Ontology
2012-04-17, 22:39
Hi here is my info:
Appreciate your time, thanks!
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 7.0.6001.18000
Run by Kev at 21:12:14 on 2012-04-17
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.44.1033.18.2037.535 [GMT 1:00]
.
AV: Kaspersky Anti-Virus *Enabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
SP: Kaspersky Anti-Virus *Enabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Livedrive\VSSService.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
C:\Windows\system32\TODDSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Livedrive\Livedrive.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\taskeng.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe
C:\Windows\system32\rundll32.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\WUDFHost.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\conime.exe
C:\Program Files\MyPC Backup\BackupStack.exe
C:\Windows\explorer.exe
C:\Program Files\MyPC Backup\MyPC Backup.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\MyPC Backup\Resources\MyPCBackup.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA;
mStart Page = about:blank
mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Codec-V: {11111111-1111-1111-1111-110011041135} - c:\program files\codec-v\Codec-V.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office14\GROOVEEX.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_06\bin\ssv.dll
BHO: Partner BHO Class: {83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} - c:\programdata\partner\partner.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.7227.1100\swg.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~2\office14\URLREDIR.DLL
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
BHO: BrowserHelper Class: {edf48a39-1442-463f-9f4e-f376a78d034a} - c:\program files\livedrive\LivedriveExplorerExtensions.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe
uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\TOSCDSPD.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [Google Update] "c:\users\kev\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [Livedrive] "c:\program files\livedrive\Livedrive.exe"
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_06\bin\jusched.exe"
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [NDSTray.exe] NDSTray.exe
mRun: [cfFncEnabler.exe] cfFncEnabler.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [Google EULA Launcher] c:\program files\google\google eula\GoogleEULALauncher.exe IE PA
mRun: [Toshiba TEMPO] c:\program files\toshiba tempro\Toshiba.Tempo.UI.TrayApplication.exe
mRun: [topi] c:\program files\toshiba\toshiba online product information\topi.exe -startup
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [Skytel] Skytel.exe
mRun: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
mRun: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
mRun: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
mRun: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
mRun: [Toshiba Registration] c:\program files\toshiba\registration\ToshibaRegistration.exe
mRun: [Camera Assistant Software] "c:\program files\camera assistant software for toshiba\traybar.exe" /start
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe"
mRun: [Sweetpacks Communicator] c:\program files\sweetim\communicator\SweetPacksUpdateManager.exe
StartupFolder: c:\users\kev\appdata\roaming\micros~1\windows\startm~1\programs\startup\mypcba~1.lnk - c:\program files\mypc backup\MyPC Backup.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105
IE: Search the Web - c:\program files\sweetim\toolbars\internet explorer\resources\menuext.html
IE: {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/710-44557-9400-3/4
IE: {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_06\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{1110C029-E60E-4C23-B33C-B210B62F0881} : DhcpNameServer = 192.168.0.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: igfxcui - igfxdev.dll
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\google\google~2\GOEC62~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office14\GROOVEEX.DLL
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 CbFs;CbFs;c:\windows\system32\drivers\cbfs.sys [2012-4-9 146904]
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856]
R1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\system32\drivers\RtlProt.sys [2012-4-9 25896]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2008-8-7 7168]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\rtl8187B.sys [2008-8-7 290304]
.
=============== Created Last 30 ================
.
2012-04-17 20:08:07 -------- d-----w- c:\users\kev\SyncFolder
2012-04-17 20:07:02 -------- d-----w- c:\program files\MyPC Backup
2012-04-17 08:28:45 6582328 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{fc22396a-a178-48b2-884e-8a90a9987c2f}\mpengine.dll
2012-04-16 14:10:13 -------- d-----w- c:\users\kev\appdata\roaming\SUPERAntiSpyware.com
2012-04-16 14:08:32 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-04-16 14:08:32 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-04-15 23:14:59 -------- d-----w- c:\program files\Sweet IMRemoval Tool
2012-04-15 18:06:06 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-04-15 18:06:06 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-04-15 11:10:34 231936 ----a-w- c:\windows\system32\msshsq.dll
2012-04-12 02:10:16 17920 ----a-w- c:\windows\system32\netevent.dll
2012-04-12 02:10:16 125952 ----a-w- c:\windows\system32\srvsvc.dll
2012-04-12 02:10:06 378368 ----a-w- c:\windows\system32\winhttp.dll
2012-04-11 09:56:38 80896 ----a-w- c:\windows\system32\MSNP.ax
2012-04-11 09:56:26 293376 ----a-w- c:\windows\system32\psisdecd.dll
2012-04-11 09:56:24 217088 ----a-w- c:\windows\system32\psisrndr.ax
2012-04-11 09:39:25 454656 ----a-w- c:\program files\common files\system\msadc\msadce.dll
2012-04-11 09:34:54 293376 ----a-w- c:\windows\system32\browserchoice.exe
2012-04-11 09:13:40 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2012-04-11 09:13:40 49472 ----a-w- c:\windows\system32\netfxperf.dll
2012-04-11 09:13:40 297808 ----a-w- c:\windows\system32\mscoree.dll
2012-04-11 09:13:40 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2012-04-11 09:13:40 1130824 ----a-w- c:\windows\system32\dfshim.dll
2012-04-11 08:59:16 24064 ----a-w- c:\windows\system32\nshhttp.dll
2012-04-11 08:59:13 411136 ----a-w- c:\windows\system32\drivers\http.sys
2012-04-11 08:59:13 31232 ----a-w- c:\windows\system32\httpapi.dll
2012-04-11 08:50:59 246272 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2012-04-11 08:50:59 1181696 ----a-w- c:\windows\system32\WsmSvc.dll
2012-04-10 19:16:34 -------- d-----w- c:\programdata\SweetIM
2012-04-10 19:16:34 -------- d-----w- c:\program files\SweetIM
2012-04-10 19:16:13 -------- d-----w- c:\programdata\Premium
2012-04-10 19:14:07 -------- d-----w- c:\users\kev\appdata\local\Codec-V
2012-04-10 19:14:04 -------- d-----w- c:\program files\Codec-V
2012-04-10 19:13:26 -------- d-----w- C:\codec-info
2012-04-10 19:12:52 -------- d-----w- c:\programdata\InstallMate
2012-04-10 13:23:20 97961 ----a-w- c:\windows\system32\drivers\klick.dat
2012-04-10 13:23:20 115369 ----a-w- c:\windows\system32\drivers\klin.dat
2012-04-10 13:20:03 -------- d-----w- c:\programdata\Kaspersky Lab
2012-04-10 13:20:03 -------- d-----w- c:\program files\Kaspersky Lab
2012-04-10 12:37:15 -------- d-----r- C:\Backup
2012-04-10 12:31:37 88632 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
2012-04-10 12:31:37 39352 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
2012-04-10 11:28:00 -------- d-----r- c:\program files\Skype
2012-04-10 10:20:20 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2012-04-10 04:17:03 168960 ----a-w- c:\program files\windows media player\wmplayer.exe
2012-04-10 04:17:00 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2012-04-10 04:16:12 501760 ----a-w- c:\windows\system32\usp10.dll
2012-04-10 04:16:07 66048 ----a-w- c:\program files\windows mail\wabmig.exe
2012-04-10 04:16:07 515584 ----a-w- c:\program files\windows mail\wab.exe
2012-04-10 04:16:06 33280 ----a-w- c:\program files\windows mail\wabfind.dll
2012-04-10 04:15:41 292864 ----a-w- c:\windows\system32\atmfd.dll
2012-04-10 04:15:39 72704 ----a-w- c:\windows\system32\fontsub.dll
2012-04-10 04:15:39 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-04-10 04:15:38 10240 ----a-w- c:\windows\system32\dciman32.dll
2012-04-10 04:15:33 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2012-04-10 04:15:27 409600 ----a-w- c:\windows\system32\odbc32.dll
2012-04-10 04:15:25 708608 ----a-w- c:\program files\common files\system\ado\msado15.dll
2012-04-10 04:15:24 253952 ----a-w- c:\program files\common files\system\ado\msadox.dll
2012-04-10 04:15:23 241664 ----a-w- c:\program files\common files\system\ado\msadomd.dll
2012-04-10 04:15:23 180224 ----a-w- c:\program files\common files\system\msadc\msadco.dll
2012-04-10 04:15:22 57344 ----a-w- c:\program files\common files\system\msadc\msadcs.dll
2012-04-10 04:15:12 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2012-04-10 04:14:55 104960 ----a-w- c:\windows\system32\netiohlp.dll
2012-04-10 04:14:52 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2012-04-10 04:14:51 19968 ----a-w- c:\windows\system32\ARP.EXE
2012-04-10 04:14:50 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2012-04-10 04:14:48 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2012-04-10 04:14:48 10240 ----a-w- c:\windows\system32\finger.exe
2012-04-10 04:14:47 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2012-04-10 04:14:46 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2012-04-10 04:12:46 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2012-04-10 04:12:36 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2012-04-10 04:12:35 302592 ----a-w- c:\windows\system32\wlansec.dll
2012-04-10 04:12:35 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2012-04-10 04:12:33 513024 ----a-w- c:\windows\system32\wlansvc.dll
2012-04-10 04:12:25 1399296 ----a-w- c:\windows\system32\msxml6.dll
2012-04-10 04:12:19 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys
2012-04-10 04:12:12 3600272 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-10 04:12:12 3548048 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-10 04:12:12 1205080 ----a-w- c:\windows\system32\ntdll.dll
2012-04-10 04:12:04 213504 ----a-w- c:\windows\system32\msv1_0.dll
2012-04-10 04:10:57 1315840 ----a-w- c:\windows\system32\ole32.dll
2012-04-10 04:10:56 339968 ----a-w- c:\program files\windows nt\accessories\wordpad.exe
2012-04-10 04:10:51 296960 ----a-w- c:\windows\system32\gdi32.dll
2012-04-10 04:10:46 126464 ----a-w- c:\windows\system32\spoolsv.exe
2012-04-10 04:10:41 562176 ----a-w- c:\windows\system32\msdtcprx.dll
2012-04-10 04:10:41 38912 ----a-w- c:\windows\system32\xolehlp.dll
2012-04-10 04:10:36 160256 ----a-w- c:\windows\system32\wkssvc.dll
2012-04-10 04:10:31 157184 ----a-w- c:\windows\system32\t2embed.dll
2012-04-10 04:10:27 2042368 ----a-w- c:\windows\system32\win32k.sys
2012-04-10 04:10:21 273408 ----a-w- c:\windows\system32\drivers\afd.sys
2012-04-10 04:09:48 269312 ----a-w- c:\windows\system32\es.dll
2012-04-10 04:09:42 1169408 ----a-w- c:\windows\system32\sdclt.exe
2012-04-10 04:09:30 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2012-04-10 04:09:25 10926592 ----a-w- c:\program files\movie maker\MOVIEMK.dll
2012-04-10 04:09:23 150016 ----a-w- c:\program files\movie maker\MOVIEMK.exe
2012-04-10 04:09:18 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2012-04-10 04:09:17 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2012-04-10 04:09:11 766464 ----a-w- c:\program files\common files\microsoft shared\vgx\VGX.dll
2012-04-10 04:09:06 430080 ----a-w- c:\windows\system32\vbscript.dll
2012-04-10 04:08:58 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2012-04-10 04:08:52 714240 ----a-w- c:\windows\system32\timedate.cpl
2012-04-10 04:08:02 636928 ----a-w- c:\windows\system32\localspl.dll
2012-04-10 04:07:54 563200 ----a-w- c:\windows\system32\oleaut32.dll
2012-04-10 04:07:47 954752 ----a-w- c:\windows\system32\mfc40.dll
2012-04-10 04:07:46 954288 ----a-w- c:\windows\system32\mfc40u.dll
2012-04-10 04:07:34 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2012-04-10 04:07:32 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2012-04-10 04:07:21 2927104 ----a-w- c:\windows\explorer.exe
2012-04-10 04:07:15 36352 ----a-w- c:\windows\system32\rtutils.dll
2012-04-10 04:05:47 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2012-04-10 04:05:47 190464 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-04-10 04:05:27 1314816 ----a-w- c:\windows\system32\quartz.dll
2012-04-10 04:05:11 603648 ----a-w- c:\windows\system32\schedsvc.dll
2012-04-10 04:05:10 357376 ----a-w- c:\windows\system32\taskschd.dll
2012-04-10 04:05:08 345088 ----a-w- c:\windows\system32\wmicmiplugin.dll
2012-04-10 04:05:06 171520 ----a-w- c:\windows\system32\taskeng.exe
2012-04-10 04:05:05 270336 ----a-w- c:\windows\system32\taskcomp.dll
2012-04-10 04:03:59 36864 ----a-w- c:\windows\system32\cdd.dll
2012-04-10 04:03:59 148480 ----a-w- c:\windows\system32\drivers\nwifi.sys
2012-04-10 04:03:44 2048 ----a-w- c:\windows\system32\tzres.dll
2012-04-10 04:02:32 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2012-04-10 04:02:21 43520 ----a-w- c:\windows\system32\msdxm.tlb
2012-04-10 04:02:21 18432 ----a-w- c:\windows\system32\amcompat.tlb
2012-04-10 04:02:09 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe
2012-04-10 04:02:09 511488 ----a-w- c:\windows\system32\RMActivate.exe
2012-04-10 04:02:07 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2012-04-10 04:02:07 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2012-04-10 04:02:06 472576 ----a-w- c:\windows\system32\secproc_isv.dll
2012-04-10 04:02:06 472064 ----a-w- c:\windows\system32\secproc.dll
2012-04-10 04:02:01 329216 ----a-w- c:\windows\system32\msdrm.dll
2012-04-10 04:02:01 151040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2012-04-10 04:02:01 151040 ----a-w- c:\windows\system32\secproc_ssp.dll
2012-04-10 04:01:10 996352 ----a-w- c:\windows\system32\WMNetMgr.dll
2012-04-10 04:01:09 94720 ----a-w- c:\windows\system32\logagent.exe
2012-04-10 04:00:41 375808 ----a-w- c:\windows\system32\winsrv.dll
2012-04-10 04:00:40 49152 ----a-w- c:\windows\system32\csrsrv.dll
2012-04-10 04:00:33 61440 ----a-w- c:\windows\system32\msasn1.dll
2012-04-10 04:00:26 1645568 ----a-w- c:\windows\system32\connect.dll
2012-04-10 04:00:21 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2012-04-10 04:00:12 2067456 ----a-w- c:\windows\system32\mstscax.dll
2012-04-10 04:00:11 677888 ----a-w- c:\windows\system32\mstsc.exe
2012-04-10 04:00:01 898952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-04-10 03:58:51 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2012-04-10 03:58:43 276992 ----a-w- c:\windows\system32\schannel.dll
2012-04-10 03:58:10 1418752 ----a-w- c:\program files\windows media player\setup_wm.exe
2012-04-10 03:58:08 310784 ----a-w- c:\windows\system32\unregmp2.exe
2012-04-10 03:58:01 7680 ----a-w- c:\windows\system32\spwmp.dll
2012-04-10 03:58:00 107520 ----a-w- c:\program files\windows media player\wmpshare.exe
2012-04-10 03:57:59 4096 ----a-w- c:\windows\system32\msdxm.ocx
2012-04-10 03:57:59 4096 ----a-w- c:\windows\system32\dxmasf.dll
2012-04-10 03:57:59 107520 ----a-w- c:\program files\windows media player\wmpconfig.exe
2012-04-10 00:57:43 6582328 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2012-04-10 00:57:29 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-04-09 19:32:26 70656 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\CNMPP9X.DLL
2012-04-09 19:32:25 27648 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\CNMPD9X.DLL
2012-04-09 19:30:02 178176 ----a-w- c:\windows\system32\CNMIU9X.DLL
2012-04-09 19:29:22 272384 ----a-w- c:\windows\system32\CNMLM9X.DLL
2012-04-09 19:01:47 -------- d-----w- c:\program files\Livedrive Restore
2012-04-09 17:21:13 -------- d-sh--w- C:\~LD
2012-04-09 17:10:53 146904 ----a-w- c:\windows\system32\drivers\cbfs.sys
2012-04-09 17:10:37 -------- d-----w- c:\users\kev\appdata\local\Livedrive
2012-04-09 17:10:36 -------- d-----w- c:\program files\Livedrive
2012-04-09 17:01:36 -------- d-----w- c:\users\kev\appdata\roaming\Livedrive Internet Limited
2012-04-09 16:54:28 97800 ----a-w- c:\windows\system32\infocardapi.dll
2012-04-09 16:54:24 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2012-04-09 16:54:20 622080 ----a-w- c:\windows\system32\icardagt.exe
2012-04-09 16:54:20 37384 ----a-w- c:\windows\system32\infocardcpl.cpl
2012-04-09 16:54:19 11264 ----a-w- c:\windows\system32\icardres.dll
2012-04-09 16:54:13 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2012-04-09 16:50:47 -------- d-----w- c:\programdata\IsolatedStorage
2012-04-09 16:39:49 -------- d-----w- c:\users\kev\appdata\local\Adobe
2012-04-09 16:34:00 158720 ----a-w- c:\windows\system32\mscorier.dll
2012-04-09 16:33:38 83968 ----a-w- c:\windows\system32\mscories.dll
2012-04-09 15:44:54 920088 ----a-w- c:\windows\system32\igxpun.exe
2012-04-09 15:44:54 -------- d-----w- c:\windows\system32\x64
2012-04-09 15:43:12 171520 ----a-w- c:\windows\system32\wintrust.dll
2012-04-09 15:43:10 98304 ----a-w- c:\windows\system32\cabview.dll
2012-04-09 15:36:11 -------- d-----w- c:\users\kev\appdata\local\Deployment
2012-04-09 15:36:11 -------- d-----w- c:\users\kev\appdata\local\Apps
2012-04-09 15:17:28 2421760 ----a-w- c:\windows\system32\wucltux.dll
2012-04-09 15:16:20 87552 ----a-w- c:\windows\system32\wudriver.dll
2012-04-09 15:16:06 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-04-09 15:16:06 171608 ----a-w- c:\windows\system32\wuwebv.dll
2012-04-09 15:04:37 -------- d-----w- c:\windows\PCHEALTH
2012-04-09 15:01:02 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2012-04-09 15:00:19 -------- d-----w- c:\program files\Microsoft Analysis Services
2012-04-09 14:59:53 -------- d-----w- c:\users\kev\appdata\local\Microsoft Help
2012-04-09 14:43:39 -------- d-----w- c:\users\kev\appdata\local\Google
2012-04-09 14:43:32 -------- d-----w- c:\users\kev\appdata\local\Toshiba
2012-04-09 14:43:15 -------- d-sh--w- C:\$RECYCLE.BIN
2012-04-09 14:42:35 364544 ----a-w- c:\windows\system32\RtlLib.dll
2012-04-09 14:42:35 25896 ----a-w- c:\windows\system32\drivers\RtlProt.sys
2012-04-09 14:42:35 155648 ----a-w- c:\windows\system32\IpLib.dll
2012-04-09 14:42:35 131072 ----a-w- c:\windows\system32\EnumDevLib.dll
2012-04-09 14:42:35 1069056 ----a-w- c:\windows\system32\libeay32.dll
2012-04-09 14:42:27 -------- d-----w- c:\users\kev\appdata\local\VirtualStore
2012-04-09 14:40:21 18432 ----a-w- c:\windows\system32\drivers\UVCFTR_S.SYS
2012-04-09 14:40:19 -------- d-----w- c:\program files\Camera Assistant Software for Toshiba
2012-04-09 13:26:52 290304 ----a-w- c:\windows\system\rtl8187B.sys
2012-04-09 13:26:52 -------- d-----w- c:\windows\OPTIONS
2012-04-09 13:26:51 -------- d-----w- c:\program files\REALTEK RTL8187B Wireless LAN Driver
2012-04-09 13:26:17 279376 ----a-w- c:\windows\system32\drivers\tos_sps32.sys
2012-04-09 13:26:14 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2012-04-09 13:26:02 -------- d-----w- c:\program files\common files\Toshiba Shared
2012-04-09 13:25:33 45056 ----a-w- c:\windows\system32\csellang.dll
2012-04-09 13:25:33 106496 ----a-w- c:\windows\system32\tosmreg.exe
2012-04-09 13:25:32 491520 ----a-w- c:\windows\system32\cselect.exe
2012-04-09 13:25:09 -------- d-----w- c:\program files\NetWaiting
2012-04-09 13:24:51 -------- d-----w- c:\program files\CONEXANT
2012-04-09 13:18:58 312344 ----a-w- c:\windows\system32\drivers\iaStor.sys
.
==================== Find3M ====================
.
2012-04-09 13:19:20 319456 ----a-w- c:\windows\DIFxAPI.dll
2012-04-09 13:19:17 315392 ----a-w- c:\windows\HideWin.exe
2012-02-14 11:09:44 1070352 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-02-07 15:48:56 578232 ----a-w- c:\windows\system32\LivedriveControlPanel.cpl
.
============= FINISH: 21:19:12.71 ===============
http://forums.spybot.info/showthread.php?t=65707
Appreciate your time, thanks!
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 7.0.6001.18000
Run by Kev at 21:12:14 on 2012-04-17
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.44.1033.18.2037.535 [GMT 1:00]
.
AV: Kaspersky Anti-Virus *Enabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
SP: Kaspersky Anti-Virus *Enabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Livedrive\VSSService.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
C:\Windows\system32\TODDSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatchSrv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe
C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Livedrive\Livedrive.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\taskeng.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtblfs.exe
C:\Windows\system32\rundll32.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\WUDFHost.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Kev\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Windows\system32\conime.exe
C:\Program Files\MyPC Backup\BackupStack.exe
C:\Windows\explorer.exe
C:\Program Files\MyPC Backup\MyPC Backup.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\MyPC Backup\Resources\MyPCBackup.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA;
mStart Page = about:blank
mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSEA&bmod=TSEA
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Codec-V: {11111111-1111-1111-1111-110011041135} - c:\program files\codec-v\Codec-V.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office14\GROOVEEX.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_06\bin\ssv.dll
BHO: Partner BHO Class: {83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} - c:\programdata\partner\partner.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.7.7227.1100\swg.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~2\office14\URLREDIR.DLL
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
BHO: BrowserHelper Class: {edf48a39-1442-463f-9f4e-f376a78d034a} - c:\program files\livedrive\LivedriveExplorerExtensions.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe
uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\TOSCDSPD.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [Google Update] "c:\users\kev\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [Livedrive] "c:\program files\livedrive\Livedrive.exe"
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_06\bin\jusched.exe"
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [NDSTray.exe] NDSTray.exe
mRun: [cfFncEnabler.exe] cfFncEnabler.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [Google EULA Launcher] c:\program files\google\google eula\GoogleEULALauncher.exe IE PA
mRun: [Toshiba TEMPO] c:\program files\toshiba tempro\Toshiba.Tempo.UI.TrayApplication.exe
mRun: [topi] c:\program files\toshiba\toshiba online product information\topi.exe -startup
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [Skytel] Skytel.exe
mRun: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
mRun: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
mRun: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
mRun: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
mRun: [Toshiba Registration] c:\program files\toshiba\registration\ToshibaRegistration.exe
mRun: [Camera Assistant Software] "c:\program files\camera assistant software for toshiba\traybar.exe" /start
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky anti-virus 2012\avp.exe"
mRun: [Sweetpacks Communicator] c:\program files\sweetim\communicator\SweetPacksUpdateManager.exe
StartupFolder: c:\users\kev\appdata\roaming\micros~1\windows\startm~1\programs\startup\mypcba~1.lnk - c:\program files\mypc backup\MyPC Backup.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105
IE: Search the Web - c:\program files\sweetim\toolbars\internet explorer\resources\menuext.html
IE: {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/710-44557-9400-3/4
IE: {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_06\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\ievkbd.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky anti-virus 2012\klwtbbho.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{1110C029-E60E-4C23-B33C-B210B62F0881} : DhcpNameServer = 192.168.0.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: igfxcui - igfxdev.dll
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\google\google~2\GOEC62~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office14\GROOVEEX.DLL
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 CbFs;CbFs;c:\windows\system32\drivers\cbfs.sys [2012-4-9 146904]
R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856]
R1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\system32\drivers\RtlProt.sys [2012-4-9 25896]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [2008-8-7 7168]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\rtl8187B.sys [2008-8-7 290304]
.
=============== Created Last 30 ================
.
2012-04-17 20:08:07 -------- d-----w- c:\users\kev\SyncFolder
2012-04-17 20:07:02 -------- d-----w- c:\program files\MyPC Backup
2012-04-17 08:28:45 6582328 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{fc22396a-a178-48b2-884e-8a90a9987c2f}\mpengine.dll
2012-04-16 14:10:13 -------- d-----w- c:\users\kev\appdata\roaming\SUPERAntiSpyware.com
2012-04-16 14:08:32 -------- d-----w- c:\programdata\SUPERAntiSpyware.com
2012-04-16 14:08:32 -------- d-----w- c:\program files\SUPERAntiSpyware
2012-04-15 23:14:59 -------- d-----w- c:\program files\Sweet IMRemoval Tool
2012-04-15 18:06:06 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2012-04-15 18:06:06 -------- d-----w- c:\program files\Spybot - Search & Destroy
2012-04-15 11:10:34 231936 ----a-w- c:\windows\system32\msshsq.dll
2012-04-12 02:10:16 17920 ----a-w- c:\windows\system32\netevent.dll
2012-04-12 02:10:16 125952 ----a-w- c:\windows\system32\srvsvc.dll
2012-04-12 02:10:06 378368 ----a-w- c:\windows\system32\winhttp.dll
2012-04-11 09:56:38 80896 ----a-w- c:\windows\system32\MSNP.ax
2012-04-11 09:56:26 293376 ----a-w- c:\windows\system32\psisdecd.dll
2012-04-11 09:56:24 217088 ----a-w- c:\windows\system32\psisrndr.ax
2012-04-11 09:39:25 454656 ----a-w- c:\program files\common files\system\msadc\msadce.dll
2012-04-11 09:34:54 293376 ----a-w- c:\windows\system32\browserchoice.exe
2012-04-11 09:13:40 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2012-04-11 09:13:40 49472 ----a-w- c:\windows\system32\netfxperf.dll
2012-04-11 09:13:40 297808 ----a-w- c:\windows\system32\mscoree.dll
2012-04-11 09:13:40 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2012-04-11 09:13:40 1130824 ----a-w- c:\windows\system32\dfshim.dll
2012-04-11 08:59:16 24064 ----a-w- c:\windows\system32\nshhttp.dll
2012-04-11 08:59:13 411136 ----a-w- c:\windows\system32\drivers\http.sys
2012-04-11 08:59:13 31232 ----a-w- c:\windows\system32\httpapi.dll
2012-04-11 08:50:59 246272 ----a-w- c:\windows\system32\WSManHTTPConfig.exe
2012-04-11 08:50:59 1181696 ----a-w- c:\windows\system32\WsmSvc.dll
2012-04-10 19:16:34 -------- d-----w- c:\programdata\SweetIM
2012-04-10 19:16:34 -------- d-----w- c:\program files\SweetIM
2012-04-10 19:16:13 -------- d-----w- c:\programdata\Premium
2012-04-10 19:14:07 -------- d-----w- c:\users\kev\appdata\local\Codec-V
2012-04-10 19:14:04 -------- d-----w- c:\program files\Codec-V
2012-04-10 19:13:26 -------- d-----w- C:\codec-info
2012-04-10 19:12:52 -------- d-----w- c:\programdata\InstallMate
2012-04-10 13:23:20 97961 ----a-w- c:\windows\system32\drivers\klick.dat
2012-04-10 13:23:20 115369 ----a-w- c:\windows\system32\drivers\klin.dat
2012-04-10 13:20:03 -------- d-----w- c:\programdata\Kaspersky Lab
2012-04-10 13:20:03 -------- d-----w- c:\program files\Kaspersky Lab
2012-04-10 12:37:15 -------- d-----r- C:\Backup
2012-04-10 12:31:37 88632 ----a-w- c:\windows\system32\drivers\CSCrySec.sys
2012-04-10 12:31:37 39352 ----a-w- c:\windows\system32\drivers\CSVirtualDiskDrv.sys
2012-04-10 11:28:00 -------- d-----r- c:\program files\Skype
2012-04-10 10:20:20 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2012-04-10 04:17:03 168960 ----a-w- c:\program files\windows media player\wmplayer.exe
2012-04-10 04:17:00 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2012-04-10 04:16:12 501760 ----a-w- c:\windows\system32\usp10.dll
2012-04-10 04:16:07 66048 ----a-w- c:\program files\windows mail\wabmig.exe
2012-04-10 04:16:07 515584 ----a-w- c:\program files\windows mail\wab.exe
2012-04-10 04:16:06 33280 ----a-w- c:\program files\windows mail\wabfind.dll
2012-04-10 04:15:41 292864 ----a-w- c:\windows\system32\atmfd.dll
2012-04-10 04:15:39 72704 ----a-w- c:\windows\system32\fontsub.dll
2012-04-10 04:15:39 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-04-10 04:15:38 10240 ----a-w- c:\windows\system32\dciman32.dll
2012-04-10 04:15:33 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2012-04-10 04:15:27 409600 ----a-w- c:\windows\system32\odbc32.dll
2012-04-10 04:15:25 708608 ----a-w- c:\program files\common files\system\ado\msado15.dll
2012-04-10 04:15:24 253952 ----a-w- c:\program files\common files\system\ado\msadox.dll
2012-04-10 04:15:23 241664 ----a-w- c:\program files\common files\system\ado\msadomd.dll
2012-04-10 04:15:23 180224 ----a-w- c:\program files\common files\system\msadc\msadco.dll
2012-04-10 04:15:22 57344 ----a-w- c:\program files\common files\system\msadc\msadcs.dll
2012-04-10 04:15:12 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2012-04-10 04:14:55 104960 ----a-w- c:\windows\system32\netiohlp.dll
2012-04-10 04:14:52 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2012-04-10 04:14:51 19968 ----a-w- c:\windows\system32\ARP.EXE
2012-04-10 04:14:50 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2012-04-10 04:14:48 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2012-04-10 04:14:48 10240 ----a-w- c:\windows\system32\finger.exe
2012-04-10 04:14:47 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2012-04-10 04:14:46 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2012-04-10 04:12:46 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2012-04-10 04:12:36 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2012-04-10 04:12:35 302592 ----a-w- c:\windows\system32\wlansec.dll
2012-04-10 04:12:35 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2012-04-10 04:12:33 513024 ----a-w- c:\windows\system32\wlansvc.dll
2012-04-10 04:12:25 1399296 ----a-w- c:\windows\system32\msxml6.dll
2012-04-10 04:12:19 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys
2012-04-10 04:12:12 3600272 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-10 04:12:12 3548048 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-04-10 04:12:12 1205080 ----a-w- c:\windows\system32\ntdll.dll
2012-04-10 04:12:04 213504 ----a-w- c:\windows\system32\msv1_0.dll
2012-04-10 04:10:57 1315840 ----a-w- c:\windows\system32\ole32.dll
2012-04-10 04:10:56 339968 ----a-w- c:\program files\windows nt\accessories\wordpad.exe
2012-04-10 04:10:51 296960 ----a-w- c:\windows\system32\gdi32.dll
2012-04-10 04:10:46 126464 ----a-w- c:\windows\system32\spoolsv.exe
2012-04-10 04:10:41 562176 ----a-w- c:\windows\system32\msdtcprx.dll
2012-04-10 04:10:41 38912 ----a-w- c:\windows\system32\xolehlp.dll
2012-04-10 04:10:36 160256 ----a-w- c:\windows\system32\wkssvc.dll
2012-04-10 04:10:31 157184 ----a-w- c:\windows\system32\t2embed.dll
2012-04-10 04:10:27 2042368 ----a-w- c:\windows\system32\win32k.sys
2012-04-10 04:10:21 273408 ----a-w- c:\windows\system32\drivers\afd.sys
2012-04-10 04:09:48 269312 ----a-w- c:\windows\system32\es.dll
2012-04-10 04:09:42 1169408 ----a-w- c:\windows\system32\sdclt.exe
2012-04-10 04:09:30 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2012-04-10 04:09:25 10926592 ----a-w- c:\program files\movie maker\MOVIEMK.dll
2012-04-10 04:09:23 150016 ----a-w- c:\program files\movie maker\MOVIEMK.exe
2012-04-10 04:09:18 146432 ----a-w- c:\windows\system32\drivers\srv2.sys
2012-04-10 04:09:17 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2012-04-10 04:09:11 766464 ----a-w- c:\program files\common files\microsoft shared\vgx\VGX.dll
2012-04-10 04:09:06 430080 ----a-w- c:\windows\system32\vbscript.dll
2012-04-10 04:08:58 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2012-04-10 04:08:52 714240 ----a-w- c:\windows\system32\timedate.cpl
2012-04-10 04:08:02 636928 ----a-w- c:\windows\system32\localspl.dll
2012-04-10 04:07:54 563200 ----a-w- c:\windows\system32\oleaut32.dll
2012-04-10 04:07:47 954752 ----a-w- c:\windows\system32\mfc40.dll
2012-04-10 04:07:46 954288 ----a-w- c:\windows\system32\mfc40u.dll
2012-04-10 04:07:34 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2012-04-10 04:07:32 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2012-04-10 04:07:21 2927104 ----a-w- c:\windows\explorer.exe
2012-04-10 04:07:15 36352 ----a-w- c:\windows\system32\rtutils.dll
2012-04-10 04:05:47 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys
2012-04-10 04:05:47 190464 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-04-10 04:05:27 1314816 ----a-w- c:\windows\system32\quartz.dll
2012-04-10 04:05:11 603648 ----a-w- c:\windows\system32\schedsvc.dll
2012-04-10 04:05:10 357376 ----a-w- c:\windows\system32\taskschd.dll
2012-04-10 04:05:08 345088 ----a-w- c:\windows\system32\wmicmiplugin.dll
2012-04-10 04:05:06 171520 ----a-w- c:\windows\system32\taskeng.exe
2012-04-10 04:05:05 270336 ----a-w- c:\windows\system32\taskcomp.dll
2012-04-10 04:03:59 36864 ----a-w- c:\windows\system32\cdd.dll
2012-04-10 04:03:59 148480 ----a-w- c:\windows\system32\drivers\nwifi.sys
2012-04-10 04:03:44 2048 ----a-w- c:\windows\system32\tzres.dll
2012-04-10 04:02:32 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2012-04-10 04:02:21 43520 ----a-w- c:\windows\system32\msdxm.tlb
2012-04-10 04:02:21 18432 ----a-w- c:\windows\system32\amcompat.tlb
2012-04-10 04:02:09 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe
2012-04-10 04:02:09 511488 ----a-w- c:\windows\system32\RMActivate.exe
2012-04-10 04:02:07 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2012-04-10 04:02:07 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2012-04-10 04:02:06 472576 ----a-w- c:\windows\system32\secproc_isv.dll
2012-04-10 04:02:06 472064 ----a-w- c:\windows\system32\secproc.dll
2012-04-10 04:02:01 329216 ----a-w- c:\windows\system32\msdrm.dll
2012-04-10 04:02:01 151040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2012-04-10 04:02:01 151040 ----a-w- c:\windows\system32\secproc_ssp.dll
2012-04-10 04:01:10 996352 ----a-w- c:\windows\system32\WMNetMgr.dll
2012-04-10 04:01:09 94720 ----a-w- c:\windows\system32\logagent.exe
2012-04-10 04:00:41 375808 ----a-w- c:\windows\system32\winsrv.dll
2012-04-10 04:00:40 49152 ----a-w- c:\windows\system32\csrsrv.dll
2012-04-10 04:00:33 61440 ----a-w- c:\windows\system32\msasn1.dll
2012-04-10 04:00:26 1645568 ----a-w- c:\windows\system32\connect.dll
2012-04-10 04:00:21 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2012-04-10 04:00:12 2067456 ----a-w- c:\windows\system32\mstscax.dll
2012-04-10 04:00:11 677888 ----a-w- c:\windows\system32\mstsc.exe
2012-04-10 04:00:01 898952 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-04-10 03:58:51 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2012-04-10 03:58:43 276992 ----a-w- c:\windows\system32\schannel.dll
2012-04-10 03:58:10 1418752 ----a-w- c:\program files\windows media player\setup_wm.exe
2012-04-10 03:58:08 310784 ----a-w- c:\windows\system32\unregmp2.exe
2012-04-10 03:58:01 7680 ----a-w- c:\windows\system32\spwmp.dll
2012-04-10 03:58:00 107520 ----a-w- c:\program files\windows media player\wmpshare.exe
2012-04-10 03:57:59 4096 ----a-w- c:\windows\system32\msdxm.ocx
2012-04-10 03:57:59 4096 ----a-w- c:\windows\system32\dxmasf.dll
2012-04-10 03:57:59 107520 ----a-w- c:\program files\windows media player\wmpconfig.exe
2012-04-10 00:57:43 6582328 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2012-04-10 00:57:29 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-04-09 19:32:26 70656 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\CNMPP9X.DLL
2012-04-09 19:32:25 27648 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\CNMPD9X.DLL
2012-04-09 19:30:02 178176 ----a-w- c:\windows\system32\CNMIU9X.DLL
2012-04-09 19:29:22 272384 ----a-w- c:\windows\system32\CNMLM9X.DLL
2012-04-09 19:01:47 -------- d-----w- c:\program files\Livedrive Restore
2012-04-09 17:21:13 -------- d-sh--w- C:\~LD
2012-04-09 17:10:53 146904 ----a-w- c:\windows\system32\drivers\cbfs.sys
2012-04-09 17:10:37 -------- d-----w- c:\users\kev\appdata\local\Livedrive
2012-04-09 17:10:36 -------- d-----w- c:\program files\Livedrive
2012-04-09 17:01:36 -------- d-----w- c:\users\kev\appdata\roaming\Livedrive Internet Limited
2012-04-09 16:54:28 97800 ----a-w- c:\windows\system32\infocardapi.dll
2012-04-09 16:54:24 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2012-04-09 16:54:20 622080 ----a-w- c:\windows\system32\icardagt.exe
2012-04-09 16:54:20 37384 ----a-w- c:\windows\system32\infocardcpl.cpl
2012-04-09 16:54:19 11264 ----a-w- c:\windows\system32\icardres.dll
2012-04-09 16:54:13 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2012-04-09 16:50:47 -------- d-----w- c:\programdata\IsolatedStorage
2012-04-09 16:39:49 -------- d-----w- c:\users\kev\appdata\local\Adobe
2012-04-09 16:34:00 158720 ----a-w- c:\windows\system32\mscorier.dll
2012-04-09 16:33:38 83968 ----a-w- c:\windows\system32\mscories.dll
2012-04-09 15:44:54 920088 ----a-w- c:\windows\system32\igxpun.exe
2012-04-09 15:44:54 -------- d-----w- c:\windows\system32\x64
2012-04-09 15:43:12 171520 ----a-w- c:\windows\system32\wintrust.dll
2012-04-09 15:43:10 98304 ----a-w- c:\windows\system32\cabview.dll
2012-04-09 15:36:11 -------- d-----w- c:\users\kev\appdata\local\Deployment
2012-04-09 15:36:11 -------- d-----w- c:\users\kev\appdata\local\Apps
2012-04-09 15:17:28 2421760 ----a-w- c:\windows\system32\wucltux.dll
2012-04-09 15:16:20 87552 ----a-w- c:\windows\system32\wudriver.dll
2012-04-09 15:16:06 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-04-09 15:16:06 171608 ----a-w- c:\windows\system32\wuwebv.dll
2012-04-09 15:04:37 -------- d-----w- c:\windows\PCHEALTH
2012-04-09 15:01:02 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2012-04-09 15:00:19 -------- d-----w- c:\program files\Microsoft Analysis Services
2012-04-09 14:59:53 -------- d-----w- c:\users\kev\appdata\local\Microsoft Help
2012-04-09 14:43:39 -------- d-----w- c:\users\kev\appdata\local\Google
2012-04-09 14:43:32 -------- d-----w- c:\users\kev\appdata\local\Toshiba
2012-04-09 14:43:15 -------- d-sh--w- C:\$RECYCLE.BIN
2012-04-09 14:42:35 364544 ----a-w- c:\windows\system32\RtlLib.dll
2012-04-09 14:42:35 25896 ----a-w- c:\windows\system32\drivers\RtlProt.sys
2012-04-09 14:42:35 155648 ----a-w- c:\windows\system32\IpLib.dll
2012-04-09 14:42:35 131072 ----a-w- c:\windows\system32\EnumDevLib.dll
2012-04-09 14:42:35 1069056 ----a-w- c:\windows\system32\libeay32.dll
2012-04-09 14:42:27 -------- d-----w- c:\users\kev\appdata\local\VirtualStore
2012-04-09 14:40:21 18432 ----a-w- c:\windows\system32\drivers\UVCFTR_S.SYS
2012-04-09 14:40:19 -------- d-----w- c:\program files\Camera Assistant Software for Toshiba
2012-04-09 13:26:52 290304 ----a-w- c:\windows\system\rtl8187B.sys
2012-04-09 13:26:52 -------- d-----w- c:\windows\OPTIONS
2012-04-09 13:26:51 -------- d-----w- c:\program files\REALTEK RTL8187B Wireless LAN Driver
2012-04-09 13:26:17 279376 ----a-w- c:\windows\system32\drivers\tos_sps32.sys
2012-04-09 13:26:14 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2012-04-09 13:26:02 -------- d-----w- c:\program files\common files\Toshiba Shared
2012-04-09 13:25:33 45056 ----a-w- c:\windows\system32\csellang.dll
2012-04-09 13:25:33 106496 ----a-w- c:\windows\system32\tosmreg.exe
2012-04-09 13:25:32 491520 ----a-w- c:\windows\system32\cselect.exe
2012-04-09 13:25:09 -------- d-----w- c:\program files\NetWaiting
2012-04-09 13:24:51 -------- d-----w- c:\program files\CONEXANT
2012-04-09 13:18:58 312344 ----a-w- c:\windows\system32\drivers\iaStor.sys
.
==================== Find3M ====================
.
2012-04-09 13:19:20 319456 ----a-w- c:\windows\DIFxAPI.dll
2012-04-09 13:19:17 315392 ----a-w- c:\windows\HideWin.exe
2012-02-14 11:09:44 1070352 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-02-07 15:48:56 578232 ----a-w- c:\windows\system32\LivedriveControlPanel.cpl
.
============= FINISH: 21:19:12.71 ===============
http://forums.spybot.info/showthread.php?t=65707