Belahzur wrote: Hello.
Download
OTL by
OldTimer to your Desktop.
- Close all windows and double click OTL.exe
- Click Run Scan and let the program run uninterrupted
- It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
- You may need to use two posts to get it all.
OTL.TXT
OTL logfile created on: 10/27/2010 8:53:25 PM - Run 2
OTL by OldTimer - Version 3.2.17.1 Folder = C:\Rick-Temp
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 61.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.78 Gb Total Space | 169.33 Gb Free Space | 72.74% Space Free | Partition Type: NTFS
Computer Name: KATHY-1 | User Name: Kathy | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - C:\Documents and Settings\Kathy\Local Settings\Temp\jkos-Kathy\binaries\ScanningProcess.exe (Kaspersky Lab.)
PRC - C:\Program Files\Java\jre6\bin\java.exe (Sun Microsystems, Inc.)
PRC - C:\Rick-Temp\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
PRC - C:\Program Files\Dell V305\dldtmsdmon.exe ()
PRC - C:\Program Files\Dell V305\dldtmon.exe ()
PRC - C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe (Hewlett-Packard)
PRC - C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\dldtcoms.exe ( )
PRC - C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe (Sonic Solutions)
PRC - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe (Sonic Solutions)
PRC - C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe ()
PRC - C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
PRC - C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
PRC - C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard)
========== Modules (SafeList) ========== MOD - C:\Rick-Temp\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ========== SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found
SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found
SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (dldtCATSCustConnectService) -- C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\dldtserv.exe ()
SRV - (dldt_device) -- C:\WINDOWS\System32\dldtcoms.exe ( )
SRV - (SavRoam) -- C:\Program Files\Symantec AntiVirus\SavRoam.exe (symantec)
SRV - (Symantec AntiVirus) -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (DefWatch) -- C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
SRV - (SNDSrvc) -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation)
SRV - (SPBBCSvc) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation)
SRV - (ccSetMgr) -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation)
SRV - (ccEvtMgr) -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation)
SRV - (LiveUpdate) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_1.EXE (Symantec Corporation)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\hpzipm12.exe (HP)
========== Driver Services (SafeList) ========== DRV - (ZDPSp50) -- C:\WINDOWS\System32\Drivers\ZDPSp50.sys File not found
DRV - (rt2870) -- C:\WINDOWS\System32\DRIVERS\rt2870.sys File not found
DRV - (PCASp50) -- C:\WINDOWS\System32\Drivers\PCASp50.sys File not found
DRV - (NAVEX15) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101025.002\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101025.002\NAVENG.SYS (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SymEvent) -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (Lbd) -- C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (61883) -- C:\WINDOWS\system32\drivers\61883.sys (Microsoft Corporation)
DRV - (Avc) -- C:\WINDOWS\system32\drivers\avc.sys (Microsoft Corporation)
DRV - (MSDV) -- C:\WINDOWS\system32\drivers\msdv.sys (Microsoft Corporation)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (elagopro) -- C:\WINDOWS\system32\drivers\elagopro.sys (Gteko Ltd.)
DRV - (elaunidr) -- C:\WINDOWS\system32\drivers\elaunidr.sys (Gteko Ltd.)
DRV - (SYMTDI) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (DRVNDDM) -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS (Roxio)
DRV - (DLARTL_M) -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS (Roxio)
DRV - (DLACDBHM) -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS (Roxio)
DRV - (SPBBCDrv) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (DLADResM) -- C:\WINDOWS\system32\DLA\DLADResM.SYS (Roxio)
DRV - (DLAUDFAM) -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Roxio)
DRV - (DLABMFSM) -- C:\WINDOWS\system32\DLA\DLABMFSM.SYS (Roxio)
DRV - (DLAUDF_M) -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Roxio)
DRV - (DLAOPIOM) -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Roxio)
DRV - (DLABOIOM) -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS (Roxio)
DRV - (DLAPoolM) -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS (Roxio)
DRV - (DLAIFS_M) -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Roxio)
DRV - (SAVRT) -- C:\Program Files\Symantec AntiVirus\savrt.sys (Symantec Corporation)
DRV - (SAVRTPEL) -- C:\Program Files\Symantec AntiVirus\Savrtpel.sys (Symantec Corporation)
DRV - (DRVMCDB) -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS (Sonic Solutions)
DRV - (ZD1211BU(Linksys A Division of Cisco Systems Inc.)) Linksys Wireless-G USB Network Adapter Driver(Linksys A Division of Cisco Systems Inc.) -- C:\WINDOWS\system32\drivers\ZD1211BU.sys (ZyDAS Technology Corporation)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?rs=1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
O1 HOSTS File: ([2006/02/28 07:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {38832FF3-F082-49AD-993F-AACE97E306DD} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [dldtamon] C:\Program Files\Dell V305\dldtamon.exe ()
O4 - HKLM..\Run: [dldtmon.exe] C:\Program Files\Dell V305\dldtmon.exe ()
O4 - HKLM..\Run: [FaxCenterServer] C:\Program Files\Dell PC Fax\fm3032.exe ()
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe (Hewlett-Packard)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe (Sonic Solutions)
O4 - HKLM..\Run: [StatusClient 2.6] C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard)
O4 - HKLM..\Run: [TomcatStartup 2.5] C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe (Hewlett-Packard)
O4 - HKLM..\Run: [vptray] C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKCU..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKLM..\RunOnceEx: [] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} http://www.seehere.com/ips-opdata/layout/fujius02/objects/jordan-canvasx.cab (JordanUploader Class)
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} http://www5.snapfish.com/SnapfishActivia.cab (Snapfish Activia)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} https://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\geBtRhIy: DllName - geBtRhIy.dll - File not found
O20 - Winlogon\Notify\NavLogon: DllName - C:\WINDOWS\system32\NavLogon.dll - C:\WINDOWS\system32\NavLogon.dll (Symantec Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Kathy\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Kathy\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (C:\WINDOWS\system32\wvUljKaB) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/06/23 21:06:29 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{53e591f0-41ab-11dd-afe5-001ec961e06b}\Shell\AutoRun\command - "" = wdsync.exe
O33 - MountPoints2\{7f0fa1be-b101-11df-b705-001ec961e06b}\Shell - "" = AutoRun
O33 - MountPoints2\{7f0fa1be-b101-11df-b705-001ec961e06b}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{cf0593f3-226a-11df-b5ae-001ec961e06b}\Shell\AutoRun\command - "" = wscript.exe Deploy\Scripts\BDD_AutoRun.wsf
O33 - MountPoints2\{f10742c6-a94d-11dd-b0e9-001ee5dbdecb}\Shell\AutoRun\command - "" = .\MigWiz\migsetup.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ========== [2010/10/27 19:13:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2010/10/27 19:13:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/10/27 19:13:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/10/27 19:13:25 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/10/27 19:13:25 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/10/27 19:13:25 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/10/27 19:13:25 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/10/27 19:13:25 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010/10/27 19:13:07 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/10/27 19:12:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kathy\Application Data\Sun
[2010/10/27 18:55:51 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010/10/27 17:51:28 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2010/10/25 21:20:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Kathy\Application Data\Malwarebytes
[2010/10/25 21:19:51 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/10/25 21:19:49 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/10/25 21:19:49 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/10/25 21:19:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/10/25 18:56:03 | 000,000,000 | ---D | C] -- C:\Rick-Temp
[2010/10/14 19:17:16 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll
[2010/10/14 19:17:16 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll
[2010/10/14 19:17:09 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll
[2009/08/19 17:05:52 | 000,843,776 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtusb1.dll
[2009/08/19 17:05:52 | 000,438,272 | ---- | C] ( ) -- C:\WINDOWS\System32\DLDThcp.dll
[2009/08/19 17:05:52 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtinpa.dll
[2009/08/19 17:05:52 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtiesc.dll
[2009/08/19 17:05:51 | 001,105,920 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtserv.dll
[2009/08/19 17:05:51 | 000,647,168 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtpmui.dll
[2009/08/19 17:05:51 | 000,569,344 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtlmpm.dll
[2009/08/19 17:05:51 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtprox.dll
[2009/08/19 17:05:50 | 000,663,552 | ---- | C] ( ) -- C:\WINDOWS\System32\dldthbn3.dll
[2009/08/19 17:05:48 | 000,851,968 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtcomc.dll
[2009/08/19 17:05:48 | 000,376,832 | ---- | C] ( ) -- C:\WINDOWS\System32\dldtcomm.dll
[2006/10/11 18:01:40 | 000,643,072 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxpmui.dll
[2006/10/11 17:59:56 | 001,224,704 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxserv.dll
[2006/10/11 17:54:10 | 000,421,888 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxcomm.dll
[2006/10/11 17:48:58 | 000,094,208 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxpplc.dll
[2006/10/11 17:48:14 | 000,684,032 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxcomc.dll
[2006/10/11 17:47:42 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxprox.dll
[2006/10/11 17:41:04 | 000,991,232 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxusb1.dll
[2006/10/11 17:37:14 | 000,696,320 | ---- | C] ( ) -- C:\WINDOWS\System32\dlcxhbn3.dll
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/10/27 20:47:02 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At18.job
[2010/10/27 20:28:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/10/27 20:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At47.job
[2010/10/27 19:47:02 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At22.job
[2010/10/27 19:13:11 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll
[2010/10/27 19:13:11 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010/10/27 19:13:11 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010/10/27 19:13:11 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010/10/27 19:13:11 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl
[2010/10/27 19:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At40.job
[2010/10/27 18:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At17.job
[2010/10/27 18:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At43.job
[2010/10/27 17:52:11 | 000,000,063 | ---- | M] () -- C:\WINDOWS\mdm.ini
[2010/10/27 17:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At19.job
[2010/10/27 17:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At38.job
[2010/10/27 16:47:01 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At16.job
[2010/10/27 16:13:06 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At42.job
[2010/10/27 15:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At14.job
[2010/10/27 15:13:06 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/10/27 15:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At37.job
[2010/10/27 14:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At15.job
[2010/10/27 14:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At41.job
[2010/10/27 13:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At21.job
[2010/10/27 13:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At35.job
[2010/10/27 12:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At13.job
[2010/10/27 12:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At39.job
[2010/10/27 12:05:04 | 000,002,473 | ---- | M] () -- C:\Documents and Settings\Kathy\Desktop\Microsoft Word.lnk
[2010/10/27 11:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At12.job
[2010/10/27 11:13:06 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At34.job
[2010/10/27 10:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At10.job
[2010/10/27 10:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At36.job
[2010/10/27 09:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At11.job
[2010/10/27 09:14:14 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/10/27 09:14:14 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/10/27 09:14:13 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/10/27 09:14:13 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/10/27 09:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At32.job
[2010/10/27 08:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At8.job
[2010/10/27 08:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At33.job
[2010/10/27 07:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At9.job
[2010/10/27 07:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At44.job
[2010/10/27 06:47:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At7.job
[2010/10/27 06:28:00 | 000,000,880 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/10/27 06:13:00 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At31.job
[2010/10/27 05:59:53 | 053,101,568 | R--- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mbb
[2010/10/27 05:59:50 | 024,529,920 | R--- | M] () -- C:\Documents and Settings\All Users\Documents\ESBK.mb
[2010/10/27 05:57:01 | 000,013,702 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/10/27 05:49:33 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At45.job
[2010/10/27 05:49:27 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/10/26 17:50:18 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/26 12:13:21 | 000,000,006 | ---- | M] () -- C:\Documents and Settings\Kathy\Application Data\completescan
[2010/10/26 11:53:23 | 000,000,010 | ---- | M] () -- C:\Documents and Settings\Kathy\Application Data\install
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At48.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At46.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At30.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At29.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At28.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At27.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At26.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At25.job
[2010/10/26 11:52:36 | 000,554,496 | ---- | M] () -- C:\Documents and Settings\Kathy\Application Data\hotfix.exe
[2010/10/26 05:49:14 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At23.job
[2010/10/25 11:38:22 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At24.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At6.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At5.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At4.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At3.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At20.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2010/10/25 05:35:00 | 000,000,402 | ---- | M] () -- C:\WINDOWS\tasks\Backup.job
[2010/10/23 17:46:55 | 000,020,992 | ---- | M] () -- C:\Documents and Settings\Kathy\My Documents\October 23.doc
[2010/10/23 08:29:00 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2010/10/19 11:39:36 | 000,034,304 | ---- | M] () -- C:\Documents and Settings\Kathy\My Documents\How to Raise Good Parents.DOC
[2010/10/15 03:57:20 | 000,371,280 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/14 21:02:37 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/10/13 11:21:56 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\Kathy\My Documents\makepeac.doc
[2010/10/12 20:26:39 | 000,004,672 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\grand canyon.jpg
[2010/10/11 09:40:08 | 003,828,736 | ---- | M] () -- C:\Documents and Settings\Kathy\My Documents\Backing up Kat.doc
[2010/10/07 07:23:38 | 000,010,611 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\school bus.jpg
[2010/10/07 07:00:02 | 000,062,972 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\catherine 2.jpg
[2010/10/07 06:59:51 | 000,070,942 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\catherine bowers.jpg
[2010/10/05 19:11:06 | 000,440,684 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/10/05 19:11:06 | 000,071,002 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/10/05 17:54:14 | 000,004,287 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\money.jpg
[2010/10/05 17:36:23 | 000,003,901 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\cats on wall.jpg
[2010/10/05 17:35:51 | 000,002,138 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\kittens1.jpg
[2010/10/05 17:35:27 | 000,003,326 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\broken heart.jpg
[2010/10/05 17:34:39 | 000,002,418 | ---- | M] () -- C:\Documents and Settings\All Users\Documents\storm clouds.jpg
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/10/27 17:52:11 | 000,000,063 | ---- | C] () -- C:\WINDOWS\mdm.ini
[2010/10/26 16:32:06 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/26 12:13:21 | 000,000,006 | ---- | C] () -- C:\Documents and Settings\Kathy\Application Data\completescan
[2010/10/26 11:53:23 | 000,000,010 | ---- | C] () -- C:\Documents and Settings\Kathy\Application Data\install
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At48.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At47.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At46.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At45.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At44.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At43.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At42.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At41.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At40.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At39.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At38.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At37.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At36.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At35.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At34.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At33.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At32.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At31.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At30.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At29.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At28.job
[2010/10/26 11:52:38 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At27.job
[2010/10/26 11:52:37 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At26.job
[2010/10/26 11:52:37 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At25.job
[2010/10/26 11:52:36 | 000,554,496 | ---- | C] () -- C:\Documents and Settings\Kathy\Application Data\hotfix.exe
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At9.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At24.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At23.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At22.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At21.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At20.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At19.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At18.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At17.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At16.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At15.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At14.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At13.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At12.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At11.job
[2010/10/25 11:38:21 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At10.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At8.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At7.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At6.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At5.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At4.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At3.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2010/10/25 11:38:20 | 000,000,404 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2010/10/23 17:19:22 | 000,020,992 | ---- | C] () -- C:\Documents and Settings\Kathy\My Documents\October 23.doc
[2010/10/13 11:21:56 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\Kathy\My Documents\makepeac.doc
[2010/10/12 20:26:53 | 000,004,672 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\grand canyon.jpg
[2010/10/11 09:40:08 | 003,828,736 | ---- | C] () -- C:\Documents and Settings\Kathy\My Documents\Backing up Kat.doc
[2010/10/07 07:23:50 | 000,010,611 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\school bus.jpg
[2010/10/07 07:02:04 | 000,062,972 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\catherine 2.jpg
[2010/10/07 07:01:50 | 000,070,942 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\catherine bowers.jpg
[2010/10/05 17:54:27 | 000,004,287 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\money.jpg
[2010/10/05 17:36:34 | 000,003,901 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\cats on wall.jpg
[2010/10/05 17:36:07 | 000,002,138 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\kittens1.jpg
[2010/10/05 17:35:41 | 000,003,326 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\broken heart.jpg
[2010/10/05 17:35:21 | 000,002,418 | ---- | C] () -- C:\Documents and Settings\All Users\Documents\storm clouds.jpg
[2010/08/23 19:38:38 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/05/18 06:03:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\vpc32.INI
[2009/09/02 20:09:33 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Kathy\Local Settings\Application Data\fusioncache.dat
[2009/08/19 17:08:05 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\dldtvs.dll
[2009/08/19 17:08:03 | 000,360,448 | ---- | C] () -- C:\WINDOWS\System32\dldtcoin.dll
[2009/08/19 17:07:28 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\dldtcaps.dll
[2009/08/19 17:07:27 | 000,782,336 | ---- | C] () -- C:\WINDOWS\System32\dldtdrs.dll
[2009/08/19 17:07:27 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\dldtcnv4.dll
[2009/08/19 17:06:09 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\dldtwupd.dll
[2009/08/19 17:05:53 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\DLDTinst.dll
[2009/08/19 17:05:52 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\dldtutil.dll
[2009/08/19 17:05:50 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\dldtinsb.dll
[2009/08/19 17:05:50 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\dldtins.dll
[2009/08/19 17:05:50 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\dldtjswr.dll
[2009/08/19 17:05:50 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\dldtinsr.dll
[2009/08/19 17:05:49 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\dldtgrd.dll
[2009/08/19 17:05:49 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\dldtcub.dll
[2009/08/19 17:05:49 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\dldtcur.dll
[2009/08/19 17:05:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\dldtcu.dll
[2009/08/19 17:05:47 | 000,077,906 | ---- | C] () -- C:\WINDOWS\System32\DLDTcfg.dll
[2009/08/01 11:31:36 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\PTfile1.dll
[2008/12/28 13:41:45 | 000,676,743 | -HS- | C] () -- C:\WINDOWS\System32\BaKjlUvw.ini2
[2008/12/28 13:41:45 | 000,676,743 | -HS- | C] () -- C:\WINDOWS\System32\BaKjlUvw.ini
[2008/11/13 20:54:09 | 000,001,342 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2008/08/14 17:27:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2008/07/08 06:14:53 | 000,001,130 | ---- | C] () -- C:\Documents and Settings\Kathy\Local Settings\Application Data\FASTWiz.html
[2008/07/08 06:01:59 | 000,105,930 | ---- | C] () -- C:\Documents and Settings\Kathy\Local Settings\Application Data\FASTWiz.log
[2008/07/07 20:07:18 | 000,150,016 | ---- | C] () -- C:\Documents and Settings\Kathy\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/07/07 18:42:46 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/07/06 16:27:36 | 000,003,558 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2008/07/06 16:27:36 | 000,000,056 | RHS- | C] () -- C:\WINDOWS\System32\7BF60F020B.sys
[2008/07/06 13:26:51 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\DLPRMON.DLL
[2008/07/06 13:26:51 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\DLPMONUI.DLL
[2008/06/23 23:36:38 | 000,056,056 | ---- | C] () -- C:\WINDOWS\System32\DLAAPI_W.DLL
[2008/06/23 23:36:37 | 000,000,166 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/06/23 23:11:50 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/06/23 23:11:50 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/06/23 23:11:49 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/06/23 23:11:47 | 001,478,656 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/06/23 23:11:47 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/06/23 22:55:45 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\jst.dll
[2008/06/23 22:55:45 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\PMLJNI.dll
[2008/06/23 22:53:31 | 000,008,134 | ---- | C] () -- C:\WINDOWS\hplj3380.ini
[2008/06/23 22:53:09 | 000,000,375 | ---- | C] () -- C:\WINDOWS\hpbvspst.ini
[2008/06/23 22:52:42 | 000,000,308 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2008/06/23 22:52:38 | 000,001,005 | ---- | C] () -- C:\WINDOWS\hpbvnstp.ini
[2008/06/23 22:52:33 | 000,221,184 | R--- | C] () -- C:\WINDOWS\System32\HP3AIOZ6.dll
[2008/06/23 14:37:40 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2007/08/06 18:22:15 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2006/10/20 20:07:32 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\dlcxinsr.dll
[2006/10/20 20:06:44 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\dlcxcur.dll
[2006/10/20 20:03:28 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\dlcxjswr.dll
[2006/10/20 19:57:40 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\dlcxinsb.dll
[2006/10/20 19:56:52 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\dlcxcub.dll
[2006/10/20 19:55:28 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\dlcxcu.dll
[2006/10/20 19:54:42 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\dlcxins.dll
[2006/10/20 19:48:38 | 000,454,656 | ---- | C] () -- C:\WINDOWS\System32\dlcxutil.dll
[2006/10/20 19:46:42 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\dlcxgrd.dll
[2006/09/16 23:36:50 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\CddbPlaylist2Roxio.dll
[2006/09/16 23:36:50 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2006/09/06 06:13:14 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\dlcxcfg.dll
[2003/09/26 07:42:46 | 000,002,421 | ---- | C] () -- C:\WINDOWS\System32\scrubber.ini
[2002/05/03 16:40:32 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL
[2001/03/28 12:37:14 | 000,000,033 | ---- | C] () -- C:\WINDOWS\System32\hppcap.ini
[2001/03/28 12:37:14 | 000,000,033 | ---- | C] () -- C:\WINDOWS\hppcap.ini
[2000/09/08 17:53:50 | 000,073,839 | ---- | C] () -- C:\WINDOWS\System32\KodakOneTouch.dll
[1999/01/22 17:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
========== Alternate Data Streams ========== @Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Videos:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Pictures:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Music:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Women of the Bible devotions:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\What a Character teen 1:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\What a Character Preteen version:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\WEB_PAGE:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\TYLER:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Tidewater Cats:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Teen Bible Book:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Strength for the Day:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Stockings Were Hung:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Single Step:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\SEMINARS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Rock Your World:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Roadsigns for Teens:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\RECIPES:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Quiz Book for Girls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\PUZZLES:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Print Center:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Pine Grove Explorer's Club:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Parenting Articles:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Organizational:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\On the Homefront:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\My Google Gadgets:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Moving Day Survival Manual:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Manners:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\LABELS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Junior Articles:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Jr High Survival Manual:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\JESSICA:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Jasmine:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\J4M The Bible:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\J4M School:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\J4M Family:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\J4M Especially Special Me:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\IDEAS:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Home Alone Handbook:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Guy's Bible Book:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Grieving Families:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Gotta Have God 3:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Geo Club:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Gather My Children:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\FOYC:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\FICTION:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Emerald Coast series:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\emerald 2:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Kathy\My Documents\Christmas through the Year:Roxio EMC Stream
< End of report >