Tässä olis kopioitu Hjakthissin loki:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:55:45, on 7.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Lavasoft\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
D:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\LClock\lclock.exe
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
D:\Program Files\Webshots\webshots.scr
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\Poker\ActionPoker\act.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: (no name) - {CE000994-A58C-4441-8938-744CD72AB27F} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,C:\WINDOWS\system32\ntos.exe,
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [DrvIcon] D:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [PwrUpTweakMe] C:\WINDOWS\system32\PuXpTwks.exe /TWEAK
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] D:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: Webshots.lnk = D:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: ATI CATALYST -ilmaisinalue.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Poker Rewards Poker - {6DAF93EB-C7E3-41ab-83D9-CAE1785F41BC} - C:\Microgaming\Poker\pokerrewardsMPP\MPPoker.exe
O9 - Extra button: Gutshot Poker - {70FF3DD2-AC81-43f2-AF80-979E2B789C4A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PokerTime Poker - {7220F1C9-B7E0-47a6-A0BD-D5B3940BCC79} - C:\Microgaming\Poker\pokertimeMPP\MPPoker.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Gnuf Casino - {8FE9B27A-BDCD-4d27-A430-4DC0B58D01B0} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PacificPoker4 - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - F:\POKER\PACIFI~1\pacificpoker.exe
O9 - Extra button: Gnuf Poker - {A99C8F70-4D5B-482c-8854-05BC0BB8B182} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Microgaming\Poker\nordicbetMPP\MPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra 'Tools' menuitem: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\bianco\Käynnistä-valikko\Ohjelmat\CarbonPoker\CarbonPoker.lnk (file missing) (HKCU)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5235/mcfscan.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} -
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\aawservice.exe
O23 - Service: Apple Mobile Device - Unknown owner - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (file missing)
O23 - Service: AshampooDefragService - - C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SNMP-palvelu (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe (file missing)
O23 - Service: SNMP:n keskeytyspalvelu (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
--
End of file - 11573 bytes
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:55:45, on 7.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Lavasoft\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
D:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\LClock\lclock.exe
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
D:\Program Files\Webshots\webshots.scr
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\Poker\ActionPoker\act.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: (no name) - {CE000994-A58C-4441-8938-744CD72AB27F} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,C:\WINDOWS\system32\ntos.exe,
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O1 - Hosts: 200.124.131.116 casinocontroller.com
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [DrvIcon] D:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [PwrUpTweakMe] C:\WINDOWS\system32\PuXpTwks.exe /TWEAK
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] D:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: Webshots.lnk = D:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: ATI CATALYST -ilmaisinalue.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Poker Rewards Poker - {6DAF93EB-C7E3-41ab-83D9-CAE1785F41BC} - C:\Microgaming\Poker\pokerrewardsMPP\MPPoker.exe
O9 - Extra button: Gutshot Poker - {70FF3DD2-AC81-43f2-AF80-979E2B789C4A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PokerTime Poker - {7220F1C9-B7E0-47a6-A0BD-D5B3940BCC79} - C:\Microgaming\Poker\pokertimeMPP\MPPoker.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Gnuf Casino - {8FE9B27A-BDCD-4d27-A430-4DC0B58D01B0} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PacificPoker4 - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - F:\POKER\PACIFI~1\pacificpoker.exe
O9 - Extra button: Gnuf Poker - {A99C8F70-4D5B-482c-8854-05BC0BB8B182} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Microgaming\Poker\nordicbetMPP\MPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra 'Tools' menuitem: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\bianco\Käynnistä-valikko\Ohjelmat\CarbonPoker\CarbonPoker.lnk (file missing) (HKCU)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5235/mcfscan.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} -
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\aawservice.exe
O23 - Service: Apple Mobile Device - Unknown owner - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (file missing)
O23 - Service: AshampooDefragService - - C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SNMP-palvelu (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe (file missing)
O23 - Service: SNMP:n keskeytyspalvelu (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
--
End of file - 11573 bytes
Vastaukset 23
Vanhimmat
Lataa SDFix by AndyManchesta
http://downloads.andymanchesta.com/RemovalTools/SDFix.zip
ja tallenna se työpöydällesi.
Käynnistä koneesi vikasietotilaan:
sammuta ja käynnistä
käynnistyksen yhteydessä hakkaa F8 nappia
valitse nuolinäppäimellä vikasietotila
paina enter ja enter
valitse käyttäjätilisi
paina kyllä
Jossakin koneissa hakataan F8:sin sijasta F5:tä
• Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä SDFix.
• Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
• Paina Y käynnistääksesi skriptin.
• Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
• Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
• Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
• Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
• Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
• Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.
Antamasi hommat on hoidettu ja tässä kopiona kolme lokia.
[b]SDFix: Version 1.153 [/b]
Run by bianco on pe 07.03.2008 at 23:41
Microsoft Windows XP [versio 5.1.2600]
Running From: C:\DOCUME~1\bianco\TYPYT~1\SDFix
[b]Checking Services [/b]:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
[b]Checking Files [/b]:
Trojan Files Found:
C:\WINDOWS\system32\ntos.exe - Deleted
C:\WINDOWS\system32\wsnpoem\audio.dll - Deleted
C:\WINDOWS\system32\wsnpoem\video.dll - Deleted
Folder C:\WINDOWS\system32\wsnpoem - Removed
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 23:49:12
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg40]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,51,74,54,fb,9f,98,53,cb,b6,4d,04,85,9f,..
"ljej40"=hex:7e,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,fd,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg41]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,db,70,82,a2,9f,98,53,cb,83,4d,04,85,9b,..
"ljej40"=hex:4b,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,c0,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg42]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,40,36,7f,14,9f,98,53,cb,a3,4d,04,85,9f,..
"ljej40"=hex:6b,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,84,..
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\\x00ffc\xd3w\2]
"b049C053C7D38EE4AB9A00CB3B5D2472"="C?\Program Files\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
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
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"D:\\Program Files\\Azureus\\Azureus\\Azureus.exe"="D:\\Program Files\\Azureus\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\javaw.exe"="C:\\Program Files\\Java\\jre1.5.0_11\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\Program Files\\Java\\jre1.6.0_02\\bin\\orbd.exe"="C:\\Program Files\\Java\\jre1.6.0_02\\bin\\orbd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\system32\\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\\WINDOWS\\system32\\dxdiag.exe"="C:\\WINDOWS\\system32\\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"C:\\WINDOWS\\system32\\mmc.exe"="C:\\WINDOWS\\system32\\mmc.exe:*:Enabled:Microsoft Management Console"
"C:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"="C:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"D:\\ExTietoa\\bianco\\Abdul\\Adult TvInternet\\TvInternet.exe"="D:\\ExTietoa\\bianco\\Abdul\\Adult TvInternet\\TvInternet.exe:*:Enabled:TvInternet"
"C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"="C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe"="C:\\Program Files\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\Casino\\SuperVegasCasino\\casino.exe"="C:\\Casino\\SuperVegasCasino\\casino.exe:*:Enabled:casino"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"="C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe:*:Enabled:OTI@Home User Interface"
"C:\\WINDOWS\\Temp\\CRY800.tmp\\install.exe"="C:\\WINDOWS\\Temp\\CRY800.tmp\\install.exe:*:Enabled:setup wizard"
"C:\\Program Files\\Playboy Poker\\UA.exe"="C:\\Program Files\\Playboy Poker\\UA.exe:*:Enabled:UA Application"
"C:\\Casino\\bwin Casino\\casino.exe"="C:\\Casino\\bwin Casino\\casino.exe:*:Enabled:casino"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"F:\\Poker\\Parbet.com Poker\\UA.exe"="F:\\Poker\\Parbet.com Poker\\UA.exe:*:Enabled:UA Application"
"F:\\Poker\\UvsPoker\\jre\\bin\\javaw.exe"="F:\\Poker\\UvsPoker\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe"="F:\\Poker\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"D:\\Program Files\\Real\\realplay.exe"="D:\\Program Files\\Real\\realplay.exe:*:Enabled:RealPlayer"
"F:\\Poker\\Club4Aces.com\\jre\\bin\\javaw.exe"="F:\\Poker\\Club4Aces.com\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Suorita DLL sovelluksena"
"F:\\Poker\\24hPoker\\jre\\bin\\javaw.exe"="F:\\Poker\\24hPoker\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\Pokeriparatiisi\\jre\\bin\\javaw.exe"="F:\\Poker\\Pokeriparatiisi\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\Ladbrokers\\Ladbrokes3DPoker\\PWPoker.exe"="F:\\Poker\\Ladbrokers\\Ladbrokes3DPoker\\PWPoker.exe:*:Enabled:PWize client"
"F:\\Poker\\Pokerihuone\\jre\\bin\\javaw.exe"="F:\\Poker\\Pokerihuone\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\InterPoker\\UA.exe"="F:\\Poker\\InterPoker\\UA.exe:*:Enabled:UA Application"
"C:\\WINDOWS\\Temp\\CRY88F8.tmp\\install.exe"="C:\\WINDOWS\\Temp\\CRY88F8.tmp\\install.exe:*:Enabled:setup wizard"
"F:\\Poker\\SunPoker.com\\UA.EXE"="F:\\Poker\\SunPoker.com\\UA.EXE:*:Enabled:UA Application"
"G:\\European Street Racing\\ESR DEMO.exe"="G:\\European Street Racing\\ESR DEMO.exe:*:Enabled:ESR DEMO"
"D:\\Program Files\\Azureus\\Azureus.exe"="D:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"D:\\Program Files\\Steam\\steamapps\\biancool\\half-life 2 deathmatch\\hl2.exe"="D:\\Program Files\\Steam\\steamapps\\biancool\\half-life 2 deathmatch\\hl2.exe:*:Enabled:hl2"
"C:\\Documents and Settings\\All Users\\Application Data\\Spadester\\spades.exe"="C:\\Documents and Settings\\All Users\\Application Data\\Spadester\\spades.exe:*:Enabled:spades"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[b]Remaining Files [/b]:
File Backups: - C:\DOCUME~1\bianco\TYPYT~1\SDFix\backups\backups.zip
[b]Files with Hidden Attributes [/b]:
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Mon 22 Aug 2005 79,872 A..H. --- "C:\Swsetup\Monitors\SP31622\hpinsx64.exe"
[b]Finished![/b]
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:54:55, on 7.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Lavasoft\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
D:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\LClock\lclock.exe
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
D:\Program Files\Webshots\webshots.scr
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
D:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: (no name) - {CE000994-A58C-4441-8938-744CD72AB27F} - (no file)
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [DrvIcon] D:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [PwrUpTweakMe] C:\WINDOWS\system32\PuXpTwks.exe /TWEAK
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] D:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\aro.exe -rem
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: Webshots.lnk = D:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: ATI CATALYST -ilmaisinalue.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Poker Rewards Poker - {6DAF93EB-C7E3-41ab-83D9-CAE1785F41BC} - C:\Microgaming\Poker\pokerrewardsMPP\MPPoker.exe
O9 - Extra button: Gutshot Poker - {70FF3DD2-AC81-43f2-AF80-979E2B789C4A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PokerTime Poker - {7220F1C9-B7E0-47a6-A0BD-D5B3940BCC79} - C:\Microgaming\Poker\pokertimeMPP\MPPoker.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Gnuf Casino - {8FE9B27A-BDCD-4d27-A430-4DC0B58D01B0} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PacificPoker4 - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - F:\POKER\PACIFI~1\pacificpoker.exe
O9 - Extra button: Gnuf Poker - {A99C8F70-4D5B-482c-8854-05BC0BB8B182} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Microgaming\Poker\nordicbetMPP\MPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra 'Tools' menuitem: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\bianco\Käynnistä-valikko\Ohjelmat\CarbonPoker\CarbonPoker.lnk (file missing) (HKCU)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v1018/flashax.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5235/mcfscan.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} -
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\aawservice.exe
O23 - Service: Apple Mobile Device - Unknown owner - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (file missing)
O23 - Service: AshampooDefragService - - C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SNMP-palvelu (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe (file missing)
O23 - Service: SNMP:n keskeytyspalvelu (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
--
End of file - 11020 bytes
catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 23:49:12
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg40]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,51,74,54,fb,9f,98,53,cb,b6,4d,04,85,9f,..
"ljej40"=hex:7e,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,fd,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg41]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,db,70,82,a2,9f,98,53,cb,83,4d,04,85,9b,..
"ljej40"=hex:4b,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,c0,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg42]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,40,36,7f,14,9f,98,53,cb,a3,4d,04,85,9f,..
"ljej40"=hex:6b,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,84,..
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\\x00ffc\xd3w\2]
"b049C053C7D38EE4AB9A00CB3B5D2472"="C?\Program Files\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
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
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
Näyttääkö siltä, että vihulaiset olisi silpottu?
scannaa hjt:llä merkkaa paina Fix checked
R3 - URLSearchHook: (no name) - {CE000994-A58C-4441-8938-744CD72AB27F} - (no file)
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} -
=============
1.Lataa combofix.exe työpöydällesi yhdestä kolmesta linkistä:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe
2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
ja tässä combon loki:
ComboFix 08-03-07.3 - bianco 2008-03-08 0:29:41.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1035.18.1001 [GMT 2:00]
Running from: C:\Documents and Settings\bianco\Työpöytä\ComboFix.exe
* Created a new restore point
[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.
(((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\system32\Cache
.
((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-02-07 to 2008-03-07 )))))))))))))))))
.
2008-03-07 23:37 . 2008-03-07 23:37 d-------- C:\WINDOWS\ERUNT
2008-03-07 22:55 . 2008-03-07 22:55 d-------- C:\Program Files\Trend Micro
2008-03-07 15:41 . 2008-03-07 15:44 4,062 --a------ C:\WINDOWS\system32\tmp.reg
2008-03-07 12:55 . 2008-03-07 12:55 d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-03-07 12:55 . 2008-03-07 12:55 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-03-07 12:28 . 2008-03-07 12:28 d-------- C:\Program Files\Advanced Registry Optimizer
2008-03-07 12:28 . 2008-03-07 12:28 d-------- C:\Documents and Settings\bianco\Application Data\Sammsoft
2008-03-05 09:52 . 2008-03-05 09:52 d-------- C:\fsaua.data
2008-03-05 04:34 . 2008-03-05 08:32 d-------- C:\Program Files\Common Files\Panda Software
2008-03-05 00:56 . 2008-03-04 01:36 d-------- C:\SDFix
2008-03-04 21:45 . 2008-03-07 20:39 4,096 --a------ C:\WINDOWS\system32\crash
2008-03-03 04:06 . 2008-03-03 05:51 d-------- C:\WINDOWS\BDOSCAN8
2008-03-01 17:46 . 2008-03-01 17:47 d-------- C:\Program Files\Slots of Vegas
2008-02-27 00:28 . 2008-02-27 00:34 5,466 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd
2008-02-26 22:23 . 2008-02-26 22:26 d-------- C:\Program Files\Common Files\CasinoVegasShared
2008-02-26 19:53 . 2008-03-07 23:34 16,324 --a------ C:\WINDOWS\system32\BMXStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx
2008-02-26 19:53 . 2008-03-07 23:34 16,324 --a------ C:\WINDOWS\system32\BMXState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx
2008-02-26 19:53 . 2008-03-07 23:34 24 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.dat
2008-02-26 19:53 . 2008-03-07 23:34 24 --a------ C:\WINDOWS\system32\DVCState-{00000002-00000000-00000002-00001102-00000002-80271102}.dat
2008-02-26 18:18 . 2008-02-26 19:57 2,492 --a------ C:\WINDOWS\system32\ealregsnapshot1.reg
2008-02-26 16:30 . 2008-02-26 17:05 3,373,917 --a------ C:\WINDOWS\{00000002-00000000-00000002-00001102-00000002-80271102}.CDF
2008-02-26 16:29 . 2008-03-07 23:34 24,264 --a------ C:\WINDOWS\system32\BMXCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx
2008-02-26 16:29 . 2008-03-07 23:34 24,264 --a------ C:\WINDOWS\system32\BMXBkpCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx
2008-02-26 16:28 . 1995-08-30 02:02 82,432 --------- C:\WINDOWS\system32\CTWFLT32.DLL
2008-02-26 16:28 . 1994-12-05 03:11 53,552 --------- C:\WINDOWS\CTCCW.DLL
2008-02-26 16:28 . 1996-05-23 02:24 24,976 --------- C:\WINDOWS\CTRES.DLL
2008-02-26 16:25 . 2008-02-26 16:25 d-------- C:\Program Files\Creative
2008-02-26 13:22 . 2005-04-07 17:20 524,850 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.cpa
2008-02-26 13:22 . 2005-06-28 21:05 516,096 --------- C:\WINDOWS\system32\ati2sgag.exe
2008-02-26 13:22 . 2005-06-29 07:41 307,200 -ra------ C:\WINDOWS\system32\atiiiexx.dll
2008-02-26 13:22 . 2005-06-10 22:59 95,617 -ra------ C:\WINDOWS\system32\atiicdxx.dat
2008-02-26 13:22 . 2005-03-10 16:52 58,521 -ra------ C:\WINDOWS\system32\drivers\ativckxx.vp
2008-02-26 13:22 . 2005-06-29 08:15 21,472 -ra------ C:\WINDOWS\system32\drivers\ativvpxx.vp
2008-02-26 13:22 . 2005-05-10 02:47 5,396 -ra------ C:\WINDOWS\system32\atifglpf.xml
2008-02-26 13:22 . 2005-04-07 17:20 900 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.vp
2008-02-26 13:10 . 2008-02-26 13:24 d-------- C:\Program Files\ATI Technologies
2008-02-26 11:29 . 2004-08-03 22:29 104,960 --a------ C:\WINDOWS\system32\drivers\atinrvxx.sys
2008-02-26 11:29 . 2004-08-03 22:29 104,960 --a--c--- C:\WINDOWS\system32\dllcache\atinrvxx.sys
2008-02-26 11:29 . 2004-08-03 22:29 36,463 --a------ C:\WINDOWS\system32\drivers\ati1tuxx.sys
2008-02-26 11:29 . 2004-08-03 22:29 36,463 --a--c--- C:\WINDOWS\system32\dllcache\ati1tuxx.sys
2008-02-26 11:29 . 2004-08-03 22:29 28,672 --a------ C:\WINDOWS\system32\drivers\atinsnxx.sys
2008-02-26 11:29 . 2004-08-03 22:29 28,672 --a--c--- C:\WINDOWS\system32\dllcache\atinsnxx.sys
2008-02-23 22:37 . 2008-02-23 22:37 d-------- C:\WINDOWS\Sun
2008-02-23 17:27 . 2006-10-04 16:06 1,197,294 -----c--- C:\WINDOWS\system32\dllcache\sysmain.sdb
2008-02-23 17:27 . 2006-10-04 16:06 764,868 -----c--- C:\WINDOWS\system32\dllcache\apph_sp.sdb
2008-02-23 17:27 . 2006-10-04 16:06 217,118 -----c--- C:\WINDOWS\system32\dllcache\apphelp.sdb
2008-02-23 17:26 . 2008-02-26 11:55 d-------- C:\Program Files\Windows Media Connect 2
2008-02-23 15:09 . 2005-06-29 05:01 1,241,088 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-02-23 15:09 . 2005-06-29 05:01 1,241,088 --a--c--- C:\WINDOWS\system32\dllcache\ati2mtag.sys
2008-02-23 14:42 . 2008-02-23 14:42 d-------- C:\Documents and Settings\All Users\Application Data\ATI
2008-02-23 14:09 . 2002-06-14 13:49 10,194 --------- C:\WINDOWS\system32\PFMODNT.SYS
2008-02-22 19:45 . 2007-10-25 18:56 8,458,752 -----c--- C:\WINDOWS\system32\dllcache\shell32.dll
2008-02-22 19:39 . 2007-07-09 15:11 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-02-22 19:06 . 2007-04-02 07:58 546,304 -----c--- C:\WINDOWS\system32\dllcache\hhctrl.ocx
2008-02-22 16:28 . 2004-09-14 16:12 380,416 --------- C:\WINDOWS\system32\irprops.cpl
2008-02-22 16:28 . 2004-09-14 16:11 10,752 --------- C:\WINDOWS\system32\smtpapi.dll
2008-02-22 16:28 . 2004-09-14 16:11 9,728 --------- C:\WINDOWS\system32\rwnh.dll
2008-02-22 15:04 . 2004-08-03 22:32 571,392 --a--c--- C:\WINDOWS\system32\dllcache\tintlgnt.ime
2008-02-22 15:03 . 2003-04-25 14:00 1,875,968 --a--c--- C:\WINDOWS\system32\dllcache\msir3jp.lex
2008-02-22 15:02 . 2003-04-25 14:00 13,463,552 --a--c--- C:\WINDOWS\system32\dllcache\hwxjpn.dll
2008-02-22 15:00 . 2005-11-29 16:27 364,544 --a--c--- C:\WINDOWS\system32\dllcache\npdsplay.dll
2008-02-22 14:59 . 2007-05-16 17:14 1,314,816 --a--c--- C:\WINDOWS\system32\dllcache\msoe.dll
2008-02-22 14:59 . 2007-08-21 08:17 683,520 --a--c--- C:\WINDOWS\system32\inetcomm.dll
2008-02-22 14:59 . 2007-08-21 08:17 683,520 --a--c--- C:\WINDOWS\system32\dllcache\inetcomm.dll
2008-02-22 14:59 . 2006-12-26 15:08 536,576 --a--c--- C:\WINDOWS\system32\dllcache\msado15.dll
2008-02-22 14:59 . 2007-05-16 17:14 510,976 --a--c--- C:\WINDOWS\system32\dllcache\wab32.dll
2008-02-22 14:59 . 2006-12-26 15:08 200,704 --a--c--- C:\WINDOWS\system32\dllcache\msadox.dll
2008-02-22 14:59 . 2004-09-14 16:11 190,976 --a------ C:\WINDOWS\system32\schedsvc.dll
2008-02-22 14:59 . 2006-12-26 15:08 180,224 --a--c--- C:\WINDOWS\system32\dllcache\msadomd.dll
2008-02-22 14:59 . 2006-12-26 15:08 102,400 --a--c--- C:\WINDOWS\system32\dllcache\msjro.dll
2008-02-22 14:59 . 2004-09-14 16:12 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2008-02-22 14:57 . 2006-03-01 21:44 956,416 --a--c--- C:\WINDOWS\system32\msdtctm.dll
2008-02-22 14:56 . 2005-07-26 06:40 540,160 --a--c--- C:\WINDOWS\system32\dllcache\comuid.dll
2008-02-22 14:55 . 2003-04-25 14:00 33,792 --a--c--- C:\WINDOWS\system32\dllcache\controt.dll
2008-02-22 14:55 . 2003-04-25 14:00 20,480 --a--c--- C:\WINDOWS\system32\dllcache\counters.dll
2008-02-22 14:55 . 2003-04-25 14:00 19,456 --a--c--- C:\WINDOWS\system32\dllcache\iiscrmap.dll
2008-02-22 14:55 . 2003-04-25 14:00 7,168 --a--c--- C:\WINDOWS\system32\dllcache\isapips.dll
2008-02-22 14:55 . 2003-04-25 14:00 6,656 --a--c--- C:\WINDOWS\system32\dllcache\iissync.exe
2008-02-22 14:54 . 2003-04-25 14:00 59,129 --a------ C:\WINDOWS\system32\w3ctrs.ini
2008-02-22 14:54 . 2003-04-25 14:00 50,176 --a--c--- C:\WINDOWS\system32\dllcache\adrot.dll
2008-02-22 14:54 . 2004-09-15 14:00 45,568 --a--c--- C:\WINDOWS\system32\dllcache\browscap.dll
2008-02-22 14:54 . 2003-04-25 14:00 29,184 --a--c--- C:\WINDOWS\system32\dllcache\asptxn.dll
2008-02-22 14:54 . 2003-04-25 14:00 9,216 --a--c--- C:\WINDOWS\system32\dllcache\authfilt.dll
2008-02-22 14:54 . 2003-04-25 14:00 5,632 --a------ C:\WINDOWS\system32\w3svapi.dll
2008-02-22 14:54 . 2003-04-25 14:00 5,632 --a--c--- C:\WINDOWS\system32\dllcache\w3svapi.dll
2008-02-22 14:54 . 2003-04-25 14:00 5,379 --a------ C:\WINDOWS\system32\w3ctrs.h
2008-02-22 14:54 . 2003-04-25 14:00 4,608 --a------ C:\WINDOWS\system32\w3ctrs.dll
2008-02-22 14:54 . 2003-04-25 14:00 4,608 --a--c--- C:\WINDOWS\system32\dllcache\w3ctrs51.dll
2008-02-22 14:52 . 2004-09-14 16:11 133,632 --a------ C:\WINDOWS\system32\iisrtl.dll
2008-02-22 14:52 . 2004-09-14 16:11 43,520 --a------ C:\WINDOWS\system32\admwprox.dll
2008-02-22 14:52 . 2003-04-25 14:00 22,016 --a--c--- C:\WINDOWS\system32\dllcache\logscrpt.dll
2008-02-22 14:52 . 2004-09-14 16:11 14,336 --a------ C:\WINDOWS\system32\exstrace.dll
2008-02-22 14:51 . 2003-04-25 14:00 56,320 --a--c--- C:\WINDOWS\system32\dllcache\convlog.exe
2008-02-22 14:51 . 2003-04-25 14:00 56,320 --a------ C:\WINDOWS\system32\convlog.exe
2008-02-22 14:51 . 2003-04-25 14:00 17,909 --a------ C:\WINDOWS\system32\infoctrs.ini
2008-02-22 14:51 . 2003-04-25 14:00 8,704 --a------ C:\WINDOWS\system32\infoctrs.dll
2008-02-22 14:51 . 2003-04-25 14:00 8,704 --a--c--- C:\WINDOWS\system32\dllcache\infoctrs.dll
2008-02-22 14:51 . 2004-09-14 16:12 8,192 --a------ C:\WINDOWS\system32\staxmem.dll
2008-02-22 14:51 . 2003-04-25 14:00 6,144 --a--c--- C:\WINDOWS\system32\dllcache\admxprox.dll
2008-02-22 14:51 . 2003-04-25 14:00 6,144 --a------ C:\WINDOWS\system32\admxprox.dll
.
(((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-07 13:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-06 09:50 --------- d-----w C:\Documents and Settings\bianco\Application Data\Azureus
2008-03-06 09:44 --------- d-s---w C:\Program Files\Alwil Software
2008-03-05 17:33 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-02 20:48 --------- d-----w C:\Documents and Settings\bianco\Application Data\Microgaming
2008-03-02 10:33 --------- d-----w C:\Program Files\PC Connectivity Solution
2008-02-29 18:01 21,640 -c--a-w C:\Documents and Settings\bianco\Application Data\GDIPFONTCACHEV1.DAT
2008-02-26 22:34 70,821 -c--a-w C:\WINDOWS\BricoPackUninst.cmd
2008-02-26 22:34 219,136 ----a-w C:\WINDOWS\system32\uxtheme.dll
2008-02-26 18:48 --------- d-----w C:\Program Files\Common Files\Adobe
2008-02-26 11:31 --------- d-----w C:\Documents and Settings\bianco\Application Data\ATI
2008-02-16 23:35 --------- d-----w C:\Program Files\Java
2008-02-14 15:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spadester
2008-02-11 11:57 --------- d-----w C:\Documents and Settings\bianco\Application Data\Ladbrokes
2008-02-09 15:10 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-02-05 22:40 --------- d-----w C:\Program Files\Common Files\EasyInfo
2008-01-31 23:11 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-01-31 23:10 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe
2008-01-31 23:07 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-01-31 19:31 --------- d-----w C:\Program Files\Common Files\PCSuite
2008-01-31 19:31 --------- d-----w C:\Program Files\Common Files\Nokia
2008-01-31 15:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\Installations
2008-01-22 20:04 46,080 ----a-w C:\WINDOWS\system32\amdpcom32.dll
2008-01-10 03:29 --------- d-----w C:\Documents and Settings\bianco\Application Data\MouseLight
2007-12-07 02:14 815,616 ----a-w C:\WINDOWS\system32\wininet.dll
2007-11-16 23:41 128 -csh--w C:\Program Files\desktop.ini
2006-11-08 00:34 143 -c-h--w C:\Program Files\Common Files\desktop.ini
.
------- Sigcheck -------
22807fe774709039ddff1912e4a53a0b C:\WINDOWS\system32\wininet.dll
-c--a-w 663,552 2006-05-10 05:27:03 C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\wininet.dll
-c--a-w 664,576 2006-06-23 11:25:43 C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\wininet.dll
-c--a-w 664,576 2006-09-14 08:37:24 C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\wininet.dll
-c--a-w 823,296 2007-03-23 09:29:53 C:\WINDOWS\$hf_mig$\KB931768-IE7\SP2QFE\wininet.dll
-c--a-w 823,808 2007-04-25 08:29:49 C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE\wininet.dll
-c--a-w 824,320 2007-06-27 14:15:13 C:\WINDOWS\$hf_mig$\KB937143-IE7\SP2QFE\wininet.dll
-c--a-w 825,344 2007-08-20 09:50:46 C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE\wininet.dll
-c--a-w 825,344 2007-10-10 23:23:23 C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
-c--a-w 666,112 2007-12-07 00:46:57 C:\WINDOWS\$hf_mig$\KB944533\SP2QFE\wininet.dll
----a-w 825,344 2007-12-07 01:42:59 C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
-c----w 656,384 2004-09-14 14:12:02 C:\WINDOWS\$NtUninstallKB944533$\wininet.dll
-c----w 824,832 2007-10-10 23:52:58 C:\WINDOWS\ie7updates\KB944533-IE7\wininet.dll
----a-w 815,616 2007-12-07 02:14:02 C:\WINDOWS\ServicePackFiles\i386\wininet.dll
-c--a-w 824,832 2007-12-07 02:14:01 C:\WINDOWS\SoftwareDistribution\Download\d0e33c86556cb916ba7786a81d2ab06a\sp2gdr\wininet.dll
-c--a-w 825,344 2007-12-07 01:42:59 C:\WINDOWS\SoftwareDistribution\Download\d0e33c86556cb916ba7786a81d2ab06a\sp2qfe\wininet.dll
----a-w 815,616 2007-12-07 02:14:02 C:\WINDOWS\system32\wininet.dll
-c--a-w 824,832 2007-12-07 02:14:01 C:\WINDOWS\system32\dllcache\wininet.dll
bfb589091060c9e3c5e6f55c6881ed78 C:\WINDOWS\explorer.exe
----a-w 975,872 2007-06-13 13:22:06 C:\WINDOWS\explorer.exe
----a-w 1,033,728 2007-06-13 13:10:34 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
----a-w 975,872 2007-06-13 13:22:06 C:\WINDOWS\ServicePackFiles\i386\explorer.exe
-c----w 1,033,728 2007-06-13 13:22:06 C:\WINDOWS\system32\dllcache\explorer.exe
.
(((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-09-14 16:12 15360]
"LClock"="D:\Program Files\LClock\lclock.exe" [2004-09-19 20:27 65536]
"AROReminder"="C:\Program Files\Advanced Registry Optimizer\aro.exe" [2007-07-23 09:34 2084480]
"PC Suite Tray"="D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe" [2007-12-10 10:12 695808]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BootSkin Startup Jobs"="D:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" [2004-04-26 16:21 270336]
"avast!"="C:\Program Files\Alwil Software\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"DrvIcon"="D:\Program Files\Vista Drive Icon\DrvIcon.exe" [2007-07-04 21:59 45056]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [2007-12-14 03:42 144784]
"!AVG Anti-Spyware"="D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25 6731312]
"PwrUpTweakMe"="C:\WINDOWS\system32\PuXpTwks.exe" [2007-04-13 16:30 45056]
"WINDVDPatch"="CTHELPER.EXE" [2002-02-07 18:01 40960 C:\WINDOWS\system32\CTHELPER.EXE]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 21:05 344064]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-06-29 01:09 32768]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00 90112]
"Jet Detection"="D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-10-04 01:00 28672]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-09-14 16:12 15360]
"Nokia.PCSync"="D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]
"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 15:38 39264]
C:\Documents and Settings\bianco\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
RocketDock.lnk - D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-03-19 00:05:02 630784]
Webshots.lnk - D:\Program Files\Webshots\Launcher.exe [2006-08-27 15:25:50 63064]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveSearch"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"OODefrag"=2 (0x2)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"D:\\Program Files\\Azureus\\Azureus\\Azureus.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\WINDOWS\\system32\\dxdiag.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"D:\\ExTietoa\\bianco\\Abdul\\Adult TvInternet\\TvInternet.exe"=
"C:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"F:\\Poker\\Club4Aces.com\\jre\\bin\\javaw.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\WINDOWS\\system32\\rundll32.exe"=
"F:\\Poker\\Ladbrokers\\Ladbrokes3DPoker\\PWPoker.exe"=
"F:\\Poker\\InterPoker\\UA.exe"=
"F:\\Poker\\SunPoker.com\\UA.EXE"=
"D:\\Program Files\\Azureus\\Azureus.exe"=
"D:\\Program Files\\Steam\\steamapps\\biancool\\half-life 2 deathmatch\\hl2.exe"=
"C:\\Documents and Settings\\All Users\\Application Data\\Spadester\\spades.exe"=
"%windir%\\system32\\sessmgr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
S1 TRIXX;TRIXX;C:\Program Files\TRIXX\TRIXXDriver.sys []
S2 SMTPSVC;Simple Mail Transport Protocol (SMTP);C:\WINDOWS\system32\inetsrv\inetinfo.exe [2004-09-14 16:12]
.
'Ajoitetut tehtävät'-kansion sisältö
"2008-01-25 07:04:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-03-07 21:51:03 C:\WINDOWS\Tasks\MP Scheduled Scan.job"
- C:\Program Files\Windows Defender\MpCmdRun.exe
"2008-02-17 20:00:00 C:\WINDOWS\Tasks\SmartDefrag.job"
- D:\Program Files\IObit SmartDefrag\schedule.exe;
"2008-03-07 11:04:00 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job"
- D:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
"2007-10-15 07:51:49 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job"
- D:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-08 00:31:01
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156]
-> D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
-> D:\Program Files\LClock\LC.dll
.
Completion time: 2008-03-08 0:31:50
ComboFix-quarantined-files.txt 2008-03-07 22:31:36
.
2008-03-07 08:28:31 --- E O F ---
Alkaako olla valoa näkyvissä?
Lataa SDFix by AndyManchesta
http://downloads.andymanchesta.com/RemovalTools/SDFix.zip
ja tallenna se työpöydällesi.
Käynnistä koneesi vikasietotilaan:
sammuta ja käynnistä
käynnistyksen yhteydessä hakkaa F8 nappia
valitse nuolinäppäimellä vikasietotila
paina enter ja enter
valitse käyttäjätilisi
paina kyllä
Jossakin koneissa hakataan F8:sin sijasta F5:tä
• Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä SDFix.
• Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
• Paina Y käynnistääksesi skriptin.
• Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
• Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
• Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
• Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
• Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
• Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.
tässä välissä Spybotilla joko olivat poissa, mutta se löysi vielä 2 rekisteriarvoa ja poisti ne. Boottasin koneen ja ajoin jälleen Spybotin läpi eikä enää löytynyt mitään. Olisikoha se siinä. Jos oli niin suuret KIITOKSET avusta, kun tänne mahtuu niin paljon paskanjauhaajiakin. P.S.Toi oli vain mun mielipide että se on poistettu.
SDFix raportti ja uusi hjt:n loki scannaten
[b]System Report[/b]
*************
Run on la 08.03.2008 at 15:40
Microsoft Windows XP [versio 5.1.2600]
Current user is an administrator
[b]Running Processes[/b]:
\SystemRoot\System32\smss.exe [516]
\??\C:\WINDOWS\system32\csrss.exe [572]
\??\C:\WINDOWS\system32\winlogon.exe [596]
C:\WINDOWS\system32\services.exe [640]
C:\WINDOWS\system32\lsass.exe [652]
C:\WINDOWS\system32\Ati2evxx.exe [800]
C:\WINDOWS\system32\svchost.exe [812]
C:\WINDOWS\system32\svchost.exe [908]
C:\Program Files\Windows Defender\MsMpEng.exe [972]
C:\WINDOWS\System32\svchost.exe [1016]
C:\WINDOWS\system32\svchost.exe [1048]
C:\WINDOWS\System32\svchost.exe [1096]
C:\WINDOWS\System32\svchost.exe [1272]
D:\Program Files\Lavasoft\aawservice.exe [1356]
C:\WINDOWS\system32\Ati2evxx.exe [1388]
C:\WINDOWS\Explorer.EXE [1444]
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [1508]
C:\Program Files\Alwil Software\Avast4\ashServ.exe [1576]
C:\WINDOWS\system32\spoolsv.exe [1864]
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe [1968]
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [1996]
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe [2040]
C:\WINDOWS\system32\HPZipm12.exe [408]
C:\WINDOWS\system32\svchost.exe [576]
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [1916]
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2052]
C:\WINDOWS\System32\alg.exe [2204]
C:\Program Files\Alwil Software\Avast4\ashDisp.exe [2356]
D:\Program Files\Vista Drive Icon\DrvIcon.exe [2392]
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe [2400]
C:\WINDOWS\system32\CTHELPER.EXE [2420]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2444]
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2488]
C:\WINDOWS\system32\ctfmon.exe [2496]
D:\Program Files\LClock\lclock.exe [2504]
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe [2552]
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe [2588]
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2636]
D:\Program Files\Webshots\webshots.scr [2676]
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [3264]
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe [3512]
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe [3612]
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe [3672]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [492]
F:\Poker\Club4Aces.com\Client.exe [3232]
F:\Poker\Club4Aces.com\jre\bin\javaw.exe [732]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [1680]
C:\Program Files\Windows Media Player\wmplayer.exe [2956]
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE [2780]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [3296]
C:\Program Files\GammaSutra\GammaSutra.exe [3796]
F:\Poker\T6\T6poker.exe [2776]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [2988]
[b]Drivers - Running[/b]:
a347bus
a347scsi
Aavmker4
ACPI
AFD
agp440
aswMon2
aswRdr
aswTdi
atapi
ati2mtag
audstub
AVG
AvgAsCln
Beep
catchme
Cdfs
Cdrom
ctac32k
ctaud2k
ctprxy2k
ctsfm2k
Disk
dmio
dmload
E100B
emupia
Fastfat
Fips
FltMgr
Ftdisk
gameenum
GEARAspiWDM
Gpc
ha10kx2k
HidUsb
i8042prt
IdeBusDr
IdeChnDr
Imapi
IntelIde
IpNat
IPSec
isapnp
Kbdclass
kmixer
KSecDD
mnmdd
Mouclass
mouhid
MountMgr
MRxDAV
MRxSmb
Msfs
mssmbios
Mup
NDIS
NdisTapi
NdisWan
NDProxy
NetBIOS
NetBT
Npfs
Ntfs
Null
ossrv
Parport
PartMgr
ParVdm
PCI
PCIIde
PfModNT
Point32
PptpMiniport
Processor
prodrv06
prohlp02
PSched
Ptilink
PxHelp20
RasAcd
Rasl2tp
RasPppoe
Raspti
Rdbss
RDPCDD
rdpdr
redbook
Secdrv
serenum
Serial
sfdrv01
sfhlp01
sfhlp02
sfsync02
sfvfs02
sr
Srv
swenum
sysaudio
Tcpip
TermDD
tmcomm
Update
usbehci
usbhub
usbuhci
VgaSave
VolSnap
Wanarp
wdmaud
WudfPf
[b]Drivers - Stopped[/b]:
Abiosdsk
abp480n5
ACPIEC
adpu160m
aec
Aha154x
aic78u2
aic78xx
AliIde
amsint
asc
asc3350p
asc3550
AsyncMac
Atdisk
Atmarpc
BootScreen
cbidf2k
cd20xrnt
Cdaudio
Changer
CmdIde
Cpqarray
ctljystk
dac960nt
dmboot
DMusic
dpti2o
drmkaud
emu10k
emu10k1
Fdc
Flpydisk
hpn
HPZid412
HPZipr12
HPZius12
HTTP
i2omgmt
i2omp
ini910u
intelppm
ip6fw
IpFilterDriver
IpInIp
IRENUM
L8042PR2
lbrtfdc
LHidFlt2
LMouFlt2
Modem
mraid35x
MSKSSRV
MSPCLOCK
MSPQM
ndiscm
Ndisuio
Nokia
Nokia
NwlnkFlt
NwlnkFwd
PCIDump
Pcmcia
PDCOMP
PDFRAME
PDRELI
PDRFRAME
perc2
perc2hib
ql1080
Ql10wnt
ql12160
ql1240
ql1280
RDPWD
Sfloppy
sfman
Simbad
Sparrow
splitter
swmidi
symc810
symc8xx
sym_hi
sym_u3
TDPIPE
TDTCP
TosIde
TRIXX
TVICHW32
Udfs
ultra
usbccgp
usbprint
usbscan
usbstor
ViaIde
wanusb
WDICA
WudfRd
[b]Services - Running[/b]:
aawservice
ALG
AshampooDefragService
aswUpdSv
Ati
AudioSrv
avast!
avast!
avast!
AVG
BITS
Browser
CryptSvc
DcomLaunch
Dhcp
dmserver
Dnscache
ERSvc
Eventlog
EventSystem
helpsvc
HidServ
lanmanserver
LanmanWorkstation
LmHosts
Netman
Nla
PlugPlay
Pml
PolicyAgent
ProtectedStorage
RasMan
RpcSs
SamSs
Schedule
seclogon
SENS
ServiceLayer
SharedAccess
ShellHWDetection
Spooler
srservice
stisvc
TapiSrv
Themes
TrkWks
W32Time
WebClient
WinDefend
winmgmt
wscsvc
wuauserv
WudfSvc
[b]Services - Stopped[/b]:
Alerter
Apple
AppMgmt
aspnet_state
ATI
CiSvc
ClipSrv
clr_optimization_v2.0.50727_32
COMSysApp
dmadmin
FastUserSwitchingCompatibility
FontCache3.0.0.0
gusvc
HTTPFilter
IDriverT
idsvc
IISADMIN
ImapiService
iPod
Messenger
mnmsrvc
MSDTC
MSFtpsvc
MSIServer
NetDDE
NetDDEdsdm
Netlogon
NetTcpPortSharing
NtLmSsp
NtmsSvc
RasAuto
RDSessMgr
RemoteAccess
RemoteRegistry
RpcLocator
RSVP
SCardSvr
SMTPSVC
SNMP
SNMPTRAP
SSDPSRV
SwPrv
SysmonLog
TermService
TlntSvr
upnphost
UPS
VSS
WMConnectCDS
WmdmPmSN
Wmi
WmiApSrv
WMPNetworkSvc
WZCSVC
xmlprov
[b]Files Created/Modified - 60 Days[/b]:
C:\
NV‹÷¸ GÍ!‹þ^ s €= t €= tGëøª8uFIãó¤é¨ özšu·;‹{š xšÂ_• - 1252,
22 Feb 2008 21.26.32 194 ..SH. "C:\boot.ini"
8 Mar 2008 0.31.52 20 294 A.... "C:\ComboFix.txt"
3 Mar 2008 1.11.42 157 A.... "C:\error.txt"
8 Mar 2008 12.16.24 1 609 420 800 A.SH. "C:\hiberfil.sys"
22 Feb 2008 16.24.20 47 564 A.SHR "C:\NTDETECT.COM"
22 Feb 2008 16.24.20 250 112 A.SHR "C:\ntldr"
8 Mar 2008 12.16.22 2 145 386 496 A.SH. "C:\pagefile.sys"
7 Mar 2008 15.48.06 2 312 A.... "C:\rapport.txt"
C:\WINDOWS\
8 Jan 2008 9.34.42 11 942 A.... "C:\WINDOWS\atiogl.xml"
8 Mar 2008 12.16.26 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
27 Feb 2008 0.34.34 2 359 350 A.... "C:\WINDOWS\BricoPack Wallpaper.bmp"
27 Feb 2008 0.34.46 5 466 A.... "C:\WINDOWS\BricoPackFoldersDelete.cmd"
27 Feb 2008 0.34.46 70 821 A.... "C:\WINDOWS\BricoPackUninst.txt"
27 Feb 2008 0.34.46 70 821 A.... "C:\WINDOWS\BricoPackUninst.cmd"
17 Feb 2008 2.42.08 116 A.... "C:\WINDOWS\NeroDigital.ini"
22 Feb 2008 15.00.46 4 784 A.... "C:\WINDOWS\ODBCINST.INI"
9 Feb 2008 20.01.54 27 A.... "C:\WINDOWS\popcinfot.dat"
31 Jan 2008 19.05.32 1 409 A.... "C:\WINDOWS\QTFont.for"
8 Feb 2008 19.03.06 54 156 A..H. "C:\WINDOWS\QTFont.qfn"
26 Feb 2008 16.28.12 128 A.... "C:\WINDOWS\SBWIN.INI"
8 Mar 2008 12.15.34 11 568 A.... "C:\WINDOWS\SchedLgU.Txt"
8 Mar 2008 10.52.24 60 A.... "C:\WINDOWS\setupact.log"
8 Mar 2008 10.52.24 0 A.... "C:\WINDOWS\setuperr.log"
26 Feb 2008 13.12.34 0 ..... "C:\WINDOWS\Sti_Trace.log"
8 Mar 2008 0.31.00 227 A.... "C:\WINDOWS\system.ini"
8 Mar 2008 12.16.46 157 A.... "C:\WINDOWS\wiadebug.log"
8 Mar 2008 12.16.44 48 A.... "C:\WINDOWS\wiaservc.log"
7 Mar 2008 12.51.54 925 A.... "C:\WINDOWS\win.ini"
8 Mar 2008 15.19.40 677 831 A.... "C:\WINDOWS\WindowsUpdate.log"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\WindowsShell.Manifest"
5 Mar 2008 1.10.04 214 A.... "C:\WINDOWS\WININIT.INI"
22 Feb 2008 21.57.14 316 640 A.... "C:\WINDOWS\WMSysPr9.prx"
26 Feb 2008 17.05.18 3 373 917 A.... "C:\WINDOWS\{00000002-00000000-00000002-00001102-00000002-80271102}.CDF"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00001"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00002"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00003"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00004"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00005"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00006"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00007"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00008"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00009"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00010"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00011"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00012"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00013"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00014"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00015"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00016"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00017"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00018"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00019"
22 Feb 2008 19.56.22 12 288 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00020"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00021"
22 Feb 2008 19.56.26 5 365 760 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00022"
22 Feb 2008 19.59.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB891781$\reg00002"
22 Feb 2008 20.00.44 8 192 A.... "C:\WINDOWS\$NtUninstallKB887472$\reg00002"
22 Feb 2008 19.30.20 8 192 A.... "C:\WINDOWS\$NtUninstallKB886185$\reg00002"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00001"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00002"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00003"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00004"
22 Feb 2008 19.29.58 8 192 A.... "C:\WINDOWS\$NtUninstallKB885884$\reg00002"
3 Mar 2008 4.06.22 45 056 A.... "C:\WINDOWS\BDOSCAN8\avxdisk.dll"
3 Mar 2008 4.06.22 10 240 A.... "C:\WINDOWS\BDOSCAN8\avxs.dll"
3 Mar 2008 4.06.22 27 136 A.... "C:\WINDOWS\BDOSCAN8\avxt.dll"
3 Mar 2008 4.06.24 181 760 A.... "C:\WINDOWS\BDOSCAN8\bdcore.dll"
3 Mar 2008 4.06.18 87 A.... "C:\WINDOWS\BDOSCAN8\bdoscan.ini"
3 Mar 2008 9.37.10 2 008 A.... "C:\WINDOWS\BDOSCAN8\bdoscan.log"
9 Jan 2008 15.01.48 118 784 A.... "C:\WINDOWS\BDOSCAN8\bdupd.dll"
3 Mar 2008 4.06.24 77 824 A.... "C:\WINDOWS\BDOSCAN8\bdupd.dll.updpnd"
3 Mar 2008 4.06.22 1 878 A.... "C:\WINDOWS\BDOSCAN8\boot.xmd"
9 Jan 2008 15.01.48 53 248 A.... "C:\WINDOWS\BDOSCAN8\ipsupd.dll"
6 Feb 2008 15.12.02 7 350 A.... "C:\WINDOWS\BDOSCAN8\lang.ini"
3 Mar 2008 4.06.24 142 848 A.... "C:\WINDOWS\BDOSCAN8\libfn.dll"
3 Mar 2008 4.06.22 86 016 A.... "C:\WINDOWS\BDOSCAN8\librtvr.dll"
21 Jan 2008 17.43.22 130 A.... "C:\WINDOWS\BDOSCAN8\live.ini"
3 Mar 2008 4.06.22 471 040 A.... "C:\WINDOWS\BDOSCAN8\oscan82.ocx"
3 Mar 2008 4.07.20 14 999 A.... "C:\WINDOWS\BDOSCAN8\plugins.htm"
3 Mar 2008 4.06.22 254 A.... "C:\WINDOWS\BDOSCAN8\rtvr2.html"
3 Mar 2008 4.06.22 4 746 A.... "C:\WINDOWS\BDOSCAN8\rtvr.html"
3 Mar 2008 4.06.22 6 828 A.... "C:\WINDOWS\BDOSCAN8\scanoptions.tsi"
3 Mar 2008 4.06.22 6 828 A.... "C:\WINDOWS\BDOSCAN8\scanoptions.tsk"
3 Mar 2008 4.06.22 195 A.... "C:\WINDOWS\BDOSCAN8\scanres2.html"
3 Mar 2008 4.06.22 17 067 A.... "C:\WINDOWS\BDOSCAN8\scanres.html"
3 Mar 2008 5.51.52 19 456 A.... "C:\WINDOWS\BDOSCAN8\scanrep.html"
3 Mar 2008 4.06.22 86 016 A.... "C:\WINDOWS\BDOSCAN8\upd82.bpx"
8 Mar 2008 12.16.26 0 A.... "C:\WINDOWS\Debug\PASSWD.LOG"
8 Jan 2008 14.38.44 290 816 A.... "C:\WINDOWS\Downloaded Program Files\auc_lib.dll"
8 Jan 2008 14.38.44 541 A.... "C:\WINDOWS\Downloaded Program Files\ca.pub"
11 Jan 2008 14.45.50 495 616 A.... "C:\WINDOWS\Downloaded Program Files\daas_s.dll"
22 Feb 2008 15.00.42 65 ...H. "C:\WINDOWS\Downloaded Program Files\desktop.ini"
25 Jan 2008 15.11.06 588 392 A.... "C:\WINDOWS\Downloaded Program Files\gatelauncher.exe"
16 Jan 2008 7.37.14 901 A.... "C:\WINDOWS\Downloaded Program Files\mcfscan.inf"
31 Jan 2008 19.55.00 144 A.... "C:\WINDOWS\Downloaded Program Files\QTPlugin.inf"
22 Feb 2008 15.01.20 67 A.SH. "C:\WINDOWS\Fonts\desktop.ini"
22 Feb 2008 16.30.04 49 300 A.... "C:\WINDOWS\inf\accessor.PNF"
23 Feb 2008 13.38.54 14 772 A.... "C:\WINDOWS\inf\au.PNF"
23 Feb 2008 13.38.54 20 236 A.... "C:\WINDOWS\inf\bda.PNF"
23 Feb 2008 13.38.54 69 256 A.... "C:\WINDOWS\inf\biosinfo.PNF"
11 Jan 2008 7.58.54 705 A.... "C:\WINDOWS\inf\branches.inf"
29 Feb 2008 19.59.32 4 100 A.... "C:\WINDOWS\inf\branches.PNF"
23 Feb 2008 13.38.56 9 644 A.... "C:\WINDOWS\inf\ccdecode.PNF"
22 Feb 2008 16.29.20 16 996 A.... "C:\WINDOWS\inf\cpu.PNF"
23 Feb 2008 13.38.56 322 320 A.... "C:\WINDOWS\inf\defltwk.PNF"
23 Feb 2008 13.38.56 39 428 A.... "C:\WINDOWS\inf\devxprop.PNF"
22 Feb 2008 16.29.22 222 180 A.... "C:\WINDOWS\inf\drvindex.PNF"
23 Feb 2008 13.38.56 330 308 A.... "C:\WINDOWS\inf\dwup.PNF"
22 Feb 2008 14.32.02 4 592 A.... "C:\WINDOWS\inf\FlashAX.PNF"
22 Feb 2008 16.30.02 17 616 A.... "C:\WINDOWS\inf\fp40ext.PNF"
22 Feb 2008 16.29.58 56 168 A.... "C:\WINDOWS\inf\fxsocm.PNF"
23 Feb 2008 13.38.56 9 476 A.... "C:\WINDOWS\inf\HidDigi.PNF"
22 Feb 2008 16.54.34 12 720 A.... "C:\WINDOWS\inf\hidserv.PNF"
23 Feb 2008 13.38.56 18 092 A.... "C:\WINDOWS\inf\i81xnt5.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp0.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp1.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp2.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp3.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp4.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv0.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv1.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv2.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv3.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv4.PNF"
23 Feb 2008 13.38.58 83 912 A.... "C:\WINDOWS\inf\ie.PNF"
26 Feb 2008 15.55.04 1 618 A.... "C:\WINDOWS\inf\ieaccess.inf"
26 Feb 2008 15.55.48 4 448 A.... "C:\WINDOWS\inf\ieaccess.PNF"
22 Feb 2008 16.30.00 977 388 A.... "C:\WINDOWS\inf\iis.PNF"
22 Feb 2008 16.30.02 105 256 A.... "C:\WINDOWS\inf\ims.PNF"
29 Feb 2008 19.59.34 1 517 744 A.... "C:\WINDOWS\inf\INFCACHE.1"
22 Feb 2008 16.54.34 100 156 A.... "C:\WINDOWS\inf\input.PNF"
23 Feb 2008 13.38.58 427 488 A.... "C:\WINDOWS\inf\intl.PNF"
23 Feb 2008 13.38.58 18 840 A.... "C:\WINDOWS\inf\irbus.PNF"
22 Feb 2008 16.54.26 57 788 A.... "C:\WINDOWS\inf\keyboard.PNF"
23 Feb 2008 13.35.30 92 268 A.... "C:\WINDOWS\inf\ks.PNF"
23 Feb 2008 13.38.58 43 684 A.... "C:\WINDOWS\inf\kscaptur.PNF"
22 Feb 2008 16.54.44 24 720 A.... "C:\WINDOWS\inf\ksfilter.PNF"
22 Feb 2008 16.29.10 1 041 036 A.... "C:\WINDOWS\inf\LAYOUT.PNF"
22 Feb 2008 16.54.26 187 452 A.... "C:\WINDOWS\inf\machine.PNF"
23 Feb 2008 13.38.58 30 256 A.... "C:\WINDOWS\inf\mchgr.PNF"
23 Feb 2008 13.38.58 17 572 A.... "C:\WINDOWS\inf\mdac.PNF"
23 Feb 2008 13.39.00 107 872 A.... "C:\WINDOWS\inf\mdmirmdm.PNF"
23 Feb 2008 13.39.00 15 196 A.... "C:\WINDOWS\inf\moviemk.PNF"
23 Feb 2008 13.39.00 8 284 A.... "C:\WINDOWS\inf\mpe.PNF"
23 Feb 2008 13.39.00 30 756 A.... "C:\WINDOWS\inf\mplayer2.PNF"
23 Feb 2008 13.39.00 49 572 A.... "C:\WINDOWS\inf\mshdc.PNF"
22 Feb 2008 16.30.02 87 616 A.... "C:\WINDOWS\inf\msmsgs.PNF"
23 Feb 2008 13.39.00 61 124 A.... "C:\WINDOWS\inf\msnetmtg.PNF"
22 Feb 2008 16.30.08 7 556 A.... "C:\WINDOWS\inf\msnmsn.PNF"
23 Feb 2008 13.39.00 36 236 A.... "C:\WINDOWS\inf\msoe50.PNF"
23 Feb 2008 13.39.00 23 880 A.... "C:\WINDOWS\inf\mstape.PNF"
10 Jan 2008 5.17.10 5 914 A.... "C:\WINDOWS\inf\msxmlx.PNF"
25 Feb 2008 9.50.20 4 624 A.... "C:\WINDOWS\inf\msxpsdrv.PNF"
22 Feb 2008 16.30.04 12 208 A.... "C:\WINDOWS\inf\multimed.PNF"
23 Feb 2008 13.39.00 7 872 A.... "C:\WINDOWS\inf\mymusic.PNF"
23 Feb 2008 13.39.00 9 636 A.... "C:\WINDOWS\inf\nabtsfec.PNF"
23 Feb 2008 13.39.02 9 120 A.... "C:\WINDOWS\inf\ndisip.PNF"
22 Feb 2008 14.31.58 14 472 A.... "C:\WINDOWS\inf\net3c985.PNF"
22 Feb 2008 14.31.58 83 136 A.... "C:\WINDOWS\inf\net557.PNF"
22 Feb 2008 14.31.58 8 012 A.... "C:\WINDOWS\inf\net650d.PNF"
22 Feb 2008 14.31.58 8 636 A.... "C:\WINDOWS\inf\net713.PNF"
22 Feb 2008 14.31.58 7 800 A.... "C:\WINDOWS\inf\netac300.PNF"
22 Feb 2008 14.31.58 9 836 A.... "C:\WINDOWS\inf\netamd.PNF"
22 Feb 2008 14.31.58 18 056 A.... "C:\WINDOWS\inf\netamd2.PNF"
22 Feb 2008 16.30.08 3 652 A.... "C:\WINDOWS\inf\netbeac.PNF"
22 Feb 2008 14.31.58 8 552 A.... "C:\WINDOWS\inf\netdf650.PNF"
22 Feb 2008 14.31.58 30 020 A.... "C:\WINDOWS\inf\nete1000.PNF"
22 Feb 2008 14.31.58 8 324 A.... "C:\WINDOWS\inf\netejxmp.PNF"
22 Feb 2008 14.31.58 12 032 A.... "C:\WINDOWS\inf\netel90a.PNF"
22 Feb 2008 14.31.58 19 568 A.... "C:\WINDOWS\inf\netel90b.PNF"
22 Feb 2008 14.31.58 17 428 A.... "C:\WINDOWS\inf\netel99x.PNF"
22 Feb 2008 14.31.58 7 996 A.... "C:\WINDOWS\inf\netfa410.PNF"
22 Feb 2008 16.30.08 174 876 A.... "C:\WINDOWS\inf\netfxocm.PNF"
23 Feb 2008 13.39.02 12 940 A.... "C:\WINDOWS\inf\netip6.PNF"
22 Feb 2008 14.31.58 9 556 A.... "C:\WINDOWS\inf\netirda.PNF"
22 Feb 2008 14.31.22 24 512 A.... "C:\WINDOWS\inf\netirsir.PNF"
23 Feb 2008 13.39.02 20 432 A.... "C:\WINDOWS\inf\netmscli.PNF"
22 Feb 2008 14.31.58 10 916 A.... "C:\WINDOWS\inf\netngr.PNF"
22 Feb 2008 16.29.58 16 960 A.... "C:\WINDOWS\inf\netoc.PNF"
22 Feb 2008 14.31.58 10 276 A.... "C:\WINDOWS\inf\netpnic.PNF"
23 Feb 2008 13.39.02 45 452 A.... "C:\WINDOWS\inf\netrass.PNF"
23 Feb 2008 13.39.02 20 020 A.... "C:\WINDOWS\inf\netrtsnt.PNF"
23 Feb 2008 13.39.02 38 264 A.... "C:\WINDOWS\inf\nettcpip.PNF"
23 Feb 2008 13.39.02 6 356 A.... "C:\WINDOWS\inf\nettun.PNF"
23 Feb 2008 13.39.02 8 932 A.... "C:\WINDOWS\inf\netupnph.PNF"
22 Feb 2008 14.31.56 9 948 A.... "C:\WINDOWS\inf\netw840.PNF"
23 Feb 2008 13.39.02 7 004 A.... "C:\WINDOWS\inf\netwzc.PNF"
22 Feb 2008 14.31.56 19 400 A.... "C:\WINDOWS\inf\netx500.PNF"
24 Jan 2008 10.55.26 78 340 A.... "C:\WINDOWS\inf\nokirmdm.PNF"
22 Feb 2008 16.54.48 1 317 396 A.... "C:\WINDOWS\inf\ntprint.PNF"
23 Feb 2008 13.39.04 53 292 A.... "C:\WINDOWS\inf\nv4_disp.PNF"
23 Feb 2008 13.39.04 22 148 A.... "C:\WINDOWS\inf\nvct.PNF"
23 Feb 2008 13.39.04 34 060 A.... "C:\WINDOWS\inf\nvdm.PNF"
23 Feb 2008 13.39.04 22 196 A.... "C:\WINDOWS\inf\nvts.PNF"
22 Feb 2008 16.30.04 4 384 A.... "C:\WINDOWS\inf\oeaccess.PNF"
31 Jan 2008 21.40.46 25 870 A.... "C:\WINDOWS\inf\oem14.PNF"
31 Jan 2008 21.40.00 9 648 A.... "C:\WINDOWS\inf\oem15.PNF"
26 Feb 2008 16.27.50 34 170 A.... "C:\WINDOWS\inf\oem20.PNF"
26 Feb 2008 16.28.04 6 074 A.... "C:\WINDOWS\inf\oem21.PNF"
26 Feb 2008 13.22.26 159 672 A.... "C:\WINDOWS\inf\oem23.PNF"
22 Feb 2008 20.17.20 1 646 624 A.... "C:\WINDOWS\inf\oem38.PNF"
23 Feb 2008 13.37.54 34 466 A.... "C:\WINDOWS\inf\oem39.PNF"
31 Jan 2008 21.40.02 30 418 A.... "C:\WINDOWS\inf\oem48.PNF"
23 Feb 2008 13.38.04 6 074 A.... "C:\WINDOWS\inf\oem49.PNF"
31 Jan 2008 21.41.10 7 764 A.... "C:\WINDOWS\inf\oem60.PNF"
12 Jan 2008 14.18.54 37 830 A.... "C:\WINDOWS\inf\oem61.PNF"
12 Jan 2008 14.20.10 94 080 A.... "C:\WINDOWS\inf\oem63.PNF"
31 Jan 2008 21.31.56 66 898 A.... "C:\WINDOWS\inf\oem8.PNF"
31 Jan 2008 21.40.00 12 684 A.... "C:\WINDOWS\inf\oem9.PNF"
23 Feb 2008 13.39.04 17 240 A.... "C:\WINDOWS\inf\oobe.PNF"
23 Feb 2008 13.39.04 12 992 A.... "C:\WINDOWS\inf\pchealth.PNF"
22 Feb 2008 16.54.36 105 488 A.... "C:\WINDOWS\inf\pnpscsi.PNF"
23 Feb 2008 13.39.04 11 488 A.... "C:\WINDOWS\inf\qmgr.PNF"
23 Feb 2008 13.39.04 7 132 A.... "C:\WINDOWS\inf\ramdisk.PNF"
22 Feb 2008 14.31.54 7 924 A.... "C:\WINDOWS\inf\s3nb.PNF"
22 Feb 2008 19.22.18 40 440 A.... "C:\WINDOWS\inf\sceregvl.PNF"
23 Feb 2008 13.39.06 21 952 A.... "C:\WINDOWS\inf\scsi.PNF"
23 Feb 2008 13.39.06 26 312 A.... "C:\WINDOWS\inf\secrecs.PNF"
23 Feb 2008 13.39.06 38 636 A.... "C:\WINDOWS\inf\shell.PNF"
23 Feb 2008 13.39.06 15 728 A.... "C:\WINDOWS\inf\shl_img.PNF"
26 Feb 2008 14.38.38 6 028 A.... "C:\WINDOWS\inf\skins.PNF"
23 Feb 2008 13.39.06 9 196 A.... "C:\WINDOWS\inf\slip.PNF"
23 Feb 2008 13.39.06 36 396 A.... "C:\WINDOWS\inf\smartcrd.PNF"
23 Feb 2008 13.39.06 11 956 A.... "C:\WINDOWS\inf\streamip.PNF"
23 Feb 2008 13.39.06 5 724 A.... "C:\WINDOWS\inf\swflash.PNF"
22 Feb 2008 16.29.58 7 272 A.... "C:\WINDOWS\inf\SYSOC.PNF"
23 Feb 2008 12.22.26 101 660 A.... "C:\WINDOWS\inf\syssetup.PNF"
22 Feb 2008 16.30.06 523 716 A.... "C:\WINDOWS\inf\tabletpc.PNF"
23 Feb 2008 13.39.06 60 012 A.... "C:\WINDOWS\inf\tape.PNF"
22 Feb 2008 16.30.00 122 632 A.... "C:\WINDOWS\inf\tsoc.PNF"
22 Feb 2008 16.54.38 51 400 A.... "C:\WINDOWS\inf\usbport.PNF"
22 Feb 2008 14.31.54 21 384 A.... "C:\WINDOWS\inf\wab50.PNF"
22 Feb 2008 16.30.04 4 072 A.... "C:\WINDOWS\inf\wmaccess.PNF"
22 Feb 2008 16.29.10 57 060 A.... "C:\WINDOWS\inf\wmp.PNF"
22 Feb 2008 16.30.04 4 440 A.... "C:\WINDOWS\inf\wmpocm.PNF"
22 Feb 2008 16.30.06 16 752 A.... "C:\WINDOWS\inf\wordpad.PNF"
23 Feb 2008 13.39.08 9 200 A.... "C:\WINDOWS\inf\wstcodec.PNF"
3 Mar 2008 16.46.00 4 098 A.... "C:\WINDOWS\network diagnostic\xpnetdiag.xml"
22 Feb 2008 15.00.42 65 ...H. "C:\WINDOWS\Offline Web Pages\desktop.ini"
7 Feb 2008 14.04.20 2 567 A.... "C:\WINDOWS\repair\config.nt"
22 Feb 2008 15.06.08 1 564 672 A.... "C:\WINDOWS\repair\default"
22 Feb 2008 15.01.32 1 564 672 A..H. "C:\WINDOWS\repair\ntuser.dat"
22 Feb 2008 15.06.08 28 672 A.... "C:\WINDOWS\repair\sam"
22 Feb 2008 15.06.08 53 248 A.... "C:\WINDOWS\repair\security"
22 Feb 2008 15.00.12 181 505 A.... "C:\WINDOWS\repair\setup.log"
22 Feb 2008 15.06.08 35 504 128 A.... "C:\WINDOWS\repair\software"
22 Feb 2008 15.04.24 2 379 776 A.... "C:\WINDOWS\repair\system"
22 Feb 2008 15.06.10 288 A.... "C:\WINDOWS\system32\$winnt$.inf"
10 Jan 2008 5.29.20 2 188 A.... "C:\WINDOWS\system32\50001T.dll"
23 Feb 2008 17.26.58 16 832 A.... "C:\WINDOWS\system32\amcompat.tlb"
22 Jan 2008 22.04.26 46 080 A.... "C:\WINDOWS\system32\amdpcom32.dll"
8 Mar 2008 12.15.38 24 264 A.... "C:\WINDOWS\system32\BMXBkpCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 24 264 A.... "C:\WINDOWS\system32\BMXCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 16 324 A.... "C:\WINDOWS\system32\BMXState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 16 324 A.... "C:\WINDOWS\system32\BMXStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\cdplayer.exe.manifest"
7 Feb 2008 14.04.20 2 567 A.... "C:\WINDOWS\system32\CONFIG.NT"
7 Mar 2008 20.39.04 4 096 A.... "C:\WINDOWS\system32\crash"
9 Feb 2008 16.13.34 6 820 A.... "C:\WINDOWS\system32\d3d9caps.dat"
8 Mar 2008 12.15.38 24 A.... "C:\WINDOWS\system32\DVCState-{00000002-00000000-00000002-00001102-00000002-80271102}.dat"
8 Mar 2008 12.15.38 24 A.... "C:\WINDOWS\system32\DVCStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.dat"
26 Feb 2008 19.57.06 2 492 A.... "C:\WINDOWS\system32\ealregsnapshot1.reg"
7 Mar 2008 12.35.40 134 872 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
7 Mar 2008 12.43.24 1 406 A.... "C:\WINDOWS\system32\Help.ico"
26 Feb 2008 2.37.34 1 280 A.... "C:\WINDOWS\system32\history.aaw"
17 Feb 2008 1.35.14 5 757 A.... "C:\WINDOWS\system32\jupdate-1.6.0_04-b12.log"
22 Feb 2008 15.00.42 488 A..HR "C:\WINDOWS\system32\logonui.exe.manifest"
1 Feb 2008 1.10.10 12 632 A.... "C:\WINDOWS\system32\lsdelete.exe"
4 Feb 2008 15.09.48 18 214 008 A.... "C:\WINDOWS\system32\MRT.exe"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\ncpa.cpl.manifest"
23 Feb 2008 17.26.58 23 392 A.... "C:\WINDOWS\system32\nscompat.tlb"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\nwc.cpl.manifest"
7 Mar 2008 12.43.24 30 590 A.... "C:\WINDOWS\system32\pavas.ico"
25 Feb 2008 9.53.08 71 696 A.... "C:\WINDOWS\system32\perfc009.dat"
25 Feb 2008 9.53.08 85 752 A.... "C:\WINDOWS\system32\perfc00B.dat"
25 Feb 2008 9.53.08 442 204 A.... "C:\WINDOWS\system32\perfh009.dat"
25 Feb 2008 9.53.08 417 048 A.... "C:\WINDOWS\system32\perfh00B.dat"
25 Feb 2008 9.53.08 987 254 A.... "C:\WINDOWS\system32\PerfStringBackup.INI"
11 Jan 2008 7.37.34 44 544 A.... "C:\WINDOWS\system32\pngfilt.dll"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\sapi.cpl.manifest"
26 Feb 2008 2.37.36 2 560 A.... "C:\WINDOWS\system32\settings.aaw"
8 Mar 2008 12.15.38 1 080 A.... "C:\WINDOWS\system32\settings.sfm"
8 Mar 2008 12.15.38 1 080 A.... "C:\WINDOWS\system32\settingsbkup.sfm"
22 Feb 2008 21.56.52 90 A.... "C:\WINDOWS\system32\spupdwxp.log"
7 Mar 2008 15.44.18 4 062 A.... "C:\WINDOWS\system32\tmp.reg"
7 Mar 2008 15.44.18 0 A.... "C:\WINDOWS\system32\tmp.txt"
7 Mar 2008 12.43.24 2 550 A.... "C:\WINDOWS\system32\Uninstall.ico"
27 Feb 2008 0.34.46 219 136 A.... "C:\WINDOWS\system32\uxtheme.dll"
22 Feb 2008 15.00.42 488 A..HR "C:\WINDOWS\system32\WindowsLogon.manifest"
7 Mar 2008 10.25.20 12 686 A.... "C:\WINDOWS\system32\wpa.dbl"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\wuaucpl.cpl.manifest"
8 Mar 2008 12.19.46 330 A..H. "C:\WINDOWS\Tasks\MP Scheduled Scan.job"
8 Mar 2008 12.16.38 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
17 Feb 2008 22.00.02 442 A.... "C:\WINDOWS\Tasks\SmartDefrag.job"
8 Mar 2008 12.18.48 9 928 A.... "C:\WINDOWS\Temp\addonscheck.xml"
4 Mar 2008 14.17.42 991 A.... "C:\WINDOWS\Temp\D653F3EC.TMP"
8 Mar 2008 15.32.42 1 316 A.... "C:\WINDOWS\Temp\ggp16.tmp"
8 Mar 2008 13.09.38 6 737 A.... "C:\WINDOWS\Temp\jar_cache62011.tmp"
8 Mar 2008 13.50.12 2 384 A.... "C:\WINDOWS\Temp\java_install_reg.log"
8 Mar 2008 12.21.58 167 A.... "C:\WINDOWS\Temp\jusched.log"
8 Mar 2008 12.36.52 1 710 A.... "C:\WINDOWS\Temp\MpCmdRun.log"
8 Mar 2008 12.18.48 5 630 A.... "C:\WINDOWS\Temp\pcsuitecheck_new.xml"
8 Mar 2008 15.36.44 80 518 A.... "C:\WINDOWS\Temp\scs1A.tmp"
8 Mar 2008 12.16.28 255 A.... "C:\WINDOWS\Temp\WGAErrLog.txt"
8 Mar 2008 13.05.56 512 A.... "C:\WINDOWS\Temp\~DF203A.tmp"
8 Mar 2008 13.05.56 512 A.... "C:\WINDOWS\Temp\~DF258A.tmp"
8 Mar 2008 13.04.26 16 384 A.... "C:\WINDOWS\Temp\~DFAD06.tmp"
8 Mar 2008 13.04.26 512 A.... "C:\WINDOWS\Temp\~DFAD0D.tmp"
8 Mar 2008 8.43.08 49 152 A.... "C:\WINDOWS\Temp\~DFD86C.tmp"
22 Feb 2008 19.48.22 6 720 A.... "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.inf"
22 Feb 2008 19.48.12 552 A.... "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.txt"
22 Feb 2008 20.23.56 4 662 A.... "C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.inf"
22 Feb 2008 20.23.44 0 A.... "C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.txt"
22 Feb 2008 19.56.50 14 581 A.... "C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.inf"
22 Feb 2008 19.56.26 3 945 A.... "C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.txt"
22 Feb 2008 20.04.04 6 516 A.... "C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.inf"
22 Feb 2008 20.03.58 316 A.... "C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.txt"
22 Feb 2008 18.44.10 4 408 A.... "C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.inf"
22 Feb 2008 18.43.32 87 A.... "C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.txt"
22 Feb 2008 19.59.42 6 452 A.... "C:\WINDOWS\$NtUninstallKB942830$\spuninst\spuninst.inf"
22 Feb 2008 19.59.38 312 A.... "C:\WINDOWS\$NtUninstallKB942830$\spuninst\spuninst.txt"
22 Feb 2008 19.47.22 6 256 A.... "C:\WINDOWS\$NtUninstallKB942831$\spuninst\spuninst.inf"
22 Feb 2008 19.47.06 328 A.... "C:\WINDOWS\$NtUninstallKB942831$\spuninst\spuninst.txt"
22 Feb 2008 19.59.50 6 467 A.... "C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.inf"
22 Feb 2008 19.59.46 1 074 A.... "C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.txt"
22 Feb 2008 20.00.48 6 357 A.... "C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.inf"
22 Feb 2008 20.00.44 1 044 A.... "C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.txt"
22 Feb 2008 19.30.26 6 049 A.... "C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.inf"
22 Feb 2008 19.30.20 1 043 A.... "C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.txt"
22 Feb 2008 19.57.02 6 479 A.... "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.inf"
22 Feb 2008 19.56.58 331 A.... "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.txt"
22 Feb 2008 19.07.22 6 411 A.... "C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.inf"
22 Feb 2008 19.06.46 312 A.... "C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.txt"
22 Feb 2008 19.08.56 5 410 A.... "C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.inf"
22 Feb 2008 19.08.26 180 A.... "C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.txt"
22 Feb 2008 19.30.12 4 929 A.... "C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.inf"
22 Feb 2008 19.29.58 0 A.... "C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.txt"
22 Feb 2008 19.59.34 6 735 A.... "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.inf"
22 Feb 2008 19.59.30 608 A.... "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.txt"
22 Feb 2008 20.23.18 4 750 A.... "C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.inf"
22 Feb 2008 20.23.04 0 A.... "C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.txt"
22 Feb 2008 20.23.36 4 750 A.... "C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.inf"
22 Feb 2008 20.23.24 0 A.... "C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.txt"
22 Feb 2008 20.23.00 4 750 A.... "C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.inf"
22 Feb 2008 20.22.38 0 A.... "C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.txt"
22 Feb 2008 18.32.58 4 092 A.... "C:\WINDOWS\$NtUninstallKB885836_0$\spuninst\spuninst.inf"
22 Feb 2008 18.31.56 0 A.... "C:\WINDOWS\$NtUninstallKB885836_0$\spuninst\spuninst.txt"
22 Feb 2008 18.43.22 4 212 A.... "C:\WINDOWS\$NtUninstallKB885836_1$\spuninst\spuninst.inf"
22 Feb 2008 18.42.44 0 A.... "C:\WINDOWS\$NtUninstallKB885836_1$\spuninst\spuninst.txt"
22 Feb 2008 18.31.32 4 180 A.... "C:\WINDOWS\$NtUninstallKB885835_1$\spuninst\spuninst.inf"
22 Feb 2008 18.30.56 0 A.... "C:\WINDOWS\$NtUninstallKB885835_1$\spuninst\spuninst.txt"
22 Feb 2008 18.42.40 4 212 A.... "C:\WINDOWS\$NtUninstallKB885835_2$\spuninst\spuninst.inf"
22 Feb 2008 18.42.06 0 A.... "C:\WINDOWS\$NtUninstallKB885835_2$\spuninst\spuninst.txt"
22 Feb 2008 18.42.00 4 212 A.... "C:\WINDOWS\$NtUninstallKB873339_3$\spuninst\spuninst.inf"
22 Feb 2008 18.41.16 0 A.... "C:\WINDOWS\$NtUninstallKB873339_3$\spuninst\spuninst.txt"
26 Feb 2008 15.53.40 6 160 A.... "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.inf"
26 Feb 2008 15.54.12 6 746 A.... "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.inf"
22 Feb 2008 16.30.56 4 028 A.... "C:\WINDOWS\$NtUninstallKB873339_0$\spuninst\spuninst.inf"
22 Feb 2008 16.30.22 0 A.... "C:\WINDOWS\$NtUninstallKB873339_0$\spuninst\spuninst.txt"
22 Feb 2008 18.20.08 4 148 A.... "C:\WINDOWS\$NtUninstallKB873339_1$\spuninst\spuninst.inf"
22 Feb 2008 18.19.24 0 A.... "C:\WINDOWS\$NtUninstallKB873339_1$\spuninst\spuninst.txt"
22 Feb 2008 18.20.50 5 056 A.... "C:\WINDOWS\$NtUninstallKB885835_0$\spuninst\spuninst.inf"
22 Feb 2008 18.20.16 323 A.... "C:\WINDOWS\$NtUninstallKB885835_0$\spuninst\spuninst.txt"
22 Feb 2008 18.30.50 4 180 A.... "C:\WINDOWS\$NtUninstallKB873339_2$\spuninst\spuninst.inf"
22 Feb 2008 18.30.10 0 A.... "C:\WINDOWS\$NtUninstallKB873339_2$\spuninst\spuninst.txt"
3 Mar 2008 4.06.24 40 748 A.... "C:\WINDOWS\BDOSCAN8\plugins\7zip.xmd"
3 Mar 2008 4.06.24 3 892 A.... "C:\WINDOWS\BDOSCAN8\plugins\access.xmd"
3 Mar 2008 4.06.24 8 737 A.... "C:\WINDOWS\BDOSCAN8\plugins\ace.xmd"
3 Mar 2008 4.06.24 3 399 A.... "C:\WINDOWS\BDOSCAN8\plugins\adsntfs.xmd"
3 Mar 2008 4.06.24 19 174 A.... "C:\WINDOWS\BDOSCAN8\plugins\alz.xmd"
3 Mar 2008 4.06.24 3 611 A.... "C:\WINDOWS\BDOSCAN8\plugins\arc.xmd"
3 Mar 2008 4.06.24 6 284 A.... "C:\WINDOWS\BDOSCAN8\plugins\arj.xmd"
3 Mar 2008 4.06.26 101 482 A.... "C:\WINDOWS\BDOSCAN8\plugins\aspy_emu.cvd"
3 Mar 2008 4.06.26 6 712 A.... "C:\WINDOWS\BDOSCAN8\plugins\bach.xmd"
3 Mar 2008 4.06.22 1 878 A.... "C:\WINDOWS\BDOSCAN8\plugins\boot.xmd"
3 Mar 2008 4.06.26 19 355 A.... "C:\WINDOWS\BDOSCAN8\plugins\bzip2.xmd"
3 Mar 2008 4.06.26 14 362 A.... "C:\WINDOWS\BDOSCAN8\plugins\cab.xmd"
3 Mar 2008 4.06.26 358 723 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.cvd"
3 Mar 2008 4.06.26 99 252 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.ivd"
3 Mar 2008 4.06.26 396 480 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.rvd"
3 Mar 2008 4.06.28 183 666 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.xmd"
3 Mar 2008 4.06.28 119 029 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_dll.cvd"
3 Mar 2008 4.06.28 111 548 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_emu.cvd"
3 Mar 2008 4.06.28 297 530 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.cvd"
3 Mar 2008 4.06.28 410 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.ivd"
3 Mar 2008 4.06.28 13 189 A.... "C:\WINDOWS\BDOSCAN8\plugins\chm.xmd"
3 Mar 2008 4.06.28 6 626 A.... "C:\WINDOWS\BDOSCAN8\plugins\cookie.cvd"
3 Mar 2008 4.06.28 2 158 A.... "C:\WINDOWS\BDOSCAN8\plugins\cookie.xmd"
3 Mar 2008 4.06.28 3 489 A.... "C:\WINDOWS\BDOSCAN8\plugins\cpio.xmd"
3 Mar 2008 4.06.30 295 343 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.cvd"
3 Mar 2008 4.06.30 86 121 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.ivd"
3 Mar 2008 4.06.30 6 060 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.xmd"
3 Mar 2008 4.06.30 1 346 A.... "C:\WINDOWS\BDOSCAN8\plugins\dbx.xmd"
3 Mar 2008 4.06.30 10 871 A.... "C:\WINDOWS\BDOSCAN8\plugins\docfile.xmd"
3 Mar 2008 4.06.30 34 225 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.001"
3 Mar 2008 4.06.30 35 147 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.002"
3 Mar 2008 4.06.30 33 945 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.003"
3 Mar 2008 4.06.30 33 915 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.004"
3 Mar 2008 4.06.30 30 065 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.005"
3 Mar 2008 4.06.30 32 614 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.006"
3 Mar 2008 4.06.30 30 115 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.007"
3 Mar 2008 4.06.32 30 026 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.008"
3 Mar 2008 4.06.32 30 093 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.009"
3 Mar 2008 4.06.32 30 299 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.010"
3 Mar 2008 4.06.32 30 482 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.011"
3 Mar 2008 4.06.32 30 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.012"
3 Mar 2008 4.06.32 13 045 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.013"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.014"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.015"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.016"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.017"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.018"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.019"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.020"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.021"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.022"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.023"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.024"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.025"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.026"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.027"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.028"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.029"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.030"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.031"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.032"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.033"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.034"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.035"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.036"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.037"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.038"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.039"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.040"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.041"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.042"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.043"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.044"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.045"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.046"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.047"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.048"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.049"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.050"
3 Mar 2008 4.06.42 6 500 383 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.cvd"
3 Mar 2008 4.06.42 30 153 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i01"
3 Mar 2008 4.06.42 34 745 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i02"
3 Mar 2008 4.06.42 25 792 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i03"
3 Mar 2008 4.06.42 26 845 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i04"
3 Mar 2008 4.06.42 26 331 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i05"
3 Mar 2008 4.06.42 31 133 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i06"
3 Mar 2008 4.06.42 33 430 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i07"
3 Mar 2008 4.06.42 31 219 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i08"
3 Mar 2008 4.06.42 26 323 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i09"
3 Mar 2008 4.06.42 34 476 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i10"
3 Mar 2008 4.06.42 32 074 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i11"
3 Mar 2008 4.06.44 32 454 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i12"
3 Mar 2008 4.06.44 30 114 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i13"
3 Mar 2008 4.06.44 29 089 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i14"
3 Mar 2008 4.06.44 30 630 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i15"
3 Mar 2008 4.06.44 28 175 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i16"
3 Mar 2008 4.06.44 31 458 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i17"
3 Mar 2008 4.06.44 27 984 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i18"
3 Mar 2008 4.06.44 31 448 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i19"
3 Mar 2008 4.06.44 31 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i20"
3 Mar 2008 4.06.44 30 627 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i21"
3 Mar 2008 4.06.44 34 776 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i22"
3 Mar 2008 4.06.44 30 106 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i23"
3 Mar 2008 4.06.46 30 949 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i24"
3 Mar 2008 4.06.46 26 371 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i25"
3 Mar 2008 4.06.46 28 079 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i26"
3 Mar 2008 4.06.46 29 149 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i27"
3 Mar 2008 4.06.46 32 521 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i28"
3 Mar 2008 4.06.46 30 267 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i29"
3 Mar 2008 4.06.46 25 865 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i30"
3 Mar 2008 4.06.46 27 564 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i31"
3 Mar 2008 4.06.46 29 338 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i32"
3 Mar 2008 4.06.46 30 171 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i33"
3 Mar 2008 4.06.46 30 101 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i34"
3 Mar 2008 4.06.46 32 677 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i35"
3 Mar 2008 4.06.48 33 657 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i36"
3 Mar 2008 4.06.48 31 020 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i37"
3 Mar 2008 4.06.48 30 698 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i38"
3 Mar 2008 4.06.48 31 845 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i39"
3 Mar 2008 4.06.48 30 380 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i40"
3 Mar 2008 4.06.48 29 376 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i41"
3 Mar 2008 4.06.48 32 985 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i42"
3 Mar 2008 4.06.48 29 376 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i43"
3 Mar 2008 4.06.48 30 291 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i44"
3 Mar 2008 4.06.48 29 463 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i45"
3 Mar 2008 4.06.48 27 444 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i46"
3 Mar 2008 4.06.48 32 667 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i47"
3 Mar 2008 4.06.50 31 295 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i48"
3 Mar 2008 4.06.50 27 643 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i49"
3 Mar 2008 4.06.50 26 649 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i50"
3 Mar 2008 4.06.50 30 905 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i51"
3 Mar 2008 4.06.50 28 838 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i52"
3 Mar 2008 4.06.50 29 055 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i53"
3 Mar 2008 4.06.50 21 693 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i54"
3 Mar 2008 4.06.50 29 624 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i55"
3 Mar 2008 4.06.50 26 251 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i56"
3 Mar 2008 4.06.50 30 238 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i57"
3 Mar 2008 4.06.50 32 989 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i58"
3 Mar 2008 4.06.50 29 765 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i59"
3 Mar 2008 4.06.52 29 298 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i60"
3 Mar 2008 4.06.52 25 936 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i61"
3 Mar 2008 4.06.52 31 044 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i62"
3 Mar 2008 4.06.52 25 913 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i63"
3 Mar 2008 4.06.52 26 004 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i64"
3 Mar 2008 4.06.52 27 911 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i65"
3 Mar 2008 4.06.52 30 220 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i66"
3 Mar 2008 4.06.52 33 240 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i67"
3 Mar 2008 4.06.52 34 862 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i68"
3 Mar 2008 4.06.52 32 957 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i69"
3 Mar 2008 4.06.52 32 552 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i70"
3 Mar 2008 4.06.52 29 076 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i71"
3 Mar 2008 4.06.54 32 504 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i72"
3 Mar 2008 4.06.54 30 678 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i73"
3 Mar 2008 4.06.54 32 067 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i74"
3 Mar 2008 4.06.54 33 326 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i75"
3 Mar 2008 4.06.54 33 635 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i76"
3 Mar 2008 4.06.54 34 202 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i77"
3 Mar 2008 4.06.54 36 009 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i78"
3 Mar 2008 4.06.54 34 840 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i79"
3 Mar 2008 4.06.54 31 465 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i80"
3 Mar 2008 4.06.54 32 997 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i81"
3 Mar 2008 4.06.54 31 546 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i82"
3 Mar 2008 4.06.56 34 072 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i83"
3 Mar 2008 4.06.56 30 433 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i84"
3 Mar 2008 4.06.56 31 381 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i85"
3 Mar 2008 4.06.56 32 983 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i86"
3 Mar 2008 4.06.56 30 159 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i87"
3 Mar 2008 4.06.56 33 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i88"
3 Mar 2008 4.06.56 32 228 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i89"
3 Mar 2008 4.06.56 29 859 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i90"
3 Mar 2008 4.06.56 30 116 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i91"
3 Mar 2008 4.06.56 33 050 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i92"
3 Mar 2008 4.06.56 30 320 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i93"
3 Mar 2008 4.06.56 33 050 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i94"
3 Mar 2008 4.06.58 32 324 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i95"
3 Mar 2008 4.06.58 31 914 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i96"
3 Mar 2008 4.06.58 34 915 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i97"
3 Mar 2008 4.06.58 34 586 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i98"
3 Mar 2008 4.06.58 30 800 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i99"
3 Mar 2008 4.06.58 29 004 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.ivd"
3 Mar 2008 4.06.58 5 001 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.xmd"
3 Mar 2008 4.06.58 2 806 A.... "C:\WINDOWS\BDOSCAN8\plugins\epoc.xmd"
3 Mar 2008 4.06.58 301 831 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.cvd"
3 Mar 2008 4.06.58 59 319 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i01"
3 Mar 2008 4.07.00 57 208 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i02"
3 Mar 2008 4.07.00 51 260 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i03"
3 Mar 2008 4.07.00 50 574 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i04"
3 Mar 2008 4.07.00 55 570 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i05"
3 Mar 2008 4.07.00 55 887 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i06"
3 Mar 2008 4.07.00 49 628 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i07"
3 Mar 2008 4.07.00 34 680 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i08"
3 Mar 2008 4.07.00 26 888 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i09"
3 Mar 2008 4.07.00 31 601 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i10"
3 Mar 2008 4.07.00 31 453 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i11"
3 Mar 2008 4.07.00 31 589 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i12"
3 Mar 2008 4.07.00 29 124 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i13"
3 Mar 2008 4.07.00 20 322 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i14"
3 Mar 2008 4.07.02 32 737 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i15"
3 Mar 2008 4.07.02 22 098 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i16"
3 Mar 2008 4.07.02 29 879 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i17"
3 Mar 2008 4.07.02 5 301 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i18"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i19"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i20"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i21"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i22"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i23"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i24"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i25"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i26"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i27"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i28"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i29"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i30"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i31"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i32"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i33"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i34"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i35"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i36"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i37"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i38"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i39"
3 Mar 2008 4.07.04 58 430 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.ivd"
3 Mar 2008 4.07.04 122 676 A.... "C:\WINDOWS\BDOSCAN8\plugins\gvmscripts.cvd"
3 Mar 2008 4.07.04 3 842 A.... "C:\WINDOWS\BDOSCAN8\plugins\gzip.xmd"
3 Mar 2008 4.07.04 8 201 A.... "C:\WINDOWS\BDOSCAN8\plugins\ha.xmd"
3 Mar 2008 4.07.04 3 534 A.... "C:\WINDOWS\BDOSCAN8\plugins\hlp.xmd"
3 Mar 2008 4.07.04 4 669 A.... "C:\WINDOWS\BDOSCAN8\plugins\hpe.cvd"
3 Mar 2008 4.07.04 2 537 A.... "C:\WINDOWS\BDOSCAN8\plugins\hpe.xmd"
3 Mar 2008 4.07.04 1 712 A.... "C:\WINDOWS\BDOSCAN8\plugins\hqx.xmd"
3 Mar 2008 4.07.04 18 951 A.... "C:\WINDOWS\BDOSCAN8\plugins\html.xmd"
3 Mar 2008 4.07.04 7 622 A.... "C:\WINDOWS\BDOSCAN8\plugins\imp.xmd"
3 Mar 2008 4.07.04 1 173 A.... "C:\WINDOWS\BDOSCAN8\plugins\inno.xmd"
3 Mar 2008 4.07.04 21 368 A.... "C:\WINDOWS\BDOSCAN8\plugins\instyler.xmd"
3 Mar 2008 4.07.04 37 426 A.... "C:\WINDOWS\BDOSCAN8\plugins\iso.xmd"
3 Mar 2008 4.07.04 3 305 A.... "C:\WINDOWS\BDOSCAN8\plugins\java.cvd"
3 Mar 2008 4.07.04 8 501 A.... "C:\WINDOWS\BDOSCAN8\plugins\java.xmd"
3 Mar 2008 4.07.04 4 795 A.... "C:\WINDOWS\BDOSCAN8\plugins\jpeg.xmd"
3 Mar 2008 4.07.06 9 492 A.... "C:\WINDOWS\BDOSCAN8\plugins\lha.xmd"
3 Mar 2008 4.07.06 930 A.... "C:\WINDOWS\BDOSCAN8\plugins\lnk.xmd"
3 Mar 2008 4.07.06 2 150 A.... "C:\WINDOWS\BDOSCAN8\plugins\mbox.xmd"
3 Mar 2008 4.07.06 791 A.... "C:\WINDOWS\BDOSCAN8\plugins\mbx.xmd"
3 Mar 2008 4.07.06 45 983 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx.xmd"
3 Mar 2008 4.07.06 344 892 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_97.cvd"
3 Mar 2008 4.07.06 172 433 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_97.ivd"
3 Mar 2008 4.07.06 59 489 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_w95.cvd"
3 Mar 2008 4.07.06 9 651 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_x95.cvd"
3 Mar 2008 4.07.06 1 948 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_xf.cvd"
3 Mar 2008 4.07.06 6 996 A.... "C:\WINDOWS\BDOSCAN8\plugins\mime.xmd"
3 Mar 2008 4.07.08 5 672 A.... "C:\WINDOWS\BDOSCAN8\plugins\mobmalware.cvd"
3 Mar 2008 4.07.08 6 864 A.... "C:\WINDOWS\BDOSCAN8\plugins\mobmalware.xmd"
3 Mar 2008 4.07.08 2 082 A.... "C:\WINDOWS\BDOSCAN8\plugins\mso.xmd"
3 Mar 2008 4.07.08 205 A.... "C:\WINDOWS\BDOSCAN8\plugins\na.cvd"
3 Mar 2008 4.07.08 12 596 A.... "C:\WINDOWS\BDOS
en kyllä tolasta lokia hakenut.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:14:46, on 8.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Lavasoft\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
D:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\LClock\lclock.exe
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
D:\Program Files\Webshots\webshots.scr
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\GammaSutra\GammaSutra.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [DrvIcon] D:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [PwrUpTweakMe] C:\WINDOWS\system32\PuXpTwks.exe /TWEAK
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] D:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: Webshots.lnk = D:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: ATI CATALYST -ilmaisinalue.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Poker Rewards Poker - {6DAF93EB-C7E3-41ab-83D9-CAE1785F41BC} - C:\Microgaming\Poker\pokerrewardsMPP\MPPoker.exe
O9 - Extra button: Gutshot Poker - {70FF3DD2-AC81-43f2-AF80-979E2B789C4A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PokerTime Poker - {7220F1C9-B7E0-47a6-A0BD-D5B3940BCC79} - C:\Microgaming\Poker\pokertimeMPP\MPPoker.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Gnuf Casino - {8FE9B27A-BDCD-4d27-A430-4DC0B58D01B0} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PacificPoker4 - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - F:\POKER\PACIFI~1\pacificpoker.exe
O9 - Extra button: Gnuf Poker - {A99C8F70-4D5B-482c-8854-05BC0BB8B182} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Microgaming\Poker\nordicbetMPP\MPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra 'Tools' menuitem: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\bianco\Käynnistä-valikko\Ohjelmat\CarbonPoker\CarbonPoker.lnk (file missing) (HKCU)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5235/mcfscan.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\aawservice.exe
O23 - Service: Apple Mobile Device - Unknown owner - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (file missing)
O23 - Service: AshampooDefragService - - C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SNMP-palvelu (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe (file missing)
O23 - Service: SNMP:n keskeytyspalvelu (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
--
End of file - 10508 bytes
ava sdfix kansio avaa report tekstitiedosto
kopioi se kaikki sisältö ja liitä tähän vistiketjuun
[b]System Report[/b]
*************
Run on la 08.03.2008 at 15:40
Microsoft Windows XP [versio 5.1.2600]
Current user is an administrator
[b]Running Processes[/b]:
\SystemRoot\System32\smss.exe [516]
\??\C:\WINDOWS\system32\csrss.exe [572]
\??\C:\WINDOWS\system32\winlogon.exe [596]
C:\WINDOWS\system32\services.exe [640]
C:\WINDOWS\system32\lsass.exe [652]
C:\WINDOWS\system32\Ati2evxx.exe [800]
C:\WINDOWS\system32\svchost.exe [812]
C:\WINDOWS\system32\svchost.exe [908]
C:\Program Files\Windows Defender\MsMpEng.exe [972]
C:\WINDOWS\System32\svchost.exe [1016]
C:\WINDOWS\system32\svchost.exe [1048]
C:\WINDOWS\System32\svchost.exe [1096]
C:\WINDOWS\System32\svchost.exe [1272]
D:\Program Files\Lavasoft\aawservice.exe [1356]
C:\WINDOWS\system32\Ati2evxx.exe [1388]
C:\WINDOWS\Explorer.EXE [1444]
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [1508]
C:\Program Files\Alwil Software\Avast4\ashServ.exe [1576]
C:\WINDOWS\system32\spoolsv.exe [1864]
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe [1968]
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [1996]
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe [2040]
C:\WINDOWS\system32\HPZipm12.exe [408]
C:\WINDOWS\system32\svchost.exe [576]
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [1916]
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2052]
C:\WINDOWS\System32\alg.exe [2204]
C:\Program Files\Alwil Software\Avast4\ashDisp.exe [2356]
D:\Program Files\Vista Drive Icon\DrvIcon.exe [2392]
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe [2400]
C:\WINDOWS\system32\CTHELPER.EXE [2420]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2444]
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2488]
C:\WINDOWS\system32\ctfmon.exe [2496]
D:\Program Files\LClock\lclock.exe [2504]
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe [2552]
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe [2588]
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2636]
D:\Program Files\Webshots\webshots.scr [2676]
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [3264]
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe [3512]
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe [3612]
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe [3672]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [492]
F:\Poker\Club4Aces.com\Client.exe [3232]
F:\Poker\Club4Aces.com\jre\bin\javaw.exe [732]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [1680]
C:\Program Files\Windows Media Player\wmplayer.exe [2956]
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE [2780]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [3296]
C:\Program Files\GammaSutra\GammaSutra.exe [3796]
F:\Poker\T6\T6poker.exe [2776]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [2988]
[b]Drivers - Running[/b]:
a347bus
a347scsi
Aavmker4
ACPI
AFD
agp440
aswMon2
aswRdr
aswTdi
atapi
ati2mtag
audstub
AVG
AvgAsCln
Beep
catchme
Cdfs
Cdrom
ctac32k
ctaud2k
ctprxy2k
ctsfm2k
Disk
dmio
dmload
E100B
emupia
Fastfat
Fips
FltMgr
Ftdisk
gameenum
GEARAspiWDM
Gpc
ha10kx2k
HidUsb
i8042prt
IdeBusDr
IdeChnDr
Imapi
IntelIde
IpNat
IPSec
isapnp
Kbdclass
kmixer
KSecDD
mnmdd
Mouclass
mouhid
MountMgr
MRxDAV
MRxSmb
Msfs
mssmbios
Mup
NDIS
NdisTapi
NdisWan
NDProxy
NetBIOS
NetBT
Npfs
Ntfs
Null
ossrv
Parport
PartMgr
ParVdm
PCI
PCIIde
PfModNT
Point32
PptpMiniport
Processor
prodrv06
prohlp02
PSched
Ptilink
PxHelp20
RasAcd
Rasl2tp
RasPppoe
Raspti
Rdbss
RDPCDD
rdpdr
redbook
Secdrv
serenum
Serial
sfdrv01
sfhlp01
sfhlp02
sfsync02
sfvfs02
sr
Srv
swenum
sysaudio
Tcpip
TermDD
tmcomm
Update
usbehci
usbhub
usbuhci
VgaSave
VolSnap
Wanarp
wdmaud
WudfPf
[b]Drivers - Stopped[/b]:
Abiosdsk
abp480n5
ACPIEC
adpu160m
aec
Aha154x
aic78u2
aic78xx
AliIde
amsint
asc
asc3350p
asc3550
AsyncMac
Atdisk
Atmarpc
BootScreen
cbidf2k
cd20xrnt
Cdaudio
Changer
CmdIde
Cpqarray
ctljystk
dac960nt
dmboot
DMusic
dpti2o
drmkaud
emu10k
emu10k1
Fdc
Flpydisk
hpn
HPZid412
HPZipr12
HPZius12
HTTP
i2omgmt
i2omp
ini910u
intelppm
ip6fw
IpFilterDriver
IpInIp
IRENUM
L8042PR2
lbrtfdc
LHidFlt2
LMouFlt2
Modem
mraid35x
MSKSSRV
MSPCLOCK
MSPQM
ndiscm
Ndisuio
Nokia
Nokia
NwlnkFlt
NwlnkFwd
PCIDump
Pcmcia
PDCOMP
PDFRAME
PDRELI
PDRFRAME
perc2
perc2hib
ql1080
Ql10wnt
ql12160
ql1240
ql1280
RDPWD
Sfloppy
sfman
Simbad
Sparrow
splitter
swmidi
symc810
symc8xx
sym_hi
sym_u3
TDPIPE
TDTCP
TosIde
TRIXX
TVICHW32
Udfs
ultra
usbccgp
usbprint
usbscan
usbstor
ViaIde
wanusb
WDICA
WudfRd
[b]Services - Running[/b]:
aawservice
ALG
AshampooDefragService
aswUpdSv
Ati
AudioSrv
avast!
avast!
avast!
AVG
BITS
Browser
CryptSvc
DcomLaunch
Dhcp
dmserver
Dnscache
ERSvc
Eventlog
EventSystem
helpsvc
HidServ
lanmanserver
LanmanWorkstation
LmHosts
Netman
Nla
PlugPlay
Pml
PolicyAgent
ProtectedStorage
RasMan
RpcSs
SamSs
Schedule
seclogon
SENS
ServiceLayer
SharedAccess
ShellHWDetection
Spooler
srservice
stisvc
TapiSrv
Themes
TrkWks
W32Time
WebClient
WinDefend
winmgmt
wscsvc
wuauserv
WudfSvc
[b]Services - Stopped[/b]:
Alerter
Apple
AppMgmt
aspnet_state
ATI
CiSvc
ClipSrv
clr_optimization_v2.0.50727_32
COMSysApp
dmadmin
FastUserSwitchingCompatibility
FontCache3.0.0.0
gusvc
HTTPFilter
IDriverT
idsvc
IISADMIN
ImapiService
iPod
Messenger
mnmsrvc
MSDTC
MSFtpsvc
MSIServer
NetDDE
NetDDEdsdm
Netlogon
NetTcpPortSharing
NtLmSsp
NtmsSvc
RasAuto
RDSessMgr
RemoteAccess
RemoteRegistry
RpcLocator
RSVP
SCardSvr
SMTPSVC
SNMP
SNMPTRAP
SSDPSRV
SwPrv
SysmonLog
TermService
TlntSvr
upnphost
UPS
VSS
WMConnectCDS
WmdmPmSN
Wmi
WmiApSrv
WMPNetworkSvc
WZCSVC
xmlprov
[b]Files Created/Modified - 60 Days[/b]:
C:\
NV‹÷¸ GÍ!‹þ^ s €= t €= tGëøª8uFIãó¤é¨ özšu·;‹{š xšÂ_• - 1252,
22 Feb 2008 21.26.32 194 ..SH. "C:\boot.ini"
8 Mar 2008 0.31.52 20 294 A.... "C:\ComboFix.txt"
3 Mar 2008 1.11.42 157 A.... "C:\error.txt"
8 Mar 2008 12.16.24 1 609 420 800 A.SH. "C:\hiberfil.sys"
22 Feb 2008 16.24.20 47 564 A.SHR "C:\NTDETECT.COM"
22 Feb 2008 16.24.20 250 112 A.SHR "C:\ntldr"
8 Mar 2008 12.16.22 2 145 386 496 A.SH. "C:\pagefile.sys"
7 Mar 2008 15.48.06 2 312 A.... "C:\rapport.txt"
C:\WINDOWS\
8 Jan 2008 9.34.42 11 942 A.... "C:\WINDOWS\atiogl.xml"
8 Mar 2008 12.16.26 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
27 Feb 2008 0.34.34 2 359 350 A.... "C:\WINDOWS\BricoPack Wallpaper.bmp"
27 Feb 2008 0.34.46 5 466 A.... "C:\WINDOWS\BricoPackFoldersDelete.cmd"
27 Feb 2008 0.34.46 70 821 A.... "C:\WINDOWS\BricoPackUninst.txt"
27 Feb 2008 0.34.46 70 821 A.... "C:\WINDOWS\BricoPackUninst.cmd"
17 Feb 2008 2.42.08 116 A.... "C:\WINDOWS\NeroDigital.ini"
22 Feb 2008 15.00.46 4 784 A.... "C:\WINDOWS\ODBCINST.INI"
9 Feb 2008 20.01.54 27 A.... "C:\WINDOWS\popcinfot.dat"
31 Jan 2008 19.05.32 1 409 A.... "C:\WINDOWS\QTFont.for"
8 Feb 2008 19.03.06 54 156 A..H. "C:\WINDOWS\QTFont.qfn"
26 Feb 2008 16.28.12 128 A.... "C:\WINDOWS\SBWIN.INI"
8 Mar 2008 12.15.34 11 568 A.... "C:\WINDOWS\SchedLgU.Txt"
8 Mar 2008 10.52.24 60 A.... "C:\WINDOWS\setupact.log"
8 Mar 2008 10.52.24 0 A.... "C:\WINDOWS\setuperr.log"
26 Feb 2008 13.12.34 0 ..... "C:\WINDOWS\Sti_Trace.log"
8 Mar 2008 0.31.00 227 A.... "C:\WINDOWS\system.ini"
8 Mar 2008 12.16.46 157 A.... "C:\WINDOWS\wiadebug.log"
8 Mar 2008 12.16.44 48 A.... "C:\WINDOWS\wiaservc.log"
7 Mar 2008 12.51.54 925 A.... "C:\WINDOWS\win.ini"
8 Mar 2008 15.19.40 677 831 A.... "C:\WINDOWS\WindowsUpdate.log"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\WindowsShell.Manifest"
5 Mar 2008 1.10.04 214 A.... "C:\WINDOWS\WININIT.INI"
22 Feb 2008 21.57.14 316 640 A.... "C:\WINDOWS\WMSysPr9.prx"
26 Feb 2008 17.05.18 3 373 917 A.... "C:\WINDOWS\{00000002-00000000-00000002-00001102-00000002-80271102}.CDF"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00001"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00002"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00003"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00004"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00005"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00006"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00007"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00008"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00009"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00010"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00011"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00012"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00013"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00014"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00015"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00016"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00017"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00018"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00019"
22 Feb 2008 19.56.22 12 288 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00020"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00021"
22 Feb 2008 19.56.26 5 365 760 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00022"
22 Feb 2008 19.59.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB891781$\reg00002"
22 Feb 2008 20.00.44 8 192 A.... "C:\WINDOWS\$NtUninstallKB887472$\reg00002"
22 Feb 2008 19.30.20 8 192 A.... "C:\WINDOWS\$NtUninstallKB886185$\reg00002"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00001"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00002"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00003"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00004"
22 Feb 2008 19.29.58 8 192 A.... "C:\WINDOWS\$NtUninstallKB885884$\reg00002"
3 Mar 2008 4.06.22 45 056 A.... "C:\WINDOWS\BDOSCAN8\avxdisk.dll"
3 Mar 2008 4.06.22 10 240 A.... "C:\WINDOWS\BDOSCAN8\avxs.dll"
3 Mar 2008 4.06.22 27 136 A.... "C:\WINDOWS\BDOSCAN8\avxt.dll"
3 Mar 2008 4.06.24 181 760 A.... "C:\WINDOWS\BDOSCAN8\bdcore.dll"
3 Mar 2008 4.06.18 87 A.... "C:\WINDOWS\BDOSCAN8\bdoscan.ini"
3 Mar 2008 9.37.10 2 008 A.... "C:\WINDOWS\BDOSCAN8\bdoscan.log"
9 Jan 2008 15.01.48 118 784 A.... "C:\WINDOWS\BDOSCAN8\bdupd.dll"
3 Mar 2008 4.06.24 77 824 A.... "C:\WINDOWS\BDOSCAN8\bdupd.dll.updpnd"
3 Mar 2008 4.06.22 1 878 A.... "C:\WINDOWS\BDOSCAN8\boot.xmd"
9 Jan 2008 15.01.48 53 248 A.... "C:\WINDOWS\BDOSCAN8\ipsupd.dll"
6 Feb 2008 15.12.02 7 350 A.... "C:\WINDOWS\BDOSCAN8\lang.ini"
3 Mar 2008 4.06.24 142 848 A.... "C:\WINDOWS\BDOSCAN8\libfn.dll"
3 Mar 2008 4.06.22 86 016 A.... "C:\WINDOWS\BDOSCAN8\librtvr.dll"
21 Jan 2008 17.43.22 130 A.... "C:\WINDOWS\BDOSCAN8\live.ini"
3 Mar 2008 4.06.22 471 040 A.... "C:\WINDOWS\BDOSCAN8\oscan82.ocx"
3 Mar 2008 4.07.20 14 999 A.... "C:\WINDOWS\BDOSCAN8\plugins.htm"
3 Mar 2008 4.06.22 254 A.... "C:\WINDOWS\BDOSCAN8\rtvr2.html"
3 Mar 2008 4.06.22 4 746 A.... "C:\WINDOWS\BDOSCAN8\rtvr.html"
3 Mar 2008 4.06.22 6 828 A.... "C:\WINDOWS\BDOSCAN8\scanoptions.tsi"
3 Mar 2008 4.06.22 6 828 A.... "C:\WINDOWS\BDOSCAN8\scanoptions.tsk"
3 Mar 2008 4.06.22 195 A.... "C:\WINDOWS\BDOSCAN8\scanres2.html"
3 Mar 2008 4.06.22 17 067 A.... "C:\WINDOWS\BDOSCAN8\scanres.html"
3 Mar 2008 5.51.52 19 456 A.... "C:\WINDOWS\BDOSCAN8\scanrep.html"
3 Mar 2008 4.06.22 86 016 A.... "C:\WINDOWS\BDOSCAN8\upd82.bpx"
8 Mar 2008 12.16.26 0 A.... "C:\WINDOWS\Debug\PASSWD.LOG"
8 Jan 2008 14.38.44 290 816 A.... "C:\WINDOWS\Downloaded Program Files\auc_lib.dll"
8 Jan 2008 14.38.44 541 A.... "C:\WINDOWS\Downloaded Program Files\ca.pub"
11 Jan 2008 14.45.50 495 616 A.... "C:\WINDOWS\Downloaded Program Files\daas_s.dll"
22 Feb 2008 15.00.42 65 ...H. "C:\WINDOWS\Downloaded Program Files\desktop.ini"
25 Jan 2008 15.11.06 588 392 A.... "C:\WINDOWS\Downloaded Program Files\gatelauncher.exe"
16 Jan 2008 7.37.14 901 A.... "C:\WINDOWS\Downloaded Program Files\mcfscan.inf"
31 Jan 2008 19.55.00 144 A.... "C:\WINDOWS\Downloaded Program Files\QTPlugin.inf"
22 Feb 2008 15.01.20 67 A.SH. "C:\WINDOWS\Fonts\desktop.ini"
22 Feb 2008 16.30.04 49 300 A.... "C:\WINDOWS\inf\accessor.PNF"
23 Feb 2008 13.38.54 14 772 A.... "C:\WINDOWS\inf\au.PNF"
23 Feb 2008 13.38.54 20 236 A.... "C:\WINDOWS\inf\bda.PNF"
23 Feb 2008 13.38.54 69 256 A.... "C:\WINDOWS\inf\biosinfo.PNF"
11 Jan 2008 7.58.54 705 A.... "C:\WINDOWS\inf\branches.inf"
29 Feb 2008 19.59.32 4 100 A.... "C:\WINDOWS\inf\branches.PNF"
23 Feb 2008 13.38.56 9 644 A.... "C:\WINDOWS\inf\ccdecode.PNF"
22 Feb 2008 16.29.20 16 996 A.... "C:\WINDOWS\inf\cpu.PNF"
23 Feb 2008 13.38.56 322 320 A.... "C:\WINDOWS\inf\defltwk.PNF"
23 Feb 2008 13.38.56 39 428 A.... "C:\WINDOWS\inf\devxprop.PNF"
22 Feb 2008 16.29.22 222 180 A.... "C:\WINDOWS\inf\drvindex.PNF"
23 Feb 2008 13.38.56 330 308 A.... "C:\WINDOWS\inf\dwup.PNF"
22 Feb 2008 14.32.02 4 592 A.... "C:\WINDOWS\inf\FlashAX.PNF"
22 Feb 2008 16.30.02 17 616 A.... "C:\WINDOWS\inf\fp40ext.PNF"
22 Feb 2008 16.29.58 56 168 A.... "C:\WINDOWS\inf\fxsocm.PNF"
23 Feb 2008 13.38.56 9 476 A.... "C:\WINDOWS\inf\HidDigi.PNF"
22 Feb 2008 16.54.34 12 720 A.... "C:\WINDOWS\inf\hidserv.PNF"
23 Feb 2008 13.38.56 18 092 A.... "C:\WINDOWS\inf\i81xnt5.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp0.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp1.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp2.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp3.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp4.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv0.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv1.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv2.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv3.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv4.PNF"
23 Feb 2008 13.38.58 83 912 A.... "C:\WINDOWS\inf\ie.PNF"
26 Feb 2008 15.55.04 1 618 A.... "C:\WINDOWS\inf\ieaccess.inf"
26 Feb 2008 15.55.48 4 448 A.... "C:\WINDOWS\inf\ieaccess.PNF"
22 Feb 2008 16.30.00 977 388 A.... "C:\WINDOWS\inf\iis.PNF"
22 Feb 2008 16.30.02 105 256 A.... "C:\WINDOWS\inf\ims.PNF"
29 Feb 2008 19.59.34 1 517 744 A.... "C:\WINDOWS\inf\INFCACHE.1"
22 Feb 2008 16.54.34 100 156 A.... "C:\WINDOWS\inf\input.PNF"
23 Feb 2008 13.38.58 427 488 A.... "C:\WINDOWS\inf\intl.PNF"
23 Feb 2008 13.38.58 18 840 A.... "C:\WINDOWS\inf\irbus.PNF"
22 Feb 2008 16.54.26 57 788 A.... "C:\WINDOWS\inf\keyboard.PNF"
23 Feb 2008 13.35.30 92 268 A.... "C:\WINDOWS\inf\ks.PNF"
23 Feb 2008 13.38.58 43 684 A.... "C:\WINDOWS\inf\kscaptur.PNF"
22 Feb 2008 16.54.44 24 720 A.... "C:\WINDOWS\inf\ksfilter.PNF"
22 Feb 2008 16.29.10 1 041 036 A.... "C:\WINDOWS\inf\LAYOUT.PNF"
22 Feb 2008 16.54.26 187 452 A.... "C:\WINDOWS\inf\machine.PNF"
23 Feb 2008 13.38.58 30 256 A.... "C:\WINDOWS\inf\mchgr.PNF"
23 Feb 2008 13.38.58 17 572 A.... "C:\WINDOWS\inf\mdac.PNF"
23 Feb 2008 13.39.00 107 872 A.... "C:\WINDOWS\inf\mdmirmdm.PNF"
23 Feb 2008 13.39.00 15 196 A.... "C:\WINDOWS\inf\moviemk.PNF"
23 Feb 2008 13.39.00 8 284 A.... "C:\WINDOWS\inf\mpe.PNF"
23 Feb 2008 13.39.00 30 756 A.... "C:\WINDOWS\inf\mplayer2.PNF"
23 Feb 2008 13.39.00 49 572 A.... "C:\WINDOWS\inf\mshdc.PNF"
22 Feb 2008 16.30.02 87 616 A.... "C:\WINDOWS\inf\msmsgs.PNF"
23 Feb 2008 13.39.00 61 124 A.... "C:\WINDOWS\inf\msnetmtg.PNF"
22 Feb 2008 16.30.08 7 556 A.... "C:\WINDOWS\inf\msnmsn.PNF"
23 Feb 2008 13.39.00 36 236 A.... "C:\WINDOWS\inf\msoe50.PNF"
23 Feb 2008 13.39.00 23 880 A.... "C:\WINDOWS\inf\mstape.PNF"
10 Jan 2008 5.17.10 5 914 A.... "C:\WINDOWS\inf\msxmlx.PNF"
25 Feb 2008 9.50.20 4 624 A.... "C:\WINDOWS\inf\msxpsdrv.PNF"
22 Feb 2008 16.30.04 12 208 A.... "C:\WINDOWS\inf\multimed.PNF"
23 Feb 2008 13.39.00 7 872 A.... "C:\WINDOWS\inf\mymusic.PNF"
23 Feb 2008 13.39.00 9 636 A.... "C:\WINDOWS\inf\nabtsfec.PNF"
23 Feb 2008 13.39.02 9 120 A.... "C:\WINDOWS\inf\ndisip.PNF"
22 Feb 2008 14.31.58 14 472 A.... "C:\WINDOWS\inf\net3c985.PNF"
22 Feb 2008 14.31.58 83 136 A.... "C:\WINDOWS\inf\net557.PNF"
22 Feb 2008 14.31.58 8 012 A.... "C:\WINDOWS\inf\net650d.PNF"
22 Feb 2008 14.31.58 8 636 A.... "C:\WINDOWS\inf\net713.PNF"
22 Feb 2008 14.31.58 7 800 A.... "C:\WINDOWS\inf\netac300.PNF"
22 Feb 2008 14.31.58 9 836 A.... "C:\WINDOWS\inf\netamd.PNF"
22 Feb 2008 14.31.58 18 056 A.... "C:\WINDOWS\inf\netamd2.PNF"
22 Feb 2008 16.30.08 3 652 A.... "C:\WINDOWS\inf\netbeac.PNF"
22 Feb 2008 14.31.58 8 552 A.... "C:\WINDOWS\inf\netdf650.PNF"
22 Feb 2008 14.31.58 30 020 A.... "C:\WINDOWS\inf\nete1000.PNF"
22 Feb 2008 14.31.58 8 324 A.... "C:\WINDOWS\inf\netejxmp.PNF"
22 Feb 2008 14.31.58 12 032 A.... "C:\WINDOWS\inf\netel90a.PNF"
22 Feb 2008 14.31.58 19 568 A.... "C:\WINDOWS\inf\netel90b.PNF"
22 Feb 2008 14.31.58 17 428 A.... "C:\WINDOWS\inf\netel99x.PNF"
22 Feb 2008 14.31.58 7 996 A.... "C:\WINDOWS\inf\netfa410.PNF"
22 Feb 2008 16.30.08 174 876 A.... "C:\WINDOWS\inf\netfxocm.PNF"
23 Feb 2008 13.39.02 12 940 A.... "C:\WINDOWS\inf\netip6.PNF"
22 Feb 2008 14.31.58 9 556 A.... "C:\WINDOWS\inf\netirda.PNF"
22 Feb 2008 14.31.22 24 512 A.... "C:\WINDOWS\inf\netirsir.PNF"
23 Feb 2008 13.39.02 20 432 A.... "C:\WINDOWS\inf\netmscli.PNF"
22 Feb 2008 14.31.58 10 916 A.... "C:\WINDOWS\inf\netngr.PNF"
22 Feb 2008 16.29.58 16 960 A.... "C:\WINDOWS\inf\netoc.PNF"
22 Feb 2008 14.31.58 10 276 A.... "C:\WINDOWS\inf\netpnic.PNF"
23 Feb 2008 13.39.02 45 452 A.... "C:\WINDOWS\inf\netrass.PNF"
23 Feb 2008 13.39.02 20 020 A.... "C:\WINDOWS\inf\netrtsnt.PNF"
23 Feb 2008 13.39.02 38 264 A.... "C:\WINDOWS\inf\nettcpip.PNF"
23 Feb 2008 13.39.02 6 356 A.... "C:\WINDOWS\inf\nettun.PNF"
23 Feb 2008 13.39.02 8 932 A.... "C:\WINDOWS\inf\netupnph.PNF"
22 Feb 2008 14.31.56 9 948 A.... "C:\WINDOWS\inf\netw840.PNF"
23 Feb 2008 13.39.02 7 004 A.... "C:\WINDOWS\inf\netwzc.PNF"
22 Feb 2008 14.31.56 19 400 A.... "C:\WINDOWS\inf\netx500.PNF"
24 Jan 2008 10.55.26 78 340 A.... "C:\WINDOWS\inf\nokirmdm.PNF"
22 Feb 2008 16.54.48 1 317 396 A.... "C:\WINDOWS\inf\ntprint.PNF"
23 Feb 2008 13.39.04 53 292 A.... "C:\WINDOWS\inf\nv4_disp.PNF"
23 Feb 2008 13.39.04 22 148 A.... "C:\WINDOWS\inf\nvct.PNF"
23 Feb 2008 13.39.04 34 060 A.... "C:\WINDOWS\inf\nvdm.PNF"
23 Feb 2008 13.39.04 22 196 A.... "C:\WINDOWS\inf\nvts.PNF"
22 Feb 2008 16.30.04 4 384 A.... "C:\WINDOWS\inf\oeaccess.PNF"
31 Jan 2008 21.40.46 25 870 A.... "C:\WINDOWS\inf\oem14.PNF"
31 Jan 2008 21.40.00 9 648 A.... "C:\WINDOWS\inf\oem15.PNF"
26 Feb 2008 16.27.50 34 170 A.... "C:\WINDOWS\inf\oem20.PNF"
26 Feb 2008 16.28.04 6 074 A.... "C:\WINDOWS\inf\oem21.PNF"
26 Feb 2008 13.22.26 159 672 A.... "C:\WINDOWS\inf\oem23.PNF"
22 Feb 2008 20.17.20 1 646 624 A.... "C:\WINDOWS\inf\oem38.PNF"
23 Feb 2008 13.37.54 34 466 A.... "C:\WINDOWS\inf\oem39.PNF"
31 Jan 2008 21.40.02 30 418 A.... "C:\WINDOWS\inf\oem48.PNF"
23 Feb 2008 13.38.04 6 074 A.... "C:\WINDOWS\inf\oem49.PNF"
31 Jan 2008 21.41.10 7 764 A.... "C:\WINDOWS\inf\oem60.PNF"
12 Jan 2008 14.18.54 37 830 A.... "C:\WINDOWS\inf\oem61.PNF"
12 Jan 2008 14.20.10 94 080 A.... "C:\WINDOWS\inf\oem63.PNF"
31 Jan 2008 21.31.56 66 898 A.... "C:\WINDOWS\inf\oem8.PNF"
31 Jan 2008 21.40.00 12 684 A.... "C:\WINDOWS\inf\oem9.PNF"
23 Feb 2008 13.39.04 17 240 A.... "C:\WINDOWS\inf\oobe.PNF"
23 Feb 2008 13.39.04 12 992 A.... "C:\WINDOWS\inf\pchealth.PNF"
22 Feb 2008 16.54.36 105 488 A.... "C:\WINDOWS\inf\pnpscsi.PNF"
23 Feb 2008 13.39.04 11 488 A.... "C:\WINDOWS\inf\qmgr.PNF"
23 Feb 2008 13.39.04 7 132 A.... "C:\WINDOWS\inf\ramdisk.PNF"
22 Feb 2008 14.31.54 7 924 A.... "C:\WINDOWS\inf\s3nb.PNF"
22 Feb 2008 19.22.18 40 440 A.... "C:\WINDOWS\inf\sceregvl.PNF"
23 Feb 2008 13.39.06 21 952 A.... "C:\WINDOWS\inf\scsi.PNF"
23 Feb 2008 13.39.06 26 312 A.... "C:\WINDOWS\inf\secrecs.PNF"
23 Feb 2008 13.39.06 38 636 A.... "C:\WINDOWS\inf\shell.PNF"
23 Feb 2008 13.39.06 15 728 A.... "C:\WINDOWS\inf\shl_img.PNF"
26 Feb 2008 14.38.38 6 028 A.... "C:\WINDOWS\inf\skins.PNF"
23 Feb 2008 13.39.06 9 196 A.... "C:\WINDOWS\inf\slip.PNF"
23 Feb 2008 13.39.06 36 396 A.... "C:\WINDOWS\inf\smartcrd.PNF"
23 Feb 2008 13.39.06 11 956 A.... "C:\WINDOWS\inf\streamip.PNF"
23 Feb 2008 13.39.06 5 724 A.... "C:\WINDOWS\inf\swflash.PNF"
22 Feb 2008 16.29.58 7 272 A.... "C:\WINDOWS\inf\SYSOC.PNF"
23 Feb 2008 12.22.26 101 660 A.... "C:\WINDOWS\inf\syssetup.PNF"
22 Feb 2008 16.30.06 523 716 A.... "C:\WINDOWS\inf\tabletpc.PNF"
23 Feb 2008 13.39.06 60 012 A.... "C:\WINDOWS\inf\tape.PNF"
22 Feb 2008 16.30.00 122 632 A.... "C:\WINDOWS\inf\tsoc.PNF"
22 Feb 2008 16.54.38 51 400 A.... "C:\WINDOWS\inf\usbport.PNF"
22 Feb 2008 14.31.54 21 384 A.... "C:\WINDOWS\inf\wab50.PNF"
22 Feb 2008 16.30.04 4 072 A.... "C:\WINDOWS\inf\wmaccess.PNF"
22 Feb 2008 16.29.10 57 060 A.... "C:\WINDOWS\inf\wmp.PNF"
22 Feb 2008 16.30.04 4 440 A.... "C:\WINDOWS\inf\wmpocm.PNF"
22 Feb 2008 16.30.06 16 752 A.... "C:\WINDOWS\inf\wordpad.PNF"
23 Feb 2008 13.39.08 9 200 A.... "C:\WINDOWS\inf\wstcodec.PNF"
3 Mar 2008 16.46.00 4 098 A.... "C:\WINDOWS\network diagnostic\xpnetdiag.xml"
22 Feb 2008 15.00.42 65 ...H. "C:\WINDOWS\Offline Web Pages\desktop.ini"
7 Feb 2008 14.04.20 2 567 A.... "C:\WINDOWS\repair\config.nt"
22 Feb 2008 15.06.08 1 564 672 A.... "C:\WINDOWS\repair\default"
22 Feb 2008 15.01.32 1 564 672 A..H. "C:\WINDOWS\repair\ntuser.dat"
22 Feb 2008 15.06.08 28 672 A.... "C:\WINDOWS\repair\sam"
22 Feb 2008 15.06.08 53 248 A.... "C:\WINDOWS\repair\security"
22 Feb 2008 15.00.12 181 505 A.... "C:\WINDOWS\repair\setup.log"
22 Feb 2008 15.06.08 35 504 128 A.... "C:\WINDOWS\repair\software"
22 Feb 2008 15.04.24 2 379 776 A.... "C:\WINDOWS\repair\system"
22 Feb 2008 15.06.10 288 A.... "C:\WINDOWS\system32\$winnt$.inf"
10 Jan 2008 5.29.20 2 188 A.... "C:\WINDOWS\system32\50001T.dll"
23 Feb 2008 17.26.58 16 832 A.... "C:\WINDOWS\system32\amcompat.tlb"
22 Jan 2008 22.04.26 46 080 A.... "C:\WINDOWS\system32\amdpcom32.dll"
8 Mar 2008 12.15.38 24 264 A.... "C:\WINDOWS\system32\BMXBkpCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 24 264 A.... "C:\WINDOWS\system32\BMXCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 16 324 A.... "C:\WINDOWS\system32\BMXState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 16 324 A.... "C:\WINDOWS\system32\BMXStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\cdplayer.exe.manifest"
7 Feb 2008 14.04.20 2 567 A.... "C:\WINDOWS\system32\CONFIG.NT"
7 Mar 2008 20.39.04 4 096 A.... "C:\WINDOWS\system32\crash"
9 Feb 2008 16.13.34 6 820 A.... "C:\WINDOWS\system32\d3d9caps.dat"
8 Mar 2008 12.15.38 24 A.... "C:\WINDOWS\system32\DVCState-{00000002-00000000-00000002-00001102-00000002-80271102}.dat"
8 Mar 2008 12.15.38 24 A.... "C:\WINDOWS\system32\DVCStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.dat"
26 Feb 2008 19.57.06 2 492 A.... "C:\WINDOWS\system32\ealregsnapshot1.reg"
7 Mar 2008 12.35.40 134 872 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
7 Mar 2008 12.43.24 1 406 A.... "C:\WINDOWS\system32\Help.ico"
26 Feb 2008 2.37.34 1 280 A.... "C:\WINDOWS\system32\history.aaw"
17 Feb 2008 1.35.14 5 757 A.... "C:\WINDOWS\system32\jupdate-1.6.0_04-b12.log"
22 Feb 2008 15.00.42 488 A..HR "C:\WINDOWS\system32\logonui.exe.manifest"
1 Feb 2008 1.10.10 12 632 A.... "C:\WINDOWS\system32\lsdelete.exe"
4 Feb 2008 15.09.48 18 214 008 A.... "C:\WINDOWS\system32\MRT.exe"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\ncpa.cpl.manifest"
23 Feb 2008 17.26.58 23 392 A.... "C:\WINDOWS\system32\nscompat.tlb"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\nwc.cpl.manifest"
7 Mar 2008 12.43.24 30 590 A.... "C:\WINDOWS\system32\pavas.ico"
25 Feb 2008 9.53.08 71 696 A.... "C:\WINDOWS\system32\perfc009.dat"
25 Feb 2008 9.53.08 85 752 A.... "C:\WINDOWS\system32\perfc00B.dat"
25 Feb 2008 9.53.08 442 204 A.... "C:\WINDOWS\system32\perfh009.dat"
25 Feb 2008 9.53.08 417 048 A.... "C:\WINDOWS\system32\perfh00B.dat"
25 Feb 2008 9.53.08 987 254 A.... "C:\WINDOWS\system32\PerfStringBackup.INI"
11 Jan 2008 7.37.34 44 544 A.... "C:\WINDOWS\system32\pngfilt.dll"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\sapi.cpl.manifest"
26 Feb 2008 2.37.36 2 560 A.... "C:\WINDOWS\system32\settings.aaw"
8 Mar 2008 12.15.38 1 080 A.... "C:\WINDOWS\system32\settings.sfm"
8 Mar 2008 12.15.38 1 080 A.... "C:\WINDOWS\system32\settingsbkup.sfm"
22 Feb 2008 21.56.52 90 A.... "C:\WINDOWS\system32\spupdwxp.log"
7 Mar 2008 15.44.18 4 062 A.... "C:\WINDOWS\system32\tmp.reg"
7 Mar 2008 15.44.18 0 A.... "C:\WINDOWS\system32\tmp.txt"
7 Mar 2008 12.43.24 2 550 A.... "C:\WINDOWS\system32\Uninstall.ico"
27 Feb 2008 0.34.46 219 136 A.... "C:\WINDOWS\system32\uxtheme.dll"
22 Feb 2008 15.00.42 488 A..HR "C:\WINDOWS\system32\WindowsLogon.manifest"
7 Mar 2008 10.25.20 12 686 A.... "C:\WINDOWS\system32\wpa.dbl"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\wuaucpl.cpl.manifest"
8 Mar 2008 12.19.46 330 A..H. "C:\WINDOWS\Tasks\MP Scheduled Scan.job"
8 Mar 2008 12.16.38 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
17 Feb 2008 22.00.02 442 A.... "C:\WINDOWS\Tasks\SmartDefrag.job"
8 Mar 2008 12.18.48 9 928 A.... "C:\WINDOWS\Temp\addonscheck.xml"
4 Mar 2008 14.17.42 991 A.... "C:\WINDOWS\Temp\D653F3EC.TMP"
8 Mar 2008 15.32.42 1 316 A.... "C:\WINDOWS\Temp\ggp16.tmp"
8 Mar 2008 13.09.38 6 737 A.... "C:\WINDOWS\Temp\jar_cache62011.tmp"
8 Mar 2008 13.50.12 2 384 A.... "C:\WINDOWS\Temp\java_install_reg.log"
8 Mar 2008 12.21.58 167 A.... "C:\WINDOWS\Temp\jusched.log"
8 Mar 2008 12.36.52 1 710 A.... "C:\WINDOWS\Temp\MpCmdRun.log"
8 Mar 2008 12.18.48 5 630 A.... "C:\WINDOWS\Temp\pcsuitecheck_new.xml"
8 Mar 2008 15.36.44 80 518 A.... "C:\WINDOWS\Temp\scs1A.tmp"
8 Mar 2008 12.16.28 255 A.... "C:\WINDOWS\Temp\WGAErrLog.txt"
8 Mar 2008 13.05.56 512 A.... "C:\WINDOWS\Temp\~DF203A.tmp"
8 Mar 2008 13.05.56 512 A.... "C:\WINDOWS\Temp\~DF258A.tmp"
8 Mar 2008 13.04.26 16 384 A.... "C:\WINDOWS\Temp\~DFAD06.tmp"
8 Mar 2008 13.04.26 512 A.... "C:\WINDOWS\Temp\~DFAD0D.tmp"
8 Mar 2008 8.43.08 49 152 A.... "C:\WINDOWS\Temp\~DFD86C.tmp"
22 Feb 2008 19.48.22 6 720 A.... "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.inf"
22 Feb 2008 19.48.12 552 A.... "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.txt"
22 Feb 2008 20.23.56 4 662 A.... "C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.inf"
22 Feb 2008 20.23.44 0 A.... "C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.txt"
22 Feb 2008 19.56.50 14 581 A.... "C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.inf"
22 Feb 2008 19.56.26 3 945 A.... "C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.txt"
22 Feb 2008 20.04.04 6 516 A.... "C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.inf"
22 Feb 2008 20.03.58 316 A.... "C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.txt"
22 Feb 2008 18.44.10 4 408 A.... "C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.inf"
22 Feb 2008 18.43.32 87 A.... "C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.txt"
22 Feb 2008 19.59.42 6 452 A.... "C:\WINDOWS\$NtUninstallKB942830$\spuninst\spuninst.inf"
22 Feb 2008 19.59.38 312 A.... "C:\WINDOWS\$NtUninstallKB942830$\spuninst\spuninst.txt"
22 Feb 2008 19.47.22 6 256 A.... "C:\WINDOWS\$NtUninstallKB942831$\spuninst\spuninst.inf"
22 Feb 2008 19.47.06 328 A.... "C:\WINDOWS\$NtUninstallKB942831$\spuninst\spuninst.txt"
22 Feb 2008 19.59.50 6 467 A.... "C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.inf"
22 Feb 2008 19.59.46 1 074 A.... "C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.txt"
22 Feb 2008 20.00.48 6 357 A.... "C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.inf"
22 Feb 2008 20.00.44 1 044 A.... "C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.txt"
22 Feb 2008 19.30.26 6 049 A.... "C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.inf"
22 Feb 2008 19.30.20 1 043 A.... "C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.txt"
22 Feb 2008 19.57.02 6 479 A.... "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.inf"
22 Feb 2008 19.56.58 331 A.... "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.txt"
22 Feb 2008 19.07.22 6 411 A.... "C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.inf"
22 Feb 2008 19.06.46 312 A.... "C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.txt"
22 Feb 2008 19.08.56 5 410 A.... "C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.inf"
22 Feb 2008 19.08.26 180 A.... "C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.txt"
22 Feb 2008 19.30.12 4 929 A.... "C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.inf"
22 Feb 2008 19.29.58 0 A.... "C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.txt"
22 Feb 2008 19.59.34 6 735 A.... "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.inf"
22 Feb 2008 19.59.30 608 A.... "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.txt"
22 Feb 2008 20.23.18 4 750 A.... "C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.inf"
22 Feb 2008 20.23.04 0 A.... "C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.txt"
22 Feb 2008 20.23.36 4 750 A.... "C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.inf"
22 Feb 2008 20.23.24 0 A.... "C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.txt"
22 Feb 2008 20.23.00 4 750 A.... "C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.inf"
22 Feb 2008 20.22.38 0 A.... "C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.txt"
22 Feb 2008 18.32.58 4 092 A.... "C:\WINDOWS\$NtUninstallKB885836_0$\spuninst\spuninst.inf"
22 Feb 2008 18.31.56 0 A.... "C:\WINDOWS\$NtUninstallKB885836_0$\spuninst\spuninst.txt"
22 Feb 2008 18.43.22 4 212 A.... "C:\WINDOWS\$NtUninstallKB885836_1$\spuninst\spuninst.inf"
22 Feb 2008 18.42.44 0 A.... "C:\WINDOWS\$NtUninstallKB885836_1$\spuninst\spuninst.txt"
22 Feb 2008 18.31.32 4 180 A.... "C:\WINDOWS\$NtUninstallKB885835_1$\spuninst\spuninst.inf"
22 Feb 2008 18.30.56 0 A.... "C:\WINDOWS\$NtUninstallKB885835_1$\spuninst\spuninst.txt"
22 Feb 2008 18.42.40 4 212 A.... "C:\WINDOWS\$NtUninstallKB885835_2$\spuninst\spuninst.inf"
22 Feb 2008 18.42.06 0 A.... "C:\WINDOWS\$NtUninstallKB885835_2$\spuninst\spuninst.txt"
22 Feb 2008 18.42.00 4 212 A.... "C:\WINDOWS\$NtUninstallKB873339_3$\spuninst\spuninst.inf"
22 Feb 2008 18.41.16 0 A.... "C:\WINDOWS\$NtUninstallKB873339_3$\spuninst\spuninst.txt"
26 Feb 2008 15.53.40 6 160 A.... "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.inf"
26 Feb 2008 15.54.12 6 746 A.... "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.inf"
22 Feb 2008 16.30.56 4 028 A.... "C:\WINDOWS\$NtUninstallKB873339_0$\spuninst\spuninst.inf"
22 Feb 2008 16.30.22 0 A.... "C:\WINDOWS\$NtUninstallKB873339_0$\spuninst\spuninst.txt"
22 Feb 2008 18.20.08 4 148 A.... "C:\WINDOWS\$NtUninstallKB873339_1$\spuninst\spuninst.inf"
22 Feb 2008 18.19.24 0 A.... "C:\WINDOWS\$NtUninstallKB873339_1$\spuninst\spuninst.txt"
22 Feb 2008 18.20.50 5 056 A.... "C:\WINDOWS\$NtUninstallKB885835_0$\spuninst\spuninst.inf"
22 Feb 2008 18.20.16 323 A.... "C:\WINDOWS\$NtUninstallKB885835_0$\spuninst\spuninst.txt"
22 Feb 2008 18.30.50 4 180 A.... "C:\WINDOWS\$NtUninstallKB873339_2$\spuninst\spuninst.inf"
22 Feb 2008 18.30.10 0 A.... "C:\WINDOWS\$NtUninstallKB873339_2$\spuninst\spuninst.txt"
3 Mar 2008 4.06.24 40 748 A.... "C:\WINDOWS\BDOSCAN8\plugins\7zip.xmd"
3 Mar 2008 4.06.24 3 892 A.... "C:\WINDOWS\BDOSCAN8\plugins\access.xmd"
3 Mar 2008 4.06.24 8 737 A.... "C:\WINDOWS\BDOSCAN8\plugins\ace.xmd"
3 Mar 2008 4.06.24 3 399 A.... "C:\WINDOWS\BDOSCAN8\plugins\adsntfs.xmd"
3 Mar 2008 4.06.24 19 174 A.... "C:\WINDOWS\BDOSCAN8\plugins\alz.xmd"
3 Mar 2008 4.06.24 3 611 A.... "C:\WINDOWS\BDOSCAN8\plugins\arc.xmd"
3 Mar 2008 4.06.24 6 284 A.... "C:\WINDOWS\BDOSCAN8\plugins\arj.xmd"
3 Mar 2008 4.06.26 101 482 A.... "C:\WINDOWS\BDOSCAN8\plugins\aspy_emu.cvd"
3 Mar 2008 4.06.26 6 712 A.... "C:\WINDOWS\BDOSCAN8\plugins\bach.xmd"
3 Mar 2008 4.06.22 1 878 A.... "C:\WINDOWS\BDOSCAN8\plugins\boot.xmd"
3 Mar 2008 4.06.26 19 355 A.... "C:\WINDOWS\BDOSCAN8\plugins\bzip2.xmd"
3 Mar 2008 4.06.26 14 362 A.... "C:\WINDOWS\BDOSCAN8\plugins\cab.xmd"
3 Mar 2008 4.06.26 358 723 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.cvd"
3 Mar 2008 4.06.26 99 252 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.ivd"
3 Mar 2008 4.06.26 396 480 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.rvd"
3 Mar 2008 4.06.28 183 666 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.xmd"
3 Mar 2008 4.06.28 119 029 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_dll.cvd"
3 Mar 2008 4.06.28 111 548 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_emu.cvd"
3 Mar 2008 4.06.28 297 530 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.cvd"
3 Mar 2008 4.06.28 410 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.ivd"
3 Mar 2008 4.06.28 13 189 A.... "C:\WINDOWS\BDOSCAN8\plugins\chm.xmd"
3 Mar 2008 4.06.28 6 626 A.... "C:\WINDOWS\BDOSCAN8\plugins\cookie.cvd"
3 Mar 2008 4.06.28 2 158 A.... "C:\WINDOWS\BDOSCAN8\plugins\cookie.xmd"
3 Mar 2008 4.06.28 3 489 A.... "C:\WINDOWS\BDOSCAN8\plugins\cpio.xmd"
3 Mar 2008 4.06.30 295 343 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.cvd"
3 Mar 2008 4.06.30 86 121 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.ivd"
3 Mar 2008 4.06.30 6 060 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.xmd"
3 Mar 2008 4.06.30 1 346 A.... "C:\WINDOWS\BDOSCAN8\plugins\dbx.xmd"
3 Mar 2008 4.06.30 10 871 A.... "C:\WINDOWS\BDOSCAN8\plugins\docfile.xmd"
3 Mar 2008 4.06.30 34 225 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.001"
3 Mar 2008 4.06.30 35 147 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.002"
3 Mar 2008 4.06.30 33 945 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.003"
3 Mar 2008 4.06.30 33 915 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.004"
3 Mar 2008 4.06.30 30 065 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.005"
3 Mar 2008 4.06.30 32 614 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.006"
3 Mar 2008 4.06.30 30 115 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.007"
3 Mar 2008 4.06.32 30 026 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.008"
3 Mar 2008 4.06.32 30 093 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.009"
3 Mar 2008 4.06.32 30 299 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.010"
3 Mar 2008 4.06.32 30 482 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.011"
3 Mar 2008 4.06.32 30 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.012"
3 Mar 2008 4.06.32 13 045 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.013"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.014"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.015"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.016"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.017"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.018"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.019"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.020"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.021"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.022"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.023"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.024"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.025"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.026"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.027"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.028"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.029"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.030"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.031"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.032"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.033"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.034"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.035"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.036"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.037"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.038"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.039"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.040"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.041"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.042"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.043"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.044"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.045"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.046"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.047"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.048"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.049"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.050"
3 Mar 2008 4.06.42 6 500 383 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.cvd"
3 Mar 2008 4.06.42 30 153 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i01"
3 Mar 2008 4.06.42 34 745 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i02"
3 Mar 2008 4.06.42 25 792 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i03"
3 Mar 2008 4.06.42 26 845 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i04"
3 Mar 2008 4.06.42 26 331 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i05"
3 Mar 2008 4.06.42 31 133 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i06"
3 Mar 2008 4.06.42 33 430 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i07"
3 Mar 2008 4.06.42 31 219 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i08"
3 Mar 2008 4.06.42 26 323 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i09"
3 Mar 2008 4.06.42 34 476 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i10"
3 Mar 2008 4.06.42 32 074 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i11"
3 Mar 2008 4.06.44 32 454 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i12"
3 Mar 2008 4.06.44 30 114 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i13"
3 Mar 2008 4.06.44 29 089 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i14"
3 Mar 2008 4.06.44 30 630 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i15"
3 Mar 2008 4.06.44 28 175 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i16"
3 Mar 2008 4.06.44 31 458 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i17"
3 Mar 2008 4.06.44 27 984 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i18"
3 Mar 2008 4.06.44 31 448 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i19"
3 Mar 2008 4.06.44 31 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i20"
3 Mar 2008 4.06.44 30 627 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i21"
3 Mar 2008 4.06.44 34 776 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i22"
3 Mar 2008 4.06.44 30 106 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i23"
3 Mar 2008 4.06.46 30 949 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i24"
3 Mar 2008 4.06.46 26 371 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i25"
3 Mar 2008 4.06.46 28 079 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i26"
3 Mar 2008 4.06.46 29 149 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i27"
3 Mar 2008 4.06.46 32 521 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i28"
3 Mar 2008 4.06.46 30 267 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i29"
3 Mar 2008 4.06.46 25 865 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i30"
3 Mar 2008 4.06.46 27 564 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i31"
3 Mar 2008 4.06.46 29 338 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i32"
3 Mar 2008 4.06.46 30 171 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i33"
3 Mar 2008 4.06.46 30 101 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i34"
3 Mar 2008 4.06.46 32 677 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i35"
3 Mar 2008 4.06.48 33 657 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i36"
3 Mar 2008 4.06.48 31 020 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i37"
3 Mar 2008 4.06.48 30 698 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i38"
3 Mar 2008 4.06.48 31 845 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i39"
3 Mar 2008 4.06.48 30 380 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i40"
3 Mar 2008 4.06.48 29 376 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i41"
3 Mar 2008 4.06.48 32 985 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i42"
3 Mar 2008 4.06.48 29 376 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i43"
3 Mar 2008 4.06.48 30 291 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i44"
3 Mar 2008 4.06.48 29 463 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i45"
3 Mar 2008 4.06.48 27 444 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i46"
3 Mar 2008 4.06.48 32 667 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i47"
3 Mar 2008 4.06.50 31 295 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i48"
3 Mar 2008 4.06.50 27 643 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i49"
3 Mar 2008 4.06.50 26 649 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i50"
3 Mar 2008 4.06.50 30 905 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i51"
3 Mar 2008 4.06.50 28 838 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i52"
3 Mar 2008 4.06.50 29 055 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i53"
3 Mar 2008 4.06.50 21 693 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i54"
3 Mar 2008 4.06.50 29 624 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i55"
3 Mar 2008 4.06.50 26 251 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i56"
3 Mar 2008 4.06.50 30 238 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i57"
3 Mar 2008 4.06.50 32 989 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i58"
3 Mar 2008 4.06.50 29 765 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i59"
3 Mar 2008 4.06.52 29 298 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i60"
3 Mar 2008 4.06.52 25 936 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i61"
3 Mar 2008 4.06.52 31 044 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i62"
3 Mar 2008 4.06.52 25 913 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i63"
3 Mar 2008 4.06.52 26 004 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i64"
3 Mar 2008 4.06.52 27 911 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i65"
3 Mar 2008 4.06.52 30 220 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i66"
3 Mar 2008 4.06.52 33 240 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i67"
3 Mar 2008 4.06.52 34 862 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i68"
3 Mar 2008 4.06.52 32 957 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i69"
3 Mar 2008 4.06.52 32 552 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i70"
3 Mar 2008 4.06.52 29 076 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i71"
3 Mar 2008 4.06.54 32 504 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i72"
3 Mar 2008 4.06.54 30 678 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i73"
3 Mar 2008 4.06.54 32 067 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i74"
3 Mar 2008 4.06.54 33 326 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i75"
3 Mar 2008 4.06.54 33 635 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i76"
3 Mar 2008 4.06.54 34 202 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i77"
3 Mar 2008 4.06.54 36 009 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i78"
3 Mar 2008 4.06.54 34 840 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i79"
3 Mar 2008 4.06.54 31 465 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i80"
3 Mar 2008 4.06.54 32 997 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i81"
3 Mar 2008 4.06.54 31 546 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i82"
3 Mar 2008 4.06.56 34 072 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i83"
3 Mar 2008 4.06.56 30 433 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i84"
3 Mar 2008 4.06.56 31 381 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i85"
3 Mar 2008 4.06.56 32 983 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i86"
3 Mar 2008 4.06.56 30 159 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i87"
3 Mar 2008 4.06.56 33 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i88"
3 Mar 2008 4.06.56 32 228 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i89"
3 Mar 2008 4.06.56 29 859 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i90"
3 Mar 2008 4.06.56 30 116 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i91"
3 Mar 2008 4.06.56 33 050 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i92"
3 Mar 2008 4.06.56 30 320 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i93"
3 Mar 2008 4.06.56 33 050 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i94"
3 Mar 2008 4.06.58 32 324 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i95"
3 Mar 2008 4.06.58 31 914 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i96"
3 Mar 2008 4.06.58 34 915 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i97"
3 Mar 2008 4.06.58 34 586 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i98"
3 Mar 2008 4.06.58 30 800 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i99"
3 Mar 2008 4.06.58 29 004 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.ivd"
3 Mar 2008 4.06.58 5 001 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.xmd"
3 Mar 2008 4.06.58 2 806 A.... "C:\WINDOWS\BDOSCAN8\plugins\epoc.xmd"
3 Mar 2008 4.06.58 301 831 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.cvd"
3 Mar 2008 4.06.58 59 319 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i01"
3 Mar 2008 4.07.00 57 208 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i02"
3 Mar 2008 4.07.00 51 260 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i03"
3 Mar 2008 4.07.00 50 574 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i04"
3 Mar 2008 4.07.00 55 570 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i05"
3 Mar 2008 4.07.00 55 887 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i06"
3 Mar 2008 4.07.00 49 628 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i07"
3 Mar 2008 4.07.00 34 680 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i08"
3 Mar 2008 4.07.00 26 888 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i09"
3 Mar 2008 4.07.00 31 601 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i10"
3 Mar 2008 4.07.00 31 453 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i11"
3 Mar 2008 4.07.00 31 589 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i12"
3 Mar 2008 4.07.00 29 124 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i13"
3 Mar 2008 4.07.00 20 322 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i14"
3 Mar 2008 4.07.02 32 737 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i15"
3 Mar 2008 4.07.02 22 098 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i16"
3 Mar 2008 4.07.02 29 879 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i17"
3 Mar 2008 4.07.02 5 301 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i18"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i19"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i20"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i21"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i22"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i23"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i24"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i25"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i26"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i27"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i28"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i29"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i30"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i31"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i32"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i33"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i34"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i35"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i36"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i37"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i38"
3 Mar 2008 4.07.02 62 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.i39"
3 Mar 2008 4.07.04 58 430 A.... "C:\WINDOWS\BDOSCAN8\plugins\e_spyw.ivd"
3 Mar 2008 4.07.04 122 676 A.... "C:\WINDOWS\BDOSCAN8\plugins\gvmscripts.cvd"
3 Mar 2008 4.07.04 3 842 A.... "C:\WINDOWS\BDOSCAN8\plugins\gzip.xmd"
3 Mar 2008 4.07.04 8 201 A.... "C:\WINDOWS\BDOSCAN8\plugins\ha.xmd"
3 Mar 2008 4.07.04 3 534 A.... "C:\WINDOWS\BDOSCAN8\plugins\hlp.xmd"
3 Mar 2008 4.07.04 4 669 A.... "C:\WINDOWS\BDOSCAN8\plugins\hpe.cvd"
3 Mar 2008 4.07.04 2 537 A.... "C:\WINDOWS\BDOSCAN8\plugins\hpe.xmd"
3 Mar 2008 4.07.04 1 712 A.... "C:\WINDOWS\BDOSCAN8\plugins\hqx.xmd"
3 Mar 2008 4.07.04 18 951 A.... "C:\WINDOWS\BDOSCAN8\plugins\html.xmd"
3 Mar 2008 4.07.04 7 622 A.... "C:\WINDOWS\BDOSCAN8\plugins\imp.xmd"
3 Mar 2008 4.07.04 1 173 A.... "C:\WINDOWS\BDOSCAN8\plugins\inno.xmd"
3 Mar 2008 4.07.04 21 368 A.... "C:\WINDOWS\BDOSCAN8\plugins\instyler.xmd"
3 Mar 2008 4.07.04 37 426 A.... "C:\WINDOWS\BDOSCAN8\plugins\iso.xmd"
3 Mar 2008 4.07.04 3 305 A.... "C:\WINDOWS\BDOSCAN8\plugins\java.cvd"
3 Mar 2008 4.07.04 8 501 A.... "C:\WINDOWS\BDOSCAN8\plugins\java.xmd"
3 Mar 2008 4.07.04 4 795 A.... "C:\WINDOWS\BDOSCAN8\plugins\jpeg.xmd"
3 Mar 2008 4.07.06 9 492 A.... "C:\WINDOWS\BDOSCAN8\plugins\lha.xmd"
3 Mar 2008 4.07.06 930 A.... "C:\WINDOWS\BDOSCAN8\plugins\lnk.xmd"
3 Mar 2008 4.07.06 2 150 A.... "C:\WINDOWS\BDOSCAN8\plugins\mbox.xmd"
3 Mar 2008 4.07.06 791 A.... "C:\WINDOWS\BDOSCAN8\plugins\mbx.xmd"
3 Mar 2008 4.07.06 45 983 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx.xmd"
3 Mar 2008 4.07.06 344 892 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_97.cvd"
3 Mar 2008 4.07.06 172 433 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_97.ivd"
3 Mar 2008 4.07.06 59 489 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_w95.cvd"
3 Mar 2008 4.07.06 9 651 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_x95.cvd"
3 Mar 2008 4.07.06 1 948 A.... "C:\WINDOWS\BDOSCAN8\plugins\mdx_xf.cvd"
3 Mar 2008 4.07.06 6 996 A.... "C:\WINDOWS\BDOSCAN8\plugins\mime.xmd"
3 Mar 2008 4.07.08 5 672 A.... "C:\WINDOWS\BDOSCAN8\plugins\mobmalware.cvd"
3 Mar 2008 4.07.08 6 864 A.... "C:\WINDOWS\BDOSCAN8\plugins\mobmalware.xmd"
3 Mar 2008 4.07.08 2 082 A.... "C:\WINDOWS\BDOSCAN8\plugins\mso.xmd"
3 Mar 2008 4.07.08 205 A.... "C:\WINDOWS\BDOSCAN8\plugins\na.cvd"
3 Mar 2008 4.07.08 12 596 A.... "
testata millä tuon sait :D
aja sdfix uudestaa
paina y ja enter EI a ja enter
ei käy vaihtoehto y se lopettaa koko ohjelman, kun se kysyy siinä mitä haluat?
ei lopeta
Jos painat komentokehotteeseen E = EXIT ja kun se kysyy komentokehotteessa you want exit. Eli jos paina Y = YES ThatsIt!
vaaa se sdfix siellä vikasiedossa
paina run this
tulee Y, a ja E paina Y ja enter
en mä enää muistanut et se piti ajaa vikasietotilassa. ja olin siirtänyt sen omiin kansioihini, mutta on siellä vanha loki ja jotain uuttakin. pistä ne kaikki tähän.
[b]SDFix: Version 1.153 [/b]
Run by bianco on pe 07.03.2008 at 23:41
Microsoft Windows XP [versio 5.1.2600]
Running From: C:\DOCUME~1\bianco\TYPYT~1\SDFix
[b]Checking Services [/b]:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting
[b]Checking Files [/b]:
Trojan Files Found:
C:\WINDOWS\system32\ntos.exe - Deleted
C:\WINDOWS\system32\wsnpoem\audio.dll - Deleted
C:\WINDOWS\system32\wsnpoem\video.dll - Deleted
Folder C:\WINDOWS\system32\wsnpoem - Removed
Removing Temp Files
[b]ADS Check [/b]:
[b]Final Check [/b]:
catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-07 23:49:12
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg40]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,51,74,54,fb,9f,98,53,cb,b6,4d,04,85,9f,..
"ljej40"=hex:7e,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,fd,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg41]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,db,70,82,a2,9f,98,53,cb,83,4d,04,85,9b,..
"ljej40"=hex:4b,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,c0,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\a347scsi\Config\jdgg42]
"ujdew"=hex:20,02,00,00,f3,85,49,e1,40,36,7f,14,9f,98,53,cb,a3,4d,04,85,9f,..
"ljej40"=hex:6b,8b,09,da,20,c4,45,bf,fe,11,13,f1,0f,5f,ec,67,4d,b4,40,07,84,..
scanning hidden registry entries ...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\\x00ffc\xd3w\2]
"b049C053C7D38EE4AB9A00CB3B5D2472"="C?\Program Files\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
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
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
[b]Remaining Services [/b]:
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"D:\\Program Files\\Azureus\\Azureus\\Azureus.exe"="D:\\Program Files\\Azureus\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\javaw.exe"="C:\\Program Files\\Java\\jre1.5.0_11\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\Program Files\\Java\\jre1.6.0_02\\bin\\orbd.exe"="C:\\Program Files\\Java\\jre1.6.0_02\\bin\\orbd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\\WINDOWS\\system32\\dpnsvr.exe"="C:\\WINDOWS\\system32\\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\\WINDOWS\\system32\\dxdiag.exe"="C:\\WINDOWS\\system32\\dxdiag.exe:*:Enabled:Microsoft DirectX Diagnostic Tool"
"C:\\WINDOWS\\system32\\mmc.exe"="C:\\WINDOWS\\system32\\mmc.exe:*:Enabled:Microsoft Management Console"
"C:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"="C:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"D:\\ExTietoa\\bianco\\Abdul\\Adult TvInternet\\TvInternet.exe"="D:\\ExTietoa\\bianco\\Abdul\\Adult TvInternet\\TvInternet.exe:*:Enabled:TvInternet"
"C:\\Program Files\\Windows Media Player\\wmplayer.exe"="C:\\Program Files\\Windows Media Player\\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"="C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe"="C:\\Program Files\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\Casino\\SuperVegasCasino\\casino.exe"="C:\\Casino\\SuperVegasCasino\\casino.exe:*:Enabled:casino"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"="C:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe:*:Enabled:OTI@Home User Interface"
"C:\\WINDOWS\\Temp\\CRY800.tmp\\install.exe"="C:\\WINDOWS\\Temp\\CRY800.tmp\\install.exe:*:Enabled:setup wizard"
"C:\\Program Files\\Playboy Poker\\UA.exe"="C:\\Program Files\\Playboy Poker\\UA.exe:*:Enabled:UA Application"
"C:\\Casino\\bwin Casino\\casino.exe"="C:\\Casino\\bwin Casino\\casino.exe:*:Enabled:casino"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"F:\\Poker\\Parbet.com Poker\\UA.exe"="F:\\Poker\\Parbet.com Poker\\UA.exe:*:Enabled:UA Application"
"F:\\Poker\\UvsPoker\\jre\\bin\\javaw.exe"="F:\\Poker\\UvsPoker\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe"="F:\\Poker\\B2BPOKER\\Club4Aces.com\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"D:\\Program Files\\Real\\realplay.exe"="D:\\Program Files\\Real\\realplay.exe:*:Enabled:RealPlayer"
"F:\\Poker\\Club4Aces.com\\jre\\bin\\javaw.exe"="F:\\Poker\\Club4Aces.com\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Suorita DLL sovelluksena"
"F:\\Poker\\24hPoker\\jre\\bin\\javaw.exe"="F:\\Poker\\24hPoker\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\Pokeriparatiisi\\jre\\bin\\javaw.exe"="F:\\Poker\\Pokeriparatiisi\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\Ladbrokers\\Ladbrokes3DPoker\\PWPoker.exe"="F:\\Poker\\Ladbrokers\\Ladbrokes3DPoker\\PWPoker.exe:*:Enabled:PWize client"
"F:\\Poker\\Pokerihuone\\jre\\bin\\javaw.exe"="F:\\Poker\\Pokerihuone\\jre\\bin\\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"F:\\Poker\\InterPoker\\UA.exe"="F:\\Poker\\InterPoker\\UA.exe:*:Enabled:UA Application"
"C:\\WINDOWS\\Temp\\CRY88F8.tmp\\install.exe"="C:\\WINDOWS\\Temp\\CRY88F8.tmp\\install.exe:*:Enabled:setup wizard"
"F:\\Poker\\SunPoker.com\\UA.EXE"="F:\\Poker\\SunPoker.com\\UA.EXE:*:Enabled:UA Application"
"G:\\European Street Racing\\ESR DEMO.exe"="G:\\European Street Racing\\ESR DEMO.exe:*:Enabled:ESR DEMO"
"D:\\Program Files\\Azureus\\Azureus.exe"="D:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"D:\\Program Files\\Steam\\steamapps\\biancool\\half-life 2 deathmatch\\hl2.exe"="D:\\Program Files\\Steam\\steamapps\\biancool\\half-life 2 deathmatch\\hl2.exe:*:Enabled:hl2"
"C:\\Documents and Settings\\All Users\\Application Data\\Spadester\\spades.exe"="C:\\Documents and Settings\\All Users\\Application Data\\Spadester\\spades.exe:*:Enabled:spades"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[b]Remaining Files [/b]:
File Backups: - C:\DOCUME~1\bianco\TYPYT~1\SDFix\backups\backups.zip
[b]Files with Hidden Attributes [/b]:
Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
Mon 22 Aug 2005 79,872 A..H. --- "C:\Swsetup\Monitors\SP31622\hpinsx64.exe"
[b]Finished![/b]
[b]System Report[/b]
*************
Run on la 08.03.2008 at 15:40
Microsoft Windows XP [versio 5.1.2600]
Current user is an administrator
[b]Running Processes[/b]:
\SystemRoot\System32\smss.exe [516]
\??\C:\WINDOWS\system32\csrss.exe [572]
\??\C:\WINDOWS\system32\winlogon.exe [596]
C:\WINDOWS\system32\services.exe [640]
C:\WINDOWS\system32\lsass.exe [652]
C:\WINDOWS\system32\Ati2evxx.exe [800]
C:\WINDOWS\system32\svchost.exe [812]
C:\WINDOWS\system32\svchost.exe [908]
C:\Program Files\Windows Defender\MsMpEng.exe [972]
C:\WINDOWS\System32\svchost.exe [1016]
C:\WINDOWS\system32\svchost.exe [1048]
C:\WINDOWS\System32\svchost.exe [1096]
C:\WINDOWS\System32\svchost.exe [1272]
D:\Program Files\Lavasoft\aawservice.exe [1356]
C:\WINDOWS\system32\Ati2evxx.exe [1388]
C:\WINDOWS\Explorer.EXE [1444]
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [1508]
C:\Program Files\Alwil Software\Avast4\ashServ.exe [1576]
C:\WINDOWS\system32\spoolsv.exe [1864]
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe [1968]
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [1996]
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe [2040]
C:\WINDOWS\system32\HPZipm12.exe [408]
C:\WINDOWS\system32\svchost.exe [576]
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [1916]
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2052]
C:\WINDOWS\System32\alg.exe [2204]
C:\Program Files\Alwil Software\Avast4\ashDisp.exe [2356]
D:\Program Files\Vista Drive Icon\DrvIcon.exe [2392]
C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe [2400]
C:\WINDOWS\system32\CTHELPER.EXE [2420]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2444]
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [2488]
C:\WINDOWS\system32\ctfmon.exe [2496]
D:\Program Files\LClock\lclock.exe [2504]
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe [2552]
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe [2588]
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2636]
D:\Program Files\Webshots\webshots.scr [2676]
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [3264]
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe [3512]
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe [3612]
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe [3672]
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [492]
F:\Poker\Club4Aces.com\Client.exe [3232]
F:\Poker\Club4Aces.com\jre\bin\javaw.exe [732]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [1680]
C:\Program Files\Windows Media Player\wmplayer.exe [2956]
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE [2780]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [3296]
C:\Program Files\GammaSutra\GammaSutra.exe [3796]
F:\Poker\T6\T6poker.exe [2776]
C:\Program Files\Internet Explorer\IEXPLORE.EXE [2988]
[b]Drivers - Running[/b]:
a347bus
a347scsi
Aavmker4
ACPI
AFD
agp440
aswMon2
aswRdr
aswTdi
atapi
ati2mtag
audstub
AVG
AvgAsCln
Beep
catchme
Cdfs
Cdrom
ctac32k
ctaud2k
ctprxy2k
ctsfm2k
Disk
dmio
dmload
E100B
emupia
Fastfat
Fips
FltMgr
Ftdisk
gameenum
GEARAspiWDM
Gpc
ha10kx2k
HidUsb
i8042prt
IdeBusDr
IdeChnDr
Imapi
IntelIde
IpNat
IPSec
isapnp
Kbdclass
kmixer
KSecDD
mnmdd
Mouclass
mouhid
MountMgr
MRxDAV
MRxSmb
Msfs
mssmbios
Mup
NDIS
NdisTapi
NdisWan
NDProxy
NetBIOS
NetBT
Npfs
Ntfs
Null
ossrv
Parport
PartMgr
ParVdm
PCI
PCIIde
PfModNT
Point32
PptpMiniport
Processor
prodrv06
prohlp02
PSched
Ptilink
PxHelp20
RasAcd
Rasl2tp
RasPppoe
Raspti
Rdbss
RDPCDD
rdpdr
redbook
Secdrv
serenum
Serial
sfdrv01
sfhlp01
sfhlp02
sfsync02
sfvfs02
sr
Srv
swenum
sysaudio
Tcpip
TermDD
tmcomm
Update
usbehci
usbhub
usbuhci
VgaSave
VolSnap
Wanarp
wdmaud
WudfPf
[b]Drivers - Stopped[/b]:
Abiosdsk
abp480n5
ACPIEC
adpu160m
aec
Aha154x
aic78u2
aic78xx
AliIde
amsint
asc
asc3350p
asc3550
AsyncMac
Atdisk
Atmarpc
BootScreen
cbidf2k
cd20xrnt
Cdaudio
Changer
CmdIde
Cpqarray
ctljystk
dac960nt
dmboot
DMusic
dpti2o
drmkaud
emu10k
emu10k1
Fdc
Flpydisk
hpn
HPZid412
HPZipr12
HPZius12
HTTP
i2omgmt
i2omp
ini910u
intelppm
ip6fw
IpFilterDriver
IpInIp
IRENUM
L8042PR2
lbrtfdc
LHidFlt2
LMouFlt2
Modem
mraid35x
MSKSSRV
MSPCLOCK
MSPQM
ndiscm
Ndisuio
Nokia
Nokia
NwlnkFlt
NwlnkFwd
PCIDump
Pcmcia
PDCOMP
PDFRAME
PDRELI
PDRFRAME
perc2
perc2hib
ql1080
Ql10wnt
ql12160
ql1240
ql1280
RDPWD
Sfloppy
sfman
Simbad
Sparrow
splitter
swmidi
symc810
symc8xx
sym_hi
sym_u3
TDPIPE
TDTCP
TosIde
TRIXX
TVICHW32
Udfs
ultra
usbccgp
usbprint
usbscan
usbstor
ViaIde
wanusb
WDICA
WudfRd
[b]Services - Running[/b]:
aawservice
ALG
AshampooDefragService
aswUpdSv
Ati
AudioSrv
avast!
avast!
avast!
AVG
BITS
Browser
CryptSvc
DcomLaunch
Dhcp
dmserver
Dnscache
ERSvc
Eventlog
EventSystem
helpsvc
HidServ
lanmanserver
LanmanWorkstation
LmHosts
Netman
Nla
PlugPlay
Pml
PolicyAgent
ProtectedStorage
RasMan
RpcSs
SamSs
Schedule
seclogon
SENS
ServiceLayer
SharedAccess
ShellHWDetection
Spooler
srservice
stisvc
TapiSrv
Themes
TrkWks
W32Time
WebClient
WinDefend
winmgmt
wscsvc
wuauserv
WudfSvc
[b]Services - Stopped[/b]:
Alerter
Apple
AppMgmt
aspnet_state
ATI
CiSvc
ClipSrv
clr_optimization_v2.0.50727_32
COMSysApp
dmadmin
FastUserSwitchingCompatibility
FontCache3.0.0.0
gusvc
HTTPFilter
IDriverT
idsvc
IISADMIN
ImapiService
iPod
Messenger
mnmsrvc
MSDTC
MSFtpsvc
MSIServer
NetDDE
NetDDEdsdm
Netlogon
NetTcpPortSharing
NtLmSsp
NtmsSvc
RasAuto
RDSessMgr
RemoteAccess
RemoteRegistry
RpcLocator
RSVP
SCardSvr
SMTPSVC
SNMP
SNMPTRAP
SSDPSRV
SwPrv
SysmonLog
TermService
TlntSvr
upnphost
UPS
VSS
WMConnectCDS
WmdmPmSN
Wmi
WmiApSrv
WMPNetworkSvc
WZCSVC
xmlprov
[b]Files Created/Modified - 60 Days[/b]:
C:\
NV‹÷¸ GÍ!‹þ^ s €= t €= tGëøª8uFIãó¤é¨ özšu·;‹{š+xšÂ_• - 1252,
22 Feb 2008 21.26.32 194 ..SH. "C:\boot.ini"
8 Mar 2008 0.31.52 20 294 A.... "C:\ComboFix.txt"
3 Mar 2008 1.11.42 157 A.... "C:\error.txt"
8 Mar 2008 12.16.24 1 609 420 800 A.SH. "C:\hiberfil.sys"
22 Feb 2008 16.24.20 47 564 A.SHR "C:\NTDETECT.COM"
22 Feb 2008 16.24.20 250 112 A.SHR "C:\ntldr"
8 Mar 2008 12.16.22 2 145 386 496 A.SH. "C:\pagefile.sys"
7 Mar 2008 15.48.06 2 312 A.... "C:\rapport.txt"
C:\WINDOWS\
8 Jan 2008 9.34.42 11 942 A.... "C:\WINDOWS\atiogl.xml"
8 Mar 2008 12.16.26 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
27 Feb 2008 0.34.34 2 359 350 A.... "C:\WINDOWS\BricoPack Wallpaper.bmp"
27 Feb 2008 0.34.46 5 466 A.... "C:\WINDOWS\BricoPackFoldersDelete.cmd"
27 Feb 2008 0.34.46 70 821 A.... "C:\WINDOWS\BricoPackUninst.txt"
27 Feb 2008 0.34.46 70 821 A.... "C:\WINDOWS\BricoPackUninst.cmd"
17 Feb 2008 2.42.08 116 A.... "C:\WINDOWS\NeroDigital.ini"
22 Feb 2008 15.00.46 4 784 A.... "C:\WINDOWS\ODBCINST.INI"
9 Feb 2008 20.01.54 27 A.... "C:\WINDOWS\popcinfot.dat"
31 Jan 2008 19.05.32 1 409 A.... "C:\WINDOWS\QTFont.for"
8 Feb 2008 19.03.06 54 156 A..H. "C:\WINDOWS\QTFont.qfn"
26 Feb 2008 16.28.12 128 A.... "C:\WINDOWS\SBWIN.INI"
8 Mar 2008 12.15.34 11 568 A.... "C:\WINDOWS\SchedLgU.Txt"
8 Mar 2008 10.52.24 60 A.... "C:\WINDOWS\setupact.log"
8 Mar 2008 10.52.24 0 A.... "C:\WINDOWS\setuperr.log"
26 Feb 2008 13.12.34 0 ..... "C:\WINDOWS\Sti_Trace.log"
8 Mar 2008 0.31.00 227 A.... "C:\WINDOWS\system.ini"
8 Mar 2008 12.16.46 157 A.... "C:\WINDOWS\wiadebug.log"
8 Mar 2008 12.16.44 48 A.... "C:\WINDOWS\wiaservc.log"
7 Mar 2008 12.51.54 925 A.... "C:\WINDOWS\win.ini"
8 Mar 2008 15.19.40 677 831 A.... "C:\WINDOWS\WindowsUpdate.log"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\WindowsShell.Manifest"
5 Mar 2008 1.10.04 214 A.... "C:\WINDOWS\WININIT.INI"
22 Feb 2008 21.57.14 316 640 A.... "C:\WINDOWS\WMSysPr9.prx"
26 Feb 2008 17.05.18 3 373 917 A.... "C:\WINDOWS\{00000002-00000000-00000002-00001102-00000002-80271102}.CDF"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00001"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00002"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00003"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00004"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00005"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00006"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00007"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00008"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00009"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00010"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00011"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00012"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00013"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00014"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00015"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00016"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00017"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00018"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00019"
22 Feb 2008 19.56.22 12 288 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00020"
22 Feb 2008 19.56.22 8 192 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00021"
22 Feb 2008 19.56.26 5 365 760 A.... "C:\WINDOWS\$NtUninstallKB944533$\reg00022"
22 Feb 2008 19.59.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB891781$\reg00002"
22 Feb 2008 20.00.44 8 192 A.... "C:\WINDOWS\$NtUninstallKB887472$\reg00002"
22 Feb 2008 19.30.20 8 192 A.... "C:\WINDOWS\$NtUninstallKB886185$\reg00002"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00001"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00002"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00003"
22 Feb 2008 19.06.46 8 192 A.... "C:\WINDOWS\$NtUninstallKB935448$\reg00004"
22 Feb 2008 19.29.58 8 192 A.... "C:\WINDOWS\$NtUninstallKB885884$\reg00002"
3 Mar 2008 4.06.22 45 056 A.... "C:\WINDOWS\BDOSCAN8\avxdisk.dll"
3 Mar 2008 4.06.22 10 240 A.... "C:\WINDOWS\BDOSCAN8\avxs.dll"
3 Mar 2008 4.06.22 27 136 A.... "C:\WINDOWS\BDOSCAN8\avxt.dll"
3 Mar 2008 4.06.24 181 760 A.... "C:\WINDOWS\BDOSCAN8\bdcore.dll"
3 Mar 2008 4.06.18 87 A.... "C:\WINDOWS\BDOSCAN8\bdoscan.ini"
3 Mar 2008 9.37.10 2 008 A.... "C:\WINDOWS\BDOSCAN8\bdoscan.log"
9 Jan 2008 15.01.48 118 784 A.... "C:\WINDOWS\BDOSCAN8\bdupd.dll"
3 Mar 2008 4.06.24 77 824 A.... "C:\WINDOWS\BDOSCAN8\bdupd.dll.updpnd"
3 Mar 2008 4.06.22 1 878 A.... "C:\WINDOWS\BDOSCAN8\boot.xmd"
9 Jan 2008 15.01.48 53 248 A.... "C:\WINDOWS\BDOSCAN8\ipsupd.dll"
6 Feb 2008 15.12.02 7 350 A.... "C:\WINDOWS\BDOSCAN8\lang.ini"
3 Mar 2008 4.06.24 142 848 A.... "C:\WINDOWS\BDOSCAN8\libfn.dll"
3 Mar 2008 4.06.22 86 016 A.... "C:\WINDOWS\BDOSCAN8\librtvr.dll"
21 Jan 2008 17.43.22 130 A.... "C:\WINDOWS\BDOSCAN8\live.ini"
3 Mar 2008 4.06.22 471 040 A.... "C:\WINDOWS\BDOSCAN8\oscan82.ocx"
3 Mar 2008 4.07.20 14 999 A.... "C:\WINDOWS\BDOSCAN8\plugins.htm"
3 Mar 2008 4.06.22 254 A.... "C:\WINDOWS\BDOSCAN8\rtvr2.html"
3 Mar 2008 4.06.22 4 746 A.... "C:\WINDOWS\BDOSCAN8\rtvr.html"
3 Mar 2008 4.06.22 6 828 A.... "C:\WINDOWS\BDOSCAN8\scanoptions.tsi"
3 Mar 2008 4.06.22 6 828 A.... "C:\WINDOWS\BDOSCAN8\scanoptions.tsk"
3 Mar 2008 4.06.22 195 A.... "C:\WINDOWS\BDOSCAN8\scanres2.html"
3 Mar 2008 4.06.22 17 067 A.... "C:\WINDOWS\BDOSCAN8\scanres.html"
3 Mar 2008 5.51.52 19 456 A.... "C:\WINDOWS\BDOSCAN8\scanrep.html"
3 Mar 2008 4.06.22 86 016 A.... "C:\WINDOWS\BDOSCAN8\upd82.bpx"
8 Mar 2008 12.16.26 0 A.... "C:\WINDOWS\Debug\PASSWD.LOG"
8 Jan 2008 14.38.44 290 816 A.... "C:\WINDOWS\Downloaded Program Files\auc_lib.dll"
8 Jan 2008 14.38.44 541 A.... "C:\WINDOWS\Downloaded Program Files\ca.pub"
11 Jan 2008 14.45.50 495 616 A.... "C:\WINDOWS\Downloaded Program Files\daas_s.dll"
22 Feb 2008 15.00.42 65 ...H. "C:\WINDOWS\Downloaded Program Files\desktop.ini"
25 Jan 2008 15.11.06 588 392 A.... "C:\WINDOWS\Downloaded Program Files\gatelauncher.exe"
16 Jan 2008 7.37.14 901 A.... "C:\WINDOWS\Downloaded Program Files\mcfscan.inf"
31 Jan 2008 19.55.00 144 A.... "C:\WINDOWS\Downloaded Program Files\QTPlugin.inf"
22 Feb 2008 15.01.20 67 A.SH. "C:\WINDOWS\Fonts\desktop.ini"
22 Feb 2008 16.30.04 49 300 A.... "C:\WINDOWS\inf\accessor.PNF"
23 Feb 2008 13.38.54 14 772 A.... "C:\WINDOWS\inf\au.PNF"
23 Feb 2008 13.38.54 20 236 A.... "C:\WINDOWS\inf\bda.PNF"
23 Feb 2008 13.38.54 69 256 A.... "C:\WINDOWS\inf\biosinfo.PNF"
11 Jan 2008 7.58.54 705 A.... "C:\WINDOWS\inf\branches.inf"
29 Feb 2008 19.59.32 4 100 A.... "C:\WINDOWS\inf\branches.PNF"
23 Feb 2008 13.38.56 9 644 A.... "C:\WINDOWS\inf\ccdecode.PNF"
22 Feb 2008 16.29.20 16 996 A.... "C:\WINDOWS\inf\cpu.PNF"
23 Feb 2008 13.38.56 322 320 A.... "C:\WINDOWS\inf\defltwk.PNF"
23 Feb 2008 13.38.56 39 428 A.... "C:\WINDOWS\inf\devxprop.PNF"
22 Feb 2008 16.29.22 222 180 A.... "C:\WINDOWS\inf\drvindex.PNF"
23 Feb 2008 13.38.56 330 308 A.... "C:\WINDOWS\inf\dwup.PNF"
22 Feb 2008 14.32.02 4 592 A.... "C:\WINDOWS\inf\FlashAX.PNF"
22 Feb 2008 16.30.02 17 616 A.... "C:\WINDOWS\inf\fp40ext.PNF"
22 Feb 2008 16.29.58 56 168 A.... "C:\WINDOWS\inf\fxsocm.PNF"
23 Feb 2008 13.38.56 9 476 A.... "C:\WINDOWS\inf\HidDigi.PNF"
22 Feb 2008 16.54.34 12 720 A.... "C:\WINDOWS\inf\hidserv.PNF"
23 Feb 2008 13.38.56 18 092 A.... "C:\WINDOWS\inf\i81xnt5.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp0.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp1.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp2.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp3.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwfp4.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv0.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv1.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv2.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv3.PNF"
22 Feb 2008 14.32.02 6 124 A.... "C:\WINDOWS\inf\i81xwtv4.PNF"
23 Feb 2008 13.38.58 83 912 A.... "C:\WINDOWS\inf\ie.PNF"
26 Feb 2008 15.55.04 1 618 A.... "C:\WINDOWS\inf\ieaccess.inf"
26 Feb 2008 15.55.48 4 448 A.... "C:\WINDOWS\inf\ieaccess.PNF"
22 Feb 2008 16.30.00 977 388 A.... "C:\WINDOWS\inf\iis.PNF"
22 Feb 2008 16.30.02 105 256 A.... "C:\WINDOWS\inf\ims.PNF"
29 Feb 2008 19.59.34 1 517 744 A.... "C:\WINDOWS\inf\INFCACHE.1"
22 Feb 2008 16.54.34 100 156 A.... "C:\WINDOWS\inf\input.PNF"
23 Feb 2008 13.38.58 427 488 A.... "C:\WINDOWS\inf\intl.PNF"
23 Feb 2008 13.38.58 18 840 A.... "C:\WINDOWS\inf\irbus.PNF"
22 Feb 2008 16.54.26 57 788 A.... "C:\WINDOWS\inf\keyboard.PNF"
23 Feb 2008 13.35.30 92 268 A.... "C:\WINDOWS\inf\ks.PNF"
23 Feb 2008 13.38.58 43 684 A.... "C:\WINDOWS\inf\kscaptur.PNF"
22 Feb 2008 16.54.44 24 720 A.... "C:\WINDOWS\inf\ksfilter.PNF"
22 Feb 2008 16.29.10 1 041 036 A.... "C:\WINDOWS\inf\LAYOUT.PNF"
22 Feb 2008 16.54.26 187 452 A.... "C:\WINDOWS\inf\machine.PNF"
23 Feb 2008 13.38.58 30 256 A.... "C:\WINDOWS\inf\mchgr.PNF"
23 Feb 2008 13.38.58 17 572 A.... "C:\WINDOWS\inf\mdac.PNF"
23 Feb 2008 13.39.00 107 872 A.... "C:\WINDOWS\inf\mdmirmdm.PNF"
23 Feb 2008 13.39.00 15 196 A.... "C:\WINDOWS\inf\moviemk.PNF"
23 Feb 2008 13.39.00 8 284 A.... "C:\WINDOWS\inf\mpe.PNF"
23 Feb 2008 13.39.00 30 756 A.... "C:\WINDOWS\inf\mplayer2.PNF"
23 Feb 2008 13.39.00 49 572 A.... "C:\WINDOWS\inf\mshdc.PNF"
22 Feb 2008 16.30.02 87 616 A.... "C:\WINDOWS\inf\msmsgs.PNF"
23 Feb 2008 13.39.00 61 124 A.... "C:\WINDOWS\inf\msnetmtg.PNF"
22 Feb 2008 16.30.08 7 556 A.... "C:\WINDOWS\inf\msnmsn.PNF"
23 Feb 2008 13.39.00 36 236 A.... "C:\WINDOWS\inf\msoe50.PNF"
23 Feb 2008 13.39.00 23 880 A.... "C:\WINDOWS\inf\mstape.PNF"
10 Jan 2008 5.17.10 5 914 A.... "C:\WINDOWS\inf\msxmlx.PNF"
25 Feb 2008 9.50.20 4 624 A.... "C:\WINDOWS\inf\msxpsdrv.PNF"
22 Feb 2008 16.30.04 12 208 A.... "C:\WINDOWS\inf\multimed.PNF"
23 Feb 2008 13.39.00 7 872 A.... "C:\WINDOWS\inf\mymusic.PNF"
23 Feb 2008 13.39.00 9 636 A.... "C:\WINDOWS\inf\nabtsfec.PNF"
23 Feb 2008 13.39.02 9 120 A.... "C:\WINDOWS\inf\ndisip.PNF"
22 Feb 2008 14.31.58 14 472 A.... "C:\WINDOWS\inf\net3c985.PNF"
22 Feb 2008 14.31.58 83 136 A.... "C:\WINDOWS\inf\net557.PNF"
22 Feb 2008 14.31.58 8 012 A.... "C:\WINDOWS\inf\net650d.PNF"
22 Feb 2008 14.31.58 8 636 A.... "C:\WINDOWS\inf\net713.PNF"
22 Feb 2008 14.31.58 7 800 A.... "C:\WINDOWS\inf\netac300.PNF"
22 Feb 2008 14.31.58 9 836 A.... "C:\WINDOWS\inf\netamd.PNF"
22 Feb 2008 14.31.58 18 056 A.... "C:\WINDOWS\inf\netamd2.PNF"
22 Feb 2008 16.30.08 3 652 A.... "C:\WINDOWS\inf\netbeac.PNF"
22 Feb 2008 14.31.58 8 552 A.... "C:\WINDOWS\inf\netdf650.PNF"
22 Feb 2008 14.31.58 30 020 A.... "C:\WINDOWS\inf\nete1000.PNF"
22 Feb 2008 14.31.58 8 324 A.... "C:\WINDOWS\inf\netejxmp.PNF"
22 Feb 2008 14.31.58 12 032 A.... "C:\WINDOWS\inf\netel90a.PNF"
22 Feb 2008 14.31.58 19 568 A.... "C:\WINDOWS\inf\netel90b.PNF"
22 Feb 2008 14.31.58 17 428 A.... "C:\WINDOWS\inf\netel99x.PNF"
22 Feb 2008 14.31.58 7 996 A.... "C:\WINDOWS\inf\netfa410.PNF"
22 Feb 2008 16.30.08 174 876 A.... "C:\WINDOWS\inf\netfxocm.PNF"
23 Feb 2008 13.39.02 12 940 A.... "C:\WINDOWS\inf\netip6.PNF"
22 Feb 2008 14.31.58 9 556 A.... "C:\WINDOWS\inf\netirda.PNF"
22 Feb 2008 14.31.22 24 512 A.... "C:\WINDOWS\inf\netirsir.PNF"
23 Feb 2008 13.39.02 20 432 A.... "C:\WINDOWS\inf\netmscli.PNF"
22 Feb 2008 14.31.58 10 916 A.... "C:\WINDOWS\inf\netngr.PNF"
22 Feb 2008 16.29.58 16 960 A.... "C:\WINDOWS\inf\netoc.PNF"
22 Feb 2008 14.31.58 10 276 A.... "C:\WINDOWS\inf\netpnic.PNF"
23 Feb 2008 13.39.02 45 452 A.... "C:\WINDOWS\inf\netrass.PNF"
23 Feb 2008 13.39.02 20 020 A.... "C:\WINDOWS\inf\netrtsnt.PNF"
23 Feb 2008 13.39.02 38 264 A.... "C:\WINDOWS\inf\nettcpip.PNF"
23 Feb 2008 13.39.02 6 356 A.... "C:\WINDOWS\inf\nettun.PNF"
23 Feb 2008 13.39.02 8 932 A.... "C:\WINDOWS\inf\netupnph.PNF"
22 Feb 2008 14.31.56 9 948 A.... "C:\WINDOWS\inf\netw840.PNF"
23 Feb 2008 13.39.02 7 004 A.... "C:\WINDOWS\inf\netwzc.PNF"
22 Feb 2008 14.31.56 19 400 A.... "C:\WINDOWS\inf\netx500.PNF"
24 Jan 2008 10.55.26 78 340 A.... "C:\WINDOWS\inf\nokirmdm.PNF"
22 Feb 2008 16.54.48 1 317 396 A.... "C:\WINDOWS\inf\ntprint.PNF"
23 Feb 2008 13.39.04 53 292 A.... "C:\WINDOWS\inf\nv4_disp.PNF"
23 Feb 2008 13.39.04 22 148 A.... "C:\WINDOWS\inf\nvct.PNF"
23 Feb 2008 13.39.04 34 060 A.... "C:\WINDOWS\inf\nvdm.PNF"
23 Feb 2008 13.39.04 22 196 A.... "C:\WINDOWS\inf\nvts.PNF"
22 Feb 2008 16.30.04 4 384 A.... "C:\WINDOWS\inf\oeaccess.PNF"
31 Jan 2008 21.40.46 25 870 A.... "C:\WINDOWS\inf\oem14.PNF"
31 Jan 2008 21.40.00 9 648 A.... "C:\WINDOWS\inf\oem15.PNF"
26 Feb 2008 16.27.50 34 170 A.... "C:\WINDOWS\inf\oem20.PNF"
26 Feb 2008 16.28.04 6 074 A.... "C:\WINDOWS\inf\oem21.PNF"
26 Feb 2008 13.22.26 159 672 A.... "C:\WINDOWS\inf\oem23.PNF"
22 Feb 2008 20.17.20 1 646 624 A.... "C:\WINDOWS\inf\oem38.PNF"
23 Feb 2008 13.37.54 34 466 A.... "C:\WINDOWS\inf\oem39.PNF"
31 Jan 2008 21.40.02 30 418 A.... "C:\WINDOWS\inf\oem48.PNF"
23 Feb 2008 13.38.04 6 074 A.... "C:\WINDOWS\inf\oem49.PNF"
31 Jan 2008 21.41.10 7 764 A.... "C:\WINDOWS\inf\oem60.PNF"
12 Jan 2008 14.18.54 37 830 A.... "C:\WINDOWS\inf\oem61.PNF"
12 Jan 2008 14.20.10 94 080 A.... "C:\WINDOWS\inf\oem63.PNF"
31 Jan 2008 21.31.56 66 898 A.... "C:\WINDOWS\inf\oem8.PNF"
31 Jan 2008 21.40.00 12 684 A.... "C:\WINDOWS\inf\oem9.PNF"
23 Feb 2008 13.39.04 17 240 A.... "C:\WINDOWS\inf\oobe.PNF"
23 Feb 2008 13.39.04 12 992 A.... "C:\WINDOWS\inf\pchealth.PNF"
22 Feb 2008 16.54.36 105 488 A.... "C:\WINDOWS\inf\pnpscsi.PNF"
23 Feb 2008 13.39.04 11 488 A.... "C:\WINDOWS\inf\qmgr.PNF"
23 Feb 2008 13.39.04 7 132 A.... "C:\WINDOWS\inf\ramdisk.PNF"
22 Feb 2008 14.31.54 7 924 A.... "C:\WINDOWS\inf\s3nb.PNF"
22 Feb 2008 19.22.18 40 440 A.... "C:\WINDOWS\inf\sceregvl.PNF"
23 Feb 2008 13.39.06 21 952 A.... "C:\WINDOWS\inf\scsi.PNF"
23 Feb 2008 13.39.06 26 312 A.... "C:\WINDOWS\inf\secrecs.PNF"
23 Feb 2008 13.39.06 38 636 A.... "C:\WINDOWS\inf\shell.PNF"
23 Feb 2008 13.39.06 15 728 A.... "C:\WINDOWS\inf\shl_img.PNF"
26 Feb 2008 14.38.38 6 028 A.... "C:\WINDOWS\inf\skins.PNF"
23 Feb 2008 13.39.06 9 196 A.... "C:\WINDOWS\inf\slip.PNF"
23 Feb 2008 13.39.06 36 396 A.... "C:\WINDOWS\inf\smartcrd.PNF"
23 Feb 2008 13.39.06 11 956 A.... "C:\WINDOWS\inf\streamip.PNF"
23 Feb 2008 13.39.06 5 724 A.... "C:\WINDOWS\inf\swflash.PNF"
22 Feb 2008 16.29.58 7 272 A.... "C:\WINDOWS\inf\SYSOC.PNF"
23 Feb 2008 12.22.26 101 660 A.... "C:\WINDOWS\inf\syssetup.PNF"
22 Feb 2008 16.30.06 523 716 A.... "C:\WINDOWS\inf\tabletpc.PNF"
23 Feb 2008 13.39.06 60 012 A.... "C:\WINDOWS\inf\tape.PNF"
22 Feb 2008 16.30.00 122 632 A.... "C:\WINDOWS\inf\tsoc.PNF"
22 Feb 2008 16.54.38 51 400 A.... "C:\WINDOWS\inf\usbport.PNF"
22 Feb 2008 14.31.54 21 384 A.... "C:\WINDOWS\inf\wab50.PNF"
22 Feb 2008 16.30.04 4 072 A.... "C:\WINDOWS\inf\wmaccess.PNF"
22 Feb 2008 16.29.10 57 060 A.... "C:\WINDOWS\inf\wmp.PNF"
22 Feb 2008 16.30.04 4 440 A.... "C:\WINDOWS\inf\wmpocm.PNF"
22 Feb 2008 16.30.06 16 752 A.... "C:\WINDOWS\inf\wordpad.PNF"
23 Feb 2008 13.39.08 9 200 A.... "C:\WINDOWS\inf\wstcodec.PNF"
3 Mar 2008 16.46.00 4 098 A.... "C:\WINDOWS\network diagnostic\xpnetdiag.xml"
22 Feb 2008 15.00.42 65 ...H. "C:\WINDOWS\Offline Web Pages\desktop.ini"
7 Feb 2008 14.04.20 2 567 A.... "C:\WINDOWS\repair\config.nt"
22 Feb 2008 15.06.08 1 564 672 A.... "C:\WINDOWS\repair\default"
22 Feb 2008 15.01.32 1 564 672 A..H. "C:\WINDOWS\repair\ntuser.dat"
22 Feb 2008 15.06.08 28 672 A.... "C:\WINDOWS\repair\sam"
22 Feb 2008 15.06.08 53 248 A.... "C:\WINDOWS\repair\security"
22 Feb 2008 15.00.12 181 505 A.... "C:\WINDOWS\repair\setup.log"
22 Feb 2008 15.06.08 35 504 128 A.... "C:\WINDOWS\repair\software"
22 Feb 2008 15.04.24 2 379 776 A.... "C:\WINDOWS\repair\system"
22 Feb 2008 15.06.10 288 A.... "C:\WINDOWS\system32\$winnt$.inf"
10 Jan 2008 5.29.20 2 188 A.... "C:\WINDOWS\system32\50001T.dll"
23 Feb 2008 17.26.58 16 832 A.... "C:\WINDOWS\system32\amcompat.tlb"
22 Jan 2008 22.04.26 46 080 A.... "C:\WINDOWS\system32\amdpcom32.dll"
8 Mar 2008 12.15.38 24 264 A.... "C:\WINDOWS\system32\BMXBkpCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 24 264 A.... "C:\WINDOWS\system32\BMXCtrlState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 16 324 A.... "C:\WINDOWS\system32\BMXState-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
8 Mar 2008 12.15.38 16 324 A.... "C:\WINDOWS\system32\BMXStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.rfx"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\cdplayer.exe.manifest"
7 Feb 2008 14.04.20 2 567 A.... "C:\WINDOWS\system32\CONFIG.NT"
7 Mar 2008 20.39.04 4 096 A.... "C:\WINDOWS\system32\crash"
9 Feb 2008 16.13.34 6 820 A.... "C:\WINDOWS\system32\d3d9caps.dat"
8 Mar 2008 12.15.38 24 A.... "C:\WINDOWS\system32\DVCState-{00000002-00000000-00000002-00001102-00000002-80271102}.dat"
8 Mar 2008 12.15.38 24 A.... "C:\WINDOWS\system32\DVCStateBkp-{00000002-00000000-00000002-00001102-00000002-80271102}.dat"
26 Feb 2008 19.57.06 2 492 A.... "C:\WINDOWS\system32\ealregsnapshot1.reg"
7 Mar 2008 12.35.40 134 872 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
7 Mar 2008 12.43.24 1 406 A.... "C:\WINDOWS\system32\Help.ico"
26 Feb 2008 2.37.34 1 280 A.... "C:\WINDOWS\system32\history.aaw"
17 Feb 2008 1.35.14 5 757 A.... "C:\WINDOWS\system32\jupdate-1.6.0_04-b12.log"
22 Feb 2008 15.00.42 488 A..HR "C:\WINDOWS\system32\logonui.exe.manifest"
1 Feb 2008 1.10.10 12 632 A.... "C:\WINDOWS\system32\lsdelete.exe"
4 Feb 2008 15.09.48 18 214 008 A.... "C:\WINDOWS\system32\MRT.exe"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\ncpa.cpl.manifest"
23 Feb 2008 17.26.58 23 392 A.... "C:\WINDOWS\system32\nscompat.tlb"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\nwc.cpl.manifest"
7 Mar 2008 12.43.24 30 590 A.... "C:\WINDOWS\system32\pavas.ico"
25 Feb 2008 9.53.08 71 696 A.... "C:\WINDOWS\system32\perfc009.dat"
25 Feb 2008 9.53.08 85 752 A.... "C:\WINDOWS\system32\perfc00B.dat"
25 Feb 2008 9.53.08 442 204 A.... "C:\WINDOWS\system32\perfh009.dat"
25 Feb 2008 9.53.08 417 048 A.... "C:\WINDOWS\system32\perfh00B.dat"
25 Feb 2008 9.53.08 987 254 A.... "C:\WINDOWS\system32\PerfStringBackup.INI"
11 Jan 2008 7.37.34 44 544 A.... "C:\WINDOWS\system32\pngfilt.dll"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\sapi.cpl.manifest"
26 Feb 2008 2.37.36 2 560 A.... "C:\WINDOWS\system32\settings.aaw"
8 Mar 2008 12.15.38 1 080 A.... "C:\WINDOWS\system32\settings.sfm"
8 Mar 2008 12.15.38 1 080 A.... "C:\WINDOWS\system32\settingsbkup.sfm"
22 Feb 2008 21.56.52 90 A.... "C:\WINDOWS\system32\spupdwxp.log"
7 Mar 2008 15.44.18 4 062 A.... "C:\WINDOWS\system32\tmp.reg"
7 Mar 2008 15.44.18 0 A.... "C:\WINDOWS\system32\tmp.txt"
7 Mar 2008 12.43.24 2 550 A.... "C:\WINDOWS\system32\Uninstall.ico"
27 Feb 2008 0.34.46 219 136 A.... "C:\WINDOWS\system32\uxtheme.dll"
22 Feb 2008 15.00.42 488 A..HR "C:\WINDOWS\system32\WindowsLogon.manifest"
7 Mar 2008 10.25.20 12 686 A.... "C:\WINDOWS\system32\wpa.dbl"
22 Feb 2008 15.00.36 749 A..HR "C:\WINDOWS\system32\wuaucpl.cpl.manifest"
8 Mar 2008 12.19.46 330 A..H. "C:\WINDOWS\Tasks\MP Scheduled Scan.job"
8 Mar 2008 12.16.38 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
17 Feb 2008 22.00.02 442 A.... "C:\WINDOWS\Tasks\SmartDefrag.job"
8 Mar 2008 12.18.48 9 928 A.... "C:\WINDOWS\Temp\addonscheck.xml"
4 Mar 2008 14.17.42 991 A.... "C:\WINDOWS\Temp\D653F3EC.TMP"
8 Mar 2008 15.32.42 1 316 A.... "C:\WINDOWS\Temp\ggp16.tmp"
8 Mar 2008 13.09.38 6 737 A.... "C:\WINDOWS\Temp\jar_cache62011.tmp"
8 Mar 2008 13.50.12 2 384 A.... "C:\WINDOWS\Temp\java_install_reg.log"
8 Mar 2008 12.21.58 167 A.... "C:\WINDOWS\Temp\jusched.log"
8 Mar 2008 12.36.52 1 710 A.... "C:\WINDOWS\Temp\MpCmdRun.log"
8 Mar 2008 12.18.48 5 630 A.... "C:\WINDOWS\Temp\pcsuitecheck_new.xml"
8 Mar 2008 15.36.44 80 518 A.... "C:\WINDOWS\Temp\scs1A.tmp"
8 Mar 2008 12.16.28 255 A.... "C:\WINDOWS\Temp\WGAErrLog.txt"
8 Mar 2008 13.05.56 512 A.... "C:\WINDOWS\Temp\~DF203A.tmp"
8 Mar 2008 13.05.56 512 A.... "C:\WINDOWS\Temp\~DF258A.tmp"
8 Mar 2008 13.04.26 16 384 A.... "C:\WINDOWS\Temp\~DFAD06.tmp"
8 Mar 2008 13.04.26 512 A.... "C:\WINDOWS\Temp\~DFAD0D.tmp"
8 Mar 2008 8.43.08 49 152 A.... "C:\WINDOWS\Temp\~DFD86C.tmp"
22 Feb 2008 19.48.22 6 720 A.... "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.inf"
22 Feb 2008 19.48.12 552 A.... "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.txt"
22 Feb 2008 20.23.56 4 662 A.... "C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.inf"
22 Feb 2008 20.23.44 0 A.... "C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.txt"
22 Feb 2008 19.56.50 14 581 A.... "C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.inf"
22 Feb 2008 19.56.26 3 945 A.... "C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.txt"
22 Feb 2008 20.04.04 6 516 A.... "C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.inf"
22 Feb 2008 20.03.58 316 A.... "C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.txt"
22 Feb 2008 18.44.10 4 408 A.... "C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.inf"
22 Feb 2008 18.43.32 87 A.... "C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.txt"
22 Feb 2008 19.59.42 6 452 A.... "C:\WINDOWS\$NtUninstallKB942830$\spuninst\spuninst.inf"
22 Feb 2008 19.59.38 312 A.... "C:\WINDOWS\$NtUninstallKB942830$\spuninst\spuninst.txt"
22 Feb 2008 19.47.22 6 256 A.... "C:\WINDOWS\$NtUninstallKB942831$\spuninst\spuninst.inf"
22 Feb 2008 19.47.06 328 A.... "C:\WINDOWS\$NtUninstallKB942831$\spuninst\spuninst.txt"
22 Feb 2008 19.59.50 6 467 A.... "C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.inf"
22 Feb 2008 19.59.46 1 074 A.... "C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.txt"
22 Feb 2008 20.00.48 6 357 A.... "C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.inf"
22 Feb 2008 20.00.44 1 044 A.... "C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.txt"
22 Feb 2008 19.30.26 6 049 A.... "C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.inf"
22 Feb 2008 19.30.20 1 043 A.... "C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.txt"
22 Feb 2008 19.57.02 6 479 A.... "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.inf"
22 Feb 2008 19.56.58 331 A.... "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.txt"
22 Feb 2008 19.07.22 6 411 A.... "C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.inf"
22 Feb 2008 19.06.46 312 A.... "C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.txt"
22 Feb 2008 19.08.56 5 410 A.... "C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.inf"
22 Feb 2008 19.08.26 180 A.... "C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.txt"
22 Feb 2008 19.30.12 4 929 A.... "C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.inf"
22 Feb 2008 19.29.58 0 A.... "C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.txt"
22 Feb 2008 19.59.34 6 735 A.... "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.inf"
22 Feb 2008 19.59.30 608 A.... "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.txt"
22 Feb 2008 20.23.18 4 750 A.... "C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.inf"
22 Feb 2008 20.23.04 0 A.... "C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.txt"
22 Feb 2008 20.23.36 4 750 A.... "C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.inf"
22 Feb 2008 20.23.24 0 A.... "C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.txt"
22 Feb 2008 20.23.00 4 750 A.... "C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.inf"
22 Feb 2008 20.22.38 0 A.... "C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.txt"
22 Feb 2008 18.32.58 4 092 A.... "C:\WINDOWS\$NtUninstallKB885836_0$\spuninst\spuninst.inf"
22 Feb 2008 18.31.56 0 A.... "C:\WINDOWS\$NtUninstallKB885836_0$\spuninst\spuninst.txt"
22 Feb 2008 18.43.22 4 212 A.... "C:\WINDOWS\$NtUninstallKB885836_1$\spuninst\spuninst.inf"
22 Feb 2008 18.42.44 0 A.... "C:\WINDOWS\$NtUninstallKB885836_1$\spuninst\spuninst.txt"
22 Feb 2008 18.31.32 4 180 A.... "C:\WINDOWS\$NtUninstallKB885835_1$\spuninst\spuninst.inf"
22 Feb 2008 18.30.56 0 A.... "C:\WINDOWS\$NtUninstallKB885835_1$\spuninst\spuninst.txt"
22 Feb 2008 18.42.40 4 212 A.... "C:\WINDOWS\$NtUninstallKB885835_2$\spuninst\spuninst.inf"
22 Feb 2008 18.42.06 0 A.... "C:\WINDOWS\$NtUninstallKB885835_2$\spuninst\spuninst.txt"
22 Feb 2008 18.42.00 4 212 A.... "C:\WINDOWS\$NtUninstallKB873339_3$\spuninst\spuninst.inf"
22 Feb 2008 18.41.16 0 A.... "C:\WINDOWS\$NtUninstallKB873339_3$\spuninst\spuninst.txt"
26 Feb 2008 15.53.40 6 160 A.... "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.inf"
26 Feb 2008 15.54.12 6 746 A.... "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.inf"
22 Feb 2008 16.30.56 4 028 A.... "C:\WINDOWS\$NtUninstallKB873339_0$\spuninst\spuninst.inf"
22 Feb 2008 16.30.22 0 A.... "C:\WINDOWS\$NtUninstallKB873339_0$\spuninst\spuninst.txt"
22 Feb 2008 18.20.08 4 148 A.... "C:\WINDOWS\$NtUninstallKB873339_1$\spuninst\spuninst.inf"
22 Feb 2008 18.19.24 0 A.... "C:\WINDOWS\$NtUninstallKB873339_1$\spuninst\spuninst.txt"
22 Feb 2008 18.20.50 5 056 A.... "C:\WINDOWS\$NtUninstallKB885835_0$\spuninst\spuninst.inf"
22 Feb 2008 18.20.16 323 A.... "C:\WINDOWS\$NtUninstallKB885835_0$\spuninst\spuninst.txt"
22 Feb 2008 18.30.50 4 180 A.... "C:\WINDOWS\$NtUninstallKB873339_2$\spuninst\spuninst.inf"
22 Feb 2008 18.30.10 0 A.... "C:\WINDOWS\$NtUninstallKB873339_2$\spuninst\spuninst.txt"
3 Mar 2008 4.06.24 40 748 A.... "C:\WINDOWS\BDOSCAN8\plugins\7zip.xmd"
3 Mar 2008 4.06.24 3 892 A.... "C:\WINDOWS\BDOSCAN8\plugins\access.xmd"
3 Mar 2008 4.06.24 8 737 A.... "C:\WINDOWS\BDOSCAN8\plugins\ace.xmd"
3 Mar 2008 4.06.24 3 399 A.... "C:\WINDOWS\BDOSCAN8\plugins\adsntfs.xmd"
3 Mar 2008 4.06.24 19 174 A.... "C:\WINDOWS\BDOSCAN8\plugins\alz.xmd"
3 Mar 2008 4.06.24 3 611 A.... "C:\WINDOWS\BDOSCAN8\plugins\arc.xmd"
3 Mar 2008 4.06.24 6 284 A.... "C:\WINDOWS\BDOSCAN8\plugins\arj.xmd"
3 Mar 2008 4.06.26 101 482 A.... "C:\WINDOWS\BDOSCAN8\plugins\aspy_emu.cvd"
3 Mar 2008 4.06.26 6 712 A.... "C:\WINDOWS\BDOSCAN8\plugins\bach.xmd"
3 Mar 2008 4.06.22 1 878 A.... "C:\WINDOWS\BDOSCAN8\plugins\boot.xmd"
3 Mar 2008 4.06.26 19 355 A.... "C:\WINDOWS\BDOSCAN8\plugins\bzip2.xmd"
3 Mar 2008 4.06.26 14 362 A.... "C:\WINDOWS\BDOSCAN8\plugins\cab.xmd"
3 Mar 2008 4.06.26 358 723 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.cvd"
3 Mar 2008 4.06.26 99 252 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.ivd"
3 Mar 2008 4.06.26 396 480 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.rvd"
3 Mar 2008 4.06.28 183 666 A.... "C:\WINDOWS\BDOSCAN8\plugins\cevakrnl.xmd"
3 Mar 2008 4.06.28 119 029 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_dll.cvd"
3 Mar 2008 4.06.28 111 548 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_emu.cvd"
3 Mar 2008 4.06.28 297 530 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.cvd"
3 Mar 2008 4.06.28 410 A.... "C:\WINDOWS\BDOSCAN8\plugins\ceva_vfs.ivd"
3 Mar 2008 4.06.28 13 189 A.... "C:\WINDOWS\BDOSCAN8\plugins\chm.xmd"
3 Mar 2008 4.06.28 6 626 A.... "C:\WINDOWS\BDOSCAN8\plugins\cookie.cvd"
3 Mar 2008 4.06.28 2 158 A.... "C:\WINDOWS\BDOSCAN8\plugins\cookie.xmd"
3 Mar 2008 4.06.28 3 489 A.... "C:\WINDOWS\BDOSCAN8\plugins\cpio.xmd"
3 Mar 2008 4.06.30 295 343 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.cvd"
3 Mar 2008 4.06.30 86 121 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.ivd"
3 Mar 2008 4.06.30 6 060 A.... "C:\WINDOWS\BDOSCAN8\plugins\cran.xmd"
3 Mar 2008 4.06.30 1 346 A.... "C:\WINDOWS\BDOSCAN8\plugins\dbx.xmd"
3 Mar 2008 4.06.30 10 871 A.... "C:\WINDOWS\BDOSCAN8\plugins\docfile.xmd"
3 Mar 2008 4.06.30 34 225 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.001"
3 Mar 2008 4.06.30 35 147 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.002"
3 Mar 2008 4.06.30 33 945 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.003"
3 Mar 2008 4.06.30 33 915 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.004"
3 Mar 2008 4.06.30 30 065 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.005"
3 Mar 2008 4.06.30 32 614 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.006"
3 Mar 2008 4.06.30 30 115 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.007"
3 Mar 2008 4.06.32 30 026 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.008"
3 Mar 2008 4.06.32 30 093 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.009"
3 Mar 2008 4.06.32 30 299 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.010"
3 Mar 2008 4.06.32 30 482 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.011"
3 Mar 2008 4.06.32 30 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.012"
3 Mar 2008 4.06.32 13 045 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.013"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.014"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.015"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.016"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.017"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.018"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.019"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.020"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.021"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.022"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.023"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.024"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.025"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.026"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.027"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.028"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.029"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.030"
3 Mar 2008 4.06.32 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.031"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.032"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.033"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.034"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.035"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.036"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.037"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.038"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.039"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.040"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.041"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.042"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.043"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.044"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.045"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.046"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.047"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.048"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.049"
3 Mar 2008 4.06.34 73 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.050"
3 Mar 2008 4.06.42 6 500 383 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.cvd"
3 Mar 2008 4.06.42 30 153 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i01"
3 Mar 2008 4.06.42 34 745 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i02"
3 Mar 2008 4.06.42 25 792 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i03"
3 Mar 2008 4.06.42 26 845 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i04"
3 Mar 2008 4.06.42 26 331 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i05"
3 Mar 2008 4.06.42 31 133 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i06"
3 Mar 2008 4.06.42 33 430 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i07"
3 Mar 2008 4.06.42 31 219 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i08"
3 Mar 2008 4.06.42 26 323 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i09"
3 Mar 2008 4.06.42 34 476 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i10"
3 Mar 2008 4.06.42 32 074 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i11"
3 Mar 2008 4.06.44 32 454 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i12"
3 Mar 2008 4.06.44 30 114 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i13"
3 Mar 2008 4.06.44 29 089 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i14"
3 Mar 2008 4.06.44 30 630 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i15"
3 Mar 2008 4.06.44 28 175 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i16"
3 Mar 2008 4.06.44 31 458 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i17"
3 Mar 2008 4.06.44 27 984 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i18"
3 Mar 2008 4.06.44 31 448 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i19"
3 Mar 2008 4.06.44 31 341 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i20"
3 Mar 2008 4.06.44 30 627 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i21"
3 Mar 2008 4.06.44 34 776 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i22"
3 Mar 2008 4.06.44 30 106 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i23"
3 Mar 2008 4.06.46 30 949 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i24"
3 Mar 2008 4.06.46 26 371 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i25"
3 Mar 2008 4.06.46 28 079 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i26"
3 Mar 2008 4.06.46 29 149 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i27"
3 Mar 2008 4.06.46 32 521 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i28"
3 Mar 2008 4.06.46 30 267 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i29"
3 Mar 2008 4.06.46 25 865 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i30"
3 Mar 2008 4.06.46 27 564 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i31"
3 Mar 2008 4.06.46 29 338 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i32"
3 Mar 2008 4.06.46 30 171 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i33"
3 Mar 2008 4.06.46 30 101 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i34"
3 Mar 2008 4.06.46 32 677 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i35"
3 Mar 2008 4.06.48 33 657 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i36"
3 Mar 2008 4.06.48 31 020 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i37"
3 Mar 2008 4.06.48 30 698 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i38"
3 Mar 2008 4.06.48 31 845 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i39"
3 Mar 2008 4.06.48 30 380 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i40"
3 Mar 2008 4.06.48 29 376 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i41"
3 Mar 2008 4.06.48 32 985 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i42"
3 Mar 2008 4.06.48 29 376 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i43"
3 Mar 2008 4.06.48 30 291 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i44"
3 Mar 2008 4.06.48 29 463 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i45"
3 Mar 2008 4.06.48 27 444 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i46"
3 Mar 2008 4.06.48 32 667 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i47"
3 Mar 2008 4.06.50 31 295 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i48"
3 Mar 2008 4.06.50 27 643 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i49"
3 Mar 2008 4.06.50 26 649 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i50"
3 Mar 2008 4.06.50 30 905 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i51"
3 Mar 2008 4.06.50 28 838 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i52"
3 Mar 2008 4.06.50 29 055 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i53"
3 Mar 2008 4.06.50 21 693 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i54"
3 Mar 2008 4.06.50 29 624 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i55"
3 Mar 2008 4.06.50 26 251 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i56"
3 Mar 2008 4.06.50 30 238 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i57"
3 Mar 2008 4.06.50 32 989 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i58"
3 Mar 2008 4.06.50 29 765 A.... "C:\WINDOWS\BDOSCAN8\plugins\emalware.i59"
3 Mar 2008 4.06.52 29 298 A.... "C:\WINDOWS\BDOSC
noin se käy
SE on tässä:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:11:31, on 9.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Lavasoft\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\defragActivityMonitor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
D:\Program Files\Vista Drive Icon\DrvIcon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\LClock\lclock.exe
D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
D:\Program Files\Webshots\webshots.scr
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "D:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [DrvIcon] D:\Program Files\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PwrUpTweakMe] C:\WINDOWS\system32\PuXpTwks.exe /TWEAK
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "D:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] D:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 6\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: RocketDock.lnk = D:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: Webshots.lnk = D:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: ATI CATALYST -ilmaisinalue.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Poker Rewards Poker - {6DAF93EB-C7E3-41ab-83D9-CAE1785F41BC} - C:\Microgaming\Poker\pokerrewardsMPP\MPPoker.exe
O9 - Extra button: Gutshot Poker - {70FF3DD2-AC81-43f2-AF80-979E2B789C4A} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PokerTime Poker - {7220F1C9-B7E0-47a6-A0BD-D5B3940BCC79} - C:\Microgaming\Poker\pokertimeMPP\MPPoker.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe (file missing)
O9 - Extra button: Gnuf Casino - {8FE9B27A-BDCD-4d27-A430-4DC0B58D01B0} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: PacificPoker4 - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - F:\POKER\PACIFI~1\pacificpoker.exe
O9 - Extra button: Gnuf Poker - {A99C8F70-4D5B-482c-8854-05BC0BB8B182} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Vegas Red Casino - {D5AE2D6D-38A7-425c-86C0-E4ABBDB9EC68} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Microgaming\Poker\nordicbetMPP\MPPoker.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra button: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra 'Tools' menuitem: Parbet Casino USD - {2B7CD833-1F24-4FA4-BB28-0E2EE80051E8} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O9 - Extra button: CarbonPoker - {e4e8c758-34b4-44bb-8ef9-1f0786e81d2d} - C:\Documents and Settings\bianco\Käynnistä-valikko\Ohjelmat\CarbonPoker\CarbonPoker.lnk (file missing) (HKCU)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5235/mcfscan.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\aawservice.exe
O23 - Service: Apple Mobile Device - Unknown owner - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (file missing)
O23 - Service: AshampooDefragService - - C:\Program Files\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SNMP-palvelu (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe (file missing)
O23 - Service: SNMP:n keskeytyspalvelu (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
--
End of file - 10598 bytes
Onkos vielä ongelmaa
Kiitos paljon vaivannäöstäsi, tänne kun mahtuu niin paljon huhaa väkeä. Hyvää kevään alkua moi!