Logfile of HijackThis v1.99.1 Scan saved at 3:35:38 PM, on 9/2/2008 Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\Explorer.EXE C:\Program Files\AIM\aim.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\HJT\HijackThis.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\ O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe O23 - Service: FileZilla Server FTP server (FileZilla Server) - Unknown owner - C:\Program Files\FileZilla Server\FileZilla Server.exe (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe and upon running vundofix, it will not let me delete 20 or so .dll files upon rebooting. thanks for the help everyone
Hi lmac22 So you have Vundo? And Vundofix will not work? Please give more details in your next post. Now, please download Combofix. With Combofix, at the download window, please rename it to Combo-fix(.exe) before downloading it. Please disable all security programs, such as antiviruses, antispywares, and firewalls. Also disable your internet connection. • Run Combo-Fix.exe and follow the prompts. **Understand that things like your system clock changing and your desktop disappearing might happen. Do not worry, because all will be restored later. • Wait for the scan to be completed. • If it requires a reboot, please do it. • After the scan has completed entirely, please post the log here. The log will be located at C:\ComboFix(.txt) Do not click on the Comobofix window, as it may cause it to stall. Best Regards
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\Rabio C:\WINDOWS\BM77fe1e0a.txt C:\WINDOWS\system32\MSINET.oca . ((((((((((((((((((((((((( Files Created from 2008-08-05 to 2008-09-05 ))))))))))))))))))))))))))))))) . 2008-09-01 23:25 . 2008-09-01 23:25 <DIR> d-------- C:\Documents and Settings\Jo Ann\Application Data\MySpace 2008-09-01 23:24 . 2008-09-03 20:08 <DIR> d-------- C:\Program Files\MySpace 2008-09-01 11:07 . 2008-09-01 11:08 <DIR> d-------- C:\tsbm1-3 2008-08-31 19:28 . 1993-04-28 00:00 44,656 --a------ C:\WINDOWS\system\GRID.VBX 2008-08-29 19:48 . 2004-08-04 03:56 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll 2008-08-29 19:48 . 2001-08-17 22:36 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll 2008-08-29 15:41 . 2008-08-29 15:41 <DIR> d-------- C:\Program Files\BreakPoint Software 2008-08-28 11:50 . 2008-09-02 15:35 <DIR> d-------- C:\HJT 2008-08-27 07:45 . 2008-08-27 07:45 <DIR> d-------- C:\Program Files\ToniArts 2008-08-24 04:59 . 2008-08-24 05:59 <DIR> d-------- C:\WINDOWS\system32\CatRoot_bak 2008-08-23 20:23 . 2008-08-23 20:23 <DIR> d-------- C:\WINDOWS\system32\Adobe 2008-08-23 13:16 . 2006-09-13 01:09 1,110,528 --a------ C:\WINDOWS\system32\msxml3.dll 2008-08-23 13:08 . 2004-08-04 03:56 100,352 --a------ C:\WINDOWS\system32\6to4svc.dll 2008-08-23 12:55 . 2006-07-13 04:41 199,936 --a------ C:\WINDOWS\system32\drivers\rmcast.sys 2008-08-23 12:26 . 2006-03-16 20:49 25,600 --a------ C:\WINDOWS\system32\verclsid.exe 2008-08-23 12:15 . 2005-07-26 00:31 68,608 --a------ C:\WINDOWS\system32\olecli32.dll 2008-08-23 12:15 . 2005-07-26 00:31 35,328 --a------ C:\WINDOWS\system32\olecnv32.dll 2008-08-23 11:49 . 2005-01-10 21:20 118,272 --a------ C:\WINDOWS\system32\dllcache\dhtmled.ocx 2008-08-23 11:45 . 2005-04-22 01:20 51,712 --a--c--- C:\WINDOWS\system32\dllcache\agentdpv.dll 2008-08-23 11:25 . 2004-08-04 03:56 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-08-23 11:19 . 2008-08-23 11:19 <DIR> d-------- C:\WINDOWS\provisioning 2008-08-23 11:19 . 2008-09-03 20:49 <DIR> d-------- C:\WINDOWS\peernet 2008-08-23 10:52 . 2004-07-09 05:27 1,769,472 --a------ C:\WINDOWS\system32\dxdiagn.dll 2008-08-23 10:52 . 2004-07-09 05:27 1,703,936 --a------ C:\WINDOWS\system32\d3d9.dll 2008-08-23 10:52 . 2006-08-16 05:42 159,232 --a------ C:\WINDOWS\system32\xpob2res.dll 2008-08-23 10:52 . 2004-07-09 05:26 57,856 --a------ C:\WINDOWS\system32\mpeg2data.ax 2008-08-23 10:52 . 2002-08-29 08:00 32,512 --a------ C:\WINDOWS\system32\drivers\amdk7.sys 2008-08-23 10:52 . 2002-08-29 08:00 29,696 --a------ C:\WINDOWS\system32\asr_pfu.exe 2008-08-23 10:52 . 2002-12-12 01:14 18,944 --a------ C:\WINDOWS\system32\encapi.dll 2008-08-23 10:52 . 2002-08-29 08:00 10,752 --a------ C:\WINDOWS\system32\spiisupd.exe 2008-08-23 10:52 . 2002-08-29 08:00 3,584 --a------ C:\WINDOWS\system32\dsprpres.dll 2008-08-23 10:50 . 2002-08-29 08:00 1,135,616 --a------ C:\WINDOWS\system32\ntbackup.exe 2008-08-23 10:49 . 2002-08-29 08:00 4,186,256 --------- C:\WINDOWS\system32\dllcache\luna.mst 2008-08-23 10:48 . 2002-08-29 08:00 1,267,712 --------- C:\WINDOWS\system32\dllcache\cimwin32.dll 2008-08-23 10:47 . 2005-09-09 22:04 2,025,984 --------- C:\WINDOWS\system32\dllcache\cdosys.dll 2008-08-23 10:44 . 2002-08-29 08:00 2,049,999 --------- C:\WINDOWS\system32\dllcache\nt5.cat 2008-08-23 10:43 . 2008-08-27 09:38 <DIR> d-------- C:\WINDOWS\EHome 2008-08-20 07:38 . 2008-08-20 07:38 <DIR> d-------- C:\Program Files\PC Drivers HeadQuarters 2008-08-20 07:38 . 2008-08-20 07:38 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters 2008-08-17 22:48 . 2008-08-17 22:49 <DIR> d-------- C:\Documents and Settings\Jo Ann\Application Data\MSN6 2008-08-12 08:38 . 2008-08-12 08:38 <DIR> d-------- C:\WINDOWS\Cache 2008-08-12 08:38 . 2008-08-12 08:38 <DIR> d-------- C:\Program Files\Coupons . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-09-03 00:21 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\FileZilla 2008-09-02 23:15 --------- d-----w C:\Program Files\FileZilla FTP Client 2008-08-29 23:09 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-08-28 12:00 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\AVG7 2008-08-27 13:15 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\LimeWire 2008-08-27 13:14 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\uTorrent 2008-08-22 17:21 --------- d-----w C:\Documents and Settings\Jo Ann\Application Data\Image Zone Express 2008-08-01 21:08 --------- d-----w C:\Program Files\LimeWire 2008-08-01 21:08 --------- d-----w C:\Program Files\GameHouse 2008-08-01 21:08 --------- d-----w C:\Program Files\AIM 2008-07-31 20:00 --------- d-----w C:\Program Files\MumboJumbo 2008-07-28 23:20 --------- d-----w C:\Program Files\SQLyog Enterprise Trial 2008-07-27 23:46 --------- d-----w C:\Program Files\middle_man 2008-07-27 13:15 --------- d-----w C:\Program Files\ActiveState Komodo Edit 4 2008-07-19 02:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll 2008-07-19 02:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe 2008-07-19 02:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll 2008-07-19 02:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll 2008-07-19 02:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll 2008-07-19 02:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll 2008-07-19 02:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll 2008-07-19 02:09 1,811,656 ------w C:\WINDOWS\system32\wuaueng.dll 2008-07-14 22:07 --------- d-----w C:\Program Files\Acoustica MP3 To Wave Converter PLUS 2008-06-22 02:21 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE 2008-06-22 02:21 249,856 ------w C:\WINDOWS\Setup1.exe 2008-03-28 11:19 384 ----a-w C:\Documents and Settings\Jo Ann\Application Data\internaldb6334.dat 2007-11-03 14:00 47,360 ----a-w C:\Documents and Settings\Jo Ann\Application Data\pcouffin.sys 2007-10-25 14:34 2,491 ----a-w C:\Program Files\Microsoft Office FrontPage 2003.lnk 2008-03-05 21:16 27,976 ----a-w C:\Program Files\mozilla firefox\plugins\atgpcdec.dll 2008-03-05 21:16 125,848 ----a-w C:\Program Files\mozilla firefox\plugins\atgpcext.dll 2008-03-05 21:16 98,712 ----a-w C:\Program Files\mozilla firefox\plugins\ieatgpc.dll . ((((((((((((((((((((((((((((( snapshot@2008-03-28_ 6.37.02.35 ))))))))))))))))))))))))))))))))))))))))) . + 2007-12-18 14:32:13 450,560 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\SP2QFE\jscript.dll + 2007-12-18 14:32:13 417,792 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\SP2QFE\vbscript.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB944338-v2\update\updspapi.dll + 2008-01-23 04:56:21 554,008 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\dao360.dll + 2007-12-10 12:41:11 518,944 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexch40.dll + 2007-12-10 12:41:11 326,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msexcl40.dll + 2007-12-10 12:41:11 1,516,568 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjet40.dll + 2007-12-10 12:41:11 355,112 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjetol1.dll + 2008-03-27 07:39:13 151,583 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjint40.dll + 2007-12-10 12:41:12 60,192 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjter40.dll + 2007-12-10 12:41:12 248,608 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msjtes40.dll + 2007-12-10 12:41:12 219,936 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msltus40.dll + 2007-12-10 12:41:12 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mspbde40.dll + 2007-12-10 12:41:13 432,928 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd2x40.dll + 2007-12-10 12:41:13 322,336 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrd3x40.dll + 2007-12-10 12:41:13 559,904 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msrepl40.dll + 2007-12-10 12:41:13 264,992 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mstext40.dll + 2007-12-10 12:41:13 838,432 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswdat10.dll + 2007-12-10 12:41:14 621,344 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\mswstr10.dll + 2007-12-10 12:41:14 355,104 ----a-w C:\WINDOWS\$hf_mig$\KB950749\SP2QFE\msxbde40.dll + 2007-03-06 01:22:36 14,048 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spmsg.dll + 2007-03-06 01:22:41 213,216 ----a-w C:\WINDOWS\$hf_mig$\KB950749\spuninst.exe + 2007-03-06 01:22:34 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\spcustom.dll + 2007-03-06 01:22:59 716,000 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\update.exe + 2007-03-06 01:23:51 371,424 ----a-w C:\WINDOWS\$hf_mig$\KB950749\update\updspapi.dll + 2008-07-07 20:06:43 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll + 2008-07-07 20:26:58 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll + 2008-07-07 20:23:18 253,952 ----a-w C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB950974\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\spcustom.dll + 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\update.exe + 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB950974\update\updspapi.dll + 2008-07-14 11:03:00 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe + 2008-07-11 12:42:28 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe + 2008-07-11 12:51:51 62,976 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe + 2007-11-30 11:18:51 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spmsg.dll + 2007-11-30 11:18:51 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\spuninst.exe + 2007-11-30 11:18:51 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\spcustom.dll + 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe + 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951072-v2\update\updspapi.dll + 2008-05-07 04:55:40 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP2QFE\quartz.dll + 2008-05-07 05:12:40 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3GDR\quartz.dll + 2008-05-07 05:04:15 1,288,192 ----a-w C:\WINDOWS\$hf_mig$\KB951698\SP3QFE\quartz.dll + 2007-11-30 11:18:51 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spmsg.dll + 2007-11-30 11:18:51 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951698\spuninst.exe + 2007-11-30 11:18:51 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\spcustom.dll + 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\update.exe + 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951698\update\updspapi.dll + 2006-08-16 12:08:32 100,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll + 2008-06-20 10:44:08 138,368 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys + 2008-06-20 17:36:11 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll + 2008-06-20 17:36:11 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll + 2008-06-20 10:44:42 360,960 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys + 2008-06-20 09:32:39 225,920 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys + 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys + 2008-06-20 17:46:57 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll + 2008-06-20 17:46:57 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll + 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys + 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys + 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys + 2008-06-20 17:43:05 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll + 2008-06-20 17:43:05 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll + 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys + 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll + 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe + 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll + 2008-06-24 16:28:00 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP2QFE\mscms.dll + 2008-06-24 16:43:16 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3GDR\mscms.dll + 2008-06-24 16:53:10 74,240 ----a-w C:\WINDOWS\$hf_mig$\KB952954\SP3QFE\mscms.dll + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB952954\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\spcustom.dll + 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\update.exe + 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB952954\update\updspapi.dll + 2008-06-23 16:11:40 1,024,000 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\browseui.dll + 2008-06-23 16:11:40 151,040 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\cdfview.dll + 2008-06-23 16:11:42 1,054,208 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\danim.dll + 2008-06-23 16:11:43 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtmsft.dll + 2008-06-23 16:11:43 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\dxtrans.dll + 2008-06-23 16:11:43 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\extmgr.dll + 2008-06-23 09:53:58 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iedw.exe + 2008-06-23 16:11:52 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\iepeers.dll + 2008-06-23 16:11:52 96,256 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\inseng.dll + 2008-06-23 16:11:52 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\jsproxy.dll + 2008-06-23 16:11:58 3,067,392 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtml.dll + 2008-06-23 16:12:00 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mshtmled.dll + 2008-06-23 16:12:02 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\msrating.dll + 2008-06-23 16:12:02 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\mstime.dll + 2008-06-23 16:12:02 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\pngfilt.dll + 2008-06-23 16:12:05 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shdocvw.dll + 2008-06-23 16:12:05 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\shlwapi.dll + 2008-06-23 16:12:06 618,496 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\urlmon.dll + 2008-06-23 16:12:08 667,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\wininet.dll + 2008-07-03 09:14:02 351,744 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP2QFE\xpsp3res.dll + 2008-06-23 15:09:27 3,067,392 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\mshtml.dll + 2008-06-26 08:15:29 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\shdocvw.dll + 2008-06-26 08:15:30 619,520 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\urlmon.dll + 2008-06-23 15:09:27 666,112 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3GDR\wininet.dll + 2008-06-25 04:24:48 3,067,904 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\mshtml.dll + 2008-06-26 08:00:52 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\shdocvw.dll + 2008-06-26 08:00:52 619,520 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\urlmon.dll + 2008-06-23 14:54:47 666,624 ----a-w C:\WINDOWS\$hf_mig$\KB953838\SP3QFE\wininet.dll + 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spmsg.dll + 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB953838\spuninst.exe + 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\spcustom.dll + 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\update.exe + 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB953838\update\updspapi.dll + 2003-11-13 18:28:02 12,570 ----a-w C:\WINDOWS\ADFUUD.SYS + 2008-08-20 11:40:14 225,280 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\065b2feb7fb75c4b90c6a178a957ab8a\DriversHQ.DriverDetective.Client.Communication.ni.dll + 2008-08-20 11:39:37 2,269,184 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\4697ad1c023a424599c5cccaee8365db\DriversHQ.DriverDetective.Client.ni.exe + 2008-08-20 11:40:39 58,880 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\58e93242655b6a47a99b2097cc303fb9\DriversHQ.DriverDetective.ExceptionLogging.ni.dll + 2008-08-20 11:40:38 196,608 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\fae2ce223d67e94d99ceaedd8a7e541a\DriversHQ.DriverDetective.Common.ni.dll + 2008-08-20 11:40:42 253,952 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\8cdf54b0ef21dd4bbdaec35ca351245f\Microsoft.ApplicationBlocks.Updater.ni.dll + 2008-08-20 11:41:13 2,441,216 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\ecf0a37609b7c145bc90e4048bb45843\Microsoft.JScript.ni.dll + 2008-08-20 11:41:20 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\1391486812f1e14d87619c2eeffd29a8\Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.ni.dll + 2008-08-20 11:40:45 368,640 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\2c0c237bea08884e845145bfe4184e44\Microsoft.Practices.EnterpriseLibrary.Common.ni.dll + 2008-08-20 11:41:18 356,352 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\a7c5b6d07e34414da0c0ee1e6ceabd29\Microsoft.Practices.ObjectBuilder.ni.dll + 2008-08-20 11:40:15 17,920 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\fc8d4ae4bf8c2d4ab3b72d32802cc12d\Microsoft.VisualC.ni.dll + 2008-08-20 11:41:15 77,824 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\410d5e2c16688845a648056b9e015769\Microsoft.Vsa.ni.dll + 2008-08-20 11:40:11 167,936 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c96c537d2a587a469397c1db6df383ae\System.Configuration.Install.ni.dll + 2008-08-20 11:40:33 1,179,648 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\3886dc67c9b47a4c980f2e7323d2869e\System.Data.OracleClient.ni.dll + 2008-08-20 11:40:06 2,703,360 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\8b25569f439b0745b1932c49ce31ed98\System.Data.SqlXml.ni.dll + 2008-08-20 11:40:55 1,060,864 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\e0f490eb41d7c749a2ad211350e9ec48\System.Management.ni.dll + 2008-08-20 11:40:23 815,104 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\96fe22d9d2781f4eaf6e757bbd21145c\System.Runtime.Remoting.ni.dll + 2008-08-20 11:40:09 339,968 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\c879831fa9d7984b8bfaaaaca7566aee\System.Runtime.Serialization.Formatters.Soap.ni.dll + 2008-08-20 11:40:35 233,472 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\df88a5d34d704943ae0e408333ba4174\System.ServiceProcess.ni.dll + 2008-08-20 11:41:22 139,264 ----a-w C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\XPBurnComponent\b457d28448afae4ab0e7074c7b457080\XPBurnComponent.ni.dll + 2008-06-13 13:10:50 272,128 ------w C:\WINDOWS\Driver Cache\i386\bthport.sys - 2000-08-31 13:00:00 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE + 2005-10-21 00:02:28 163,328 ----a-w C:\WINDOWS\erdnt\Hiv-backup\ERDNT.EXE - 2000-08-31 13:00:00 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE + 2005-10-21 00:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE + 2000-08-31 12:00:00 89,504 ----a-w C:\WINDOWS\fdsv.exe + 2000-08-31 12:00:00 80,412 ----a-w C:\WINDOWS\grep.exe + 2008-08-29 19:41:54 10,134 ----a-r C:\WINDOWS\Installer\{04DC9993-648E-4523-B2A4-75E05E12FB10}\SystemFolder_msiexec.exe + 2008-06-06 01:53:10 65,536 ----a-r C:\WINDOWS\Installer\{236BB7C4-4419-42FD-0409-1E257A25E34D}\NewShortcut1_236BB7C4441942FD04091E257A25E34D.exe + 2008-06-04 02:03:42 7,406 ----a-r C:\WINDOWS\Installer\{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}\_bb32ea6.exe + 2008-08-20 11:38:51 26,694 ----a-r C:\WINDOWS\Installer\{621C02EA-AAFF-4026-A903-165D59529A16}\ARPPRODUCTICON.exe + 2008-08-20 11:38:51 69,632 ----a-r C:\WINDOWS\Installer\{621C02EA-AAFF-4026-A903-165D59529A16}\DriversHQ.DriverDe_212B77217E284373BD0AA155B0932A89.exe + 2008-08-20 11:38:51 69,632 ----a-r C:\WINDOWS\Installer\{621C02EA-AAFF-4026-A903-165D59529A16}\DriversHQ.DriverDe_212B77217E284373BD0AA155B0932A89_1.exe - 2007-10-25 12:54:51 12,288 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\cagicon.exe + 2008-08-31 20:19:00 12,288 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\cagicon.exe - 2007-10-25 12:54:51 282,624 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\fpicon.exe + 2008-08-31 20:19:01 282,624 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\fpicon.exe - 2007-10-25 12:54:51 135,168 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\misc.exe + 2008-08-31 20:19:01 135,168 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\misc.exe - 2007-10-25 12:54:51 27,136 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\oisicon.exe + 2008-08-31 20:19:01 27,136 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\oisicon.exe - 2007-10-25 12:54:51 4,096 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2008-08-31 20:19:02 4,096 ----a-r C:\WINDOWS\Installer\{90170409-6000-11D3-8CFE-0150048383C9}\opwicon.exe + 2008-06-06 02:03:05 65,536 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\AdobeBridge_B74D4E10103300000000000000000001_1.exe + 2008-06-06 02:03:05 65,536 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\BridgeCommonShortcut_B74D4E101033000000000001_1.exe + 2008-06-06 02:03:05 1,904,640 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\ESLaunchShortcut_B74D4E10103300000000000000000001.exe + 2008-06-06 02:03:05 61,440 ----a-r C:\WINDOWS\Installer\{B74D4E10-1033-0000-0000-000000000001}\NewShortcut2_B74D4E10103300000000000000000001.exe + 2008-06-06 02:07:33 65,536 ----a-r C:\WINDOWS\Installer\{E9787678-1033-0000-8E67-000000000001}\AppLanuchShortcut_E9787678103300008E67000000000001_1.exe + 2008-06-06 02:07:33 65,536 ----a-r C:\WINDOWS\Installer\{E9787678-1033-0000-8E67-000000000001}\ProgramMenuShortcut_E9787678103300008E670000000001_1.exe + 2007-11-19 00:04:34 2,678 ----a-w C:\WINDOWS\java\Packages\Data\028m31z5.dat + 2007-11-19 00:04:33 2,678 ----a-w C:\WINDOWS\java\Packages\Data\cgmamzxb.dat + 2007-11-19 00:04:42 2,678 ----a-w C:\WINDOWS\java\Packages\Data\db73nhnx.dat + 2007-11-19 00:04:33 2,678 ----a-w C:\WINDOWS\java\Packages\Data\qwss0hbn.dat + 2007-11-19 00:04:33 2,678 ----a-w C:\WINDOWS\java\Packages\Data\upvxb9vp.dat + 2008-08-24 00:30:58 1,526 ----a-w C:\WINDOWS\mozver.dat - 2000-08-31 13:00:00 28,160 ----a-w C:\WINDOWS\Nircmd.exe + 2000-08-31 12:00:00 28,672 ----a-w C:\WINDOWS\Nircmd.exe - 2007-10-25 11:16:46 8,738 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin + 2008-08-23 15:26:20 8,972 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin - 2007-10-25 11:16:39 80,007 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat + 2008-09-04 00:39:50 80,007 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat + 2008-09-04 00:39:50 2,706 ----a-w C:\WINDOWS\PCHealth\HelpCtr\PackageStore\SkuStore.bin + 2002-08-29 12:00:00 179,712 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\cewmdm.dll + 2002-08-29 12:00:00 175,104 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSP.dll + 2002-08-29 12:00:00 245,760 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MSSCP.dll + 2002-08-29 12:00:00 155,648 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MSWMDM.dll + 2002-08-29 12:00:00 22,528 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\WMDMLOG.dll + 2002-08-29 12:00:00 20,480 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\WMDMPS.dll + 2004-08-11 05:45:04 161,792 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\cewmdm.dll + 2004-08-11 05:45:04 25,088 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll + 2004-08-11 05:45:04 169,472 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSP.dll + 2004-08-11 05:45:04 360,176 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MSSCP.dll + 2004-08-11 05:45:04 311,296 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MSWMDM.dll + 2004-08-11 05:45:04 30,208 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDMLOG.dll + 2004-08-11 05:45:04 34,304 ----a-w C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\WMDMPS.dll + 2004-08-11 05:45:04 47,104 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\uwdf.exe + 2004-08-11 05:45:04 15,872 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfapi.dll + 2004-08-11 05:45:04 38,912 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wdfmgr.exe + 2004-08-11 05:45:06 38,912 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpd_ci.dll + 2004-08-11 05:45:06 61,952 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdconns.dll + 2004-08-11 05:45:06 114,176 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtp.dll + 2004-08-11 05:45:06 331,776 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtpdr.dll + 2004-08-11 05:45:06 66,560 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdmtpus.dll + 2004-08-11 05:45:06 327,680 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdsp.dll + 2004-08-11 05:45:06 10,752 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdtrace.dll + 2004-08-11 05:45:06 18,944 ----a-w C:\WINDOWS\RegisteredPackages\{981FB688-E76B-4246-987B-92083185B90A}\wpdusb.sys + 2002-08-29 12:00:00 184,320 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmadmod.dll + 2002-08-29 12:00:00 110,592 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmsdmod.dll + 2002-08-29 12:00:00 294,912 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}$BACKUP$\System\wmvdmod.dll + 2004-08-11 05:45:04 380,144 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmadmod.dll + 2004-08-11 05:45:04 773,368 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmsdmod.dll + 2004-08-11 05:45:06 531,192 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmspdmod.dll + 2004-08-11 05:45:06 1,181,944 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvadvd.dll + 2004-08-11 05:45:06 871,160 ----a-w C:\WINDOWS\RegisteredPackages\{A47B3654-48EE-48A5-B629-97D70175E58F}\wmvdmod.dll + 2002-08-29 12:00:00 6,656 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\laprxy.dll + 2002-08-29 12:00:00 24,576 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\logagent.exe + 2002-12-12 05:14:32 173,056 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\qasf.dll + 2002-08-29 12:00:00 442,398 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmadmoe.dll + 2002-08-29 12:00:00 274,432 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmasf.dll + 2002-08-29 12:00:00 253,952 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmnetmgr.dll + 2002-08-29 12:00:00 1,220,608 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}$BACKUP$\System\wmvcore.dll + 2004-08-11 05:45:04 6,656 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\laprxy.dll + 2004-08-11 05:45:04 96,768 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\logagent.exe + 2004-08-11 05:45:04 221,184 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\qasf.dll + 2004-08-11 05:45:04 712,704 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmadmoe.dll + 2004-08-11 05:45:04 229,376 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmasf.dll + 2004-08-11 05:45:04 344,064 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMDRMdev.dll + 2004-08-11 05:45:04 290,816 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMDRMNet.dll + 2004-08-11 05:45:04 150,016 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmidx.dll + 2004-08-11 05:45:04 1,027,072 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmnetmgr.dll + 2004-08-11 05:45:04 1,116,160 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmsdmoe2.dll + 2004-08-11 05:45:06 936,960 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmspdmoe.dll + 2004-08-11 05:45:06 1,509,376 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\WMVADVE.DLL + 2004-08-11 05:45:06 2,362,104 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmvcore.dll + 2004-08-11 05:45:06 999,424 ----a-w C:\WINDOWS\RegisteredPackages\{AAC1D942-0B38-4E37-9E4E-5B96A9DD2170}\wmvdmoe2.dll + 2002-08-29 12:00:00 204,800 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\blackbox.dll + 2002-08-29 12:00:00 266,240 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\drmclien.dll + 2002-08-29 12:00:00 76,830 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\drmstor.dll + 2002-08-29 12:00:00 602,112 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\drmv2clt.dll + 2002-08-29 12:00:00 174,592 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}$BACKUP$\System\msnetobj.dll + 2004-08-11 05:45:04 233,472 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\blackbox.dll + 2004-08-11 05:45:04 253,688 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmclien.dll + 2004-08-11 05:45:04 95,232 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmstor.dll + 2004-08-11 05:45:04 527,360 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\drmv2clt.dll + 2004-08-11 05:45:04 141,312 ----a-w C:\WINDOWS\RegisteredPackages\{C5B8FBE9-645E-4484-A7AA-E8DA9A70DD77}\msnetobj.dll + 2000-08-31 12:00:00 98,816 ----a-w C:\WINDOWS\sed.exe + 2000-08-31 12:00:00 161,792 ----a-w C:\WINDOWS\swreg.exe + 2000-08-31 12:00:00 136,704 ----a-w C:\WINDOWS\swsc.exe + 2000-08-31 12:00:00 212,480 ----a-w C:\WINDOWS\swxcacls.exe + 2002-08-29 12:00:00 2,000 ----a-w C:\WINDOWS\system\KEYBOARD.DRV + 2002-08-29 12:00:00 2,032 ----a-w C:\WINDOWS\system\MOUSE.DRV + 2002-08-29 12:00:00 1,744 ----a-w C:\WINDOWS\system\SOUND.DRV + 2002-08-29 12:00:00 2,176 ----a-w C:\WINDOWS\system\VGA.DRV + 2008-08-06 20:22:02 114,688 ----a-w C:\WINDOWS\system32\Adobe\Director\np32dsw.dll + 2008-08-06 20:30:48 202,168 ----a-w C:\WINDOWS\system32\Adobe\Director\SwDir.dll + 2008-08-06 20:22:42 499,712 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll + 2008-08-06 20:22:44 9,216 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\DynaPlayer.dll + 2008-08-06 19:42:04 892,928 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\iml32.dll + 2008-08-06 20:21:14 266,240 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Plugin.dll + 2008-08-06 20:24:14 446,464 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\Proj.dll + 2008-08-06 20:30:30 447,928 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1100465.exe + 2008-08-06 20:24:56 114,688 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwInit.exe + 2008-08-06 20:21:04 94,208 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\SwMenu.dll + 1999-06-25 14:55:30 149,504 ----a-w C:\WINDOWS\system32\Adobe\Shockwave 11\UNWISE.EXE - 2002-08-29 12:00:00 204,800 ----a-w C:\WINDOWS\system32\blackbox.dll + 2004-08-11 05:45:04 233,472 ----a-w C:\WINDOWS\system32\blackbox.dll - 2002-08-29 12:00:00 179,712 ----a-w C:\WINDOWS\system32\cewmdm.dll + 2004-08-11 05:45:04 161,792 ----a-w C:\WINDOWS\system32\cewmdm.dll - 2008-03-27 18:57:14 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2008-08-23 17:36:04 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2008-03-27 18:57:14 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2008-08-23 17:36:04 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2008-08-23 17:36:02 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008082320080824\index.dat - 2005-10-21 01:08:44 986,112 ----a-w C:\WINDOWS\system32\DANIM.DLL + 2008-06-23 15:38:30 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll + 2002-08-29 12:00:00 1,740 ----a-w C:\WINDOWS\system32\dcache.bin - 2002-08-29 12:00:00 204,800 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll + 2004-08-11 05:45:04 233,472 -c--a-w C:\WINDOWS\system32\dllcache\blackbox.dll - 2007-07-31 00:19:20 92,504 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll + 2008-07-19 02:10:48 94,920 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll - 2002-08-29 12:00:00 179,712 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll + 2004-08-11 05:45:04 161,792 -c--a-w C:\WINDOWS\system32\dllcache\cewmdm.dll - 2002-08-29 12:00:00 266,240 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll + 2004-08-11 05:45:04 253,688 -c--a-w C:\WINDOWS\system32\dllcache\drmclien.dll - 2002-08-29 12:00:00 76,830 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll + 2004-08-11 05:45:04 95,232 -c--a-w C:\WINDOWS\system32\dllcache\drmstor.dll - 2002-08-29 12:00:00 602,112 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll + 2004-08-11 05:45:04 527,360 -c--a-w C:\WINDOWS\system32\dllcache\drmv2clt.dll + 2002-08-29 07:40:56 20,480 ------w C:\WINDOWS\system32\dllcache\hidserv.dll + 2001-08-17 17:48:04 13,952 ------w C:\WINDOWS\system32\dllcache\kbdhid.sys + 2002-08-29 12:00:00 2,000 -c--a-w C:\WINDOWS\system32\dllcache\keyboard.drv - 2002-08-29 12:00:00 6,656 -c--a-w C:\WINDOWS\system32\dllcache\laprxy.dll + 2004-08-11 05:45:04 6,656 -c--a-w C:\WINDOWS\system32\dllcache\laprxy.dll - 2002-08-29 12:00:00 24,576 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe + 2004-08-11 05:45:04 96,768 -c--a-w C:\WINDOWS\system32\dllcache\logagent.exe + 2002-08-29 12:00:00 2,560 -c--a-w C:\WINDOWS\system32\dllcache\lz32.dll + 2001-08-17 17:48:00 12,160 -c--a-w C:\WINDOWS\system32\dllcache\mouhid.sys + 2002-08-29 12:00:00 2,032 -c--a-w C:\WINDOWS\system32\dllcache\mouse.drv - 2005-05-04 19:45:32 2,890,240 -c--a-w C:\WINDOWS\system32\dllcache\msi.dll + 2004-10-26 13:24:44 2,797,056 ----a-w C:\WINDOWS\system32\dllcache\msi.dll - 2005-05-04 19:45:36 78,848 -c--a-w C:\WINDOWS\system32\dllcache\msiexec.exe + 2004-10-26 13:25:08 77,312 ----a-w C:\WINDOWS\system32\dllcache\msiexec.exe - 2005-05-04 19:45:36 271,360 -c--a-w C:\WINDOWS\system32\dllcache\msihnd.dll + 2004-10-26 13:24:44 331,264 ----a-w C:\WINDOWS\system32\dllcache\msihnd.dll - 2005-05-04 19:45:36 884,736 -c--a-w C:\WINDOWS\system32\dllcache\msimsg.dll + 2004-10-26 13:16:12 884,736 ----a-w C:\WINDOWS\system32\dllcache\msimsg.dll - 2005-05-04 19:45:36 15,360 -c--a-w C:\WINDOWS\system32\dllcache\msisip.dll + 2004-10-26 13:25:08 44,032 ----a-w C:\WINDOWS\system32\dllcache\msisip.dll - 2002-08-29 12:00:00 174,592 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll + 2004-08-11 05:45:04 141,312 -c--a-w C:\WINDOWS\system32\dllcache\msnetobj.dll - 2002-08-29 12:00:00 175,104 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll + 2004-08-11 05:45:04 169,472 -c--a-w C:\WINDOWS\system32\dllcache\mspmsp.dll - 2002-08-29 12:00:00 245,760 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll + 2004-08-11 05:45:04 360,176 -c--a-w C:\WINDOWS\system32\dllcache\msscp.dll - 2002-08-29 12:00:00 155,648 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll + 2004-08-11 05:45:04 311,296 -c--a-w C:\WINDOWS\system32\dllcache\mswmdm.dll + 2002-08-29 12:00:00 2,944 -c--a-w C:\WINDOWS\system32\dllcache\null.sys - 2002-12-12 05:14:32 173,056 -c--a-w C:\WINDOWS\system32\dllcache\qasf.dll + 2004-08-11 05:45:04 221,184 -c--a-w C:\WINDOWS\system32\dllcache\qasf.dll - 2003-05-30 14:00:02 1,962,496 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll + 2005-08-30 14:14:00 1,227,776 ------w C:\WINDOWS\system32\dllcache\quartz.dll - 2005-08-31 23:49:30 409,088 -c--a-w C:\WINDOWS\system32\dllcache\SHLWAPI.DLL + 2005-09-01 01:49:30 409,088 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll + 2002-08-29 12:00:00 1,744 -c--a-w C:\WINDOWS\system32\dllcache\sound.drv + 2002-08-29 12:00:00 2,176 -c--a-w C:\WINDOWS\system32\dllcache\vga.drv + 2007-04-10 18:00:46 236,928 -c----w C:\WINDOWS\system32\dllcache\WgaLogon.dll + 2007-04-10 18:01:18 336,768 -c----w C:\WINDOWS\system32\dllcache\WgaTray.exe + 2002-08-29 12:00:00 2,864 -c--a-w C:\WINDOWS\system32\dllcache\winsock.dll + 2002-08-29 12:00:00 2,112 -c--a-w C:\WINDOWS\system32\dllcache\winspool.exe - 2002-08-29 12:00:00 184,320 -c--a-w C:\WINDOWS\system32\dllcache\wmadmod.dll + 2004-08-11 05:45:04 380,144 -c--a-w C:\WINDOWS\system32\dllcache\wmadmod.dll - 2002-08-29 12:00:00 442,398 -c--a-w C:\WINDOWS\system32\dllcache\wmadmoe.dll + 2004-08-11 05:45:04 712,704 -c--a-w C:\WINDOWS\system32\dllcache\wmadmoe.dll - 2002-08-29 12:00:00 274,432 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll + 2007-10-27 21:40:06 227,328 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll - 2002-08-29 12:00:00 22,528 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll + 2004-08-11 05:45:04 30,208 -c--a-w C:\WINDOWS\system32\dllcache\wmdmlog.dll - 2002-08-29 12:00:00 20,480 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll + 2004-08-11 05:45:04 34,304 -c--a-w C:\WINDOWS\system32\dllcache\wmdmps.dll - 2002-08-29 12:00:00 253,952 -c--a-w C:\WINDOWS\system32\dllcache\wmnetmgr.dll + 2004-08-11 05:45:04 1,027,072 -c--a-w C:\WINDOWS\system32\dllcache\wmnetmgr.dll - 2002-08-29 12:00:00 110,592 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll + 2004-08-11 05:45:04 773,368 -c--a-w C:\WINDOWS\system32\dllcache\wmsdmod.dll - 2002-08-29 12:00:00 294,912 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll + 2004-08-11 05:45:06 871,160 -c--a-w C:\WINDOWS\system32\dllcache\wmvdmod.dll + 2002-08-29 12:00:00 2,736 -c--a-w C:\WINDOWS\system32\dllcache\wowdeb.exe - 2007-07-31 00:19:16 53,080 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe + 2008-07-19 02:10:42 53,448 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe + 2003-11-13 18:28:02 12,570 ----a-w C:\WINDOWS\system32\drivers\AdfuUd.sys + 2006-08-29 02:48:26 2,432 ----a-w C:\WINDOWS\system32\drivers\cdr4_xp.sys + 2006-08-29 02:48:26 2,560 ----a-w C:\WINDOWS\system32\drivers\cdralw2k.sys + 2008-02-18 20:21:08 11,304 ----a-w C:\WINDOWS\system32\drivers\imagedrv.sys + 2008-02-18 20:21:08 132,904 ----a-w C:\WINDOWS\system32\drivers\imagesrv.sys + 2001-08-17 17:48:04 13,952 ----a-w C:\WINDOWS\system32\drivers\kbdhid.sys + 2001-08-17 17:48:00 12,160 ----a-w C:\WINDOWS\system32\drivers\mouhid.sys + 2002-08-29 12:00:00 2,944 ----a-w C:\WINDOWS\system32\drivers\null.sys + 2004-08-11 05:45:06 18,944 ----a-w C:\WINDOWS\system32\drivers\wpdusb.sys - 2002-08-29 12:00:00 266,240 ----a-w C:\WINDOWS\system32\drmclien.dll + 2004-08-11 05:45:04 253,688 ----a-w C:\WINDOWS\system32\drmclien.dll - 2002-08-29 12:00:00 76,830 ----a-w C:\WINDOWS\system32\drmstor.dll + 2004-08-11 05:45:04 95,232 ----a-w C:\WINDOWS\system32\drmstor.dll - 2002-08-29 12:00:00 602,112 ----a-w C:\WINDOWS\system32\drmv2clt.dll + 2004-08-11 05:45:04 527,360 ----a-w C:\WINDOWS\system32\drmv2clt.dll - 2007-11-19 01:22:16 110,192 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT + 2008-09-04 01:47:05 112,584 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT + 2002-08-29 07:40:56 20,480 ----a-w C:\WINDOWS\system32\hidserv.dll + 2006-03-17 15:45:52 1,757,184 ----a-w C:\WINDOWS\system32\imagX7.dll + 2006-03-17 15:45:54 497,296 ----a-w C:\WINDOWS\system32\imagXpr7.dll + 2006-03-17 15:45:54 258,048 ----a-w C:\WINDOWS\system32\imagXR7.dll + 2006-03-17 15:45:54 802,816 ----a-w C:\WINDOWS\system32\imagXRA7.dll + 2006-12-19 13:30:26 81,920 ----a-w C:\WINDOWS\system32\IoctlSvc.exe + 2002-08-29 12:00:00 2,000 ----a-w C:\WINDOWS\system32\keyboard.drv - 2002-08-29 12:00:00 6,656 ----a-w C:\WINDOWS\system32\laprxy.dll + 2004-08-11 05:45:04 6,656 ----a-w C:\WINDOWS\system32\laprxy.dll + 2007-04-10 18:02:50 1,476,992 ------w C:\WINDOWS\system32\LegitCheckControl.dll - 2002-08-29 12:00:00 24,576 ----a-w C:\WINDOWS\system32\logagent.exe + 2004-08-11 05:45:04 96,768 ----a-w C:\WINDOWS\system32\logagent.exe + 2002-08-29 12:00:00 2,560 ----a-w C:\WINDOWS\system32\lz32.dll + 2004-11-22 17:07:56 2,304 ----a-w C:\WINDOWS\system32\Machnm32.sys + 2008-03-15 03:31:26 57,344 ----a-w C:\WINDOWS\system32\Macromed\Common\SwSupport.dll - 2007-06-11 17:34:00 190,696 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe + 2007-11-21 00:52:40 218,496 ----a-w C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe + 2008-03-30 12:59:15 70,264 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe + 2008-03-15 03:29:22 581,632 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Control.dll + 2008-03-15 03:12:30 1,490,944 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\dirapiX.dll + 2008-03-15 03:29:58 24,576 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\DynaPlayer.dll + 2008-03-15 03:10:06 606,208 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\iml32X.dll + 2008-03-15 03:28:48 339,968 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Plugin.dll + 2008-03-15 03:28:56 475,136 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\PluginPing.dll + 2008-03-15 03:21:52 180,224 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\Proj.dll + 2008-03-15 03:31:28 77,824 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwInit.exe + 2008-03-15 15:38:08 86,016 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwMenuX.dll + 2008-03-15 03:31:28 98,304 ----a-w C:\WINDOWS\system32\Macromed\Shockwave 10\SwOnce.dll + 2002-08-29 12:00:00 2,032 ----a-w C:\WINDOWS\system32\mouse.drv - 2005-05-04 19:45:32 2,890,240 ----a-w C:\WINDOWS\system32\msi.dll + 2004-10-26 13:24:44 2,797,056 ------w C:\WINDOWS\system32\msi.dll - 2005-05-04 19:45:36 78,848 ----a-w C:\WINDOWS\system32\msiexec.exe + 2004-10-26 13:25:08 77,312 ----a-w C:\WINDOWS\system32\msiexec.exe - 2005-05-04 19:45:36 271,360 ----a-w C:\WINDOWS\system32\msihnd.dll + 2004-10-26 13:24:44 331,264 ----a-w C:\WINDOWS\system32\msihnd.dll - 2005-05-04 19:45:36 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll + 2004-10-26 13:16:12 884,736 ----a-w C:\WINDOWS\system32\msimsg.dll - 2005-05-04 19:45:36 15,360 ----a-w C:\WINDOWS\system32\msisip.dll + 2004-10-26 13:25:08 44,032 ----a-w C:\WINDOWS\system32\msisip.dll - 2002-08-29 12:00:00 174,592 ----a-w C:\WINDOWS\system32\msnetobj.dll + 2004-08-11 05:45:04 141,312 ----a-w C:\WINDOWS\system32\msnetobj.dll + 2004-08-11 05:45:04 25,088 ----a-w C:\WINDOWS\system32\MsPMSNSv.dll - 2002-08-29 12:00:00 175,104 ----a-w C:\WINDOWS\system32\mspmsp.dll + 2004-08-11 05:45:04 169,472 ----a-w C:\WINDOWS\system32\MsPMSP.dll - 2002-08-29 12:00:00 245,760 ----a-w C:\WINDOWS\system32\msscp.dll + 2004-08-11 05:45:04 360,176 ----a-w C:\WINDOWS\system32\MSSCP.dll - 2002-08-29 12:00:00 155,648 ----a-w C:\WINDOWS\system32\mswmdm.dll + 2004-08-11 05:45:04 311,296 ----a-w C:\WINDOWS\system32\MSWMDM.dll - 2006-12-12 08:39:20 1,230,336 ----a-w C:\WINDOWS\system32\msxml4.dll + 2003-04-18 20:46:22 1,233,920 ----a-w C:\WINDOWS\system32\msxml4.dll + 2008-02-18 20:04:04 95,600 ----a-w C:\WINDOWS\system32\NeroCo.dll + 2002-08-29 12:00:00 2,656 ----a-w C:\WINDOWS\system32\netware.drv - 2008-02-29 03:26:08 58,800 ----a-w C:\WINDOWS\system32\perfc009.dat + 2008-09-04 01:51:12 58,800 ----a-w C:\WINDOWS\system32\perfc009.dat - 2008-02-29 03:26:08 392,626 ----a-w C:\WINDOWS\system32\perfh009.dat + 2008-09-04 01:51:12 392,626 ----a-w C:\WINDOWS\system32\perfh009.dat - 2002-08-29 12:00:00 31,744 ----a-w C:\WINDOWS\system32\pid.dll + 2002-08-29 08:41:00 31,744 ----a-w C:\WINDOWS\system32\pid.dll - 2002-12-12 05:14:32 173,056 ----a-w C:\WINDOWS\system32\qasf.dll + 2004-08-11 05:45:04 221,184 ----a-w C:\WINDOWS\system32\qasf.dll - 2003-05-30 14:00:02 1,962,496 ----a-w C:\WINDOWS\system32\quartz.dll + 2005-08-30 14:14:00 1,227,776 ----a-w C:\WINDOWS\system32\quartz.dll + 2001-08-17 22:36:02 585,344 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\i81xdnt5.dll + 2001-08-17 12:49:18 138,240 ----a-w C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\i81xnt5.sys + 2002-08-29 12:00:00 30,592 ----a-w C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\i386\processr.sys + 2001-08-17 12:49:22 12,672 ----a-w C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\wADV01nt.sys + 2001-08-17 12:49:26 12,288 ----a-w C:\WINDOWS\system32\ReinstallBackups\0003\DriverFiles\i386\wADV02NT.sys + 2001-08-17 12:49:32 12,032 ----a-w C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\wADV05NT.sys + 2001-08-17 12:49:34 29,440 ----a-w C:\WINDOWS\system32\ReinstallBackups\0005\DriverFiles\i386\wATV01nt.sys + 2001-08-17 12:49:36 19,456 ----a-w C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\i386\wATV02NT.sys + 2001-08-17 12:49:46 31,104 ----a-w C:\WINDOWS\system32\ReinstallBackups\0007\DriverFiles\i386\wATV04nt.sys + 2001-08-17 12:49:50 23,680 ----a-w C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\wCh7xxNT.sys + 2001-08-17 12:49:54 12,160 ----a-w C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\wSiINTxx.sys + 2001-08-17 12:49:58 18,688 ----a-w C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\wVchNTxx.sys - 2008-03-27 21:22:36 3,252,092 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat + 2008-08-19 23:55:45 2,439,992 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat - 2002-08-29 12:00:00 4,573 ----a-w C:\WINDOWS\system32\secupd.dat + 2004-08-02 19:20:40 4,569 ------w C:\WINDOWS\system32\secupd.dat + 2008-07-19 02:10:20 36,552 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll + 2008-07-19 02:10:40 45,768 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll + 2002-08-29 12:00:00 1,744 ----a-w C:\WINDOWS\system32\sound.drv + 2004-08-04 07:56:56 8,192 ----a-w C:\WINDOWS\system32\spdwnwxp.exe - 2005-10-12 23:12:25 14,048 ----a-w C:\WINDOWS\system32\spmsg.dll + 2007-11-30 11:18:51 17,272 ------w C:\WINDOWS\system32\spmsg.dll - 2005-06-28 14:21:34 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe + 2005-06-28 13:21:34 22,752 ----a-w C:\WINDOWS\system32\spupdsvc.exe + 2007-01-03 08:42:22 1,933,312 ----a-w C:\WINDOWS\system32\Tropix.scr + 2006-03-17 18:49:46 368,640 ----a-w C:\WINDOWS\system32\TwnLib4.dll + 2008-07-14 11:09:18 62,976 ------w C:\WINDOWS\system32\tzchange.exe + 2004-08-11 05:45:04 47,104 ----a-w C:\WINDOWS\system32\uwdf.exe + 1999-06-01 04:00:00 101,888 ----a-w C:\WINDOWS\system32\VB6STKIT.DLL + 2002-08-29 12:00:00 2,176 ----a-w C:\WINDOWS\system32\vga.drv + 2004-08-11 05:45:04 15,872 ----a-w C:\WINDOWS\system32\wdfapi.dll + 2004-08-11 05:45:04 38,912 ----a-w C:\WINDOWS\system32\wdfmgr.exe + 2007-04-10 18:00:46 236,928 ------w C:\WINDOWS\system32\WgaLogon.dll + 2007-04-10 18:01:18 336,768 ------w C:\WINDOWS\system32\WgaTray.exe + 2002-08-29 12:00:00 2,864 ----a-w C:\WINDOWS\system32\winsock.dll + 2002-08-29 12:00:00 2,112 ----a-w C:\WINDOWS\system32\winspool.exe - 2002-08-29 12:00:00 184,320 ----a-w C:\WINDOWS\system32\wmadmod.dll + 2004-08-11 05:45:04 380,144 ----a-w C:\WINDOWS\system32\wmadmod.dll - 2002-08-29 12:00:00 442,398 ----a-w C:\WINDOWS\system32\wmadmoe.dll + 2004-08-11 05:45:04 712,704 ----a-w C:\WINDOWS\system32\wmadmoe.dll - 2002-08-29 12:00:00 274,432 ----a-w C:\WINDOWS\system32\wmasf.dll + 2007-10-27 21:40:06 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll - 2002-08-29 12:00:00 22,528 ----a-w C:\WINDOWS\system32\wmdmlog.dll + 2004-08-11 05:45:04 30,208 ----a-w C:\WINDOWS\system32\WMDMLOG.dll - 2002-08-29 12:00:00 20,480 ----a-w C:\WINDOWS\system32\wmdmps.dll + 2004-08-11 05:45:04 34,304 ----a-w C:\WINDOWS\system32\WMDMPS.dll + 2004-08-11 05:45:04 344,064 ----a-w C:\WINDOWS\system32\WMDRMdev.dll + 2004-08-11 05:45:04 290,816 ----a-w C:\WINDOWS\system32\WMDRMNet.dll + 2004-08-11 05:45:04 150,016 ----a-w C:\WINDOWS\system32\wmidx.dll - 2002-08-29 12:00:00 110,592 ----a-w C:\WINDOWS\system32\wmsdmod.dll + 2004-08-11 05:45:04 773,368 ----a-w C:\WINDOWS\system32\wmsdmod.dll + 2004-08-11 05:45:04 1,116,160 ----a-w C:\WINDOWS\system32\wmsdmoe2.dll + 2004-08-11 05:45:06 531,192 ----a-w C:\WINDOWS\system32\wmspdmod.dll + 2004-08-11 05:45:06 936,960 ----a-w C:\WINDOWS\system32\wmspdmoe.dll + 2004-08-11 05:45:06 1,181,944 ----a-w C:\WINDOWS\system32\wmvadvd.dll + 2004-08-11 05:45:06 1,509,376 ----a-w C:\WINDOWS\system32\WMVADVE.DLL - 2002-08-29 12:00:00 294,912 ----a-w C:\WINDOWS\system32\wmvdmod.dll + 2004-08-11 05:45:06 871,160 ----a-w C:\WINDOWS\system32\wmvdmod.dll + 2004-08-11 05:45:06 999,424 ----a-w C:\WINDOWS\system32\wmvdmoe2.dll + 2002-08-29 12:00:00 2,736 ----a-w C:\WINDOWS\system32\wowdeb.exe + 2004-08-11 05:45:06 38,912 ----a-w C:\WINDOWS\system32\wpd_ci.dll + 2004-08-11 05:45:06 61,952 ----a-w C:\WINDOWS\system32\wpdconns.dll + 2004-08-11 05:45:06 114,176 ----a-w C:\WINDOWS\system32\wpdmtp.dll + 2004-08-11 05:45:06 331,776 ----a-w C:\WINDOWS\system32\wpdmtpdr.dll + 2004-08-11 05:45:06 66,560 ----a-w C:\WINDOWS\system32\wpdmtpus.dll + 2004-08-11 05:45:06 327,680 ----a-w C:\WINDOWS\system32\wpdsp.dll + 2004-08-11 05:45:06 10,752 ----a-w C:\WINDOWS\system32\wpdtrace.dll + 1998-02-07 01:37:32 299,520 ----a-w C:\WINDOWS\uninst.exe + 2007-03-21 00:22:04 972,336 ----a-w C:\WINDOWS\UNNeroBackItUp.exe + 2008-02-28 21:38:48 972,072 ----a-w C:\WINDOWS\UNNeroMediaHome.exe + 2007-02-28 19:41:02 972,336 ----a-w C:\WINDOWS\UNNeroShowTime.exe + 2007-03-22 00:02:12 972,336 ----a-w C:\WINDOWS\UNNeroVision.exe + 2008-02-26 20:14:26 972,072 ----a-w C:\WINDOWS\UNRecode.exe + 2000-08-31 12:00:00 49,152 ----a-w C:\WINDOWS\VFind.exe + 2008-04-26 00:08:25 1,233,920 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll + 2006-12-02 02:56:00 96,256 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll + 2006-12-02 02:54:32 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll + 2006-12-02 02:54:34 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll + 2006-12-02 02:54:32 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll + 2006-12-02 04:25:52 1,101,824 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll + 2006-12-02 04:25:56 1,093,120 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll + 2006-12-02 04:25:58 69,632 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll + 2006-12-02 04:26:00 57,856 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll + 2006-12-02 04:08:00 40,960 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll + 2006-12-02 04:08:00 45,056 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll + 2006-12-02 04:08:00 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll + 2006-12-02 04:08:00 57,344 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll + 2006-12-02 04:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll + 2006-12-02 04:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll + 2006-12-02 04:08:00 61,440 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll + 2006-12-02 04:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll + 2006-12-02 04:08:00 49,152 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll + 2006-12-02 04:46:44 65,536 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6c18549a\vcomp.dll + 2004-08-04 07:57:00 1,050,624 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll + 2004-08-04 07:56:58 1,712,128 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll + 2000-08-31 12:00:00 68,096 ----a-w C:\WINDOWS\zip.exe . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AIM"="C:\Program Files\AIM\aim.exe" [2006-08-01 67112] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nwiz"="nwiz.exe" [2004-02-03 C:\WINDOWS\system32\nwiz.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-03-04 219136] [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Jo Ann^Start Menu^Programs^Startup^Adobe Gamma.lnk] path=C:\Documents and Settings\Jo Ann\Start Menu\Programs\Startup\Adobe Gamma.lnk backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Jo Ann^Start Menu^Programs^Startup^LimeWire On Startup.lnk] path=C:\Documents and Settings\Jo Ann\Start Menu\Programs\Startup\LimeWire On Startup.lnk backup=C:\WINDOWS\pss\LimeWire On Startup.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Jo Ann^Start Menu^Programs^Startup^Picture Motion Browser Media Check Tool.lnk] path=C:\Documents and Settings\Jo Ann\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk backup=C:\WINDOWS\pss\Picture Motion Browser Media Check Tool.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG7_Run] --a------ 2008-03-04 09:32 219136 C:\PROGRA~1\Grisoft\AVG7\avgw.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a------ 2006-12-10 22:52 49152 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] --a------ 2008-02-28 17:07 1828136 C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --a------ 2004-11-15 17:18 1670144 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan] --a------ 2008-02-18 16:29 2221352 C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2008-02-28 09:59 570664 C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2007-06-29 07:24 286720 C:\Program Files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper] --a------ 2006-10-20 16:29 4806144 C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2008-02-22 05:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 R1 Pivot;Pivot;C:\WINDOWS\System32\drivers\pivot.sys [2007-02-09 17465] R3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter;C:\WINDOWS\System32\DRIVERS\AN983.sys [2002-08-28 36224] R3 pivotmou;Pivot Mouse/Pointers Filter Driver;C:\WINDOWS\system32\drivers\pivotmou.sys [2007-02-09 11323] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Contents of the 'Scheduled Tasks' folder . - - - - ORPHANS REMOVED - - - - HKLM-Run-NvCplDaemon - C:\WINDOWS\system32\NvCpl.dll Notify-WgaLogon - (no file) MSConfigStartUp-FileZilla Server Interface - C:\Program Files\FileZilla Server\FileZilla Server Interface.exe MSConfigStartUp-NvCplDaemon - C:\WINDOWS\System32\NvCpl.dll . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\Jo Ann\Application Data\Mozilla\Firefox\Profiles\9n5ti6iv.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - www.google.com FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npatgpc.dll FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-09-05 17:51:03 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe C:\WINDOWS\system32\wdfmgr.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\system32\rundll32.exe . ************************************************************************** . Completion time: 2008-09-05 18:01:40 - machine was rebooted ComboFix-quarantined-files.txt 2008-09-05 22:01:27 ComboFix2.txt 2008-03-30 18:00:03 ComboFix3.txt 2008-03-28 11:38:07 Pre-Run: 19,579,424,768 bytes free Post-Run: 19,672,424,448 bytes free 710 --- E O F --- 2008-08-20 00:43:40 and about vundoix, im supposing it deletes some files but gives me and error message saying it can not delete some, reboot might work, so i reboot and still am not able to delete these files thanks in advance
While I'm looking over your logs, please run Vundofix in safe mode (repeatedly press F8 after you press the power button) and see how it goes. Best Regards
sorry for the late reply, been hung up so ive ran vundofix again in safe mode and says no errors were found whats the next step? Thanks
Hey lmac22 Please download Superantispyware Free and install it. Follow the prompts and reboot if required. Launch Superantispyware Free either by running C:\Program Files\SUPERANTISPWYARE.exe or right-click on the SuperAntispyware icon in your task bar (it looks like a bug) and click on Scan for Spyware, Adware, Malware... Configuring SuperAntispyware • Click on Preferences. • In the tab General and Startup, make sure the box Start SuperAntispyware when Windows starts is unchecked. This will prevent SuperAntispyware from starting everytime, because it may interfere with other fixes that may be run. • Navigate to the tab Scanning Control. • Make sure only these boxes are checked: Code: Close browsers before scanning Scan for tracking cookies Terminate memory threats before quarantining Scan Alternate Data Streams Use Kernel Direct File Access (recommended) Use Kernel Direct Registry Access (recommended) Use Direct Disk Access (recommended) • Click on Close. Updating SuperAntispyware • At the main window, click on Check for Updates.... • Wait for SuperAntispyware to be fully updated. Scanning Time • Boot into {b}safe mode[/b] by repeatedly pressing the F8 key after you press the power button. If safe mode does not work, tell me and do the scan in normal mode. • Launch SuperAntispyware. • At the main window, click on Scan your Computer.... • Make sure all drives (excluding CD drives) are checked, select Perform Complete Scan, and then click on Next. • Wait for the scan to complete, and then click on Next>. This will quarantine and remove all detected items. • Reboot your computer. Post A Log • Launch SuperAntispyware • Click on Preferences • Navigate to the tab Statistics/Logs. • Choose the latest scan log, and the click on View Log.... • Copy and paste the contents of the log here in your next post. Tell me if there are any more problems with your computer. Best Regards
when i try to install that superspyware program it gives me this error the windows installer service could not be accessed. This can occur if you are running in safe mode, or if the windows installer is not correctly installed. Contact your support personnel for assistance im not in safe mode
Hey lmac22 Go to Start, Run, type in services.msc Scroll down to Windows Installer, and Start the service. Try running the installer again. Best Regards
