windows virtual memory to low

windows virtual memory to low30th June 2012, 4:51 pm

Hi
I got this pop up, i checked my virtual memory and firefox and ekin.exe were hogging the memory. I did a search and couldn't find ekin.exe in my computer. Is it a virus? Running windows xp.
thankspdog

Re: windows virtual memory to low4th July 2012, 10:48 am

Hi there! Welcome back to the forums.

Please visit this webpage for a tutorial on downloading and running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

See the area: Using ComboFix, and when done, post the log back here.

Re: windows virtual memory to low6th July 2012, 3:42 am

ok, i have been using combo fix for quite awhile now, i will run it tonight and post the log. Is there a log somewhere saved from the last time i ran combo fix?

Re: windows virtual memory to low6th July 2012, 5:14 pm

c:\combofix.txt

Post the log when you can.

Also, it is dangerous to run ComboFix anytime you want to. Should only be done under guidance of malware remover, such as myself.

Re: windows virtual memory to low8th July 2012, 4:01 am

oh, ok i didn't no that. Heres the log:

ComboFix 12-07-07.04 - Boyd 07/07/2012 10:19:36.13.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.959.542 [GMT -6:00]
Running from: c:\documents and settings\Boyd\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Boyd\Application Data\PriceGong
c:\documents and settings\Boyd\Application Data\PriceGong\Data\1.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\4489.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\450.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\a.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\b.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\c.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\d.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\e.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\f.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\g.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\h.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\i.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\j.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\k.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\l.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\m.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\mru.xml
c:\documents and settings\Boyd\Application Data\PriceGong\Data\n.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\o.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\p.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\q.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\r.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\s.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\t.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\u.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\v.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\w.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\wlu.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\x.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\y.txt
c:\documents and settings\Boyd\Application Data\PriceGong\Data\z.txt
.
.
((((((((((((((((((((((((( Files Created from 2012-06-07 to 2012-07-07 )))))))))))))))))))))))))))))))
.
.
2012-06-15 00:42 . 2012-06-15 00:42 -------- d-----w- c:\documents and settings\Boyd\Application Data\HD Tune Pro
2012-06-15 00:42 . 2012-06-15 00:42 -------- d-----w- c:\program files\HD Tune Pro
2012-06-13 00:43 . 2012-06-13 00:43 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
2012-06-13 00:43 . 2012-06-13 00:43 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-04 23:35 . 2009-08-07 01:23 222448 ----a-w- c:\windows\system32\muweb.dll
2012-06-02 21:19 . 2007-04-17 05:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 21:19 . 2007-07-06 18:23 329240 ----a-w- c:\windows\system32\wucltui.dll
2012-06-02 21:19 . 2007-07-06 18:23 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 21:19 . 2007-07-06 18:23 210968 ----a-w- c:\windows\system32\wuweb.dll
2012-06-02 21:19 . 2007-04-17 05:46 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 21:19 . 2007-07-06 18:23 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-06-02 21:19 . 2007-07-06 18:23 35864 ----a-w- c:\windows\system32\wups.dll
2012-06-02 21:19 . 2007-07-06 18:05 97304 ----a-w- c:\windows\system32\cdm.dll
2012-06-02 21:19 . 2007-04-17 05:46 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 21:19 . 2007-04-17 05:45 45080 ----a-w- c:\windows\system32\wups2.dll
2012-06-02 21:19 . 2007-04-17 05:45 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-06-02 21:19 . 2007-07-06 18:23 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-06-02 21:19 . 2007-07-06 18:23 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-06-02 21:18 . 2012-05-10 08:42 275696 ----a-w- c:\windows\system32\mucltui.dll
2012-06-02 21:18 . 2012-05-10 08:42 17136 ----a-w- c:\windows\system32\mucltui.dll.mui
2012-05-31 13:22 . 2007-07-06 18:05 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-15 15:39 . 2007-07-06 18:05 832512 ----a-w- c:\windows\system32\wininet.dll
2012-05-15 13:20 . 2007-07-06 18:05 1863168 ----a-w- c:\windows\system32\win32k.sys
2012-05-04 13:12 . 2007-07-06 18:05 2192640 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-05-04 12:32 . 2004-08-03 22:59 2069120 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-05-02 13:46 . 2007-07-06 18:22 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-04-23 14:46 . 2007-07-06 18:05 78336 ----a-w- c:\windows\system32\ieencode.dll
2012-04-23 14:46 . 2007-07-06 18:05 1830912 ------w- c:\windows\system32\inetcpl.cpl
2012-04-23 14:46 . 2007-07-06 18:05 17408 ------w- c:\windows\system32\corpol.dll
2010-10-22 02:09 . 2010-10-22 02:08 8567024 ----a-w- c:\program files\Firefox Setup 3.6.11.exe
2010-04-13 23:14 . 2009-11-14 04:24 318904 ----a-w- c:\program files\wmpfirefoxplugin.exe
2010-02-14 21:35 . 2011-05-05 04:03 4411392 ----a-w- c:\program files\mplayerc.exe
2010-02-13 04:16 . 2010-02-13 04:16 4938120 ----a-w- c:\program files\Silverlight.exe
2009-02-25 03:25 . 2009-02-25 03:23 9676176 ----a-w- c:\program files\PokerStarsInstall.exe
2012-06-17 20:06 . 2011-11-07 23:48 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2012-05-26_02.23.17 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-30 16:36 . 2012-06-30 16:36 16384 c:\windows\temp\Perflib_Perfdata_460.dat
+ 2012-06-19 11:22 . 2012-06-02 21:19 45080 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.6.7600.256\wups2.dll
+ 2012-06-19 11:22 . 2012-06-02 21:19 35864 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.6.7600.256\wups.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\pngfilt.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\pngfilt.dll
- 2007-07-06 18:05 . 2012-05-26 01:57 68584 c:\windows\system32\perfc009.dat
+ 2007-07-06 18:05 . 2012-06-15 01:01 68584 c:\windows\system32\perfc009.dat
+ 2007-08-14 00:54 . 2012-04-23 14:46 52224 c:\windows\system32\msfeedsbs.dll
- 2007-08-14 00:54 . 2012-03-01 01:25 52224 c:\windows\system32\msfeedsbs.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 27648 c:\windows\system32\jsproxy.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 27648 c:\windows\system32\jsproxy.dll
+ 2007-08-14 00:39 . 2012-04-23 11:33 13824 c:\windows\system32\ieudinit.exe
- 2007-08-14 00:39 . 2012-02-29 12:16 13824 c:\windows\system32\ieudinit.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\iernonce.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\iernonce.dll
- 2007-07-06 18:05 . 2012-02-29 12:16 70656 c:\windows\system32\ie4uinit.exe
+ 2007-07-06 18:05 . 2012-04-23 11:33 70656 c:\windows\system32\ie4uinit.exe
+ 2007-08-14 00:36 . 2012-04-23 14:46 63488 c:\windows\system32\icardie.dll
- 2007-08-14 00:36 . 2012-03-01 01:25 63488 c:\windows\system32\icardie.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 35864 c:\windows\system32\dllcache\wups.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 53784 c:\windows\system32\dllcache\wuauclt.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\dllcache\pngfilt.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 52224 c:\windows\system32\dllcache\msfeedsbs.dll
- 2007-10-30 00:22 . 2012-03-01 01:25 52224 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 27648 c:\windows\system32\dllcache\jsproxy.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-10-30 00:22 . 2012-04-23 11:33 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2007-10-30 00:22 . 2012-02-29 12:16 13824 c:\windows\system32\dllcache\ieudinit.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 44544 c:\windows\system32\dllcache\iernonce.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 78336 c:\windows\system32\dllcache\ieencode.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 78336 c:\windows\system32\dllcache\ieencode.dll
+ 2007-07-06 18:05 . 2012-04-23 11:33 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2007-07-06 18:05 . 2012-02-29 12:16 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2007-10-30 00:22 . 2012-03-01 01:25 63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 17408 c:\windows\system32\dllcache\corpol.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 17408 c:\windows\system32\dllcache\corpol.dll
+ 2007-07-06 18:05 . 2012-06-02 21:19 97304 c:\windows\system32\dllcache\cdm.dll
+ 2012-06-28 06:18 . 2012-06-28 06:18 22016 c:\windows\Installer\35cd20cd.msi
+ 2012-06-15 00:31 . 2012-03-01 01:25 44544 c:\windows\ie7updates\KB2699988-IE7\pngfilt.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 52224 c:\windows\ie7updates\KB2699988-IE7\msfeedsbs.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 27648 c:\windows\ie7updates\KB2699988-IE7\jsproxy.dll
+ 2012-06-15 00:31 . 2012-02-29 12:16 13824 c:\windows\ie7updates\KB2699988-IE7\ieudinit.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 44544 c:\windows\ie7updates\KB2699988-IE7\iernonce.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 78336 c:\windows\ie7updates\KB2699988-IE7\ieencode.dll
+ 2012-06-15 00:31 . 2012-02-29 12:16 70656 c:\windows\ie7updates\KB2699988-IE7\ie4uinit.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 63488 c:\windows\ie7updates\KB2699988-IE7\icardie.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 17408 c:\windows\ie7updates\KB2699988-IE7\corpol.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\3b34fc2c8c94ffe21f75168980b69dfe\System.Web.DynamicData.Design.ni.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2012-05-10 13:23 . 2012-05-10 13:23 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2718704\update\spcustom.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2718704\spmsg.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2012-05-10 13:24 . 2012-05-10 13:24 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 233472 c:\windows\system32\webcheck.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 233472 c:\windows\system32\webcheck.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 106496 c:\windows\system32\url.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 106496 c:\windows\system32\url.dll
+ 2007-07-06 18:05 . 2012-06-15 01:01 435688 c:\windows\system32\perfh009.dat
- 2007-07-06 18:05 . 2012-05-26 01:57 435688 c:\windows\system32\perfh009.dat
- 2007-07-06 18:05 . 2012-03-01 01:25 102912 c:\windows\system32\occache.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 102912 c:\windows\system32\occache.dll
+ 2012-05-26 03:03 . 2012-04-05 00:47 772504 c:\windows\system32\npDeployJava1.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 671232 c:\windows\system32\mstime.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 671232 c:\windows\system32\mstime.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 193024 c:\windows\system32\msrating.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 193024 c:\windows\system32\msrating.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 479744 c:\windows\system32\mshtmled.dll
+ 2007-08-14 00:54 . 2012-04-23 14:46 496128 c:\windows\system32\msfeeds.dll
+ 2012-05-26 03:03 . 2012-04-05 00:47 227720 c:\windows\system32\javaws.exe
+ 2012-05-26 03:03 . 2012-05-26 03:02 174024 c:\windows\system32\javaw.exe
+ 2012-05-26 03:03 . 2012-05-26 03:02 174024 c:\windows\system32\java.exe
- 2007-08-14 00:34 . 2012-03-01 01:25 268288 c:\windows\system32\iertutil.dll
+ 2007-08-14 00:34 . 2012-04-23 14:46 268288 c:\windows\system32\iertutil.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 192512 c:\windows\system32\iepeers.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 192512 c:\windows\system32\iepeers.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 384512 c:\windows\system32\iedkcs32.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 384512 c:\windows\system32\iedkcs32.dll
- 2007-07-11 18:27 . 2012-03-01 01:25 380928 c:\windows\system32\ieapfltr.dll
+ 2007-07-11 18:27 . 2012-04-23 14:46 380928 c:\windows\system32\ieapfltr.dll
+ 2007-07-06 18:05 . 2012-04-22 06:39 161792 c:\windows\system32\ieakui.dll
- 2007-07-06 18:05 . 2012-02-29 10:59 161792 c:\windows\system32\ieakui.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 230400 c:\windows\system32\ieaksie.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 230400 c:\windows\system32\ieaksie.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 153088 c:\windows\system32\ieakeng.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 153088 c:\windows\system32\ieakeng.dll
+ 2007-07-06 11:14 . 2012-06-15 01:10 134872 c:\windows\system32\FNTCACHE.DAT
- 2007-07-06 11:14 . 2012-05-20 17:00 134872 c:\windows\system32\FNTCACHE.DAT
+ 2007-07-06 18:05 . 2012-04-23 14:46 133120 c:\windows\system32\extmgr.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 133120 c:\windows\system32\extmgr.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 214528 c:\windows\system32\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 214528 c:\windows\system32\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 347136 c:\windows\system32\dxtmsft.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 347136 c:\windows\system32\dxtmsft.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 210968 c:\windows\system32\dllcache\wuweb.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 329240 c:\windows\system32\dllcache\wucltui.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 577048 c:\windows\system32\dllcache\wuapi.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 832512 c:\windows\system32\dllcache\wininet.dll
+ 2007-07-06 18:05 . 2012-05-15 15:39 832512 c:\windows\system32\dllcache\wininet.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 233472 c:\windows\system32\dllcache\webcheck.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 106496 c:\windows\system32\dllcache\url.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 106496 c:\windows\system32\dllcache\url.dll
+ 2011-08-11 03:40 . 2012-05-02 13:46 139656 c:\windows\system32\dllcache\rdpwd.sys
+ 2007-07-06 18:05 . 2012-04-23 14:46 102912 c:\windows\system32\dllcache\occache.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 102912 c:\windows\system32\dllcache\occache.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 671232 c:\windows\system32\dllcache\mstime.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 671232 c:\windows\system32\dllcache\mstime.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 193024 c:\windows\system32\dllcache\msrating.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 193024 c:\windows\system32\dllcache\msrating.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 479744 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 496128 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-07-06 18:23 . 2012-04-22 06:40 634488 c:\windows\system32\dllcache\iexplore.exe
+ 2007-10-30 00:22 . 2012-04-23 14:46 268288 c:\windows\system32\dllcache\iertutil.dll
- 2007-10-30 00:22 . 2012-03-01 01:25 268288 c:\windows\system32\dllcache\iertutil.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 192512 c:\windows\system32\dllcache\iepeers.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 192512 c:\windows\system32\dllcache\iepeers.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 384512 c:\windows\system32\dllcache\iedkcs32.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 384512 c:\windows\system32\dllcache\iedkcs32.dll
- 2007-10-30 00:22 . 2012-03-01 01:25 380928 c:\windows\system32\dllcache\ieapfltr.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 380928 c:\windows\system32\dllcache\ieapfltr.dll
- 2007-07-06 18:05 . 2012-02-29 10:59 161792 c:\windows\system32\dllcache\ieakui.dll
+ 2007-07-06 18:05 . 2012-04-22 06:39 161792 c:\windows\system32\dllcache\ieakui.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 153088 c:\windows\system32\dllcache\ieakeng.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 133120 c:\windows\system32\dllcache\extmgr.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 347136 c:\windows\system32\dllcache\dxtmsft.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 347136 c:\windows\system32\dllcache\dxtmsft.dll
+ 2011-09-03 10:17 . 2012-05-31 13:22 599040 c:\windows\system32\dllcache\crypt32.dll
- 2011-09-03 10:17 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 124928 c:\windows\system32\dllcache\advpack.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 124928 c:\windows\system32\dllcache\advpack.dll
+ 2010-07-15 04:32 . 2012-04-05 00:47 687504 c:\windows\system32\deployJava1.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 124928 c:\windows\system32\advpack.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 124928 c:\windows\system32\advpack.dll
- 2012-01-31 09:38 . 2012-01-31 09:38 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-04-21 13:15 . 2012-04-21 13:15 630784 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2012-04-22 03:55 . 2012-04-22 03:55 980480 c:\windows\Installer\2da5543e.msp
+ 2012-05-26 03:04 . 2012-05-26 03:04 176128 c:\windows\Installer\103873c4.msi
+ 2012-05-26 03:03 . 2012-05-26 03:03 457216 c:\windows\Installer\103873b0.msi
+ 2012-05-26 03:02 . 2012-05-26 03:02 863744 c:\windows\Installer\103873ac.msi
+ 2012-06-15 00:31 . 2012-03-01 01:25 832512 c:\windows\ie7updates\KB2699988-IE7\wininet.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 233472 c:\windows\ie7updates\KB2699988-IE7\webcheck.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 106496 c:\windows\ie7updates\KB2699988-IE7\url.dll
+ 2012-06-15 00:32 . 2012-03-08 15:40 382840 c:\windows\ie7updates\KB2699988-IE7\spuninst\updspapi.dll
+ 2012-06-15 00:32 . 2012-03-08 15:40 231288 c:\windows\ie7updates\KB2699988-IE7\spuninst\spuninst.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 102912 c:\windows\ie7updates\KB2699988-IE7\occache.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 671232 c:\windows\ie7updates\KB2699988-IE7\mstime.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 193024 c:\windows\ie7updates\KB2699988-IE7\msrating.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 478720 c:\windows\ie7updates\KB2699988-IE7\mshtmled.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 468480 c:\windows\ie7updates\KB2699988-IE7\msfeeds.dll
+ 2012-06-15 00:31 . 2012-02-29 11:01 634680 c:\windows\ie7updates\KB2699988-IE7\iexplore.exe
+ 2012-06-15 00:31 . 2012-03-01 01:25 268288 c:\windows\ie7updates\KB2699988-IE7\iertutil.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 192512 c:\windows\ie7updates\KB2699988-IE7\iepeers.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 384512 c:\windows\ie7updates\KB2699988-IE7\iedkcs32.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 380928 c:\windows\ie7updates\KB2699988-IE7\ieapfltr.dll
+ 2012-06-15 00:31 . 2012-02-29 10:59 161792 c:\windows\ie7updates\KB2699988-IE7\ieakui.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 230400 c:\windows\ie7updates\KB2699988-IE7\ieaksie.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 153088 c:\windows\ie7updates\KB2699988-IE7\ieakeng.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 133120 c:\windows\ie7updates\KB2699988-IE7\extmgr.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 214528 c:\windows\ie7updates\KB2699988-IE7\dxtrans.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 347136 c:\windows\ie7updates\KB2699988-IE7\dxtmsft.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 124928 c:\windows\ie7updates\KB2699988-IE7\advpack.dll
+ 2012-06-15 01:22 . 2012-06-15 01:22 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\86e11a59f02b2dda27ec2e7cba351744\WindowsFormsIntegration.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\698c2093d7ac57af935b399d1c0b1790\System.Web.Routing.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\75248baf640115daeb0e580f1c5ff98b\System.Web.Extensions.Design.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\40c3b61ac38613e2b4b0f196e86185eb\System.Web.Entity.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\39cc9a830f7f08fd9f397be452fd78b0\System.Web.Entity.Design.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\88b1fd4792e7b698b788594d8e5e3c09\System.Web.DynamicData.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\6333d22a2ea347432d46c40d93194c68\System.Web.Abstractions.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b84bb74d7724e147a642a1d5358feb7\System.ServiceProcess.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\96a3fc1f74a00b618b70bd1701600408\System.Drawing.Design.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\badd66e1d2b8416e9bb868ad059203c6\System.Configuration.Install.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\c0045c1c7c29c7e7cc7bd60001b729a7\AspNetMMCExt.ni.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 630784 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2012-05-10 13:23 . 2012-05-10 13:23 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2012-06-05 04:11 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2718704$\spuninst\updspapi.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2718704$\spuninst\spuninst.exe
+ 2012-06-05 04:11 . 2011-09-28 07:06 599040 c:\windows\$NtUninstallKB2718704$\crypt32.dll
+ 2012-06-05 04:11 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2718704\update\updspapi.dll
+ 2012-06-05 04:11 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2718704\update\update.exe
+ 2012-06-05 04:11 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2718704\spuninst.exe
+ 2012-05-31 13:19 . 2012-05-31 13:19 599552 c:\windows\$hf_mig$\KB2718704\SP3QFE\crypt32.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 1168896 c:\windows\system32\urlmon.dll
- 2007-07-06 18:05 . 2012-03-01 01:25 1168896 c:\windows\system32\urlmon.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 3618816 c:\windows\system32\mshtml.dll
+ 2007-08-14 00:54 . 2012-04-23 14:46 6105088 c:\windows\system32\ieframe.dll
+ 2007-07-06 18:23 . 2012-06-02 21:19 1933848 c:\windows\system32\dllcache\wuaueng.dll
+ 2008-10-14 18:10 . 2012-05-15 13:20 1863168 c:\windows\system32\dllcache\win32k.sys
- 2007-07-06 18:05 . 2012-03-01 01:25 1168896 c:\windows\system32\dllcache\urlmon.dll
+ 2007-07-06 18:05 . 2012-04-23 14:46 1168896 c:\windows\system32\dllcache\urlmon.dll
- 2009-04-15 06:47 . 2012-04-11 13:10 2192640 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-04-15 06:47 . 2012-05-04 13:12 2192640 c:\windows\system32\dllcache\ntoskrnl.exe
+ 2009-04-15 06:47 . 2012-05-04 12:32 2026496 c:\windows\system32\dllcache\ntkrpamp.exe
- 2009-04-15 06:47 . 2012-04-11 12:35 2026496 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-02-08 01:02 . 2012-05-04 12:32 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-02-08 01:02 . 2012-04-11 12:35 2069120 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2009-04-15 06:47 . 2012-05-04 13:16 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2009-04-15 06:47 . 2012-04-11 13:14 2148352 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2007-07-06 18:05 . 2012-04-23 14:46 3618816 c:\windows\system32\dllcache\mshtml.dll
+ 2007-10-30 00:22 . 2012-04-23 14:46 6105088 c:\windows\system32\dllcache\ieframe.dll
+ 2012-03-20 11:23 . 2012-03-20 11:23 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
- 2011-12-25 09:50 . 2011-12-25 09:50 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2012-03-20 11:23 . 2012-03-20 11:23 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
- 2008-07-25 17:17 . 2008-07-25 17:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2012-03-21 05:57 . 2012-03-21 05:57 6188544 c:\windows\Installer\2d7eb1ed.msp
+ 2012-06-15 00:31 . 2012-03-01 01:25 1168896 c:\windows\ie7updates\KB2699988-IE7\urlmon.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 3616768 c:\windows\ie7updates\KB2699988-IE7\mshtml.dll
+ 2012-06-15 00:31 . 2012-03-01 01:25 6076928 c:\windows\ie7updates\KB2699988-IE7\ieframe.dll
- 2009-04-15 06:47 . 2012-04-11 13:10 2192640 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-04-15 06:47 . 2012-05-04 13:12 2192640 c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2009-04-15 06:47 . 2012-04-11 12:35 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-04-15 06:47 . 2012-05-04 12:32 2026496 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2009-02-08 01:02 . 2012-04-11 12:35 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-02-08 01:02 . 2012-05-04 12:32 2069120 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-04-15 06:47 . 2012-05-04 13:16 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2009-04-15 06:47 . 2012-04-11 13:14 2148352 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2012-06-15 01:34 . 2012-06-15 01:34 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bd5bd406670d483b82bd51249eee59e3\System.WorkflowServices.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\77361ebe9ad8ff77cc9a8d7f8363eb05\System.Workflow.Runtime.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\1c12dfa7826b331b243b7b45daf9904d\System.Workflow.ComponentModel.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\514bf0e69e2c9fc8509cd23236057356\System.Workflow.Activities.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e70343406253e43964f9fe1f42cfbd7c\System.Web.Services.ni.dll
+ 2012-06-15 01:34 . 2012-06-15 01:34 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\77f8cde07b131839f1841be702837e8e\System.Web.Mobile.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 2405888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\242b168aaca18197eca371ec269e23ac\System.Web.Extensions.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\d380f1813e27c2a086e62f0218669d67\System.Printing.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 1592320 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\d86f2038209a4cf0d0f5b30f6375c9b2\System.Drawing.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\7a53d68ad544f8e9edfdbd5a90a48fd3\System.Deployment.ni.dll
+ 2012-06-15 01:07 . 2012-06-15 01:07 2146304 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\443dd7f0b84c3de54b1a72be655e307c\ReachFramework.ni.dll
+ 2012-06-15 01:07 . 2012-06-15 01:07 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\48ddcafff1a5603fb3289e90330275c0\PresentationUI.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\359fd69eb60e9844ffd497e92345178c\Microsoft.VisualBasic.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\4e463dcf2a03c71913a61b44c32e2389\Microsoft.Build.Tasks.ni.dll
+ 2012-06-15 01:32 . 2012-06-15 01:32 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\395b4a85c7941ac4dd9d1c6f5eb444c7\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 3186688 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2012-05-10 13:23 . 2012-05-10 13:23 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2012-06-15 01:00 . 2012-06-15 01:00 5246976 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2012-05-10 13:24 . 2012-05-10 13:24 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2012-06-15 01:01 . 2012-06-15 01:01 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2007-08-18 03:00 . 2012-06-15 00:38 56731752 c:\windows\system32\MRT.exe
+ 2012-06-15 01:14 . 2012-06-15 01:14 12433920 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\01abbadafaf265d9f4ac9bbb247acb98\System.Windows.Forms.ni.dll
+ 2012-06-15 01:33 . 2012-06-15 01:33 11817472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\dbc413807cb7360b3e26ef3ca1d54f9a\System.Web.ni.dll
+ 2012-06-15 01:08 . 2012-06-15 01:08 10682368 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f73a8455f384e90f6925309336fece24\System.Design.ni.dll
+ 2012-06-15 01:06 . 2012-06-15 01:06 14329856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e4ecfaaf5417aceecb7fa8abddf06113\PresentationFramework.ni.dll
+ 2012-06-15 01:05 . 2012-06-15 01:05 12218368 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f33e2a4d9b385234406fa2d662f78875\PresentationCore.ni.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
2011-05-09 09:49 176936 ----a-w- c:\program files\Vuze_Remote\prxtbVuz0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{BA14329E-9550-4989-B3F2-9732E92D17CC}"= "c:\program files\Vuze_Remote\prxtbVuz0.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-10-19 204288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-12-09 32768]
"InCD"="c:\program files\Ahead\InCD\InCD.exe" [2004-09-07 1400944]
"SoundMan"="SOUNDMAN.EXE" [2006-03-01 577536]
"VTTimer"="VTTimer.exe" [2005-03-07 53248]
"VTTrayp"="VTtrayp.exe" [2006-07-10 176128]
"PhoneTray"="c:\program files\Traysoft\PhoneTray\PhoneTray.exe" [2007-06-15 430640]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-19 202256]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-03-25 2145000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-17 252296]
.
c:\documents and settings\Boyd\Start Menu\Programs\Startup\
Picture Motion Browser Media Check Tool.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-10-12 385024]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2003-4-6 147456]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"f:\\Dream Box\\DCC.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"62525:TCP"= 62525:TCP:vuze
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [3/24/2010 8:31 PM 114984]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [3/24/2010 8:33 PM 95872]
R2 DLPortIO;DriverLINX Port I/O Driver;c:\windows\system32\drivers\DLPORTIO.sys [10/25/2007 9:13 PM 3584]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [3/24/2010 8:31 PM 810120]
R2 lowpp;Lowrance MMC Parallel Port Driver;c:\windows\system32\drivers\lowpp.sys [5/26/2008 8:16 PM 7787]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [10/20/2009 12:19 PM 50704]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [7/23/2007 9:24 PM 47360]
S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]
S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]
S2 gupdate1cac795a54b50dd;Google Update Service (gupdate1cac795a54b50dd);c:\program files\Google\Update\GoogleUpdate.exe [3/19/2010 12:54 PM 133104]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [3/19/2010 12:54 PM 133104]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [5/8/2012 9:17 PM 113120]
S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\TfNetMon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2007-11-24 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 1200 series5E771253C1676EBED677BF361FDFC537825E15B8187974490.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-06 06:52]
.
2012-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-19 18:54]
.
2012-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-19 18:54]
.
2012-07-02 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1004336348-261478967-1801674531-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 04:09]
.
2012-07-02 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1004336348-261478967-1801674531-1004.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-25 04:09]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://hotmail.com/
uInternet Settings,ProxyServer = 85.17.92.29:3128
IE: Crawler Search - tbr:iemenu
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1 142.165.200.5 142.165.21.5
FF - ProfilePath - c:\documents and settings\Boyd\Application Data\Mozilla\Firefox\Profiles\4bepqfxl.default\
FF - prefs.js: browser.search.selectedEngine - Search Results
FF - prefs.js: browser.startup.homepage - hxxp://google.com/
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=315&systemid=1&q=
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-07-07 10:35
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]
@Denied: (2) (LocalSystem)
"AppDataDir"="c:\\Documents and Settings\\All Users\\Application Data\\ESET\\ESET NOD32 Antivirus\\"
"DataDir"="ESET\\ESET NOD32 Antivirus\\"
"EditionName"=" "
"InstallDir"="c:\\Program Files\\ESET\\ESET NOD32 Antivirus\\"
"LanguageId"=dword:00000409
"PackageTag"=dword:6090e758
"ProductBase"=dword:00000000
"ProductCode"="{08B857DF-E6F9-4283-853A-4F329CC09A4F}"
"ProductName"="ESET NOD32 Antivirus"
"ProductType"="eav"
"ProductVersion"="4.2.40.0"
"UniqueId"="003191254D784F1B"
"ScannerBuild"=dword:00001a9b
"ScannerVersionId"=dword:0000136c
"ScannerVersion"="Locked/open ESET for status."
"ei2"=hex(b):d9,9e,5a,34,3e,2e,88,6f
"ei1"=hex(b):00,19,66,11,c9,7f,00,00
"ei3"=hex(b):88,7b,79,4d,00,00,00,00
"ei4"=dword:00000000
.
[HKEY_LOCAL_MACHINE\software\Microsoft\DbgagD\1*]
"value"="?\0a\04\06\00)\1d?"
.
Completion time: 2012-07-07 10:39:43
ComboFix-quarantined-files.txt 2012-07-07 16:39
ComboFix2.txt 2012-05-26 02:28
ComboFix3.txt 2012-01-24 03:59
ComboFix4.txt 2011-12-16 04:51
ComboFix5.txt 2012-07-07 16:16
.
Pre-Run: 50,433,560,576 bytes free
Post-Run: 51,014,848,512 bytes free
.
- - End Of File - - 07DDFEA07C6F3DCABACD17C0D0C788DB

Re: windows virtual memory to low8th July 2012, 10:27 am

Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

Slow computer
Error messages
Fake antivirus alerts or the icon in the system tray
svchost.exe running at 100%
System crashes or blue screen of death

Re: windows virtual memory to low8th July 2012, 6:01 pm

DragonMaster Jay wrote:

Any more issues?

We need to know any other issues that are plaguing your computer. Kindly give a summary so we know how to continue from here.

Many of the things to note for us would be:

Slow computer ( yes very slow)
Error messages ( no, error messages)
Fake antivirus alerts or the icon in the system tray(none)
svchost.exe running at 100%(not sure how to check this,there are 10 of these under the process tab in the manager)
System crashes or blue screen of death

( none of these)

Re: windows virtual memory to low8th July 2012, 7:50 pm

Any other messages about virtual memory?

Re: windows virtual memory to low8th July 2012, 10:34 pm

no, not anymore

Re: windows virtual memory to low9th July 2012, 6:48 pm

Awesome!

Clean up System Restore

Now, to get you off to a clean start, we will be creating a new Restore Point, then clearing the old ones to make sure you do not get reinfected, in case you need to "restore back."

Select Start > All Programs > Accessories > System tools > System Restore.
On the dialogue box that appears select Create a Restore Point
Click NEXT
Enter a name e.g. Clean
Click CREATE

You now have a clean restore point, to get rid of the bad ones:

Select Start > All Programs > Accessories > System tools > Disk Cleanup.
In the Drop down box that appears select your main drive e.g. C
Click OK
The System will do some calculation and the display a dialogue box with TABS
Select the More Options Tab.
At the bottom will be a system restore box with a CLEANUP button click this
Accept the Warning and select OK again, the program will close and you are done

Run OTC to remove our tools

To remove all of the tools we used and the files and folders they created, please do the following:
Please download OTC.exe by OldTimer:

Save it to your Desktop.
Double click OTC.exe.
Click the CleanUp! button.
If you are prompted to Reboot during the cleanup, select Yes.
The tool will delete itself once it finishes.

Note: If any tool, file or folder (belonging to the program we have used) hasn't been deleted, please delete it manually.

Purge old temporary files

Please download TFC by OldTimer to your desktop

Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
It will close all programs when run, so make sure you have saved all your work before you begin.
Click the Start
button to begin the process. Depending on how often you clean temp
files, execution time should be anywhere from a few seconds to a minute
or two. Let it run uninterrupted to completion.
Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

Security Check

Please download Security Check by screen317 from SpywareInfoforum.org or Changelog.fr.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Tell me in your next reply, if you have completed these tasks:

Cleaned System Restore
Ran OTC
Ran TFC
Ran Security Check

Also, let me know how your computer is running, and don't forget to post the contents of the Security Check log.

Re: windows virtual memory to low10th July 2012, 4:28 am

cleaned system restore (done)
ran otc (done)
ran tfc (done)
ran security check (done)
log file: Results of screen317's Security Check version 0.99.42
Windows XP Service Pack 3 x86
Internet Explorer 7 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
ESET NOD32 Antivirus
`````````Anti-malware/Other Utilities Check:`````````
JavaFX 2.1.0
Java(TM) 7 Update 4
Java version out of Date!
Adobe Flash Player 10 Flash Player out of Date!
Adobe Flash Player 10.3.183.7 Flash Player out of Date!
Adobe Reader 8 Adobe Reader out of Date!
Mozilla Firefox (13.0.1)
Mozilla Thunderbird (12.0.1)
Google Chrome 19.0.1084.56
Google Chrome 20.0.1132.47
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:: 19% Defragment your hard drive soon!
````````````````````End of Log``````````````````````

was my computer infected?? I will let you know how it is running.

Re: windows virtual memory to low10th July 2012, 7:46 pm

Yes it was infected.

Download Secunia PSI to stay updated for your software: http://secunia.com/vulnerability_scanning/personal/

Let me know of anymore questions.

Personal Tips on Preventing Malware

See this page for more info about malware and prevention.

Please consider optionally donating to me to help boost my individual services on the site.

Any other questions before I mark this topic solved?

Last edited by DragonMaster Jay on 11th July 2012, 8:53 am; edited 1 time in total

Re: windows virtual memory to low11th July 2012, 4:19 am

my computer doesn't seem to running any faster.
thank you for the help

Re: windows virtual memory to low11th July 2012, 8:53 am

What is your processor speed and RAM amount?

Re: windows virtual memory to low11th July 2012, 3:20 pm

2.42 GHz, 960 MB of ram

Re: windows virtual memory to low11th July 2012, 6:06 pm

We'll take a look at startup here and see if we can boost a bit...

Please download: HijackThis to your Desktop.

Double Click the HijackThis icon, located on your Desktop.
By Default, it will install to: C:\Program Files\Trend Micro\HijackThis
It will also create a shortcut on your Desktop.
Accept the license agreement.
Click Do a System Scan and Save a Logfile.
Please post the log in your next reply.

Re: windows virtual memory to low12th July 2012, 8:57 pm

��ࡱ��>��
��e��L��
��
�� !��"��#��$��%��&��'��(��)��*��+��,��-��.��/��0��1��2��3��4��5��6��7��8��9��:��;��<��=��>��?��@��A��B��C��D��E��F��G��H��I��J��K��L��M��N��O��P��Q��R��S��T��U��V��W��X��Y��Z��[��\��]��^��_��`��a��b��c��d��e��f��g��h��i��j��k��l��m��n��o��p��q��r��s��t��u��v��w��x��y��z��{��|��}��~��R�o�o�t� �E�n�t�r�y��F��Э�׈��\��=��A�D/B�AdA��"�� S�u�m�m�a�r�y�I�n�f�o�r�m�a�t�i�o�n��(��@H�?�C�A�E�D1H�� x��
��
�� !��"��#��$��%��&��'��(��)��*��+��,��-��.��/��0��1��2��3��4��5��6��7��8��9��:��;��<��=��>��?��@��A��B��C��D��E��F��K��L��M��N��O��P��Q��R��S��T��U��W��X��Y��Z��[��\��]��^��_��`��a��b��c��d��e��f��h��i��j��k��m��n��o��p��u��v��w��x��y��z��|��}��~��Ġo�f|��Z?�0Y9�ݬqR�{��ޫ:[�6DU��(�
��b��s��Q)1W�R�+��R7�iY�;�P�t�R��v��x|p�`��00<��U��_�1��U.x*��_��Y�rSR��mo��^��*D��:N��5+�X��Z�'�U��9V�s�_F-��/d55�= Pyk6x61|��=5�Jd�+��b�s9�P�ǖد�=�H!f��?Y@S\��G�G�\z�Q�QǙU��8�@r�Nc<��Mb�un�pj��LbN|�ÅE�*ܮ�p��2'��(��vk�a��)9�Z��Hd勵N�dcM\��J7!YC܃>�UվK��VN�d�.F�P�8�(;��H^�V�}��
ޏEg�]��,O܁U%95
�/�իşOO��5�]��x@R��7�(��>��P�$?�$A��񺄼��K).�7.v�{�Ը2�X��ᵡ�FH��o;� MO�E��7��5m�h��>�g��!<3�h�?6zC��y{r�Q�|�Hͧ�k�'�=��Ŏ��>�S�4)�2�O�wӺ��Q��+@�{'�� xO��+ЛT�U��W�+J��kH��S�t��+�s�˫dF��K�RPpn�s��/<_�^��<��g�0�9n�R�O'�OVL�7�1}0}{:Es��F�?�)U��?��#�r ,�>��t��`5��=]�yG��2%s$9�N�Ǹ�$��\�uv��6�3�N��)$* �Y�?�7HݨA�ZH�?5��w�[�˽m��7_��5��6=��'n@5!A��$d�� 森Σw$1=e}9M�Pa�
�5K��>��q� ��s�YM��>U\-m��9m\�ܬiJ�X��˴�U%��V�_��%��ȡKڨ��q b�Rz�h��m;��dzBՂ��?db��L�ct��U毿$�oYg`��o�ap�@��_l��J�e` �+cd��m��W��^��˞�ӱ^4�}M�[Q��$��^�{j�߇�w~�~��[�ߡ��.�Fw�H��"(pbuC�*|�?��2
��ع��ݼd��$.�b>P�1Ʊ�ӟ �"��'D�ܛts��iR��s��!��_�<��!��},C� ��0�q>��Ɯ��W�ѥ6��i��*(��A�jհb�?P�9{�PH�U��v��>��9O�̃/IŔV^��&��_Q_�Ĝ�4=�-gv�R��j]%�™ZşF4�"�C�C�L2~�P�w�3��g�.ym��2��:~%��K��%5y��X]8�R��zޥp�{<_^t:��"]R�
�l�+A?�$0r��k\kD��/}�SVx��^�VٮDz.{qv��pr�K>$H��(�.k�4�ǭ2�z��z�d|et;�&�;2�M�W�O��5�lw�L(�z��F�7�*��!��1��
��JV��2��u�l�5�� \�r$��0�7�S�
>EU3�0��l��M6L�N7��9ӭ�B�Ɖ�ycG�~4��r��ɿ`mh[@�`#R˴ۙ��Ov��v��{��'��:]-��iϾ��cOwdM[��:�e��ׯTb�5O�V�=��q�Z"��I�b�W��]�[��v6�e��y��Q��-��m�X$nt��=��w�v��r�g+�,{�<��^�#M��{�w޾��`��m��y��D�%�1��e`�+��f��q�G3wK��Z`ط�ӄ�"rǴ�bi�t��g"��=��f��WT�M;.��$9��m�7��$�0��<}�f�I��ͧϣ@��0㊦�Ž�WGF,#�ǝ��3A<[��P�2�6F��s: !슱�ߚMSCF��,��J��yJ.Gn{��CK��wT_�6�&�� =�� %�H�%A��k� -��A�*PQP��tDE)��[~�{׺wݿ�Ś��9g��~��|��
�؀��C��63��?��r��u��#�T%�L� �B�EG�c�a��h1a�wCD�C�P||܊�{��'�_��;��n��uy��v%�D]�?��b
9�YAv�
��ǹ%��f��&� Mq�B�� ;��5o��=��&D�׵�}�~��D�EA��qE��w6o��e/��f��c�T`�@;��l�k�Fl�O��o,�b�1!G?��u�F`o��n�� O7��N��8�F��]�T��y_�b��0H�x�s��m@��?CF�e��/�Y�~��H��ci�|��)l� ��sK*Ƿ�3�=.Ny�3G�{Ž�^"��҆1R�>�|��3@*�J�-|�~G�K
r�R
+W��'�#�g��Rm��SS��4�|�9$��mj��LW:��Vw/Y��(g�bG濺��ԾK��5''Ӌ=f��Z��Ne�&֏��_q�q��\�K+_��=��Z��Nv�u1��
L��$j�h}��<��AM�S��2l@,��r$#��YTg��ʗ~�^<~��µ�"[�ke�2�L�맮�TxU�'�o��_�m��ش�6�`�:��8�}ճBy�1m~��@��y��Q��4�1a9��/�0yv��6g��]e��eO&pi?��k1�z[�[�[}b0\yӾǊ/�{�ycs:9h��W~��UH�צ?�7�S��
�3%��/�C��ʴ�;��@�`־�.�'"��'��H�SF��k�?�_X��m�Ch��<[�SH��7�[}��2��+�߮�Ym��髐��z�� 1�u �}�e��x70��D:�wE��/��f�OM}9�K�� k��M��%�d��M��
���e �Yժb�aM�ڤ�z9r��K�Y�y~��C��L��B��J,~WD��ܽ�e�N-|�ɢ�C�ך��Z��+:�tOGV��K_��M�O��(��j�qn�A�T�~��+H��UŸ#��U�]��8�<ƣ�S�b<��H`G�󰪈p�Rc��
k�1�|�OB湋,��[�`$��5�5��&ި�$K�5��T�R��8A�,[�/��v�
��T-��m%�v�v]ƞ�Wz%��WuEe�:5 �_��~L|M��֍�y�d��h�l{�`/hk/�<��"�@j�3nB�c��5��P�P:_��n�
�<[�{��Q��-�a�p�`��>)�t��ʈć{4��;7��K��>��]��Uh�)B�(�M�*��.�X4��U��ìq�WWi��ɦ��<��kk�>dLI`��b��J�ΐ*g��kn�W�{�;�۴�GXQ�L�Eq��x�v_w�G�GO�O�+'�r��+K��]��ڂ�L��R�s&��%6߉ۥ�g��!��@{?��|�w|��R��$��X�-��y4��/�}w��G� �
�9��9�� y�o�I�7�|�p�,��n��a�~�JgSf��W��]/��kq�Ѩ��|4��+Y�N���>�S$8$��K�R�Qv$r�[��*�-�l!��o5�� "�U��$�-��
��{Ę��^�P|�D�V��a�r-�)�mu��BՔ�Wb�x��+U��v�!��f;R3�*y��ݱ\;!��k��O�:R�=��u==}�ږ��Fc)��)tC9��?�Q"^k< ��]��
Ԥ�
2t�t0��>g ˠ�~��tn�#��^��óx�W6�<Rag ��cbR�ZV�Y�b�@��zb��]��ƭ,��d}�_��x��N��ݬ��[?�y�5q��i�xx�K�pW7�oL��ʐ{��xx�~�w�I�S�>L��I��y?;��w�v�|C`|r�M�X�;�e%$4,��M8h%�dG�OC��F��H\�x��#r�\�;:�N��+�[�%~&� �,=<�~6)�8��Ca��y�c�i��tT�2�<��
W��?-�s��b/��s��b�*IEzŀ�㐒�w�$_u�F]�tC�za�%�{9�,�ʌ��"��/�]��^�l
?��㟲��@%�V涃l\�l�sV�{��}�� =��j;��ʖ��օ�(
Tl��5��2Di�U��6��y�q�f�ݮ6YW�֨��8�B/=��4I��"��8�l��v5�ͫ団:;��o�%$�U��[k�r�1Mj��'��Һd9*�ck,kyG��k��y�@�\d�}ޠcl;^2��X��5\]��w��.�u_��yۗG�'��4ܺ�
�ˍ��_�L"W�W�Ն`˔۝�^�� 8��a�K��M�_��H˭��z^r9�7��U&��_P1�[��9sv�ổi��ׅ�K��{I&
UI��o3/}��Jb�3|G��5��.]&?��sY��*�u@c��7��㛀�y�Y�U��;ow8*Z��}~VA��"��[��V4��_4��!�~�tlo�?�j��ɶ��E-8�}Ă�ԛy:_:�C�2��x�b��de��U�� ȟ�[��Z�#��`�'a��ffe�h��!�_G,~�KgG2�M[%�$��&ïR��bq�Τi��rz��T�-�,\rD@��.LAT��@\��_t��&�*: 5�p��޼?��c��
�?C��|�Eё�-��N�Gx�|�
mt�vs�ݑ^[Z��<��OfSvB.�g+C�OTKT'�U��S��hSWl�NrK��h
��
this is what i get when i click on the link, weird huh.

Re: windows virtual memory to low13th July 2012, 10:30 am

Save the file, then. Right-click on the link and select Save Target As... or Save link as... choose the Desktop, and hit Save.

Re: windows virtual memory to low17th July 2012, 12:55 am

still can't get it to work,

Re: windows virtual memory to low17th July 2012, 10:14 am

Please download SilentRunners

Save it to the desktop.
Run Silent Runner's by clicking on the "Silent Runners" icon on your desktop.
You will receive a prompt: Do you want to skip supplementary searches? click NO
If you receive an error just click OK and click it to run it again.
A text file will appear on your desktop - it may take a while to complete its run
Once you receive the prompt All Done!, open the text , copy that entire log, and paste it here.

*NOTE* If you receive any warning message about scripts, please choose to allow the script to run.

Re: windows virtual memory to low17th July 2012, 11:55 pm

i click on the link but i don't get any to save to the desktop, it opens up to a bunch of writing.

Re: windows virtual memory to low18th July 2012, 8:46 pm

Sorry that happened.

Right-click on the link above, and select Save link as... or Save target as...

choose the Desktop and hit Save.

Run that and post the log, please.

Re: windows virtual memory to low19th July 2012, 1:31 am

Here's the log:
"Silent Runners.vbs", revision 64, http://www.silentrunners.org/
Operating System: Microsoft Windows XP Home Edition Service Pack 3 (32-bit)
Output limited to non-default values, except where indicated by "{++}"

Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
WMPNSCFG = C:\Program Files\Windows Media Player\WMPNSCFG.exe [MS]
ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe [Ahead Software Gmbh]
RemoteControl = "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [Cyberlink Corp.]
InCD = C:\Program Files\Ahead\InCD\InCD.exe [Ahead Software AG]
SoundMan = SOUNDMAN.EXE [Realtek Semiconductor Corp.]
VTTimer = VTTimer.exe [S3 Graphics, Inc.]
VTTrayp = VTtrayp.exe [S3 Graphics Co., Ltd.]
PhoneTray = C:\Program Files\Traysoft\PhoneTray\PhoneTray.exe [null data]
TkBellExe = "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot [RealNetworks, Inc.]
egui = "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice [ESET]
Adobe Reader Speed Launcher = "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [Adobe Systems Incorporated]
Adobe ARM = "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [Adobe Systems Incorporated]
SunJavaUpdateSched = "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [Sun Microsystems, Inc.]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided)
-> {HKLM…CLSID} = Adobe PDF Reader Link Helper
\InProcServer32\(Default) = C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [Adobe Systems Incorporated]

{3049C3E9-B461-4BC5-8870-4C09146192CA}\(Default) = (no title provided)
-> {HKLM…CLSID} = RealPlayer Download and Record Plugin for Internet Explorer
\InProcServer32\(Default) = C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [RealPlayer]

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)
-> {HKLM…CLSID} = Java(tm) Plug-In SSV Helper
\InProcServer32\(Default) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [Oracle Corporation]

{ba14329e-9550-4989-b3f2-9732e92d17cc}\(Default) = Vuze Remote
-> {HKLM…CLSID} = Vuze Remote Toolbar
\InProcServer32\(Default) = C:\Program Files\Vuze_Remote\prxtbVuz0.dll [Conduit Ltd.]

{DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided)
-> {HKLM…CLSID} = Java(tm) Plug-In 2 SSV Helper
\InProcServer32\(Default) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [Oracle Corporation]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

{88895560-9AA2-1069-930E-00AA0030EBC8} = HyperTerminal Icon Ext
-> {HKLM…CLSID} = HyperTerminal Icon Ext
\InProcServer32\(Default) = C:\WINDOWS\system32\hticons.dll [Hilgraeve, Inc.]

{950FF917-7A57-46BC-8017-59D9BF474000} = Shell Extension for CDRW
-> {HKLM…CLSID} = Shell Extension for CDRW
\InProcServer32\(Default) = C:\Program Files\Ahead\InCD\incdshx.dll [Ahead Software AG]

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} = Microsoft Office Metadata Handler
-> {HKLM…CLSID} = Microsoft Office Metadata Handler
\InProcServer32\(Default) = C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll [MS]

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} = Microsoft Office Thumbnail Handler
-> {HKLM…CLSID} = Microsoft Office Thumbnail Handler
\InProcServer32\(Default) = C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll [MS]

{B41DB860-8EE4-11D2-9906-E49FADC173CA} = WinRAR shell extension
-> {HKLM…CLSID} = WinRAR
\InProcServer32\(Default) = C:\Program Files\WinRar\rarext.dll [null data]

{00020D75-0000-0000-C000-000000000046} = Microsoft Office Outlook Desktop Icon Handler
-> {HKLM…CLSID} = Microsoft Office Outlook
\InProcServer32\(Default) = C:\PROGRA~1\MICROS~2\OFFICE11\MLSHEXT.DLL [MS]

{0006F045-0000-0000-C000-000000000046} = Microsoft Office Outlook Custom Icon Handler
-> {HKLM…CLSID} = Outlook File Icon Extension
\InProcServer32\(Default) = C:\PROGRA~1\MICROS~2\OFFICE11\OLKFSTUB.DLL [MS]

{42042206-2D85-11D3-8CFF-005004838597} = Microsoft Office HTML Icon Handler
-> {HKLM…CLSID} = (no title provided)
\InProcServer32\(Default) = C:\Program Files\Microsoft Office\OFFICE11\msohev.dll [MS]

{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} = Shell Extensions for RealOne Player
-> {HKLM…CLSID} = RealOne Player Context Menu Class
\InProcServer32\(Default) = c:\program files\real\realplayer\rpshell.dll [RealNetworks, Inc.]

{B089FE88-FB52-11D3-BDF1-0050DA34150D} = ESET Smart Security - Context Menu Shell Extension
-> {HKLM…CLSID} = ESET Smart Security - Context Menu Shell Extension
\InProcServer32\(Default) = C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [ESET]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\

WPDShServiceObj = {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
-> {HKLM…CLSID} = WPDShServiceObj Class
\InProcServer32\(Default) = C:\WINDOWS\system32\WPDShServiceObj.dll [MS]

HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\

<> text/xml\CLSID = {807553E5-5146-11D5-A672-00B0D022E945}
-> {HKLM…CLSID} = (no title provided)
\InProcServer32\(Default) = C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL [MS]

HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\

<> mso-offdap11\CLSID = {32505114-5902-49B2-880A-1F7738E5A384}
-> {HKLM…CLSID} = Data Page Plugable Protocal mso-offdap11 Handler
\InProcServer32\(Default) = C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL [MS]

HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\

ESET Smart Security - Context Menu Shell Extension\(Default) = {B089FE88-FB52-11D3-BDF1-0050DA34150D}
-> {HKLM…CLSID} = ESET Smart Security - Context Menu Shell Extension
\InProcServer32\(Default) = C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [ESET]

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}
-> {HKLM…CLSID} = WinRAR
\InProcServer32\(Default) = C:\Program Files\WinRar\rarext.dll [null data]

HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}
-> {HKLM…CLSID} = WinRAR
\InProcServer32\(Default) = C:\Program Files\WinRar\rarext.dll [null data]

HKLM\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}
-> {HKLM…CLSID} = WinRAR
\InProcServer32\(Default) = C:\Program Files\WinRar\rarext.dll [null data]

HKLM\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\

InCDMenu\(Default) = {950FF917-7A57-46BC-8017-59D9BF474000}
-> {HKLM…CLSID} = Shell Extension for CDRW
\InProcServer32\(Default) = C:\Program Files\Ahead\InCD\incdshx.dll [Ahead Software AG]

HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\

{F9DB5320-233E-11D1-9F84-707F02C10627}\(Default) = PDF Column Info
-> {HKLM…CLSID} = PDF Shell Extension
\InProcServer32\(Default) = C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll [Adobe Systems, Inc.]

HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\

ESET Smart Security - Context Menu Shell Extension\(Default) = {B089FE88-FB52-11D3-BDF1-0050DA34150D}
-> {HKLM…CLSID} = ESET Smart Security - Context Menu Shell Extension
\InProcServer32\(Default) = C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [ESET]

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}
-> {HKLM…CLSID} = WinRAR
\InProcServer32\(Default) = C:\Program Files\WinRar\rarext.dll [null data]

HKLM\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}
-> {HKLM…CLSID} = WinRAR
\InProcServer32\(Default) = C:\Program Files\WinRar\rarext.dll [null data]

Default executables:
--------------------

<> HKLM\SOFTWARE\Classes\.com\(Default) = ComFile

Group Policies {GPedit.msc branch and setting}:
-----------------------------------------------

Note: detected settings may not have any effect.

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments\

SaveZoneInformation = (REG_DWORD) dword:0x00000001
{User Configuration|Administrative Templates|Windows Components|Attachment Manager|
Do not preserve zone information in file attachments}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDrives = (REG_DWORD) dword:0x00000000
{unrecognized setting}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDrives = (REG_DWORD) dword:0x00000000
{unrecognized setting}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\

DisableRegistryTools = (REG_DWORD) dword:0x00000000
{unrecognized setting}

Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
Wallpaper = C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
Wallpaper = C:\Documents and Settings\Boyd\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
SCRNSAVE.EXE = C:\WINDOWS\system32\logon.scr [MS]

Windows Portable Device AutoPlay Handlers
-----------------------------------------

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\

MPCPlayCDAudioOnArrival\
Provider = Media Player Classic
InvokeProgID = MediaPlayerClassic.Autorun
InvokeVerb = PlayCDAudio
HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayCDAudio\command\(Default) = C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe %1 /cd [Gabest]

MPCPlayDVDMovieOnArrival\
Provider = Media Player Classic
InvokeProgID = MediaPlayerClassic.Autorun
InvokeVerb = PlayDVDMovie
HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayDVDMovie\command\(Default) = C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe %1 /dvd [Gabest]

MPCPlayMusicFilesOnArrival\
Provider = Media Player Classic
InvokeProgID = MediaPlayerClassic.Autorun
InvokeVerb = PlayMusicFiles
HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayMusicFiles\command\(Default) = C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe %1 [Gabest]

MPCPlayVideoFilesOnArrival\
Provider = Media Player Classic
InvokeProgID = MediaPlayerClassic.Autorun
InvokeVerb = PlayVideoFiles
HKLM\SOFTWARE\Classes\MediaPlayerClassic.Autorun\shell\PlayVideoFiles\command\(Default) = C:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe %1 [Gabest]

MSWPDShellNamespaceHandler\
Provider = @%SystemRoot%\System32\WPDShextRes.dll,-501
CLSID = {A55803CC-4D53-404c-8557-FD63DBA95D24}
InitCmdLine =
-> {HKLM…CLSID} = WPDShextAutoplay
\LocalServer32\(Default) = C:\WINDOWS\system32\WPDShextAutoplay.exe [MS]

NeroAutoPlayEmptyCD\
Provider = Nero StartSmart
InvokeProgID = Nero.AutoPlay
InvokeVerb = EmptyCD
HKLM\SOFTWARE\Classes\Nero.AutoPlay\shell\EmptyCD\command\(Default) = "C:\Program Files\Ahead\nero startsmart\nerostartsmart.exe" /Drive:%L [Ahead Software AG]

NeroAutoPlayInCDAutorunEmptyCD\
Provider = InCD
InvokeProgID = Nero.AutoPlay
InvokeVerb = InCDAutorunEmptyCD
HKLM\SOFTWARE\Classes\Nero.AutoPlay\shell\InCDAutorunEmptyCD\command\(Default) = C:\Program Files\Ahead\InCD\InCDL.exe [Ahead Software AG]

PDVDPlayDVDMovieOnArrival\
Provider = PowerDVD
InvokeProgID = DVD
InvokeVerb = PlayWithPowerDVD
HKLM\SOFTWARE\Classes\DVD\shell\PlayWithPowerDVD\Command\(Default) = "C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe" "%l" [CyberLink Corp.]

RPCDBurningOnArrival\
Provider = RealPlayer
InvokeProgID = RealPlayer.CDBurn.6
InvokeVerb = open
HKCU\Software\Classes\RealPlayer.CDBurn.6\shell\open\command\(Default) = "c:\program files\real\realplayer\\RealPlay.exe" /burn "%1" [RealNetworks, Inc.]

RPDeviceOnArrival\
Provider = RealPlayer
ProgID = RealPlayer.HWEventHandler
HKLM\SOFTWARE\Classes\RealPlayer.HWEventHandler\CLSID\(Default) = {67E76F1D-BDE2-4052-913C-2752366192D2}
-> {HKLM…CLSID} = RealNetworks Scheduler
\LocalServer32\(Default) = "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -autoplay [RealNetworks, Inc.]

RPDVDBurningOnArrival\
Provider = RealPlayer
InvokeProgID = RealPlayer.DVDBurn.6
InvokeVerb = open
HKCU\Software\Classes\RealPlayer.DVDBurn.6\shell\open\command\(Default) = "c:\program files\real\realplayer\\RealPlay.exe" /burndvd "%1" [RealNetworks, Inc.]

RPPlayCDAudioOnArrival\
Provider = RealPlayer
InvokeProgID = RealPlayer.AudioCD.6
InvokeVerb = play
HKCU\Software\Classes\RealPlayer.AudioCD.6\shell\play\command\(Default) = "c:\program files\real\realplayer\\RealPlay.exe" /play %1 [RealNetworks, Inc.]

RPPlayDVDMovieOnArrival\
Provider = RealPlayer
InvokeProgID = RealPlayer.DVD.6
InvokeVerb = play
HKCU\Software\Classes\RealPlayer.DVD.6\shell\play\command\(Default) = "c:\program files\real\realplayer\\RealPlay.exe" /dvd %1 [RealNetworks, Inc.]

RPPlayMediaOnArrival\
Provider = RealPlayer
InvokeProgID = RealPlayer.AutoPlay.6
InvokeVerb = open
HKCU\Software\Classes\RealPlayer.AutoPlay.6\shell\open\command\(Default) = "c:\program files\real\realplayer\\RealPlay.exe" /autoplay "%1" [RealNetworks, Inc.]

VLCPlayCDAudioOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.CDAudio
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.CDAudio\shell\Open\command\(Default) = "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file cdda:///%1 [VideoLAN]

VLCPlayDVDAudioOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.OPENFolder
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.OPENFolder\shell\Open\command\(Default) = "C:\Program Files\VideoLAN\VLC\vlc.exe" %1 [VideoLAN]

VLCPlayDVDMovieOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.DVDMovie
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.DVDMovie\shell\Open\command\(Default) = "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file dvd:///%1 [VideoLAN]

VLCPlayMusicFilesOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.OPENFolder
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.OPENFolder\shell\Open\command\(Default) = "C:\Program Files\VideoLAN\VLC\vlc.exe" %1 [VideoLAN]

VLCPlaySVCDMovieOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.SVCDMovie
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.SVCDMovie\shell\Open\command\(Default) = "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file vcd:///%1 [VideoLAN]

VLCPlayVCDMovieOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.VCDMovie
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.VCDMovie\shell\Open\command\(Default) = "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file vcd:///%1 [VideoLAN]

VLCPlayVideoFilesOnArrival\
Provider = VideoLAN VLC media player
InvokeProgID = VLC.OPENFolder
InvokeVerb = Open
HKLM\SOFTWARE\Classes\VLC.OPENFolder\shell\Open\command\(Default) = "C:\Program Files\

Re: windows virtual memory to low19th July 2012, 1:34 am

Also, there is a program icon beside the clock, Secunia PSI Tray. I didn't download this, what is it?

Re: windows virtual memory to low19th July 2012, 5:17 pm

Secunia PSI automatically updates vulnerable programs. Very trusted and recommended.

There really isn't any programs that are running that can cause problems.

If you'd like to clean some startup entries, do so with StartUpLite: http://downloads.malwarebytes.org/file/startuplite

Otherwise, I don't see any other reason for lack of virtual memory except for the lack of RAM.

Upgrade the RAM for your computer. If you need help finding the proper RAM, let me know.

Personal Tips on Preventing Malware

See this page for more info about malware and prevention.

Any other questions before I mark this topic solved?

Re: windows virtual memory to low20th July 2012, 12:30 am

what is the proper ram for my pc?

Re: windows virtual memory to low21st July 2012, 4:42 pm

Please use the Crucial Memory Advisor tool to find the RAM you need: http://www.crucial.com/index.aspx

windows virtual memory to low

descriptionwindows virtual memory to low30th June 2012, 4:51 pm

descriptionRe: windows virtual memory to low4th July 2012, 10:48 am

descriptionRe: windows virtual memory to low6th July 2012, 3:42 am

descriptionRe: windows virtual memory to low6th July 2012, 5:14 pm

descriptionRe: windows virtual memory to low8th July 2012, 4:01 am

descriptionRe: windows virtual memory to low8th July 2012, 10:27 am

descriptionRe: windows virtual memory to low8th July 2012, 6:01 pm

descriptionRe: windows virtual memory to low8th July 2012, 7:50 pm

descriptionRe: windows virtual memory to low8th July 2012, 10:34 pm

descriptionRe: windows virtual memory to low9th July 2012, 6:48 pm

descriptionRe: windows virtual memory to low10th July 2012, 4:28 am

descriptionRe: windows virtual memory to low10th July 2012, 7:46 pm

descriptionRe: windows virtual memory to low11th July 2012, 4:19 am

descriptionRe: windows virtual memory to low11th July 2012, 8:53 am

descriptionRe: windows virtual memory to low11th July 2012, 3:20 pm

descriptionRe: windows virtual memory to low11th July 2012, 6:06 pm

descriptionRe: windows virtual memory to low12th July 2012, 8:57 pm

descriptionRe: windows virtual memory to low13th July 2012, 10:30 am

descriptionRe: windows virtual memory to low17th July 2012, 12:55 am

descriptionRe: windows virtual memory to low17th July 2012, 10:14 am

descriptionRe: windows virtual memory to low17th July 2012, 11:55 pm

descriptionRe: windows virtual memory to low18th July 2012, 8:46 pm

descriptionRe: windows virtual memory to low19th July 2012, 1:31 am

descriptionRe: windows virtual memory to low19th July 2012, 1:34 am

descriptionRe: windows virtual memory to low19th July 2012, 5:17 pm

descriptionRe: windows virtual memory to low20th July 2012, 12:30 am

descriptionRe: windows virtual memory to low21st July 2012, 4:42 pm

descriptionRe: windows virtual memory to low