saultodd
2010-05-13, 13:12
DDS (Ver_10-03-17.01) - NTFSx86
Run by Cambridge at 11:46:01.93 on 13/05/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2038.1547 [GMT 1:00]
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Cambridge\Desktop\dds.com
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.co.uk/
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\progra~1\yahoo!\common\yiesrvc.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn1\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [BrowserChoice] "c:\windows\system32\browserchoice.exe" /run
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [btbb_McciTrayApp] "c:\program files\bt broadband desktop help\btbb\BTHelpNotifier.exe"
mRun: [btbb_wcm_McciTrayApp] "c:\program files\bt broadband desktop help\btbb_wcm\McciTrayApp.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\cambri~1\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\progra~1\yahoo!\common\yiesrvc.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
Trusted Zone: motive.com\pbttbc.bt
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: Antiwpa - antiwpa.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
============= SERVICES / DRIVERS ===============
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2010-5-10 11608]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-5-10 135336]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-5-10 267432]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-5-10 60936]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2010-5-10 303952]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-5-10 20824]
S3 netr73;RT73 USB Wireless LAN Card Driver for Vista;c:\windows\system32\drivers\netr73.sys [2008-12-18 255488]
=============== Created Last 30 ================
2010-05-10 17:56:11 0 d-----w- c:\windows\system32\NtmsData
2010-05-10 17:51:01 0 d-----w- c:\docume~1\cambri~1\applic~1\Avira
2010-05-10 16:34:24 0 d-----w- c:\program files\SpywareBlaster
2010-05-10 16:25:31 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-05-10 16:25:30 0 d-----w- c:\program files\Avira
2010-05-10 16:25:30 0 d-----w- c:\docume~1\alluse~1\applic~1\Avira
2010-05-10 16:22:25 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-05-10 16:22:25 0 d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-05-10 16:21:03 0 d-----w- c:\docume~1\cambri~1\applic~1\Malwarebytes
2010-05-10 16:20:57 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-10 16:20:55 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-10 16:20:55 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-10 16:20:55 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-05-10 15:35:00 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-05-10 15:28:56 1089593 -c----w- c:\windows\system32\dllcache\ntprint.cat
2010-05-10 15:25:56 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-05-10 15:25:56 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-10 15:09:33 0 d-----w- c:\windows\system32\XPSViewer
2010-05-10 15:08:58 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-05-10 15:08:58 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-05-10 15:08:58 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-05-10 15:08:58 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-05-10 15:08:58 117760 ------w- c:\windows\system32\prntvpt.dll
2010-05-10 15:08:57 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-05-10 15:08:57 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-05-10 15:08:57 0 d-----w- C:\7c1deb81f2f17d7dced98ba44d
2010-05-10 15:04:34 0 d-----w- c:\program files\Windows Media Connect 2
2010-05-10 15:02:20 64000 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-05-10 14:36:20 0 d-----w- c:\windows\ie8updates
2010-05-10 14:33:26 293376 ------w- c:\windows\system32\browserchoice.exe
2010-05-10 14:33:14 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-05-10 14:33:14 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-05-10 14:30:28 0 d-sh--w- c:\documents and settings\cambridge\IECompatCache
2010-05-10 14:27:58 0 d-sh--w- c:\documents and settings\cambridge\PrivacIE
2010-05-10 14:18:33 0 d-sh--w- c:\documents and settings\cambridge\IETldCache
2010-05-10 14:13:29 0 dc-h--w- c:\windows\ie8
2010-05-10 13:52:02 0 d-----w- c:\docume~1\alluse~1\applic~1\Avg8
2010-05-10 13:48:56 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2010-05-10 13:48:56 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2010-05-10 13:48:41 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2010-05-10 13:48:41 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2010-05-05 13:31:07 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-05-05 13:29:57 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2010-05-05 13:29:56 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2010-05-05 13:26:01 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2010-05-05 13:26:00 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2010-05-05 13:26:00 110592 -c----w- c:\windows\system32\dllcache\services.exe
2010-05-05 13:25:59 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2010-05-05 13:25:59 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2010-05-05 13:25:59 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2010-05-05 13:25:57 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll
2010-05-05 13:25:57 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2010-05-05 13:24:53 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2010-05-05 13:24:41 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe
2010-05-05 13:24:11 128512 -c----w- c:\windows\system32\dllcache\dhtmled.ocx
2010-05-05 13:21:59 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2010-05-05 13:11:56 2560 ------w- c:\windows\system32\xpsp4res.dll
2010-05-05 13:11:55 215552 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-05-05 13:11:55 1206508 -c----w- c:\windows\system32\dllcache\sysmain.sdb
2010-05-05 13:03:16 215920 ----a-w- c:\windows\system32\muweb.dll
2010-05-05 13:03:15 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-05-05 13:03:15 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
2010-05-05 13:02:34 256640 ----a-w- c:\windows\system32\PROUnstl.exe
2010-05-05 13:02:34 1904 ------w- c:\windows\system32\SetupBD.din
2010-05-05 12:50:22 5504 -c--a-w- c:\windows\system32\dllcache\intelide.sys
2010-05-05 12:50:22 5504 ----a-w- c:\windows\system32\drivers\intelide.sys
==================== Find3M ====================
2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-02-25 06:24:37 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-16 14:08:49 2146304 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-16 13:25:04 2024448 ----a-w- c:\windows\system32\ntkrnlpa.exe
============= FINISH: 11:46:28.54 ===============
Run by Cambridge at 11:46:01.93 on 13/05/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2038.1547 [GMT 1:00]
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\BT Broadband Desktop Help\btbb\BTHelpNotifier.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Cambridge\Desktop\dds.com
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.google.co.uk/
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg8\avgssie.dll
BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\progra~1\yahoo!\common\yiesrvc.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn1\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn1\yt.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [BrowserChoice] "c:\windows\system32\browserchoice.exe" /run
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [btbb_McciTrayApp] "c:\program files\bt broadband desktop help\btbb\BTHelpNotifier.exe"
mRun: [btbb_wcm_McciTrayApp] "c:\program files\bt broadband desktop help\btbb_wcm\McciTrayApp.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\cambri~1\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\progra~1\yahoo!\common\yiesrvc.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
Trusted Zone: motive.com\pbttbc.bt
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: Antiwpa - antiwpa.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
============= SERVICES / DRIVERS ===============
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2010-5-10 11608]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2010-5-10 135336]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2010-5-10 267432]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-5-10 60936]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2010-5-10 303952]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-5-10 20824]
S3 netr73;RT73 USB Wireless LAN Card Driver for Vista;c:\windows\system32\drivers\netr73.sys [2008-12-18 255488]
=============== Created Last 30 ================
2010-05-10 17:56:11 0 d-----w- c:\windows\system32\NtmsData
2010-05-10 17:51:01 0 d-----w- c:\docume~1\cambri~1\applic~1\Avira
2010-05-10 16:34:24 0 d-----w- c:\program files\SpywareBlaster
2010-05-10 16:25:31 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-05-10 16:25:30 0 d-----w- c:\program files\Avira
2010-05-10 16:25:30 0 d-----w- c:\docume~1\alluse~1\applic~1\Avira
2010-05-10 16:22:25 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-05-10 16:22:25 0 d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-05-10 16:21:03 0 d-----w- c:\docume~1\cambri~1\applic~1\Malwarebytes
2010-05-10 16:20:57 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-10 16:20:55 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-10 16:20:55 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-05-10 16:20:55 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-05-10 15:35:00 221184 ----a-w- c:\windows\system32\wmpns.dll
2010-05-10 15:28:56 1089593 -c----w- c:\windows\system32\dllcache\ntprint.cat
2010-05-10 15:25:56 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-05-10 15:25:56 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-10 15:09:33 0 d-----w- c:\windows\system32\XPSViewer
2010-05-10 15:08:58 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-05-10 15:08:58 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-05-10 15:08:58 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-05-10 15:08:58 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-05-10 15:08:58 117760 ------w- c:\windows\system32\prntvpt.dll
2010-05-10 15:08:57 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-05-10 15:08:57 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-05-10 15:08:57 0 d-----w- C:\7c1deb81f2f17d7dced98ba44d
2010-05-10 15:04:34 0 d-----w- c:\program files\Windows Media Connect 2
2010-05-10 15:02:20 64000 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-05-10 14:36:20 0 d-----w- c:\windows\ie8updates
2010-05-10 14:33:26 293376 ------w- c:\windows\system32\browserchoice.exe
2010-05-10 14:33:14 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-05-10 14:33:14 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-05-10 14:30:28 0 d-sh--w- c:\documents and settings\cambridge\IECompatCache
2010-05-10 14:27:58 0 d-sh--w- c:\documents and settings\cambridge\PrivacIE
2010-05-10 14:18:33 0 d-sh--w- c:\documents and settings\cambridge\IETldCache
2010-05-10 14:13:29 0 dc-h--w- c:\windows\ie8
2010-05-10 13:52:02 0 d-----w- c:\docume~1\alluse~1\applic~1\Avg8
2010-05-10 13:48:56 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2010-05-10 13:48:56 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2010-05-10 13:48:41 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2010-05-10 13:48:41 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2010-05-05 13:31:07 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-05-05 13:29:57 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2010-05-05 13:29:56 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2010-05-05 13:26:01 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2010-05-05 13:26:00 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2010-05-05 13:26:00 110592 -c----w- c:\windows\system32\dllcache\services.exe
2010-05-05 13:25:59 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2010-05-05 13:25:59 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2010-05-05 13:25:59 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2010-05-05 13:25:57 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll
2010-05-05 13:25:57 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2010-05-05 13:24:53 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2010-05-05 13:24:41 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe
2010-05-05 13:24:11 128512 -c----w- c:\windows\system32\dllcache\dhtmled.ocx
2010-05-05 13:21:59 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2010-05-05 13:11:56 2560 ------w- c:\windows\system32\xpsp4res.dll
2010-05-05 13:11:55 215552 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-05-05 13:11:55 1206508 -c----w- c:\windows\system32\dllcache\sysmain.sdb
2010-05-05 13:03:16 215920 ----a-w- c:\windows\system32\muweb.dll
2010-05-05 13:03:15 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-05-05 13:03:15 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
2010-05-05 13:02:34 256640 ----a-w- c:\windows\system32\PROUnstl.exe
2010-05-05 13:02:34 1904 ------w- c:\windows\system32\SetupBD.din
2010-05-05 12:50:22 5504 -c--a-w- c:\windows\system32\dllcache\intelide.sys
2010-05-05 12:50:22 5504 ----a-w- c:\windows\system32\drivers\intelide.sys
==================== Find3M ====================
2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-02-25 06:24:37 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-16 14:08:49 2146304 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-16 13:25:04 2024448 ----a-w- c:\windows\system32\ntkrnlpa.exe
============= FINISH: 11:46:28.54 ===============