Page 1 of 2 12 LastLast
Results 1 to 10 of 16

Thread: Virtumonde.dll!!! Help!!!

  1. 2008-08-27, 01:06 #1
    hacim
    hacim is offline
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default Virtumonde.dll!!! Help!!!

    Tried fixing this virtumonde demon myself... Wasn't very successful to say the least... Here is the HJT log, appreciate any help!!!

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 5:53:28 PM, on 8/26/2008
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\System32\mobsync.exe
    C:\Users\Micah\Desktop\HiJackThis.exe
    C:\Windows\system32\SearchFilterHost.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    F2 - REG:system.ini: Shell=
    F2 - REG:system.ini: UserInit=
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {67FE9F26-8E23-468C-923C-E4E892597CB7} - C:\Windows\system32\byXNHxxY.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {AE0699B9-FF9D-4B5A-A149-894BBD12D9AA} - (no file)
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\rqRLeEvV.dll,#1
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O13 - Gopher Prefix:
    O20 - AppInit_DLLs:
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --
    End of file - 5047 bytes
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain
  2. 2008-08-28, 10:51 #2
    Shaba
    Shaba is offline
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Hi hacim

    Please download Malwarebytes' Anti-Malware to your desktop.

    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    • Please post contents of that file in your next reply.


    • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
    • Double click on RSIT.exe to run RSIT.
    • Click Continue at the disclaimer screen.
    • Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)


    Post:

    - mbam log
    - rsit logs (taken after mbam run)
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006
  3. 2008-08-30, 21:08 #3
    hacim
    hacim is offline
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    I appreciate your help so much! Here are the logs as followed in two sections it would not let me post both of them in one reply.

    Malwarebytes' Anti-Malware 1.25
    Database version: 1062
    Windows 6.0.6001 Service Pack 1

    1:53:03 PM 8/30/2008
    mbam-log-08-30-2008 (13-53-03).txt

    Scan type: Full Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|K:\|)
    Objects scanned: 135489
    Time elapsed: 49 minute(s), 53 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 1
    Registry Keys Infected: 4
    Registry Values Infected: 2
    Registry Data Items Infected: 2
    Folders Infected: 0
    Files Infected: 7

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    C:\Windows\System32\byXNHxxY.dll (Trojan.Vundo.H) -> Delete on reboot.

    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{717d3379-eb49-45a5-950a-21d61a4013e2} (Trojan.Vundo.H) -> Delete on reboot.
    HKEY_CLASSES_ROOT\CLSID\{717d3379-eb49-45a5-950a-21d61a4013e2} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mpx (Trojan.Agent) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Malware.Trace) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\byxnhxxy -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\byxnhxxy -> Delete on reboot.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    C:\Windows\System32\byXNHxxY.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\Windows\System32\YxxHNXyb.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\Windows\System32\YxxHNXyb.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    c:\Windows\System32\mpx.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    C:\Users\Micah\AppData\Local\Temp\MediaTubeCodec_ver1.1504.0.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\Windows\System32\mpxu.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    K:\RSIT.exe (Trojan.Agent) -> Quarantined and deleted successfully.
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain
  4. 2008-08-30, 21:14 #4
    hacim
    hacim is offline
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    RSIT log

    Logfile of random's system information tool (written by random/random)
    Run by Micah at 2008-08-30 14:00:49
    Microsoft® Windows Vista™ Home Basic Service Pack 1
    System drive C: has 159 GB (67%) free of 238 GB
    Total RAM: 2047 MB (72% free)

    HijackThis download failed

    Registry dump

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
    Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-01-28 1554256]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE0699B9-FF9D-4B5A-A149-894BBD12D9AA}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {D0943516-5076-4020-A3B5-AEFAF26AB263} - Veoh Browser Plug-in - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll [2008-06-19 352256]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
    "SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [2008-02-22 144784]
    "Krait"=C:\Program Files\Razer\Krait\razerhid.exe [2007-02-16 126976]
    "P17RunE"=RunDll32 P17RunE.dll []
    "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-03-09 185632]
    "NvSvc"=C:\Windows\system32\nvsvc.dll [2007-12-11 86016]
    "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-12-11 8530464]
    "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-12-11 81920]
    "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]
    "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
    "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-07-10 116040]
    "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "ThePrivacyGuard"=C:\PROGRA~1\THEPRI~1\THEPRI~1.EXE /startup []
    "RunSpySweeperScheduleAtStartup"=C:\Windows\system32\msfeedssync.exe [2008-01-19 12800]
    "ProxyWay"=C:\Program Files\ProxyWay\proxyway.exe []
    "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_CC]
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper]
    C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
    c:\program files\steam\steam.exe [2008-03-29 1271032]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLS"=" "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{DFAAB7BB-4990-47B1-8F27-6DB9C258D26B}"=C:\Windows\system32\cbXNHBTK.dll []

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "EnableLUA"=0
    "dontdisplaylastusername"=0
    "legalnoticecaption"=
    "legalnoticetext"=
    "shutdownwithoutlogon"=1
    "undockwithoutlogon"=1
    "EnableUIADesktopToggle"=0

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
    shell\AutoRun\command - K:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3c2528f9-6a1b-11dc-b2a9-0016178feb8a}]
    shell\AutoRun\command - K:\LaunchU3.exe -a


    File associations

    .reg - open - regedit.exe "%1" %*
    .scr - open - "%1" %*
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain
  5. 2008-08-30, 21:17 #5
    hacim
    hacim is offline
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    RSIT log continued

    List of files/folders created in the last three months

    2008-08-30 14:00:49 ----D---- C:\rsit
    2008-08-30 14:00:49 ----D---- C:\Program Files\trend micro
    2008-08-30 12:31:02 ----D---- C:\Users\Micah\AppData\Roaming\Malwarebytes
    2008-08-30 12:31:00 ----D---- C:\ProgramData\Malwarebytes
    2008-08-30 12:31:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
    2008-08-26 22:08:48 ----D---- C:\ProgramData\Avg7
    2008-08-26 21:27:41 ----A---- C:\Windows\system32\4b0812fe-.txt
    2008-08-19 21:09:14 ----D---- C:\ProgramData\Azureus
    2008-08-13 11:57:00 ----A---- C:\Windows\system32\tzres.dll
    2008-08-13 11:55:04 ----A---- C:\Windows\system32\mshtml.dll
    2008-08-13 11:55:04 ----A---- C:\Windows\system32\ieframe.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\wininet.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\urlmon.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\mstime.dll
    2008-08-13 11:55:03 ----A---- C:\Windows\system32\jsproxy.dll
    2008-08-13 11:54:59 ----A---- C:\Windows\system32\inetcomm.dll
    2008-08-13 11:54:59 ----A---- C:\Windows\system32\es.dll
    2008-08-13 11:54:58 ----A---- C:\Windows\system32\IPSECSVC.DLL
    2008-08-07 20:04:19 ----D---- C:\Program Files\iPod
    2008-08-07 20:04:17 ----D---- C:\Program Files\iTunes
    2008-08-03 17:39:24 ----A---- C:\Windows\wininit.ini
    2008-07-25 03:34:30 ----A---- C:\Windows\system32\DivXCodecVersionChecker.exe
    2008-07-22 20:38:43 ----A---- C:\Windows\system32\msshooks.dll
    2008-07-22 20:38:42 ----A---- C:\Windows\system32\msscb.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\thawbrkr.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\SearchFilterHost.exe
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\propsys.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\propdefs.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\msstrc.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\mssprxy.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\mssitlb.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\msshsq.dll
    2008-07-22 20:38:40 ----A---- C:\Windows\system32\korwbrkr.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\xmlfilter.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\wsepno.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\srchadmin.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\rtffilt.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\offfilt.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\nlhtml.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\msscntrs.dll
    2008-07-22 20:38:39 ----A---- C:\Windows\system32\mimefilt.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\tquery.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\SearchProtocolHost.exe
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\SearchIndexer.exe
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\mssrch.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\chtbrkr.dll
    2008-07-22 20:38:38 ----A---- C:\Windows\system32\chsbrkr.dll
    2008-07-22 20:38:37 ----A---- C:\Windows\system32\mssvp.dll
    2008-07-22 20:38:37 ----A---- C:\Windows\system32\mssphtb.dll
    2008-07-22 20:38:37 ----A---- C:\Windows\system32\mssph.dll
    2008-07-21 19:42:32 ----A---- C:\Windows\system32\xfcodec.dll
    2008-07-17 02:38:59 ----D---- C:\Users\Micah\AppData\Roaming\BSD
    2008-07-17 02:38:57 ----D---- C:\ProgramData\MediaWidget
    2008-07-17 02:38:55 ----D---- C:\Program Files\Media Widget
    2008-07-17 02:38:55 ----A---- C:\Windows\bsdsetup.dll
    2008-07-14 15:35:02 ----A---- C:\Windows\system32\javaws.exe
    2008-07-14 15:35:02 ----A---- C:\Windows\system32\javaw.exe
    2008-07-14 15:35:02 ----A---- C:\Windows\system32\java.exe
    2008-07-12 23:25:49 ----D---- C:\Program Files\Bonjour
    2008-07-12 23:25:04 ----D---- C:\Program Files\QuickTime
    2008-07-08 14:16:50 ----A---- C:\Windows\system32\NlsLexicons0007.dll
    2008-07-08 14:16:47 ----A---- C:\Windows\system32\NlsLexicons0009.dll
    2008-07-08 14:16:38 ----A---- C:\Windows\system32\NaturalLanguage6.dll
    2008-07-08 14:15:53 ----A---- C:\Windows\system32\shell32.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\wshext.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\wscript.exe
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\vbscript.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\scrrun.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\scrobj.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\jscript.dll
    2008-07-08 14:15:48 ----A---- C:\Windows\system32\cscript.exe
    2008-07-08 14:15:36 ----A---- C:\Windows\system32\rpcrt4.dll
    2008-07-08 14:15:36 ----A---- C:\Windows\system32\ntoskrnl.exe
    2008-07-08 14:15:36 ----A---- C:\Windows\system32\ntkrnlpa.exe
    2008-07-08 14:15:35 ----A---- C:\Windows\system32\pacerprf.dll
    2008-07-08 14:15:35 ----A---- C:\Windows\system32\emdmgmt.dll
    2008-07-02 15:34:57 ----D---- C:\Program Files\Common Files\Adobe
    2008-07-02 15:34:57 ----D---- C:\Program Files\Adobe
    2008-06-29 00:31:03 ----D---- C:\Program Files\Veoh Networks
    2008-06-29 00:30:39 ----D---- C:\Windows\Downloaded Installations
    2008-06-12 16:04:50 ----D---- C:\Program Files\Microsoft Games
    2008-06-12 16:04:49 ----D---- C:\PerfLogs
    2008-06-11 19:10:32 ----A---- C:\Windows\system32\SLsvc.exe
    2008-06-11 19:10:32 ----A---- C:\Windows\system32\onex.dll
    2008-06-11 19:10:20 ----A---- C:\Windows\system32\PSHED.DLL
    2008-06-11 19:10:19 ----A---- C:\Windows\system32\imagesp1.dll
    2008-06-11 19:10:16 ----A---- C:\Windows\system32\dfsr.exe
    2008-06-11 19:10:15 ----A---- C:\Windows\system32\wuaueng.dll
    2008-06-11 19:10:15 ----A---- C:\Windows\system32\sstpsvc.dll
    2008-06-11 19:10:15 ----A---- C:\Windows\system32\pidgenx.dll
    2008-06-11 19:10:14 ----A---- C:\Windows\system32\mstscax.dll
    2008-06-11 19:10:13 ----A---- C:\Windows\system32\WsmSvc.dll
    2008-06-11 19:10:13 ----A---- C:\Windows\system32\winrscmd.dll
    2008-06-11 19:10:12 ----A---- C:\Windows\system32\sysmain.dll
    2008-06-11 19:10:11 ----A---- C:\Windows\system32\vssapi.dll
    2008-06-11 19:10:11 ----A---- C:\Windows\system32\RMActivate.exe
    2008-06-11 19:10:10 ----A---- C:\Windows\system32\VSSVC.exe
    2008-06-11 19:10:10 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
    2008-06-11 19:10:09 ----A---- C:\Windows\system32\secproc.dll
    2008-06-11 19:10:09 ----A---- C:\Windows\system32\RMActivate_isv.exe
    2008-06-11 19:10:09 ----A---- C:\Windows\system32\iesetup.dll
    2008-06-11 19:10:08 ----A---- C:\Windows\system32\secproc_isv.dll
    2008-06-11 19:10:07 ----A---- C:\Windows\system32\drmv2clt.dll
    2008-06-11 19:10:06 ----A---- C:\Windows\system32\icardres.dll
    2008-06-11 19:10:06 ----A---- C:\Windows\system32\icardagt.exe
    2008-06-11 19:10:06 ----A---- C:\Windows\system32\blackbox.dll
    2008-06-11 19:10:05 ----A---- C:\Windows\system32\xpssvcs.dll
    2008-06-11 19:10:03 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
    2008-06-11 19:10:03 ----A---- C:\Windows\system32\RMActivate_ssp.exe
    2008-06-11 19:10:02 ----A---- C:\Windows\system32\spwizimg.dll
    2008-06-11 19:10:02 ----A---- C:\Windows\system32\rdpencom.dll
    2008-06-11 19:10:02 ----A---- C:\Windows\bfsvc.exe
    2008-06-11 19:10:01 ----A---- C:\Windows\system32\msxml6.dll
    2008-06-11 19:10:01 ----A---- C:\Windows\system32\msxml3.dll
    2008-06-11 19:10:01 ----A---- C:\Windows\system32\lpremove.exe
    2008-06-11 19:10:00 ----A---- C:\Windows\system32\ntdll.dll
    2008-06-11 19:10:00 ----A---- C:\Windows\system32\msjet40.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\qmgr.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\lsasrv.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\localspl.dll
    2008-06-11 19:09:59 ----A---- C:\Windows\system32\IKEEXT.DLL
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\wevtsvc.dll
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\wcncsvc.dll
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\TsWpfWrp.exe
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\recdisc.exe
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\mscoree.dll
    2008-06-11 19:09:58 ----A---- C:\Windows\system32\kernel32.dll
    2008-06-11 19:09:56 ----A---- C:\Windows\system32\vds.exe
    2008-06-11 19:09:56 ----A---- C:\Windows\system32\CompMgmtLauncher.exe
    2008-06-11 19:09:55 ----A---- C:\Windows\system32\wmp.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\wcnwiz.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\SMBHelperClass.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\msvbvm60.dll
    2008-06-11 19:09:54 ----A---- C:\Windows\system32\mstsc.exe
    2008-06-11 19:09:53 ----A---- C:\Windows\system32\msdtctm.dll
    2008-06-11 19:09:53 ----A---- C:\Windows\system32\mf.dll
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\termsrv.dll
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\kerberos.dll
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\IMJP10K.DLL
    2008-06-11 19:09:52 ----A---- C:\Windows\system32\advapi32.dll
    2008-06-11 19:09:51 ----A---- C:\Windows\system32\mmcndmgr.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\wuapi.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\Query.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\MPSSVC.dll
    2008-06-11 19:09:50 ----A---- C:\Windows\system32\CertEnroll.dll
    2008-06-11 19:09:49 ----A---- C:\Windows\system32\xolehlp.dll
    2008-06-11 19:09:49 ----A---- C:\Windows\system32\ole32.dll
    2008-06-11 19:09:49 ----A---- C:\Windows\system32\msdtcprx.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\SSShim.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\netlogon.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\msvcrt.dll
    2008-06-11 19:09:48 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
    2008-06-11 19:09:47 ----A---- C:\Windows\system32\schedsvc.dll
    2008-06-11 19:09:47 ----A---- C:\Windows\system32\nlmgp.dll
    2008-06-11 19:09:47 ----A---- C:\Windows\system32\DfsShlEx.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\wer.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\user32.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\shlwapi.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\sdclt.exe
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\milcore.dll
    2008-06-11 19:09:46 ----A---- C:\Windows\system32\IasMigPlugin.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\WSDApi.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\vdsdyn.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\QAGENTRT.DLL
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\diagperf.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\d3d9.dll
    2008-06-11 19:09:45 ----A---- C:\Windows\system32\clusapi.dll
    2008-06-11 19:09:44 ----A---- C:\Windows\system32\winrsmgr.dll
    2008-06-11 19:09:44 ----A---- C:\Windows\system32\mtxclu.dll
    2008-06-11 19:09:44 ----A---- C:\Windows\system32\mmc.exe
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\vdsbas.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\swprv.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\SLC.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\msi.dll
    2008-06-11 19:09:43 ----A---- C:\Windows\system32\comctl32.dll
    2008-06-11 19:09:42 ----A---- C:\Windows\system32\MSVidCtl.dll
    2008-06-11 19:09:41 ----A---- C:\Windows\system32\XPSSHHDR.dll
    2008-06-11 19:09:41 ----A---- C:\Windows\system32\msdtckrm.dll
    2008-06-11 19:09:41 ----A---- C:\Windows\system32\gpsvc.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\sbe.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\samsrv.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\mfc42u.dll
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\FWPUCLNT.DLL
    2008-06-11 19:09:40 ----A---- C:\Windows\system32\esent.dll
    2008-06-11 19:09:39 ----A---- C:\Windows\system32\wecutil.exe
    2008-06-11 19:09:39 ----A---- C:\Windows\system32\usp10.dll
    2008-06-11 19:09:39 ----A---- C:\Windows\system32\sdengin2.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\mfc42.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\gacinstall.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\cmipnpinstall.dll
    2008-06-11 19:09:35 ----A---- C:\Windows\system32\cmicryptinstall.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\crypt32.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\comsvcs.dll
    2008-06-11 19:09:34 ----A---- C:\Windows\system32\certutil.exe
    2008-06-11 19:09:33 ----A---- C:\Windows\system32\wucltux.dll
    2008-06-11 19:09:33 ----A---- C:\Windows\system32\mswsock.dll
    2008-06-11 19:09:33 ----A---- C:\Windows\explorer.exe
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\wmdrmsdk.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\sqlceqp30.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\setupapi.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\oleaut32.dll
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\lsm.exe
    2008-06-11 19:09:32 ----A---- C:\Windows\system32\FirewallAPI.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\wecsvc.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\sdohlp.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\schannel.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\msv1_0.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\iphlpsvc.dll
    2008-06-11 19:09:31 ----A---- C:\Windows\system32\bcrypt.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\wmpmde.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\thumbcache.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\riched20.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\p2psvc.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\netapi32.dll
    2008-06-11 19:09:30 ----A---- C:\Windows\system32\eapp3hst.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\WinSAT.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\vdsutil.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\imapi2fs.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\d3d10_1.dll
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\autofmt.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\autoconv.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\autochk.exe
    2008-06-11 19:09:29 ----A---- C:\Windows\system32\authfwcfg.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\wevtapi.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\dmvdsitf.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\d3d10_1core.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\comuid.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\comdlg32.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\browseui.dll
    2008-06-11 19:09:28 ----A---- C:\Windows\system32\authui.dll
    2008-06-11 19:09:27 ----A---- C:\Windows\system32\WSDMon.dll
    2008-06-11 19:09:27 ----A---- C:\Windows\system32\mscories.dll
    2008-06-11 19:09:27 ----A---- C:\Windows\system32\eapphost.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\wevtfwd.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\untfs.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\uexfat.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\sqlcese30.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\rasmans.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\pcaui.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\iassam.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\eappcfg.dll
    2008-06-11 19:09:26 ----A---- C:\Windows\system32\DfrgNtfs.exe
    2008-06-11 19:09:25 ----A---- C:\Windows\system32\wlansvc.dll
    2008-06-11 19:09:25 ----A---- C:\Windows\system32\whealogr.dll
    2008-06-11 19:09:24 ----A---- C:\Windows\system32\dot3svc.dll
    2008-06-11 19:09:22 ----A---- C:\Windows\system32\rdpwsx.dll
    2008-06-11 19:09:22 ----A---- C:\Windows\system32\mssha.dll
    2008-06-11 19:09:22 ----A---- C:\Windows\system32\msdrm.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\zipfldr.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\WsmAuto.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\winhttp.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\rpcss.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\rasppp.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\nlasvc.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\ncrypt.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\evr.dll
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\dfrgui.exe
    2008-06-11 19:09:21 ----A---- C:\Windows\system32\BFE.DLL
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\WsmWmiPl.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\WMVCORE.DLL
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\wmdrmdev.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\win32spl.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\printui.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\msrepl40.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\dhcpcsvc6.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\ddraw.dll
    2008-06-11 19:09:20 ----A---- C:\Windows\system32\audiosrv.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\WebClnt.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\themecpl.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\rastls.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\QAGENT.DLL
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\objsel.dll
    2008-06-11 19:09:19 ----A---- C:\Windows\system32\dbghelp.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\w32time.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\sqlsrv32.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\PresentationHost.exe
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\ncryptui.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\icm32.dll
    2008-06-11 19:09:18 ----A---- C:\Windows\system32\iasnap.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\wmdrmnet.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\WerFaultSecure.exe
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\spoolss.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\msctf.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\iprtrmgr.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\infocardapi.dll
    2008-06-11 19:09:17 ----A---- C:\Windows\system32\azroles.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\wlangpui.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\winsrv.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\taskschd.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\scksp.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\mstlsapi.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\bcdedit.exe
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\basecsp.dll
    2008-06-11 19:09:16 ----A---- C:\Windows\system32\AudioEng.dll
    2008-06-11 19:09:15 ----A---- C:\Windows\system32\winsta.dll
    2008-06-11 19:09:15 ----A---- C:\Windows\system32\netprofm.dll
    2008-06-11 19:09:15 ----A---- C:\Windows\system32\dbgeng.dll
    2008-06-11 19:09:14 ----A---- C:\Windows\system32\taskcomp.dll
    2008-06-11 19:09:14 ----A---- C:\Windows\system32\rsaenh.dll
    2008-06-11 19:09:14 ----A---- C:\Windows\system32\netcfgx.dll
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\winlogon.exe
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\wercon.exe
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\sqmapi.dll
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\lpksetup.exe
    2008-06-11 19:09:13 ----A---- C:\Windows\system32\cdosys.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\wlansec.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\msdtcuiu.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\mprddm.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\dfshim.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\certcli.dll
    2008-06-11 19:09:12 ----A---- C:\Windows\system32\apds.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\tsgqec.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\shdocvw.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\iasrad.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\eapsvc.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\bcdsrv.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\AUDIOKSE.dll
    2008-06-11 19:09:11 ----A---- C:\Windows\system32\aaclient.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\Wldap32.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\uDWM.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\msidcrl30.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\dnsapi.dll
    2008-06-11 19:09:10 ----A---- C:\Windows\system32\certmgr.dll
    2008-06-11 19:09:09 ----A---- C:\Windows\system32\WMVDECOD.DLL
    2008-06-11 19:09:09 ----A---- C:\Windows\system32\umpnpmgr.dll
    2008-06-11 19:09:09 ----A---- C:\Windows\system32\pla.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\wmicmiplugin.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\netshell.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\dxgi.dll
    2008-06-11 19:09:08 ----A---- C:\Windows\system32\dot3gpui.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\shsvcs.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\ntprint.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\cryptnet.dll
    2008-06-11 19:09:07 ----A---- C:\Windows\system32\comsnap.dll
    2008-06-11 19:09:06 ----A---- C:\Windows\system32\winmm.dll
    2008-06-11 19:09:06 ----A---- C:\Windows\system32\NlsData0009.dll
    2008-06-11 19:09:06 ----A---- C:\Windows\system32\MMDevAPI.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\wscsvc.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\synceng.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\services.exe
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\pnidui.dll
    2008-06-11 19:09:05 ----A---- C:\Windows\system32\cmifw.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\wscisvif.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\taskeng.exe
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\msjtes40.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\msconfig.exe
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\iassdo.dll
    2008-06-11 19:09:04 ----A---- C:\Windows\system32\cipher.exe
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\WMVSDECD.DLL
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\tdh.dll
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\rasapi32.dll
    2008-06-11 19:09:03 ----A---- C:\Windows\system32\imapi2.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\wersvc.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\uxtheme.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\SessEnv.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\dot3api.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\dmdskmgr.dll
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\cmd.exe
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\cbsra.exe
    2008-06-11 19:09:02 ----A---- C:\Windows\system32\AuthFWSnapin.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wuwebv.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\WUDFx.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wlanmsm.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wlancfg.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wkssvc.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\wevtutil.exe
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\srvsvc.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\qdvd.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\msscp.dll
    2008-06-11 19:09:01 ----A---- C:\Windows\system32\loadperf.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\rpchttp.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\rdpdd.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\mshtmled.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\msdtcVSp1res.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\localsec.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\fontext.dll
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\diskpart.exe
    2008-06-11 19:09:00 ----A---- C:\Windows\system32\comres.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\wsqmcons.exe
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\wlanapi.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\WinSATAPI.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\hnetcfg.dll
    2008-06-11 19:08:59 ----A---- C:\Windows\system32\dsound.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\WMADMOD.DLL
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\wlanpref.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\RDPENCDD.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\profprov.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\NAPMONTR.DLL
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\filemgmt.dll
    2008-06-11 19:08:58 ----A---- C:\Windows\system32\avifil32.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\wsecedit.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\WMSPDMOD.DLL
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\WindowsCodecs.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\tracerpt.exe
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\SLCommDlg.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\PresentationHostProxy.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\P2PGraph.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\MuiUnattend.exe
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\dwmredir.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\dnsrslvr.dll
    2008-06-11 19:08:57 ----A---- C:\Windows\system32\dhcpcsvc.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\wininit.exe
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\spp.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\rasdlg.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\QSHVHOST.DLL
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\iassvcs.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\gpresult.exe
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\dwm.exe
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\azroleui.dll
    2008-06-11 19:08:56 ----A---- C:\Windows\system32\apphelp.dll
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\PortableDeviceApi.dll
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\mscorier.dll
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\mcbuilder.exe
    2008-06-11 19:08:55 ----A---- C:\Windows\system32\iashost.exe
    2008-06-11 19:08:55 ----A---- C:\Windows\HelpPane.exe
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\wecapi.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\unbcl.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\tcpmon.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\srrstr.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\spwizeng.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\SLUI.exe
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\shrink.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\rasmontr.dll
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\msra.exe
    2008-06-11 19:08:54 ----A---- C:\Windows\system32\lltdsvc.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\WMPEncEn.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\oleacc.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\IPHLPAPI.DLL
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\iertutil.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\iashlpr.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\gpedit.dll
    2008-06-11 19:08:53 ----A---- C:\Windows\system32\brcpl.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\regsvc.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\raschap.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\ntvdm.exe
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\ipsmsnap.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\framedynos.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\fdWSD.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\Faultrep.dll
    2008-06-11 19:08:52 ----A---- C:\Windows\system32\advpack.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\wpdshext.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\wdc.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\vsstrace.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\PerfCenterCPL.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\ntlanman.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\l2nacp.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\iedkcs32.dll
    2008-06-11 19:08:51 ----A---- C:\Windows\system32\EncDec.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\WlanMM.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\Storprop.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\netman.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\ieapfltr.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\framedyn.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\dssenh.dll
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\certreq.exe
    2008-06-11 19:08:50 ----A---- C:\Windows\system32\adsnt.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\WUDFHost.exe
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\WsmProv.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\wlanhlp.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\WLanConn.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\tcpipcfg.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\sxs.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\profsvc.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\ncsi.dll
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\KMSVC.DLL
    2008-06-11 19:08:49 ----A---- C:\Windows\system32\IPBusEnum.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\wusa.exe
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\WerFault.exe
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\VAN.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\userenv.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\umb.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\ie4uinit.exe
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\fundisc.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\cryptui.dll
    2008-06-11 19:08:48 ----A---- C:\Windows\system32\catsrvut.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\puiobj.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\NlsData000c.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\NlsData0007.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\netid.dll
    2008-06-11 19:08:47 ----A---- C:\Windows\system32\dps.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\photowiz.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\NlsData0011.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\netcenter.dll
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\MdSched.exe
    2008-06-11 19:08:46 ----A---- C:\Windows\system32\InkEd.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData004b.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData004a.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData0047.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData0046.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\NlsData0045.dll
    2008-06-11 19:08:45 ----A---- C:\Windows\system32\ipsecsnp.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\WinSCard.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\NlsData004e.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\NlsData004c.dll
    2008-06-11 19:08:44 ----A---- C:\Windows\system32\NlsData0049.dll
    2008-06-11 19:08:43 ----A---- C:\Windows\system32\spbcd.dll
    2008-06-11 19:08:43 ----A---- C:\Windows\system32\NlsData000a.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\ws2_32.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\ntdsapi.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData0c1a.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData0414.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData001b.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData001a.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData0018.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\NlsData000f.dll
    2008-06-11 19:08:42 ----A---- C:\Windows\system32\msinfo32.exe
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\secur32.dll
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\NlsData0416.dll
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\NlsData0039.dll
    2008-06-11 19:08:41 ----A---- C:\Windows\system32\NlsData0020.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\winrs.exe
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\odbcjt32.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData0816.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData003e.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData002a.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData0022.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NlsData0021.dll
    2008-06-11 19:08:40 ----A---- C:\Windows\system32\NAPSTAT.EXE
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData0026.dll
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData001d.dll
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData0019.dll
    2008-06-11 19:08:39 ----A---- C:\Windows\system32\NlsData0010.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData0027.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData0024.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData000d.dll
    2008-06-11 19:08:38 ----A---- C:\Windows\system32\NlsData0001.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\prnntfy.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData081a.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData0013.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData0003.dll
    2008-06-11 19:08:37 ----A---- C:\Windows\system32\NlsData0002.dll
    2008-06-11 19:08:35 ----A---- C:\Windows\system32\mblctr.exe
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\schtasks.exe
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\RelMon.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\pdh.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\msfeeds.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\iasacct.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\dmdlgs.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\dhcpsapi.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\cryptsvc.dll
    2008-06-11 19:08:34 ----A---- C:\Windows\system32\activeds.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\TSpkg.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\netdiagfx.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\FirewallControlPanel.exe
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\fdWCN.dll
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\dfrgfat.exe
    2008-06-11 19:08:33 ----A---- C:\Windows\system32\catsrv.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\wvc.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\wow32.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\winrm.vbs
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\rastapi.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\qwave.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\netcorehc.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\NAPHLPR.DLL
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\msacm32.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\ifmon.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\dot3msm.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\dot3cfg.dll
    2008-06-11 19:08:32 ----A---- C:\Windows\system32\AudioSes.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\wudriver.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\wscntfy.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\shsetup.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\ntshrui.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\msdt.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\els.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\clbcatq.dll
    2008-06-11 19:08:31 ----A---- C:\Windows\system32\adsldp.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\WMNetMgr.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\stobject.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\sdrsvc.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\QUTIL.DLL
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\psisdecd.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\net1.exe
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\ipnathlp.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\iasrecst.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\iasdatastore.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\fdSSDP.dll
    2008-06-11 19:08:30 ----A---- C:\Windows\system32\dsprop.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\wlgpclnt.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\wlanui.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\upnphost.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\systemcpl.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\smss.exe
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\rasman.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\nci.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\mprmsg.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\Defrag.exe
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\adsldpc.dll
    2008-06-11 19:08:29 ----A---- C:\Windows\system32\ActiveContentWizard.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\Wpc.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\wdigest.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\t2embed.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\setupcl.exe
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\rascfg.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\P2P.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\oleprn.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\msftedit.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\MigAutoPlay.exe
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain
  6. 2008-08-30, 21:20 #6
    hacim
    hacim is offline
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    RSIT log continued

    2008-06-11 19:08:28 ----A---- C:\Windows\system32\loghours.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\L2SecHC.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\fde.dll
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\dxdiag.exe
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\DFDWiz.exe
    2008-06-11 19:08:28 ----A---- C:\Windows\system32\CompatUI.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\wiaservc.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\scansetting.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\rtm.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\NAPCRYPT.DLL
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\msutb.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\mprdim.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\gpapi.dll
    2008-06-11 19:08:27 ----A---- C:\Windows\system32\devmgr.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\wdi.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\msihnd.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\kdusb.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\ifsutil.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\dimsroam.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\CertEnrollUI.dll
    2008-06-11 19:08:26 ----A---- C:\Windows\system32\actxprxy.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\wscapi.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\wlandlg.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\WinFXDocObj.exe
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\vssadmin.exe
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\usbmon.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\SyncCenter.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\spoolsv.exe
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\regapi.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\mycomput.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\mswmdm.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\msls31.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\imagehlp.dll
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\BOOTVID.DLL
    2008-06-11 19:08:25 ----A---- C:\Windows\system32\audiodg.exe
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\uudf.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\sud.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\scecli.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\SCardSvr.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\newdev.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\mstask.dll
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\mspaint.exe
    2008-06-11 19:08:24 ----A---- C:\Windows\system32\kdcom.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\termmgr.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\tapisrv.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\ssdpsrv.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\SLUINotify.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\samlib.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\Robocopy.exe
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\puiapi.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\mtxoci.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\input.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\inetpp.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\duser.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\cic.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\AzSqlExt.dll
    2008-06-11 19:08:23 ----A---- C:\Windows\system32\adtschema.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\wisptis.exe
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\sdshext.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\netiohlp.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\iasads.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\cscapi.dll
    2008-06-11 19:08:22 ----A---- C:\Windows\system32\authz.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\WUDFPlatform.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\wpcsvc.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\webcheck.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\verifier.exe
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\themeui.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\slcinst.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\NlsData0000.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\msdtclog.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\msdt.exe
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\dxtmsft.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\d3d8.dll
    2008-06-11 19:08:21 ----A---- C:\Windows\system32\cmdial32.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\wpccpl.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\WMPhoto.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\wintrust.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\vdsldr.exe
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\SndVol.exe
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\rasgcw.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\pnpsetup.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\oledlg.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\ntmarta.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\mmcbase.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\mlang.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\icfupgd.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\icardie.dll
    2008-06-11 19:08:20 ----A---- C:\Windows\system32\clfsw32.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\wpd_ci.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\syssetup.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\slmgr.vbs
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\rasqec.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\polstore.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\nslookup.exe
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\ncobjapi.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\msrd3x40.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\msaatext.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\mpr.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\ieui.dll
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\diskraid.exe
    2008-06-11 19:08:19 ----A---- C:\Windows\system32\accessibilitycpl.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\wtsapi32.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\unlodctr.exe
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\ulib.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\sethc.exe
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\pnpui.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\oobefldr.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\mscms.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\lodctr.exe
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\iaspolcy.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\fontsub.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\extmgr.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\dxdiagn.dll
    2008-06-11 19:08:18 ----A---- C:\Windows\system32\cabinet.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\Utilman.exe
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\unattend.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\trkwks.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\scesrv.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\ogldrv.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\occache.dll
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\lnkstub.exe
    2008-06-11 19:08:17 ----A---- C:\Windows\system32\cabview.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\wups2.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\wpcao.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\wermgr.exe
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\sdspres.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\p2pcollab.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\msnetobj.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\iepeers.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\ieaksie.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\eappgnui.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\dsquery.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\drvinst.exe
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\dispdiag.exe
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\DHCPQEC.DLL
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\dfdts.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\bthci.dll
    2008-06-11 19:08:16 ----A---- C:\Windows\system32\basesrv.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\verifier.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\secproc_ssp.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\RstrtMgr.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\mprapi.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\mmcss.dll
    2008-06-11 19:08:15 ----A---- C:\Windows\system32\efsadu.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\WPDSp.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\WMVENCOD.DLL
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\wmpeffects.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\wercplsupport.dll
    2008-06-11 19:08:14 ----A---- C:\Windows\system32\qedit.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\WPDShServiceObj.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\wiascanprofiles.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\wiaaut.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\setupugc.exe
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\QSVRMGMT.DLL
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\pnrpnsp.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\pngfilt.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\p2pnetsh.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\networkmap.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\msoeacct.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\iscsiexe.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\icacls.exe
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\d3d10core.dll
    2008-06-11 19:08:13 ----A---- C:\Windows\system32\consent.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\xactsrv.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\wuauclt.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\usercpl.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\PNPXAssocPrx.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\PNPXAssoc.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\pcadm.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\msrdc.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\msdmo.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\lsass.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\lpk.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\eappprxy.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\drmmgrtn.dll
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\dpapimig.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\conime.exe
    2008-06-11 19:08:12 ----A---- C:\Windows\system32\autoplay.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\xwizards.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\systeminfo.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\resutils.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\netcfg.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\msrating.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\mfplat.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\findstr.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\DWWIN.EXE
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\dssec.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\dot3ui.dll
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\dfrgifc.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\cmdl32.exe
    2008-06-11 19:08:11 ----A---- C:\Windows\system32\alg.exe
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\txflog.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\powercpl.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\odbc32.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\nshhttp.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\netprof.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\MFWMAAEC.DLL
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\imm32.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\feclient.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\dbnetlib.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\btpanui.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\system32\apircl.dll
    2008-06-11 19:08:10 ----A---- C:\Windows\regedit.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\tbssvc.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\taskkill.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\svchost.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\RASMM.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\provthrd.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\msieftp.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\iexpress.exe
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\dxva2.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\dwmapi.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\d3d10.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\bcdprov.dll
    2008-06-11 19:08:09 ----A---- C:\Windows\system32\ActionQueue.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\syncui.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\slwmi.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\SLCExt.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\slcc.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\shwebsvc.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\networkexplorer.dll
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\EAPQEC.DLL
    2008-06-11 19:08:08 ----A---- C:\Windows\system32\dmocx.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\xcopy.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\WMASF.DLL
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\uxsms.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\taskmgr.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\raserver.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\PnPUnattend.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\olepro32.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\ias.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\dnscacheugc.exe
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\connect.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\brcplsdw.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\audiodev.dll
    2008-06-11 19:08:07 ----A---- C:\Windows\system32\aclui.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\wlanext.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\upnp.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\UIHub.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\reg.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\QCLIPROV.DLL
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\perfts.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\NapiNSP.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\msoert2.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\msjetoledb40.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\mountvol.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\mmcshext.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\icsfiltr.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\cmstp.exe
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\certprop.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\browser.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\AuxiliaryDisplayApi.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\atl.dll
    2008-06-11 19:08:06 ----A---- C:\Windows\system32\appinfo.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\wuapp.exe
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\WpdMtpUS.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\WMVXENCD.DLL
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\wmpdxm.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\SysFxUI.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\SoundRecorder.exe
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\rekeywiz.exe
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\qcap.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\qasf.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\PING.EXE
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\netplwiz.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\inetmib1.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\ieakeng.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\httpapi.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\dsuiext.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\dskquoui.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\dmusic.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\cewmdm.dll
    2008-06-11 19:08:05 ----A---- C:\Windows\system32\bitsadmin.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\xwtpw32.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\WUDFSvc.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\WMVSENCD.DLL
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\wmpsrcwp.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\WMALFXGFXDSP.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\shimgvw.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\Sens.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\SecEdit.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\sbeio.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\ndfapi.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\mtstocom.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\mscandui.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\makecab.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\lsmproxy.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\dot3gpclnt.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\batt.dll
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\auditpol.exe
    2008-06-11 19:08:04 ----A---- C:\Windows\system32\adsmsext.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wzcdlg.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wscmisetup.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wiashext.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\wiadefui.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\userinit.exe
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\sppnp.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\shacct.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\seclogon.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\printcom.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\p2phost.exe
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\msorcl32.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\msdadiag.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\dxtrans.dll
    2008-06-11 19:08:03 ----A---- C:\Windows\system32\apss.dll
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\wpdwcn.dll
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\WMSPDMOE.DLL
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\sxstrace.exe
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\perfmon.exe
    2008-06-11 19:08:02 ----A---- C:\Windows\system32\napipsec.dll
    2008-06-11 19:08:00 ----A---- C:\Windows\system32\HelpPaneProxy.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\wups.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\winrshost.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\UIAutomationCore.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\tasklist.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\TapiMigPlugin.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\rrinstaller.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\prntvpt.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\notepad.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\netiougc.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\msiexec.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\MP4SDECD.DLL
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\ktmutil.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\keymgr.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\FwRemoteSvr.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\ftp.exe
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\fmifs.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\d3dim700.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\csrsrv.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\system32\colorui.dll
    2008-06-11 19:07:59 ----A---- C:\Windows\notepad.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\wscproxystub.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\wpdbusenum.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\wmiprop.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\winethc.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\txfw32.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\takeown.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\rasplap.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\powrprof.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\pots.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\PnPutil.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\pcasvc.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\nshipsec.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\msimtf.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\mfps.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\logagent.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\inseng.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\findnetprinters.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\driverquery.exe
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\cryptdll.dll
    2008-06-11 19:07:58 ----A---- C:\Windows\system32\capisp.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\WLanHC.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\wextract.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\TMM.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\shrpubw.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\shgina.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\sfc_os.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\sendmail.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\runonce.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\rshx32.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\RpcPing.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\RESAMPLEDMO.DLL
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\perfnet.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\olecli32.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\nsisvc.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\mfpmp.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\luainstall.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\ktmw32.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\imapi.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\fsutil.exe
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\fdPHost.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\dnshc.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\d3dim.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\compstui.dll
    2008-06-11 19:07:57 ----A---- C:\Windows\system32\cmmon32.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\WMADMOE.DLL
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\wiaacmgr.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\w32tm.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\version.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\unregmp2.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\UI0Detect.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\tscupgrd.exe

    2008-06-11 19:07:56 ----A---- C:\Windows\system32\net.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\msvfw32.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\MPG4DECD.DLL
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\MP43DECD.DLL
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\mdminst.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\imgutil.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\getmac.exe
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\dsauth.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\dimsjob.dll
    2008-06-11 19:07:56 ----A---- C:\Windows\system32\cmlua.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\wmpshell.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\sfc.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\sdchange.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\PortableDeviceWiaCompat.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\pnpts.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\migisol.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\ipconfig.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\fdeploy.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\dispci.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\dinput8.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\diantz.exe
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\credui.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\comrepl.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\cmutil.dll
    2008-06-11 19:07:55 ----A---- C:\Windows\system32\ACW.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\wmvdspa.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\wmidx.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\vdmredir.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\utildll.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\TSTheme.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\TpmInit.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\softkbd.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\remotepg.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\pdhui.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\nlaapi.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\msfeedsbs.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\modemui.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\McxDriv.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\iernonce.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\hlink.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\fwcfg.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\ExplorerFrame.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\expand.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\EncDump.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\colbact.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\cfgbkend.dll
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\bridgeunattend.exe
    2008-06-11 19:07:54 ----A---- C:\Windows\system32\amstream.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wsnmp32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wpnpinst.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wmpcm.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\wfapigp.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\waitfor.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\vds_ps.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\tabcal.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\sti_ci.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\shutdown.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\rdrleakdiag.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\rasauto.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\qdv.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\osblprov.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\olethk32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\olesvr32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\odbccp32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\msdtc.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\mfvdsp.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\logman.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\iscsiwmi.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\iscsium.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\esentutl.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\dpnet.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\DpiScaling.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\dmsynth.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\COLORCNV.DLL
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\cmcfg32.dll
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\cacls.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\bootcfg.exe
    2008-06-11 19:07:53 ----A---- C:\Windows\system32\admparse.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\xmlprovi.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\WpdConns.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\werdiagcontroller.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\wavemsp.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\ufat.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\ucsvc.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\sxproxy.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\SLLUA.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\rgb9rast.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\RegCtrl.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\odbctrac.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\networkitemfactory.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\mstext40.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\mshta.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\msctfui.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\licmgr10.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\itss.dll
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\convert.exe
    2008-06-11 19:07:52 ----A---- C:\Windows\system32\at.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\winnsi.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\unattendedjoin.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\TimeDateMUICallback.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\tbs.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\setupcln.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\rasdiag.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\prevhost.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\ocsetup.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\netbtugc.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\mydocs.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\mobsync.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\l2gpstore.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\iscsied.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\GuidedHelp.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\fphc.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\dskquota.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\dmime.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\csrstub.exe
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\cscdll.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\cmpbk32.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\bitsigd.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\AuthFWGP.dll
    2008-06-11 19:07:51 ----A---- C:\Windows\system32\AtBroker.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\wpclsp.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\WINSRPC.DLL
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\vss_ps.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\VIDRESZR.DLL
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\usbui.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\upnpcont.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\srwmi.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\regini.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\RacAgent.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\odbccu32.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\odbccr32.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\nsi.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\nbtstat.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\napdsnap.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\mtxlegih.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\mtxdm.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\msident.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\msdart.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\MsCtfMonitor.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\mfcsubs.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\graftabl.com
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\gpupdate.exe
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\dsdmo.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\dot3dlg.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\devenum.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\cmstplua.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\avrt.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\apilogen.dll
    2008-06-11 19:07:50 ----A---- C:\Windows\system32\amxread.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\wsock32.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\wiarpc.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\WavDest.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\vfwwdm32.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\syskey.exe
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\ROUTE.EXE
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\rasphone.exe
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\procinst.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\odbcbcp.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\netevent.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\ndfetw.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\msexcl40.dll
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\MP3DMOD.DLL
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\extrac32.exe
    2008-06-11 19:07:49 ----A---- C:\Windows\system32\eventcls.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\WlanMmHC.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\WindowsAnytimeUpgrade.exe
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\wiadss.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\TabbtnEx.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\Tabbtn.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\psbase.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\msxbde40.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\inetppui.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\dmscript.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\dmloader.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\d3dxof.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\csrss.exe
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\CertEnrollCtrl.exe
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\cdd.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\atmfd.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\system32\Apphlpdm.dll
    2008-06-11 19:07:48 ----A---- C:\Windows\fveupdate.exe
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\wshcon.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\PlaySndSrv.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\Netplwiz.exe
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\mspbde40.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\msltus40.dll
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\icsunattend.exe
    2008-06-11 19:07:47 ----A---- C:\Windows\system32\credssp.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\WsmRes.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\WSHTCPIP.DLL
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\wship6.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\tcpmon.ini
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\sxsstore.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\slwga.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\setupSNK.exe
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\sbunattend.exe
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\OptionalFeatures.exe
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\msvidc32.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\localui.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\lltdapi.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\LangCleanupSysprepAction.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\icaapi.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\HotStartUserAgent.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\dmutil.dll
    2008-06-11 19:07:46 ----A---- C:\Windows\system32\ComputerDefaults.exe
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\usbperf.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\spopk.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\serialui.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\odbcconf.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\NcdProp.dll
    2008-06-11 19:07:45 ----A---- C:\Windows\system32\cofiredm.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\rasctrs.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\msobjs.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\msfeedssync.exe
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\midimap.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\ieencode.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\hnetmon.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\hbaapi.dll
    2008-06-11 19:07:44 ----A---- C:\Windows\system32\corpol.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\winipsec.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\vdmdbg.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\url.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\nlsbres.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\LogonUI.exe
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\iprtprio.dll
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\InfDefaultInstall.exe
    2008-06-11 19:07:43 ----A---- C:\Windows\system32\esentprf.dll
    2008-06-11 19:07:42 ----A---- C:\Windows\system32\osbaseln.dll
    2008-06-11 19:07:42 ----A---- C:\Windows\system32\msisip.dll
    2008-06-11 19:07:42 ----A---- C:\Windows\system32\cfgmgr32.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\winusb.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\rdpcfgex.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\msmmsp.dll
    2008-06-11 19:07:41 ----A---- C:\Windows\system32\dispex.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\riched32.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\Nlsdl.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\msidle.dll
    2008-06-11 19:07:39 ----A---- C:\Windows\system32\idndl.dll
    2008-06-11 19:07:38 ----A---- C:\Windows\system32\spwmp.dll
    2008-06-11 19:07:37 ----A---- C:\Windows\system32\KBDKOR.DLL
    2008-06-11 19:07:37 ----A---- C:\Windows\system32\KBDJPN.DLL
    2008-06-11 19:07:37 ----A---- C:\Windows\system32\iscsilog.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\WsmCl.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\wmploc.DLL
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\vga256.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\tsddd.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\framebuf.dll
    2008-06-11 19:07:34 ----A---- C:\Windows\system32\dxmasf.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\vga64k.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\vga.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\spwizres.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\f3ahvoas.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\dmdskres2.dll
    2008-06-11 19:07:33 ----A---- C:\Windows\system32\bootstr.dll
    2008-06-11 19:07:31 ----A---- C:\Windows\system32\gatherWiredInfo.vbs
    2008-06-11 19:07:30 ----A---- C:\Windows\system32\gatherWirelessInfo.vbs
    2008-06-11 19:07:30 ----A---- C:\Windows\system32\fsmgmt.msc
    2008-06-11 19:07:27 ----A---- C:\Windows\system32\perfmon.msc
    2008-06-11 19:07:26 ----A---- C:\Windows\system32\vsp1cln.exe
    2008-06-11 19:06:46 ----A---- C:\Windows\system32\xmllite.dll
    2008-06-11 19:06:42 ----A---- C:\Windows\system32\wbemcomn.dll
    2008-06-11 19:06:21 ----A---- C:\Windows\system32\SmiInstaller.dll
    2008-06-11 19:06:20 ----A---- C:\Windows\system32\SmiEngine.dll
    2008-06-11 19:06:08 ----A---- C:\Windows\system32\wdscore.dll
    2008-06-11 19:06:08 ----A---- C:\Windows\system32\PkgMgr.exe
    2008-06-11 19:05:19 ----A---- C:\Windows\system32\drvstore.dll
    2008-06-11 19:05:16 ----A---- C:\Windows\system32\dpx.dll
    2008-06-11 19:05:15 ----A---- C:\Windows\system32\mspatcha.dll
    2008-06-11 19:05:15 ----A---- C:\Windows\system32\msdelta.dll
    2008-06-11 17:02:16 ----A---- C:\Windows\system32\RacEngn.dll
    2008-06-11 17:02:07 ----A---- C:\Windows\system32\quartz.dll
    2008-06-01 16:20:13 ----A---- C:\Windows\War3Unin.exe
    2008-06-01 16:17:43 ----D---- C:\Program Files\Warcraft III
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain
  7. 2008-08-30, 21:22 #7
    hacim
    hacim is offline
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    RSIT log end

    List of drivers

    R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2008-01-19 95744]
    R2 nxsIO32;NextSensor Kernel I/O Driver; \??\C:\Windows\System32\DRIVERS\nxsIO32.sys [2008-02-19 2208]
    R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
    R3 irsir;Microsoft Serial Infrared Driver; C:\Windows\system32\DRIVERS\irsir.sys [2008-01-19 20992]
    R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-18 1040544]
    R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-12-11 8238688]
    R3 P17;SB Live! 24-bit; C:\Windows\system32\drivers\P17.sys [2007-06-13 1131520]
    R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
    S3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys []
    S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
    S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2007-10-11 27672]
    S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
    S3 Inspect;Comodo Firewall Network Driver; C:\Windows\system32\DRIVERS\inspect.sys []
    S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RtkHDAud.sys []
    S3 krait03;Razer krait USB Filter Driver; C:\Windows\System32\Drivers\krait.sys [2005-12-07 13324]
    S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
    S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
    S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
    S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2008-07-10 32000]
    S3 usbaudio;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-19 73088]
    S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
    S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\system32\drivers\wmiacpi.sys []

    List of services

    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-07-22 116040]
    R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
    R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2008-01-19 21504]
    R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2007-12-24 66872]
    R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 810320]
    R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-07-30 532264]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
    S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2008-08-11 87288]

    -----------------EOF-----------------
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain
  8. 2008-08-30, 21:25 #8
    Shaba
    Shaba is offline
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Please post also extras.txt, it is in c:\rsit folder
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006
  9. 2008-08-31, 08:16 #9
    hacim
    hacim is offline
    Junior Member hacim's Avatar
    Join Date
    Aug 2008
    Location
    Tx
    Posts
    12

    Default

    Sorry, I thought I had all of them. Here is the requested extra.txt haha

    info.txt logfile of random's system information tool 2008-08-30 14:00:52

    Uninstall list

    -->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x9
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x9 /remove
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA9944C8-7D34-475E-8C90-2788685B2C47}\setup.exe" -l0x9
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA9944C8-7D34-475E-8C90-2788685B2C47}\setup.exe" -l0x9 /remove
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAEF329E-F353-46C9-933D-24A571986093}\setup.exe" -l0x9
    -->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAEF329E-F353-46C9-933D-24A571986093}\setup.exe" -l0x9 /remove
    Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
    Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
    Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Reader 8.1.2-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81200000003}
    Adobe Shockwave Player-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log
    Apple Mobile Device Support-->MsiExec.exe /I{49C88E44-1B38-4FC6-824E-2BDA3063B0E3}
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    Battlefield 1942: Secret Weapons of WWII-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B73B4A99-4173-4747-BBEC-0F05E966F9D2}\setup.exe" -l0x9
    Battlefield 1942: The Road To Rome-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D057AA08-8CBF-42E3-9EAB-23B8FED1C279}\setup.exe" -l0x9
    Battlefield 1942-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}\setup.exe" -l0x9
    Battlefield 2(TM)-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x9 -removeonly
    Battlefield Vietnam(TM)-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E35B3C63-E958-4E31-A178-95D22024109A}\setup.exe" -l0x9
    Battlefield Vietnam: WW2 Mod-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F989306B-9287-444F-AE73-E30C7E4AF0F5}\setup.exe" -l0x9
    Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
    Call of Duty(R) 2-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{D0A05794-48C2-4424-A15A-9F20FCFDD374} /l1033
    Command & Conquer Generals-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{06F80017-8F98-4C94-B868-52358569FC32}
    Command and ConquerTM Generals Zero Hour-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}
    Counter-Strike: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/240
    Creative Audio Console-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17E96A7F-AFE3-4171-87B1-583E376319E8}\setup.exe" -l0x9 /remove
    Day of Defeat: Source-->"C:\Program Files\Steam\steam.exe" steam://uninstall/300
    DesertCombat 0.7-->C:\Windows\iun6002.exe "C:\Program Files\EA GAMES\Battlefield 1942\DesertCombat.ini"
    FEAR-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2B653229-9854-4989-B780-D978F5F13EAB}\setup.exe" -l0x9 /zU -removeonly
    Fraps-->"C:\Fraps\uninstall.exe"
    Futuremark SystemInfo-->C:\Program Files\InstallShield Installation Information\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}\setup.exe -runfromtemp -l0x0009 -removeonly
    GTK+ Runtime 2.12.1 rev b (remove only)-->C:\Program Files\Common Files\GTK\2.0\uninst.exe
    Half-Life 2: Deathmatch-->"C:\Program Files\Steam\steam.exe" steam://uninstall/320
    Half-Life 2: Lost Coast-->"C:\Program Files\Steam\steam.exe" steam://uninstall/340
    Insurgency ( Remove only)-->"c:\program files\steam\SteamApps\SourceMods\Insurgency\uninstall.exe"
    IrfanView (remove only)-->C:\Program Files\IrfanView\iv_uninstall.exe
    iTunes-->MsiExec.exe /I{3DE0053C-FD9A-483E-B7C9-B06E4392206E}
    Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
    Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
    Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
    Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
    Java(TM) SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000}
    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    MediaWidget 4.0-->"C:\Program Files\Media Widget\unins000.exe"
    Miracle C Shareware Package-->MsiExec.exe /I{08C5E3B0-3402-4AF5-8656-2D76B80FB6ED}
    mIRC-->"C:\Program Files\mIRC\mirc.exe" -uninstall
    Mozilla Firefox (2.0.0.16)-->C:\PROGRA~1\Mozilla Firefox\uninstall\helper.exe
    Mozilla Thunderbird (2.0.0.16)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
    NVIDIA Drivers-->C:\Windows\system32\nvuninst.exe UninstallGUI
    Pidgin-->C:\Program Files\Pidgin\pidgin-uninst.exe
    PunkBuster for Battlefield 1942-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{127B684B-A002-44C8-99A7-6CF8F1E26873}\setup.exe" -l0x9
    PunkBuster for Battlefield Vietnam-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D07643A3-CE41-4286-8C78-EB9C83E76DDB}\setup.exe" -l0x9
    QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
    Razer Krait-->C:\Program Files\InstallShield Installation Information\{E6DA58C0-4EC5-4F5E-B73E-2F22ED30ACFC}\setup.exe -runfromtemp -l0x0009 -removeonly
    RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
    Ricochet-->"C:\Program Files\Steam\steam.exe" steam://uninstall/60
    Source SDK Base-->"C:\Program Files\Steam\steam.exe" steam://uninstall/215
    Source SDK-->"C:\Program Files\Steam\steam.exe" steam://uninstall/211
    Spybot - Search & Destroy 1.5.2.20-->"C:\Windows\unins000.exe"
    Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    Starcraft-->C:\Windows\SCunin.exe C:\Windows\SCunin.dat
    Steam-->C:\PROGRA~1\Steam\UNWISE.EXE C:\PROGRA~1\Steam\INSTALL.LOG
    Team Fortress 2-->"C:\Program Files\Steam\steam.exe" steam://uninstall/440
    Unlocker 1.8.5-->C:\Program Files\Unlocker\uninst.exe
    Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
    VeohTV BETA-->C:\Program Files\InstallShield Installation Information\{0405E51E-9582-4207-8F38-AC44201D3808}\setup.exe -runfromtemp -l0x0409
    Vuze-->J:\Vuze\uninstall.exe
    Warcraft III-->C:\Windows\War3Unin.exe C:\Windows\War3Unin.dat
    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    World of Warcraft-->C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft\Uninstall.exe
    Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"

    Hosts File

    127.0.0.1 babe.the-killer.bz
    127.0.0.1 www.babe.the-killer.bz
    127.0.0.1 babe.k-lined.com
    127.0.0.1 www.babe.k-lined.com
    127.0.0.1 did.i-used.cc
    127.0.0.1 www.did.i-used.cc
    127.0.0.1 coolwwwsearch.com
    127.0.0.1 www.coolwwwsearch.com
    127.0.0.1 coolwebsearch.com
    127.0.0.1 www.coolwebsearch.com

    Security center information

    FW: COMODO Firewall Pro
    AS: Spybot - Search and Destroy (disabled) (outdated)
    AS: Windows Defender

    Environment variables

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "FP_NO_HOST_CHECK"=NO
    "OS"=Windows_NT
    "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
    "PROCESSOR_ARCHITECTURE"=x86
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "USERNAME"=SYSTEM
    "windir"=%SystemRoot%
    "PROCESSOR_LEVEL"=15
    "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 75 Stepping 2, AuthenticAMD
    "PROCESSOR_REVISION"=4b02
    "NUMBER_OF_PROCESSORS"=2
    "sourcesdk"=c:\program files\steam\steamapps\invent1337\sourcesdk
    "VProject"=c:\program files\steam\steamapps\invent1337\half-life 2 deathmatch\hl2mp
    "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip
    "QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip

    -----------------EOF-----------------
    In the first place, God made idiots. That was for practice. Then he made school boards.
    -Mark Twain
  10. 2008-08-31, 11:00 #10
    Shaba
    Shaba is offline
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    IMPORTANT I notice there are signs of one or more P2P (Peer to Peer) File Sharing Programs on your computer.

    Vuze

    I'd like you to read the this thread.

    Please go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).

    Uninstall also these:

    Java(TM) 6 Update 2
    Java(TM) 6 Update 3
    Java(TM) 6 Update 5
    Java(TM) SE Runtime Environment 6 Update 1
    Java(TM) SE Runtime Environment 6

    Delete this:

    C:\ProgramData\Azureus

    Delete c:\rsit\extras.txt

    Please run a new rsit scan when finished and post the logs back here.
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006
« Previous Thread | Next Thread »

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules