Uc 100% et des fichiers qui dérange mon PC!
Dernière réponse : dans Le monde de Windows
Bonjour à tous! Je suis nouveau dans ce site et j'ai besoin de votre aide et Expérience.
Mon UC est à 100% sans rien ouvrir! Je ne sais pas pourquoi mais jé essayé bcp de choses D'anti Virus , et il n'a pas donné de resultats! Ad-aware, Hajickthis, Norton, McCafe......
Et une autre chose, j'ai 2 Fichier de video dans mon ordi, qui sont tres petites comme taille, par exemple de 4Kb, et ca supprime pas , et quand je clic sur ces fichiers, l'ordi se ralentisse et se freeze.....
Mais je veut dire que le UC 100% n'a pas de rapport avec ces fichiers parceque avant que j'enregistre ces fichiers , j'avais aussi mon Uc à 100%!
Que Faire?
Merci D'avance....
Mon UC est à 100% sans rien ouvrir! Je ne sais pas pourquoi mais jé essayé bcp de choses D'anti Virus , et il n'a pas donné de resultats! Ad-aware, Hajickthis, Norton, McCafe......
Et une autre chose, j'ai 2 Fichier de video dans mon ordi, qui sont tres petites comme taille, par exemple de 4Kb, et ca supprime pas , et quand je clic sur ces fichiers, l'ordi se ralentisse et se freeze.....
Mais je veut dire que le UC 100% n'a pas de rapport avec ces fichiers parceque avant que j'enregistre ces fichiers , j'avais aussi mon Uc à 100%!
Que Faire?
Merci D'avance....
Autres pages sur : 100 fichiers derange
Lassé par la pub ? Créez un compte
Faire un log RSIT pour voir se qui roule.
Téléchargement de Random's system information tool http://images.malwareremoval.com/random/RSIT.exe
Cliquez pour le télécharger et dans enregistrer sous le mettre sur le bureau. Cliquer sur le fichier pour générer les logs. RSIT installe Hijackthis en même temps.
Ensuite vous cliquez sur RSIT.exe. Cliquer sur "continuer" ou changer le temps par défaut soit un mois à 2 ou 3 mois si vous pensez que l'infection date de ce temps.
Le scan terminée, 2 fenêtres "bloc note" vont s'ouvrir. Vous me copier/coller log.txt en premier et info.txt en second.
Dans le "Bloc note" vous allez dans le menu Édition et cliquer sur "Sélectionner tout" et retourner dans "Édition" et cliquer sur "copier"
Sur le forum, faire un click droit et cliquer sur "coller".
Téléchargement de Random's system information tool http://images.malwareremoval.com/random/RSIT.exe
Cliquez pour le télécharger et dans enregistrer sous le mettre sur le bureau. Cliquer sur le fichier pour générer les logs. RSIT installe Hijackthis en même temps.
Ensuite vous cliquez sur RSIT.exe. Cliquer sur "continuer" ou changer le temps par défaut soit un mois à 2 ou 3 mois si vous pensez que l'infection date de ce temps.
Le scan terminée, 2 fenêtres "bloc note" vont s'ouvrir. Vous me copier/coller log.txt en premier et info.txt en second.
Dans le "Bloc note" vous allez dans le menu Édition et cliquer sur "Sélectionner tout" et retourner dans "Édition" et cliquer sur "copier"
Sur le forum, faire un click droit et cliquer sur "coller".
Logfile of random's system information tool 1.06 (written by random/random)
Run by Harmandayan at 2009-06-29 02:04:13
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 366 GB (79%) free of 465 GB
Total RAM: 3326 MB (43% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:04:22, on 29/06/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Lexmark 6500 Series\lxdfamon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Armenian NLS\nlsload.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Windows\System32\mobsync.exe
C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Harmandayan\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Harmandayan.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [CarboniteSetupLite] "C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe" /preinstalled
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [lxdfamon] "C:\Program Files\Lexmark 6500 Series\lxdfamon.exe"
O4 - HKLM\..\Run: [Lexmark 6500 Series Fax Server] "C:\Program Files\Lexmark 6500 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Armenian NLS Keyboard] C:\Program Files\Armenian NLS\armnls.exe /load
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AnumanLive] C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2009] c:\program files\uniblue\registrybooster\StartRegistryBooster.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\Harmandayan\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpld...
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrob...
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://cdnimg.piczo.com/images/uploader/piczo_fast_uplo...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: lxdfCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdfserv.exe
O23 - Service: lxdf_device - - C:\Windows\system32\lxdfcoms.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe
--
End of file - 11896 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Ad-Aware Update (Weekly).job
C:\Windows\tasks\Extension de garantie-Harmandayan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]
EoBho Class - C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-03-09 320920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\Program Files\Google\Google_BAE\BAE.dll [2006-11-09 98304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-29 4911104]
"CarboniteSetupLite"=C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe [2008-04-07 306112]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-05-01 29744]
"toolbar_eula_launcher"=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe [2007-02-20 28672]
"ACTIVBOARD"=C:\Program Files\Packard Bell\FIJI\aboard.exe [2007-01-18 79416]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-17 13580832]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-17 92704]
"EoEngine"= []
"YSearchProtection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe [2008-07-11 223984]
"lxdfamon"=C:\Program Files\Lexmark 6500 Series\lxdfamon.exe [2007-06-01 20480]
"Lexmark 6500 Series Fax Server"=C:\Program Files\Lexmark 6500 Series\fm3032.exe [2007-06-11 308144]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2009-06-20 518488]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-06-20 206088]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"=C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe [2008-02-04 1038136]
"Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2007-08-30 4670704]
"Armenian NLS Keyboard"=C:\Program Files\Armenian NLS\armnls.exe [2003-08-31 787456]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"YSearchProtection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe [2008-07-11 223984]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-01 39408]
"AnumanLive"=C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe [2009-05-23 347648]
"Uniblue RegistryBooster 2009"=c:\program files\uniblue\registrybooster\StartRegistryBooster.exe []
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdfmon.exe]
C:\Program Files\Lexmark 6500 Series\lxdfmon.exe [2007-06-11 455600]
C:\Users\Harmandayan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Notification de cadeaux MSN.lnk - C:\Users\Harmandayan\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2008-11-11 218376]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableStatusMessages"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.bat - edit - %SystemRoot%\System32\NOTEPAD.EXE %1"
.ini - open - %SystemRoot%\System32\NOTEPAD.EXE %1"
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 3 months======
2009-06-29 01:56:17 ----D---- C:\rsit
2009-06-20 22:02:57 ----D---- C:\ProgramData\Kaspersky Lab
2009-06-20 22:02:57 ----D---- C:\Program Files\Kaspersky Lab
2009-06-20 14:02:34 ----A---- C:\Windows\system32\regsvr32.exe.log
2009-06-17 20:21:13 ----D---- C:\Users\Harmandayan\AppData\Roaming\Uniblue
2009-06-13 13:57:29 ----D---- C:\Program Files\QUAD Utilities
2009-06-13 13:43:47 ----A---- C:\Windows\system32\lsdelete.exe
2009-06-13 13:34:07 ----HDC---- C:\ProgramData\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-06-13 13:33:47 ----D---- C:\ProgramData\Lavasoft
2009-06-13 13:33:47 ----D---- C:\Program Files\Lavasoft
2009-06-13 00:38:28 ----D---- C:\Program Files\Trend Micro
2009-06-12 20:21:08 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-06-12 20:21:08 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-06-11 14:16:33 ----A---- C:\Windows\system32\localspl.dll
2009-06-11 14:16:30 ----A---- C:\Windows\system32\mshtml.dll
2009-06-11 14:16:29 ----A---- C:\Windows\system32\iertutil.dll
2009-06-11 14:16:29 ----A---- C:\Windows\system32\ieframe.dll
2009-06-11 14:16:28 ----A---- C:\Windows\system32\wininet.dll
2009-06-11 14:16:28 ----A---- C:\Windows\system32\urlmon.dll
2009-06-11 14:16:28 ----A---- C:\Windows\system32\iedkcs32.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\jsproxy.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\ieui.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\iesetup.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\iernonce.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\ie4uinit.exe
2009-06-11 14:16:24 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-06 18:26:16 ----D---- C:\Users\Harmandayan\AppData\Roaming\Download Manager
2009-06-04 21:58:38 ----D---- C:\Windows\system32\eu-ES
2009-06-04 21:58:38 ----D---- C:\Windows\system32\ca-ES
2009-06-04 21:58:36 ----D---- C:\Windows\system32\vi-VN
2009-06-04 21:35:33 ----D---- C:\Windows\system32\EventProviders
2009-06-04 21:34:35 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-06-04 21:34:32 ----A---- C:\Windows\system32\SLsvc.exe
2009-06-04 21:34:32 ----A---- C:\Windows\system32\SLCExt.dll
2009-06-04 21:34:31 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-06-04 21:34:31 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-06-04 21:34:30 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-06-04 21:34:28 ----A---- C:\Windows\system32\mssrch.dll
2009-06-04 21:34:27 ----A---- C:\Windows\system32\tquery.dll
2009-06-04 21:34:26 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-06-04 21:34:26 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-06-04 21:34:26 ----A---- C:\Windows\system32\lsasrv.dll
2009-06-04 21:34:25 ----A---- C:\Windows\system32\scavenge.dll
2009-06-04 21:34:25 ----A---- C:\Windows\system32\RMActivate.exe
2009-06-04 21:34:25 ----A---- C:\Windows\system32\msi.dll
2009-06-04 21:34:24 ----A---- C:\Windows\system32\imapi2fs.dll
2009-06-04 21:34:23 ----A---- C:\Windows\system32\WscEapPr.dll
2009-06-04 21:34:23 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-06-04 21:34:23 ----A---- C:\Windows\system32\secproc_isv.dll
2009-06-04 21:34:22 ----A---- C:\Windows\system32\sysmain.dll
2009-06-04 21:34:21 ----A---- C:\Windows\system32\mf.dll
2009-06-04 21:34:21 ----A---- C:\Windows\system32\icardagt.exe
2009-06-04 21:34:20 ----A---- C:\Windows\system32\EhStorShell.dll
2009-06-04 21:34:20 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-06-04 21:34:19 ----A---- C:\Windows\system32\spreview.exe
2009-06-04 21:34:19 ----A---- C:\Windows\system32\spinstall.exe
2009-06-04 21:34:19 ----A---- C:\Windows\system32\drmv2clt.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\spwizui.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\shell32.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\secproc.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-06-04 21:34:17 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-06-04 21:34:17 ----A---- C:\Windows\system32\p2psvc.dll
2009-06-04 21:34:17 ----A---- C:\Windows\system32\mssvp.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\mssphtb.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\mssph.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-06-04 21:34:16 ----A---- C:\Windows\system32\mscoree.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\imapi2.dll
2009-06-04 21:34:15 ----A---- C:\Windows\system32\sdohlp.dll
2009-06-04 21:34:15 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-06-04 21:34:15 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-06-04 21:34:15 ----A---- C:\Windows\system32\esent.dll
2009-06-04 21:34:15 ----A---- C:\Windows\system32\DevicePairing.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\wevtsvc.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\sperror.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-06-04 21:34:14 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\korwbrkr.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\wmp.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\SLC.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-06-04 21:34:13 ----A---- C:\Windows\system32\msshsq.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\IasMigReader.exe
2009-06-04 21:34:12 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-06-04 21:34:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-06-04 21:34:12 ----A---- C:\Windows\system32\msxml6.dll
2009-06-04 21:34:12 ----A---- C:\Windows\system32\msjet40.dll
2009-06-04 21:34:12 ----A---- C:\Windows\system32\MPSSVC.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\Query.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\qmgr.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\msexch40.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\diagperf.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\winload.exe
2009-06-04 21:34:10 ----A---- C:\Windows\system32\srchadmin.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\P2PGraph.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\ole32.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\ntdll.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\msxml3.dll
2009-06-04 21:34:09 ----A---- C:\Windows\system32\uDWM.dll
2009-06-04 21:34:09 ----A---- C:\Windows\system32\mmc.exe
2009-06-04 21:34:09 ----A---- C:\Windows\system32\mblctr.exe
2009-06-04 21:34:09 ----A---- C:\Windows\system32\EncDec.dll
2009-06-04 21:34:09 ----A---- C:\Windows\system32\dfsr.exe
2009-06-04 21:34:08 ----A---- C:\Windows\system32\riched20.dll
2009-06-04 21:34:08 ----A---- C:\Windows\system32\RacEngn.dll
2009-06-04 21:34:08 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-06-04 21:34:08 ----A---- C:\Windows\system32\fdBth.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\spoolss.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-06-04 21:34:07 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-06-04 21:34:07 ----A---- C:\Windows\system32\milcore.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\kernel32.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\CertEnroll.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\schedsvc.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\msjtes40.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\WinSAT.exe
2009-06-04 21:34:05 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-06-04 21:34:05 ----A---- C:\Windows\system32\msvcp60.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\infocardapi.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\gpedit.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\es.dll
2009-06-04 21:34:04 ----A---- C:\Windows\system32\mstext40.dll
2009-06-04 21:34:04 ----A---- C:\Windows\system32\Magnify.exe
2009-06-04 21:34:04 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-06-04 21:34:04 ----A---- C:\Windows\system32\advapi32.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\WMPhoto.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\WebClnt.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\slwmi.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\msxbde40.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\msexcl40.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\comsvcs.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\vssapi.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\NetProjW.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\mstscax.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\authui.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\propsys.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\PresentationHost.exe
2009-06-04 21:34:01 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\newdev.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\msrepl40.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\iasrecst.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\gpsvc.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\eudcedit.exe
2009-06-04 21:34:01 ----A---- C:\Windows\system32\crypt32.dll
2009-06-04 21:34:01 ----A---- C:\Windows\explorer.exe
2009-06-04 21:34:00 ----A---- C:\Windows\system32\setupapi.dll
2009-06-04 21:34:00 ----A---- C:\Windows\system32\rpcss.dll
2009-06-04 21:34:00 ----A---- C:\Windows\system32\mspbde40.dll
2009-06-04 21:34:00 ----A---- C:\Windows\system32\d3d9.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\wevtapi.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\shlwapi.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\msrd3x40.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\msltus40.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\msdtctm.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\mfc42.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\davclnt.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\browseui.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\user32.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\samsrv.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\quartz.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\photowiz.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\nlhtml.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\ci.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\win32spl.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-06-04 21:33:57 ----A---- C:\Windows\system32\oleaut32.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\netshell.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\msv1_0.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\kerberos.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\IKEEXT.DLL
2009-06-04 21:33:56 ----A---- C:\Windows\system32\winhttp.dll
2009-06-04 21:33:56 ----A---- C:\Windows\system32\compcln.exe
2009-06-04 21:33:56 ----A---- C:\Windows\system32\apds.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\xmlfilter.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\mswstr10.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\msvcrt.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\msctf.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\emdmgmt.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\audiosrv.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\VSSVC.exe
2009-06-04 21:33:54 ----A---- C:\Windows\system32\SLUI.exe
2009-06-04 21:33:54 ----A---- C:\Windows\system32\QAGENTRT.DLL
2009-06-04 21:33:54 ----A---- C:\Windows\system32\msrd2x40.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\mfc42u.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\gdi32.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\eapphost.dll
2009-06-04 21:33:53 ----A---- C:\Windows\system32\winresume.exe
2009-06-04 21:33:53 ----A---- C:\Windows\system32\sqlsrv32.dll
2009-06-04 21:33:53 ----A---- C:\Windows\system32\propdefs.dll
2009-06-04 21:33:53 ----A---- C:\Windows\system32\odbc32.dll
2009-06-04 21:33:52 ----A---- C:\Windows\system32\wevtutil.exe
2009-06-04 21:33:52 ----A---- C:\Windows\system32\shdocvw.dll
2009-06-04 21:33:52 ----A---- C:\Windows\system32\dbgeng.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\WsmSvc.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\usp10.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\swprv.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\mssitlb.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\mmcndmgr.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\vds.exe
2009-06-04 21:33:50 ----A---- C:\Windows\system32\netlogon.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\msscb.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\msctfp.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\drvinst.exe
2009-06-04 21:33:50 ----A---- C:\Windows\system32\devmgr.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\BFE.DLL
2009-06-04 21:33:50 ----A---- C:\Windows\system32\adsldpc.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\WSDApi.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\WMVSDECD.DLL
2009-06-04 21:33:49 ----A---- C:\Windows\system32\Wldap32.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\wercon.exe
2009-06-04 21:33:49 ----A---- C:\Windows\system32\wcnwiz.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\services.exe
2009-06-04 21:33:49 ----A---- C:\Windows\system32\schannel.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\mimefilt.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\evr.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\comdlg32.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\adtschema.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\wcncsvc.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\taskeng.exe
2009-06-04 21:33:48 ----A---- C:\Windows\system32\rtffilt.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\reg.exe
2009-06-04 21:33:48 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\mswdat10.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\msjter40.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\msdtcprx.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\msdrm.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\ipsmsnap.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\dnsapi.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\certutil.exe
2009-06-04 21:33:48 ----A---- C:\Windows\system32\certcli.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\w32time.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\rsaenh.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\msshooks.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\msscntrs.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-06-04 21:33:47 ----A---- C:\Windows\system32\bthserv.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\bcrypt.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\TsWpfWrp.exe
2009-06-04 21:33:46 ----A---- C:\Windows\system32\netapi32.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\mtxclu.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\msstrc.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\msihnd.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\MMDevAPI.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\inetpp.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\inetcomm.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\dfshim.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\wmicmiplugin.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\termsrv.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\profsvc.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\mscories.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\hidserv.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\gameux.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\fundisc.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\cryptsvc.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\wdc.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\shsvcs.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\msiexec.exe
2009-06-04 21:33:44 ----A---- C:\Windows\system32\imapi.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\chsbrkr.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\spoolsv.exe
2009-06-04 21:33:43 ----A---- C:\Windows\system32\rasmans.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\pnidui.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\icardres.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\iassdo.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\autofmt.exe
2009-06-04 21:33:42 ----A---- C:\Windows\system32\wersvc.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\slmgr.vbs
2009-06-04 21:33:42 ----A---- C:\Windows\system32\scrrun.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\PSHED.DLL
2009-06-04 21:33:42 ----A---- C:\Windows\system32\pdh.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\azroles.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\wmpmde.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\winlogon.exe
2009-06-04 21:33:41 ----A---- C:\Windows\system32\SyncCenter.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\pidgenx.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\CertEnrollUI.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\SLUINotify.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\sethc.exe
2009-06-04 21:33:40 ----A---- C:\Windows\system32\ncrypt.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\msjetoledb40.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\kd1394.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\comuid.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\certmgr.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\wisptis.exe
2009-06-04 21:33:39 ----A---- C:\Windows\system32\untfs.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\taskcomp.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\spp.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\scrobj.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\rtutils.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\iassam.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\dwm.exe
2009-06-04 21:33:39 ----A---- C:\Windows\system32\autochk.exe
2009-06-04 21:33:38 ----A---- C:\Windows\system32\winsrv.dll
2009-06-04 21:33:38 ----A---- C:\Windows\system32\printui.dll
2009-06-04 21:33:38 ----A---- C:\Windows\system32\iasnap.dll
2009-06-04 21:33:38 ----A---- C:\Windows\system32\autoconv.exe
2009-06-04 21:33:37 ----A---- C:\Windows\system32\onex.dll
2009-06-04 21:33:37 ----A---- C:\Windows\system32\kdcom.dll
2009-06-04 21:33:37 ----A---- C:\Windows\system32\cscript.exe
2009-06-04 21:33:37 ----A---- C:\Windows\system32\basecsp.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\wow32.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\userenv.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\spcmsg.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\RelMon.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\osk.exe
2009-06-04 21:33:36 ----A---- C:\Windows\system32\mswsock.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\kdusb.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\audiodg.exe
2009-06-04 21:33:35 ----A---- C:\Windows\system32\WinSCard.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\winmm.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\WerFaultSecure.exe
2009-06-04 21:33:35 ----A---- C:\Windows\system32\rdpencom.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\offfilt.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\msftedit.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\wsepno.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\WerFault.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\Utilman.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\stobject.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\SndVol.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\secproc_ssp.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\prnntfy.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\msnetobj.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\mscms.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\mfplat.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\mcmde.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\diskraid.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\apphelp.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\adsmsext.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\wscript.exe
2009-06-04 21:33:33 ----A---- C:\Windows\system32\wiaservc.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\ulib.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\sysclass.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\secur32.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\rastapi.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\odbccp32.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2009-06-04 21:33:33 ----A---- C:\Windows\system32\iasdatastore.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\dsound.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\cryptui.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wscsvc.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wscntfy.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wlansvc.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wlangpui.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\vdsdyn.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\rastls.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\pnpsetup.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\netiohlp.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\logman.exe
2009-06-04 21:33:32 ----A---- C:\Windows\system32\ipsecsnp.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\iashlpr.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\gpapi.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\fdProxy.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\diskpart.exe
2009-06-04 21:33:32 ----A---- C:\Windows\system32\brcpl.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\zipfldr.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\wusa.exe
2009-06-04 21:33:31 ----A---- C:\Windows\system32\wshext.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\wpccpl.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\WMVENCOD.DLL
2009-06-04 21:33:31 ----A---- C:\Windows\system32\regsvc.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\rasapi32.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\ntprint.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\netcenter.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\mscorier.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\iasrad.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\findstr.exe
2009-06-04 21:33:30 ----A---- C:\Windows\system32\wsnmp32.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\wer.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\themecpl.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\rasdlg.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\iassvcs.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\uxsms.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\tsbyuv.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\srvsvc.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\slcc.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\scansetting.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\ntmarta.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\msutb.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\mstlsapi.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\mssprxy.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\iasads.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\wlanhlp.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\systemcpl.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\sud.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\powrprof.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\powercpl.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\newdev.exe
2009-06-04 21:33:28 ----A---- C:\Windows\system32\networkmap.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\mstsc.exe
2009-06-04 21:33:28 ----A---- C:\Windows\system32\iasacct.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\dot3svc.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\connect.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\authz.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\wlanpref.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\usercpl.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\themeui.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\samlib.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\rpchttp.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\qdvd.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\pcaui.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\mmci.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\autoplay.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\accessibilitycpl.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\wpcao.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\vdsutil.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\tapisrv.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\scksp.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\scesrv.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\regapi.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\oleprn.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\msinfo32.exe
2009-06-04 21:33:26 ----A---- C:\Windows\system32\mpr.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\imm32.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\feclient.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\AudioSes.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\wscisvif.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\sdclt.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\scecli.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\rekeywiz.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\rasgcw.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\qedit.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\pnpui.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\perfdisk.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\ncryptui.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\iaspolcy.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\hdwwiz.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2009-06-04 21:33:25 ----A---- C:\Windows\system32\Faultrep.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\dpapimig.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\dot3msm.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\DeviceEject.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\certreq.exe
2009-06-04 21:33:24 ----A---- C:\Windows\system32\whealogr.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\TSTheme.exe
2009-06-04 21:33:24 ----A---- C:\Windows\system32\tcpmon.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\spwinsat.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\rasplap.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\PnPUnattend.exe
2009-06-04 21:33:24 ----A---- C:\Windows\system32\fdWSD.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\cmmon32.exe
2009-06-04 21:33:23 ----A---- C:\Windows\system32\wiaaut.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\srcore.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\SnippingTool.exe
2009-06-04 21:33:23 ----A---- C:\Windows\system32\SCardSvr.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\raschap.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\MSVidCtl.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\fontext.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\conime.exe
2009-06-04 21:33:23 ----A---- C:\Windows\system32\cmdial32.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\WMVXENCD.DLL
2009-06-04 21:33:22 ----A---- C:\Windows\system32\wlanui.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\wlanmsm.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\shwebsvc.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\rasppp.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\PnPutil.exe
2009-06-04 21:33:22 ----A---- C:\Windows\system32\oobefldr.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\dsprop.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\dimsroam.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\wmdrmsdk.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\shsetup.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\rasmontr.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\mscandui.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\modemui.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\dataclen.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\chtbrkr.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\WSDMon.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\wmpeffects.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\wlgpclnt.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\smss.exe
2009-06-04 21:33:20 ----A---- C:\Windows\system32\rdpwsx.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\netplwiz.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\credui.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\certprop.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\blackbox.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\wscapi.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\wpcsvc.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\thawbrkr.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\sendmail.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\networkexplorer.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\msscp.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\msimtf.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\logagent.exe
2009-06-04 21:33:19 ----A---- C:\Windows\system32\InkEd.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\ifmon.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\gpresult.exe
2009-06-04 21:33:19 ----A---- C:\Windows\system32\cipher.exe
2009-06-04 21:33:18 ----A---- C:\Windows\system32\softkbd.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\puiapi.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\olepro32.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\msctfui.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\drmmgrtn.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\dmsynth.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\wshbth.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\version.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\SLLUA.exe
2009-06-04 21:33:17 ----A---- C:\Windows\system32\msisip.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\mprapi.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\input.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\fdSSDP.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\fc.exe
2009-06-04 21:33:17 ----A---- C:\Windows\system32\ExplorerFrame.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\cdd.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\wsdchngr.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\Storprop.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\SMBHelperClass.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\rrinstaller.exe
2009-06-04 21:33:16 ----A---- C:\Windows\system32\rasdial.exe
2009-06-04 21:33:16 ----A---- C:\Windows\system32\rasdiag.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\msjint40.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\l2nacp.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\ftp.exe
2009-06-04 21:33:16 ----A---- C:\Windows\system32\eapp3hst.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\dmusic.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\cscdll.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\cscapi.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\bthci.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\tscupgrd.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\slcinst.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\ocsetup.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\nslookup.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\networkitemfactory.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\mfps.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\ipconfig.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\fdWCN.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\eappgnui.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\eappcfg.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\dot3cfg.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\bthudtask.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\aaclient.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\tsgqec.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\PNPXAssoc.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\mmcico.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\mfpmp.exe
2009-06-04 21:33:14 ----A---- C:\Windows\system32\hbaapi.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\gpupdate.exe
2009-06-04 21:33:14 ----A---- C:\Windows\system32\fdeploy.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\NcdProp.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\iscsilog.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\csrstub.exe
2009-06-04 21:33:13 ----A---- C:\Windows\system32\cbsra.exe
2009-06-04 21:33:13 ----A---- C:\Windows\system32\bitsigd.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\atmlib.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\winrnr.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\vdmdbg.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\slwga.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\odbcconf.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\midimap.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\inetppui.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\atmfd.dll
2009-06-04 21:33:11 ----A---- C:\Windows\system32\spwmp.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\wmploc.DLL
2009-06-04 21:33:10 ----A---- C:\Windows\system32\msimsg.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\mferror.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\dxmasf.dll
2009-06-04 21:32:49 ----A---- C:\Windows\system32\SmiEngine.dll
2009-06-04 21:32:43 ----A---- C:\Windows\system32\wdscore.dll
2009-06-04 21:32:43 ----A---- C:\Windows\system32\PkgMgr.exe
2009-06-04 21:32:25 ----A---- C:\Windows\system32\drvstore.dll
2009-06-04 21:23:43 ----D---- C:\Program Files\Alwil Software
2009-05-23 23:46:22 ----D---- C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive
2009-05-23 22:33:28 ----A---- C:\Windows\system32\tsccvid.dll
2009-05-23 22:33:26 ----D---- C:\Windows\system32\QuickTime
2009-05-22 17:53:16 ----D---- C:\Program Files\sounds
2009-05-22 16:28:18 ----D---- C:\Extracted
2009-05-21 14:02:39 ----D---- C:\ProgramData\GameHouse
2009-05-21 13:54:20 ----D---- C:\ProgramData\Zylom
2009-05-20 18:40:11 ----D---- C:\Users\Harmandayan\AppData\Roaming\PlayFirst
2009-05-20 18:40:11 ----D---- C:\ProgramData\PlayFirst
2009-05-20 18:39:59 ----D---- C:\Users\Harmandayan\AppData\Roaming\Zylom
2009-05-20 10:37:53 ----D---- C:\ProgramData\WindowsSearch
2009-05-13 12:17:48 ----D---- C:\Program Files\Microsoft Sync Framework
2009-05-13 12:14:36 ----D---- C:\Program Files\Windows Live SkyDrive
2009-05-09 15:47:35 ----D---- C:\Users\Harmandayan\AppData\Roaming\Media Player Classic
2009-05-09 14:53:09 ----D---- C:\My Music
2009-05-09 14:31:40 ----A---- C:\Windows\system32\NCTWMAFile2.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\NCTAudioPlayer2.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\NCTAudioFile2.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\msvcr70.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\lame_enc.dll
2009-05-09 14:27:08 ----A---- C:\Windows\system32\coodest.dll
2009-05-03 14:14:14 ----D---- C:\Program Files\JRE
2009-05-01 18:39:08 ----D---- C:\Users\Harmandayan\AppData\Roaming\OpenOffice.org
2009-05-01 02:32:55 ----D---- C:\Program Files\OpenOffice.org 3
2009-05-01 02:32:14 ----A---- C:\Windows\system32\javaws.exe
2009-05-01 02:32:14 ----A---- C:\Windows\system32\javaw.exe
2009-05-01 02:32:14 ----A---- C:\Windows\system32\java.exe
2009-05-01 02:31:03 ----D---- C:\Program Files\Common Files\Java
2009-04-28 14:21:16 ----D---- C:\Program Files\OpenAL
2009-04-28 14:21:08 ----A---- C:\Windows\system32\xactengine2_4.dll
2009-04-28 14:21:07 ----A---- C:\Windows\system32\xactengine2_3.dll
2009-04-28 14:21:06 ----A---- C:\Windows\system32\xinput1_2.dll
2009-04-28 14:21:06 ----A---- C:\Windows\system32\xinput1_1.dll
2009-04-28 14:21:06 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-04-28 14:21:05 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-04-27 11:06:52 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-04-27 11:06:52 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-04-25 23:02:04 ----D---- C:\Program Files\MC2
2009-04-24 21:24:51 ----D---- C:\ProgramData\NOS
2009-04-24 21:24:51 ----D---- C:\Program Files\NOS
2009-04-18 14:59:40 ----D---- C:\Program Files\Common Files\SWF Studio
2009-04-03 15:25:01 ----HD---- C:\Windows\msdownld.tmp
2009-04-03 15:22:25 ----A---- C:\Windows\system32\mshtmled.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\msls31.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\mshtmler.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\icardie.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\corpol.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\admparse.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\imgutil.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\ieakeng.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\dxtrans.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\dxtmsft.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\wextract.exe
2009-04-03 15:22:22 ----A---- C:\Windows\system32\webcheck.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\occache.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\msrating.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\licmgr10.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\inseng.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\iepeers.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\ieakui.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\ieaksie.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-04-03 15:22:21 ----A---- C:\Windows\system32\pngfilt.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\mstime.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\msfeedssync.exe
2009-04-03 15:22:21 ----A---- C:\Windows\system32\msfeeds.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\ieapfltr.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\advpack.dll
2009-04-03 15:22:20 ----A---- C:\Windows\system32\vbscript.dll
2009-04-03 15:22:20 ----A---- C:\Windows\system32\url.dll
2009-04-03 15:22:20 ----A---- C:\Windows\system32\jscript.dll
2009-04-03 15:22:19 ----A---- C:\Windows\system32\mshta.exe
2009-04-03 15:22:19 ----A---- C:\Windows\system32\iexpress.exe
2009-04-03 15:22:19 ----A---- C:\Windows\system32\iesysprep.dll
2009-04-03 15:22:18 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\SetDepNx.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\PDMSetup.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\ieUnatt.exe
======List of files/folders modified in the last 3 months======
2009-06-29 02:04:16 ----D---- C:\Windows\Temp
2009-06-29 01:58:48 ----D---- C:\Windows\inf
2009-06-29 01:58:48 ----AD---- C:\Windows\System32
2009-06-29 01:58:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-06-28 23:34:51 ----D---- C:\ProgramData\Lx_cats
2009-06-28 23:34:49 ----HD---- C:\ProgramData
2009-06-25 20:08:49 ----D---- C:\Windows\Microsoft.NET
2009-06-25 18:58:56 ----SHD---- C:\System Volume Information
2009-06-25 18:58:21 ----SHD---- C:\Windows\Installer
2009-06-22 16:09:59 ----D---- C:\Windows\system32\catroot2
2009-06-21 02:08:19 ----RD---- C:\Program Files
2009-06-20 22:14:40 ----AD---- C:\Windows\system32\drivers
2009-06-20 22:12:55 ----D---- C:\Windows\system32\WDI
2009-06-20 22:11:46 ----D---- C:\Windows
2009-06-20 22:03:23 ----D---- C:\Windows\system32\catroot
2009-06-20 16:45:27 ----D---- C:\Windows\system32\setup
2009-06-20 14:46:02 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-20 14:03:16 ----D---- C:\Program Files\Common Files
2009-06-20 14:01:36 ----D---- C:\Program Files\Common Files\Real
2009-06-20 14:01:21 ----D---- C:\Users\Harmandayan\AppData\Roaming\Real
2009-06-20 13:50:36 ----D---- C:\Users\Harmandayan\AppData\Roaming\vlc
2009-06-20 13:49:51 ----D---- C:\Windows\system32\MAGIX
2009-06-20 13:49:12 ----D---- C:\ProgramData\MAGIX
2009-06-18 13:04:33 ----AD---- C:\ProgramData\TEMP
2009-06-17 20:25:50 ----D---- C:\ProgramData\McAfee
2009-06-17 20:09:34 ----D---- C:\Windows\Tasks
2009-06-16 18:57:53 ----D---- C:\Program Files\Google
2009-06-16 18:57:52 ----D---- C:\ProgramData\Google
2009-06-15 13:31:56 ----D---- C:\Users\Harmandayan\AppData\Roaming\Adobe
2009-06-13 15:28:04 ----RSD---- C:\Windows\assembly
2009-06-13 15:19:26 ----D---- C:\Windows\ehome
2009-06-13 14:24:45 ----D---- C:\Windows\winsxs
2009-06-13 14:23:48 ----D---- C:\Program Files\Internet Explorer
2009-06-13 14:07:56 ----HD---- C:\Windows\system32\GroupPolicy
2009-06-13 13:57:34 ----D---- C:\Windows\system32\Tasks
2009-06-13 13:36:16 ----DC---- C:\Windows\system32\DRVS
Run by Harmandayan at 2009-06-29 02:04:13
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
System drive C: has 366 GB (79%) free of 465 GB
Total RAM: 3326 MB (43% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:04:22, on 29/06/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Packard Bell\FIJI\ABoard.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Lexmark 6500 Series\lxdfamon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Packard Bell\FIJI\AOSD.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Armenian NLS\nlsload.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Windows\System32\mobsync.exe
C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Harmandayan\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Harmandayan.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [CarboniteSetupLite] "C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe" /preinstalled
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [ACTIVBOARD] C:\Program Files\Packard Bell\FIJI\aboard.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [lxdfamon] "C:\Program Files\Lexmark 6500 Series\lxdfamon.exe"
O4 - HKLM\..\Run: [Lexmark 6500 Series Fax Server] "C:\Program Files\Lexmark 6500 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Armenian NLS Keyboard] C:\Program Files\Armenian NLS\armnls.exe /load
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AnumanLive] C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2009] c:\program files\uniblue\registrybooster\StartRegistryBooster.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Startup: Notification de cadeaux MSN.lnk = C:\Users\Harmandayan\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpld...
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrob...
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://cdnimg.piczo.com/images/uploader/piczo_fast_uplo...
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: lxdfCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdfserv.exe
O23 - Service: lxdf_device - - C:\Windows\system32\lxdfcoms.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe
--
End of file - 11896 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Ad-Aware Update (Weekly).job
C:\Windows\tasks\Extension de garantie-Harmandayan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2008-11-11 62728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}]
EoBho Class - C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre6\bin\ssv.dll [2009-03-09 320920]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\Program Files\Google\Google_BAE\BAE.dll [2006-11-09 98304]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll [2008-07-28 160496]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2008-07-28 882416]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-29 4911104]
"CarboniteSetupLite"=C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe [2008-04-07 306112]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-05-01 29744]
"toolbar_eula_launcher"=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe [2007-02-20 28672]
"ACTIVBOARD"=C:\Program Files\Packard Bell\FIJI\aboard.exe [2007-01-18 79416]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-09-17 13580832]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-09-17 92704]
"EoEngine"= []
"YSearchProtection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe [2008-07-11 223984]
"lxdfamon"=C:\Program Files\Lexmark 6500 Series\lxdfamon.exe [2007-06-01 20480]
"Lexmark 6500 Series Fax Server"=C:\Program Files\Lexmark 6500 Series\fm3032.exe [2007-06-11 308144]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2009-06-20 518488]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-06-20 206088]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"=C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe [2008-02-04 1038136]
"Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2007-08-30 4670704]
"Armenian NLS Keyboard"=C:\Program Files\Armenian NLS\armnls.exe [2003-08-31 787456]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"YSearchProtection"=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe [2008-07-11 223984]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-02-06 3885408]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-01 39408]
"AnumanLive"=C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe [2009-05-23 347648]
"Uniblue RegistryBooster 2009"=c:\program files\uniblue\registrybooster\StartRegistryBooster.exe []
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxdfmon.exe]
C:\Program Files\Lexmark 6500 Series\lxdfmon.exe [2007-06-11 455600]
C:\Users\Harmandayan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Notification de cadeaux MSN.lnk - C:\Users\Harmandayan\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2008-11-11 218376]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableStatusMessages"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.bat - edit - %SystemRoot%\System32\NOTEPAD.EXE %1"
.ini - open - %SystemRoot%\System32\NOTEPAD.EXE %1"
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 3 months======
2009-06-29 01:56:17 ----D---- C:\rsit
2009-06-20 22:02:57 ----D---- C:\ProgramData\Kaspersky Lab
2009-06-20 22:02:57 ----D---- C:\Program Files\Kaspersky Lab
2009-06-20 14:02:34 ----A---- C:\Windows\system32\regsvr32.exe.log
2009-06-17 20:21:13 ----D---- C:\Users\Harmandayan\AppData\Roaming\Uniblue
2009-06-13 13:57:29 ----D---- C:\Program Files\QUAD Utilities
2009-06-13 13:43:47 ----A---- C:\Windows\system32\lsdelete.exe
2009-06-13 13:34:07 ----HDC---- C:\ProgramData\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
2009-06-13 13:33:47 ----D---- C:\ProgramData\Lavasoft
2009-06-13 13:33:47 ----D---- C:\Program Files\Lavasoft
2009-06-13 00:38:28 ----D---- C:\Program Files\Trend Micro
2009-06-12 20:21:08 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-06-12 20:21:08 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-06-11 14:16:33 ----A---- C:\Windows\system32\localspl.dll
2009-06-11 14:16:30 ----A---- C:\Windows\system32\mshtml.dll
2009-06-11 14:16:29 ----A---- C:\Windows\system32\iertutil.dll
2009-06-11 14:16:29 ----A---- C:\Windows\system32\ieframe.dll
2009-06-11 14:16:28 ----A---- C:\Windows\system32\wininet.dll
2009-06-11 14:16:28 ----A---- C:\Windows\system32\urlmon.dll
2009-06-11 14:16:28 ----A---- C:\Windows\system32\iedkcs32.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\jsproxy.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\ieui.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\iesetup.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\iernonce.dll
2009-06-11 14:16:27 ----A---- C:\Windows\system32\ie4uinit.exe
2009-06-11 14:16:24 ----A---- C:\Windows\system32\rpcrt4.dll
2009-06-06 18:26:16 ----D---- C:\Users\Harmandayan\AppData\Roaming\Download Manager
2009-06-04 21:58:38 ----D---- C:\Windows\system32\eu-ES
2009-06-04 21:58:38 ----D---- C:\Windows\system32\ca-ES
2009-06-04 21:58:36 ----D---- C:\Windows\system32\vi-VN
2009-06-04 21:35:33 ----D---- C:\Windows\system32\EventProviders
2009-06-04 21:34:35 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-06-04 21:34:32 ----A---- C:\Windows\system32\SLsvc.exe
2009-06-04 21:34:32 ----A---- C:\Windows\system32\SLCExt.dll
2009-06-04 21:34:31 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-06-04 21:34:31 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-06-04 21:34:30 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-06-04 21:34:28 ----A---- C:\Windows\system32\mssrch.dll
2009-06-04 21:34:27 ----A---- C:\Windows\system32\tquery.dll
2009-06-04 21:34:26 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-06-04 21:34:26 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-06-04 21:34:26 ----A---- C:\Windows\system32\lsasrv.dll
2009-06-04 21:34:25 ----A---- C:\Windows\system32\scavenge.dll
2009-06-04 21:34:25 ----A---- C:\Windows\system32\RMActivate.exe
2009-06-04 21:34:25 ----A---- C:\Windows\system32\msi.dll
2009-06-04 21:34:24 ----A---- C:\Windows\system32\imapi2fs.dll
2009-06-04 21:34:23 ----A---- C:\Windows\system32\WscEapPr.dll
2009-06-04 21:34:23 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-06-04 21:34:23 ----A---- C:\Windows\system32\secproc_isv.dll
2009-06-04 21:34:22 ----A---- C:\Windows\system32\sysmain.dll
2009-06-04 21:34:21 ----A---- C:\Windows\system32\mf.dll
2009-06-04 21:34:21 ----A---- C:\Windows\system32\icardagt.exe
2009-06-04 21:34:20 ----A---- C:\Windows\system32\EhStorShell.dll
2009-06-04 21:34:20 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-06-04 21:34:19 ----A---- C:\Windows\system32\spreview.exe
2009-06-04 21:34:19 ----A---- C:\Windows\system32\spinstall.exe
2009-06-04 21:34:19 ----A---- C:\Windows\system32\drmv2clt.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\spwizui.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\shell32.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\secproc.dll
2009-06-04 21:34:18 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-06-04 21:34:17 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-06-04 21:34:17 ----A---- C:\Windows\system32\p2psvc.dll
2009-06-04 21:34:17 ----A---- C:\Windows\system32\mssvp.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\mssphtb.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\mssph.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-06-04 21:34:16 ----A---- C:\Windows\system32\mscoree.dll
2009-06-04 21:34:16 ----A---- C:\Windows\system32\imapi2.dll
2009-06-04 21:34:15 ----A---- C:\Windows\system32\sdohlp.dll
2009-06-04 21:34:15 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-06-04 21:34:15 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-06-04 21:34:15 ----A---- C:\Windows\system32\esent.dll
2009-06-04 21:34:15 ----A---- C:\Windows\system32\DevicePairing.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\wevtsvc.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\sperror.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-06-04 21:34:14 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-06-04 21:34:14 ----A---- C:\Windows\system32\korwbrkr.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\wmp.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\SLC.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-06-04 21:34:13 ----A---- C:\Windows\system32\msshsq.dll
2009-06-04 21:34:13 ----A---- C:\Windows\system32\IasMigReader.exe
2009-06-04 21:34:12 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-06-04 21:34:12 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-06-04 21:34:12 ----A---- C:\Windows\system32\msxml6.dll
2009-06-04 21:34:12 ----A---- C:\Windows\system32\msjet40.dll
2009-06-04 21:34:12 ----A---- C:\Windows\system32\MPSSVC.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\Query.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\qmgr.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\msexch40.dll
2009-06-04 21:34:11 ----A---- C:\Windows\system32\diagperf.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\winload.exe
2009-06-04 21:34:10 ----A---- C:\Windows\system32\srchadmin.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\P2PGraph.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\ole32.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\ntdll.dll
2009-06-04 21:34:10 ----A---- C:\Windows\system32\msxml3.dll
2009-06-04 21:34:09 ----A---- C:\Windows\system32\uDWM.dll
2009-06-04 21:34:09 ----A---- C:\Windows\system32\mmc.exe
2009-06-04 21:34:09 ----A---- C:\Windows\system32\mblctr.exe
2009-06-04 21:34:09 ----A---- C:\Windows\system32\EncDec.dll
2009-06-04 21:34:09 ----A---- C:\Windows\system32\dfsr.exe
2009-06-04 21:34:08 ----A---- C:\Windows\system32\riched20.dll
2009-06-04 21:34:08 ----A---- C:\Windows\system32\RacEngn.dll
2009-06-04 21:34:08 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-06-04 21:34:08 ----A---- C:\Windows\system32\fdBth.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\spoolss.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-06-04 21:34:07 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-06-04 21:34:07 ----A---- C:\Windows\system32\milcore.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\kernel32.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-06-04 21:34:07 ----A---- C:\Windows\system32\CertEnroll.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\schedsvc.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\msjtes40.dll
2009-06-04 21:34:06 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\WinSAT.exe
2009-06-04 21:34:05 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-06-04 21:34:05 ----A---- C:\Windows\system32\msvcp60.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\infocardapi.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\gpedit.dll
2009-06-04 21:34:05 ----A---- C:\Windows\system32\es.dll
2009-06-04 21:34:04 ----A---- C:\Windows\system32\mstext40.dll
2009-06-04 21:34:04 ----A---- C:\Windows\system32\Magnify.exe
2009-06-04 21:34:04 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-06-04 21:34:04 ----A---- C:\Windows\system32\advapi32.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\WMPhoto.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\WebClnt.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\slwmi.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\msxbde40.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\msexcl40.dll
2009-06-04 21:34:03 ----A---- C:\Windows\system32\comsvcs.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\vssapi.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\NetProjW.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\mstscax.dll
2009-06-04 21:34:02 ----A---- C:\Windows\system32\authui.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\propsys.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\PresentationHost.exe
2009-06-04 21:34:01 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\newdev.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\msrepl40.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\iasrecst.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\gpsvc.dll
2009-06-04 21:34:01 ----A---- C:\Windows\system32\eudcedit.exe
2009-06-04 21:34:01 ----A---- C:\Windows\system32\crypt32.dll
2009-06-04 21:34:01 ----A---- C:\Windows\explorer.exe
2009-06-04 21:34:00 ----A---- C:\Windows\system32\setupapi.dll
2009-06-04 21:34:00 ----A---- C:\Windows\system32\rpcss.dll
2009-06-04 21:34:00 ----A---- C:\Windows\system32\mspbde40.dll
2009-06-04 21:34:00 ----A---- C:\Windows\system32\d3d9.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\wevtapi.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\shlwapi.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\msrd3x40.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\msltus40.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\msdtctm.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\mfc42.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\davclnt.dll
2009-06-04 21:33:59 ----A---- C:\Windows\system32\browseui.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\user32.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\samsrv.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\quartz.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\photowiz.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\nlhtml.dll
2009-06-04 21:33:58 ----A---- C:\Windows\system32\ci.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\win32spl.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-06-04 21:33:57 ----A---- C:\Windows\system32\oleaut32.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\netshell.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\msv1_0.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\kerberos.dll
2009-06-04 21:33:57 ----A---- C:\Windows\system32\IKEEXT.DLL
2009-06-04 21:33:56 ----A---- C:\Windows\system32\winhttp.dll
2009-06-04 21:33:56 ----A---- C:\Windows\system32\compcln.exe
2009-06-04 21:33:56 ----A---- C:\Windows\system32\apds.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\xmlfilter.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\mswstr10.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\msvcrt.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\msctf.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\emdmgmt.dll
2009-06-04 21:33:55 ----A---- C:\Windows\system32\audiosrv.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\VSSVC.exe
2009-06-04 21:33:54 ----A---- C:\Windows\system32\SLUI.exe
2009-06-04 21:33:54 ----A---- C:\Windows\system32\QAGENTRT.DLL
2009-06-04 21:33:54 ----A---- C:\Windows\system32\msrd2x40.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\mfc42u.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\gdi32.dll
2009-06-04 21:33:54 ----A---- C:\Windows\system32\eapphost.dll
2009-06-04 21:33:53 ----A---- C:\Windows\system32\winresume.exe
2009-06-04 21:33:53 ----A---- C:\Windows\system32\sqlsrv32.dll
2009-06-04 21:33:53 ----A---- C:\Windows\system32\propdefs.dll
2009-06-04 21:33:53 ----A---- C:\Windows\system32\odbc32.dll
2009-06-04 21:33:52 ----A---- C:\Windows\system32\wevtutil.exe
2009-06-04 21:33:52 ----A---- C:\Windows\system32\shdocvw.dll
2009-06-04 21:33:52 ----A---- C:\Windows\system32\dbgeng.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\WsmSvc.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\usp10.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\swprv.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\mssitlb.dll
2009-06-04 21:33:51 ----A---- C:\Windows\system32\mmcndmgr.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\vds.exe
2009-06-04 21:33:50 ----A---- C:\Windows\system32\netlogon.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\msscb.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\msctfp.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\drvinst.exe
2009-06-04 21:33:50 ----A---- C:\Windows\system32\devmgr.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-06-04 21:33:50 ----A---- C:\Windows\system32\BFE.DLL
2009-06-04 21:33:50 ----A---- C:\Windows\system32\adsldpc.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\WSDApi.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\WMVSDECD.DLL
2009-06-04 21:33:49 ----A---- C:\Windows\system32\Wldap32.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\wercon.exe
2009-06-04 21:33:49 ----A---- C:\Windows\system32\wcnwiz.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\services.exe
2009-06-04 21:33:49 ----A---- C:\Windows\system32\schannel.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\mimefilt.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\evr.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\comdlg32.dll
2009-06-04 21:33:49 ----A---- C:\Windows\system32\adtschema.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\wcncsvc.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\taskeng.exe
2009-06-04 21:33:48 ----A---- C:\Windows\system32\rtffilt.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\reg.exe
2009-06-04 21:33:48 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\mswdat10.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\msjter40.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\msdtcprx.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\msdrm.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\ipsmsnap.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\dnsapi.dll
2009-06-04 21:33:48 ----A---- C:\Windows\system32\certutil.exe
2009-06-04 21:33:48 ----A---- C:\Windows\system32\certcli.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\w32time.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\rsaenh.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\msshooks.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\msscntrs.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-06-04 21:33:47 ----A---- C:\Windows\system32\bthserv.dll
2009-06-04 21:33:47 ----A---- C:\Windows\system32\bcrypt.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\TsWpfWrp.exe
2009-06-04 21:33:46 ----A---- C:\Windows\system32\netapi32.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\mtxclu.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\msstrc.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\msihnd.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\MMDevAPI.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\inetpp.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\inetcomm.dll
2009-06-04 21:33:46 ----A---- C:\Windows\system32\dfshim.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\wmicmiplugin.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\termsrv.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\profsvc.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\mscories.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\hidserv.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\gameux.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\fundisc.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-06-04 21:33:45 ----A---- C:\Windows\system32\cryptsvc.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\wdc.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\shsvcs.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\msiexec.exe
2009-06-04 21:33:44 ----A---- C:\Windows\system32\imapi.dll
2009-06-04 21:33:44 ----A---- C:\Windows\system32\chsbrkr.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\spoolsv.exe
2009-06-04 21:33:43 ----A---- C:\Windows\system32\rasmans.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\pnidui.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\icardres.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\iassdo.dll
2009-06-04 21:33:43 ----A---- C:\Windows\system32\autofmt.exe
2009-06-04 21:33:42 ----A---- C:\Windows\system32\wersvc.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\slmgr.vbs
2009-06-04 21:33:42 ----A---- C:\Windows\system32\scrrun.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\PSHED.DLL
2009-06-04 21:33:42 ----A---- C:\Windows\system32\pdh.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-06-04 21:33:42 ----A---- C:\Windows\system32\azroles.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\wmpmde.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\winlogon.exe
2009-06-04 21:33:41 ----A---- C:\Windows\system32\SyncCenter.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\pidgenx.dll
2009-06-04 21:33:41 ----A---- C:\Windows\system32\CertEnrollUI.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\SLUINotify.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\sethc.exe
2009-06-04 21:33:40 ----A---- C:\Windows\system32\ncrypt.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\msjetoledb40.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\kd1394.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\comuid.dll
2009-06-04 21:33:40 ----A---- C:\Windows\system32\certmgr.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\wisptis.exe
2009-06-04 21:33:39 ----A---- C:\Windows\system32\untfs.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\taskcomp.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\spp.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\scrobj.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\rtutils.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\iassam.dll
2009-06-04 21:33:39 ----A---- C:\Windows\system32\dwm.exe
2009-06-04 21:33:39 ----A---- C:\Windows\system32\autochk.exe
2009-06-04 21:33:38 ----A---- C:\Windows\system32\winsrv.dll
2009-06-04 21:33:38 ----A---- C:\Windows\system32\printui.dll
2009-06-04 21:33:38 ----A---- C:\Windows\system32\iasnap.dll
2009-06-04 21:33:38 ----A---- C:\Windows\system32\autoconv.exe
2009-06-04 21:33:37 ----A---- C:\Windows\system32\onex.dll
2009-06-04 21:33:37 ----A---- C:\Windows\system32\kdcom.dll
2009-06-04 21:33:37 ----A---- C:\Windows\system32\cscript.exe
2009-06-04 21:33:37 ----A---- C:\Windows\system32\basecsp.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\wow32.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\userenv.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\spcmsg.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\RelMon.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\osk.exe
2009-06-04 21:33:36 ----A---- C:\Windows\system32\mswsock.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\kdusb.dll
2009-06-04 21:33:36 ----A---- C:\Windows\system32\audiodg.exe
2009-06-04 21:33:35 ----A---- C:\Windows\system32\WinSCard.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\winmm.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\WerFaultSecure.exe
2009-06-04 21:33:35 ----A---- C:\Windows\system32\rdpencom.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\offfilt.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\msftedit.dll
2009-06-04 21:33:35 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\wsepno.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\WerFault.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\Utilman.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\stobject.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\SndVol.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\secproc_ssp.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\prnntfy.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\msnetobj.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\mscms.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\mfplat.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\mcmde.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\diskraid.exe
2009-06-04 21:33:34 ----A---- C:\Windows\system32\apphelp.dll
2009-06-04 21:33:34 ----A---- C:\Windows\system32\adsmsext.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\wscript.exe
2009-06-04 21:33:33 ----A---- C:\Windows\system32\wiaservc.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\ulib.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\sysclass.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\secur32.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\rastapi.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\odbccp32.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2009-06-04 21:33:33 ----A---- C:\Windows\system32\iasdatastore.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\dsound.dll
2009-06-04 21:33:33 ----A---- C:\Windows\system32\cryptui.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wscsvc.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wscntfy.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wlansvc.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\wlangpui.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\vdsdyn.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\rastls.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\pnpsetup.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\netiohlp.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\logman.exe
2009-06-04 21:33:32 ----A---- C:\Windows\system32\ipsecsnp.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\iashlpr.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\gpapi.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\fdProxy.dll
2009-06-04 21:33:32 ----A---- C:\Windows\system32\diskpart.exe
2009-06-04 21:33:32 ----A---- C:\Windows\system32\brcpl.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\zipfldr.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\wusa.exe
2009-06-04 21:33:31 ----A---- C:\Windows\system32\wshext.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\wpccpl.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\WMVENCOD.DLL
2009-06-04 21:33:31 ----A---- C:\Windows\system32\regsvc.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\rasapi32.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\ntprint.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\netcenter.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\mscorier.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\iasrad.dll
2009-06-04 21:33:31 ----A---- C:\Windows\system32\findstr.exe
2009-06-04 21:33:30 ----A---- C:\Windows\system32\wsnmp32.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\wer.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\themecpl.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\rasdlg.dll
2009-06-04 21:33:30 ----A---- C:\Windows\system32\iassvcs.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\uxsms.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\tsbyuv.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\srvsvc.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\slcc.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\scansetting.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\ntmarta.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\msutb.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\mstlsapi.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\mssprxy.dll
2009-06-04 21:33:29 ----A---- C:\Windows\system32\iasads.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\wlanhlp.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\systemcpl.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\sud.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\powrprof.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\powercpl.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\newdev.exe
2009-06-04 21:33:28 ----A---- C:\Windows\system32\networkmap.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\mstsc.exe
2009-06-04 21:33:28 ----A---- C:\Windows\system32\iasacct.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\dot3svc.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\connect.dll
2009-06-04 21:33:28 ----A---- C:\Windows\system32\authz.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\wlanpref.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\usercpl.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\themeui.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\samlib.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\rpchttp.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\qdvd.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\pcaui.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\mmci.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\autoplay.dll
2009-06-04 21:33:27 ----A---- C:\Windows\system32\accessibilitycpl.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\wpcao.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\vdsutil.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\tapisrv.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\scksp.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\scesrv.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\regapi.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\psisdecd.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\oleprn.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\msinfo32.exe
2009-06-04 21:33:26 ----A---- C:\Windows\system32\mpr.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\imm32.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\feclient.dll
2009-06-04 21:33:26 ----A---- C:\Windows\system32\AudioSes.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\wscisvif.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\sdclt.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\scecli.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\rekeywiz.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\rasgcw.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\qedit.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\pnpui.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\perfdisk.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\ncryptui.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\iaspolcy.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\hdwwiz.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2009-06-04 21:33:25 ----A---- C:\Windows\system32\Faultrep.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\dpapimig.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\dot3msm.dll
2009-06-04 21:33:25 ----A---- C:\Windows\system32\DeviceEject.exe
2009-06-04 21:33:25 ----A---- C:\Windows\system32\certreq.exe
2009-06-04 21:33:24 ----A---- C:\Windows\system32\whealogr.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\TSTheme.exe
2009-06-04 21:33:24 ----A---- C:\Windows\system32\tcpmon.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\spwinsat.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\rasplap.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\PnPUnattend.exe
2009-06-04 21:33:24 ----A---- C:\Windows\system32\fdWSD.dll
2009-06-04 21:33:24 ----A---- C:\Windows\system32\cmmon32.exe
2009-06-04 21:33:23 ----A---- C:\Windows\system32\wiaaut.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\srcore.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\SnippingTool.exe
2009-06-04 21:33:23 ----A---- C:\Windows\system32\SCardSvr.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\raschap.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\MSVidCtl.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\fontext.dll
2009-06-04 21:33:23 ----A---- C:\Windows\system32\conime.exe
2009-06-04 21:33:23 ----A---- C:\Windows\system32\cmdial32.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\WMVXENCD.DLL
2009-06-04 21:33:22 ----A---- C:\Windows\system32\wlanui.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\wlanmsm.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\shwebsvc.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\rasppp.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\PnPutil.exe
2009-06-04 21:33:22 ----A---- C:\Windows\system32\oobefldr.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\dsprop.dll
2009-06-04 21:33:22 ----A---- C:\Windows\system32\dimsroam.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\wmdrmsdk.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\shsetup.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\rasmontr.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\mscandui.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\modemui.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\dataclen.dll
2009-06-04 21:33:21 ----A---- C:\Windows\system32\chtbrkr.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\WSDMon.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\wmpeffects.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\wlgpclnt.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\smss.exe
2009-06-04 21:33:20 ----A---- C:\Windows\system32\rdpwsx.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\netplwiz.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\credui.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\certprop.dll
2009-06-04 21:33:20 ----A---- C:\Windows\system32\blackbox.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\wscapi.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\wpcsvc.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\thawbrkr.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\sendmail.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\networkexplorer.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\msscp.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\msimtf.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\logagent.exe
2009-06-04 21:33:19 ----A---- C:\Windows\system32\InkEd.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\ifmon.dll
2009-06-04 21:33:19 ----A---- C:\Windows\system32\gpresult.exe
2009-06-04 21:33:19 ----A---- C:\Windows\system32\cipher.exe
2009-06-04 21:33:18 ----A---- C:\Windows\system32\softkbd.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\puiapi.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\olepro32.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\msctfui.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\drmmgrtn.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\dmsynth.dll
2009-06-04 21:33:18 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\wshbth.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\version.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\SLLUA.exe
2009-06-04 21:33:17 ----A---- C:\Windows\system32\msisip.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\mprapi.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\input.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\fdSSDP.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\fc.exe
2009-06-04 21:33:17 ----A---- C:\Windows\system32\ExplorerFrame.dll
2009-06-04 21:33:17 ----A---- C:\Windows\system32\cdd.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\wsdchngr.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\Storprop.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\SMBHelperClass.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\rrinstaller.exe
2009-06-04 21:33:16 ----A---- C:\Windows\system32\rasdial.exe
2009-06-04 21:33:16 ----A---- C:\Windows\system32\rasdiag.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\msjint40.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\l2nacp.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\ftp.exe
2009-06-04 21:33:16 ----A---- C:\Windows\system32\eapp3hst.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\dmusic.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\cscdll.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\cscapi.dll
2009-06-04 21:33:16 ----A---- C:\Windows\system32\bthci.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\tscupgrd.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\slcinst.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\ocsetup.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\nslookup.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\networkitemfactory.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\mfps.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\ipconfig.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\fdWCN.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\eappgnui.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\eappcfg.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\dot3cfg.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2009-06-04 21:33:15 ----A---- C:\Windows\system32\bthudtask.exe
2009-06-04 21:33:15 ----A---- C:\Windows\system32\aaclient.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\tsgqec.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\PNPXAssoc.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\mmcico.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\mfpmp.exe
2009-06-04 21:33:14 ----A---- C:\Windows\system32\hbaapi.dll
2009-06-04 21:33:14 ----A---- C:\Windows\system32\gpupdate.exe
2009-06-04 21:33:14 ----A---- C:\Windows\system32\fdeploy.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\NcdProp.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\iscsilog.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\csrstub.exe
2009-06-04 21:33:13 ----A---- C:\Windows\system32\cbsra.exe
2009-06-04 21:33:13 ----A---- C:\Windows\system32\bitsigd.dll
2009-06-04 21:33:13 ----A---- C:\Windows\system32\atmlib.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\winrnr.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\vdmdbg.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\slwga.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\odbcconf.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\midimap.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\inetppui.dll
2009-06-04 21:33:12 ----A---- C:\Windows\system32\atmfd.dll
2009-06-04 21:33:11 ----A---- C:\Windows\system32\spwmp.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\wmploc.DLL
2009-06-04 21:33:10 ----A---- C:\Windows\system32\msimsg.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\mferror.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-06-04 21:33:10 ----A---- C:\Windows\system32\dxmasf.dll
2009-06-04 21:32:49 ----A---- C:\Windows\system32\SmiEngine.dll
2009-06-04 21:32:43 ----A---- C:\Windows\system32\wdscore.dll
2009-06-04 21:32:43 ----A---- C:\Windows\system32\PkgMgr.exe
2009-06-04 21:32:25 ----A---- C:\Windows\system32\drvstore.dll
2009-06-04 21:23:43 ----D---- C:\Program Files\Alwil Software
2009-05-23 23:46:22 ----D---- C:\Users\Harmandayan\AppData\Roaming\Anuman Interactive
2009-05-23 22:33:28 ----A---- C:\Windows\system32\tsccvid.dll
2009-05-23 22:33:26 ----D---- C:\Windows\system32\QuickTime
2009-05-22 17:53:16 ----D---- C:\Program Files\sounds
2009-05-22 16:28:18 ----D---- C:\Extracted
2009-05-21 14:02:39 ----D---- C:\ProgramData\GameHouse
2009-05-21 13:54:20 ----D---- C:\ProgramData\Zylom
2009-05-20 18:40:11 ----D---- C:\Users\Harmandayan\AppData\Roaming\PlayFirst
2009-05-20 18:40:11 ----D---- C:\ProgramData\PlayFirst
2009-05-20 18:39:59 ----D---- C:\Users\Harmandayan\AppData\Roaming\Zylom
2009-05-20 10:37:53 ----D---- C:\ProgramData\WindowsSearch
2009-05-13 12:17:48 ----D---- C:\Program Files\Microsoft Sync Framework
2009-05-13 12:14:36 ----D---- C:\Program Files\Windows Live SkyDrive
2009-05-09 15:47:35 ----D---- C:\Users\Harmandayan\AppData\Roaming\Media Player Classic
2009-05-09 14:53:09 ----D---- C:\My Music
2009-05-09 14:31:40 ----A---- C:\Windows\system32\NCTWMAFile2.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\NCTAudioPlayer2.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\NCTAudioFile2.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\msvcr70.dll
2009-05-09 14:31:40 ----A---- C:\Windows\system32\lame_enc.dll
2009-05-09 14:27:08 ----A---- C:\Windows\system32\coodest.dll
2009-05-03 14:14:14 ----D---- C:\Program Files\JRE
2009-05-01 18:39:08 ----D---- C:\Users\Harmandayan\AppData\Roaming\OpenOffice.org
2009-05-01 02:32:55 ----D---- C:\Program Files\OpenOffice.org 3
2009-05-01 02:32:14 ----A---- C:\Windows\system32\javaws.exe
2009-05-01 02:32:14 ----A---- C:\Windows\system32\javaw.exe
2009-05-01 02:32:14 ----A---- C:\Windows\system32\java.exe
2009-05-01 02:31:03 ----D---- C:\Program Files\Common Files\Java
2009-04-28 14:21:16 ----D---- C:\Program Files\OpenAL
2009-04-28 14:21:08 ----A---- C:\Windows\system32\xactengine2_4.dll
2009-04-28 14:21:07 ----A---- C:\Windows\system32\xactengine2_3.dll
2009-04-28 14:21:06 ----A---- C:\Windows\system32\xinput1_2.dll
2009-04-28 14:21:06 ----A---- C:\Windows\system32\xinput1_1.dll
2009-04-28 14:21:06 ----A---- C:\Windows\system32\xactengine2_2.dll
2009-04-28 14:21:05 ----A---- C:\Windows\system32\xactengine2_1.dll
2009-04-27 11:06:52 ----A---- C:\Windows\system32\xactengine2_0.dll
2009-04-27 11:06:52 ----A---- C:\Windows\system32\x3daudio1_0.dll
2009-04-25 23:02:04 ----D---- C:\Program Files\MC2
2009-04-24 21:24:51 ----D---- C:\ProgramData\NOS
2009-04-24 21:24:51 ----D---- C:\Program Files\NOS
2009-04-18 14:59:40 ----D---- C:\Program Files\Common Files\SWF Studio
2009-04-03 15:25:01 ----HD---- C:\Windows\msdownld.tmp
2009-04-03 15:22:25 ----A---- C:\Windows\system32\mshtmled.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\msls31.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\mshtmler.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\icardie.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\corpol.dll
2009-04-03 15:22:24 ----A---- C:\Windows\system32\admparse.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\imgutil.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\ieakeng.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\dxtrans.dll
2009-04-03 15:22:23 ----A---- C:\Windows\system32\dxtmsft.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\wextract.exe
2009-04-03 15:22:22 ----A---- C:\Windows\system32\webcheck.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\occache.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\msrating.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\licmgr10.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\inseng.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\iepeers.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\ieakui.dll
2009-04-03 15:22:22 ----A---- C:\Windows\system32\ieaksie.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-04-03 15:22:21 ----A---- C:\Windows\system32\pngfilt.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\mstime.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\msfeedssync.exe
2009-04-03 15:22:21 ----A---- C:\Windows\system32\msfeeds.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\ieapfltr.dll
2009-04-03 15:22:21 ----A---- C:\Windows\system32\advpack.dll
2009-04-03 15:22:20 ----A---- C:\Windows\system32\vbscript.dll
2009-04-03 15:22:20 ----A---- C:\Windows\system32\url.dll
2009-04-03 15:22:20 ----A---- C:\Windows\system32\jscript.dll
2009-04-03 15:22:19 ----A---- C:\Windows\system32\mshta.exe
2009-04-03 15:22:19 ----A---- C:\Windows\system32\iexpress.exe
2009-04-03 15:22:19 ----A---- C:\Windows\system32\iesysprep.dll
2009-04-03 15:22:18 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\SetDepNx.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\PDMSetup.exe
2009-04-03 15:22:18 ----A---- C:\Windows\system32\ieUnatt.exe
======List of files/folders modified in the last 3 months======
2009-06-29 02:04:16 ----D---- C:\Windows\Temp
2009-06-29 01:58:48 ----D---- C:\Windows\inf
2009-06-29 01:58:48 ----AD---- C:\Windows\System32
2009-06-29 01:58:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-06-28 23:34:51 ----D---- C:\ProgramData\Lx_cats
2009-06-28 23:34:49 ----HD---- C:\ProgramData
2009-06-25 20:08:49 ----D---- C:\Windows\Microsoft.NET
2009-06-25 18:58:56 ----SHD---- C:\System Volume Information
2009-06-25 18:58:21 ----SHD---- C:\Windows\Installer
2009-06-22 16:09:59 ----D---- C:\Windows\system32\catroot2
2009-06-21 02:08:19 ----RD---- C:\Program Files
2009-06-20 22:14:40 ----AD---- C:\Windows\system32\drivers
2009-06-20 22:12:55 ----D---- C:\Windows\system32\WDI
2009-06-20 22:11:46 ----D---- C:\Windows
2009-06-20 22:03:23 ----D---- C:\Windows\system32\catroot
2009-06-20 16:45:27 ----D---- C:\Windows\system32\setup
2009-06-20 14:46:02 ----HD---- C:\Program Files\InstallShield Installation Information
2009-06-20 14:03:16 ----D---- C:\Program Files\Common Files
2009-06-20 14:01:36 ----D---- C:\Program Files\Common Files\Real
2009-06-20 14:01:21 ----D---- C:\Users\Harmandayan\AppData\Roaming\Real
2009-06-20 13:50:36 ----D---- C:\Users\Harmandayan\AppData\Roaming\vlc
2009-06-20 13:49:51 ----D---- C:\Windows\system32\MAGIX
2009-06-20 13:49:12 ----D---- C:\ProgramData\MAGIX
2009-06-18 13:04:33 ----AD---- C:\ProgramData\TEMP
2009-06-17 20:25:50 ----D---- C:\ProgramData\McAfee
2009-06-17 20:09:34 ----D---- C:\Windows\Tasks
2009-06-16 18:57:53 ----D---- C:\Program Files\Google
2009-06-16 18:57:52 ----D---- C:\ProgramData\Google
2009-06-15 13:31:56 ----D---- C:\Users\Harmandayan\AppData\Roaming\Adobe
2009-06-13 15:28:04 ----RSD---- C:\Windows\assembly
2009-06-13 15:19:26 ----D---- C:\Windows\ehome
2009-06-13 14:24:45 ----D---- C:\Windows\winsxs
2009-06-13 14:23:48 ----D---- C:\Program Files\Internet Explorer
2009-06-13 14:07:56 ----HD---- C:\Windows\system32\GroupPolicy
2009-06-13 13:57:34 ----D---- C:\Windows\system32\Tasks
2009-06-13 13:36:16 ----DC---- C:\Windows\system32\DRVS
g225 a dit :
Faire un log RSIT pour voir se qui roule.Téléchargement de Random's system information tool http://images.malwareremoval.com/random/RSIT.exe
Cliquez pour le télécharger et dans enregistrer sous le mettre sur le bureau. Cliquer sur le fichier pour générer les logs. RSIT installe Hijackthis en même temps.
Ensuite vous cliquez sur RSIT.exe. Cliquer sur "continuer" ou changer le temps par défaut soit un mois à 2 ou 3 mois si vous pensez que l'infection date de ce temps.
Le scan terminée, 2 fenêtres "bloc note" vont s'ouvrir. Vous me copier/coller log.txt en premier et info.txt en second.
Dans le "Bloc note" vous allez dans le menu Édition et cliquer sur "Sélectionner tout" et retourner dans "Édition" et cliquer sur "copier"
Sur le forum, faire un click droit et cliquer sur "coller".
Voila!
Ouvrir Hijackthis et cocher les lignes suivantes et faire "Fix checked":
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL (file missing)
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmana [...] .2.4.8.cab
Allez sur le site suivant et prendre l'utilitaire Ad-Remover: http://pagesperso-orange.fr/NosTools/ad_remover.html
Installe le logiciel dans son endroit par défaut.
Double cliquez sur l'icône Ad-remover située sur votre bureau
Au menu principal choisir l'option "L ( lancer le nettoyage )"
Poster le rapport qui apparait à la fin .
Scanner chez Virusscan Jotti ou Virustotal Voici 2 multi-analyseurs pour analyser à l'unité des fichiers qui pourraient avoir des risques. Annalyser ceci: C:\Users\Harmandayan\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
Si vous ne voyez pas le répertoire faire ceci:
Allez dans Explorateur Windows ou "Poste de travail" allez sur Outils - Options dossier - Affichage et cocher "afficher les dossiers et fichier cachés" et vous décochez la case "Masquer les extensions des fichiers dont le type est connu".
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\EoRezo\EoAdv\EOREZO~1.DLL (file missing)
O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmana [...] .2.4.8.cab
Allez sur le site suivant et prendre l'utilitaire Ad-Remover: http://pagesperso-orange.fr/NosTools/ad_remover.html
Installe le logiciel dans son endroit par défaut.
Double cliquez sur l'icône Ad-remover située sur votre bureau
Au menu principal choisir l'option "L ( lancer le nettoyage )"
Poster le rapport qui apparait à la fin .
Scanner chez Virusscan Jotti ou Virustotal Voici 2 multi-analyseurs pour analyser à l'unité des fichiers qui pourraient avoir des risques. Annalyser ceci: C:\Users\Harmandayan\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
Si vous ne voyez pas le répertoire faire ceci:
Allez dans Explorateur Windows ou "Poste de travail" allez sur Outils - Options dossier - Affichage et cocher "afficher les dossiers et fichier cachés" et vous décochez la case "Masquer les extensions des fichiers dont le type est connu".
J'ai essaye mais les lignes que tu m'a dit, quand j'essaye de cocher et de faire "Fix checked" il me donne une error!
Mais je coirt que jé trouvé le probleme, il ya 2 fichiers de video, et quand je clic sur le fichers, mon ordi se 'Freeze' et mon CPU devient directement 100%!
Comment je peut supprimer ces fichiers? jé scanner plusieurs fois et pas de virus! Jé pas pu supprimer les fichiers! Que faire?
Mais je coirt que jé trouvé le probleme, il ya 2 fichiers de video, et quand je clic sur le fichers, mon ordi se 'Freeze' et mon CPU devient directement 100%!
Comment je peut supprimer ces fichiers? jé scanner plusieurs fois et pas de virus! Jé pas pu supprimer les fichiers! Que faire?
Comment ça "tu ne peux pas supprimer les fichiers" ? Essaie le démarrage en mode sans échec dans ce cas.
En tout cas, devant un problème pareil, la première chose à faire c'est d'avoir une sauvegarde de ce à quoi on tient, parce que le plantage grave n'est pas très loin.
Après on peut nettoyer tout ce qu'on veut l'esprit tranquille![;)]( ";)")
En tout cas, devant un problème pareil, la première chose à faire c'est d'avoir une sauvegarde de ce à quoi on tient, parce que le plantage grave n'est pas très loin.
Après on peut nettoyer tout ce qu'on veut l'esprit tranquille
Lassé par la pub ? Créez un compte
