11/20 05:21:39 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
[2010/11/20 05:21:39 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
[2010/11/20 05:21:38 | 000,350,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
[2010/11/20 05:21:38 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
[2010/11/20 05:21:37 | 001,624,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
[2010/11/20 05:21:37 | 001,619,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2010/11/20 05:21:37 | 001,003,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2010/11/20 05:21:37 | 000,766,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
[2010/11/20 05:21:37 | 000,739,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
[2010/11/20 05:21:37 | 000,738,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2010/11/20 05:21:37 | 000,616,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
[2010/11/20 05:21:37 | 000,577,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2010/11/20 05:21:37 | 000,541,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
[2010/11/20 05:21:37 | 000,507,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
[2010/11/20 05:21:37 | 000,436,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
[2010/11/20 05:21:37 | 000,352,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2010/11/20 05:21:37 | 000,351,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2010/11/20 05:21:37 | 000,318,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2010/11/20 05:21:37 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
[2010/11/20 05:21:37 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
[2010/11/20 05:21:36 | 001,326,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
[2010/11/20 05:21:36 | 000,902,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
[2010/11/20 05:21:36 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2010/11/20 05:21:36 | 000,411,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
[2010/11/20 05:21:36 | 000,410,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
[2010/11/20 05:21:36 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
[2010/11/20 05:21:36 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
[2010/11/20 05:21:35 | 001,227,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
[2010/11/20 05:21:35 | 001,063,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
[2010/11/20 05:21:35 | 000,782,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
[2010/11/20 05:21:35 | 000,416,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
[2010/11/20 05:21:35 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
[2010/11/20 05:21:35 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2010/11/20 05:21:35 | 000,314,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2010/11/20 05:21:35 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
[2010/11/20 05:21:35 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
[2010/11/20 05:21:35 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
[2010/11/20 05:21:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
[2010/11/20 05:21:34 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
[2010/11/20 05:21:34 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
[2010/11/20 05:21:34 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
[2010/11/20 05:21:34 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
[2010/11/20 05:21:34 | 000,151,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
[2010/11/20 05:21:34 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
[2010/11/20 05:21:34 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
[2010/11/20 05:21:34 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
[2010/11/20 05:21:34 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpchbuspipe.dll
[2010/11/20 05:21:33 | 002,983,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2010/11/20 05:21:33 | 000,933,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
[2010/11/20 05:21:33 | 000,638,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
[2010/11/20 05:21:33 | 000,600,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
[2010/11/20 05:21:33 | 000,346,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
[2010/11/20 05:21:33 | 000,196,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
[2010/11/20 05:21:33 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
[2010/11/20 05:21:33 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\usbdr.dll
[2010/11/20 05:21:33 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
[2010/11/20 05:21:33 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
[2010/11/20 05:21:33 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
[2010/11/20 05:21:33 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
[2010/11/20 05:21:32 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
[2010/11/20 05:21:32 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tssrvlic.dll
[2010/11/20 05:21:32 | 000,051,200 | ---- | M] (Twain Working Group) -- C:\Windows\twain_32.dll
[2010/11/20 05:21:32 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2010/11/20 05:21:32 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2010/11/20 05:21:31 | 000,270,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
[2010/11/20 05:21:31 | 000,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tscfgwmi.dll
[2010/11/20 05:21:31 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tspubwmi.dll
[2010/11/20 05:21:31 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2010/11/20 05:21:31 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
[2010/11/20 05:21:30 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
[2010/11/20 05:21:29 | 002,157,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
[2010/11/20 05:21:28 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2010/11/20 05:21:28 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
[2010/11/20 05:21:28 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2010/11/20 05:21:28 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
[2010/11/20 05:21:28 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2010/11/20 05:21:27 | 002,146,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
[2010/11/20 05:21:27 | 000,755,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
[2010/11/20 05:21:27 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
[2010/11/20 05:21:27 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
[2010/11/20 05:21:27 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010/11/20 05:21:27 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
[2010/11/20 05:21:26 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
[2010/11/20 05:21:26 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2010/11/20 05:21:26 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
[2010/11/20 05:21:25 | 000,778,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
[2010/11/20 05:21:25 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2010/11/20 05:21:25 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2010/11/20 05:21:25 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
[2010/11/20 05:21:24 | 000,974,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
[2010/11/20 05:21:24 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
[2010/11/20 05:21:24 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
[2010/11/20 05:21:24 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
[2010/11/20 05:21:24 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
[2010/11/20 05:21:24 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
[2010/11/20 05:21:24 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
[2010/11/20 05:21:24 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
[2010/11/20 05:21:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
[2010/11/20 05:21:24 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2010/11/20 05:21:23 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
[2010/11/20 05:21:23 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
[2010/11/20 05:21:22 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
[2010/11/20 05:21:22 | 000,428,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
[2010/11/20 05:21:22 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2010/11/20 05:21:22 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
[2010/11/20 05:21:22 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2010/11/20 05:21:19 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
[2010/11/20 05:21:19 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
[2010/11/20 05:21:15 | 000,316,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
[2010/11/20 05:21:15 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
[2010/11/20 05:21:14 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
[2010/11/20 05:21:12 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
[2010/11/20 05:21:08 | 002,202,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensorsCpl.dll
[2010/11/20 05:21:08 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2010/11/20 05:21:07 | 000,423,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2010/11/20 05:21:07 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2010/11/20 05:21:07 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2010/11/20 05:21:06 | 000,907,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
[2010/11/20 05:21:06 | 000,750,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
[2010/11/20 05:21:05 | 000,464,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrptadm.dll
[2010/11/20 05:21:04 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
[2010/11/20 05:21:04 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
[2010/11/20 05:21:04 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
[2010/11/20 05:21:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2010/11/20 05:21:03 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2010/11/20 05:21:02 | 000,915,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2010/11/20 05:21:02 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
[2010/11/20 05:21:02 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2010/11/20 05:21:02 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpendp.dll
[2010/11/20 05:21:02 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
[2010/11/20 05:21:02 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2010/11/20 05:21:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
[2010/11/20 05:21:02 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
[2010/11/20 05:21:01 | 000,826,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2010/11/20 05:21:01 | 000,129,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2010/11/20 05:21:01 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
[2010/11/20 05:21:00 | 001,115,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2010/11/20 05:20:58 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
[2010/11/20 05:20:58 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
[2010/11/20 05:20:57 | 002,504,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2010/11/20 05:20:57 | 000,324,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
[2010/11/20 05:20:57 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
[2010/11/20 05:20:57 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
[2010/11/20 05:20:57 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
[2010/11/20 05:20:57 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
[2010/11/20 05:20:56 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
[2010/11/20 05:20:56 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2010/11/20 05:20:56 | 000,427,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
[2010/11/20 05:20:56 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
[2010/11/20 05:20:56 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
[2010/11/20 05:20:56 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
[2010/11/20 05:20:56 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
[2010/11/20 05:20:56 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
[2010/11/20 05:20:56 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
[2010/11/20 05:20:55 | 001,750,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
[2010/11/20 05:20:55 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2010/11/20 05:20:53 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
[2010/11/20 05:20:52 | 000,600,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
[2010/11/20 05:20:51 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
[2010/11/20 05:20:50 | 001,160,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
[2010/11/20 05:20:50 | 000,859,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
[2010/11/20 05:20:50 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2010/11/20 05:20:49 | 001,111,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
[2010/11/20 05:20:49 | 000,218,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
[2010/11/20 05:20:49 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
[2010/11/20 05:20:48 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
[2010/11/20 05:20:48 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
[2010/11/20 05:20:46 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2010/11/20 05:20:45 | 000,656,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2010/11/20 05:20:45 | 000,346,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
[2010/11/20 05:20:45 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
[2010/11/20 05:20:30 | 002,130,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
[2010/11/20 05:20:28 | 001,644,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
[2010/11/20 05:20:28 | 000,225,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
[2010/11/20 05:20:28 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
[2010/11/20 05:20:28 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
[2010/11/20 05:20:28 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2010/11/20 05:20:28 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
[2010/11/20 05:20:28 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
[2010/11/20 05:20:28 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
[2010/11/20 05:20:27 | 000,801,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2010/11/20 05:20:27 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
[2010/11/20 05:19:56 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
[2010/11/20 05:19:54 | 000,606,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010/11/20 05:19:53 | 000,504,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2010/11/20 05:19:52 | 000,414,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspbda.dll
[2010/11/20 05:19:52 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2010/11/20 05:19:52 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
[2010/11/20 05:19:51 | 000,265,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
[2010/11/20 05:19:50 | 000,830,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
[2010/11/20 05:19:48 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2010/11/20 05:19:47 | 000,592,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2010/11/20 05:19:47 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010/11/20 05:19:46 | 001,066,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
[2010/11/20 05:19:46 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2010/11/20 05:19:46 | 000,341,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2010/11/20 05:19:45 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
[2010/11/20 05:19:44 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
[2010/11/20 05:19:40 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
[2010/11/20 05:19:39 | 002,151,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
[2010/11/20 05:19:39 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2010/11/20 05:19:39 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2010/11/20 05:19:36 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
[2010/11/20 05:19:34 | 000,296,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
[2010/11/20 05:19:34 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2010/11/20 05:19:34 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
[2010/11/20 05:19:33 | 003,207,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2010/11/20 05:19:33 | 000,954,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2010/11/20 05:19:33 | 000,954,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2010/11/20 05:19:33 | 000,266,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2010/11/20 05:19:32 | 000,727,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
[2010/11/20 05:19:32 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2010/11/20 05:19:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
[2010/11/20 05:19:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
[2010/11/20 05:19:30 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LSCSHostPolicy.dll
[2010/11/20 05:19:30 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
[2010/11/20 05:19:30 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
[2010/11/20 05:19:29 | 000,429,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
[2010/11/20 05:19:29 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
[2010/11/20 05:19:28 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2010/11/20 05:19:25 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iTVData.dll
[2010/11/20 05:19:25 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
[2010/11/20 05:19:24 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
[2010/11/20 05:19:23 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
[2010/11/20 05:19:23 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
[2010/11/20 05:19:23 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\input.dll
[2010/11/20 05:19:23 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2010/11/20 05:19:22 | 000,732,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
[2010/11/20 05:19:22 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
[2010/11/20 05:19:22 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2010/11/20 05:19:21 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2010/11/20 05:19:19 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
[2010/11/20 05:19:19 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2010/11/20 05:19:18 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010/11/20 05:19:17 | 000,389,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010/11/20 05:19:17 | 000,082,944 | ---- | M] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2010/11/20 05:19:16 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
[2010/11/20 05:19:16 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2010/11/20 05:19:16 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
[2010/11/20 05:19:10 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
[2010/11/20 05:19:10 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
[2010/11/20 05:19:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
[2010/11/20 05:19:10 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
[2010/11/20 05:19:09 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpprefcl.dll
[2010/11/20 05:19:05 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2010/11/20 05:19:04 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
[2010/11/20 05:19:04 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
[2010/11/20 05:19:03 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2010/11/20 05:19:03 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
[2010/11/20 05:19:03 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvecpl.dll
[2010/11/20 05:19:02 | 000,856,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
[2010/11/20 05:19:02 | 000,320,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2010/11/20 05:19:02 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
[2010/11/20 05:19:02 | 000,124,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
[2010/11/20 05:19:02 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
[2010/11/20 05:19:02 | 000,093,696 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
[2010/11/20 05:19:02 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
[2010/11/20 05:19:01 | 001,493,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2010/11/20 05:19:01 | 000,488,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
[2010/11/20 05:18:38 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
[2010/11/20 05:18:38 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
[2010/11/20 05:18:37 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
[2010/11/20 05:18:37 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
[2010/11/20 05:18:37 | 000,205,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
[2010/11/20 05:18:37 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
[2010/11/20 05:18:36 | 001,400,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
[2010/11/20 05:18:36 | 000,630,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
[2010/11/20 05:18:36 | 000,508,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2010/11/20 05:18:36 | 000,399,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
[2010/11/20 05:18:36 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
[2010/11/20 05:18:35 | 001,371,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
[2010/11/20 05:18:35 | 000,252,928 | ---- | M] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
[2010/11/20 05:18:35 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
[2010/11/20 05:18:34 | 000,402,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
[2010/11/20 05:18:34 | 000,333,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
[2010/11/20 05:18:34 | 000,323,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
[2010/11/20 05:18:34 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2010/11/20 05:18:34 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
[2010/11/20 05:18:34 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
[2010/11/20 05:18:33 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
[2010/11/20 05:18:32 | 001,188,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
[2010/11/20 05:18:32 | 001,040,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
[2010/11/20 05:18:32 | 000,863,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
[2010/11/20 05:18:32 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
[2010/11/20 05:18:29 | 000,484,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
[2010/11/20 05:18:29 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
[2010/11/20 05:18:29 | 000,211,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
[2010/11/20 05:18:27 | 002,522,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
[2010/11/20 05:18:25 | 001,828,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
[2010/11/20 05:18:25 | 001,171,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2010/11/20 05:18:25 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2010/11/20 05:18:25 | 000,489,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2010/11/20 05:18:25 | 000,219,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2010/11/20 05:18:25 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
[2010/11/20 05:18:25 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CscMig.dll
[2010/11/20 05:18:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
[2010/11/20 05:18:11 | 001,555,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
[2010/11/20 05:18:11 | 001,334,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2010/11/20 05:18:10 | 000,805,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2010/11/20 05:18:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
[2010/11/20 05:18:09 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2010/11/20 05:18:09 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
[2010/11/20 05:18:07 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
[2010/11/20 05:18:07 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
[2010/11/20 05:18:07 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
[2010/11/20 05:18:06 | 000,762,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
[2010/11/20 05:18:06 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
[2010/11/20 05:18:06 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
[2010/11/20 05:18:06 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2010/11/20 05:18:06 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
[2010/11/20 05:18:05 | 001,792,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2010/11/20 05:18:05 | 000,665,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayCpl.dll
[2010/11/20 05:18:05 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
[2010/11/20 05:18:05 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
[2010/11/20 05:18:05 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayServices.dll
[2010/11/20 05:18:04 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2010/11/20 05:18:03 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appmgr.dll
[2010/11/20 05:18:03 | 000,321,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2010/11/20 05:18:02 | 000,438,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AdmTmpl.dll
[2010/11/20 05:18:02 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
[2010/11/20 05:18:01 | 000,744,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
[2010/11/20 05:18:01 | 000,537,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
[2010/11/20 05:18:01 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
[2010/11/20 05:18:01 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
[2010/11/20 05:18:00 | 003,727,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
[2010/11/20 05:18:00 | 000,131,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2010/11/20 05:17:58 | 000,314,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2010/11/20 05:17:58 | 000,254,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
[2010/11/20 05:17:58 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2010/11/20 05:17:55 | 003,367,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
[2010/11/20 05:17:53 | 000,802,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WFS.exe
[2010/11/20 05:17:53 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
[2010/11/20 05:17:53 | 000,292,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
[2010/11/20 05:17:52 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
[2010/11/20 05:17:51 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
[2010/11/20 05:17:50 | 003,330,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpc.exe
[2010/11/20 05:17:50 | 002,171,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VPCWizard.exe
[2010/11/20 05:17:50 | 001,260,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VPCSettings.exe
[2010/11/20 05:17:48 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
[2010/11/20 05:17:48 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2010/11/20 05:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
[2010/11/20 05:17:48 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tskill.exe
[2010/11/20 05:17:48 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsdiscon.exe
[2010/11/20 05:17:48 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tscon.exe
[2010/11/20 05:17:48 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2010/11/20 05:17:47 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
[2010/11/20 05:17:47 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
[2010/11/20 05:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2010/11/20 05:17:46 | 000,325,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
[2010/11/20 05:17:45 | 000,280,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
[2010/11/20 05:17:44 | 000,456,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
[2010/11/20 05:17:42 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
[2010/11/20 05:17:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shadow.exe
[2010/11/20 05:17:39 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
[2010/11/20 05:17:39 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
[2010/11/20 05:17:38 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
[2010/11/20 05:17:37 | 001,131,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2010/11/20 05:17:36 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2010/11/20 05:17:34 | 000,262,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2010/11/20 05:17:34 | 000,098,816 | ---- | M] (Microsoft) -- C:\Windows\System32\Robocopy.exe

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Sat 17 Dec 2011, 3:59 pm

[2010/11/20 05:17:34 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
[2010/11/20 05:17:34 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rwinsta.exe
[2010/11/20 05:17:33 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2010/11/20 05:17:33 | 000,278,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2010/11/20 05:17:32 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
[2010/11/20 05:17:32 | 000,182,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
[2010/11/20 05:17:32 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2010/11/20 05:17:32 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
[2010/11/20 05:17:32 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
[2010/11/20 05:17:32 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\reset.exe
[2010/11/20 05:17:31 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpshell.exe
[2010/11/20 05:17:31 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
[2010/11/20 05:17:31 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpclip.exe
[2010/11/20 05:17:31 | 000,161,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpinit.exe
[2010/11/20 05:17:31 | 000,080,896 | ---- | M] () -- C:\Windows\System32\RDVGHelper.exe
[2010/11/20 05:17:31 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpsign.exe
[2010/11/20 05:17:31 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PushPrinterConnections.exe
[2010/11/20 05:17:31 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qwinsta.exe
[2010/11/20 05:17:31 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qprocess.exe
[2010/11/20 05:17:31 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quser.exe
[2010/11/20 05:17:31 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
[2010/11/20 05:17:31 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qappsrv.exe
[2010/11/20 05:17:31 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\query.exe
[2010/11/20 05:17:30 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2010/11/20 05:17:30 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2010/11/20 05:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
[2010/11/20 05:17:29 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationSettings.exe
[2010/11/20 05:17:29 | 000,066,048 | ---- | M] () -- C:\Windows\System32\PrintBrmUi.exe
[2010/11/20 05:17:29 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
[2010/11/20 05:17:28 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
[2010/11/20 05:17:28 | 000,197,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
[2010/11/20 05:17:28 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
[2010/11/20 05:17:26 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
[2010/11/20 05:17:26 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
[2010/11/20 05:17:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2010/11/20 05:17:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2010/11/20 05:17:26 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
[2010/11/20 05:17:25 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
[2010/11/20 05:17:25 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
[2010/11/20 05:17:22 | 000,303,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2010/11/20 05:17:22 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msg.exe
[2010/11/20 05:17:22 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2010/11/20 05:17:21 | 000,233,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
[2010/11/20 05:17:17 | 000,941,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mblctr.exe
[2010/11/20 05:17:17 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2010/11/20 05:17:17 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
[2010/11/20 05:17:17 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
[2010/11/20 05:17:16 | 000,477,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
[2010/11/20 05:17:16 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2010/11/20 05:17:16 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
[2010/11/20 05:17:16 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
[2010/11/20 05:17:16 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logoff.exe
[2010/11/20 05:17:14 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
[2010/11/20 05:17:14 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
[2010/11/20 05:17:13 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2010/11/20 05:17:13 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2010/11/20 05:17:11 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\[You must be registered and logged in to see this link.]
[2010/11/20 05:17:10 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
[2010/11/20 05:17:08 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
[2010/11/20 05:17:04 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
[2010/11/20 05:17:04 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
[2010/11/20 05:17:04 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
[2010/11/20 05:17:02 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
[2010/11/20 05:17:00 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
[2010/11/20 05:17:00 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
[2010/11/20 05:16:58 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chgport.exe
[2010/11/20 05:16:58 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chglogon.exe
[2010/11/20 05:16:58 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chgusr.exe
[2010/11/20 05:16:57 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\change.exe
[2010/11/20 05:16:56 | 000,776,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
[2010/11/20 05:16:56 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
[2010/11/20 05:16:55 | 000,679,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
[2010/11/20 05:16:55 | 000,658,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
[2010/11/20 05:16:55 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
[2010/11/20 05:16:55 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
[2010/11/20 05:16:55 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfg.exe
[2010/11/20 05:16:55 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2010/11/20 05:16:54 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
[2010/11/20 05:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
[2010/11/20 05:16:53 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
[2010/11/20 05:16:52 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2010/11/20 05:16:52 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
[2010/11/20 05:16:52 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
[2010/11/20 05:16:52 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
[2010/11/20 05:16:52 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
[2010/11/20 05:16:52 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2010/11/20 05:16:52 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2010/11/20 05:16:52 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
[2010/11/20 05:16:52 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
[2010/11/20 05:16:52 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
[2010/11/20 05:16:51 | 000,878,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
[2010/11/20 05:16:51 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2010/11/20 05:16:51 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
[2010/11/20 05:16:51 | 000,293,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
[2010/11/20 05:16:51 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
[2010/11/20 05:16:51 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
[2010/11/20 05:16:50 | 001,466,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010/11/20 05:16:50 | 000,692,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
[2010/11/20 05:16:50 | 000,600,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
[2010/11/20 05:16:50 | 000,516,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
[2010/11/20 05:16:50 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2010/11/20 05:16:50 | 000,345,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
[2010/11/20 05:16:50 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
[2010/11/20 05:16:50 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
[2010/11/20 05:16:39 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
[2010/11/20 05:14:41 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vpcusb.sys.mui
[2010/11/20 05:13:14 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui
[2010/11/20 05:12:32 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcnfltr.sys.mui
[2010/11/20 05:11:33 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui
[2010/11/20 05:11:23 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vpchbus.sys.mui
[2010/11/20 05:10:52 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpchbus.sys.mui
[2010/11/20 05:10:21 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpchbus.sys.mui
[2010/11/20 05:09:32 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcnfltr.sys.mui
[2010/11/20 05:09:13 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbhub.sys.mui
[2010/11/20 05:09:06 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcnfltr.sys.mui
[2010/11/20 05:08:44 | 012,625,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2010/11/20 05:08:25 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpchbus.sys.mui
[2010/11/20 05:07:49 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcusb.sys.mui
[2010/11/20 05:07:48 | 001,164,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2010/11/20 05:07:23 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcusb.sys.mui
[2010/11/20 05:07:21 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
[2010/11/20 05:06:45 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcuxd.sys.mui
[2010/11/20 05:06:37 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
[2010/11/20 05:06:17 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcnfltr.sys.mui
[2010/11/20 05:06:01 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcvmm.sys.mui
[2010/11/20 05:06:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcuxd.sys.mui
[2010/11/20 05:05:46 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
[2010/11/20 05:05:14 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vpcvmm.sys.mui
[2010/11/20 05:05:09 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
[2010/11/20 05:03:18 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\es-ES\vpcvmm.sys.mui
[2010/11/20 05:03:05 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmicres.dll
[2010/11/20 05:03:05 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmstorfltres.dll
[2010/11/20 05:03:04 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmbusres.dll
[2010/11/20 05:02:52 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcuxd.sys.mui
[2010/11/20 05:01:49 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcuxd.sys.mui
[2010/11/20 05:01:41 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpchbus.sys.mui
[2010/11/20 05:01:40 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vpcuxd.sys.mui
[2010/11/20 05:01:31 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcvmm.sys.mui
[2010/11/20 05:01:27 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ja-JP\vpcvmm.sys.mui
[2010/11/20 05:01:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdvgkmd.sys.mui
[2010/11/20 05:00:23 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
[2010/11/20 05:00:20 | 001,027,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
[2010/11/20 05:00:10 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
[2010/11/20 05:00:09 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
[2010/11/20 05:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
[2010/11/20 05:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
[2010/11/20 05:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
[2010/11/20 05:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
[2010/11/20 05:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
[2010/11/20 05:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
[2010/11/20 05:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
[2010/11/20 05:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
[2010/11/20 05:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
[2010/11/20 05:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
[2010/11/20 05:00:08 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
[2010/11/20 05:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
[2010/11/20 05:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
[2010/11/20 05:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
[2010/11/20 05:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
[2010/11/20 05:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
[2010/11/20 05:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
[2010/11/20 05:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
[2010/11/20 05:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
[2010/11/20 05:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
[2010/11/20 05:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
[2010/11/20 05:00:08 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
[2010/11/20 05:00:07 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
[2010/11/20 05:00:07 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
[2010/11/20 05:00:07 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
[2010/11/20 05:00:07 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
[2010/11/20 04:59:50 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vpcnfltr.sys.mui
[2010/11/20 04:59:40 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui
[2010/11/20 04:59:19 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\de-DE\vpcusb.sys.mui
[2010/11/20 04:58:45 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fr-FR\vpcusb.sys.mui
[2010/11/20 04:57:57 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
[2010/11/20 04:56:47 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2010/11/20 04:56:11 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
[2010/11/20 04:54:40 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2010/11/20 03:52:18 | 001,003,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VMWindow.exe
[2010/11/20 03:52:17 | 000,793,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmsal.exe
[2010/11/20 03:52:01 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
[2010/11/20 03:50:41 | 000,559,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VMCPropertyHandler.dll
[2010/11/20 03:50:38 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpcusb.sys
[2010/11/20 03:50:37 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vpcnfltr.sys
[2010/11/20 03:49:03 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2010/11/20 03:24:54 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2010/11/20 03:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2010/11/20 03:22:21 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2010/11/20 03:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
[2010/11/20 03:21:08 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
[2010/11/20 03:06:36 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2010/11/20 03:00:05 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
[2010/11/20 03:00:05 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
[2010/11/20 02:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\winusb.sys
[2010/11/20 02:59:38 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2010/11/20 02:50:19 | 000,190,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2010/11/20 02:14:59 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmicsvc.exe
[2010/11/20 02:14:50 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmictimeprovider.dll
[2010/11/20 02:14:46 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IcCoinstall.dll
[2010/11/20 02:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\VMBusHID.sys
[2010/11/20 02:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vms3cap.sys
[2010/11/20 02:14:37 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VmbusCoinstaller.dll
[2010/11/20 02:14:37 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VmdCoinstall.dll
[2010/11/20 02:14:34 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmbuspipe.dll
[2010/11/20 01:39:18 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
[2010/11/09 18:45:49 | 000,010,429 | ---- | M] () -- C:\Windows\System32\ScavengeSpace.xml
[2010/11/04 19:20:53 | 000,146,852 | ---- | M] () -- C:\Windows\System32\systemsf.ebd
[2010/11/04 19:20:45 | 000,105,559 | ---- | M] () -- C:\Windows\System32\RacRules.xml
[2010/11/04 19:11:11 | 000,312,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
[2010/11/04 18:58:21 | 000,049,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2010/11/04 18:58:20 | 000,080,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2010/11/04 18:58:19 | 000,155,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2010/11/04 18:53:33 | 000,295,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2010/11/04 18:53:33 | 000,099,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2010/09/29 23:47:59 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010/08/25 20:58:00 | 000,051,432 | ---- | M] () -- C:\Windows\System32\iglhxs32.vp
[2010/08/25 20:46:02 | 008,198,680 | ---- | M] (Intel(R) Corporation) -- C:\Windows\System32\TVWSetup.exe
[2010/08/25 20:45:32 | 003,156,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\GfxUI.exe
[2010/08/25 20:39:46 | 000,081,920 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxCoIn_v2202.dll
[2010/08/25 20:31:30 | 004,967,424 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll
[2010/08/25 20:30:02 | 000,127,868 | ---- | M] () -- C:\Windows\System32\igcompkrng575.bin
[2010/08/25 20:30:00 | 000,870,560 | ---- | M] () -- C:\Windows\System32\igkrng575.bin
[2010/08/25 20:30:00 | 000,104,796 | ---- | M] () -- C:\Windows\System32\igfcg575m.bin
[2010/08/25 20:28:22 | 000,571,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumdx32.dll
[2010/08/25 20:23:14 | 004,411,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
[2010/08/25 20:09:34 | 011,040,256 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ig4icd32.dll
[2010/08/25 20:03:04 | 000,103,997 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2010/08/25 20:03:02 | 000,121,121 | ---- | M] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2010/08/25 20:03:02 | 000,102,843 | ---- | M] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2010/08/25 20:03:00 | 000,189,408 | ---- | M] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2010/08/25 20:02:58 | 000,119,286 | ---- | M] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2010/08/25 20:02:58 | 000,114,308 | ---- | M] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2010/08/25 20:02:56 | 000,165,251 | ---- | M] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2010/08/25 20:02:56 | 000,117,984 | ---- | M] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2010/08/25 20:02:54 | 000,120,287 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2010/08/25 20:02:54 | 000,118,997 | ---- | M] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2010/08/25 20:02:52 | 000,119,513 | ---- | M] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2010/08/25 20:02:52 | 000,118,317 | ---- | M] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2010/08/25 20:02:50 | 000,123,164 | ---- | M] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2010/08/25 20:02:50 | 000,114,779 | ---- | M] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2010/08/25 20:02:48 | 000,136,327 | ---- | M] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2010/08/25 20:02:48 | 000,125,477 | ---- | M] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2010/08/25 20:02:46 | 000,133,680 | ---- | M] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2010/08/25 20:02:46 | 000,119,533 | ---- | M] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2010/08/25 20:02:44 | 000,120,695 | ---- | M] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2010/08/25 20:02:44 | 000,118,631 | ---- | M] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2010/08/25 20:02:42 | 000,178,288 | ---- | M] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2010/08/25 20:02:42 | 000,122,858 | ---- | M] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2010/08/25 20:02:40 | 000,122,638 | ---- | M] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2010/08/25 20:02:40 | 000,114,179 | ---- | M] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2010/08/25 20:02:38 | 000,139,830 | ---- | M] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2010/08/25 20:02:38 | 000,118,684 | ---- | M] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2010/08/25 20:02:36 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsky.lrc
[2010/08/25 20:02:36 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrslv.lrc
[2010/08/25 20:02:34 | 000,086,528 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxresn.lrc
[2010/08/25 20:02:34 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtrk.lrc
[2010/08/25 20:02:34 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrsve.lrc
[2010/08/25 20:02:34 | 000,084,992 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrtha.lrc
[2010/08/25 20:02:32 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrrus.lrc
[2010/08/25 20:02:32 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptg.lrc
[2010/08/25 20:02:32 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrplk.lrc
[2010/08/25 20:02:32 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrptb.lrc
[2010/08/25 20:02:32 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnor.lrc
[2010/08/25 20:02:30 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrita.lrc
[2010/08/25 20:02:30 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrhun.lrc
[2010/08/25 20:02:30 | 000,084,480 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrheb.lrc
[2010/08/25 20:02:30 | 000,082,944 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrkor.lrc
[2010/08/25 20:02:30 | 000,082,944 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrjpn.lrc
[2010/08/25 20:02:28 | 000,086,528 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
[2010/08/25 20:02:28 | 000,086,528 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrell.lrc
[2010/08/25 20:02:28 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrnld.lrc
[2010/08/25 20:02:28 | 000,086,016 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdeu.lrc
[2010/08/25 20:02:28 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfin.lrc
[2010/08/25 20:02:26 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcsy.lrc
[2010/08/25 20:02:26 | 000,084,992 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrdan.lrc
[2010/08/25 20:02:26 | 000,084,480 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrara.lrc
[2010/08/25 20:02:26 | 000,081,920 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrcht.lrc
[2010/08/25 20:02:26 | 000,081,920 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrchs.lrc
[2010/08/25 20:02:24 | 000,110,156 | ---- | M] () -- C:\Windows\System32\Gfxres.en-US.resources
[2010/08/25 20:00:00 | 000,194,560 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpph.dll
[2010/08/25 20:00:00 | 000,023,552 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxexps.dll
[2010/08/25 19:59:58 | 000,261,632 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxTMM.dll
[2010/08/25 19:59:58 | 000,115,200 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxcpl.cpl
[2010/08/25 19:59:42 | 000,057,344 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
[2010/08/25 19:59:24 | 000,130,048 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxdo.dll
[2010/08/25 19:59:16 | 000,094,720 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
[2010/08/25 19:59:10 | 000,120,320 | ---- | M] (Intel Corporation) -- C:\Windows\System32\gfxSrvc.dll
[2010/08/25 19:59:08 | 000,004,096 | ---- | M] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
[2010/08/25 19:59:06 | 000,828,928 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxress.dll
[2010/08/25 19:59:06 | 000,085,504 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrenu.lrc
[2010/08/25 19:57:00 | 000,000,151 | ---- | M] () -- C:\Windows\System32\GfxUI.exe.config
[2010/08/25 19:52:00 | 001,921,265 | ---- | M] () -- C:\Windows\System32\iglhxa32.cpa
[2010/08/25 19:52:00 | 000,452,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2010/08/25 19:52:00 | 000,208,896 | ---- | M] () -- C:\Windows\System32\iglhsip32.dll
[2010/08/25 19:52:00 | 000,143,360 | ---- | M] () -- C:\Windows\System32\iglhcp32.dll
[2010/08/25 19:52:00 | 000,060,254 | ---- | M] () -- C:\Windows\System32\iglhxg32.vp
[2010/08/25 19:52:00 | 000,060,226 | ---- | M] () -- C:\Windows\System32\iglhxc32.vp
[2010/08/25 19:52:00 | 000,060,015 | ---- | M] () -- C:\Windows\System32\iglhxo32.vp
[2010/08/25 19:52:00 | 000,001,090 | ---- | M] () -- C:\Windows\System32\iglhxa32.vp
[2010/03/18 14:16:28 | 000,771,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr100_clr0400.dll
[2010/02/27 00:31:24 | 000,132,480 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\Impcd.sys
[2009/08/26 16:04:30 | 000,053,248 | ---- | M] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\System32\CSVer.dll
[2009/08/20 13:06:21 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Ron\Desktop\OTL.exe
[2009/08/20 13:05:44 | 000,258,560 | ---- | M] (OldTimer Tools) -- C:\Users\Ron\Desktop\OTH.scr
[2009/08/20 12:58:16 | 000,000,000 | ---- | M] () -- C:\Users\Ron\AppData\Local\{E93EBA01-1C14-4D7D-BBAF-EA292EDD950D}
[2009/08/20 12:57:11 | 000,000,876 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2009/08/20 12:56:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/08/20 12:56:01 | 2356,572,160 | -HS- | M] () -- C:\hiberfil.sys
[2009/08/20 01:07:30 | 009,852,544 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Ron\Desktop\mbam-setup-1.51.2.1300.exe
[2009/08/20 01:02:59 | 000,000,000 | ---- | M] () -- C:\Users\Ron\AppData\Local\{2F9A6CC1-5390-4B98-9B5F-EBE850C1D6FB}
[2009/08/20 00:18:07 | 001,008,141 | ---- | M] () -- C:\Users\Ron\Desktop\eXplorer.exe
[2009/08/20 00:10:36 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2009/08/20 00:10:36 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2009/07/22 19:24:36 | 000,094,208 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll

========== Files Created - No Company Name ==========

[2011/12/15 08:56:37 | 236,728,380 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2011/12/09 21:24:22 | 000,001,112 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/11/30 23:18:45 | 003,962,295 | ---- | C] () -- C:\Users\Ron\Desktop\IMG_3970.JPG
[2011/11/30 23:15:45 | 000,895,054 | ---- | C] () -- C:\Users\Ron\Desktop\IMG_3298.JPG
[2011/11/18 21:12:59 | 000,002,170 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2011/11/06 14:49:45 | 000,001,005 | ---- | C] () -- C:\Users\Public\Desktop\Mplayer.lnk
[2011/09/12 21:41:30 | 000,002,290 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2011/09/12 21:41:30 | 000,002,189 | ---- | C] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/07/09 15:32:35 | 000,002,503 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2011/06/21 15:13:28 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011/06/21 15:13:28 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011/06/20 22:27:38 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011/06/20 22:27:29 | 000,146,852 | ---- | C] () -- C:\Windows\System32\systemsf.ebd
[2011/06/20 22:26:37 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011/06/20 22:26:34 | 000,010,429 | ---- | C] () -- C:\Windows\System32\ScavengeSpace.xml
[2011/06/20 22:26:30 | 000,105,559 | ---- | C] () -- C:\Windows\System32\RacRules.xml
[2011/05/05 20:49:38 | 000,001,089 | ---- | C] () -- C:\Users\Public\Desktop\Rosetta Stone TOTALe.lnk
[2011/04/12 21:54:46 | 000,001,346 | ---- | C] () -- C:\Users\Ron\Desktop\Norton Installation Files.lnk
[2011/03/02 22:39:49 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011/03/02 22:39:01 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011/02/15 23:44:02 | 000,000,997 | ---- | C] () -- C:\Users\Ron\Desktop\WinRAR.lnk
[2011/01/12 07:45:10 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/12/23 18:30:06 | 000,004,608 | ---- | C] () -- C:\Users\Ron\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/23 18:29:59 | 000,001,015 | R--- | C] () -- C:\logFile.xsl

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Sat 17 Dec 2011, 4:00 pm

[2010/12/23 18:29:30 | 000,001,064 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlipShare.lnk
[2010/12/23 18:29:30 | 000,001,052 | ---- | C] () -- C:\Users\Public\Desktop\FlipShare.lnk
[2010/12/23 15:31:13 | 000,000,406 | -H-- | C] () -- C:\Windows\tasks\Norton Security Scan for Ron.job
[2010/12/23 15:31:12 | 000,001,317 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security Scan.lnk
[2010/12/23 15:31:09 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\NSS\0300000.067\isolate.ini
[2010/12/20 20:26:22 | 000,001,812 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2010/12/20 20:26:22 | 000,001,810 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2010/12/19 23:24:31 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2010/12/19 23:01:51 | 000,000,900 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3781001262-1337088569-1083179482-1000UA.job
[2010/12/19 23:01:50 | 000,000,848 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3781001262-1337088569-1083179482-1000Core.job
[2010/12/19 22:58:21 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010/12/19 22:58:14 | 000,002,002 | ---- | C] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/12/19 22:58:14 | 000,001,889 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/12/19 15:10:26 | 000,000,880 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/12/19 15:10:21 | 000,000,876 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/12/17 16:05:44 | 000,001,411 | ---- | C] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/12/17 15:51:09 | 000,057,656 | ---- | C] () -- C:\Windows\System32\drivers\FilterPC.bmp
[2010/12/17 15:51:09 | 000,024,995 | ---- | C] () -- C:\Windows\System32\drivers\FilterPC.jpg
[2010/12/17 15:10:10 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2010/12/17 14:50:34 | 000,899,942 | ---- | C] () -- C:\Windows\System32\oem2.inf
[2010/12/17 14:49:57 | 000,006,656 | ---- | C] () -- C:\Windows\System32\bcmwlrc.dll
[2010/12/17 14:49:56 | 000,055,808 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll
[2010/12/17 14:49:56 | 000,000,457 | ---- | C] () -- C:\Windows\System32\vcredist_x86.bat
[2010/12/17 14:45:58 | 000,000,074 | RHS- | C] () -- C:\Windows\CT4CET.bin
[2010/12/17 14:33:34 | 000,001,417 | ---- | C] () -- C:\Users\Ron\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2010/12/17 14:33:13 | 000,000,290 | ---- | C] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/12/17 14:33:13 | 000,000,272 | ---- | C] () -- C:\Users\Ron\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2010/12/17 14:30:06 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2010/12/17 14:30:05 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2010/12/17 14:28:05 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/12/17 14:26:07 | 2356,572,160 | -HS- | C] () -- C:\hiberfil.sys
[2010/08/25 20:58:00 | 000,051,432 | ---- | C] () -- C:\Windows\System32\iglhxs32.vp
[2010/08/25 20:30:02 | 000,127,868 | ---- | C] () -- C:\Windows\System32\igcompkrng575.bin
[2010/08/25 20:30:00 | 000,870,560 | ---- | C] () -- C:\Windows\System32\igkrng575.bin
[2010/08/25 20:30:00 | 000,104,796 | ---- | C] () -- C:\Windows\System32\igfcg575m.bin
[2010/08/25 20:03:04 | 000,103,997 | ---- | C] () -- C:\Windows\System32\Gfxres.zh-TW.resources
[2010/08/25 20:03:02 | 000,121,121 | ---- | C] () -- C:\Windows\System32\Gfxres.tr-TR.resources
[2010/08/25 20:03:02 | 000,102,843 | ---- | C] () -- C:\Windows\System32\Gfxres.zh-CN.resources
[2010/08/25 20:03:00 | 000,189,408 | ---- | C] () -- C:\Windows\System32\Gfxres.th-TH.resources
[2010/08/25 20:02:58 | 000,119,286 | ---- | C] () -- C:\Windows\System32\Gfxres.sv-SE.resources
[2010/08/25 20:02:58 | 000,114,308 | ---- | C] () -- C:\Windows\System32\Gfxres.sl-SI.resources
[2010/08/25 20:02:56 | 000,165,251 | ---- | C] () -- C:\Windows\System32\Gfxres.ru-RU.resources
[2010/08/25 20:02:56 | 000,117,984 | ---- | C] () -- C:\Windows\System32\Gfxres.sk-SK.resources
[2010/08/25 20:02:54 | 000,120,287 | ---- | C] () -- C:\Windows\System32\Gfxres.pt-BR.resources
[2010/08/25 20:02:54 | 000,118,997 | ---- | C] () -- C:\Windows\System32\Gfxres.pt-PT.resources
[2010/08/25 20:02:52 | 000,119,513 | ---- | C] () -- C:\Windows\System32\Gfxres.nl-NL.resources
[2010/08/25 20:02:52 | 000,118,317 | ---- | C] () -- C:\Windows\System32\Gfxres.pl-PL.resources
[2010/08/25 20:02:50 | 000,123,164 | ---- | C] () -- C:\Windows\System32\Gfxres.ko-KR.resources
[2010/08/25 20:02:50 | 000,114,779 | ---- | C] () -- C:\Windows\System32\Gfxres.nb-NO.resources
[2010/08/25 20:02:48 | 000,136,327 | ---- | C] () -- C:\Windows\System32\Gfxres.ja-JP.resources
[2010/08/25 20:02:48 | 000,125,477 | ---- | C] () -- C:\Windows\System32\Gfxres.it-IT.resources
[2010/08/25 20:02:46 | 000,133,680 | ---- | C] () -- C:\Windows\System32\Gfxres.he-IL.resources
[2010/08/25 20:02:46 | 000,119,533 | ---- | C] () -- C:\Windows\System32\Gfxres.hu-HU.resources
[2010/08/25 20:02:44 | 000,120,695 | ---- | C] () -- C:\Windows\System32\Gfxres.fr-FR.resources
[2010/08/25 20:02:44 | 000,118,631 | ---- | C] () -- C:\Windows\System32\Gfxres.fi-FI.resources
[2010/08/25 20:02:42 | 000,178,288 | ---- | C] () -- C:\Windows\System32\Gfxres.el-GR.resources
[2010/08/25 20:02:42 | 000,122,858 | ---- | C] () -- C:\Windows\System32\Gfxres.es-ES.resources
[2010/08/25 20:02:40 | 000,122,638 | ---- | C] () -- C:\Windows\System32\Gfxres.de-DE.resources
[2010/08/25 20:02:40 | 000,114,179 | ---- | C] () -- C:\Windows\System32\Gfxres.da-DK.resources
[2010/08/25 20:02:38 | 000,139,830 | ---- | C] () -- C:\Windows\System32\Gfxres.ar-SA.resources
[2010/08/25 20:02:38 | 000,118,684 | ---- | C] () -- C:\Windows\System32\Gfxres.cs-CZ.resources
[2010/08/25 20:02:24 | 000,110,156 | ---- | C] () -- C:\Windows\System32\Gfxres.en-US.resources
[2010/08/25 19:57:00 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
[2010/08/25 19:52:00 | 001,921,265 | ---- | C] () -- C:\Windows\System32\iglhxa32.cpa
[2010/08/25 19:52:00 | 000,208,896 | ---- | C] () -- C:\Windows\System32\iglhsip32.dll
[2010/08/25 19:52:00 | 000,143,360 | ---- | C] () -- C:\Windows\System32\iglhcp32.dll
[2010/08/25 19:52:00 | 000,060,254 | ---- | C] () -- C:\Windows\System32\iglhxg32.vp
[2010/08/25 19:52:00 | 000,060,226 | ---- | C] () -- C:\Windows\System32\iglhxc32.vp
[2010/08/25 19:52:00 | 000,060,015 | ---- | C] () -- C:\Windows\System32\iglhxo32.vp
[2010/08/25 19:52:00 | 000,001,090 | ---- | C] () -- C:\Windows\System32\iglhxa32.vp
[2009/08/20 12:58:16 | 000,000,000 | ---- | C] () -- C:\Users\Ron\AppData\Local\{E93EBA01-1C14-4D7D-BBAF-EA292EDD950D}
[2009/08/20 01:02:59 | 000,000,000 | ---- | C] () -- C:\Users\Ron\AppData\Local\{2F9A6CC1-5390-4B98-9B5F-EBE850C1D6FB}
[2009/08/20 00:18:04 | 001,008,141 | ---- | C] () -- C:\Users\Ron\Desktop\eXplorer.exe
[2009/07/13 21:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 21:33:53 | 000,266,808 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/13 19:05:48 | 000,625,770 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/13 19:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/13 19:05:48 | 000,107,104 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/13 19:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/13 19:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/13 19:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/13 16:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 16:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 16:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/06/10 14:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat

< End of report >

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by Gabethebabe on Mon 19 Dec 2011, 6:20 pm

  • Please run OTL.exe again
  • Under the Custom Scans/Fixes box at the bottom, copy and paste in the following:

Code:
:files
C:\ProgramData\gJ37855LdKdD37855

:otl
[2011/12/11 20:12:02 | 000,000,000 | ---D | M] (ShopToWin13) -- C:\Users\Ron\AppData\Roaming\Mozilla\Firefox\Profiles\geiz0urb.default\extensions\{b9dbe2c0-031f-4cad-911a-f4a7381d79c0}
O4 - HKCU..\Run: [gJ37855LdKdD37855] C:\ProgramData\gJ37855LdKdD37855\gJ37855LdKdD37855.exe ()
O20 - HKLM Winlogon: Shell - (C:\ProgramData\gJ37855LdKdD37855\gJ37855LdKdD37855.exe) -C:\ProgramData\gJ37855LdKdD37855\gJ37855LdKdD37855.exe ()

:commands
[reboot]
  • CAREFUL NOW! You must click the Run Fix button, NOT the Run Scan!
  • If it asks to reboot the computer, please allow that.
  • Finally, post the contents of the log. (Located at C:\_OTL\Moved Files)

This should take care of the AV security Sphere. After running this you can reboot your computer and probably will find its gone.

====================

You have some adware installed on your computer (Shop To Win). Adware is regarded as low-risk malware. While some adware has its uses, it also provides unsolicited advertisements, may slow down your computer and is not alltogether trustworthy (it may upgrade to something nastier). I would suggest you uninstall it (Start >> Control Panel >> Add or Remove Programs). If you are not successful at uninstalling, let me know and well eliminate it manually.

====================

Please download Malwarebytes' Anti-Malware from here.

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform Quick Scan, then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

Note:
  • If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
  • Click OK to either and let MBAM proceed with the disinfection process.
  • If asked to restart the computer, please do so immediately.

Post the contents of the MBAM log in your next reply, please.

Gabethebabe

Tech Advisor
Tech Advisor

Posts : 1568
Joined : 2010-03-07
Operating System : WIN7 64bit, Ubuntu 12.04 LTS

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Wed 21 Dec 2011, 10:32 am

Everything seemed to have worked. I have had no issues with this adware/malware. Thanks for your help.....

Malwarebytes' Anti-Malware 1.51.2.1300
[You must be registered and logged in to see this link.]

Database version: 8385

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

12/18/2011 9:24:55 AM
mbam-log-2011-12-18 (09-24-55).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 276118
Time elapsed: 24 hour(s), 18 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\Ron\Desktop\eXplorer.exe (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully.

r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by Gabethebabe on Wed 21 Dec 2011, 6:41 pm

You need to install the latest version of Java. Having the latest version is important to take advantage of fixes that have eliminated security vulnerabilities.
  • Go to Start > Control Panel
  • Double-click on Add or Remove Programs
  • Look for entries that say Java, Java RunTime Environment or J2SE.
  • Uninstall all of them that are not named Java (TM) 6 Update 29

After doing this, you can go to java.com, click on Free Java Download and proceed from there to install the latest version of Java (currently Version 6 Update 29).

After installing Java, go to Start > Control Panel > Java to open the Java Control Panel.
Under the General tab, Temporary Internet Files click Settings, then click Delete Files.
Select both options and click OK to delete the Java cache.

====================

Do you have any more questions or do you want to see my ALORTKYCC (Awesome List Or Recommendations To Keep Your Computer Clean)?

Gabethebabe

Tech Advisor
Tech Advisor

Posts : 1568
Joined : 2010-03-07
Operating System : WIN7 64bit, Ubuntu 12.04 LTS

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by r0naldo on Thu 22 Dec 2011, 5:33 am

Yes, please send me a link to your ALORTKYCC..... Thanks for your help in fixing my computer. Happy Holidays....


r0naldo

Newbie Surfer
Newbie Surfer

Posts : 10
Joined : 2011-12-16
Operating System : windows 7 pro

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by Gabethebabe on Thu 22 Dec 2011, 5:43 pm

Time to uninstall used tools.

  • Double click OTL.exe to run it again and click the CleanUp button.
  • If we used any other tools and they still remain on your desktop, please delete them manually.

====================

Allright! Here follows my ALORTKYCC (Awesome List Of Recommendations To Keep Your Computer Clean):

1) Keep your Windows up-to-date. Windows Autoupdate should be ON (see Start >> Control Panel >> Security Center). An alternative way (but more time-consuming) is to periodically visit [You must be registered and logged in to see this link.]. Hackers are looking every day for new security holes. Microsoft keeps patching them. You cannot fall behind in this race, it will make your system vulnerable.

2) For your average daily computer activities, use a limited/standard user account, not an administrator account. If you use Vista/WIN7 do not disable User Account Control (UAC). You would be amazed to know how much malware cant touch you if you deny it admin rights. Create a separate password-protected administrator account that you use for admin activities, like (un)installing software.

3) Use a good antivirus. There are various free ones, you cannot go wrong with either of the following three:
  • Panda Cloud Antivirus. If you want your antivirus to be light on resources, I recommend Panda. Install without the toolbar.
  • Ad-Aware Free Internet Security has received great reviews from leading security analysts.
  • Avast! is a very complete antivirus, with modules like mailscanner and webshield.

4) If your computer has 1GB system memory or more, you should install a third party firewall, to replace the weak Windows Firewall. I recommend:
  • Comodo Firewall. Install the internet security suite, but without the antivirus and without the Hopsurf toolbar.
  • Online Armor. A very smart and user friendly firewall.
  • Outpost Firewall is another rocksolid choice.

Note: you should run only ONE antivirus and ONE firewall. Running multiples of either is bad, it will cause slowdowns and/or conflicts.

5) Miscellaneous advice:
  • Stay away from cracks and keygens (look [You must be registered and logged in to see this link.] for the why). Get free software instead. Gizmo is an excellent source of freeware reviews.
  • Navigate safely. Google Chrome is the safest browser available. However, Mozilla Firefox can be made extremely safe with the NoScript addon. Internet Explorer (always use the last version) can be made a lot safer with Spywareblaster (manual here).
  • The WOT (Webs Of Trust) addon will help you to stay on reliable webpages.
  • WinPatrol alerts you when changes are made in vital system areas. Especially good on light systems not running a third party firewall.
  • Make sure you have ways to recuperate your operating system and vital other data if its gets frustrated by malware and/or other problems. A Windows setup CD and recent backups/disk images will be priceless, if you find yourself in an unexpected tight spot.

Finally: did we help you? [You must be registered and logged in to see this link.]!

Gabethebabe

Tech Advisor
Tech Advisor

Posts : 1568
Joined : 2010-03-07
Operating System : WIN7 64bit, Ubuntu 12.04 LTS

View user profile

Back to top Go down

Re: AV Security Sphere malware... Please help!!

Post by Sponsored content Today at 6:10 am


Sponsored content


Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum