Probleme mit W32/Virut.AX(Win XP)
 

Moin,
tjoar... also ich fang am besten mal von vorne an:
Ich hab seit letzter Woche wieder Internet. Der Anbieter is Alice. Und offenbar ist es bei denen normal das man nur ein Modem bekommt und sich dann über eine Software direkt mit dem PC einwählt.
Am ersten Tag wieder am Netz hab ich nach ca. 15 minuten dann auch gleich die ersten Virusmeldungen vom Antivir bekommen. Die Dateien hiesen irgendwas mit "asr_*.exe" (* = 5 Zahlen, einmal auch 5 Buchstaben), und sitzt immer im System32 Ordner. Habe erst gedacht das könnte irgendwie mit der Einwahlsoftware zu tun haben (hatte das schon mal das Antivir mir ungefärliche Dateien gemeldet hat, wenn ich aber diese Heuristik höher gesaetzt hab war der ganz ruhig), als aber nach ein paar Minuten/Stunden sich das System nach und nach verabschiedet hat (erst das Internet, dann die Darstellung vom Desktop und auch die Soundkarte), hab ich das dann doch etwas ernster genommen. Also runtergefahren, alle Festplatten abgeklemmt die nicht C: heissen, Windows-CD eingelegt, Formatiert und neu Installiert. Hatte dann auch den Tag ruhe. Am nächsten Tag dann die andere Platten wiederangeschlossen und nach ein Paar Stunden hab ich dann wieder die Virusmeldung bekommen aber wieder im System32 Ordner. Hab gerade noch Antivir durchlaufen lasen und der hat auch nur 2 neue "asr_*.exe" gefunden. Ist das jetz Wirklich ein Virus oder nur Kompatibilitätsprobleme? Wo kommen die Dinger her? Was machen sie sonst noch? Und wie werde ich die wieder los? (Ohne Formatieren) :headbang:

mfg ReapeR

PS: Während ich das geschreiben hab bekam ich wieder ne Warnung, diesmal war es aber nicht "W32/Virut.AX" sondern "TR/Dropper.Gen", aber die Datei hies trotzdem "asr_34865.exe".. bekomme langsam angst :eek:

Externe USB-Datenträger?

Bitte routinemäßig einen Vollscan mit malwarebytes machen und Log posten. Scann auch alle ext. Datenträger.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Danach OTL:

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Doppelklick auf die OTL.exe
• Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
• Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
• Unter Extra Registry, wähle bitte Use SafeList
• Klicke nun auf Run Scan links oben
• Wenn der Scan beendet wurde werden 2 Logfiles erstellt
• Poste die Logfiles hier in den Thread.

Nein sind keine externen HDDs... nur ein MP3-Player (hab den vosichtshalber mal angeschlossen) und sonst alles Intern.

Werd dann jetz mal die Logs posten, muss aber dafür neue dinger auf machen, weil das sonst zu lang is...

#4 - Malewarebytes (Nach dem der durchgelaufen ist und ich die betroffenen Dateien hab löschen lassen immer noch Probleme)

#5 - OLT Pt.1

#6 - OLT PT.2

#7 - Extras

Malwarebytes' Anti-Malware 1.46
Malwarebytes

Database version: 5098

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

12.11.2010 15:13:28
mbam-log-2010-11-12 (15-13-28).txt

Scan type: Full scan (C:\|D:\|E:\|G:\|H:\|I:\|J:\|)
Objects scanned: 529328
Time elapsed: 1 hour(s), 42 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 7

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\tcp/ip netbios helper (Trojan.Dropper) -> No action taken.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\ReapeR\Application Data\LmHosts.exe (Trojan.Dropper) -> No action taken.
C:\System Volume Information\_restore{4D8D9809-85BF-45F8-B59A-3B14DF2C7B5E}\RP14\A0001654.exe (Trojan.Dropper) -> No action taken.
C:\WINDOWS\system32\asr_48836.exe (Virus.Virut) -> No action taken.

OTL logfile created on: 12.11.2010 21:28:52 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\ReapeR\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Germany | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 86,00% Memory free
5,00 Gb Paging File | 5,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,79 Gb Total Space | 49,65 Gb Free Space | 84,45% Space Free | Partition Type: NTFS
Drive D: | 37,90 Gb Total Space | 0,39 Gb Free Space | 1,04% Space Free | Partition Type: NTFS
Drive E: | 182,78 Gb Total Space | 0,92 Gb Free Space | 0,51% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Drive G: | 931,50 Gb Total Space | 615,22 Gb Free Space | 66,05% Space Free | Partition Type: NTFS
Drive H: | 298,08 Gb Total Space | 148,35 Gb Free Space | 49,77% Space Free | Partition Type: NTFS
Drive I: | 465,76 Gb Total Space | 24,37 Gb Free Space | 5,23% Space Free | Partition Type: NTFS

Computer Name: REAPER-DESK | User Name: ReapeR | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010.11.10 16:23:17 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ReapeR\Desktop\OTL.exe
PRC - [2010.11.09 01:10:38 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.11.09 01:10:38 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010.11.09 01:10:38 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010.11.08 19:50:49 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010.02.18 12:49:40 | 000,357,448 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
PRC - [2010.02.18 12:47:34 | 003,203,144 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
PRC - [2010.01.14 21:10:53 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008.04.14 12:30:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.02.01 05:35:06 | 000,405,504 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\sttray.exe
PRC - [2008.02.01 05:35:05 | 000,094,208 | ---- | M] (SigmaTel, Inc.) -- C:\Program Files\SigmaTel\C-Major Audio\WDM\stacsv.exe
PRC - [2008.01.24 19:59:52 | 002,981,328 | ---- | M] (Hansenet) -- C:\Program Files\Alice Software\AliceEinwahl.exe


========== Modules (SafeList) ==========

MOD - [2010.11.10 16:23:17 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ReapeR\Desktop\OTL.exe


========== Win32 Services (SafeList) ==========

SRV - [2010.11.09 01:10:38 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.11.09 01:10:38 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2008.02.01 05:35:05 | 000,094,208 | ---- | M] (SigmaTel, Inc.) [Auto | Running] -- C:\Program Files\SigmaTel\C-Major Audio\WDM\stacsv.exe -- (STacSV)


========== Driver Services (SafeList) ==========

DRV - [2010.11.09 01:10:38 | 000,126,856 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.11.09 01:10:38 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.11.23 17:37:18 | 000,014,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LGVirHid.sys -- (LGVirHid)
DRV - [2009.11.23 17:37:08 | 000,019,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV - [2009.05.11 11:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.05.11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008.08.21 09:22:40 | 003,299,840 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008.04.14 12:30:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008.02.01 05:36:29 | 000,254,872 | R--- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e1e5132.sys -- (e1express) Intel(R)
DRV - [2008.02.01 05:35:05 | 001,222,840 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2008.02.01 05:35:04 | 000,054,272 | ---- | M] (Sonic Focus, Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sfng32.sys -- (sfng32)
DRV - [2007.03.13 13:05:30 | 000,044,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HECI.sys -- (HECI) Intel(R)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.1
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.11.08 19:50:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.11.08 19:50:56 | 000,000,000 | ---D | M]

[2010.11.07 20:16:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ReapeR\Application Data\Mozilla\Extensions
[2010.11.12 21:13:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ReapeR\Application Data\Mozilla\Firefox\Profiles\0kcnnpyl.default\extensions
[2010.11.07 22:58:36 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\ReapeR\Application Data\Mozilla\Firefox\Profiles\0kcnnpyl.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.11.12 19:03:22 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\ReapeR\Application Data\Mozilla\Firefox\Profiles\0kcnnpyl.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.11.12 21:13:30 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010.11.07 21:43:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.11.08 00:22:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010.09.15 04:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.07.12 21:03:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2010.11.08 19:50:52 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.11.08 19:50:52 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.11.08 19:50:52 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.11.08 19:50:52 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.11.08 19:50:52 | 000,001,105 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2008.04.14 12:30:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ()
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\sttray.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [UserFaultCheck] File not found
O4 - HKCU..\Run: [Meebo Notifier] C:\Documents and Settings\ReapeR\Local Settings\Application Data\Meebo\Meebo Notifier\MeeboNotifier.exe (Meebo, Inc.)
O4 - Startup: C:\Documents and Settings\ReapeR\Start Menu\Programs\Startup\Alice-Einwahl.lnk = C:\Program Files\Alice Software\AliceEinwahl.exe (Hansenet)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\ReapeR\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\ReapeR\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O27 - HKLM IFEO\dotnet3.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnet3[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnet3[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3_ia64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3_ia64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3_ia64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3_x64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3_x64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3_x64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx30SP1setup.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx30SP1setup[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx30SP1setup[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx35.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx35[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx35[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx35setup.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx35setup[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx35setup[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3setup.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3setup[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\dotnetfx3setup[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_ia64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_ia64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_ia64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_x64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_x64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_x64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_x86.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_x86[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP1_x86[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_ia64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_ia64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_ia64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_x64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_x64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_x64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_x86.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_x86[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx20SP2_x86[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx30SP1_x64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx30SP1_x64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx30SP1_x64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx30SP1_x86.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx30SP1_x86[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx30SP1_x86[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_ia64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_ia64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_ia64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_x64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_x64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_x64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_x86.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_x86[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx35_x86[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx64.exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx64[1].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O27 - HKLM IFEO\NetFx64[2].exe: Debugger - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\DotNetFxInstallBlock.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.11.07 19:31:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010.07.08 20:00:46 | 000,000,000 | ---D | M] - G:\Autorun -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.11.12 15:39:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\My Documents\StarCraft II
[2010.11.12 15:39:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Blizzard Entertainment
[2010.11.12 13:28:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Malwarebytes
[2010.11.12 13:28:29 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.11.12 13:28:27 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.11.12 13:28:27 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.11.12 13:28:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010.11.11 22:20:57 | 000,000,000 | ---D | C] -- C:\Program Files\DotAzilla
[2010.11.11 21:54:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\TS3Client
[2010.11.10 21:33:30 | 000,000,000 | ---D | C] -- C:\dokumente und einstellungen
[2010.11.10 19:21:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment
[2010.11.10 18:59:02 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2010.11.10 18:51:28 | 013,326,816 | ---- | C] (TeamSpeak Systems GmbH) -- C:\Documents and Settings\ReapeR\Desktop\TeamSpeak3-Client-win32-3.0.0-beta36.exe
[2010.11.10 18:19:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\teamspeak2
[2010.11.10 18:19:39 | 000,034,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lhacm.acm
[2010.11.10 18:19:34 | 000,000,000 | ---D | C] -- C:\Program Files\Teamspeak2_RC2
[2010.11.10 16:25:05 | 006,153,648 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\ReapeR\Desktop\mbam-setup.exe
[2010.11.10 16:23:06 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\ReapeR\Desktop\OTL.exe
[2010.11.10 14:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\XMedia Recode
[2010.11.10 02:05:49 | 000,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys
[2010.11.09 22:46:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Meebo
[2010.11.09 22:46:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\Meebo
[2010.11.09 22:44:26 | 001,276,392 | ---- | C] (Meebo, Inc.) -- C:\Documents and Settings\ReapeR\Desktop\MeeboNotifierSetup-Beta.exe
[2010.11.09 22:35:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Miranda
[2010.11.09 22:34:38 | 000,000,000 | ---D | C] -- C:\Program Files\Miranda IM
[2010.11.09 06:48:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\.thumbnails
[2010.11.09 06:48:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\My Documents\gegl-0.0
[2010.11.09 06:48:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\.gimp-2.6
[2010.11.09 06:47:07 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0
[2010.11.09 06:44:31 | 000,000,000 | ---D | C] -- C:\Program Files\Paint.NET
[2010.11.09 06:44:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\Paint.NET
[2010.11.09 06:43:32 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2010.11.09 06:43:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\assembly
[2010.11.09 06:43:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2010.11.09 06:42:39 | 000,000,000 | RH-D | C] -- C:\AHCache
[2010.11.09 06:41:05 | 020,240,744 | ---- | C] (The GIMP Team ) -- C:\Documents and Settings\ReapeR\Desktop\gimp-2.6.11-i686-setup.exe
[2010.11.09 06:38:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\vlc
[2010.11.09 01:18:01 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll
[2010.11.09 01:18:00 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2010.11.09 01:17:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs
[2010.11.09 01:17:53 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp Detect
[2010.11.09 01:17:44 | 001,858,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll
[2010.11.09 01:17:44 | 000,551,408 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll
[2010.11.09 01:17:44 | 000,436,720 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll
[2010.11.09 01:17:44 | 000,129,520 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll
[2010.11.09 01:17:44 | 000,096,752 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll
[2010.11.09 01:17:44 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe
[2010.11.09 01:17:44 | 000,066,544 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe
[2010.11.09 01:17:44 | 000,066,032 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe
[2010.11.09 01:17:44 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys
[2010.11.09 01:17:44 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2010.11.09 01:17:43 | 000,670,192 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll
[2010.11.09 01:17:43 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll
[2010.11.09 01:17:42 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp
[2010.11.09 01:17:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Winamp
[2010.11.09 01:16:07 | 011,802,480 | ---- | C] (Nullsoft, Inc.) -- C:\Documents and Settings\ReapeR\Desktop\winamp5581_full_emusic-7plus_de-de.exe
[2010.11.09 01:10:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Avira
[2010.11.08 23:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2010.11.08 16:54:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010.11.08 00:22:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010.11.08 00:22:20 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010.11.08 00:22:20 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010.11.08 00:22:20 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010.11.07 22:58:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\dwhelper
[2010.11.07 21:43:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010.11.07 21:43:00 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010.11.07 21:42:59 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010.11.07 21:42:51 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010.11.07 21:42:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Sun
[2010.11.07 20:25:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Profiles
[2010.11.07 20:25:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\My Documents\My eBooks
[2010.11.07 20:25:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\InterTrust
[2010.11.07 20:25:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe
[2010.11.07 20:25:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010.11.07 20:25:17 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010.11.07 20:24:55 | 000,328,704 | ---- | C] (InstallShield Software Corporation ) -- C:\WINDOWS\IsUn0407.exe
[2010.11.07 20:23:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Macromedia
[2010.11.07 20:23:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Adobe
[2010.11.07 20:16:59 | 000,006,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\enum1394.sys
[2010.11.07 20:16:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\My Documents\Downloads
[2010.11.07 20:16:12 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2010.11.07 20:16:12 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbui.dll
[2010.11.07 20:15:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\Mozilla
[2010.11.07 20:15:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Mozilla
[2010.11.07 20:15:29 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Music
[2010.11.07 20:15:13 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010.11.07 20:15:12 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2010.11.07 20:15:10 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll
[2010.11.07 20:15:10 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll
[2010.11.07 20:15:09 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll
[2010.11.07 20:15:08 | 000,741,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.dll
[2010.11.07 20:15:08 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.cpl
[2010.11.07 20:15:08 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe
[2010.11.07 20:15:08 | 000,000,000 | R--D | C] -- C:\Program Files
[2010.11.07 20:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2010.11.07 20:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Microsoft Shared
[2010.11.07 20:15:08 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files
[2010.11.07 20:15:01 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0408.dll
[2010.11.07 20:15:01 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt041f.dll
[2010.11.07 20:15:01 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0419.dll
[2010.11.07 20:15:00 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040e.dll
[2010.11.07 20:15:00 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0415.dll
[2010.11.07 20:15:00 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0405.dll
[2010.11.07 20:14:57 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll
[2010.11.07 20:14:57 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll
[2010.11.07 20:14:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2010.11.07 20:14:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2010.11.07 20:14:57 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
[2010.11.07 20:14:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll
[2010.11.07 20:14:56 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
[2010.11.07 20:14:56 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
[2010.11.07 20:14:56 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
[2010.11.07 20:14:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll
[2010.11.07 20:14:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll
[2010.11.07 20:14:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2010.11.07 20:14:56 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
[2010.11.07 20:14:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll
[2010.11.07 20:14:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll
[2010.11.07 20:14:53 | 000,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
[2010.11.07 20:14:53 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll
[2010.11.07 20:14:53 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
[2010.11.07 20:14:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2010.11.07 20:14:53 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
[2010.11.07 20:14:53 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
[2010.11.07 20:14:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2010.11.07 20:14:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2010.11.07 20:14:53 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
[2010.11.07 20:14:53 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
[2010.11.07 20:14:53 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
[2010.11.07 20:14:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2010.11.07 20:14:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2010.11.07 20:14:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll
[2010.11.07 20:14:52 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
[2010.11.07 20:14:52 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
[2010.11.07 20:14:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2010.11.07 20:14:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll
[2010.11.07 20:14:52 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
[2010.11.07 20:14:52 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
[2010.11.07 20:14:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2010.11.07 20:14:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll
[2010.11.07 20:14:51 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
[2010.11.07 20:14:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll
[2010.11.07 20:14:50 | 000,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
[2010.11.07 20:14:50 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll
[2010.11.07 20:14:50 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
[2010.11.07 20:14:50 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
[2010.11.07 20:14:50 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll
[2010.11.07 20:14:50 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
[2010.11.07 20:14:50 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
[2010.11.07 20:14:50 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
[2010.11.07 20:14:50 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
[2010.11.07 20:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2010.11.07 20:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll
[2010.11.07 20:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll
[2010.11.07 20:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll
[2010.11.07 20:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2010.11.07 20:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2010.11.07 20:14:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll
[2010.11.07 20:14:50 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
[2010.11.07 20:14:50 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll
[2010.11.07 20:14:50 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
[2010.11.07 20:14:50 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll
[2010.11.07 20:14:50 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2010.11.07 20:14:50 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2010.11.07 20:14:49 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
[2010.11.07 20:14:49 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2010.11.07 20:14:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll
[2010.11.07 20:14:49 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll
[2010.11.07 20:14:44 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2010.11.07 20:14:44 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll
[2010.11.07 20:14:44 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll
[2010.11.07 20:14:44 | 000,103,424 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll
[2010.11.07 20:14:44 | 000,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgsetup.dll
[2010.11.07 20:14:44 | 000,085,020 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll
[2010.11.07 20:14:44 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2010.11.07 20:14:44 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll
[2010.11.07 20:14:44 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2010.11.07 20:14:44 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll
[2010.11.07 20:14:43 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
[2010.11.07 20:14:43 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2010.11.07 20:14:43 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
[2010.11.07 20:14:43 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2010.11.07 20:14:43 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
[2010.11.07 20:14:43 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2010.11.07 20:14:43 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2010.11.07 20:14:43 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
[2010.11.07 20:14:43 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
[2010.11.07 20:14:43 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
[2010.11.07 20:14:42 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
[2010.11.07 20:14:42 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
[2010.11.07 20:14:42 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
[2010.11.07 20:14:42 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
[2010.11.07 20:14:42 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
[2010.11.07 20:14:42 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
[2010.11.07 20:14:42 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
[2010.11.07 20:14:41 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
[2010.11.07 20:14:41 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
[2010.11.07 20:14:41 | 000,032,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2010.11.07 20:14:41 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
[2010.11.07 20:14:41 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskman.exe
[2010.11.07 20:14:41 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irenum.sys
[2010.11.07 20:14:41 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
[2010.11.07 20:14:40 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV
[2010.11.07 20:14:40 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
[2010.11.07 20:14:40 | 000,068,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2010.11.07 20:14:40 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\batt.dll
[2010.11.07 20:14:40 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
[2010.11.07 20:14:32 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Start Menu
[2010.11.07 20:14:32 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents
[2010.11.07 20:14:32 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Templates
[2010.11.07 20:14:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favorites
[2010.11.07 20:14:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Desktop
[2010.11.07 20:14:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010.11.07 20:14:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010.11.07 20:14:14 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2010.11.07 20:14:14 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Application Data
[2010.11.07 20:13:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2010.11.07 20:09:10 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010.11.07 20:08:24 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010.11.07 20:08:24 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010.11.07 20:08:24 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2010.11.07 20:08:24 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2010.11.07 20:08:24 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Offline Web Pages
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2010.11.07 20:08:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2010.11.07 20:07:44 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2010.11.07 20:07:43 | 000,126,856 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010.11.07 20:07:43 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010.11.07 20:07:43 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010.11.07 20:07:43 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010.11.07 20:07:43 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2010.11.07 20:07:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2010.11.07 20:06:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010.11.07 20:05:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\Logitech
[2010.11.07 20:05:12 | 000,014,856 | ---- | C] (Logitech Inc.) -- C:\WINDOWS\System32\drivers\LGVirHid.sys
[2010.11.07 20:05:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Logitech
[2010.11.07 20:05:08 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2010.11.07 20:02:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Hansenet
[2010.11.07 20:02:01 | 000,000,000 | ---D | C] -- C:\Program Files\Alice Software
[2010.11.07 19:56:18 | 000,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\drmkaud.sys
[2010.11.07 19:56:17 | 000,172,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kmixer.sys
[2010.11.07 19:56:16 | 000,052,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dmusic.sys
[2010.11.07 19:56:15 | 000,056,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swmidi.sys
[2010.11.07 19:56:14 | 000,142,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aec.sys
[2010.11.07 19:56:13 | 000,006,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\splitter.sys
[2010.11.07 19:56:12 | 000,060,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sysaudio.sys
[2010.11.07 19:53:04 | 000,307,200 | R--- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\atiiiexx.dll
[2010.11.07 19:53:03 | 000,425,984 | R--- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\ATIDEMGX.dll
[2010.11.07 19:52:43 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2010.11.07 19:48:45 | 000,083,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wdmaud.sys
[2010.11.07 19:45:38 | 005,398,528 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\IDTSG.cpl
[2010.11.07 19:45:38 | 002,187,264 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\stlang.dll
[2010.11.07 19:45:38 | 000,405,504 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\sttray.exe
[2010.11.07 19:45:38 | 000,094,208 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\stacsv.exe
[2010.11.07 19:45:37 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys
[2010.11.07 19:45:37 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\portcls.sys
[2010.11.07 19:45:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2010.11.07 19:45:37 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksuser.dll
[2010.11.07 19:45:36 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2010.11.07 19:45:36 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksproxy.ax
[2010.11.07 19:45:36 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
[2010.11.07 19:45:36 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\drmk.sys
[2010.11.07 19:45:32 | 000,144,896 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\staco.dll
[2010.11.07 19:45:30 | 001,222,840 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\drivers\sthda.sys
[2010.11.07 19:45:30 | 000,270,336 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\stacapi.dll
[2010.11.07 19:45:30 | 000,054,272 | ---- | C] (Sonic Focus, Inc) -- C:\WINDOWS\System32\drivers\sfng32.sys
[2010.11.07 19:45:22 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2010.11.07 19:45:22 | 000,000,000 | ---D | C] -- C:\Program Files\SigmaTel
[2010.11.07 19:45:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2010.11.07 19:44:52 | 000,254,872 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\drivers\e1e5132.sys
[2010.11.07 19:44:52 | 000,179,048 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\e1000msg.dll
[2010.11.07 19:44:52 | 000,154,496 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\Prounstl.exe
[2010.11.07 19:44:52 | 000,066,424 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\NicEtCoE.dll
[2010.11.07 19:44:52 | 000,062,840 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\NicInstE.dll
[2010.11.07 19:44:52 | 000,028,536 | R--- | C] (Intel Corporation) -- C:\WINDOWS\System32\NicCo.dll
[2010.11.07 19:44:26 | 000,044,672 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\drivers\HECI.sys
[2010.11.07 19:44:25 | 000,912,152 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\heciudlg.exe
[2010.11.07 19:44:25 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll
[2010.11.07 19:44:24 | 000,000,000 | ---D | C] -- C:\Program Files\Intel Desktop Board
[2010.11.07 19:41:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2010.11.07 19:41:53 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2010.11.07 19:41:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2010.11.07 19:41:49 | 000,000,000 | ---D | C] -- C:\Intel
[2010.11.07 19:40:17 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2010.11.07 19:40:11 | 000,000,000 | ---D | C] -- C:\TempEI4
[2010.11.07 19:36:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Application Data\Identities
[2010.11.07 19:36:43 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ReapeR\My Documents\My Pictures
[2010.11.07 19:36:43 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ReapeR\My Documents\My Music
[2010.11.07 19:36:43 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2010.11.07 19:36:39 | 000,000,000 | --SD | C] -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\Microsoft
[2010.11.07 19:36:39 | 000,000,000 | --SD | C] -- C:\Documents and Settings\ReapeR\Application Data\Microsoft
[2010.11.07 19:36:39 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ReapeR\SendTo
[2010.11.07 19:36:39 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ReapeR\Recent
[2010.11.07 19:36:39 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\ReapeR\Application Data
[2010.11.07 19:36:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ReapeR\Start Menu
[2010.11.07 19:36:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ReapeR\My Documents
[2010.11.07 19:36:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\ReapeR\Favorites
[2010.11.07 19:36:39 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\ReapeR\Cookies
[2010.11.07 19:36:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ReapeR\Templates
[2010.11.07 19:36:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ReapeR\PrintHood
[2010.11.07 19:36:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ReapeR\NetHood
[2010.11.07 19:36:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\ReapeR\Local Settings
[2010.11.07 19:36:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ReapeR\Desktop
[2010.11.07 19:35:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010.11.07 19:35:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010.11.07 19:35:49 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010.11.07 19:35:48 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010.11.07 19:35:48 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010.11.07 19:35:36 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2010.11.07 19:35:36 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010.11.07 19:33:33 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime
[2010.11.07 19:33:33 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime
[2010.11.07 19:33:33 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime
[2010.11.07 19:33:33 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime
[2010.11.07 19:33:32 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime
[2010.11.07 19:33:32 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wam51.dll
[2010.11.07 19:33:32 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime
[2010.11.07 19:33:32 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamreg51.dll
[2010.11.07 19:33:32 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll
[2010.11.07 19:33:32 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys
[2010.11.07 19:33:32 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll
[2010.11.07 19:33:31 | 000,364,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svc.dll
[2010.11.07 19:33:31 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll
[2010.11.07 19:33:31 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll
[2010.11.07 19:33:31 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll
[2010.11.07 19:33:31 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll
[2010.11.07 19:33:31 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2010.11.07 19:33:30 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll
[2010.11.07 19:33:30 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll
[2010.11.07 19:33:30 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime
[2010.11.07 19:33:29 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uihelper.dll
[2010.11.07 19:33:29 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tools.dll
[2010.11.07 19:33:29 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe
[2010.11.07 19:33:29 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll
[2010.11.07 19:33:28 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2010.11.07 19:33:28 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe
[2010.11.07 19:33:28 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2010.11.07 19:33:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe
[2010.11.07 19:33:28 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys
[2010.11.07 19:33:28 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys
[2010.11.07 19:33:28 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys
[2010.11.07 19:33:27 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\svcext51.dll
[2010.11.07 19:33:27 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sspifilt.dll
[2010.11.07 19:33:27 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ssinc51.dll
[2010.11.07 19:33:27 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll
[2010.11.07 19:33:26 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll
[2010.11.07 19:33:26 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll
[2010.11.07 19:33:25 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpincl.dll
[2010.11.07 19:33:25 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpsmir.dll
[2010.11.07 19:33:25 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpthrd.dll
[2010.11.07 19:33:25 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll
[2010.11.07 19:33:25 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmptrap.exe
[2010.11.07 19:33:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2010.11.07 19:33:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpmib.dll
[2010.11.07 19:33:24 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsvc.dll
[2010.11.07 19:33:24 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpcl.dll
[2010.11.07 19:33:24 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmp.exe
[2010.11.07 19:33:24 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2010.11.07 19:33:24 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpapi.dll
[2010.11.07 19:33:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll
[2010.11.07 19:33:23 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smi2smir.exe
[2010.11.07 19:33:23 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll
[2010.11.07 19:33:23 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll
[2010.11.07 19:33:23 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll
[2010.11.07 19:33:23 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll
[2010.11.07 19:33:23 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll
[2010.11.07 19:33:23 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll
[2010.11.07 19:33:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll
[2010.11.07 19:33:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll
[2010.11.07 19:33:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll
[2010.11.07 19:33:23 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll
[2010.11.07 19:33:23 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll
[2010.11.07 19:33:22 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll
[2010.11.07 19:33:22 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll
[2010.11.07 19:33:22 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll
[2010.11.07 19:33:22 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll
[2010.11.07 19:33:22 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll
[2010.11.07 19:33:21 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\seo.dll
[2010.11.07 19:33:21 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2010.11.07 19:33:20 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll
[2010.11.07 19:33:20 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll
[2010.11.07 19:33:20 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2010.11.07 19:33:20 | 000,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll
[2010.11.07 19:33:20 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rw001ext.dll
[2010.11.07 19:33:20 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwnh.dll
[2010.11.07 19:33:19 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime
[2010.11.07 19:33:19 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2010.11.07 19:33:19 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe
[2010.11.07 19:33:19 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcref.dll
[2010.11.07 19:33:18 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime
[2010.11.07 19:33:18 | 000,020,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ramdisk.sys
[2010.11.07 19:33:18 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe
[2010.11.07 19:33:18 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe
[2010.11.07 19:33:17 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2010.11.07 19:33:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2010.11.07 19:33:17 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pwsdata.dll
[2010.11.07 19:33:17 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll
[2010.11.07 19:33:16 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2010.11.07 19:33:16 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe
[2010.11.07 19:33:16 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll
[2010.11.07 19:33:16 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2010.11.07 19:33:15 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime
[2010.11.07 19:33:15 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll
[2010.11.07 19:33:15 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll
[2010.11.07 19:33:15 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll
[2010.11.07 19:33:15 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll
[2010.11.07 19:33:15 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll
[2010.11.07 19:33:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll
[2010.11.07 19:33:14 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2010.11.07 19:33:13 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll
[2010.11.07 19:33:13 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nsepm.dll
[2010.11.07 19:33:12 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll
[2010.11.07 19:33:12 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtstocom.exe
[2010.11.07 19:33:11 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiregmv.exe
[2010.11.07 19:33:10 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex
[2010.11.07 19:33:10 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll
[2010.11.07 19:33:08 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys
[2010.11.07 19:33:08 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll
[2010.11.07 19:33:08 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migregdb.exe
[2010.11.07 19:33:07 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\metada51.dll
[2010.11.07 19:33:07 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\md5filt.dll
[2010.11.07 19:33:07 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll
[2010.11.07 19:33:06 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2010.11.07 19:33:06 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lmmib2.dll
[2010.11.07 19:33:06 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lpdsvc.dll
[2010.11.07 19:33:06 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll
[2010.11.07 19:33:06 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lprmon.dll
[2010.11.07 19:33:06 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lonsint.dll
[2010.11.07 19:33:05 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2010.11.07 19:33:05 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2010.11.07 19:33:05 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll
[2010.11.07 19:33:04 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2010.11.07 19:33:04 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2010.11.07 19:33:04 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2010.11.07 19:33:04 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41a.dll
[2010.11.07 19:33:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll
[2010.11.07 19:33:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll
[2010.11.07 19:33:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41j.dll
[2010.11.07 19:33:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2010.11.07 19:33:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll
[2010.11.07 19:33:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll
[2010.11.07 19:33:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2010.11.07 19:33:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2010.11.07 19:33:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdibm02.dll
[2010.11.07 19:33:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll
[2010.11.07 19:33:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll
[2010.11.07 19:33:03 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2010.11.07 19:33:02 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll
[2010.11.07 19:33:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdax2.dll
[2010.11.07 19:33:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106n.dll
[2010.11.07 19:33:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll
[2010.11.07 19:33:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101.dll
[2010.11.07 19:33:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2010.11.07 19:33:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2010.11.07 19:33:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll
[2010.11.07 19:33:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll
[2010.11.07 19:33:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll
[2010.11.07 19:33:02 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2010.11.07 19:33:02 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll
[2010.11.07 19:33:01 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infocomm.dll
[2010.11.07 19:33:01 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iprip.dll
[2010.11.07 19:33:01 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iscomlog.dll
[2010.11.07 19:33:01 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetin51.exe
[2010.11.07 19:33:01 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll
[2010.11.07 19:33:01 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll
[2010.11.07 19:33:01 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll
[2010.11.07 19:33:00 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll
[2010.11.07 19:33:00 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll
[2010.11.07 19:33:00 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll
[2010.11.07 19:33:00 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll
[2010.11.07 19:33:00 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe
[2010.11.07 19:32:59 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe
[2010.11.07 19:32:59 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe
[2010.11.07 19:32:59 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe
[2010.11.07 19:32:59 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe
[2010.11.07 19:32:59 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2010.11.07 19:32:59 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll
[2010.11.07 19:32:59 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2010.11.07 19:32:59 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe
[2010.11.07 19:32:58 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll
[2010.11.07 19:32:58 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll
[2010.11.07 19:32:58 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll
[2010.11.07 19:32:58 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime
[2010.11.07 19:32:58 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe
[2010.11.07 19:32:57 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll
[2010.11.07 19:32:57 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll
[2010.11.07 19:32:57 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime
[2010.11.07 19:32:57 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2010.11.07 19:32:57 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iislog51.dll
[2010.11.07 19:32:57 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe
[2010.11.07 19:32:57 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe
[2010.11.07 19:32:57 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll
[2010.11.07 19:32:56 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iische51.dll
[2010.11.07 19:32:56 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll
[2010.11.07 19:32:56 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisadmin.dll
[2010.11.07 19:32:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2010.11.07 19:32:56 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisfecnv.dll
[2010.11.07 19:32:52 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll
[2010.11.07 19:32:43 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll
[2010.11.07 19:32:43 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpext.dll
[2010.11.07 19:32:43 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpod51.dll
[2010.11.07 19:32:43 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpmb51.dll
[2010.11.07 19:32:42 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hostmib.dll
[2010.11.07 19:32:42 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll
[2010.11.07 19:32:42 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gzip.dll
[2010.11.07 19:32:41 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsst.dll
[2010.11.07 19:32:41 | 000,400,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsxp32.dll
[2010.11.07 19:32:41 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxstiff.dll
[2010.11.07 19:32:41 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssvc.exe
[2010.11.07 19:32:41 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxst30.dll
[2010.11.07 19:32:41 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxswzrd.dll
[2010.11.07 19:32:41 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsui.dll
[2010.11.07 19:32:40 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscomex.dll
[2010.11.07 19:32:40 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscover.exe
[2010.11.07 19:32:40 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscom.dll
[2010.11.07 19:32:40 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsevent.dll
[2010.11.07 19:32:40 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll
[2010.11.07 19:32:40 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsdrv.dll
[2010.11.07 19:32:40 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsmon.dll
[2010.11.07 19:32:40 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsext32.dll
[2010.11.07 19:32:40 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe
[2010.11.07 19:32:40 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsperf.dll
[2010.11.07 19:32:40 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsres.dll
[2010.11.07 19:32:39 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsapi.dll
[2010.11.07 19:32:39 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclnt.exe
[2010.11.07 19:32:39 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2010.11.07 19:32:39 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsv251.dll
[2010.11.07 19:32:39 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2010.11.07 19:32:39 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmdll.dll
[2010.11.07 19:32:39 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2010.11.07 19:32:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpmib.dll
[2010.11.07 19:32:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2010.11.07 19:32:38 | 000,618,605 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4autl.dll
[2010.11.07 19:32:38 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2010.11.07 19:32:38 | 000,024,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmcgi.exe
[2010.11.07 19:32:38 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe
[2010.11.07 19:32:38 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exstrace.dll
[2010.11.07 19:32:38 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\f3ahvoas.dll
[2010.11.07 19:32:37 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntagnt.dll
[2010.11.07 19:32:37 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntwin.exe
[2010.11.07 19:32:37 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll
[2010.11.07 19:32:37 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll
[2010.11.07 19:32:37 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll
[2010.11.07 19:32:37 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys
[2010.11.07 19:32:37 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntcmd.exe
[2010.11.07 19:32:36 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll
[2010.11.07 19:32:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime
[2010.11.07 19:32:34 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\davcdata.exe
[2010.11.07 19:32:34 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe
[2010.11.07 19:32:33 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe
[2010.11.07 19:32:33 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\convlog.exe
[2010.11.07 19:32:33 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\controt.dll
[2010.11.07 19:32:33 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\compfilt.dll
[2010.11.07 19:32:33 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\counters.dll
[2010.11.07 19:32:32 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe
[2010.11.07 19:32:32 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll
[2010.11.07 19:32:32 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll
[2010.11.07 19:32:32 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll
[2010.11.07 19:32:32 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2010.11.07 19:32:31 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2010.11.07 19:32:31 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2010.11.07 19:32:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe
[2010.11.07 19:32:31 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe
[2010.11.07 19:32:31 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe
[2010.11.07 19:32:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe
[2010.11.07 19:32:30 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime
[2010.11.07 19:32:29 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_g18030.dll
[2010.11.07 19:32:29 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys
[2010.11.07 19:32:29 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll
[2010.11.07 19:32:29 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll
[2010.11.07 19:32:24 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browscap.dll
[2010.11.07 19:32:23 | 000,369,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asp51.dll
[2010.11.07 19:32:23 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aqueue.dll
[2010.11.07 19:32:23 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2010.11.07 19:32:23 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asptxn.dll
[2010.11.07 19:32:23 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aspperf.dll
[2010.11.07 19:32:23 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\authfilt.dll
[2010.11.07 19:32:22 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\appconf.dll
[2010.11.07 19:32:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0804.dll
[2010.11.07 19:32:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0412.dll
[2010.11.07 19:32:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0411.dll
[2010.11.07 19:32:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040d.dll
[2010.11.07 19:32:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0404.dll
[2010.11.07 19:32:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0401.dll
[2010.11.07 19:32:22 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2010.11.07 19:32:21 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adrot.dll
[2010.11.07 19:32:21 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admexs.dll
[2010.11.07 19:32:21 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admxprox.dll
[2010.11.07 19:32:19 | 000,032,827 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptest.exe
[2010.11.07 19:32:19 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll
[2010.11.07 19:32:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\staxmem.dll
[2010.11.07 19:32:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamregps.dll
[2010.11.07 19:32:18 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsnap.dll
[2010.11.07 19:32:18 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpadm.dll
[2010.11.07 19:32:18 | 000,020,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.dll
[2010.11.07 19:32:18 | 000,016,437 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.exe
[2010.11.07 19:32:16 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logui.ocx
[2010.11.07 19:32:16 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isatq.dll
[2010.11.07 19:32:15 | 000,829,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.dll
[2010.11.07 19:32:15 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisui.dll
[2010.11.07 19:32:15 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrtl.dll
[2010.11.07 19:32:15 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismap.dll
[2010.11.07 19:32:15 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstas.exe
[2010.11.07 19:32:15 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetsloc.dll
[2010.11.07 19:32:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisreset.exe
[2010.11.07 19:32:15 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoadmn.dll
[2010.11.07 19:32:15 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.exe
[2010.11.07 19:32:15 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstap.dll
[2010.11.07 19:32:14 | 000,598,071 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmc.dll
[2010.11.07 19:32:14 | 000,208,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll
[2010.11.07 19:32:14 | 000,188,494 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpcount.exe
[2010.11.07 19:32:14 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisext51.dll
[2010.11.07 19:32:14 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpexedll.dll
[2010.11.07 19:32:14 | 000,020,538 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpremadm.exe
[2010.11.07 19:32:14 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2010.11.07 19:32:13 | 000,876,653 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awel.dll
[2010.11.07 19:32:13 | 000,184,435 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4amsft.dll
[2010.11.07 19:32:13 | 000,147,513 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4apws.dll
[2010.11.07 19:32:13 | 000,109,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98swin.exe
[2010.11.07 19:32:13 | 000,102,509 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4atxt.dll
[2010.11.07 19:32:13 | 000,082,035 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4anscp.dll
[2010.11.07 19:32:13 | 000,049,212 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awebs.dll
[2010.11.07 19:32:13 | 000,049,210 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4areg.dll
[2010.11.07 19:32:13 | 000,041,020 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avnb.dll
[2010.11.07 19:32:13 | 000,032,826 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avss.dll
[2010.11.07 19:32:13 | 000,014,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98sadm.exe
[2010.11.07 19:32:12 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adsiis51.dll
[2010.11.07 19:32:12 | 000,275,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certwiz.ocx
[2010.11.07 19:32:12 | 000,188,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgwiz.exe
[2010.11.07 19:32:12 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certmap.ocx
[2010.11.07 19:32:12 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cnfgprts.ocx
[2010.11.07 19:32:12 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\coadmin.dll
[2010.11.07 19:32:12 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.dll
[2010.11.07 19:32:12 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.exe
[2010.11.07 19:32:11 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admwprox.dll
[2010.11.07 19:32:11 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.exe
[2010.11.07 19:32:10 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.dll

[2010.11.07 19:32:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010.11.07 19:32:09 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010.11.07 19:32:09 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010.11.07 19:31:53 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010.11.07 19:31:53 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2010.11.07 19:31:53 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icardie.dll
[2010.11.07 19:31:53 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010.11.07 19:31:53 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieudinit.exe
[2010.11.07 19:31:52 | 006,066,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2010.11.07 19:31:52 | 002,455,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2010.11.07 19:31:52 | 000,991,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2010.11.07 19:31:52 | 000,383,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2010.11.07 19:31:44 | 000,022,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2010.11.07 19:31:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010.11.07 19:31:36 | 000,017,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010.11.07 19:31:35 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010.11.07 19:31:11 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2010.11.07 19:30:35 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2010.11.07 19:30:20 | 000,000,000 | -H-D | C] -- C:\Program Files\WindowsUpdate
[2010.11.07 19:29:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010.11.07 19:29:51 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe
[2010.11.07 19:29:51 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll
[2010.11.07 19:29:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll
[2010.11.07 19:29:51 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
[2010.11.07 19:29:50 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe
[2010.11.07 19:29:50 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll
[2010.11.07 19:29:42 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe
[2010.11.07 19:29:41 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
[2010.11.07 19:29:41 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2010.11.07 19:29:40 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll
[2010.11.07 19:29:40 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
[2010.11.07 19:29:40 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinfo32.exe
[2010.11.07 19:29:40 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wb32.exe
[2010.11.07 19:29:40 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cb32.exe
[2010.11.07 19:29:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Services
[2010.11.07 19:29:36 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe
[2010.11.07 19:29:36 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll
[2010.11.07 19:29:36 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll
[2010.11.07 19:29:36 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wisc10.dll
[2010.11.07 19:29:36 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoapr.dll
[2010.11.07 19:29:36 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe
[2010.11.07 19:29:36 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
[2010.11.07 19:29:36 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2010.11.07 19:29:36 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010.11.07 19:29:35 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoap1.dll
[2010.11.07 19:29:35 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2010.11.07 19:29:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2010.11.07 19:29:31 | 000,726,078 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchui.dll
[2010.11.07 19:29:31 | 000,058,434 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchctls.dll
[2010.11.07 19:29:30 | 003,166,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msgr3en.dll
[2010.11.07 19:29:30 | 000,765,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll
[2010.11.07 19:29:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010.11.07 19:29:29 | 001,669,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup_wm.exe
[2010.11.07 19:29:29 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpband.dll
[2010.11.07 19:29:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010.11.07 19:29:28 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpvis.dll
[2010.11.07 19:29:28 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpns.dll
[2010.11.07 19:29:27 | 000,786,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migrate.exe
[2010.11.07 19:29:27 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmplayer.exe
[2010.11.07 19:29:27 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\custsat.dll
[2010.11.07 19:29:26 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll
[2010.11.07 19:29:26 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2010.11.07 19:29:26 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
[2010.11.07 19:29:26 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng1.dll
[2010.11.07 19:29:26 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll
[2010.11.07 19:29:26 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
[2010.11.07 19:29:26 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll
[2010.11.07 19:29:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2010.11.07 19:29:26 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauserv.dll
[2010.11.07 19:29:26 | 000,004,639 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe
[2010.11.07 19:29:25 | 001,135,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll
[2010.11.07 19:29:25 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2010.11.07 19:29:25 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll
[2010.11.07 19:29:25 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
[2010.11.07 19:29:25 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt1.exe
[2010.11.07 19:29:25 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2010.11.07 19:29:25 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe
[2010.11.07 19:29:25 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2010.11.07 19:29:25 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll
[2010.11.07 19:29:25 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx2.dll
[2010.11.07 19:29:25 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2010.11.07 19:29:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx4.dll
[2010.11.07 19:29:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2010.11.07 19:29:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx3.dll
[2010.11.07 19:29:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2010.11.07 19:29:24 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgr.dll
[2010.11.07 19:29:24 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2010.11.07 19:29:24 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgrprxy.dll
[2010.11.07 19:29:23 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2res2.dll
[2010.11.07 19:29:23 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2eres.dll
[2010.11.07 19:29:22 | 004,256,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2res.dll
[2010.11.07 19:29:22 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2fxb.dll
[2010.11.07 19:29:21 | 000,502,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2fxa.dll
[2010.11.07 19:29:21 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2filt.dll
[2010.11.07 19:29:21 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2ae.dll
[2010.11.07 19:29:21 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2ext.dll
[2010.11.07 19:29:20 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe
[2010.11.07 19:29:20 | 000,000,000 | ---D | C] -- C:\Program Files\Movie Maker
[2010.11.07 19:29:05 | 000,565,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobmain.dll
[2010.11.07 19:29:05 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobcomm.dll
[2010.11.07 19:29:05 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oobebaln.exe
[2010.11.07 19:29:05 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobshel.dll
[2010.11.07 19:29:05 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoobe.exe
[2010.11.07 19:29:05 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobweb.dll
[2010.11.07 19:29:05 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobdl.dll
[2010.11.07 19:29:02 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uploadm.exe
[2010.11.07 19:29:02 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
[2010.11.07 19:29:02 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrslv.dll
[2010.11.07 19:29:02 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
[2010.11.07 19:29:02 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrdm.dll
[2010.11.07 19:29:01 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchshell.dll
[2010.11.07 19:29:01 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
[2010.11.07 19:29:01 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrcdlg.dll
[2010.11.07 19:29:01 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2010.11.07 19:29:01 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\racpldlg.dll
[2010.11.07 19:29:01 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchsvc.dll
[2010.11.07 19:28:59 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconfig.exe
[2010.11.07 19:28:59 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hscupd.exe
[2010.11.07 19:28:58 | 000,769,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpctr.exe
[2010.11.07 19:28:58 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010.11.07 19:28:57 | 000,380,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rstrui.exe
[2010.11.07 19:28:57 | 000,129,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltmgr.sys
[2010.11.07 19:28:57 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMc.exe
[2010.11.07 19:28:57 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltmc.exe
[2010.11.07 19:28:57 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltlib.dll
[2010.11.07 19:28:56 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2010.11.07 19:28:56 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srrstr.dll
[2010.11.07 19:28:56 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srsvc.dll
[2010.11.07 19:28:56 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
[2010.11.07 19:28:56 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ils.dll
[2010.11.07 19:28:56 | 000,073,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sr.sys
[2010.11.07 19:28:56 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srclient.dll
[2010.11.07 19:28:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010.11.07 19:28:55 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmas.dll
[2010.11.07 19:28:55 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
[2010.11.07 19:28:55 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconf.dll
[2010.11.07 19:28:55 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dcap32.dll
[2010.11.07 19:28:55 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
[2010.11.07 19:28:55 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmdd.dll
[2010.11.07 19:28:55 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmsrvc.exe
[2010.11.07 19:28:55 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
[2010.11.07 19:28:55 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\isrdbg32.dll
[2010.11.07 19:28:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
[2010.11.07 19:28:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmmkcert.dll
[2010.11.07 19:28:54 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\callcont.dll
[2010.11.07 19:28:54 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nac.dll
[2010.11.07 19:28:54 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rrcm.dll
[2010.11.07 19:28:54 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\h323cc.dll
[2010.11.07 19:28:54 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\confmrsl.dll
[2010.11.07 19:28:54 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmasnt.dll
[2010.11.07 19:28:53 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mst120.dll
[2010.11.07 19:28:53 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmwb.dll
[2010.11.07 19:28:53 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmoldwb.dll
[2010.11.07 19:28:53 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmft.dll
[2010.11.07 19:28:53 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmchat.dll
[2010.11.07 19:28:53 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmcom.dll
[2010.11.07 19:28:53 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mst123.dll
[2010.11.07 19:28:52 | 001,032,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\conf.exe
[2010.11.07 19:28:52 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2010.11.07 19:28:52 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoeacct.dll
[2010.11.07 19:28:52 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2010.11.07 19:28:52 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoert2.dll
[2010.11.07 19:28:52 | 000,000,000 | ---D | C] -- C:\Program Files\NetMeeting
[2010.11.07 19:28:51 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab32.dll
[2010.11.07 19:28:51 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab32res.dll
[2010.11.07 19:28:51 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\directdb.dll
[2010.11.07 19:28:51 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabimp.dll
[2010.11.07 19:28:51 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
[2010.11.07 19:28:51 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetres.dll
[2010.11.07 19:28:51 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe
[2010.11.07 19:28:51 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabfind.dll
[2010.11.07 19:28:51 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabmig.exe
[2010.11.07 19:28:50 | 000,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010.11.07 19:28:50 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oeimport.dll
[2010.11.07 19:28:50 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msimn.exe
[2010.11.07 19:28:49 | 002,479,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoeres.dll
[2010.11.07 19:28:49 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schedsvc.dll
[2010.11.07 19:28:49 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup50.exe
[2010.11.07 19:28:49 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oemig50.exe
[2010.11.07 19:28:49 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oemiglib.dll
[2010.11.07 19:28:49 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Express
[2010.11.07 19:28:48 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstask.dll
[2010.11.07 19:28:48 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2010.11.07 19:28:48 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isign32.dll
[2010.11.07 19:28:48 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
[2010.11.07 19:28:48 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwdial.dll
[2010.11.07 19:28:48 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
[2010.11.07 19:28:48 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwphbk.dll
[2010.11.07 19:28:48 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2010.11.07 19:28:48 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstinit.exe
[2010.11.07 19:28:47 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
[2010.11.07 19:28:47 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcfg.dll
[2010.11.07 19:28:47 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwdl.dll
[2010.11.07 19:28:46 | 000,554,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dao360.dll
[2010.11.07 19:28:46 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwconn1.exe
[2010.11.07 19:28:46 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwhelp.dll
[2010.11.07 19:28:46 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwconn2.exe
[2010.11.07 19:28:46 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwconn.dll
[2010.11.07 19:28:46 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwutil.dll
[2010.11.07 19:28:46 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwrmind.exe
[2010.11.07 19:28:46 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetwiz.exe
[2010.11.07 19:28:45 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oledb32.dll
[2010.11.07 19:28:45 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sqlxmlx.dll
[2010.11.07 19:28:45 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaps.dll
[2010.11.07 19:28:45 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatl3.dll
[2010.11.07 19:28:45 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaosp.dll
[2010.11.07 19:28:45 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oledb32r.dll
[2010.11.07 19:28:44 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasql.dll
[2010.11.07 19:28:44 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaora.dll
[2010.11.07 19:28:44 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadox.dll
[2010.11.07 19:28:44 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msjro.dll
[2010.11.07 19:28:44 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadrh15.dll
[2010.11.07 19:28:44 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxactps.dll
[2010.11.07 19:28:44 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatt.dll
[2010.11.07 19:28:44 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasqlr.dll
[2010.11.07 19:28:44 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaorar.dll
[2010.11.07 19:28:44 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaurl.dll
[2010.11.07 19:28:44 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasc.dll
[2010.11.07 19:28:44 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaer.dll
[2010.11.07 19:28:44 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaenum.dll
[2010.11.07 19:28:44 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdadc.dll
[2010.11.07 19:28:43 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado15.dll
[2010.11.07 19:28:43 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadomd.dll
[2010.11.07 19:28:43 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdarem.dll
[2010.11.07 19:28:43 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado27.tlb
[2010.11.07 19:28:43 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado26.tlb
[2010.11.07 19:28:43 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado25.tlb
[2010.11.07 19:28:43 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado21.tlb
[2010.11.07 19:28:43 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado20.tlb
[2010.11.07 19:28:43 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msador15.dll
[2010.11.07 19:28:43 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msader15.dll
[2010.11.07 19:28:43 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaremr.dll
[2010.11.07 19:28:42 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
[2010.11.07 19:28:42 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaprst.dll
[2010.11.07 19:28:42 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadds.dll
[2010.11.07 19:28:42 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadco.dll
[2010.11.07 19:28:42 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcf.dll
[2010.11.07 19:28:42 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcs.dll
[2010.11.07 19:28:42 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdfmap.dll
[2010.11.07 19:28:42 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msaddsr.dll
[2010.11.07 19:28:42 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcer.dll
[2010.11.07 19:28:42 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaprsr.dll
[2010.11.07 19:28:42 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcor.dll
[2010.11.07 19:28:42 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcfr.dll
[2010.11.07 19:28:41 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hmmapi.dll
[2010.11.07 19:28:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\System
[2010.11.07 19:28:40 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe
[2010.11.07 19:28:40 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedw.exe
[2010.11.07 19:28:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Pictures
[2010.11.07 19:28:39 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
[2010.11.07 19:28:09 | 000,000,000 | ---D | C] -- C:\Program Files\ComPlus Applications
[2010.11.07 19:28:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010.11.07 19:27:55 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
[2010.11.07 19:27:41 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Connect 2
[2010.11.07 19:27:40 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player
[2010.11.07 19:27:38 | 001,817,687 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgres.dll
[2010.11.07 19:27:38 | 000,082,501 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckg.dll
[2010.11.07 19:27:38 | 000,042,577 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgzm.exe
[2010.11.07 19:27:38 | 000,000,000 | ---D | C] -- C:\Program Files\Messenger
[2010.11.07 19:27:37 | 002,178,131 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlres.dll
[2010.11.07 19:27:37 | 000,780,885 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrres.dll
[2010.11.07 19:27:37 | 000,753,236 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvseres.dll
[2010.11.07 19:27:37 | 000,066,113 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvl.dll
[2010.11.07 19:27:37 | 000,048,706 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvse.dll
[2010.11.07 19:27:37 | 000,042,575 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrzm.exe
[2010.11.07 19:27:37 | 000,042,574 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvsezm.exe
[2010.11.07 19:27:37 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlzm.exe
[2010.11.07 19:27:37 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2010.11.07 19:27:37 | 000,040,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkr.dll
[2010.11.07 19:27:36 | 001,175,635 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzres.dll
[2010.11.07 19:27:36 | 001,039,955 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnresm.dll
[2010.11.07 19:27:36 | 000,057,409 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtz.dll
[2010.11.07 19:27:36 | 000,041,029 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zcorem.dll
[2010.11.07 19:27:36 | 000,032,339 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniansi.dll
[2010.11.07 19:27:36 | 000,013,894 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zonelibm.dll
[2010.11.07 19:27:36 | 000,004,677 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zeeverm.dll
[2010.11.07 19:27:35 | 000,217,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnclim.dll
[2010.11.07 19:27:35 | 000,113,222 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zoneclim.dll
[2010.11.07 19:27:35 | 000,036,937 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zclientm.exe
[2010.11.07 19:27:35 | 000,029,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\znetm.dll
[2010.11.07 19:27:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2010.11.07 19:27:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe
[2010.11.07 19:27:35 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Gaming Zone
[2010.11.07 19:27:24 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avtapi.dll
[2010.11.07 19:27:24 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
[2010.11.07 19:27:24 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2010.11.07 19:27:24 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe
[2010.11.07 19:27:24 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avwav.dll
[2010.11.07 19:27:24 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
[2010.11.07 19:27:24 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
[2010.11.07 19:27:24 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avmeter.dll
[2010.11.07 19:27:24 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
[2010.11.07 19:27:24 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2010.11.07 19:27:23 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
[2010.11.07 19:27:23 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winchat.exe
[2010.11.07 19:27:17 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2010.11.07 19:27:17 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\getuname.dll
[2010.11.07 19:27:16 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe
[2010.11.07 19:27:16 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2010.11.07 19:27:16 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\charmap.exe
[2010.11.07 19:27:16 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2010.11.07 19:27:16 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
[2010.11.07 19:27:16 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sol.exe
[2010.11.07 19:27:15 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
[2010.11.07 19:27:15 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshearts.exe
[2010.11.07 19:27:15 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
[2010.11.07 19:27:15 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmine.exe
[2010.11.07 19:27:15 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
[2010.11.07 19:27:15 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\freecell.exe
[2010.11.07 19:27:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2010.11.07 19:27:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tskill.exe
[2010.11.07 19:27:15 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2010.11.07 19:27:15 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\reset.exe
[2010.11.07 19:27:14 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2010.11.07 19:27:14 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\regini.exe
[2010.11.07 19:27:14 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2010.11.07 19:27:14 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qwinsta.exe
[2010.11.07 19:27:14 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2010.11.07 19:27:14 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msg.exe
[2010.11.07 19:27:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2010.11.07 19:27:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2010.11.07 19:27:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2010.11.07 19:27:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qappsrv.exe
[2010.11.07 19:27:14 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2010.11.07 19:27:14 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwinsta.exe
[2010.11.07 19:27:14 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2010.11.07 19:27:14 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logoff.exe
[2010.11.07 19:27:14 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2010.11.07 19:27:14 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2010.11.07 19:27:14 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2010.11.07 19:27:14 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscon.exe
[2010.11.07 19:27:14 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2010.11.07 19:27:14 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shadow.exe
[2010.11.07 19:27:14 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2010.11.07 19:27:14 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2010.11.07 19:27:13 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2010.11.07 19:27:13 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdmodem.dll
[2010.11.07 19:27:13 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
[2010.11.07 19:27:12 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2010.11.07 19:27:09 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\updprov.dll
[2010.11.07 19:27:09 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2010.11.07 19:27:09 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmimsg.dll
[2010.11.07 19:27:09 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2010.11.07 19:27:09 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmitimep.dll
[2010.11.07 19:27:09 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.tlb
[2010.11.07 19:27:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2010.11.07 19:27:09 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmt.exe
[2010.11.07 19:27:09 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.dll
[2010.11.07 19:27:08 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiprov.dll
[2010.11.07 19:27:08 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsprov.dll
[2010.11.07 19:27:08 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmplprov.dll
[2010.11.07 19:27:08 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trnsprov.dll
[2010.11.07 19:27:08 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fwdprov.dll
[2010.11.07 19:27:08 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpcons.dll
[2010.11.07 19:27:08 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unsecapp.exe
[2010.11.07 19:26:54 | 000,281,088 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe
[2010.11.07 19:26:54 | 000,000,000 | ---D | C] -- C:\Program Files\MSN
[2010.11.07 19:26:53 | 000,347,136 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
[2010.11.07 19:26:53 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\accwiz.exe
[2010.11.07 19:26:53 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
[2010.11.07 19:26:53 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
[2010.11.07 19:26:53 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndrec32.exe
[2010.11.07 19:26:53 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
[2010.11.07 19:26:53 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe
[2010.11.07 19:26:53 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\access.cpl
[2010.11.07 19:26:53 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
[2010.11.07 19:26:52 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dialer.exe
[2010.11.07 19:26:52 | 000,538,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
[2010.11.07 19:26:52 | 000,538,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spider.exe
[2010.11.07 19:26:52 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2010.11.07 19:26:52 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mspaint.exe
[2010.11.07 19:26:52 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clipbrd.exe
[2010.11.07 19:26:52 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
[2010.11.07 19:26:52 | 000,000,000 | ---D | C] -- C:\Program Files\Windows NT
[2010.11.07 19:26:51 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2010.11.07 19:26:51 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2010.11.07 19:26:51 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscfgwmi.dll
[2010.11.07 19:26:51 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdtcp.sys
[2010.11.07 19:26:51 | 000,012,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdpipe.sys
[2010.11.07 19:26:50 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll
[2010.11.07 19:26:50 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rhttpaa.dll
[2010.11.07 19:26:50 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aaclient.dll
[2010.11.07 19:26:50 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll
[2010.11.07 19:26:50 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2010.11.07 19:26:50 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsgqec.dll
[2010.11.07 19:26:49 | 002,061,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lhmstscx.dll
[2010.11.07 19:26:49 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lhmstsc.exe
[2010.11.07 19:26:49 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
[2010.11.07 19:26:49 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdchost.dll
[2010.11.07 19:26:49 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sessmgr.exe
[2010.11.07 19:26:49 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2010.11.07 19:26:49 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdshost.exe
[2010.11.07 19:26:49 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\remotepg.dll
[2010.11.07 19:26:49 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2010.11.07 19:26:49 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdsaddin.exe
[2010.11.07 19:26:48 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\termsrv.dll
[2010.11.07 19:26:48 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2010.11.07 19:26:48 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtcuiu.dll
[2010.11.07 19:26:48 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
[2010.11.07 19:26:48 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwsx.dll
[2010.11.07 19:26:48 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2010.11.07 19:26:48 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpclip.exe
[2010.11.07 19:26:48 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgbkend.dll
[2010.11.07 19:26:48 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2010.11.07 19:26:48 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
[2010.11.07 19:26:48 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpsnd.dll
[2010.11.07 19:26:48 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2010.11.07 19:26:48 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qprocess.exe
[2010.11.07 19:26:48 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
[2010.11.07 19:26:48 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icaapi.dll
[2010.11.07 19:26:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010.11.07 19:26:47 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2010.11.07 19:26:47 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtctm.dll
[2010.11.07 19:26:47 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2010.11.07 19:26:47 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtcprx.dll
[2010.11.07 19:26:47 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2010.11.07 19:26:47 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxoci.dll
[2010.11.07 19:26:47 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2010.11.07 19:26:47 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtclog.dll
[2010.11.07 19:26:47 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2010.11.07 19:26:47 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xolehlp.dll
[2010.11.07 19:26:47 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtc.exe
[2010.11.07 19:26:46 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comadmin.dll
[2010.11.07 19:26:46 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2010.11.07 19:26:46 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxlegih.dll
[2010.11.07 19:26:46 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2010.11.07 19:26:46 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxdm.dll
[2010.11.07 19:26:46 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrepl.exe
[2010.11.07 19:26:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dcomcnfg.exe
[2010.11.07 19:26:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2010.11.07 19:26:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrereg.exe
[2010.11.07 19:26:46 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2010.11.07 19:26:46 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxex.dll
[2010.11.07 19:26:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010.11.07 19:26:45 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrvut.dll
[2010.11.07 19:26:45 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2010.11.07 19:26:45 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrv.dll
[2010.11.07 19:26:45 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2010.11.07 19:26:45 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clbcatex.dll
[2010.11.07 19:26:45 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
[2010.11.07 19:26:45 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrepl.dll
[2010.11.07 19:26:45 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2010.11.07 19:26:45 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrvps.dll
[2010.11.07 19:26:45 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2010.11.07 19:26:45 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\colbact.dll
[2010.11.07 19:26:45 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2010.11.07 19:26:45 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2010.11.07 19:26:45 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\stclient.dll
[2010.11.07 19:26:45 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comaddin.dll
[2010.11.07 19:26:45 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
[2010.11.07 19:26:44 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comsvcs.dll
[2010.11.07 19:26:44 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2010.11.07 19:26:44 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comuid.dll
[2010.11.07 19:26:44 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2010.11.07 19:26:44 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clbcatq.dll
[2010.11.07 19:26:44 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comsnap.dll
[2010.11.07 19:26:44 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2010.11.07 19:26:42 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmisvc.dll
[2010.11.07 19:26:42 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprov.dll
[2010.11.07 19:26:42 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiutils.dll
[2010.11.07 19:26:42 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipjobj.dll
[2010.11.07 19:26:42 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipiprt.dll
[2010.11.07 19:26:42 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipsess.dll
[2010.11.07 19:26:41 | 000,358,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmic.exe
[2010.11.07 19:26:41 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemupgd.dll
[2010.11.07 19:26:41 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiadap.exe
[2010.11.07 19:26:41 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipcima.dll
[2010.11.07 19:26:41 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmidcprv.dll
[2010.11.07 19:26:41 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipdskq.dll
[2010.11.07 19:26:41 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiapsrv.exe
[2010.11.07 19:26:41 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiaprpl.dll
[2010.11.07 19:26:41 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmicookr.dll
[2010.11.07 19:26:41 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiapres.dll
[2010.11.07 19:26:40 | 000,531,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcore.dll
[2010.11.07 19:26:40 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemess.dll
[2010.11.07 19:26:40 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcomn.dll
[2010.11.07 19:26:40 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcntl.dll
[2010.11.07 19:26:40 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.dll
[2010.11.07 19:26:40 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\viewprov.dll
[2010.11.07 19:26:40 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemtest.exe
[2010.11.07 19:26:40 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcons.dll
[2010.11.07 19:26:40 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemsvc.dll
[2010.11.07 19:26:40 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemprox.dll
[2010.11.07 19:26:39 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\provthrd.dll
[2010.11.07 19:26:39 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntevt.dll
[2010.11.07 19:26:39 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\repdrvfs.dll
[2010.11.07 19:26:39 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\policman.dll
[2010.11.07 19:26:39 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\stdprov.dll
[2010.11.07 19:26:39 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scrcons.exe
[2010.11.07 19:26:38 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\framedyn.dll
[2010.11.07 19:26:38 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mofd.dll
[2010.11.07 19:26:38 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ncprov.dll
[2010.11.07 19:26:38 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\krnlprov.dll
[2010.11.07 19:26:38 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mofcomp.exe
[2010.11.07 19:26:37 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\esscli.dll
[2010.11.07 19:26:36 | 001,358,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cimwin32.dll
[2010.11.07 19:26:36 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
[2010.11.07 19:26:36 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\servdeps.dll
[2010.11.07 19:26:36 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
[2010.11.07 19:26:36 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mmfutil.dll
[2010.11.07 19:26:35 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmprops.dll
[2010.11.07 19:26:35 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
[2010.11.07 19:26:35 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
[2010.11.07 19:26:35 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licwmi.dll
[2010.11.07 19:26:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documents\My Videos
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.11.12 21:26:10 | 001,310,720 | -H-- | M] () -- C:\Documents and Settings\ReapeR\NTUSER.DAT
[2010.11.12 21:26:08 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.11.12 21:25:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.11.12 21:25:49 | 000,044,964 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap
[2010.11.12 21:24:45 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\ReapeR\ntuser.ini
[2010.11.12 21:24:35 | 006,904,520 | -H-- | M] () -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\IconCache.db
[2010.11.12 20:14:46 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_xcdhv
[2010.11.12 17:36:25 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_uiink
[2010.11.12 17:25:04 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_hfmdc
[2010.11.12 17:20:08 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_ongmd
[2010.11.12 16:33:03 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_vwkst
[2010.11.12 15:48:53 | 000,000,530 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\StarCraft II.lnk
[2010.11.12 15:44:43 | 000,000,706 | ---- | M] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\DotAzilla.lnk
[2010.11.12 15:27:08 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_zxjzu
[2010.11.12 15:04:46 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_wzqeo
[2010.11.12 13:35:25 | 000,008,192 | ---- | M] () -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.12 13:28:31 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.12 00:37:30 | 000,081,586 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(6).jpg
[2010.11.12 00:31:33 | 000,061,695 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(5).jpg
[2010.11.12 00:24:28 | 000,045,232 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(4).jpg
[2010.11.12 00:18:23 | 000,077,009 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(3).jpg
[2010.11.12 00:04:53 | 000,064,576 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(2).jpg
[2010.11.11 22:20:57 | 000,000,694 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\DotAzilla.lnk
[2010.11.11 22:20:44 | 001,047,893 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\DotAzilla_Setup.exe
[2010.11.11 15:43:47 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_xgnqd
[2010.11.11 15:19:02 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_sbgwg
[2010.11.11 15:00:10 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_yoaki
[2010.11.11 14:48:47 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_qcadj
[2010.11.10 18:59:04 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TeamSpeak 3 Client.lnk
[2010.11.10 18:51:48 | 013,326,816 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Documents and Settings\ReapeR\Desktop\TeamSpeak3-Client-win32-3.0.0-beta36.exe
[2010.11.10 18:19:39 | 000,034,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\lhacm.acm
[2010.11.10 18:19:35 | 000,000,665 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\Teamspeak 2 RC2.lnk
[2010.11.10 16:25:12 | 006,153,648 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\ReapeR\Desktop\mbam-setup.exe
[2010.11.10 16:23:17 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\ReapeR\Desktop\OTL.exe
[2010.11.10 15:11:10 | 000,000,082 | ---- | M] () -- C:\WINDOWS\System32\asr_qlxsdv
[2010.11.10 15:06:04 | 000,121,936 | ---- | M] () -- C:\WINDOWS\System32\asr_driabj.exe
[2010.11.10 15:01:08 | 000,000,082 | ---- | M] () -- C:\WINDOWS\System32\asr_kpfecr
[2010.11.10 14:53:16 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\XMedia Recode.lnk
[2010.11.09 22:46:38 | 000,001,235 | ---- | M] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Meebo Notifier.lnk
[2010.11.09 22:44:26 | 001,276,392 | ---- | M] (Meebo, Inc.) -- C:\Documents and Settings\ReapeR\Desktop\MeeboNotifierSetup-Beta.exe
[2010.11.09 22:34:38 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Miranda IM.lnk
[2010.11.09 22:34:26 | 003,102,770 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\miranda-im-v0.9.10-unicode.exe
[2010.11.09 21:37:11 | 000,000,490 | ---- | M] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to Frozen Throne.lnk
[2010.11.09 21:28:28 | 000,091,088 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.11.09 06:48:45 | 000,000,844 | ---- | M] () -- C:\Documents and Settings\ReapeR\.recently-used.xbel
[2010.11.09 06:47:19 | 000,000,810 | ---- | M] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\GIMP 2.lnk
[2010.11.09 06:44:43 | 000,000,818 | ---- | M] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Paint.NET.lnk
[2010.11.09 06:44:43 | 000,000,812 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Paint.NET.lnk
[2010.11.09 06:44:06 | 000,012,328 | ---- | M] () -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010.11.09 06:43:53 | 000,428,426 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.11.09 06:43:53 | 000,390,230 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.11.09 06:43:53 | 000,049,334 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.11.09 06:41:32 | 020,240,744 | ---- | M] (The GIMP Team ) -- C:\Documents and Settings\ReapeR\Desktop\gimp-2.6.11-i686-setup.exe
[2010.11.09 06:40:17 | 003,657,529 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\Paint.NET.3.5.5.Install.zip
[2010.11.09 01:18:04 | 000,000,672 | ---- | M] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2010.11.09 01:16:07 | 011,802,480 | ---- | M] (Nullsoft, Inc.) -- C:\Documents and Settings\ReapeR\Desktop\winamp5581_full_emusic-7plus_de-de.exe
[2010.11.09 01:10:38 | 000,126,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010.11.09 01:10:38 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010.11.08 23:15:18 | 000,000,719 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010.11.08 23:14:25 | 000,026,681 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\111028.jpg
[2010.11.08 22:02:56 | 019,657,194 | ---- | M] () -- C:\Documents and Settings\ReapeR\Desktop\vlc-1.1.4-win32.exe
[2010.11.08 21:07:55 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_zeqoi
[2010.11.08 16:39:08 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_qxydb
[2010.11.08 16:36:34 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_znprt
[2010.11.08 15:27:15 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.11.07 20:20:46 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2010.11.07 20:20:09 | 000,000,231 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.11.07 20:15:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010.11.07 20:15:20 | 000,000,597 | ---- | M] () -- C:\Documents and Settings\ReapeR\Start Menu\Programs\Startup\Alice-Einwahl.lnk
[2010.11.07 19:55:43 | 000,000,000 | ---- | M] () -- C:\WINDOWS\ativpsrm.bin
[2010.11.07 19:35:39 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010.11.07 19:33:43 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010.11.07 19:31:24 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.11.07 19:31:24 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010.11.07 19:31:24 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010.11.07 19:31:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2010.11.07 19:31:24 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010.11.07 19:31:24 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010.11.07 19:31:23 | 000,000,507 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.11.07 19:31:19 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010.11.07 19:31:19 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010.11.07 19:31:19 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010.11.07 19:31:11 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010.11.07 19:30:27 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010.11.07 19:30:27 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010.11.07 19:28:20 | 000,021,640 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010.11.07 19:28:07 | 000,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2010.11.07 19:28:07 | 000,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2010.11.07 19:23:51 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.11.12 20:14:46 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_xcdhv
[2010.11.12 17:36:25 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_uiink
[2010.11.12 17:25:04 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_hfmdc
[2010.11.12 17:20:08 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_ongmd
[2010.11.12 16:33:03 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_vwkst
[2010.11.12 15:44:43 | 000,000,706 | ---- | C] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\DotAzilla.lnk
[2010.11.12 15:39:31 | 000,000,530 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\StarCraft II.lnk
[2010.11.12 15:27:08 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_zxjzu
[2010.11.12 15:04:46 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_wzqeo
[2010.11.12 13:28:31 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.11.12 00:37:30 | 000,081,586 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(6).jpg
[2010.11.12 00:31:33 | 000,061,695 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(5).jpg
[2010.11.12 00:24:27 | 000,045,232 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(4).jpg
[2010.11.12 00:18:23 | 000,077,009 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(3).jpg
[2010.11.12 00:04:53 | 000,064,576 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\sp-studio(2).jpg
[2010.11.11 22:20:57 | 000,000,694 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\DotAzilla.lnk
[2010.11.11 22:20:43 | 001,047,893 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\DotAzilla_Setup.exe
[2010.11.11 15:43:47 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_xgnqd
[2010.11.11 15:19:02 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_sbgwg
[2010.11.11 15:00:10 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_yoaki
[2010.11.11 14:48:47 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_qcadj
[2010.11.10 18:59:04 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TeamSpeak 3 Client.lnk
[2010.11.10 18:19:35 | 000,000,665 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\Teamspeak 2 RC2.lnk
[2010.11.10 15:11:10 | 000,000,082 | ---- | C] () -- C:\WINDOWS\System32\asr_qlxsdv
[2010.11.10 15:01:08 | 000,121,936 | ---- | C] () -- C:\WINDOWS\System32\asr_driabj.exe
[2010.11.10 15:01:08 | 000,000,082 | ---- | C] () -- C:\WINDOWS\System32\asr_kpfecr
[2010.11.10 14:53:16 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\XMedia Recode.lnk
[2010.11.10 00:55:56 | 000,008,192 | ---- | C] () -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.11.09 22:46:38 | 000,001,235 | ---- | C] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Meebo Notifier.lnk
[2010.11.09 22:34:38 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Miranda IM.lnk
[2010.11.09 22:34:23 | 003,102,770 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\miranda-im-v0.9.10-unicode.exe
[2010.11.09 21:37:11 | 000,000,490 | ---- | C] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to Frozen Throne.lnk
[2010.11.09 06:48:45 | 000,000,844 | ---- | C] () -- C:\Documents and Settings\ReapeR\.recently-used.xbel
[2010.11.09 06:47:19 | 000,000,810 | ---- | C] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\GIMP 2.lnk
[2010.11.09 06:44:43 | 000,000,818 | ---- | C] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Paint.NET.lnk
[2010.11.09 06:44:43 | 000,000,812 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Paint.NET.lnk
[2010.11.09 06:43:50 | 000,041,136 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2010.11.09 06:40:14 | 003,657,529 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\Paint.NET.3.5.5.Install.zip
[2010.11.09 01:18:04 | 000,000,672 | ---- | C] () -- C:\Documents and Settings\ReapeR\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2010.11.08 23:15:18 | 000,000,719 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2010.11.08 23:14:25 | 000,026,681 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\111028.jpg
[2010.11.08 21:56:45 | 019,657,194 | ---- | C] () -- C:\Documents and Settings\ReapeR\Desktop\vlc-1.1.4-win32.exe
[2010.11.08 21:07:55 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_zeqoi
[2010.11.08 16:39:08 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_qxydb
[2010.11.08 16:36:34 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_znprt
[2010.11.07 20:20:46 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2010.11.07 20:15:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010.11.07 20:15:20 | 000,000,597 | ---- | C] () -- C:\Documents and Settings\ReapeR\Start Menu\Programs\Startup\Alice-Einwahl.lnk
[2010.11.07 20:15:13 | 000,428,426 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.11.07 20:15:12 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010.11.07 20:15:09 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2010.11.07 20:15:09 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010.11.07 20:15:09 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010.11.07 20:15:09 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2010.11.07 20:15:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2010.11.07 20:15:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2010.11.07 20:14:57 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2010.11.07 20:14:57 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2010.11.07 20:14:57 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2010.11.07 20:14:57 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2010.11.07 20:14:57 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2010.11.07 20:14:57 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2010.11.07 20:14:55 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2010.11.07 20:14:55 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2010.11.07 20:14:55 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2010.11.07 20:14:55 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2010.11.07 20:14:55 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2010.11.07 20:14:55 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2010.11.07 20:14:53 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2010.11.07 20:14:53 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2010.11.07 20:14:53 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2010.11.07 20:14:53 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2010.11.07 20:14:53 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2010.11.07 20:14:53 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2010.11.07 20:14:53 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2010.11.07 20:14:53 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2010.11.07 20:14:53 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2010.11.07 20:14:53 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2010.11.07 20:14:51 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2010.11.07 20:14:51 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2010.11.07 20:14:51 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2010.11.07 20:14:51 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2010.11.07 20:14:51 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2010.11.07 20:14:51 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2010.11.07 20:14:49 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls
[2010.11.07 20:14:49 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls
[2010.11.07 20:14:49 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2010.11.07 20:14:49 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2010.11.07 20:14:49 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2010.11.07 20:14:49 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2010.11.07 20:14:49 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2010.11.07 20:14:49 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2010.11.07 20:14:46 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2010.11.07 20:14:46 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2010.11.07 20:14:41 | 000,001,688 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010.11.07 20:14:32 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini
[2010.11.07 20:14:30 | 002,144,487 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT
[2010.11.07 20:14:30 | 001,296,669 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT
[2010.11.07 20:14:30 | 001,088,840 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NTPRINT.CAT
[2010.11.07 20:14:30 | 000,797,189 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010.11.07 20:14:30 | 000,522,220 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT
[2010.11.07 20:14:30 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010.11.07 20:14:30 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat
[2010.11.07 20:14:30 | 000,112,918 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat
[2010.11.07 20:14:30 | 000,037,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2010.11.07 20:14:30 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat
[2010.11.07 20:14:30 | 000,034,063 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT
[2010.11.07 20:14:30 | 000,026,991 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat
[2010.11.07 20:14:30 | 000,016,535 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT
[2010.11.07 20:14:30 | 000,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat
[2010.11.07 20:14:30 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010.11.07 20:14:30 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT
[2010.11.07 20:14:30 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT
[2010.11.07 20:14:30 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010.11.07 20:14:30 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010.11.07 20:14:30 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010.11.07 20:13:48 | 000,091,088 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.11.07 20:12:47 | 000,000,211 | -HS- | C] () -- C:\boot.ini
[2010.11.07 20:12:43 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010.11.07 19:55:43 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2010.11.07 19:53:07 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2010.11.07 19:53:04 | 000,014,144 | R--- | C] () -- C:\WINDOWS\atiogl.xml
[2010.11.07 19:53:03 | 000,007,167 | R--- | C] () -- C:\WINDOWS\System32\atifglpf.xml
[2010.11.07 19:53:00 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2010.11.07 19:52:59 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2010.11.07 19:52:59 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010.11.07 19:52:59 | 000,174,818 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2010.11.07 19:44:56 | 000,001,904 | ---- | C] () -- C:\WINDOWS\System32\SetupBD.din
[2010.11.07 19:44:52 | 000,002,889 | R--- | C] () -- C:\WINDOWS\System32\e1e5132.din
[2010.11.07 19:42:53 | 006,904,520 | -H-- | C] () -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\IconCache.db
[2010.11.07 19:37:08 | 000,012,328 | ---- | C] () -- C:\Documents and Settings\ReapeR\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010.11.07 19:36:41 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\ReapeR\ntuser.ini
[2010.11.07 19:36:40 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\ReapeR\ntuser.dat.LOG
[2010.11.07 19:36:40 | 000,000,062 | -HS- | C] () -- C:\Documents and Settings\ReapeR\Application Data\desktop.ini
[2010.11.07 19:36:39 | 001,310,720 | -H-- | C] () -- C:\Documents and Settings\ReapeR\NTUSER.DAT
[2010.11.07 19:35:50 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\tasks\SA.DAT
[2010.11.07 19:35:39 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010.11.07 19:33:43 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010.11.07 19:33:36 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2010.11.07 19:33:17 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2010.11.07 19:33:17 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2010.11.07 19:33:16 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010.11.07 19:33:06 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2010.11.07 19:33:05 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010.11.07 19:33:00 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2010.11.07 19:32:59 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010.11.07 19:32:57 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2010.11.07 19:32:47 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010.11.07 19:32:42 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2010.11.07 19:32:39 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll
[2010.11.07 19:32:32 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2010.11.07 19:32:29 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010.11.07 19:32:29 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010.11.07 19:32:29 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2010.11.07 19:32:29 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2010.11.07 19:32:28 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2010.11.07 19:32:28 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2010.11.07 19:32:28 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2010.11.07 19:32:28 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2010.11.07 19:32:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2010.11.07 19:32:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2010.11.07 19:32:26 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2010.11.07 19:32:26 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2010.11.07 19:32:26 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2010.11.07 19:32:26 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2010.11.07 19:32:26 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2010.11.07 19:32:26 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2010.11.07 19:32:26 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2010.11.07 19:32:26 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2010.11.07 19:32:26 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2010.11.07 19:32:26 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2010.11.07 19:32:25 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010.11.07 19:32:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010.11.07 19:32:24 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2010.11.07 19:32:24 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2010.11.07 19:32:24 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2010.11.07 19:32:24 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2010.11.07 19:32:24 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2010.11.07 19:32:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010.11.07 19:31:24 | 000,002,577 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.11.07 19:31:24 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010.11.07 19:31:24 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010.11.07 19:31:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2010.11.07 19:31:24 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010.11.07 19:31:24 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010.11.07 19:31:19 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010.11.07 19:31:19 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010.11.07 19:31:19 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010.11.07 19:30:27 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010.11.07 19:30:27 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010.11.07 19:30:24 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010.11.07 19:30:08 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2010.11.07 19:29:48 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010.11.07 19:29:48 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010.11.07 19:29:42 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2010.11.07 19:28:59 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll
[2010.11.07 19:28:20 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010.11.07 19:28:07 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2010.11.07 19:28:07 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2010.11.07 19:27:18 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Soap Bubbles.bmp
[2010.11.07 19:27:18 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prairie Wind.bmp
[2010.11.07 19:27:18 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe Stucco.bmp
[2010.11.07 19:27:18 | 000,026,680 | ---- | C] () -- C:\WINDOWS\River Sumida.bmp
[2010.11.07 19:27:18 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Greenstone.bmp
[2010.11.07 19:27:18 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2010.11.07 19:27:18 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Gone Fishing.bmp
[2010.11.07 19:27:18 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Coffee Bean.bmp
[2010.11.07 19:27:18 | 000,016,730 | ---- | C] () -- C:\WINDOWS\FeatherTexture.bmp
[2010.11.07 19:27:18 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2010.11.07 19:27:17 | 000,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2010.11.07 19:27:17 | 000,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2010.11.07 19:27:17 | 000,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2010.11.07 19:27:17 | 000,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2010.11.07 19:27:17 | 000,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2010.11.07 19:27:17 | 000,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2010.11.07 19:27:17 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blue Lace 16.bmp
[2010.11.07 19:27:16 | 000,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2010.11.07 19:27:16 | 000,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2010.11.07 19:27:15 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010.11.07 19:27:14 | 000,013,223 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2010.11.07 19:27:14 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010.11.07 19:27:13 | 000,001,931 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
[2010.11.07 19:27:13 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010.11.07 19:27:07 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2008.07.12 23:39:40 | 001,288,192 | ---- | C] () -- C:\WINDOWS\System32\quartz.dll
[2008.04.14 12:30:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini
[2008.04.14 12:30:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll
[2008.04.14 12:30:00 | 000,562,176 | ---- | C] () -- C:\WINDOWS\System32\qedit.dll
[2008.04.14 12:30:00 | 000,498,742 | ---- | C] () -- C:\WINDOWS\System32\dxmasf.dll
[2008.04.14 12:30:00 | 000,386,048 | ---- | C] () -- C:\WINDOWS\System32\qdvd.dll
[2008.04.14 12:30:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll
[2008.04.14 12:30:00 | 000,279,040 | ---- | C] () -- C:\WINDOWS\System32\qdv.dll
[2008.04.14 12:30:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll
[2008.04.14 12:30:00 | 000,252,928 | ---- | C] () -- C:\WINDOWS\System32\compatUI.dll
[2008.04.14 12:30:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll
[2008.04.14 12:30:00 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\qcap.dll
[2008.04.14 12:30:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll
[2008.04.14 12:30:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll
[2008.04.14 12:30:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll
[2008.04.14 12:30:00 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\devenum.dll
[2008.04.14 12:30:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini
[2008.04.14 12:30:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys
[2008.04.14 12:30:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys
[2008.04.14 12:30:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys
[2008.04.14 12:30:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys
[2008.04.14 12:30:00 | 000,035,328 | ---- | C] () -- C:\WINDOWS\System32\mciqtz32.dll
[2008.04.14 12:30:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys
[2008.04.14 12:30:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys
[2008.04.14 12:30:00 | 000,033,840 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys
[2008.04.14 12:30:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys
[2008.04.14 12:30:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys
[2008.04.14 12:30:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys
[2008.04.14 12:30:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys
[2008.04.14 12:30:00 | 000,027,866 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys
[2008.04.14 12:30:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys
[2008.04.14 12:30:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll
[2008.04.14 12:30:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll
[2008.04.14 12:30:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll
[2008.04.14 12:30:00 | 000,012,082 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini
[2008.04.14 12:30:00 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll
[2008.04.14 12:30:00 | 000,010,110 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini
[2008.04.14 12:30:00 | 000,009,029 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys
[2008.04.14 12:30:00 | 000,006,877 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini
[2008.04.14 12:30:00 | 000,004,768 | ---- | C] () -- C:\WINDOWS\System32\himem.sys
[2008.04.14 12:30:00 | 000,004,126 | ---- | C] () -- C:\WINDOWS\System32\msdxmlc.dll
[2008.04.14 12:30:00 | 000,003,458 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini
[2008.04.14 12:30:00 | 000,002,891 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini
[2008.04.14 12:30:00 | 000,002,732 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini
[2008.04.14 12:30:00 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv
[2008.04.14 12:30:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini
[2008.04.14 12:30:00 | 000,001,152 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini
[2008.04.14 12:30:00 | 000,000,507 | ---- | C] () -- C:\WINDOWS\win.ini
[2008.04.14 12:30:00 | 000,000,343 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini
[2008.04.14 12:30:00 | 000,000,231 | ---- | C] () -- C:\WINDOWS\system.ini
[2001.08.18 07:06:28 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll

========== LOP Check ==========

[2010.11.07 20:02:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ReapeR\Application Data\Hansenet
[2010.11.07 20:25:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ReapeR\Application Data\InterTrust
[2010.11.09 22:46:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ReapeR\Application Data\Meebo
[2010.11.09 22:35:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ReapeR\Application Data\Miranda
[2010.11.11 22:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\ReapeR\Application Data\TS3Client

========== Purity Check ==========



< End of report >

OTL EXTRAS Logfile:
--- --- ---

(unnötiger Post... sry)

Files Infected: 7
Files Infected:
C:\Documents and Settings\ReapeR\Application Data\LmHosts.exe (Trojan.Dropper) -> No action taken.
C:\System Volume Information\_restore{4D8D9809-85BF-45F8-B59A-3B14DF2C7B5E}\RP14\A0001654.exe (Trojan.Dropper) -> No action taken.
C:\WINDOWS\system32\asr_48836.exe (Virus.Virut) -> No action taken.


Was soll denn das werden? Wenn das Tool sieben infizierte Dateien zählt, warum sind nur drei aufgelistet?
Komm nicht auf die Idee, die Logs zu manipulieren! :mad:

ich hab nix manipuliert Oo...

vll nicht alles kopiert oO...

ich weiss es nicht -_-...

ich mach n neuen...

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5113

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

14.11.2010 18:18:17
mbam-log-2010-11-14 (18-18-17).txt

Scan type: Full scan (C:\|D:\|E:\|G:\|H:\|I:\|)
Objects scanned: 531942
Time elapsed: 1 hour(s), 35 minute(s), 47 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\System Volume Information\_restore{4D8D9809-85BF-45F8-B59A-3B14DF2C7B5E}\RP14\A0001655.exe (Virus.Virut) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{4D8D9809-85BF-45F8-B59A-3B14DF2C7B5E}\RP14\A0001656.exe (Virus.Virut) -> Quarantined and deleted successfully.


hier ist der neue... hab beim letzten vergessen zu scrollen ... sry

Nein poste bitte das alte Log vollständig!

das hab ich nicht mehr T_T

Findest Du das nicht ein bisschen auffällig...?!?

Sei einfach ehrlich und man wird Dir hier im Forum entgegen kommen. Hier will niemand etwas böses von Dir, man will Dir helfen. Wenn Du Dinge versteckst und verheimlichst dann kann hier niemand was machen.

kann sein das du das auffälllig findest... aber ich hab das wirklich nicht mehr... und ich hab auch nix manipuliert... T_T...