log:
Logfile of random’s system information tool 1.06 (written by random/random)
Run by Admin at 2009-08-05 14:07:20
WIN_XP Service Pack 3
System drive C: has 18 GB (36%) free of 50 GB
Total RAM: 2047 MB (84% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:07:20, on 05.08.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSexplorer.exe
C:WINDOWSsystem32ctfmon.exe
C:WINDOWSsystem32notepad.exe
G:Антивирусныу утелитыRSIT.exe
C:Program FilesTrend MicroHijackThisAdmin.exe
R0 — HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 — HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R0 — HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page =
R1 — HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 — HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Ссылки
R3 — URLSearchHook: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Yahoo! Toolbar Helper — {02478D38-C3F9-4EFB-9B51-7695ECA05670} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O2 — BHO: Adobe PDF Reader Link Helper — {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 — BHO: SSVHelper Class — {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} — C:Program FilesJavajre1.6.0_06binssv.dll
O3 — Toolbar: Yahoo! Toolbar — {EF99BD32-C1FB-11D2-892F-0090271D4F88} — C:Program FilesYahoo!CompanionInstallscpnyt.dll
O4 — HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 — HKUSS-1-5-21-1708537768-616249376-1801674531-500..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe (User ‘?’)
O4 — HKUSS-1-5-18..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘?’)
O4 — HKUS.DEFAULT..Run: [VistaIcon] C:Program FilesVistaDriveIconVistaDrv.exe (User ‘Default user’)
O4 — S-1-5-21-1708537768-616249376-1801674531-500 Startup: is-DMSU4.lnk = ? (User ‘?’)
O4 — Startup: is-DMSU4.lnk = ?
O4 — Global Startup: Adobe Reader Speed Launch.lnk = C:Program FilesAdobeReader 8.0Readerreader_sl.exe
O4 — Global Startup: Adobe Reader Synchronizer.lnk = C:Program FilesAdobeReader 8.0ReaderAdobeCollabSync.exe
O8 — Extra context menu item: &Перевести — C:Program FilesArsenal CompanySOCRAT InternetHTMLWSocrat.js
O8 — Extra context menu item: &Экспорт в Microsoft Excel — res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 — Extra button: (no name) — DctMapping — (no file)
O9 — Extra button: СОКРАТ Интернет 3.0 — {17FA5CD6-5737-45c2-B194-74C8A4A7F7E7} — C:Program FilesArsenal CompanySOCRAT InternetSocratInternet.dll
O9 — Extra button: Настройки СОКРАТ Интернет 3.0 — {71F65890-5ED6-11d4-9665-00E02962D81A} — C:Program FilesArsenal CompanySOCRAT InternetSocratInternetT.dll
O9 — Extra button: Справочные материалы — {92780B25-18CC-41C8-B9BE-3C9C571A8263} — C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 — Extra button: Перевести страницу — {DFDC8970-FD66-4385-B8C0-835A4AA1DA00} — C:Program FilesArsenal CompanySOCRAT InternetSocratInternet.dll
O16 — DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) — C:Program FilesYahoo!Commonyinsthelper.dll
O23 — Service: avast! iAVS4 Control Service (aswUpdSv) — ALWIL Software — C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
O23 — Service: avast! Antivirus — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashServ.exe
O23 — Service: avast! Mail Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
O23 — Service: avast! Web Scanner — ALWIL Software — C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
O23 — Service: Журнал событий (Eventlog) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
O23 — Service: Plug and Play (PlugPlay) — Корпорация Майкрософт — C:WINDOWSsystem32services.exe
—
End of file — 4401 bytes
======Registry dump======
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-10-26 440384]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper — C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll [2006-10-23 62080]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class — C:Program FilesJavajre1.6.0_06binssv.dll [2008-03-25 509328]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} — Yahoo! Toolbar — C:Program FilesYahoo!CompanionInstallscpnyt.dll [2006-10-26 440384]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
«ctfmon.exe»=C:WINDOWSsystem32ctfmon.exe [2009-08-05 33792]
C:Documents and SettingsAll UsersГлавное менюПрограммыАвтозагрузка
Adobe Reader Speed Launch.lnk — C:Program FilesAdobeReader 8.0Readerreader_sl.exe
Adobe Reader Synchronizer.lnk — C:Program FilesAdobeReader 8.0ReaderAdobeCollabSync.exe
C:Documents and SettingsAdminГлавное менюПрограммыАвтозагрузка
is-DMSU4.lnk — C:Documents and SettingsAdminРабочий столVirus Removal Toolis-DMSU4startup.exe
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad]
WPDShServiceObj — {AAA288BA-9A4C-45B0-95D7-94D524869DB5} — C:WINDOWSsystem32wpdshserviceobj.dll [2008-03-02 133632]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=67108863
«NoDriveTypeAutoRun»=323
«NoDrives»=0
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesexplorer]
«NoDriveAutoRun»=
«NoDriveTypeAutoRun»=
«NoDrives»=
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicystandardprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
[HKEY_LOCAL_MACHINEsystemcurrentcontrolsetservicessharedaccessparametersfirewallpolicydomainprofileauthorizedapplicationslist]
«%windir%system32sessmgr.exe»=»%windir%system32sessmgr.exe:*:enabled:@xpsp2res.dll,-22019»
======File associations======
.inf — open — e %1
.ini — open — notepad.exe %1
.js — open — e «%1» %*
.txt — open — notepad.exe %1
.vbs — open — e «%1» %*
======List of files/folders created in the last 1 months======
2009-08-05 14:06:28 —-D—- C:rsit
2009-08-05 13:37:15 —-SHD—- C:RECYCLER
2009-08-05 13:33:08 —-D—- C:WINDOWStemp
2009-08-05 13:33:07 —-A—- C:ComboFix.txt
2009-08-05 13:27:00 —-SD—- C:ComboFix
2009-08-05 13:13:58 —-A—- C:WINDOWSPEV.exe
2009-08-05 13:13:58 —-A—- C:WINDOWSNIRCMD.exe
2009-08-05 13:13:57 —-A—- C:WINDOWSzip.exe
2009-08-05 13:13:57 —-A—- C:WINDOWSSWXCACLS.exe
2009-08-05 13:13:57 —-A—- C:WINDOWSSWSC.exe
2009-08-05 13:13:57 —-A—- C:WINDOWSSWREG.exe
2009-08-05 13:13:57 —-A—- C:WINDOWSsed.exe
2009-08-05 13:13:57 —-A—- C:WINDOWSgrep.exe
2009-08-05 13:13:56 —-D—- C:WINDOWSERDNT
2009-08-05 13:13:54 —-D—- C:Qoobox
2009-08-05 12:34:53 —-D—- C:Program FilesMalwarebytes’ Anti-Malware
2009-08-05 12:34:53 —-D—- C:Documents and SettingsAll UsersApplication DataMalwarebytes
2009-08-05 11:21:28 —-D—- C:Program FilesTrend Micro
2009-08-05 05:43:15 —-A—- C:WINDOWSvbaddin.ini
2009-08-05 05:43:15 —-A—- C:WINDOWSvb.ini
2009-08-05 05:43:15 —-A—- C:WINDOWSTASKMAN.EXE
2009-08-05 05:43:15 —-A—- C:WINDOWSSOUNDMAN.EXE
2009-08-05 05:43:15 —-A—- C:WINDOWSSkyTel.exe
2009-08-05 05:43:14 —-RA—- C:WINDOWSSET8.tmp
2009-08-05 05:43:14 —-RA—- C:WINDOWSSET4.tmp
2009-08-05 05:43:14 —-RA—- C:WINDOWSSET3.tmp
2009-08-05 05:43:14 —-A—- C:WINDOWSSchedLgU.Txt
2009-08-05 05:43:14 —-A—- C:WINDOWSRtlUpd.exe
2009-08-05 05:43:13 —-A—- C:WINDOWSRTLCPL.EXE
2009-08-05 05:43:11 —-A—- C:WINDOWSRTHDCPL.EXE
2009-08-05 05:43:10 —-A—- C:WINDOWSOEWABLog.txt
2009-08-05 05:43:10 —-A—- C:WINDOWSODBCINST.INI
2009-08-05 05:43:10 —-A—- C:WINDOWSNOTEPAD.EXE
2009-08-05 05:43:10 —-A—- C:WINDOWSMicCal.exe
2009-08-05 05:43:10 —-A—- C:WINDOWSinnounp.exe
2009-08-05 05:43:10 —-A—- C:WINDOWSExplorer.EXE
2009-08-05 05:43:10 —-A—- C:WINDOWSdesktop.ini
2009-08-05 05:43:10 —-A—- C:WINDOWScontrol.ini
2009-08-05 05:43:10 —-A—- C:WINDOWSALCWZRD.EXE
2009-08-05 05:43:10 —-A—- C:WINDOWSALCMTR.EXE
2009-08-05 05:43:03 —-SD—- C:WINDOWSTasks
2009-08-05 05:43:03 —-D—- C:WINDOWSwbem
2009-08-05 05:43:00 —-D—- C:WINDOWSsystem32Com
2009-08-05 05:39:12 —-SHD—- C:WINDOWSInstaller
2009-08-04 18:41:55 —-D—- C:WINDOWS.0
2009-08-04 18:22:11 —-D—- C:WINDOWSsystem32Lang
2009-08-04 18:22:09 —-SD—- C:WINDOWSsystem32Microsoft
2009-08-04 18:22:09 —-D—- C:WINDOWSsystem32MsDtc
2009-08-04 18:22:09 —-D—- C:WINDOWSsystem32Macromed
2009-08-04 18:22:07 —-D—- C:WINDOWSsystem32RTCOM
2009-08-04 18:22:07 —-D—- C:WINDOWSsystem32Restore
2009-08-04 18:22:07 —-D—- C:WINDOWSsystem32PreInstall
2009-08-04 18:22:05 —-D—- C:WINDOWSsystem32URTTemp
2009-08-04 18:21:56 —-D—- C:WINDOWSsystem32xircom
2009-08-04 18:21:56 —-A—- C:WINDOWSsystem32zlib1.dll
2009-08-04 18:21:56 —-A—- C:WINDOWSsystem32ykx32mpcoinst.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xolehlp.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xinput9_1_0.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xinput1_3.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xinput1_2.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xinput1_1.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32XAudio2_2.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32XAudio2_1.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32XAudio2_0.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32XAPOFX1_1.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32XAPOFX1_0.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine3_2.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine3_1.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine3_0.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_9.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_8.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_7.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_6.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_5.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_4.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_3.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_2.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_10.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_1.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32xactengine2_0.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32X3DAudio1_4.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32X3DAudio1_3.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32x3daudio1_2.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32x3daudio1_1.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32x3daudio1_0.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wuweb.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wups.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wul_lng.ini
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wul.exe
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wucltui.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wuauserv.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wuaueng1.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wuaueng.dll
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wuauclt1.exe
2009-08-04 18:21:55 —-A—- C:WINDOWSsystem32wuauclt.exe
2009-08-04 18:21:54 —-A—- C:WINDOWSsystem32wuapi.dll
2009-08-04 18:21:54 —-A—- C:WINDOWSsystem32write.exe
2009-08-04 18:21:54 —-A—- C:WINDOWSsystem32wrap_oal.dll
2009-08-04 18:21:53 —-A—- C:WINDOWSsystem32wnaspi32.dll
2009-08-04 18:21:51 —-A—- C:WINDOWSsystem32wmpns.dll
2009-08-04 18:21:49 —-A—- C:WINDOWSsystem32wmimgmt.msc
2009-08-04 18:21:47 —-A—- C:WINDOWSsystem32winmine.exe
2009-08-04 18:21:47 —-A—- C:WINDOWSsystem32winfxdocobj.exe
2009-08-04 18:21:47 —-A—- C:WINDOWSsystem32winchat.exe
2009-08-04 18:21:46 —-A—- C:WINDOWSsystem32wiaaut.dll
2009-08-04 18:21:44 —-A—- C:WINDOWSsystem32Vbrun300.dll
2009-08-04 18:21:44 —-A—- C:WINDOWSsystem32vbrun200.dll
2009-08-04 18:21:44 —-A—- C:WINDOWSsystem32vbrun100.dll
2009-08-04 18:21:44 —-A—- C:WINDOWSsystem32Vb40032.dll
2009-08-04 18:21:44 —-A—- C:WINDOWSsystem32Vb40016.dll
2009-08-04 18:21:43 —-A—- C:WINDOWSsystem32usrlogon.cmd
2009-08-04 18:21:43 —-A—- C:WINDOWSsystem32usbui.dll
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32TweakUI.exe
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32tsshutdn.exe
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32tslabels.ini
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32tskill.exe
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32tsgqec.dll
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32tsdiscon.exe
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32tscon.exe
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32tscfgwmi.dll
2009-08-04 18:21:42 —-A—- C:WINDOWSsystem32termsrv.dll
2009-08-04 18:21:41 —-A—- C:WINDOWSsystem32storprop.dll
2009-08-04 18:21:41 —-A—- C:WINDOWSsystem32stclient.dll
2009-08-04 18:21:41 —-A—- C:WINDOWSsystem32ssleay32.dll
2009-08-04 18:21:40 —-A—- C:WINDOWSsystem32srsvc.dll
2009-08-04 18:21:40 —-A—- C:WINDOWSsystem32srrstr.dll
2009-08-04 18:21:40 —-A—- C:WINDOWSsystem32srclient.dll
2009-08-04 18:21:40 —-A—- C:WINDOWSsystem32spxcoins.dll
2009-08-04 18:21:39 —-A—- C:WINDOWSsystem32spider.exe
2009-08-04 18:21:39 —-A—- C:WINDOWSsystem32sol.exe
2009-08-04 18:21:39 —-A—- C:WINDOWSsystem32sndvol32.exe
2009-08-04 18:21:39 —-A—- C:WINDOWSsystem32sndrec32.exe
2009-08-04 18:21:35 —-A—- C:WINDOWSsystem32shadow.exe
2009-08-04 18:21:35 —-A—- C:WINDOWSsystem32sessmgr.exe
2009-08-04 18:21:35 —-A—- C:WINDOWSsystem32servdeps.dll
2009-08-04 18:21:34 —-A—- C:WINDOWSsystem32schedsvc.dll
2009-08-04 18:21:34 —-A—- C:WINDOWSsystem32safrslv.dll
2009-08-04 18:21:34 —-A—- C:WINDOWSsystem32safrdm.dll
2009-08-04 18:21:34 —-A—- C:WINDOWSsystem32safrcdlg.dll
2009-08-04 18:21:34 —-A—- C:WINDOWSsystem32rwinsta.exe
2009-08-04 18:21:33 —-A—- C:WINDOWSsystem32rspndr.exe
2009-08-04 18:21:33 —-A—- C:WINDOWSsystem32rhttpaa.dll
2009-08-04 18:21:33 —-A—- C:WINDOWSsystem32reset.exe
2009-08-04 18:21:33 —-A—- C:WINDOWSsystem32remotepg.dll
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32regini.exe
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32rdshost.exe
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32rdsaddin.exe
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32rdpwsx.dll
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32rdpsnd.dll
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32rdpclip.exe
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32rdpcfgex.dll
2009-08-04 18:21:32 —-A—- C:WINDOWSsystem32rdchost.dll
2009-08-04 18:21:31 —-A—- C:WINDOWSsystem32racpldlg.dll
2009-08-04 18:21:31 —-A—- C:WINDOWSsystem32qwinsta.exe
2009-08-04 18:21:31 —-A—- C:WINDOWSsystem32qprocess.exe
2009-08-04 18:21:31 —-A—- C:WINDOWSsystem32qmgrprxy.dll
2009-08-04 18:21:31 —-A—- C:WINDOWSsystem32qmgr.dll
2009-08-04 18:21:31 —-A—- C:WINDOWSsystem32qappsrv.exe
2009-08-04 18:21:30 —-A—- C:WINDOWSsystem32pintool.exe
2009-08-04 18:21:29 —-A—- C:WINDOWSsystem32PerfStringBackup.INI
2009-08-04 18:21:28 —-RA—- C:WINDOWSsystem32OEMINFO.CMD
2009-08-04 18:21:28 —-A—- C:WINDOWSsystem32OpenAL32.dll
2009-08-04 18:21:28 —-A—- C:WINDOWSsystem32oeminfo.ini
2009-08-04 18:21:26 —-A—- C:WINDOWSsystem32nwiz.exe
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwssr.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwss.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrszht.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrszhc.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrstr.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrsth.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrssv.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrssl.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrssk.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrsru.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrsptb.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrspt.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrspl.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrsno.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrsnl.dll
2009-08-04 18:21:25 —-A—- C:WINDOWSsystem32nvwrsko.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsja.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsit.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrshu.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrshe.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsfr.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsfi.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsesm.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrses.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrseng.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsel.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsde.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsda.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrscs.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwrsar.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwimg.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwdmcpl.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvwddi.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvvitvsr.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvvitvs.dll
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvuninst.exe
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvudisp.exe
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvsvc32.exe
2009-08-04 18:21:24 —-A—- C:WINDOWSsystem32nvshell.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrszht.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrszhc.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrstr.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsth.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrssv.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrssl.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrssk.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsru.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsptb.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrspt.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrspl.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsno.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsnl.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsko.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsja.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsit.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrshu.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrshe.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsfr.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsfi.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsesm.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrses.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrseng.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsel.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsde.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsda.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrscs.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvrsar.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvoglnt.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvnt4cpl.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvmoblsr.dll
2009-08-04 18:21:23 —-A—- C:WINDOWSsystem32nvmobls.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvmctray.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvmccssr.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvmccss.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvmccsrs.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvmccs.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nview.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvgamesr.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvgames.dll
2009-08-04 18:21:22 —-A—- C:WINDOWSsystem32nvdspsch.exe
2009-08-04 18:21:21 —-A—- C:WINDOWSsystem32nvdispsr.dll
2009-08-04 18:21:21 —-A—- C:WINDOWSsystem32nvdisps.dll
2009-08-04 18:21:21 —-A—- C:WINDOWSsystem32nvcuda.dll
2009-08-04 18:21:21 —-A—- C:WINDOWSsystem32nvcpluir.dll
2009-08-04 18:21:21 —-A—- C:WINDOWSsystem32nvcplui.exe
2009-08-04 18:21:19 —-A—- C:WINDOWSsystem32nvcpl.dll
2009-08-04 18:21:19 —-A—- C:WINDOWSsystem32nvcolor.exe
2009-08-04 18:21:19 —-A—- C:WINDOWSsystem32nvcodins.dll
2009-08-04 18:21:19 —-A—- C:WINDOWSsystem32nvcod.dll
2009-08-04 18:21:19 —-A—- C:WINDOWSsystem32nvappbar.exe
2009-08-04 18:21:19 —-A—- C:WINDOWSsystem32nvapi.dll
2009-08-04 18:21:19 —-A—- C:WINDOWSsystem32nv4_disp.dll
2009-08-04 18:21:16 —-A—- C:WINDOWSsystem32netfxperf.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32muweb.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32mucltui.dll.mui
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32mucltui.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32mtxoci.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32mtxlegih.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32mtxex.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32mtxdm.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32msxml4r.dll
2009-08-04 18:21:15 —-A—- C:WINDOWSsystem32msxml4.dll
2009-08-04 18:21:13 —-A—- C:WINDOWSsystem32msvcrt10.dll
2009-08-04 18:21:13 —-A—- C:WINDOWSsystem32msvcr71.dll
2009-08-04 18:21:13 —-A—- C:WINDOWSsystem32msvcr70.dll
2009-08-04 18:21:13 —-A—- C:WINDOWSsystem32msvcp71.dll
2009-08-04 18:21:13 —-A—- C:WINDOWSsystem32MSVCP70.DLL
2009-08-04 18:21:13 —-A—- C:WINDOWSsystem32msvci70.dll
2009-08-04 18:21:12 —-A—- C:WINDOWSsystem32mstscax.dll
2009-08-04 18:21:12 —-A—- C:WINDOWSsystem32mstsc.exe
2009-08-04 18:21:12 —-A—- C:WINDOWSsystem32mstinit.exe
2009-08-04 18:21:12 —-A—- C:WINDOWSsystem32mstask.dll
2009-08-04 18:21:12 —-A—- C:WINDOWSsystem32MSSTKPRP.DLL
2009-08-04 18:21:12 —-A—- C:WINDOWSsystem32msstdfmt.dll
2009-08-04 18:21:11 —-A—- C:WINDOWSsystem32msoert2.dll
2009-08-04 18:21:11 —-A—- C:WINDOWSsystem32msoeacct.dll
2009-08-04 18:21:09 —-A—- C:WINDOWSsystem32mshearts.exe
2009-08-04 18:21:08 —-A—- C:WINDOWSsystem32msg.exe
2009-08-04 18:21:08 —-A—- C:WINDOWSsystem32msfeedssync.exe
2009-08-04 18:21:08 —-A—- C:WINDOWSsystem32msfeedsbs.dll
2009-08-04 18:21:08 —-A—- C:WINDOWSsystem32msdtcuiu.dll
2009-08-04 18:21:08 —-A—- C:WINDOWSsystem32msdtctm.dll
2009-08-04 18:21:07 —-A—- C:WINDOWSsystem32msdtcprx.dll
2009-08-04 18:21:07 —-A—- C:WINDOWSsystem32msdtcprf.ini
2009-08-04 18:21:07 —-A—- C:WINDOWSsystem32msdtclog.dll
2009-08-04 18:21:07 —-A—- C:WINDOWSsystem32msdtc.exe
2009-08-04 18:21:07 —-A—- C:WINDOWSsystem32mscories.dll
2009-08-04 18:21:07 —-A—- C:WINDOWSsystem32mscorier.dll
2009-08-04 18:21:07 —-A—- C:WINDOWSsystem32mscoree.dll
2009-08-04 18:21:05 —-A—- C:WINDOWSsystem32mplay32.exe
2009-08-04 18:21:04 —-A—- C:WINDOWSsystem32mmfutil.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71u.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71KOR.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71JPN.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71ITA.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71FRA.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71ESP.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71ENU.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71DEU.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71CHT.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71CHS.DLL
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32MFC71.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70u.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70kor.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70jpn.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70ita.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70fra.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70esp.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70enu.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70deu.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70cht.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70chs.dll
2009-08-04 18:21:03 —-A—- C:WINDOWSsystem32mfc70.dll
2009-08-04 18:21:02 —-A—- C:WINDOWSsystem32mapi32.dll
2009-08-04 18:21:01 —-RAH—- C:WINDOWSsystem32logonui.exe.manifest
2009-08-04 18:21:00 —-A—- C:WINDOWSsystem32logoff.exe
2009-08-04 18:21:00 —-A—- C:WINDOWSsystem32licwmi.dll
2009-08-04 18:21:00 —-A—- C:WINDOWSsystem32libssl32.dll
2009-08-04 18:21:00 —-A—- C:WINDOWSsystem32libeay32.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdycl.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdtuq.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdtuf.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdsl1.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdsl.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdro.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdpl1.dll
2009-08-04 18:20:59 —-RA—- C:WINDOWSsystem32kbdpl.dll
2009-08-04 18:20:59 —-A—- C:WINDOWSsystem32ksuser.dll
2009-08-04 18:20:59 —-A—- C:WINDOWSsystem32keystone.exe
2009-08-04 18:20:59 —-A—- C:WINDOWSsystem32kbdycc.dll
2009-08-04 18:20:59 —-A—- C:WINDOWSsystem32kbduzb.dll
2009-08-04 18:20:59 —-A—- C:WINDOWSsystem32kbdur.dll
2009-08-04 18:20:59 —-A—- C:WINDOWSsystem32kbdtat.dll
2009-08-04 18:20:59 —-A—- C:WINDOWSsystem32kbdmon.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdlv1.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdlv.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdlt1.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdlt.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhu1.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhu.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhept.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhela3.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhela2.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhe319.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhe220.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdhe.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdgkl.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdest.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdcz2.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdcz1.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdcz.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdcr.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32kbdazel.dll
2009-08-04 18:20:58 —-RA—- C:WINDOWSsystem32KBDAL.DLL
2009-08-04 18:20:58 —-A—- C:WINDOWSsystem32kbdkyr.dll
2009-08-04 18:20:58 —-A—- C:WINDOWSsystem32kbdkaz.dll
2009-08-04 18:20:58 —-A—- C:WINDOWSsystem32kbdbu.dll
2009-08-04 18:20:58 —-A—- C:WINDOWSsystem32kbdblr.dll
2009-08-04 18:20:58 —-A—- C:WINDOWSsystem32kbdaze.dll
2009-08-04 18:20:57 —-A—- C:WINDOWSsystem32javaws.exe
2009-08-04 18:20:57 —-A—- C:WINDOWSsystem32javaw.exe
2009-08-04 18:20:57 —-A—- C:WINDOWSsystem32java.exe
2009-08-04 18:20:57 —-A—- C:WINDOWSsystem32isign32.dll
2009-08-04 18:20:57 —-A—- C:WINDOWSsystem32irclass.dll
2009-08-04 18:20:56 —-A—- C:WINDOWSsystem32inetres.dll
2009-08-04 18:20:55 —-A—- C:WINDOWSsystem32inetcomm.dll
2009-08-04 18:20:55 —-A—- C:WINDOWSsystem32inetcfg.dll
2009-08-04 18:20:55 —-A—- C:WINDOWSsystem32imapi2fs.dll
2009-08-04 18:20:55 —-A—- C:WINDOWSsystem32imapi2.dll
2009-08-04 18:20:54 —-A—- C:WINDOWSsystem32ifxcardm.dll
2009-08-04 18:20:54 —-A—- C:WINDOWSsystem32ieframe.dll.mui
2009-08-04 18:20:53 —-A—- C:WINDOWSsystem32icwphbk.dll
2009-08-04 18:20:53 —-A—- C:WINDOWSsystem32icwdial.dll
2009-08-04 18:20:53 —-A—- C:WINDOWSsystem32icfgnt5.dll
2009-08-04 18:20:53 —-A—- C:WINDOWSsystem32icaapi.dll
2009-08-04 18:20:52 —-A—- C:WINDOWSsystem32hypertrm.dll
2009-08-04 18:20:52 —-A—- C:WINDOWSsystem32hticons.dll
2009-08-04 18:20:52 —-A—- C:WINDOWSsystem32hidcon.exe
2009-08-04 18:20:52 —-A—- C:WINDOWSsystem32h323log.txt
2009-08-04 18:20:51 —-A—- C:WINDOWSsystem32gpprefcl.dll
2009-08-04 18:20:51 —-A—- C:WINDOWSsystem32getuname.dll
2009-08-04 18:20:51 —-A—- C:WINDOWSsystem32freecell.exe
2009-08-04 18:20:51 —-A—- C:WINDOWSsystem32fltMc.exe
2009-08-04 18:20:51 —-A—- C:WINDOWSsystem32fltlib.dll
2009-08-04 18:20:49 —-A—- C:WINDOWSsystem32EqnClass.Dll
2009-08-04 18:20:45 —-A—- C:WINDOWSsystem32dgsetup.dll
2009-08-04 18:20:45 —-A—- C:WINDOWSsystem32dgrpsetu.dll
2009-08-04 18:20:45 —-A—- C:WINDOWSsystem32dfshim.dll
2009-08-04 18:20:45 —-A—- C:WINDOWSsystem32desktop.ini
2009-08-04 18:20:45 —-A—- C:WINDOWSsystem32deploytk.dll
2009-08-04 18:20:44 —-A—- C:WINDOWSsystem32dcomcnfg.exe
2009-08-04 18:20:44 —-A—- C:WINDOWSsystem32d3dx9_39.dll
2009-08-04 18:20:44 —-A—- C:WINDOWSsystem32d3dx9_38.dll
2009-08-04 18:20:43 —-A—- C:WINDOWSsystem32d3dx9_37.dll
2009-08-04 18:20:43 —-A—- C:WINDOWSsystem32d3dx9_36.dll
2009-08-04 18:20:43 —-A—- C:WINDOWSsystem32d3dx9_35.dll
2009-08-04 18:20:43 —-A—- C:WINDOWSsystem32d3dx9_34.dll
2009-08-04 18:20:43 —-A—- C:WINDOWSsystem32d3dx9_33.dll
2009-08-04 18:20:43 —-A—- C:WINDOWSsystem32d3dx9_32.dll
2009-08-04 18:20:42 —-A—- C:WINDOWSsystem32d3dx9_31.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx9_30.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx9_29.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx9_28.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx9_27.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx9_26.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx9_25.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx9_24.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx10_39.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx10_38.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx10_37.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx10_36.dll
2009-08-04 18:20:41 —-A—- C:WINDOWSsystem32d3dx10_35.dll
2009-08-04 18:20:40 —-A—- C:WINDOWSsystem32d3dx10_34.dll
2009-08-04 18:20:40 —-A—- C:WINDOWSsystem32d3dx10_33.dll
2009-08-04 18:20:40 —-A—- C:WINDOWSsystem32d3dx10.dll
2009-08-04 18:20:39 —-A—- C:WINDOWSsystem32D3DCompiler_39.dll
2009-08-04 18:20:39 —-A—- C:WINDOWSsystem32D3DCompiler_38.dll
2009-08-04 18:20:39 —-A—- C:WINDOWSsystem32D3DCompiler_37.dll
2009-08-04 18:20:39 —-A—- C:WINDOWSsystem32d3dcompiler_36.dll
2009-08-04 18:20:39 —-A—- C:WINDOWSsystem32d3dcompiler_35.dll
2009-08-04 18:20:39 —-A—- C:WINDOWSsystem32d3dcompiler_34.dll
2009-08-04 18:20:39 —-A—- C:WINDOWSsystem32d3dcompiler_33.dll
2009-08-04 18:20:36 —-A—- C:WINDOWSsystem32CONFIG.TMP
2009-08-04 18:20:36 —-A—- C:WINDOWSsystem32comuid.dll
2009-08-04 18:20:36 —-A—- C:WINDOWSsystem32comsvcs.dll
2009-08-04 18:20:36 —-A—- C:WINDOWSsystem32comsnap.dll
2009-08-04 18:20:36 —-A—- C:WINDOWSsystem32comrepl.dll
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32comaddin.dll
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32colbact.dll
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32cmprops.dll
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32clipbrd.exe
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32clbcatq.dll
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32clbcatex.dll
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32charmap.exe
2009-08-04 18:20:35 —-A—- C:WINDOWSsystem32cfgbkend.dll
2009-08-04 18:20:34 —-RAH—- C:WINDOWSsystem32cdplayer.exe.manifest
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32cdmodem.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32catsrvut.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32catsrvps.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32catsrv.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32calc.exe
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32bitsprx4.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32bitsprx3.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32bitsprx2.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32bcsprsrc.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32batt.dll
2009-08-04 18:20:34 —-A—- C:WINDOWSsystem32basecsp.dll
2009-08-04 18:20:33 —-A—- C:WINDOWSsystem32axaltocm.dll
2009-08-04 18:20:33 —-A—- C:WINDOWSsystem32avwav.dll
2009-08-04 18:20:33 —-A—- C:WINDOWSsystem32avtapi.dll
2009-08-04 18:20:33 —-A—- C:WINDOWSsystem32avmeter.dll
2009-08-04 18:20:33 —-A—- C:WINDOWSsystem32atrace.dll
2009-08-04 18:20:33 —-A—- C:WINDOWSsystem32atl71.dll
2009-08-04 18:20:33 —-A—- C:WINDOWSsystem32atl70.dll
2009-08-04 18:20:32 —-A—- C:WINDOWSsystem32advpack.dll.mui
2009-08-04 18:20:32 —-A—- C:WINDOWSsystem32accwiz.exe
2009-08-04 18:20:32 —-A—- C:WINDOWSsystem32acctres.dll
2009-08-04 18:20:32 —-A—- C:WINDOWSsystem32aaclient.dll
2009-08-04 18:20:29 —-D—- C:WINDOWSsrchasst
2009-08-04 18:20:29 —-D—- C:WINDOWSSoftwareDistribution
2009-08-04 18:20:20 —-D—- C:WINDOWSRegistration
2009-08-04 18:20:09 —-RD—- C:WINDOWSOffline Web Pages
2009-08-04 18:19:55 —-RD—- C:WINDOWSOemDrv
2009-08-04 18:19:55 —-D—- C:WINDOWSnview
2009-08-04 18:19:35 —-D—- C:WINDOWSMicrosoft.NET
2009-08-04 18:19:11 —-SD—- C:WINDOWSDownloaded Program Files
2009-08-04 18:18:57 —-RSD—- C:WINDOWSassembly
2009-08-04 18:18:26 —-D—- C:config
2009-08-04 15:09:50 —-D—- C:Program Filesmsn gaming zone
2009-08-03 23:44:28 —-A—- C:WINDOWSsystem32UNDO_GUIMODE.TXT
2009-08-03 23:43:25 —-D—- C:WINDOWSsystem32CatRoot2
2009-08-03 23:43:25 —-D—- C:WINDOWSsystem32CatRoot
2009-08-03 23:37:04 —-D—- C:WINDOWSWinSxS
2009-08-03 23:37:04 —-D—- C:WINDOWSWeb
2009-08-03 23:37:04 —-D—- C:WINDOWStwain_32
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32wins
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32wbem
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32usmt
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32spool
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32ShellExt
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32Setup
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32ru-ru
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32ru
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32ras
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32oobe
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32npp
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32mui
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32inetsrv
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32IME
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32icsxml
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32ias
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32export
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32drivers
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32dllcache
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32dhcp
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32config
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem323com_dmi
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem323076
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem322052
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321054
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321049
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321042
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321041
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321037
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321033
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321031
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321028
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem321025
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem32
2009-08-03 23:37:04 —-D—- C:WINDOWSsystem
2009-08-03 23:37:04 —-D—- C:WINDOWSsecurity
2009-08-03 23:37:04 —-D—- C:WINDOWSResources
2009-08-03 23:37:04 —-D—- C:WINDOWSrepair
2009-08-03 23:37:04 —-D—- C:WINDOWSProvisioning
2009-08-03 23:37:04 —-D—- C:WINDOWSPeerNet
2009-08-03 23:37:04 —-D—- C:WINDOWSpchealth
2009-08-03 23:37:04 —-D—- C:WINDOWSNetwork Diagnostic
2009-08-03 23:37:04 —-D—- C:WINDOWSmui
2009-08-03 23:37:04 —-D—- C:WINDOWSmsapps
2009-08-03 23:37:04 —-D—- C:WINDOWSmsagent
2009-08-03 23:37:04 —-D—- C:WINDOWSMedia
2009-08-03 23:37:04 —-D—- C:WINDOWSL2Schemas
2009-08-03 23:37:04 —-D—- C:WINDOWSjava
2009-08-03 23:37:04 —-D—- C:WINDOWSinf
2009-08-03 23:37:04 —-D—- C:WINDOWSime
2009-08-03 23:37:04 —-D—- C:WINDOWSHelp
2009-08-03 23:37:04 —-D—- C:WINDOWSFonts
2009-08-03 23:37:04 —-D—- C:WINDOWSehome
2009-08-03 23:37:04 —-D—- C:WINDOWSDriver Cache
2009-08-03 23:37:04 —-D—- C:WINDOWSDebug
2009-08-03 23:37:04 —-D—- C:WINDOWSCursors
2009-08-03 23:37:04 —-D—- C:WINDOWSConnection Wizard
2009-08-03 23:37:04 —-D—- C:WINDOWSConfig
2009-08-03 23:37:04 —-D—- C:WINDOWSAppPatch
2009-08-03 23:37:04 —-D—- C:WINDOWSaddins
