Nothing will run

Mcald · Aug 27, 2009

Whatever I have managed to catch has stopped anything that even remotely has a chance of helping stop it.

At first programmes just wouldn't run with no errors produced. I remedied this by changing the .exe name. Then spybot and hijackthis firstly ran before stopping have way through finishing their jobs.

No trying to run them again results in "windows cannot access the specified device path or file", I'm blocked from even renaming them. I have tried in safe mode as administrator, nothing.

Hope this is the correct place to post. I will be most grateul for any help.

Blade81 · Aug 29, 2009

Hi,

Please save this file to your desktop. Double-click on it to run a scan. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here.

Mcald · Aug 30, 2009

upon trying to run it...
"Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

Same again. It wouldn't even run once.

Blade81 · Aug 30, 2009

Hi,

Try to download the file again but this time name it as "sVCHost.exe" (while giving the destination location)

Download DDS and save it to your desktop from here.
Disable any script blocker, and then double click dds.scr to run the tool.

When done, DDS will open two (2) logs:
1. DDS.txt
2. Attach.txt
Save both reports to your desktop. Post them back to your topic.

Mcald · Aug 31, 2009

Sorry about this, I had forgotten. I discovered that I could run a .exe by going into properties and selecting unblock, its only when anything is installed that I can't do anything. I ran the first scan you asked and got a log. sorry again. Would you like the results of the dds as well?

Log file is located at: C:\Documents and Settings\matthew\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...

Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB933729\KB933729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\addins\addins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1F.tmp\ZAP1F.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2EE.tmp\ZAP2EE.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Cache\Adobe Reader 6.0.1\Adobe Reader 6.0.1

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Config\Config

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Debug\UserMode\UserMode

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ftpcache\ftpcache

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\chsime\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp98\imejp98

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imjp8_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\shared\res\res

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\7976833D638A0304BAD5E4982F1FF533\4.93.10\4.93.10

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\90A2CC5A3D9ECE9429D33078B4DBC4C2\1.20.0\1.20.0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\trustlib\trustlib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Motive\Motive

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msapps\msinfo\msinfo

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\mui\mui

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF\QSIGNOFF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PIF\PIF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SOFTDISK\SSSTUDIO\SSSTUDIO

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\AuthCabs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\backup\backup

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\update\update.exe

[1] 2004-11-30 23:46:38 654848 C:\WINDOWS\$hf_mig$\KB873333\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:21:58 654848 C:\WINDOWS\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)

[1] 2004-11-30 23:29:47 654848 C:\WINDOWS\$hf_mig$\KB885250\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:52 654848 C:\WINDOWS\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:48 654848 C:\WINDOWS\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:52 654848 C:\WINDOWS\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:52 654848 C:\WINDOWS\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 11:34:54 654848 C:\WINDOWS\$hf_mig$\KB887742\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:48 654848 C:\WINDOWS\$hf_mig$\KB888113\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:48 654848 C:\WINDOWS\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)

[1] 2004-11-30 23:46:38 654848 C:\WINDOWS\$hf_mig$\KB890047\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:21:58 654848 C:\WINDOWS\$hf_mig$\KB890175\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:21:58 654848 C:\WINDOWS\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB893066\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896422\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896424\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)

[1] 2005-02-25 04:35:05 718048 C:\WINDOWS\$hf_mig$\KB896688\update\update.exe (Microsoft Corporation)

[1] 2005-02-25 04:35:05 718048 C:\WINDOWS\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB904706\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB904942\update\update.exe (Microsoft Corporation)

[1] 2005-02-25 04:35:05 718048 C:\WINDOWS\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB905915\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB911567\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB912812\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB912919\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB913446\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB915865\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB916281\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB917159\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB917422\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB918899\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920214\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB921398\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB921883\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB922616\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB922760\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)

[1] 2008-11-15 18:18:04 755576 C:\WINDOWS\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB923694\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB925486\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB925720\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB929338\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB931768-IE7\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB933566-IE7\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB937143-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB938127-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:20:44 755576 C:\WINDOWS\$hf_mig$\KB938464\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB939653-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941568\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:20:44 755576 C:\WINDOWS\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)

[1] 2007-12-03 16:25:31 755576 C:\WINDOWS\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB953838-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB956390-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB956744\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)

[1] 2008-07-08 14:02:04 755576 C:\WINDOWS\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB958215-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB960714-IE7\update\update.exe (Microsoft Corporation)

[1] 2008-11-15 18:18:04 755576 C:\WINDOWS\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB960763\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB960859\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB961260-IE7\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB963027-IE7\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB969897-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB971557\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB971657\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB972260-IE7\update\update.exe (Microsoft Corporation)

[1] 2008-07-08 14:02:04 755576 C:\WINDOWS\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB973354\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB973507\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB973815\update\update.exe (Microsoft Corporation)

[1] 2008-07-08 14:02:04 755576 C:\WINDOWS\$hf_mig$\KB973869\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\SoftwareDistribution\Download\4f16665ac0e64727d0b09512c7b6d40c\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\update\update.exe ()

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registered\Registered

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1025\1025

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1028\1028

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1031\1031

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1037\1037

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1041\1041

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1042\1042

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1054\1054

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\2052\2052

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3076\3076

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3com_dmi\3com_dmi

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Apple Computer\iTunes\iTunes

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Identities\{445BA929-0754-421E-B2F9-D5F440A69141}\{445BA929-0754-421E-B2F9-D5F440A69141}

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Crypto\RSA\RSA

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Media Player\Media Player

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Symantec\Symantec

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Desktop\Desktop

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Apple Computer\iTunes\iTunes

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\NetHood\NetHood

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\PrintHood\PrintHood

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\dhcp\dhcp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\drivers\disdn\disdn

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\eventlog.dll

[1] 2004-08-04 09:00:00 55808 C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll (Microsoft Corporation)

[1] 2008-04-14 01:11:53 56320 C:\WINDOWS\ServicePackFiles\i386\eventlog.dll (Microsoft Corporation)

[1] 2008-04-14 01:11:53 61952 C:\WINDOWS\system32\eventlog.dll ()

[2] 2008-04-14 01:11:53 56320 C:\WINDOWS\system32\logevent.dll (Microsoft Corporation)

Found mount point : C:\WINDOWS\system32\export\export

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\CINTLGNT\CINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\PINTLGNT\PINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\TINTLGNT\TINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\inetsrv\inetsrv

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\Macromed\Shockwave 8\DswMedia\DswMedia

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\Macromed\update\update

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\Microsoft\Crypto\RSA\MachineKeys\MachineKeys

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\mui\dispspec\dispspec

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\ispsgnup\ispsgnup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemcust\oemcust

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemhw\oemhw

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemreg\oemreg

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\sample\sample

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\sdra64.exe

[1] 2009-02-09 13:10:48 683520 C:\WINDOWS\system32\sdra64.exe ()

Found mount point : C:\WINDOWS\system32\ShellExt\ShellExt

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\spool\PRINTERS\PRINTERS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\mof\bad\bad

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\snmp\snmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wins\wins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\xircom\xircom

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\AS_Ambit_1-8-0\AS_Ambit_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\AS_STBUSB_1-8-0\AS_STBUSB_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\CS_Cable_1-8-0\CS_Cable_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\InitAbsorbedFlow_win32\InitAbsorbedFlow_win32

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\LicenseAgreement_win32\LicenseAgreement_win32

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\ntlStandardInstall_1-8-0\ntlStandardInstall_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp

Mount point destination : \Device\__max++>\^

Blade81 · Aug 31, 2009

Would you like the results of the dds as well?

Yes, post dds logs too, please.

Mcald · Aug 31, 2009

DDS (Ver_09-07-30.01) - NTFSx86
Run by matthew at 1:11:16.60 on 31/08/2009
Internet Explorer: 7.0.5730.11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1022.522 [GMT 1:00]

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe -k HPService
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Documents and Settings\matthew\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\matthew\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\matthew\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q305&bd=pavilion&pf=laptop
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_GB&c=Q305&bd=pavilion&pf=laptop
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=c:\windows\system32\userinit.exe,c:\documents and settings\sarah\application data\sdra64.exe,c:\windows\system32\sdra64.exe,
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_05\bin\ssv.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Google Update] "c:\documents and settings\matthew\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [Monopod] c:\docume~1\matthew\locals~1\temp\b.exe
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
mRun: [hpWirelessAssistant] c:\program files\hpq\hp wireless assistant\HP Wireless Assistant.exe
mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [eabconfg.cpl] c:\program files\hpq\quick launch buttons\EabServr.exe /Start
mRun: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [Sony Ericsson PC Suite] "c:\program files\sony ericsson\mobile2\application launcher\Application Launcher.exe" /startoptions
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\docume~1\matthew\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\bttray.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office10\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_05\bin\ssv.dll
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {00B71CFB-6864-4346-A978-C0A14556272C} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} - hxxp://www.srtest.com/srl_bin/sysreqlab_srl.cab
DPF: {27527D31-447B-11D5-A46E-0001023B4289} - hxxp://gamingzone.ubisoft.com/dev/packages/GSManager.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} - hxxp://www.systemrequirementslab.com/sysreqlab2.cab
DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - hxxp://launch.gamespyarcade.com/software/launch/alaunch.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - hxxp://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} - hxxps://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Handler: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - c:\windows\system32\BTXPPanel.dll
Notify: AtiExtEvent - Ati2evxx.dll

============= SERVICES / DRIVERS ===============

R3 HSFHWATI;HSFHWATI;c:\windows\system32\drivers\HSFHWATI.sys [2005-3-22 200192]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [2008-4-26 13352]
S3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys [2009-8-2 33792]
S3 XPADFL02;XPAD Filter Service 02;c:\windows\system32\drivers\xPADFL02.sys [2009-8-2 27904]

=============== Created Last 30 ================

2009-08-25 21:11 <DIR> --d----- c:\program files\Trend micro
2009-08-20 18:32 268 a---h--- C:\sqmdata07.sqm
2009-08-20 18:32 244 a---h--- C:\sqmnoopt07.sqm
2009-08-20 17:38 147,456 a------- c:\windows\msa.exe
2009-08-20 17:37 36,864 a------- c:\windows\system32\net.net
2009-08-20 17:27 784,855 a------- c:\windows\system32\xa.tmp
2009-08-17 23:18 <DIR> --d----- c:\docume~1\matthew\applic~1\The Path
2009-08-11 21:04 128,512 -------- c:\windows\system32\dllcache\dhtmled.ocx
2009-08-11 21:03 1,315,328 -------- c:\windows\system32\dllcache\msoe.dll
2009-08-05 10:01 204,800 -------- c:\windows\system32\dllcache\mswebdvd.dll
2009-08-02 09:03 27,904 a------- c:\windows\system32\drivers\xPADFL02.sys
2009-08-02 09:03 <DIR> --d----- c:\program files\SixaxisDriver
2009-08-02 08:28 46,592 a------- c:\windows\system32\libusb0.dll
2009-08-02 08:28 33,792 a------- c:\windows\system32\drivers\libusb0.sys

==================== Find3M ====================

2009-08-05 10:01 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-07-17 20:01 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 10:08 286,720 a------- c:\windows\system32\wmpdxm.dll
2009-06-29 17:12 827,392 a------- c:\windows\system32\wininet.dll
2009-06-29 17:12 78,336 a------- c:\windows\system32\ieencode.dll
2009-06-29 17:12 17,408 a------- c:\windows\system32\corpol.dll
2009-06-16 15:36 119,808 a------- c:\windows\system32\t2embed.dll
2009-06-16 15:36 81,920 a------- c:\windows\system32\fontsub.dll
2009-06-12 13:31 76,288 a------- c:\windows\system32\telnet.exe
2009-06-10 15:13 84,992 a------- c:\windows\system32\avifil32.dll
2009-06-10 09:19 2,066,432 a------- c:\windows\system32\mstscax.dll
2009-06-10 07:14 132,096 a------- c:\windows\system32\wkssvc.dll
2009-06-03 20:09 1,291,264 a------- c:\windows\system32\quartz.dll
2009-05-11 22:32 83,216 a------- c:\docume~1\matthew\applic~1\GDIPFONTCACHEV1.DAT
2006-07-09 18:28 2,024 a------- c:\docume~1\matthew\applic~1\wklnhst.dat

============= FINISH: 1:12:08.70 ===============

Blade81 · Aug 31, 2009

Hi,

Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:

Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.
Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds log (post attach.txt too).

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Mcald · Aug 31, 2009

No installed programmes? I don't think anything I had running could have blocked it. I don't think tea timer is still running, I may be mistaken. I will begin with combofix.

DDS (Ver_09-07-30.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 02/11/2005 15:45:47
System Uptime: 31/08/2009 00:44:50 (0 hours ago)

Motherboard: Hewlett-Packard | | 3085
Processor: AMD Athlon(tm) 64 Processor 3800+ | U23 | 2393/mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 93 GiB total, 28.972 GiB free.
D: is CDROM ()
E: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}
Description: Photosmart C6300 series
Device ID: ROOT\IMAGE\0000
Manufacturer: HP
Name: C6300,192.168.2.4
PNP Device ID: ROOT\IMAGE\0000
Service: StillCam

Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
Description: Photosmart C6300 series
Device ID: ROOT\MULTIFUNCTION\0000
Manufacturer: HP
Name: Photosmart C6300 series
PNP Device ID: ROOT\MULTIFUNCTION\0000
Service:

==== System Restore Points ===================

RP1105: 20/08/2009 17:38:19 - System Checkpoint
RP1106: 20/08/2009 17:38:23 - Removed Sonic MyDVD Plus
RP1107: 20/08/2009 17:38:29 - System Checkpoint
RP1108: 20/08/2009 17:38:33 - System Checkpoint
RP1109: 20/08/2009 17:38:36 - System Checkpoint
RP1110: 20/08/2009 17:38:39 - Removed Rome - Total War
RP1111: 20/08/2009 17:38:46 - Removed Rome Total War - patch 1.3
RP1112: 20/08/2009 17:38:51 - System Checkpoint
RP1113: 20/08/2009 17:38:57 - Software Distribution Service 3.0
RP1114: 20/08/2009 17:38:59 - Software Distribution Service 3.0
RP1115: 20/08/2009 17:39:04 - Software Distribution Service 3.0
RP1116: 20/08/2009 17:39:09 - Software Distribution Service 3.0
RP1117: 20/08/2009 17:39:11 - Software Distribution Service 3.0
RP1118: 20/08/2009 17:39:13 - System Checkpoint
RP1119: 20/08/2009 17:39:16 - System Checkpoint
RP1120: 20/08/2009 17:39:19 - System Checkpoint
RP1121: 20/08/2009 17:39:22 - System Checkpoint
RP1122: 20/08/2009 17:39:24 - System Checkpoint
RP1123: 20/08/2009 17:39:26 - System Checkpoint
RP1124: 20/08/2009 17:39:29 - System Checkpoint
RP1125: 20/08/2009 17:39:30 - System Checkpoint
RP1126: 20/08/2009 17:39:32 - System Checkpoint
RP1127: 20/08/2009 17:39:33 - Software Distribution Service 3.0
RP1128: 20/08/2009 17:39:35 - System Checkpoint
RP1129: 20/08/2009 17:39:38 - System Checkpoint
RP1130: 20/08/2009 17:39:40 - Software Distribution Service 3.0
RP1131: 20/08/2009 17:39:41 - System Checkpoint
RP1132: 20/08/2009 17:39:42 - System Checkpoint
RP1133: 20/08/2009 17:39:44 - Removed Dawn of War - Dark Crusade
RP1134: 20/08/2009 17:39:48 - Configured Command & Conquer Generals
RP1135: 20/08/2009 17:39:50 - Configured Command and ConquerTM Generals Zero Hour
RP1136: 20/08/2009 17:39:51 - System Checkpoint
RP1137: 20/08/2009 17:39:53 - System Checkpoint
RP1138: 20/08/2009 17:39:55 - System Checkpoint
RP1139: 20/08/2009 17:39:58 - System Checkpoint
RP1140: 20/08/2009 17:40:00 - Software Distribution Service 3.0
RP1141: 20/08/2009 17:40:02 - System Checkpoint
RP1142: 20/08/2009 17:40:06 - System Checkpoint
RP1143: 20/08/2009 17:40:08 - System Checkpoint
RP1144: 20/08/2009 17:40:09 - System Checkpoint
RP1145: 25/08/2009 19:28:28 - Configured ntl Netguard
RP1146: 25/08/2009 20:24:20 - Software Distribution Service 3.0
RP1147: 25/08/2009 20:43:44 - Software Distribution Service 3.0

==== Installed Programs ======================

==== Event Viewer Messages From Past Week ========

30/08/2009 01:58:16, error: Dhcp [1002] - The IP address lease 192.168.2.3 for the Network Card with network address 0014A5126AF1 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
25/08/2009 20:52:07, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
25/08/2009 20:43:51, error: Windows Update Agent [20] - Installation Failure: Windows failed to install the following update with error 0xd0000156: Update for Windows XP (KB968389).
25/08/2009 20:33:39, error: Service Control Manager [7023] - The Task Scheduler service terminated with the following error: Access is denied.
25/08/2009 20:31:00, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
25/08/2009 20:30:22, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
25/08/2009 20:28:53, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD AmdK8 eabfiltr Fips IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss szkg Tcpip
25/08/2009 20:28:53, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
25/08/2009 20:28:53, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/08/2009 20:28:53, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/08/2009 20:28:53, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
25/08/2009 20:28:53, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/08/2009 20:28:53, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
25/08/2009 20:21:46, error: Service Control Manager [7000] - The Application Layer Gateway Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
25/08/2009 20:21:45, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Application Layer Gateway Service service to connect.
25/08/2009 20:21:41, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: szkg
25/08/2009 20:21:41, error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service service hung on starting.

==== End Of File ===========================

Mcald · Aug 31, 2009

I just experienced a strange blue screen problem while I was reading the combofix guide, telling me windows had to be shut down and that it was doing a physical memory dump. I turned the computer off and back on after a short wait. Then when I was getting back to this site it happened again, only this time after a few second the computer restarted and ran normally, so I tried to being using combofix.

Combofix won't run, no error is produced. The process looks like it is about to being but then nothing happens. I tried renaming it but the same happened. Then I tried to run it in safe mode, same happened.

Thanks for all the help so far btw, it means a lot.

Blade81 · Aug 31, 2009

Ok. Let's do a few things.

Open notepad and then copy and paste the bolded lines below into it. Go to File > save as and name the file fixes.bat, change the Save as type to all files and save it to your desktop.
@echo off
copy C:\WINDOWS\system32\logevent.dll c:\

Double-click on fixes.bat file to execute it.

Download The Avenger by Swandog46 from here.
Unzip/extract it to a folder on your desktop.
Double click on avenger.exe to run The Avenger.
Click OK.
Make sure that the box next to Scan for rootkits has a tick in it and that the box next to Automatically disable any rootkits found does not have a tick in it.
Copy all of the text in the below textbox to the clibpboard by highlighting it and then pressing Ctrl+C.
Code:
```
Files to move:
C:\logevent.dll | C:\WINDOWS\system32\eventlog.dll
```
In the avenger window, click the Paste Script from Clipboard,

button.
Click the Execute button.
You will be asked Are you sure you want to execute the current script?.
Click Yes.
You will now be asked First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?.
Click Yes.
Your PC will now be rebooted.
Note: If the above script contains Drivers to delete: or Drivers to disable:, then The Avenger will require two reboots to complete its operation.
If that is the case, it will force a BSOD on the first reboot. This is normal & expected behaviour.
After your PC has completed the necessary reboots, a log should automatically open. If it does not automatically open, then the log can be found at %systemdrive%\avenger.txt (typically C:\avenger.txt).
Please post this log in your next reply.

Please save this file to your desktop. Click on Start->Run, and copy-paste the following command (the bolded text) into the Open box, and click OK. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please open it with notepad and post the contents here.
%userprofile%\desktop\win32kdiag.exe -f -r

Download GMER here by clicking download exe -button and then saving it your desktop:

Double-click .exe that you downloaded
Click rootkit-tab and then scan.
Don't check
Show All
box while scanning in progress!
When scanning is ready, click Copy.
This copies log to clipboard
Post log in your reply.

Mcald · Sep 3, 2009

Sorry about the delay.
I ran the fixes.bat, quick flash of a black box then gone, I presume it did what it was supposed to.

Then I tried to download avenger, however upon going to extract it I was told windows has blocked access to these files to help protect the computer.

Mcald · Sep 3, 2009

Nevermind. Forgot about the *right click - unblock". Will continue.

Mcald · Sep 3, 2009

First the avenger log

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "avtgp7ew" found!
Start Type: 3 (Manual)

Rootkit scan completed.

File move operation "C:\logevent.dll|C:\WINDOWS\system32\eventlog.dll" completed successfully.

Completed script processing.

*******************

Finished! Terminate.

Mcald · Sep 3, 2009

Win32 log now

Log file is located at: C:\Documents and Settings\matthew\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...

Found mount point : C:\WINDOWS\$hf_mig$\KB932168\KB932168

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB933729\KB933729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\$hf_mig$\KB943460\KB943460

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\addins\addins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP1F.tmp\ZAP1F.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2EE.tmp\ZAP2EE.tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\temp\temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\assembly\tmp\tmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Cache\Adobe Reader 6.0.1\Adobe Reader 6.0.1

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Config\Config

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Connection Wizard\Connection Wizard

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Debug\UserMode\UserMode

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ftpcache\ftpcache

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\chsime\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\CHTIME\Applets\Applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imejp98\imejp98

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imjp8_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\applets\applets

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\imkr6_1\dicts\dicts

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\ime\shared\res\res

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\7976833D638A0304BAD5E4982F1FF533\4.93.10\4.93.10

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\90A2CC5A3D9ECE9429D33078B4DBC4C2\1.20.0\1.20.0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\java\trustlib\trustlib

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Motive\Motive

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\msapps\msinfo\msinfo

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\mui\mui

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QHEADLES\QHEADLES

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\ERRORREP\QSIGNOFF\QSIGNOFF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\BATCH\BATCH

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Config\CheckPoint\CheckPoint

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\HelpFiles\HelpFiles

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\InstalledSKUs\InstalledSKUs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\System\DFS\DFS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\pchealth\helpctr\Temp\Temp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\PIF\PIF

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Registration\CRMLog\CRMLog

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SOFTDISK\SSSTUDIO\SSSTUDIO

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\AuthCabs\AuthCabs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\07a96de176867bc25b7dc839d22b07e2\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\0dd0244816ffb4b094c1caba4c3b1178\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\backup\backup

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\update\update.exe

[1] 2004-11-30 23:46:38 654848 C:\WINDOWS\$hf_mig$\KB873333\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:21:58 654848 C:\WINDOWS\$hf_mig$\KB873339\update\update.exe (Microsoft Corporation)

[1] 2004-11-30 23:29:47 654848 C:\WINDOWS\$hf_mig$\KB885250\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:52 654848 C:\WINDOWS\$hf_mig$\KB885835\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:48 654848 C:\WINDOWS\$hf_mig$\KB885836\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:52 654848 C:\WINDOWS\$hf_mig$\KB886185\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:52 654848 C:\WINDOWS\$hf_mig$\KB887472\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 11:34:54 654848 C:\WINDOWS\$hf_mig$\KB887742\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:48 654848 C:\WINDOWS\$hf_mig$\KB888113\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:34:48 654848 C:\WINDOWS\$hf_mig$\KB888302\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB890046\update\update.exe (Microsoft Corporation)

[1] 2004-11-30 23:46:38 654848 C:\WINDOWS\$hf_mig$\KB890047\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:21:58 654848 C:\WINDOWS\$hf_mig$\KB890175\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 20:35:06 718048 C:\WINDOWS\$hf_mig$\KB890859\update\update.exe (Microsoft Corporation)

[1] 2004-10-14 19:21:58 654848 C:\WINDOWS\$hf_mig$\KB891781\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB893066\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB893756\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB894391\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896358\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896422\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896423\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896424\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB896428\update\update.exe (Microsoft Corporation)

[1] 2005-02-25 04:35:05 718048 C:\WINDOWS\$hf_mig$\KB896688\update\update.exe (Microsoft Corporation)

[1] 2005-02-25 04:35:05 718048 C:\WINDOWS\$hf_mig$\KB898461\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899587\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB899591\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB900485\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB900725\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB901017\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB901214\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB902400\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB904706\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB904942\update\update.exe (Microsoft Corporation)

[1] 2005-02-25 04:35:05 718048 C:\WINDOWS\$hf_mig$\KB905414\update\update.exe (Microsoft Corporation)

[1] 2005-02-24 21:35:06 718048 C:\WINDOWS\$hf_mig$\KB905749\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB905915\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB908519\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB908531\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB910437\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB911280\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB911562\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB911567\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB911927\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB912812\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB912919\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB913446\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB913580\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB914388\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB914389\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB915865\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB916281\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB916595\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB917159\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB917344\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB917422\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB917953\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB918118\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB918439\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB918899\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB919007\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB920213\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920214\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB920670\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920683\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920685\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB920872\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB921398\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB921503\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB921883\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\$hf_mig$\KB922582\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB922616\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB922760\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB922819\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB923414\update\update.exe (Microsoft Corporation)

[1] 2008-11-15 18:18:04 755576 C:\WINDOWS\$hf_mig$\KB923561\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB923694\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB923980\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB924191\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB924270\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB924496\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB925486\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB925720\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB925902\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB926255\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:16:51 716000 C:\WINDOWS\$hf_mig$\KB926436\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB927779\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB927802\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB927891\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB928255\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB928843\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB929123\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB929338\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB930178\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB930916\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB931261\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB931768-IE7\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB931784\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB931836\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB933360\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB933566-IE7\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB935839\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB935840\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB936021\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB937143-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB938127-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:20:44 755576 C:\WINDOWS\$hf_mig$\KB938464\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\$hf_mig$\KB938828\update\update.exe (Microsoft Corporation)

[1] 2006-01-19 20:29:19 716000 C:\WINDOWS\$hf_mig$\KB938829\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB939653-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941202\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941568\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941644\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB941693\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB942763\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB943055\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB943485\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB944653\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB945553\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB946026\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:20:44 755576 C:\WINDOWS\$hf_mig$\KB946648\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB948590\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB948881\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB950749\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB950760\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB950762\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB950974\update\update.exe (Microsoft Corporation)

[1] 2007-12-03 16:25:31 755576 C:\WINDOWS\$hf_mig$\KB951066\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB951376\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB951698\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB951748\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB951978\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB952004\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB952287\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB952954\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB953838-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB953839\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB954211\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB954459\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB954600\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB955069\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB955839\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB956390-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB956391\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB956572\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB956744\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB956802\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB956803\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB956841\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB957095\update\update.exe (Microsoft Corporation)

[1] 2008-07-08 14:02:04 755576 C:\WINDOWS\$hf_mig$\KB957097\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB958215-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB958644\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB958687\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB958690\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB959426\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB960225\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:56 716000 C:\WINDOWS\$hf_mig$\KB960714-IE7\update\update.exe (Microsoft Corporation)

[1] 2008-11-15 18:18:04 755576 C:\WINDOWS\$hf_mig$\KB960715\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 12:18:51 755576 C:\WINDOWS\$hf_mig$\KB960763\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB960803\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB960859\update\update.exe (Microsoft Corporation)

[1] 2007-03-06 02:22:59 716000 C:\WINDOWS\$hf_mig$\KB961260-IE7\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB961371\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB961373\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB961501\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB963027-IE7\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB967715\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB968537\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB969897-IE7\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:22 755576 C:\WINDOWS\$hf_mig$\KB969898\update\update.exe (Microsoft Corporation)

[1] 2007-11-30 13:39:18 755576 C:\WINDOWS\$hf_mig$\KB970238\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB971557\update\update.exe (Microsoft Corporation)

[1] 2008-07-09 08:38:29 755576 C:\WINDOWS\$hf_mig$\KB971633\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB971657\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB972260-IE7\update\update.exe (Microsoft Corporation)

[1] 2008-07-08 14:02:04 755576 C:\WINDOWS\$hf_mig$\KB973346\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB973354\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB973507\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\$hf_mig$\KB973815\update\update.exe (Microsoft Corporation)

[1] 2008-07-08 14:02:04 755576 C:\WINDOWS\$hf_mig$\KB973869\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:28 716000 C:\WINDOWS\SoftwareDistribution\Download\0facce6115ab861022eae3087e064a2a\update\update.exe (Microsoft Corporation)

[1] 2005-10-13 00:12:29 716000 C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\SoftwareDistribution\Download\4f16665ac0e64727d0b09512c7b6d40c\update\update.exe (Microsoft Corporation)

[1] 2009-05-26 12:40:52 755576 C:\WINDOWS\SoftwareDistribution\Download\555558d2c7916b118ad5baef62b18136\update\update.exe ()

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\6913c676e5d33978934caa46c49fdc75\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\b7f0b2892b21211a5630518d058f48d9\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\Download\d48a3b967ba5709df048e8f2a49cf8a6\backup\backup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SoftwareDistribution\SelfUpdate\Registered\Registered

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Sun\Java\Deployment\Deployment

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\SxsCaPendDel\SxsCaPendDel

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1025\1025

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1028\1028

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1031\1031

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1037\1037

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1041\1041

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1042\1042

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\1054\1054

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\2052\2052

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3076\3076

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\3com_dmi\3com_dmi

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Apple Computer\iTunes\iTunes

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Identities\{445BA929-0754-421E-B2F9-D5F440A69141}\{445BA929-0754-421E-B2F9-D5F440A69141}

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Crypto\RSA\RSA

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Media Player\Media Player

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Application Data\Symantec\Symantec

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Desktop\Desktop

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Apple Computer\iTunes\iTunes

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Credentials\Credentials

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\NetHood\NetHood

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\config\systemprofile\PrintHood\PrintHood

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\dhcp\dhcp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\drivers\disdn\disdn

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\export\export

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\CINTLGNT\CINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\PINTLGNT\PINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\IME\TINTLGNT\TINTLGNT

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\inetsrv\inetsrv

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\Macromed\Shockwave 8\DswMedia\DswMedia

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\Macromed\update\update

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\Microsoft\Crypto\RSA\MachineKeys\MachineKeys

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\mui\dispspec\dispspec

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\ispsgnup\ispsgnup

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemcust\oemcust

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemhw\oemhw

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\html\oemreg\oemreg

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\oobe\sample\sample

Mount point destination : \Device\__max++>\^

Cannot access: C:\WINDOWS\system32\sdra64.exe

[1] 2009-02-09 13:10:48 683520 C:\WINDOWS\system32\sdra64.exe ()

Found mount point : C:\WINDOWS\system32\ShellExt\ShellExt

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\spool\PRINTERS\PRINTERS

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\mof\bad\bad

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wbem\snmp\snmp

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\wins\wins

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\system32\xircom\xircom

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\AS_Ambit_1-8-0\AS_Ambit_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\AS_STBUSB_1-8-0\AS_STBUSB_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\CS_Cable_1-8-0\CS_Cable_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\InitAbsorbedFlow_win32\InitAbsorbedFlow_win32

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\LicenseAgreement_win32\LicenseAgreement_win32

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\Temp\ntlStandardInstall_1-8-0\ntlStandardInstall_1-8-0

Mount point destination : \Device\__max++>\^

Found mount point : C:\WINDOWS\WinSxS\InstallTemp\InstallTemp

Mount point destination : \Device\__max++>\^

Finished!

Mcald · Sep 3, 2009

Ignore that.... I forgot to enter the bold command...

Mcald · Sep 3, 2009

I cannot get the bold command to run. It Just says "Cannot find C:\documents".
When I ran the previous scan (By just clicking on the .exe), I did not delete the old scan that was left on the desktop.

Upon running GMER, I'm told it has found a system modification, which might have been caused by roolkit activity. It asked If I wanted to run a fool system scan, I selected yes.

When finished It informed me again of the issue. Here is the scan

PART 1

GMER 1.0.15.15077 [f0fk381o.exe] - http://www.gmer.net
Rootkit scan 2009-09-03 13:16:31
Windows 5.1.2600 Service Pack 3

---- System - GMER 1.0.15 ----

INT 0x62 ? 871D9BF8
INT 0x73 ? 871DCDD8
INT 0x82 ? 871D9BF8
INT 0xB4 ? 86FEAF00
INT 0xB4 ? 86FEAF00
INT 0xB4 ? 86FEAF00
INT 0xB4 ? 86FEAF00

Code 86F24018 ZwCreateSection
Code 86ED6920 ZwDuplicateObject
Code 86DE11A0 ZwEnumerateKey
Code 86DE0940 ZwFlushInstructionCache
Code 87072E80 ZwSetInformationFile
Code 86D96D30 ZwSetSystemInformation
Code 86E30428 ZwWriteFile
Code 86DE1276 IofCallDriver
Code 86DE2DEE IofCompleteRequest
Code 86F24017 NtCreateSection
Code 86ED691F NtDuplicateObject
Code 87072E7F NtSetInformationFile
Code 86E30427 NtWriteFile
Code 86DD43F5 ZwSaveKey
Code 86DCD9D5 ZwSaveKeyEx

---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!IofCallDriver 804EE130 5 Bytes JMP 86DE127B
.text ntkrnlpa.exe!IofCompleteRequest 804EE1C0 5 Bytes JMP 86DE2DF3
.text ntkrnlpa.exe!ZwSaveKey 804FEDD4 5 Bytes JMP 86DD43FA
.text ntkrnlpa.exe!ZwSaveKeyEx 804FEDE8 5 Bytes JMP 86DCD9DA
PAGE ntkrnlpa.exe!IoGetBootDiskInformation + 66F 8056BB87 7 Bytes JMP 86DBF31C
PAGE ntkrnlpa.exe!NtSetInformationFile 80570304 5 Bytes JMP 87072E84
PAGE ntkrnlpa.exe!NtWriteFile 805722C8 7 Bytes JMP 86E3042C
PAGE ntkrnlpa.exe!NtCreateSection 805A076C 7 Bytes JMP 86F2401C
PAGE ntkrnlpa.exe!ZwFlushInstructionCache 805ABEC4 5 Bytes JMP 86DE0944
PAGE ntkrnlpa.exe!ObCloseHandle + 17 805B1CC1 7 Bytes JMP 86D92D3C
PAGE ntkrnlpa.exe!NtDuplicateObject 805B38DA 7 Bytes JMP 86ED6924
PAGE ntkrnlpa.exe!ZwSetSystemInformation 80605F20 5 Bytes JMP 86D96D34
PAGE ntkrnlpa.exe!ZwEnumerateKey 8061AB70 5 Bytes JMP 86DE11A4
? spgy.sys The system cannot find the file specified. !
.text USBPORT.SYS!DllUnload F682F8AC 5 Bytes JMP 86FEA4E0
? system32\drivers\uzyz.sys The system cannot find the path specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes JMP 3E1DF4B9 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!DialogBoxIndirectParamW 7E432072 5 Bytes JMP 3E351F8F C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!MessageBoxIndirectA 7E43A082 5 Bytes JMP 3E351F10 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!DialogBoxParamA 7E43B144 5 Bytes JMP 3E351F54 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!MessageBoxExW 7E450838 5 Bytes JMP 3E351E9C C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!MessageBoxExA 7E45085C 5 Bytes JMP 3E351ED6 C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!DialogBoxIndirectParamA 7E456D7D 5 Bytes JMP 3E351FCA C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] USER32.dll!MessageBoxIndirectW 7E4664D5 5 Bytes JMP 3E2017EA C:\WINDOWS\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] WS2_32.dll!closesocket 71AB3E2B 5 Bytes JMP 100129A0
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] WS2_32.dll!connect 71AB4A07 5 Bytes JMP 100127E0
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] WS2_32.dll!send 71AB4C27 5 Bytes JMP 100127C0
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] WS2_32.dll!recv 71AB676F 5 Bytes JMP 100127A0
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] WININET.dll!HttpAddRequestHeadersA 3D93FB4D 5 Bytes JMP 00F8000A
.text C:\Program Files\Internet Explorer\Iexplore.exe[1096] WININET.dll!HttpAddRequestHeadersW 3D9AD155 5 Bytes JMP 0107000A

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F7450042] spgy.sys
IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F745013E] spgy.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F74500C0] spgy.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F7450800] spgy.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F74506D6] spgy.sys
IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F745FE9C] spgy.sys

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 871D81F8
Device \FileSystem\Fastfat \FatCdrom Code 86DFFAA8
Device \FileSystem\Fastfat \FatCdrom 86BA4500

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 EABFiltr.sys (QLB PS/2 Keyboard filter driver/Hewlett-Packard Company)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 EABFiltr.sys (QLB PS/2 Keyboard filter driver/Hewlett-Packard Company)

Device \Driver\usbohci \Device\USBPDO-0 86FF81F8
Device \Driver\usbohci \Device\USBPDO-1 86FF81F8
Device \Driver\usbehci \Device\USBPDO-2 86FF71F8
Device \Driver\NetBT \Device\NetBT_Tcpip_{9A3B158C-881D-4649-81EF-DDD6E81EAE14} 86FEF1F8
Device \Driver\NetBT \Device\NetBT_Tcpip_{12180D82-92A9-47AA-8D9A-18FE2E0E3EC2} 86FEF1F8
Device \Driver\Ftdisk \Device\HarddiskVolume1 8716E1F8
Device \Driver\NetBT \Device\NetBt_Wins_Export 86FEF1F8
Device \Driver\NetBT \Device\NetbiosSmb 86FEF1F8
Device \Driver\PCI_PNP4106 \Device\0000004d spgy.sys
Device \Driver\sptd \Device\402815356 spgy.sys
Device \Driver\usbohci \Device\USBFDO-0 86FF81F8
Device \Driver\usbohci \Device\USBFDO-1 86FF81F8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 86E0E500
Device \Driver\usbehci \Device\USBFDO-2 86FF71F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 86E0E500
Device \Driver\Ftdisk \Device\FtControl 8716E1F8
Device \Driver\avtgp7ew \Device\Scsi\avtgp7ew1Port2Path0Target0Lun0 86F011F8
Device \Driver\avtgp7ew \Device\Scsi\avtgp7ew1 86F011F8
Device \FileSystem\Fastfat \Fat Code 86DFFAA8
Device \FileSystem\Fastfat \Fat 86BA4500
Device \FileSystem\Cdfs \Cdfs 86DA01F8
---- Processes - GMER 1.0.15 ----

Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\System32\svchost.exe [192] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\System32\svchost.exe [192] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\System32\svchost.exe [212] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\System32\svchost.exe [212] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [316] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [316] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1016] 0x00F70000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1016] 0x03110000
Library \\?\globalroot\systemroot\system32\UACfrlaixsnic.dll (*** hidden *** ) @ C:\Program Files\Internet Explorer\Iexplore.exe [1096] 0x00B30000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1116] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1116] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\System32\svchost.exe [1160] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\System32\svchost.exe [1160] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1216] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1216] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1364] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1364] 0x00730000
Library \\?\globalroot\systemroot\system32\UACfrlaixsnic.dll (*** hidden *** ) @ C:\WINDOWS\Explorer.EXE [1472] 0x00D00000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1712] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1712] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1952] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [1952] 0x00730000
Library \\?\globalroot\systemroot\system32\UACmemdooukwv.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [4092] 0x10000000
Library \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll (*** hidden *** ) @ C:\WINDOWS\system32\svchost.exe [4092] 0x009B0000

---- Services - GMER 1.0.15 ----

Service C:\WINDOWS\system32\drivers\UACyrxdorgruf.sys (*** hidden *** ) [SYSTEM] UACd.sys <-- ROOTKIT !!!

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x12 0xDA 0x36 0x8F ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x75 0xD3 0x02 0x51 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xC2 0xB6 0x01 0x1A ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@start 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@type 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@imagepath \systemroot\system32\drivers\UACyrxdorgruf.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys@group file system
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules@UACd \\?\globalroot\systemroot\system32\drivers\UACyrxdorgruf.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules@UACc \\?\globalroot\systemroot\system32\UACoayxyljwqc.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules@uacbbr \\?\globalroot\systemroot\system32\UACmemdooukwv.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules@uacsr \\?\globalroot\systemroot\system32\UACxlqaosopqy.dat
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules@uacmal \\?\globalroot\systemroot\system32\UACmbcjjkdldo.db
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules@uacrem \\?\globalroot\systemroot\system32\UACnedwjyifdm.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\UACd.sys\modules@uacserf \\?\globalroot\systemroot\system32\UACfrlaixsnic.dll

---- Files - GMER 1.0.15 ----

File C:\I386\ASMS\60\POLICY\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60\60\60\60\60 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60\60\60\60\60\COMCTL 0 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60\60\60\60\60\COMCTL\COMCTL.CA_ 4825 bytes
File C:\I386\ASMS\60\POLICY\60\60\60\60\60\60\60\60\60\60\60\60\COMCTL\COMCTL.MAN 621 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Afraid.wav 87852 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Applause.wav 66676 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Back2school.wav 372682 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Beach.wav 362908 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Birds.wav 88620 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Blender.wav 115286 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Blues.WAV 116652 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Busy signal.wav 88808 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Carol of the Bells.wav 461236 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\City scene.wav 489514 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Country.WAV 622944 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Dogbark.wav 42340 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Doorbell.wav 119852 bytes
File C:\Program Files\ArcSoft\VideoImpression 2\Elise.wav 293932 bytes
File C:\Program Files\Canon\CameraWindow\CameraWindowDVC\mcsm.chm (size mismatch) 73728/59511 bytes executable
File C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Clients\com.apple.Outlook\Contents\Resources\com.apple.IE 0 bytes
File C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Clients\com.apple.Outlook\Contents\Resources\com.apple.Safari 0 bytes
File C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Clients\com.apple.Outlook\Contents\Resources\com.apple.WindowsContacts 0 bytes
File C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Clients\com.apple.Outlook\Contents\Resources\com.apple.WindowsMail 0 bytes
File C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Clients\com.apple.Outlook\Contents\Resources\com.google.ContactSync 0 bytes
File C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServices\Clients\com.apple.Outlook\Contents\Resources\com.yahoo.go.sync 0 bytes
File C:\Program Files\Common Files\InstallShield\engine\6\Intel 32\objectps.dll (size mismatch) 176128/32768 bytes executable
File C:\Program Files\Common Files\LightScribe\Adobe 0 bytes
File C:\Program Files\Common Files\LightScribe\Apple 0 bytes
File C:\Program Files\Common Files\LightScribe\ArcSoft 0 bytes
File C:\Program Files\Common Files\LightScribe\Blizzard Entertainment 0 bytes
File C:\Program Files\Common Files\LightScribe\Borland Shared 0 bytes
File C:\Program Files\Common Files\LightScribe\Canon 0 bytes
File C:\Program Files\Common Files\LightScribe\Command Software 0 bytes
File C:\Program Files\Common Files\LightScribe\Designer 0 bytes
File C:\Program Files\Common Files\LightScribe\DirectX 0 bytes
File C:\Program Files\Common Files\LightScribe\Hewlett-Packard 0 bytes
File C:\Program Files\Common Files\LightScribe\HP 0 bytes
File C:\Program Files\Common Files\LightScribe\InstallShield 0 bytes
File C:\Program Files\Common Files\LightScribe\iS3 0 bytes
File C:\Program Files\Common Files\LightScribe\Java 0 bytes
File C:\Program Files\Common Files\LightScribe\L&H 0 bytes
File C:\Program Files\Common Files\LightScribe\LightScribe 0 bytes
File C:\Program Files\Common Files\LightScribe\Merge Modules 0 bytes
File C:\Program Files\Common Files\LightScribe\Microsoft Shared 0 bytes
File C:\Program Files\Common Files\LightScribe\Motive 0 bytes
File C:\Program Files\Common Files\Motive\McciUtilsX.dll (size mismatch) 344064/299008 bytes executable
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\01-cable.tdf 608 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\02-consolidated_services.tdf 636 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\03-dialup.tdf 623 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\04-dsl.tdf 618 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\05-eservices.tdf 626 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\06-wireless.tdf 623 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\07-satellite.tdf 624 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\08-value_dialup.tdf 629 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\09-aol.tdf 618 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\10-eservices-add.tdf 633 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\12-tell_me_more.tdf 628 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\20-base.tdf 620 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\compaq\21-base_bb.tdf 623 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\01-cable.tdf 608 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\02-consolidated_services.tdf 636 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\03-dialup.tdf 623 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\04-dsl.tdf 618 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\05-eservices.tdf 626 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\06-wireless.tdf 623 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\07-satellite.tdf 624 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\08-value_dialup.tdf 629 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\09-aol.tdf 618 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\10-eservices-add.tdf 633 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\12-tell_me_more.tdf 628 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\20-base.tdf 620 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\offer_templates\hp\21-base_bb.tdf 623 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\all_screens.xml 24881 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\all_sounds.xml 716 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\buttons.xml 5594 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\message.ini 1385 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\offers.wav 593162 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\reminder.xml 739 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\tabs.xml 4113 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\welcome_begin.wav 2749838 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\welcome_end.wav 317898 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\welcome_no_refresh.wav 653412 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\content\welcome_refresh.wav 908726 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\styles 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\styles\compaq 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\styles\compaq\default.css 783 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\styles\hp 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\de\ui\styles\hp\default.css 1111 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\en_au 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\en_ca 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\en_gb 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\en_nz 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\en_us 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\es_mx 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\fr 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\fr_be 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\fr_ca 0 bytes
File C:\Program Files\Easy Internet signup\FrontEnd\de\offer_templates\compaq\nl 0 bytes
File C:\Program Files\Hp\Digital Imaging\bin\hpqstd08.dll (size mismatch) 155648/290816 bytes executable
File C:\Program Files\Hp\Digital Imaging\bin\hpqstd08.rsc (size mismatch) 155648/217088 bytes executable
File C:\Program Files\Hp\Digital Imaging\data\hpqd_sdl_d_PY_es.dll 2560 bytes executable
File C:\Program Files\Hp\Digital Imaging\data\hpqd_sdl_d_UY_es.dll 2560 bytes executable
File C:\Program Files\Hp\Digital Imaging\data\hpqd_sdl_d_VE_es.dll 2560 bytes executable
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_AR_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_BO_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_CL_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_CO_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_EC_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_ES_es.dat 122432 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_MX_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_PE_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_PR_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_PY_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_UY_es.dat 72544 bytes
File C:\Program Files\Hp\Digital Imaging\data\hpsdlsvcd_VE_es.dat 72544 bytes
File C:\Program Files\HPQ\Quick Launch Buttons\Eabii.cat (size mismatch) 32768/8353 bytes executable
File C:\Program Files\HPQ\Quick Launch Buttons\Eabii.inf (size mismatch) 32768/2062 bytes executable

END PART 1

Mcald · Sep 3, 2009

Part 2

File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\info.nib 1427 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\objects.xib 395056 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\About iTunes.rtf 7638 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Apple TV Help.chm 23594 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0423.rtf 34945 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0426.rtf 35314 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\info.nib 598 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\objects.xib 45868 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GoogleLicense.rtf 955 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\info.nib 878 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\objects.xib 27270 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPhone Help.chm 28347 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod Help.chm 30693 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod License.rtf 16890 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunes Help.chm 425202 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.dll 112128 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.qtr 598016 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\License.rtf 29950 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Localizable.strings 1066058 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\info.nib 653 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\objects.xib 10013 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\info.nib 1572 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\objects.xib 134009 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\info.nib 938 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\objects.xib 20984 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\info.nib 599 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\objects.xib 162897 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SortPrefixes.plist 404 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\YahooLicense.rtf 988 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\About iTunes.rtf 7638 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Apple TV Help.chm 7638 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0423.rtf 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0426.rtf 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\info.nib 598 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\objects.xib 45868 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GoogleLicense.rtf 955 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\info.nib 878 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\objects.xib 27270 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPhone Help.chm 28347 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod Help.chm 30693 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod License.rtf 16890 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunes Help.chm 425202 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.dll 112128 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.qtr 598016 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\License.rtf 29950 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Localizable.strings 1066058 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\info.nib 653 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\objects.xib 10013 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\info.nib 1572 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\objects.xib 134009 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\info.nib 938 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\objects.xib 20984 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\info.nib 599 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\objects.xib 162897 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SortPrefixes.plist 404 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\YahooLicense.rtf 988 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\About iTunes.rtf 7638 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Apple TV Help.chm 23594 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0423.rtf 34945 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0426.rtf 35314 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\info.nib 598 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\objects.xib 45868 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GoogleLicense.rtf 955 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\info.nib 878 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\objects.xib 27270 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPhone Help.chm 28347 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod Help.chm 30693 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod License.rtf 16890 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunes Help.chm 425202 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.dll 112128 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.qtr 598016 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\License.rtf 29950 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Localizable.strings 1066058 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\info.nib 653 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\objects.xib 10013 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\info.nib 1572 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\objects.xib 134009 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\info.nib 938 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\objects.xib 20984 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\info.nib 599 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\objects.xib 162897 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SortPrefixes.plist 404 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\YahooLicense.rtf 988 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\About iTunes.rtf 7638 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Apple TV Help.chm 23594 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0423.rtf 34945 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EA0426.rtf 35314 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\info.nib 598 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\objects.xib 45868 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GoogleLicense.rtf 955 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\info.nib 878 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\objects.xib 27270 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPhone Help.chm 28347 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod Help.chm 30693 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iPod License.rtf 16890 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunes Help.chm 425202 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.dll 112128 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.qtr 598016 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\License.rtf 598016 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Localizable.strings 1066058 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\info.nib 653 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\objects.xib 10013 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\info.nib 1572 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Placards.nib\objects.xib 134009 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\info.nib 938 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\Ringtone.nib\objects.xib 20984 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\info.nib 599 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SetupAssistant.nib\objects.xib 162897 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\SortPrefixes.plist 404 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPodSettings.nib\YahooLicense.rtf 988 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\About iTunes.rtf 7638 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\Apple TV Help.chm 23594 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\EA0423.rtf 34945 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\EA0426.rtf 35314 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\EQWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\info.nib 598 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\EQWindow.nib\objects.xib 45868 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\GoogleLicense.rtf 955 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\info.nib 878 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\GradientWindow.nib\objects.xib 27270 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPhone Help.chm 28347 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPod Help.chm 30693 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iPod License.rtf 16890 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iTunes Help.chm 425202 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.dll 112128 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\iTunesLocalized.qtr 598016 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\License.rtf 29950 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\Localizable.strings 1066058 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\info.nib 653 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\MusicStoreBar.nib\objects.xib 10013 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\Placards.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\Placards.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\Placards.nib\info.nib 1572 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\Placards.nib\objects.xib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPodSettings.nib\Ringtone.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\About iTunes.rtf 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Apple TV Help.chm 23594 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\EA0423.rtf 34945 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\EA0426.rtf 35314 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\EQWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\EQWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\EQWindow.nib\info.nib 598 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\EQWindow.nib\objects.xib 45868 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\GoogleLicense.rtf 955 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\GradientWindow.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\GradientWindow.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\GradientWindow.nib\info.nib 878 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\GradientWindow.nib\objects.xib 27270 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPhone Help.chm 28347 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPod Help.chm 30693 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iPod License.rtf 16890 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iTunes Help.chm 425202 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iTunesLocalized.dll 112128 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\iTunesLocalized.qtr 598016 bytes executable
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\License.rtf 29950 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Localizable.strings 1066058 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\MusicStoreBar.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\MusicStoreBar.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\MusicStoreBar.nib\info.nib 653 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\MusicStoreBar.nib\objects.xib 10013 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Placards.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Placards.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Placards.nib\info.nib 1572 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Placards.nib\objects.xib 134009 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Ringtone.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Ringtone.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Ringtone.nib\info.nib 938 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\Ringtone.nib\objects.xib 20984 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\SetupAssistant.nib 0 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\SetupAssistant.nib\classes.nib 35 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\SetupAssistant.nib\info.nib 599 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\SetupAssistant.nib\objects.xib 162897 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\SortPrefixes.plist 404 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\iPodSettings.nib\YahooLicense.rtf 988 bytes
File C:\Program Files\iTunes\iTunes.Resources\da.lproj\License.rtf (size mismatch) 598016/29950 bytes executable
File C:\Program Files\Sony Ericsson\Mobile2\Drivers\Signed\k310cm95.sys (size mismatch) 60800/10832 bytes executable
File C:\Program Files\Sony Ericsson\Mobile2\Drivers\Signed\k510obx2.inf (size mismatch) 83344/4746 bytes executable
File C:\Program Files\Sony Ericsson\Mobile2\Drivers\Signed\k510obxv.inf (size mismatch) 83344/10959 bytes executable
File C:\Program Files\Sony Ericsson\Mobile2\Sync Manager\nnotespwdhook.dll (size mismatch) 1953792/49152 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\Backgrnd 0 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\dwmemman.dll 155648 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\dwwin.dll 1351680 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\dwwin.dwr 30174 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lfbmp13n.dll 29696 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lfcmp13n.dll 341504 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lfeps13n.dll 37888 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lffax13n.dll 73216 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lfpcx13n.dll 26112 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lfpng13n.dll 150016 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lftif13n.dll 128000 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lfwmf13n.dll 49152 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lscdprint.dll 77824 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\ltdis13n.dll 255488 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\ltefx13n.dll 205312 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\ltfil13n.dll 136704 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\ltimg13n.dll 310272 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\ltkrn13n.dll 416768 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lttw213n.dll 103936 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\lttwn13n.dll 35328 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\msvcr70.dll 344064 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\mvdmap.ini 124 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\mvmcc.dll 135168 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\stax.chm 24696 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\stax.dll 1011712 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\stax.dstx 415061 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\stax.dwr 605516 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\stax.ENU 5 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\stax.exe 955392 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\staxApp.xml 12807 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\staxSys.xml 49 bytes
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\stengine.dll 1449984 bytes executable
File C:\Program Files\The Creative Assembly\Rome - Total War\presets\previous\template 0 bytes
File C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\LC_MESSAGES 0 bytes
File C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES 0 bytes
File C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES 0 bytes
File C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES 0 bytes
File C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES\LC_MESSAGES\vlc.mo 3981 bytes
File C:\SWSETUP\Adobe\CH\Setup.ini (size mismatch) 217088/1234 bytes executable
File C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP1106\A0107431.rbf (size mismatch) 348160/499712 bytes executable

---- EOF - GMER 1.0.15 ----

Blade81 · Sep 3, 2009

Hi,

Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:

Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.
Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds log (both dds.txt & attach.txt).

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Mcald · Sep 5, 2009

Trying to run combo fix produces the same result as last time, no error is produced and combofix doesn’t start.

It dose run in safe mode however. Should I use it in safe mode?

Nothing will run

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

New member

Security Expert: Emeritus

New member

New member

New member

New member

New member

New member

New member

Security Expert: Emeritus

New member