[third computer] Panda stalls, mentions a hacking tool; here's HJT log

**Ro-Ann** · 2007-01-17, 00:02

Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\h323.tsp
Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\h323log.txt [**]
Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\h323msp.dll
Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\HAL.DLL
Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\hccoin.dll
Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\hdwwiz.cpl
Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\help.exe
Mon Jan 15 23:40:42 2007 => Scanning File C:\WINDOWS\system32\Help.ico
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hh.exe
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hhctrl.ocx
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hhsetup.dll
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hid.dll
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hidphone.tsp
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hidserv.dll
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\himem.sys
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hlink.dll
Mon Jan 15 23:40:43 2007 => Scanning File C:\WINDOWS\system32\hnetcfg.dll
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hnetmon.dll
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hnetwiz.dll
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\homepage.inf
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hostname.exe
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hotplug.dll
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hpo5300a.aio
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hpo5400a.aio
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hpo5500a.aio
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hpojwia.dll
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hsfcisp2.dll
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\hticons.dll
Mon Jan 15 23:40:44 2007 => Scanning File C:\WINDOWS\system32\html.iec
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\httpapi.dll
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\htui.dll
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\hypertrm.dll
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\I2err32.dll
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\iac25_32.ax
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\iasacct.dll
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\iasads.dll
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\iashlpr.dll
Mon Jan 15 23:40:45 2007 => Scanning File C:\WINDOWS\system32\iasnap.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\iaspolcy.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\iasrad.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\iasrecst.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\iassam.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\iassdo.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\iassvcs.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\icaapi.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\iccvid.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\icfgnt5.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\icm32.dll
Mon Jan 15 23:40:46 2007 => Scanning File C:\WINDOWS\system32\icmp.dll
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\icmui.dll
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\icwdial.dll
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\icwphbk.dll
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\ideograf.uce
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\idq.dll
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\ie4uinit.exe
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\ieakeng.dll
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\ieaksie.dll
Mon Jan 15 23:40:47 2007 => Scanning File C:\WINDOWS\system32\ieakui.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\iedkcs32.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\ieencode.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\iepeers.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\iernonce.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\iesetup.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\ieuinit.inf
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\iexpress.exe
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\ifmon.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\ifsutil.dll
Mon Jan 15 23:40:48 2007 => Scanning File C:\WINDOWS\system32\igmpagnt.dll
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\iissuba.dll
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\ils.dll
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imaadp32.acm
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imagehlp.dll
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imapi.exe
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imekr61.ime
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imeshare.dll
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imgutil.dll
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imjp81.ime
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imjp81k.dll
Mon Jan 15 23:40:49 2007 => Scanning File C:\WINDOWS\system32\imm32.dll
Mon Jan 15 23:40:50 2007 => Scanning File C:\WINDOWS\system32\Indeo4.qtx
Mon Jan 15 23:40:50 2007 => Scanning File C:\WINDOWS\system32\inetcfg.dll
Mon Jan 15 23:40:50 2007 => Scanning File C:\WINDOWS\system32\inetcomm.dll
Mon Jan 15 23:40:50 2007 => Scanning File C:\WINDOWS\system32\inetcpl.cpl
Mon Jan 15 23:40:50 2007 => Scanning File C:\WINDOWS\system32\inetcplc.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\inetmib1.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\inetpp.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\inetppui.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\inetres.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\infosoft.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\initpki.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\input.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\inseng.dll
Mon Jan 15 23:40:51 2007 => Scanning File C:\WINDOWS\system32\instcat.sql
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\intl.cpl
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\iologmsg.dll
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\IO_PORT.DLL
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\ipconf.tsp
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\ipconfig.exe
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\iphlpapi.dll
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\ipmontr.dll
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\ipnathlp.dll
Mon Jan 15 23:40:52 2007 => Scanning File C:\WINDOWS\system32\ippromon.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\iprop.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\iprtprio.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\iprtrmgr.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\ipsec6.exe
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\ipsecsnp.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\ipsecsvc.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\ipsmsnap.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\ipv6.exe
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\ipv6mon.dll
Mon Jan 15 23:40:53 2007 => Scanning File C:\WINDOWS\system32\ipxmontr.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ipxpromn.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ipxrip.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ipxroute.exe
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ipxrtmgr.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ipxsap.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ipxwan.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ir32_32.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ir41_32.ax
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ir41_qc.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ir41_qcx.dll
Mon Jan 15 23:40:54 2007 => Scanning File C:\WINDOWS\system32\ir50_32.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\ir50_qc.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\ir50_qcx.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\irclass.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\irprops.cpl
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\isign32.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\isrdbg32.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\itircl.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\itss.dll
Mon Jan 15 23:40:55 2007 => Scanning File C:\WINDOWS\system32\iuengine.dll
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\ivfsrc.ax
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\ixsso.dll
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\iyuv_32.dll
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\java.exe
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\javaw.exe
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\javaws.exe
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\jet500.dll
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\jgaw400.dll
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\jgdw400.dll
Mon Jan 15 23:40:56 2007 => Scanning File C:\WINDOWS\system32\jgmd400.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jgpl400.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jgsd400.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jgsh400.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jobexec.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\joy.cpl
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jpicpl32.cpl
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jscript.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jsnl.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jsproxy.dll
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jupdate-1.5.0_03-b07.log
Mon Jan 15 23:40:57 2007 => Scanning File C:\WINDOWS\system32\jupdate-1.5.0_09-b03.log

**Ro-Ann** · 2007-01-17, 00:03

Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\Kanalen bekijken.scf
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kanji_1.uce
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kanji_2.uce
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kb16.com
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\KBDAL.DLL
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdaze.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdazel.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdbe.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdbene.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdblr.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdbr.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdbu.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdca.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdcan.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdcr.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdcz.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdcz1.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdcz2.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdda.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbddv.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdes.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdest.dll
Mon Jan 15 23:40:58 2007 => Scanning File C:\WINDOWS\system32\kbdfc.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdfi.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdfi1.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdfo.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdfr.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdgae.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdgkl.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdgr.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdgr1.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhe.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhe220.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhe319.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhela2.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhela3.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhept.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhu.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdhu1.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdic.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdinbe1.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdinben.dll
Mon Jan 15 23:40:59 2007 => Scanning File C:\WINDOWS\system32\kbdinmal.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdir.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdit.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdit142.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdkaz.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdkyr.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdla.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdlt.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdlt1.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdlv.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdlv1.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdmac.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdmaori.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdmlt47.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdmlt48.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdmon.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdne.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdnec.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdno.dll
Mon Jan 15 23:41:00 2007 => Scanning File C:\WINDOWS\system32\kbdno1.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdpl.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdpl1.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdpo.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdro.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdru.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdru1.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsf.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsg.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsl.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsl1.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsmsfi.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsmsno.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsp.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdsw.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdtat.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdtuf.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdtuq.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbduk.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdukx.dll
Mon Jan 15 23:41:01 2007 => Scanning File C:\WINDOWS\system32\kbdur.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kbdus.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kbdusl.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kbdusr.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kbdusx.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kbduzb.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kbdycc.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kbdycl.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kd1394.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kdcom.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kerberos.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\kernel32.dll
Mon Jan 15 23:41:02 2007 => Scanning File C:\WINDOWS\system32\key01.sys
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\keyboard.drv
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\keyboard.sys
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\keymgr.dll
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\kmddsp.tsp
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\korean.uce
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\krnl386.exe
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\ksproxy.ax
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\ksuser.dll
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\l3codeca.acm
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\l3codecp.acm
Mon Jan 15 23:41:03 2007 => Scanning File C:\WINDOWS\system32\l3codecx.acm
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\l3codecx.ax
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\label.exe
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\lameACM.acm
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\lame_acm.xml
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\lame_enc.dll
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\langwrbk.dll
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\lanman.drv
Mon Jan 15 23:41:04 2007 => Scanning File C:\WINDOWS\system32\LAPRXY.dll
Mon Jan 15 23:41:05 2007 => Scanning File C:\WINDOWS\system32\LegitCheckControl.DLL
Mon Jan 15 23:41:05 2007 => Scanning File C:\WINDOWS\system32\libdivx.dll
Mon Jan 15 23:41:05 2007 => Scanning File C:\WINDOWS\system32\licdll.dll
Mon Jan 15 23:41:05 2007 => Scanning File C:\WINDOWS\system32\licmgr10.dll
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\licwmi.dll
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\lights.exe
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\linkinfo.dll
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\lmhsvc.dll
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\lmrt.dll
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\lnkstub.exe
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\loadfix.com
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\loadperf.dll
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\locale.nls
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\localsec.dll
Mon Jan 15 23:41:06 2007 => Scanning File C:\WINDOWS\system32\localspl.dll
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\localui.dll
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\locator.exe
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\lodctr.exe
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\logagent.exe
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\loghours.dll
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\login.cmd
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\logman.exe
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\logoff.exe
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\logon.scr
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\logonui.exe
Mon Jan 15 23:41:07 2007 => Scanning File C:\WINDOWS\system32\logonui.exe.manifest
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lpk.dll
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lpq.exe
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lpr.exe
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lprhelp.dll
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lprmonui.dll
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lsasrv.dll
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lusrmgr.msc
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lz32.dll
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\lzexpand.dll
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\l_except.nls
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\l_intl.nls
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\magnify.exe
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\mag_hook.dll
Mon Jan 15 23:41:08 2007 => Scanning File C:\WINDOWS\system32\main.cpl
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\makecab.exe
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\MAPI.DLL
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\mapi32.dll
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\MAPISRVR.EXE
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\MAPISTUB.DLL
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\mcastmib.dll
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\mcd32.dll
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\mcdsrv32.dll
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\mchgrcoi.dll
Mon Jan 15 23:41:09 2007 => Scanning File C:\WINDOWS\system32\mciavi.drv
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciavi32.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mcicda.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciole16.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciole32.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciqtz32.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciseq.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciseq.drv
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciwave.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mciwave.drv
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mdhcp.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mdminst.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\mdmxsdk.dll
Mon Jan 15 23:41:10 2007 => Scanning File C:\WINDOWS\system32\MDT2FW95.DLL
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mdwmdmsp.dll
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mem.exe
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mf3216.dll
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mfc40.dll
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mfc40loc.dll
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mfc40u.dll
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mfc42.dll
Mon Jan 15 23:41:11 2007 => Scanning File C:\WINDOWS\system32\mfc42.dll.tmp
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\mfc42loc.dll
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\MFC42NLD.DLL
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\mfc42u.dll
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\mfcsubs.dll
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\MFPLAT.dll
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\mgmtapi.dll
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\mib.bin
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\midimap.dll
Mon Jan 15 23:41:12 2007 => Scanning File C:\WINDOWS\system32\miglibnt.dll
Mon Jan 15 23:41:13 2007 => Scanning File C:\WINDOWS\system32\migpwd.exe
Mon Jan 15 23:41:13 2007 => Scanning File C:\WINDOWS\system32\mimefilt.dll
Mon Jan 15 23:41:13 2007 => Scanning File C:\WINDOWS\system32\mindex.dll
Mon Jan 15 23:41:13 2007 => Scanning File C:\WINDOWS\system32\miniime.tpl
Mon Jan 15 23:41:13 2007 => Scanning File C:\WINDOWS\system32\mlang.dat
Mon Jan 15 23:41:13 2007 => Scanning File C:\WINDOWS\system32\mlang.dll
Mon Jan 15 23:41:13 2007 => Scanning File C:\WINDOWS\system32\mll_hp.dll
Mon Jan 15 23:41:14 2007 => Scanning File C:\WINDOWS\system32\mll_mtf.dll
Mon Jan 15 23:41:14 2007 => Scanning File C:\WINDOWS\system32\mll_qic.dll
Mon Jan 15 23:41:14 2007 => Scanning File C:\WINDOWS\system32\mmc.exe
Mon Jan 15 23:41:14 2007 => Scanning File C:\WINDOWS\system32\mmcbase.dll
Mon Jan 15 23:41:14 2007 => Scanning File C:\WINDOWS\system32\mmcndmgr.dll
Mon Jan 15 23:41:14 2007 => Scanning File C:\WINDOWS\system32\mmcshext.dll
Mon Jan 15 23:41:14 2007 => Scanning File C:\WINDOWS\system32\mmdriver.inf
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mmdrv.dll
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mmfutil.dll
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mmsys.cpl
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mmsystem.dll
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mmtask.tsk
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mmutilse.dll
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mnmdd.dll
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mnmsrvc.exe
Mon Jan 15 23:41:15 2007 => Scanning File C:\WINDOWS\system32\mobsync.dll
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\mobsync.exe
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\mode.com
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN - ISDN (X.75).txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN Analog Modem (V.32bis).txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN BTX.txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN Custom Config.txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN FAX (G3).txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN Internet (PPP over ISDN).txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN Mailbox (X.75).txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN RAS (PPP over ISDN).txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\ModemLog_ISDN SoftCompression X.75-V.42bis.txt
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\modemui.dll
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\modex.dll
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\more.com
Mon Jan 15 23:41:16 2007 => Scanning File C:\WINDOWS\system32\moricons.dll
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\mountvol.exe
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\mouse.drv
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\MP43DECD.dll
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\MP43DMOD.dll
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\MP4SDECD.dll
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\MP4SDMOD.dll
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\mpeg2data.ax
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\mpg2splt.ax

**Ro-Ann** · 2007-01-17, 00:04

Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\MPG4DECD.dll
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\MPG4DMOD.dll
Mon Jan 15 23:41:17 2007 => Scanning File C:\WINDOWS\system32\mpg4ds32.ax
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mplay32.exe
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mpnotify.exe
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mpr.dll
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mprapi.dll
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mprddm.dll
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mprdim.dll
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mprmsg.dll
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mprui.dll
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mqad.dll
Mon Jan 15 23:41:18 2007 => Scanning File C:\WINDOWS\system32\mqbkup.exe
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqcertui.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqdscli.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqgentr.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqise.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqlogmgr.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqoa.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqoa.tlb
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqoa10.tlb
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqoa20.tlb
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqperf.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqperf.ini
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqprfsym.h
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqqm.dll
Mon Jan 15 23:41:19 2007 => Scanning File C:\WINDOWS\system32\mqrt.dll
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqrtdep.dll
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqsec.dll
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqsnap.dll
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqsvc.exe
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqtgsvc.exe
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqtrig.dll
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqupgrd.dll
Mon Jan 15 23:41:20 2007 => Scanning File C:\WINDOWS\system32\mqutil.dll
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\mrinfo.exe
Mon Jan 15 23:41:21 2007 => *** File C:\WINDOWS\system32\MRT.exe having Size Restriction ***
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\MRT.exe [**]
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msaatext.dll
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msacm.dll
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msacm32.dll
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msacm32.drv
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msadds32.ax
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msadodc.ocx
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msadp32.acm
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msafd.dll
Mon Jan 15 23:41:21 2007 => Scanning File C:\WINDOWS\system32\msapsspc.dll
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\msasn1.dll
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\msaud32.acm
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\msaudite.dll
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\mscat32.dll
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\mscdexnt.exe
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\mscms.dll
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\mscomctl.ocx
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\msconf.dll
Mon Jan 15 23:41:22 2007 => Scanning File C:\WINDOWS\system32\mscoree.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\mscorier.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\mscories.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\mscpx32r.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\mscpxl32.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\msctf.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\msctfime.ime
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\msctfp.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\msdadiag.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\msdart.dll
Mon Jan 15 23:41:23 2007 => Scanning File C:\WINDOWS\system32\msdatgrd.ocx
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdatsrc.tlb
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdelta.dll
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdmo.dll
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdtc.exe
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdtclog.dll
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdtcprf.h
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdtcprf.ini
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdtcprx.dll
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdtctm.dll
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdtcuiu.dll
Mon Jan 15 23:41:24 2007 => Scanning File C:\WINDOWS\system32\msdxm.ocx
Mon Jan 15 23:41:25 2007 => Scanning File C:\WINDOWS\system32\msdxmlc.dll
Mon Jan 15 23:41:25 2007 => Scanning File C:\WINDOWS\system32\msencode.dll
Mon Jan 15 23:41:25 2007 => Scanning File C:\WINDOWS\system32\msexch40.dll
Mon Jan 15 23:41:25 2007 => Scanning File C:\WINDOWS\system32\msexcl40.dll
Mon Jan 15 23:41:25 2007 => Scanning File C:\WINDOWS\system32\msftedit.dll
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msg.exe
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msg711.acm
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msg723.acm
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msgina.dll
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msgsm32.acm
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msgsvc.dll
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\Msgsys.dll
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msh261.drv
Mon Jan 15 23:41:26 2007 => Scanning File C:\WINDOWS\system32\msh263.drv
Mon Jan 15 23:41:27 2007 => Scanning File C:\WINDOWS\system32\mshearts.exe
Mon Jan 15 23:41:27 2007 => Scanning File C:\WINDOWS\system32\mshta.exe
Mon Jan 15 23:41:27 2007 => Scanning File C:\WINDOWS\system32\mshtml.dll
Mon Jan 15 23:41:27 2007 => Scanning File C:\WINDOWS\system32\mshtml.tlb
Mon Jan 15 23:41:27 2007 => Scanning File C:\WINDOWS\system32\mshtmled.dll
Mon Jan 15 23:41:27 2007 => Scanning File C:\WINDOWS\system32\mshtmler.dll
Mon Jan 15 23:41:27 2007 => Scanning File C:\WINDOWS\system32\msi.dll
Mon Jan 15 23:41:28 2007 => Scanning File C:\WINDOWS\system32\msi.dll.tmp
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\msident.dll
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\msidle.dll
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\msidntld.dll
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\msieftp.dll
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\msiexec.exe
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\msihnd.dll
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\msimg32.dll
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\MSIMRT.DLL
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\MSIMRT16.DLL
Mon Jan 15 23:41:30 2007 => Scanning File C:\WINDOWS\system32\MSIMRT32.DLL
Mon Jan 15 23:41:31 2007 => Scanning File C:\WINDOWS\system32\msimsg.dll
Mon Jan 15 23:41:31 2007 => Scanning File C:\WINDOWS\system32\msimtf.dll
Mon Jan 15 23:41:31 2007 => Scanning File C:\WINDOWS\system32\MSIMUSIC.DLL
Mon Jan 15 23:41:31 2007 => Scanning File C:\WINDOWS\system32\MSINET.oca
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\MSINET.OCX
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\msisam11.dll
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\msisip.dll
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\msjet40.dll
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\msjetoledb40.dll
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\msjint40.dll
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\msjter40.dll
Mon Jan 15 23:41:32 2007 => Scanning File C:\WINDOWS\system32\msjtes40.dll
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\mslbui.dll
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\MSLS2.DLL
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\msls31.dll
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\msltus40.dll
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\msnetobj.dll
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\msnsspc.dll
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\msobjs.dll
Mon Jan 15 23:41:33 2007 => Scanning File C:\WINDOWS\system32\msoeacct.dll
Mon Jan 15 23:41:34 2007 => Scanning File C:\WINDOWS\system32\msoert2.dll
Mon Jan 15 23:41:34 2007 => Scanning File C:\WINDOWS\system32\msorc32r.dll
Mon Jan 15 23:41:34 2007 => Scanning File C:\WINDOWS\system32\msorcl32.dll
Mon Jan 15 23:41:34 2007 => Scanning File C:\WINDOWS\system32\mspaint.exe
Mon Jan 15 23:41:34 2007 => Scanning File C:\WINDOWS\system32\mspatcha.dll
Mon Jan 15 23:41:34 2007 => Scanning File C:\WINDOWS\system32\mspbde40.dll
Mon Jan 15 23:41:34 2007 => Scanning File C:\WINDOWS\system32\mspmsnsv.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\mspmsp.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\msports.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\msprivs.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\MSPRPNL.DLL
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\msr2c.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\msr2cenu.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\msratelc.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\msrating.dll
Mon Jan 15 23:41:35 2007 => Scanning File C:\WINDOWS\system32\msrclr40.dll
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\msrd2x40.dll
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\msrd3x40.dll
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\MSRDO20.DLL
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\msrecr40.dll
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\msrepl40.dll
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\msrle32.dll
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\MSRTEDIT.DLL
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\mssap.dll
Mon Jan 15 23:41:36 2007 => Scanning File C:\WINDOWS\system32\msscds32.ax
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\msscp.dll
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\msscript.ocx
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\mssign32.dll
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\mssip32.dll
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\msstdfmt.dll
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\MSSTKPRP.DLL
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\msswch.dll
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\msswchx.exe
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\mstask.dll
Mon Jan 15 23:41:37 2007 => Scanning File C:\WINDOWS\system32\mstext40.dll
Mon Jan 15 23:41:38 2007 => Scanning File C:\WINDOWS\system32\mstime.dll
Mon Jan 15 23:41:38 2007 => Scanning File C:\WINDOWS\system32\mstinit.exe
Mon Jan 15 23:41:38 2007 => Scanning File C:\WINDOWS\system32\mstlsapi.dll
Mon Jan 15 23:41:38 2007 => Scanning File C:\WINDOWS\system32\mstsc.exe
Mon Jan 15 23:41:38 2007 => Scanning File C:\WINDOWS\system32\mstscax.dll
Mon Jan 15 23:41:38 2007 => Scanning File C:\WINDOWS\system32\msuni11.dll
Mon Jan 15 23:41:38 2007 => Scanning File C:\WINDOWS\system32\msutb.dll
Mon Jan 15 23:41:39 2007 => Scanning File C:\WINDOWS\system32\msv1_0.dll
Mon Jan 15 23:41:39 2007 => Scanning File C:\WINDOWS\system32\msvbvm50.dll
Mon Jan 15 23:41:39 2007 => Scanning File C:\WINDOWS\system32\msvbvm60.dll
Mon Jan 15 23:41:39 2007 => Scanning File C:\WINDOWS\system32\msvcirt.dll
Mon Jan 15 23:41:39 2007 => Scanning File C:\WINDOWS\system32\msvcp50.dll
Mon Jan 15 23:41:40 2007 => Scanning File C:\WINDOWS\system32\msvcp60.dll
Mon Jan 15 23:41:40 2007 => Scanning File C:\WINDOWS\system32\msvcr71.dll
Mon Jan 15 23:41:40 2007 => Scanning File C:\WINDOWS\system32\msvcrt.dll
Mon Jan 15 23:41:40 2007 => Scanning File C:\WINDOWS\system32\msvcrt20.dll
Mon Jan 15 23:41:40 2007 => Scanning File C:\WINDOWS\system32\msvcrt40.dll
Mon Jan 15 23:41:41 2007 => Scanning File C:\WINDOWS\system32\msvfw32.dll
Mon Jan 15 23:41:41 2007 => Scanning File C:\WINDOWS\system32\msvidc32.dll
Mon Jan 15 23:41:41 2007 => Scanning File C:\WINDOWS\system32\msvidctl.dll
Mon Jan 15 23:41:41 2007 => Scanning File C:\WINDOWS\system32\msvideo.dll
Mon Jan 15 23:41:41 2007 => Scanning File C:\WINDOWS\system32\msw3prt.dll
Mon Jan 15 23:41:41 2007 => Scanning File C:\WINDOWS\system32\mswdat10.dll
Mon Jan 15 23:41:41 2007 => Scanning File C:\WINDOWS\system32\mswebdvd.dll
Mon Jan 15 23:41:42 2007 => Scanning File C:\WINDOWS\system32\mswmdm.dll
Mon Jan 15 23:41:42 2007 => Scanning File C:\WINDOWS\system32\mswsock.dll
Mon Jan 15 23:41:42 2007 => Scanning File C:\WINDOWS\system32\mswstr10.dll
Mon Jan 15 23:41:42 2007 => Scanning File C:\WINDOWS\system32\msxbde40.dll
Mon Jan 15 23:41:42 2007 => Scanning File C:\WINDOWS\system32\msxml.dll
Mon Jan 15 23:41:42 2007 => Scanning File C:\WINDOWS\system32\msxml2.dll
Mon Jan 15 23:41:42 2007 => Scanning File C:\WINDOWS\system32\msxml2r.dll
Mon Jan 15 23:41:43 2007 => Scanning File C:\WINDOWS\system32\msxml3.dll
Mon Jan 15 23:41:43 2007 => Scanning File C:\WINDOWS\system32\msxml3.dll.tmp
Mon Jan 15 23:41:43 2007 => Scanning File C:\WINDOWS\system32\msxml3a.dll
Mon Jan 15 23:41:43 2007 => Scanning File C:\WINDOWS\system32\msxml3r.dll
Mon Jan 15 23:41:43 2007 => Scanning File C:\WINDOWS\system32\msxml4.dll
Mon Jan 15 23:41:43 2007 => Scanning File C:\WINDOWS\system32\msxml4r.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\msxmlr.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\msyuv.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mtxclu.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mtxdm.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mtxex.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mtxlegih.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mtxoci.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mtxparhd.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mucltui.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\muweb.dll
Mon Jan 15 23:41:44 2007 => Scanning File C:\WINDOWS\system32\mycomput.dll
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\mydocs.dll

**Ro-Ann** · 2007-01-17, 00:04

Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\narrator.exe
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\narrhook.dll
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\NavLogon.dll
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\nbtstat.exe
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\ncobjapi.dll
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\ncpa.cpl
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\ncpa.cpl.manifest
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\ncxpnt.dll
Mon Jan 15 23:41:45 2007 => Scanning File C:\WINDOWS\system32\nddeapi.dll
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\nddeapir.exe
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\nddenb32.dll
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\ndptsp.tsp
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\net.exe
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\net.hlp
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\net1.exe
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\netapi.dll
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\netapi32.dll
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\netcfgx.dll
Mon Jan 15 23:41:46 2007 => Scanning File C:\WINDOWS\system32\netdde.exe
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\netevent.dll
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\netfxperf.dll
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\neth.dll
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\netid.dll
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\netlogon.dll
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\netman.dll
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\netmsg.dll
Mon Jan 15 23:41:47 2007 => Scanning File C:\WINDOWS\system32\netplwiz.dll
Mon Jan 15 23:41:48 2007 => Scanning File C:\WINDOWS\system32\netrap.dll
Mon Jan 15 23:41:48 2007 => Scanning File C:\WINDOWS\system32\netsetup.cpl
Mon Jan 15 23:41:48 2007 => Scanning File C:\WINDOWS\system32\netsetup.exe
Mon Jan 15 23:41:48 2007 => Scanning File C:\WINDOWS\system32\netsh.exe
Mon Jan 15 23:41:49 2007 => Scanning File C:\WINDOWS\system32\netshell.dll
Mon Jan 15 23:41:49 2007 => Scanning File C:\WINDOWS\system32\netstat.exe
Mon Jan 15 23:41:49 2007 => Scanning File C:\WINDOWS\system32\netui0.dll
Mon Jan 15 23:41:49 2007 => Scanning File C:\WINDOWS\system32\netui1.dll
Mon Jan 15 23:41:49 2007 => Scanning File C:\WINDOWS\system32\netui2.dll
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\netware.drv
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\newdev.dll
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\nlhtml.dll
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\nlsfunc.exe
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\nmevtmsg.dll
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\nmmkcert.dll
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\noise.chs
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\noise.cht
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\noise.dat
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\noise.deu
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\noise.eng
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\noise.enu
Mon Jan 15 23:41:50 2007 => Scanning File C:\WINDOWS\system32\noise.esn
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\noise.fra
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\noise.ita
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\noise.nld
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\noise.sve
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\noise.tha
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\notepad.exe
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\npptools.dll
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\nscompat.tlb
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\nslookup.exe
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\nsp.dll
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\nspa6.dll
Mon Jan 15 23:41:51 2007 => Scanning File C:\WINDOWS\system32\nspm5.dll
Mon Jan 15 23:41:52 2007 => Scanning File C:\WINDOWS\system32\nspm6.dll
Mon Jan 15 23:41:52 2007 => Scanning File C:\WINDOWS\system32\nspp6.dll
Mon Jan 15 23:41:52 2007 => Scanning File C:\WINDOWS\system32\nsppx.dll
Mon Jan 15 23:41:53 2007 => Scanning File C:\WINDOWS\system32\nspw7.dll
Mon Jan 15 23:41:53 2007 => Scanning File C:\WINDOWS\system32\ntbackup.exe
Mon Jan 15 23:41:53 2007 => Scanning File C:\WINDOWS\system32\ntdll.dll
Mon Jan 15 23:41:53 2007 => Scanning File C:\WINDOWS\system32\ntdos.sys
Mon Jan 15 23:41:53 2007 => Scanning File C:\WINDOWS\system32\ntdos404.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntdos411.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntdos412.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntdos804.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntdsapi.dll
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntdsbcli.dll
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntimage.gif
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntio.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntio404.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntio411.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntio412.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntio804.sys
Mon Jan 15 23:41:54 2007 => Scanning File C:\WINDOWS\system32\ntkrnlpa.exe
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntlanman.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntlanui.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntlanui2.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntlsapi.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntmarta.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntmsapi.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntmsdba.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntmsevt.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntmsmgr.dll
Mon Jan 15 23:41:55 2007 => Scanning File C:\WINDOWS\system32\ntmsmgr.msc
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\ntmsoprq.msc
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\ntmssvc.dll
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\ntoskrnl.exe
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\ntprint.dll
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\NTS.DLL
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\ntsd.exe
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\ntsdexts.dll
Mon Jan 15 23:41:56 2007 => Scanning File C:\WINDOWS\system32\ntshrui.dll
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\ntvdm.exe
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\ntvdmd.dll
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\nusrmgr.cpl
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\nv4.dll
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\nv4_disp.dll
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\nw16.exe
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\nwapi16.dll
Mon Jan 15 23:41:57 2007 => Scanning File C:\WINDOWS\system32\nwapi32.dll
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\nwc.cpl
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\nwc.cpl.manifest
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\nwcfg.dll
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\nwevent.dll
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\nwprovau.dll
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\nwscript.exe
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\nwwks.dll

**Ro-Ann** · 2007-01-17, 00:06

Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\oakley.dll
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\objsel.dll
Mon Jan 15 23:41:58 2007 => Scanning File C:\WINDOWS\system32\occache.dll
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\ocmanage.dll
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\odbc16gt.dll
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\odbc32.dll
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\odbc32gt.dll
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\odbcad32.exe
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\odbcbcp.dll
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\odbcconf.dll
Mon Jan 15 23:41:59 2007 => Scanning File C:\WINDOWS\system32\odbcconf.exe
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbcconf.rsp
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbccp32.cpl
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbccp32.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbccr32.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbccu32.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbcint.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbcji32.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbcjt32.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbcp32r.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odbctrac.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\oddbse32.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odexl32.dll
Mon Jan 15 23:42:00 2007 => Scanning File C:\WINDOWS\system32\odfox32.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\odpdx32.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\odtext32.dll
Mon Jan 15 23:42:01 2007 => *** File C:\WINDOWS\system32\oembios.bin having Size Restriction ***
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\oembios.bin [**]
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\oembios.dat
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\oembios.sig
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\offfilt.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\ole2.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\ole2disp.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\ole2nls.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\ole32.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\oleacc.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\oleaccrc.dll
Mon Jan 15 23:42:01 2007 => Scanning File C:\WINDOWS\system32\oleaut32.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\olecli.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\olecli32.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\olecnv32.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\oledlg.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\oleprn.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\olepro32.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\olesvr.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\olesvr32.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\olethk32.dll
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\openfiles.exe
Mon Jan 15 23:42:02 2007 => Scanning File C:\WINDOWS\system32\opengl32.dll
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\osk.exe
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\osuninst.dll
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\osuninst.exe
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\OUTLWAB.DLL
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\p2p.dll
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\p2pgasvc.dll
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\p2pgraph.dll
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\p2pnetsh.dll
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\p2psvc.dll
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\packager.exe
Mon Jan 15 23:42:03 2007 => Scanning File C:\WINDOWS\system32\pagefileconfig.vbs
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\panmap.dll
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\paqsp.dll
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\pathping.exe
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\pautoenr.dll
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\pavas.ico
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\pcl.sep
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\pdh.dll
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\PDS.DLL
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\pentnt.exe
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\perfc009.dat
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\perfc013.dat
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\perfci.h
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\perfci.ini
Mon Jan 15 23:42:04 2007 => Scanning File C:\WINDOWS\system32\perfctrs.dll
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfd009.dat
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfd013.dat
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfdisk.dll
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perffilt.h
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perffilt.ini
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfh009.dat
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfh013.dat
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfi009.dat
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfi013.dat
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfmon.exe
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfmon.msc
Mon Jan 15 23:42:05 2007 => Scanning File C:\WINDOWS\system32\perfnet.dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\perfnw.dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\perfos.dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\perfproc.dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\PerfStringBackup.INI
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\perfts.dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\perfwci.h
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\perfwci.ini
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\PF1800LC.Dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\phon.ime
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\photowiz.dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\pid.dll
Mon Jan 15 23:42:06 2007 => Scanning File C:\WINDOWS\system32\pidgen.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\pifmgr.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\ping.com
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\ping.exe
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\ping6.exe
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\PINTLGNT.IME
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\pjlmon.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\plustab.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\pmspl.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\pncrt.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\pndx5016.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\pndx5032.dll
Mon Jan 15 23:42:07 2007 => Scanning File C:\WINDOWS\system32\pngfilt.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\pnrpnsp.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\polstore.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\Popup.ocx
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\PortableDeviceApi.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\PortableDeviceClassExtension.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\PortableDeviceTypes.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\PortableDeviceWMDRM.dll
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\powercfg.cpl
Mon Jan 15 23:42:08 2007 => Scanning File C:\WINDOWS\system32\powercfg.exe
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\powrprof.dll
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prflbmsg.dll
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\print.exe
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\printui.dll
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prncnfg.vbs
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prndrvr.vbs
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prnjobs.vbs
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prnmngr.vbs
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prnport.vbs
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prnqctl.vbs
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\proctexe.ocx
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\prodspec.ini
Mon Jan 15 23:42:09 2007 => Scanning File C:\WINDOWS\system32\profmap.dll
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\progman.exe
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\proquota.exe
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\proxycfg.exe
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\psapi.dll
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\psbase.dll
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\PScanner.CFG
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\pschdcnt.h
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\pschdprf.dll
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\pschdprf.ini
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\pscript.sep
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\psnppagn.dll
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\pstorec.dll
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\pstorsvc.dll
Mon Jan 15 23:42:10 2007 => Scanning File C:\WINDOWS\system32\ptpusd.dll
Mon Jan 15 23:42:11 2007 => Scanning File C:\WINDOWS\system32\PUB3BRSH.ANI
Mon Jan 15 23:42:11 2007 => Scanning File C:\WINDOWS\system32\PUBDLG.DLL
Mon Jan 15 23:42:11 2007 => Scanning File C:\WINDOWS\system32\pubprn.vbs
Mon Jan 15 23:42:11 2007 => Scanning File C:\WINDOWS\system32\PWiaExt.dll
Mon Jan 15 23:42:11 2007 => Scanning File C:\WINDOWS\system32\PWiaScnr.dll
Mon Jan 15 23:42:11 2007 => Scanning File C:\WINDOWS\system32\python24.dll
Mon Jan 15 23:42:11 2007 => Scanning File C:\WINDOWS\system32\python25.dll
Mon Jan 15 23:42:12 2007 => Scanning File C:\WINDOWS\system32\qappsrv.exe
Mon Jan 15 23:42:12 2007 => Scanning File C:\WINDOWS\system32\qasf.dll
Mon Jan 15 23:42:12 2007 => Scanning File C:\WINDOWS\system32\qcap.dll
Mon Jan 15 23:42:12 2007 => Scanning File C:\WINDOWS\system32\qdv.dll
Mon Jan 15 23:42:12 2007 => Scanning File C:\WINDOWS\system32\qdvd.dll
Mon Jan 15 23:42:12 2007 => Scanning File C:\WINDOWS\system32\qedit.dll
Mon Jan 15 23:42:13 2007 => Scanning File C:\WINDOWS\system32\qedwipes.dll
Mon Jan 15 23:42:13 2007 => Scanning File C:\WINDOWS\system32\qmgr.dll
Mon Jan 15 23:42:13 2007 => Scanning File C:\WINDOWS\system32\qmgrprxy.dll
Mon Jan 15 23:42:13 2007 => Scanning File C:\WINDOWS\system32\qosname.dll
Mon Jan 15 23:42:13 2007 => Scanning File C:\WINDOWS\system32\qprocess.exe
Mon Jan 15 23:42:13 2007 => Scanning File C:\WINDOWS\system32\qt-dx331.dll
Mon Jan 15 23:42:15 2007 => Scanning File C:\WINDOWS\system32\qtplugin.log
Mon Jan 15 23:42:15 2007 => Scanning File C:\WINDOWS\system32\quartz.dll
Mon Jan 15 23:42:15 2007 => Scanning File C:\WINDOWS\system32\query.dll
Mon Jan 15 23:42:15 2007 => Scanning File C:\WINDOWS\system32\quick.ime
Mon Jan 15 23:42:15 2007 => Scanning File C:\WINDOWS\system32\QuickEdCleanReg.exe
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\QuickTime.cpl
Mon Jan 15 23:42:16 2007 => *** File C:\WINDOWS\system32\QuickTime.qts having Size Restriction ***
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\QuickTime.qts [**]
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\QuickTimeCheck.ocx
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\QuickTimeMusicalInstruments.qtx
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\QuickTimeVR.qtx
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\qwinsta.exe
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\racpldlg.dll
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\rasadhlp.dll
Mon Jan 15 23:42:16 2007 => Scanning File C:\WINDOWS\system32\rasapi32.dll
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasauto.dll
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasautou.exe
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\raschap.dll
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasctrnm.h
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasctrs.dll
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasctrs.ini
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasdial.exe
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasdlg.dll
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasman.dll
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasmans.dll
Mon Jan 15 23:42:17 2007 => Scanning File C:\WINDOWS\system32\rasmontr.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rasmxs.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rasphone.exe
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rasppp.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rasrad.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rassapi.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rasser.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rastapi.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rastls.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rcbdyctl.dll
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rcimlby.exe
Mon Jan 15 23:42:18 2007 => Scanning File C:\WINDOWS\system32\rcp.exe
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdchost.dll
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\RDOCURS.DLL
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdpcfgex.dll
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdpclip.exe
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdpdd.dll
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdpsnd.dll
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdpwsx.dll
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdsaddin.exe
Mon Jan 15 23:42:19 2007 => Scanning File C:\WINDOWS\system32\rdshost.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\recover.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\redir.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\reg.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regapi.dll
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regedit.com
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regedt32.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regini.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regsvc.dll
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regsvr32.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regwiz.exe
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\regwizc.dll
Mon Jan 15 23:42:20 2007 => Scanning File C:\WINDOWS\system32\relog.exe
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\remotepg.dll
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\remotesp.tsp
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\rend.dll
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\replace.exe
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\reset.exe
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\resutils.dll
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\rewire.dll
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\rexec.exe
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\riched20.dll
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\riched32.dll
Mon Jan 15 23:42:21 2007 => Scanning File C:\WINDOWS\system32\rmoc3260.dll
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\rnr20.dll
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\Roboex32.dll
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\romanime.ime
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\route.exe
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\routemon.exe
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\routetab.dll
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\rpcns4.dll
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\rpcrt4.dll
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\rpcss.dll
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\rsaci.rat
Mon Jan 15 23:42:22 2007 => Scanning File C:\WINDOWS\system32\rsaenh.dll
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsfsaps.dll
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsh.exe
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rshx32.dll
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsm.exe
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsmps.dll
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsmsink.exe
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsmui.exe
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsnotify.exe
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsop.msc
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsopprov.exe
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsvp.exe
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsvp.ini
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsvpcnts.h
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsvpmsg.dll
Mon Jan 15 23:42:23 2007 => Scanning File C:\WINDOWS\system32\rsvpperf.dll
Mon Jan 15 23:42:24 2007 => Scanning File C:\WINDOWS\system32\rsvpsp.dll

**Ro-Ann** · 2007-01-17, 00:09

Before I continue: is this really what I'm supposed to upload?
It seems like rather a lot.
No problem, mind you.
Please let me know...
I'll do the HJT first below, and continue with the MWav if you tell me to.
Thanks!
Anne

**Ro-Ann** · 2007-01-17, 00:10

Logfile of HijackThis v1.99.1
Scan saved at 23:32:21, on 16/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\TEMP\WgaTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\Internet explorer.EXE
C:\Palm\HOTSYNC.EXE
C:\antimalware\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: VampireFreaks Alerter.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Web Rebates. - file://C:\Program Files\WebRebates4\websrebates\webtrebates\toprC0.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab47946.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DefWatch - Unknown owner - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Unknown owner - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Win32 USB2 Driver (Windows Update) - Unknown owner - C:\WINDOWS\System32\winupdate.exe" -netsvcs (file missing)

**Shaba** · 2007-01-17, 16:56

Hi

You were supposed to send everything in the lower panel It's called Virus Log information. Now you sent list of all files what eScan scanned, that's not what I need

Please scan again with it and send log here.

**Ro-Ann** · 2007-01-18, 20:33

Hi Shaba,

Oh sorry.
I used the button for 'scan log' and assumed that the log it produced was what you needed.... Apparently not....

I ran it again, but obviously it had repaired everything the first time around, so the second scan came back clean. If it automatically saved a log, I haven't been able to find it.

When I rebooted using MSCONFIG, I noticed the default setting was Selective Startup, so I switched that to Normal Startup and did another HJT. Results are below.
Hope we can still sort it out.

Thanks, Anne

Logfile of HijackThis v1.99.1
Scan saved at 20:23:59, on 18/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Palm\HOTSYNC.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: VampireFreaks Alerter.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Web Rebates. - file://C:\Program Files\WebRebates4\websrebates\webtrebates\toprC0.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab47946.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DefWatch - Unknown owner - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Unknown owner - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Win32 USB2 Driver (Windows Update) - Unknown owner - C:\WINDOWS\System32\winupdate.exe" -netsvcs (file missing)

**Shaba** · 2007-01-19, 10:38

Hi

Open HijackThis, click do a system scan only and checkmark these:

O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es

Close all windows including browser and press fix checked.

Go to start -> run -> services.msc -> ok

Locate this -> Win32 USB2 Driver (Windows Update)
Doubleclick it, press stop and select startuptype disabled

Go to start -> run

Type sc delete Windows Update and click ok

Reboot

Send a fresh HijackThis log

Thread: [third computer] Panda stalls, mentions a hacking tool; here's HJT log

Thread Tools

Display

MWav 7

MWav 8

MWav 9

MWav 10

MWav 11

Question in between

HJT log

Ehh.... well....

Posting Permissions