We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Advice on virus removal

2

Comments

  • aerostar wrote: »
    O4 - HKCU\..\Run: [Windows Network Data Management System Service] "C:\DOCUME~1\johnny\LOCALS~1\Temp\058.exe" *
    That entry looks suspicious.

    Which browser are you using that shows the problem ?

    Obvious question, have you looked in add/remove programs just in case.

    If firefox, have a look in tools...addons

    A system restore "might" remove it, if you try it ensure you use a restore date prior to problem.

    You might do a search for a file called hosts, and have a look inside that.

    If it is in IE then have a look at tools ... manage addons and see if it is listed there.

    I'm using Firefox. I've previously looked in tools..... addons: nothing doing!

    I mentioned system restore in the original post. It seemed a bit 'too obvious' and wondered what you guys thought.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Please open malwarebytes, goto LOGS and post the WHOLE of the last log
    :idea:
  • johnnytee
    johnnytee Posts: 315 Forumite
    Part of the Furniture Combo Breaker
    edited 18 November 2010 at 12:30PM
    closed wrote: »
    does the machine run slow, there's a lot of overlapping security software installed

    Not particulaly. My security does need streamlining though! Which ones should I ditch?
  • Malwarebytes' Anti-Malware 1.46
    https://www.malwarebytes.org

    Database version: 5100

    Windows 5.1.2600 Service Pack 3
    Internet Explorer 6.0.2900.5512

    14/11/2010 08:37:59
    mbam-log-2010-11-14 (08-37-59).txt

    Scan type: Full scan (C:\|)
    Objects scanned: 166789
    Time elapsed: 1 hour(s), 13 minute(s), 38 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 2
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windows network data management system service (Trojan.Downloader) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spooler subsystem app (Backdoor.Bot) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    TICK and FIX this in hijack -
    O4 - HKLM\..\Run: [Spooler SubSystem App] C:\WINDOWS\System32\spooIsv.exe

    Uninstall SYGATE FIREWALL as its well out of date (And could be why your infected), and switch on windows firewall

    ..................................................................

    Please run COMBOFIX
    http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    Shut down your anti virus
    Follow the simple instructions it gives
    Post the COMPLETE log it creates here (Split into sections if need be) ~ if there are loads of 'SNAPSHOT' pages then leave them out

    If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download
    (If no log comes up or you lose it, COMBOFIX.TXT can be found in C drive)
    :idea:
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Missed a couple of things

    TICK and FIX this too -
    O4 - HKCU\..\Run: [Windows Network Data Management System Service] "C:\DOCUME~1\johnny\LOCALS~1\Temp\058.exe" *

    and Turn off Spybots 'TEA TIMER' mode (Preferably before running combofix) ~
    Open Spybot
    Change Mode (Top) to ADVANCED
    Select TOOLS then RESIDENT
    UNTICK 'Resident TEA TIMER' (Leave 'SD Helper' TICKED)
    :idea:
  • The log is huge. The reply on here is limited to 25000 characters. Will take me a while to post.
  • ComboFix 10-11-17.02 - johnny 19/11/2010 12:55:56.5.1 - x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.703.231 [GMT 0:00]
    Running from: c:\documents and settings\johnny\My Documents\Downloads\ComboFix.exe
    AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
    .

    ((((((((((((((((((((((((( Files Created from 2010-10-19 to 2010-11-19 )))))))))))))))))))))))))))))))
    .

    2010-11-19 11:13 . 2010-11-19 11:13 388096 ----a-r- c:\documents and settings\johnny\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2010-11-19 11:13 . 2010-11-19 11:13
    d
    w- c:\program files\Trend Micro
    2010-11-15 09:45 . 2010-11-15 09:45
    d
    w- c:\documents and settings\All Users\Application Data\Apple Computer
    2010-11-14 15:54 . 2010-11-14 15:55
    d
    w- c:\program files\Veetle
    2010-11-14 13:10 . 2010-11-17 14:48 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
    2010-11-14 13:10 . 2010-11-14 13:10
    d
    w- c:\program files\Hitman Pro 3.5
    2010-11-14 13:09 . 2010-11-14 13:09
    d
    w- c:\documents and settings\All Users\Application Data\Hitman Pro
    2010-11-13 15:47 . 2010-04-29 15:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2010-11-13 15:47 . 2010-11-13 15:47
    d
    w- c:\program files\Malwarebytes' Anti-Malware
    2010-11-13 15:47 . 2010-04-29 15:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
    2010-11-12 10:22 . 2010-09-15 04:50 472808 ----a-w- c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
    2010-11-12 10:22 . 2010-09-15 04:50 472808 ----a-w- c:\windows\system32\deployJava1.dll
    2010-11-01 09:47 . 2010-11-01 09:47
    d
    w- c:\program files\Common Files\Adobe
    2010-10-30 15:05 . 2008-12-13 19:01 77824 ----a-w- c:\windows\system32\xvid.ax
    2010-10-30 15:05 . 2010-10-30 15:05
    d
    w- c:\program files\Xvid
    2010-10-30 09:18 . 2010-10-30 09:18
    d
    w- c:\documents and settings\All Users\Application Data\McAfee
    2010-10-30 09:18 . 2010-10-30 15:10
    d
    w- c:\program files\McAfee Security Scan
    2010-10-28 12:01 . 2004-06-27 15:45 278528 ----a-w- c:\windows\system32\iFPSP.dll
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\N10.SYS
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\ifpusb.sys
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\Ifp900.sys
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\Ifp800.sys
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\Ifp700.sys
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\Ifp500.sys
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\ifp300.sys
    2010-10-28 12:01 . 2004-03-29 16:28 14531 ----a-w- c:\windows\system32\drivers\Ifp1000.sys
    2010-10-28 12:01 . 2010-10-28 12:01
    d
    w- c:\program files\iriver
    2010-10-28 12:00 . 2003-02-27 15:12 696320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
    2010-10-28 12:00 . 2002-12-05 13:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
    2010-10-28 12:00 . 2002-12-02 14:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
    2010-10-28 12:00 . 2002-12-02 12:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
    2010-10-28 12:00 . 2002-12-02 12:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
    2010-10-28 12:00 . 2010-10-28 12:00 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
    2010-10-28 12:00 . 2010-10-28 12:00 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-11-04 17:01 . 2009-09-11 11:27 126856 ----a-w- c:\windows\system32\drivers\avipbb.sys
    2010-11-04 17:01 . 2009-09-11 11:27 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
    2010-09-18 11:23 . 2009-07-03 14:22 974848 ----a-w- c:\windows\system32\mfc42u.dll
    2010-09-18 06:53 . 2009-07-03 14:22 974848 ----a-w- c:\windows\system32\mfc42.dll
    2010-09-18 06:53 . 2003-03-31 12:00 954368 ----a-w- c:\windows\system32\mfc40.dll
    2010-09-18 06:53 . 2003-03-31 12:00 953856 ----a-w- c:\windows\system32\mfc40u.dll
    2010-09-15 02:29 . 2009-07-14 11:49 73728 ----a-w- c:\windows\system32\javacpl.cpl
    2010-09-09 14:16 . 2006-06-23 18:33 667136 ----a-w- c:\windows\system32\wininet.dll
    2010-09-09 14:16 . 2009-07-03 14:21 61952 ----a-w- c:\windows\system32\tdc.ocx
    2010-09-09 14:16 . 2004-08-04 07:56 81920
    w- c:\windows\system32\ieencode.dll
    2010-09-08 16:49 . 2004-08-04 05:59 369664
    w- c:\windows\system32\html.iec
    2010-09-08 11:17 . 2010-09-08 11:17 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
    2010-09-08 11:17 . 2010-09-08 11:17 69632 ----a-w- c:\windows\system32\QuickTime.qts
    2010-09-01 11:51 . 2009-07-03 14:22 285824 ----a-w- c:\windows\system32\atmfd.dll
    2010-08-31 13:42 . 2009-07-03 14:21 1852800 ----a-w- c:\windows\system32\win32k.sys
    2010-08-27 08:02 . 2005-10-17 21:29 119808 ----a-w- c:\windows\system32\t2embed.dll
    2010-08-27 05:57 . 2009-07-03 14:21 99840 ----a-w- c:\windows\system32\srvsvc.dll
    2010-08-26 13:39 . 2009-07-03 14:21 357248 ----a-w- c:\windows\system32\drivers\srv.sys
    2010-08-26 12:52 . 2009-07-22 17:39 5120 ----a-w- c:\windows\system32\xpsp4res.dll
    2010-08-23 16:12 . 2009-07-03 14:21 617472 ----a-w- c:\windows\system32\comctl32.dll
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-07-14_10.40.57 )))))))))))))))))))))))))))))))))))))))))
    .
  • + 2009-07-22 18:14 . 2008-04-14 00:12 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
    + 2004-08-04 07:57 . 2004-08-04 07:57 54784 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcirt.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 51008 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
    + 2007-11-07 09:19 . 2007-11-07 09:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 59728 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 42832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 43344 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 61264 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 62800 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 61760 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 61776 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 53568 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 63296 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 36688 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
    + 2009-07-11 23:02 . 2009-07-11 23:02 35648 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 62976 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 46080 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 64512 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 66048 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 56832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 66560 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 39936 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll
    + 2008-07-29 15:05 . 2008-07-29 15:05 38912 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll
    + 2009-07-11 23:05 . 2009-07-11 23:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
    + 2009-07-11 23:05 . 2009-07-11 23:05 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
    + 2008-07-29 13:07 . 2008-07-29 13:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll
    + 2008-07-29 13:07 . 2008-07-29 13:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll
    + 2009-07-22 18:14 . 2008-04-14 00:12 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 50688 c:\windows\twain_32.dll
    + 2010-11-17 14:09 . 2010-11-17 14:09 16384 c:\windows\Temp\Perflib_Perfdata_7cc.dat
    - 2009-07-03 14:21 . 2006-03-01 19:44 11776 c:\windows\system32\xolehlp.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 11776 c:\windows\system32\xolehlp.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 50176 c:\windows\system32\xmlprovi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 30720 c:\windows\system32\xcopy.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 91648 c:\windows\system32\xactsrv.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 52736 c:\windows\system32\wzcsapi.dll
    + 2008-10-16 21:09 . 2009-08-07 02:24 44768 c:\windows\system32\wups2.dll
    + 2009-07-09 18:18 . 2009-08-07 02:24 35552 c:\windows\system32\wups.dll
    + 2006-09-29 02:56 . 2006-09-29 02:56 55808 c:\windows\system32\WudfSvc.dll
    + 2006-09-29 04:13 . 2006-09-29 04:13 95344 c:\windows\system32\WUDFCoinstaller.dll
    + 2009-07-03 14:23 . 2009-08-07 02:24 53472 c:\windows\system32\wuauclt.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 18432 c:\windows\system32\wtsapi32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 50688 c:\windows\system32\wstdecod.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 22528 c:\windows\system32\wsock32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 41984 c:\windows\system32\wsnmp32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 19456 c:\windows\system32\wshtcpip.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 11264 c:\windows\system32\wshrm.dll
    + 2006-08-16 12:14 . 2008-04-14 00:12 14336 c:\windows\system32\wship6.dll
    + 2009-07-03 14:21 . 2008-05-09 10:53 90112 c:\windows\system32\wshext.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 36864 c:\windows\system32\wshcon.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 80896 c:\windows\system32\wscsvc.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 13824 c:\windows\system32\wscntfy.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 19968 c:\windows\system32\ws2help.dll
    + 2006-08-16 12:14 . 2008-04-14 00:12 82432 c:\windows\system32\ws2_32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 11264 c:\windows\system32\wpnpinst.exe
    + 2006-10-19 05:47 . 2006-10-19 05:47 38400 c:\windows\system32\wpdshextres.dll
    + 2006-10-19 04:00 . 2006-10-19 04:00 17408 c:\windows\system32\wpdshextautoplay.exe
    + 2006-10-19 05:47 . 2006-10-19 05:47 63488 c:\windows\system32\wpdmtpus.dll
    + 2006-10-19 05:47 . 2006-10-19 05:47 35840 c:\windows\system32\wpdconns.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 32256 c:\windows\system32\wpabaln.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 20480 c:\windows\system32\wmpui.dll
    + 2009-07-03 14:21 . 2006-10-19 05:47 99840 c:\windows\system32\wmpshell.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 20480 c:\windows\system32\wmpcore.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 20480 c:\windows\system32\wmpcd.dll
    + 2009-07-03 14:21 . 2006-10-19 05:47 37376 c:\windows\system32\wmdmps.dll
    + 2009-07-03 14:21 . 2006-10-19 05:47 33792 c:\windows\system32\wmdmlog.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 92672 c:\windows\system32\wlnotify.dll
    + 2009-07-22 18:17 . 2008-04-14 00:12 69120 c:\windows\system32\wlanapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 53760 c:\windows\system32\winsta.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 17408 c:\windows\system32\winshfhc.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 99328 c:\windows\system32\winscard.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 16896 c:\windows\system32\winrnr.dll
    + 2006-05-14 09:13 . 2008-04-14 00:12 32256 c:\windows\system32\winipsec.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 75776 c:\windows\system32\wiascr.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 65024 c:\windows\system32\wextract.exe
    + 2006-01-04 03:37 . 2008-04-14 00:12 68096 c:\windows\system32\webclnt.dll
    + 2009-07-21 22:32 . 2001-09-11 22:20 30208 c:\windows\system32\wdmioctl.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud.drv
    + 2009-07-03 14:21 . 2009-06-25 08:25 54272 c:\windows\system32\wdigest.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 95232 c:\windows\system32\wbem\wmiutils.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 41472 c:\windows\system32\wbem\wmipsess.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 62464 c:\windows\system32\wbem\wmipjobj.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 61952 c:\windows\system32\wbem\wmipiprt.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 60928 c:\windows\system32\wbem\wmicookr.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 88576 c:\windows\system32\wbem\wmiaprpl.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 43520 c:\windows\system32\wbem\wbemsvc.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 18944 c:\windows\system32\wbem\wbemprox.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 43008 c:\windows\system32\wbem\wbemperf.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 71680 c:\windows\system32\wbem\wbemcons.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 86528 c:\windows\system32\wbem\stdprov.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 36352 c:\windows\system32\wbem\scrcons.exe
    + 2009-07-03 14:22 . 2008-04-14 00:12 47104 c:\windows\system32\wbem\ncprov.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 16384 c:\windows\system32\wbem\mofcomp.exe
    + 2009-07-03 14:22 . 2008-04-14 00:11 24576 c:\windows\system32\wbem\krnlprov.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 21504 c:\windows\system32\wbem\evntrprv.dll
    + 2009-07-03 14:21 . 2008-04-13 18:44 17664 c:\windows\system32\watchdog.sys
    + 2004-08-04 07:56 . 2008-04-14 00:12 15872 c:\windows\system32\w3ssl.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 18944 c:\windows\system32\version.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 26624 c:\windows\system32\verifier.dll
    + 2006-03-17 00:49 . 2008-04-14 00:12 28672 c:\windows\system32\verclsid.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 51712 c:\windows\system32\vdmredir.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 26112 c:\windows\system32\vdmdbg.dll
    + 1999-11-24 16:40 . 1999-11-24 16:40 40960 c:\windows\system32\VBAME.DLL
    + 2009-07-03 14:21 . 2008-04-14 00:12 30749 c:\windows\system32\vbajet32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 50176 c:\windows\system32\utilman.exe
    + 2009-07-03 14:22 . 2008-04-14 00:11 19968 c:\windows\system32\usmt\log.dll
    + 2009-07-22 18:15 . 2008-04-13 16:44 17920 c:\windows\system32\usmt\cobramsg.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 26112 c:\windows\system32\userinit.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 74240 c:\windows\system32\usbui.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 16896 c:\windows\system32\usbmon.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 37888 c:\windows\system32\url.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 18432 c:\windows\system32\ups.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 16896 c:\windows\system32\upnpcont.exe
    - 2009-07-03 14:21 . 2003-03-31 12:00 13824 c:\windows\system32\uniplat.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 13824 c:\windows\system32\uniplat.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 74240 c:\windows\system32\unimdmat.dll
    + 2004-08-04 06:04 . 2008-04-14 00:11 76288 c:\windows\system32\uniime.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 35840 c:\windows\system32\umandlg.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 26624 c:\windows\system32\udhisapi.dll
    + 2008-10-22 09:47 . 2010-06-21 14:46 46080 c:\windows\system32\tzchange.exe
    + 2004-08-04 07:56 . 2008-04-14 00:12 57856 c:\windows\system32\twext.dll
    + 2009-07-22 18:17 . 2008-04-14 00:12 50688 c:\windows\system32\tspkg.dll
    + 2009-07-22 18:17 . 2008-04-14 00:12 53248 c:\windows\system32\tsgqec.dll
    + 2009-07-03 14:21 . 2008-04-14 00:13 12168 c:\windows\system32\tsddd.dll
    + 2009-07-03 14:21 . 2004-08-04 05:59 44544 c:\windows\system32\tscupgrd.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 93696 c:\windows\system32\tscfgwmi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 90112 c:\windows\system32\trkwks.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 12800 c:\windows\system32\tree.com
    + 2009-07-03 14:21 . 2008-04-14 00:12 12288 c:\windows\system32\tracert.exe
    + 2009-07-03 14:21 . 2009-06-12 12:31 76288 c:\windows\system32\telnet.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmonui.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 45568 c:\windows\system32\tcpmon.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 14848 c:\windows\system32\tcpmib.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 57856 c:\windows\system32\synceng.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 14336 c:\windows\system32\svchost.exe
    + 2004-08-04 07:56 . 2009-10-21 05:38 75776 c:\windows\system32\strmfilt.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 74752 c:\windows\system32\storprop.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 14848 c:\windows\system32\stimon.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 68096 c:\windows\system32\sti.dll
    + 2009-06-30 10:55 . 2008-04-14 00:12 59392 c:\windows\system32\stclient.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 14336 c:\windows\system32\ssstars.scr
    + 2009-07-03 14:21 . 2008-04-14 00:12 18944 c:\windows\system32\ssmyst.scr
    + 2009-07-03 14:21 . 2008-04-14 00:12 47104 c:\windows\system32\ssmypics.scr
    + 2009-07-03 14:21 . 2008-04-14 00:12 20992 c:\windows\system32\ssmarque.scr
    + 2009-07-03 14:21 . 2008-04-14 00:12 71680 c:\windows\system32\ssdpsrv.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 34816 c:\windows\system32\ssdpapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 19968 c:\windows\system32\ssbezier.scr
    + 2009-07-03 14:21 . 2008-04-14 00:12 67584 c:\windows\system32\srclient.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 20992 c:\windows\system32\spupdwxp.exe
    + 2009-07-03 14:23 . 2007-07-27 22:11 26488 c:\windows\system32\spupdsvc.exe
    + 2005-06-10 23:55 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 75264 c:\windows\system32\spoolss.dll
    + 2009-07-14 08:40 . 2008-04-14 12:42 11264 c:\windows\system32\spnpinst.exe
    + 2010-02-02 17:04 . 2010-02-22 14:23 17272 c:\windows\system32\spmsg.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 24576 c:\windows\system32\sort.exe
    + 2009-10-29 10:47 . 2009-08-07 02:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
    + 2009-10-29 10:47 . 2009-08-07 02:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 18944 c:\windows\system32\snmpapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 50688 c:\windows\system32\smss.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 89600 c:\windows\system32\smlogsvc.exe
    + 2004-08-04 07:56 . 2008-04-14 00:12 73796 c:\windows\system32\slserv.exe
    + 2004-08-04 07:56 . 2008-04-14 00:12 32866 c:\windows\system32\slrundll.exe
    + 2004-08-04 07:56 . 2008-04-14 00:12 73832 c:\windows\system32\slcoinst.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 98304 c:\windows\system32\slbiop.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 25088 c:\windows\system32\slayerxp.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 26112 c:\windows\system32\skeys.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 70144 c:\windows\system32\sigverif.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 13312 c:\windows\system32\sigtab.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 19456 c:\windows\system32\shutdown.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 27648 c:\windows\system32\shscrap.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 77824 c:\windows\system32\shrpubw.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 45056 c:\windows\system32\shmgrate.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 65024 c:\windows\system32\shimeng.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 68096 c:\windows\system32\shgina.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 25088 c:\windows\system32\shfolder.dll
    + 2009-07-22 18:16 . 2008-04-14 00:12 32768 c:\windows\system32\setupn.exe
    + 2004-08-04 07:56 . 2008-04-14 00:12 26624 c:\windows\system32\Setup\startoc.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 17408 c:\windows\system32\Setup\ocmsn.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 15360 c:\windows\system32\Setup\ocgen.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 62976 c:\windows\system32\Setup\ntoc.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 77312 c:\windows\system32\Setup\netoc.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 15360 c:\windows\system32\Setup\msgrocm.dll
    + 2003-03-31 12:00 . 2008-04-14 00:11 90112 c:\windows\system32\Setup\msdtcstp.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 32828 c:\windows\system32\Setup\fp40ext.dll
    - 2009-07-03 14:22 . 2003-03-31 12:00 32828 c:\windows\system32\Setup\fp40ext.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 23040 c:\windows\system32\setup.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 31232 c:\windows\system32\sethc.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 56320 c:\windows\system32\servdeps.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 39424 c:\windows\system32\sens.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 54784 c:\windows\system32\sendmail.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 29184 c:\windows\system32\sendcmsg.dll
    + 2009-07-03 14:21 . 2009-06-25 08:25 56832 c:\windows\system32\secur32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 18944 c:\windows\system32\seclogon.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 29184 c:\windows\system32\sdhcinst.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 77312 c:\windows\system32\sdbinst.exe
    + 1998-03-24 19:54 . 1998-03-24 19:54 15872 c:\windows\system32\SCP32.DLL
    + 2009-07-03 14:21 . 2008-04-14 00:12 20480 c:\windows\system32\sclgntfy.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 95744 c:\windows\system32\scardsvr.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 69632 c:\windows\system32\scarddlg.dll
    + 2003-03-31 12:00 . 2009-02-06 10:39 35328 c:\windows\system32\sc.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 13312 c:\windows\system32\savedump.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 64000 c:\windows\system32\samlib.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 45568 c:\windows\system32\safrslv.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 29696 c:\windows\system32\safrdm.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 43520 c:\windows\system32\safrcdlg.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 14336 c:\windows\system32\runonce.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 33280 c:\windows\system32\rundll32.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 44032 c:\windows\system32\rtutils.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 31744 c:\windows\system32\rtipxmib.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 77312 c:\windows\system32\rtcshare.exe
    + 2003-03-31 12:00 . 2008-04-14 00:12 92672 c:\windows\system32\rsvpsp.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 18944 c:\windows\system32\rsmps.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 39936 c:\windows\system32\rshx32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 14848 c:\windows\system32\rsh.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 13824 c:\windows\system32\rexec.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 58880 c:\windows\system32\resutils.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 60416 c:\windows\system32\remotepg.dll
    + 2009-09-14 15:13 . 2004-08-04 05:59 36096 c:\windows\system32\ReinstallBackups\0001\DriverFiles\i386\intelppm.sys
  • + 2009-09-14 15:13 . 2004-08-04 05:59 36096 c:\windows\system32\ReinstallBackups\0001\DriverFiles\i386\intelppm.sys
    + 2009-07-03 14:21 . 2008-04-14 00:12 11776 c:\windows\system32\regsvr32.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 59904 c:\windows\system32\regsvc.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 49664 c:\windows\system32\regapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 50176 c:\windows\system32\reg.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 67072 c:\windows\system32\rdshost.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 13824 c:\windows\system32\rdsaddin.exe
    + 2009-07-03 14:21 . 2008-04-14 00:13 87176 c:\windows\system32\rdpwsx.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 19968 c:\windows\system32\rdpsnd.dll
    + 2009-07-03 14:21 . 2008-04-14 00:13 92424 c:\windows\system32\rdpdd.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 62976 c:\windows\system32\rdpclip.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 21504 c:\windows\system32\rcp.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 35840 c:\windows\system32\rcimlby.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 58368 c:\windows\system32\rastapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 16384 c:\windows\system32\rassapi.dll
    + 2009-07-22 18:16 . 2008-04-14 00:12 61952 c:\windows\system32\rasqec.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 56832 c:\windows\system32\rasphone.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 61440 c:\windows\system32\rasman.dll
    + 2009-07-03 14:21 . 2009-10-12 13:38 79872 c:\windows\system32\raschap.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 88576 c:\windows\system32\rasauto.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 43520 c:\windows\system32\racpldlg.dll
    + 2009-07-22 18:16 . 2008-04-14 00:12 76800 c:\windows\system32\qutil.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 19968 c:\windows\system32\qprocess.exe
    + 2009-07-09 18:21 . 2008-04-14 00:12 18944 c:\windows\system32\qmgrprxy.dll
    + 2009-07-22 18:16 . 2008-04-14 00:12 62464 c:\windows\system32\qcliprov.dll
    + 2008-06-08 22:58 . 2008-06-08 22:58 60273 c:\windows\system32\pthreadGC2.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 34304 c:\windows\system32\pstorsvc.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 43520 c:\windows\system32\pstorec.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 96768 c:\windows\system32\psbase.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 23040 c:\windows\system32\psapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 50176 c:\windows\system32\proquota.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 27648 c:\windows\system32\profmap.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 17408 c:\windows\system32\powrprof.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 49152 c:\windows\system32\powercfg.exe
    + 2004-08-04 07:56 . 2008-04-14 00:12 58880 c:\windows\system32\pnrpnsp.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 39424 c:\windows\system32\pngfilt.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 15360 c:\windows\system32\pjlmon.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 17920 c:\windows\system32\ping.exe
    + 2009-07-03 14:23 . 2008-04-13 18:35 24064 c:\windows\system32\pidgen.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 35328 c:\windows\system32\pid.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 34816 c:\windows\system32\perfproc.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 25088 c:\windows\system32\perfos.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 17920 c:\windows\system32\perfnet.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 15872 c:\windows\system32\perfmon.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 26624 c:\windows\system32\perfdisk.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 39936 c:\windows\system32\perfctrs.dll
    + 2003-03-31 12:00 . 2010-11-11 09:04 52112 c:\windows\system32\perfc009.dat
    + 2009-07-03 14:21 . 2008-04-14 00:12 67584 c:\windows\system32\pautoenr.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 58368 c:\windows\system32\packager.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 67584 c:\windows\system32\osuninst.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 51200 c:\windows\system32\oobe\oobebaln.exe
    + 2009-06-30 10:57 . 2008-04-14 00:12 29184 c:\windows\system32\oobe\msoobe.exe
    + 2009-07-03 14:22 . 2008-04-14 00:12 19456 c:\windows\system32\oobe\msobweb.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 30720 c:\windows\system32\oobe\msobshel.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 16384 c:\windows\system32\oobe\msobdl.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 84992 c:\windows\system32\olepro32.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 37376 c:\windows\system32\olecnv32.dll
    + 2005-07-26 04:31 . 2008-04-14 00:12 74752 c:\windows\system32\olecli32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 20511 c:\windows\system32\odtext32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 20510 c:\windows\system32\odpdx32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 20510 c:\windows\system32\odfox32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 20510 c:\windows\system32\odexl32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 20511 c:\windows\system32\oddbse32.dll
    - 2009-07-03 14:21 . 2003-03-31 12:00 12288 c:\windows\system32\odbcp32r.dll
    + 2009-07-03 14:21 . 2008-04-13 17:26 12288 c:\windows\system32\odbcp32r.dll
    - 2009-07-03 14:21 . 2003-03-31 12:00 53279 c:\windows\system32\odbcji32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:10 53279 c:\windows\system32\odbcji32.dll
    + 2009-07-03 14:21 . 2008-04-13 17:26 94208 c:\windows\system32\odbcint.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 65536 c:\windows\system32\odbccu32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 65536 c:\windows\system32\odbccr32.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 69632 c:\windows\system32\odbcconf.exe
    - 2009-07-03 14:21 . 2003-03-31 12:00 24576 c:\windows\system32\odbcbcp.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 24576 c:\windows\system32\odbcbcp.dll
    - 2009-07-03 14:21 . 2003-03-31 12:00 32768 c:\windows\system32\odbcad32.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 32768 c:\windows\system32\odbcad32.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 16384 c:\windows\system32\odbc32gt.dll
    - 2009-07-03 14:21 . 2003-03-31 12:00 16384 c:\windows\system32\odbc32gt.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 67584 c:\windows\system32\ocmanage.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 96256 c:\windows\system32\occache.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 15360 c:\windows\system32\ntvdmd.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 91136 c:\windows\system32\ntprint.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 40960 c:\windows\system32\ntmsapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 44032 c:\windows\system32\ntlanman.dll
    + 2009-07-03 14:21 . 2004-08-04 05:45 34560 c:\windows\system32\ntio804.sys
    + 2009-07-03 14:21 . 2004-08-04 05:45 35424 c:\windows\system32\ntio412.sys
    + 2009-07-03 14:21 . 2004-08-04 05:45 35648 c:\windows\system32\ntio411.sys
    + 2009-07-03 14:21 . 2004-08-04 05:45 34560 c:\windows\system32\ntio404.sys
    + 2009-07-03 14:21 . 2004-08-04 05:45 33840 c:\windows\system32\ntio.sys
    + 2009-07-03 14:21 . 2008-04-14 00:12 67072 c:\windows\system32\ntdsapi.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 76800 c:\windows\system32\nslookup.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 54784 c:\windows\system32\npptools.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 15360 c:\windows\system32\npp\nppagent.exe
    + 2009-07-03 14:22 . 2008-04-14 00:12 57344 c:\windows\system32\npp\ndisnpp.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 69120 c:\windows\system32\notepad.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 28672 c:\windows\system32\nmmkcert.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 98304 c:\windows\system32\nlhtml.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 80896 c:\windows\system32\netui0.dll
    + 2009-07-03 14:21 . 2008-04-14 00:12 36864 c:\windows\system32\netstat.exe
    + 2006-08-16 09:27 . 2008-04-14 00:12 86016 c:\windows\system32\netsh.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 11776 c:\windows\system32\netrap.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 42496 c:\windows\system32\net.exe
    + 2009-07-03 14:22 . 2008-04-14 00:12 18944 c:\windows\system32\nddenb32.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 17920 c:\windows\system32\nddeapi.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 36352 c:\windows\system32\ncobjapi.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 53760 c:\windows\system32\narrator.exe
    + 2009-07-22 18:16 . 2008-04-14 00:12 30208 c:\windows\system32\napipsec.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 90624 c:\windows\system32\mydocs.dll
    + 2009-07-14 08:02 . 2008-06-12 14:23 91648 c:\windows\system32\mtxoci.dll
    + 2009-06-30 10:55 . 2008-04-14 00:12 34304 c:\windows\system32\mtxlegih.dll
    + 2009-06-30 10:55 . 2008-04-14 00:12 30720 c:\windows\system32\mtxdm.dll
    + 2009-07-14 08:02 . 2008-06-12 14:23 66560 c:\windows\system32\mtxclu.dll
    + 2009-07-03 14:22 . 2009-11-27 17:11 17920 c:\windows\system32\msyuv.dll
    + 2009-07-22 18:16 . 2008-04-13 17:27 79872 c:\windows\system32\msxml6r.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 72704 c:\windows\system32\msw3prt.dll
    + 2003-03-31 12:00 . 2009-11-27 16:07 28672 c:\windows\system32\msvidc32.dll
    + 2009-07-03 14:22 . 2008-04-13 18:30 61440 c:\windows\system32\msvcrt40.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 57344 c:\windows\system32\msvcirt.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 12288 c:\windows\system32\mstinit.exe
    + 1998-08-09 09:07 . 1998-08-09 09:07 94208 c:\windows\system32\MSSTKPRP.DLL
    + 2009-07-22 18:16 . 2008-04-13 18:14 76800 c:\windows\system32\msshavmsg.dll
    + 2009-07-03 14:22 . 2009-11-27 16:07 11264 c:\windows\system32\msrle32.dll
    + 2009-07-03 14:22 . 2008-04-13 16:23 48128 c:\windows\system32\msprivs.dll
    + 2004-08-04 07:56 . 2006-10-19 05:47 27136 c:\windows\system32\mspmsnsv.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 29696 c:\windows\system32\mspatcha.dll
    - 2009-07-03 14:22 . 2003-03-31 12:00 20480 c:\windows\system32\msorc32r.dll
    + 2009-07-03 14:22 . 2008-04-13 17:24 20480 c:\windows\system32\msorc32r.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 25088 c:\windows\system32\mslbui.dll
    + 2009-07-03 14:22 . 2007-04-02 12:49 60192 c:\windows\system32\msjter40.dll
    - 2009-07-03 14:22 . 2005-05-04 21:45 15360 c:\windows\system32\msisip.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 15360 c:\windows\system32\msisip.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 78848 c:\windows\system32\msiexec.exe
    - 2009-07-03 14:22 . 2005-05-04 21:45 78848 c:\windows\system32\msiexec.exe
    + 2009-07-03 14:22 . 2008-04-14 00:11 51712 c:\windows\system32\msident.dll
    + 2009-07-03 14:22 . 2008-04-13 16:26 56832 c:\windows\system32\mshtmler.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 29184 c:\windows\system32\mshta.exe
    + 2009-07-03 14:21 . 2008-04-14 00:11 33792 c:\windows\system32\msgsvc.dll
    + 2009-07-03 14:22 . 2008-06-12 14:23 58880 c:\windows\system32\msdtclog.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 14336 c:\windows\system32\msdmo.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 68608 c:\windows\system32\msctfp.dll
    - 2009-07-03 14:22 . 2003-03-31 12:00 36864 c:\windows\system32\mscpxl32.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 36864 c:\windows\system32\mscpxl32.dll
    + 2009-07-03 14:22 . 2008-04-13 17:26 12288 c:\windows\system32\mscpx32r.dll
    - 2009-07-03 14:22 . 2003-03-31 12:00 12288 c:\windows\system32\mscpx32r.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 69632 c:\windows\system32\msconf.dll
    + 2005-06-29 01:54 . 2008-06-24 16:43 74240 c:\windows\system32\mscms.dll
    + 2009-07-03 14:22 . 2009-09-04 21:03 58880 c:\windows\system32\msasn1.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 86016 c:\windows\system32\msapsspc.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 71680 c:\windows\system32\msacm32.dll
    + 2003-03-31 12:00 . 2008-04-14 00:11 53248 c:\windows\system32\mprdim.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 87040 c:\windows\system32\mprapi.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 59904 c:\windows\system32\mpr.dll
    + 2003-03-31 12:00 . 2008-04-14 00:12 16896 c:\windows\system32\more.com
    + 2009-07-03 14:22 . 2008-04-14 00:12 32768 c:\windows\system32\mnmsrvc.exe
    - 2009-07-03 14:22 . 2003-03-31 12:00 32768 c:\windows\system32\mnmsrvc.exe
    + 2009-07-03 14:22 . 2008-04-14 00:11 34560 c:\windows\system32\mnmdd.dll
    + 2009-07-03 14:22 . 2004-08-04 05:51 68768 c:\windows\system32\mmsystem.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 17408 c:\windows\system32\mmfutil.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 61440 c:\windows\system32\mmcshext.dll
    + 2009-07-22 18:16 . 2008-04-14 00:12 33792 c:\windows\system32\mmcperf.exe
    + 2009-01-10 22:14 . 2009-01-10 22:14 79360 c:\windows\system32\mkzlib.dll
    + 2009-01-10 22:14 . 2009-01-10 22:14 23552 c:\windows\system32\mkunicode.dll
    + 2003-03-31 12:00 . 2008-04-14 00:11 29696 c:\windows\system32\mimefilt.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 60928 c:\windows\system32\miglibnt.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 18944 c:\windows\system32\midimap.dll
    + 2009-07-03 14:21 . 2008-04-14 00:11 14848 c:\windows\system32\mgmtapi.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 22528 c:\windows\system32\mfcsubs.dll
    + 1998-06-17 17:08 . 1998-06-17 17:08 53248 c:\windows\system32\MFC42ENU.DLL
    + 2009-07-04 10:40 . 2008-04-14 00:11 40960 c:\windows\system32\mf3216.dll
    + 2004-08-04 07:56 . 2008-04-14 00:11 86016 c:\windows\system32\mdmxsdk.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 23552 c:\windows\system32\mciwave.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 23040 c:\windows\system32\mciseq.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 35328 c:\windows\system32\mciqtz32.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 84480 c:\windows\system32\mciavi32.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 14336 c:\windows\system32\mcastmib.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 57344 c:\windows\system32\makecab.exe
    + 2009-07-03 14:22 . 2008-04-14 00:12 72704 c:\windows\system32\magnify.exe
    + 2009-07-16 11:00 . 2009-07-16 11:00 98304 c:\windows\system32\Macromed\Shockwave 10\SwOnce.dll
    + 2009-07-16 11:00 . 2009-07-16 11:00 86016 c:\windows\system32\Macromed\Shockwave 10\SwMenuX.dll
    + 2009-07-16 11:00 . 2009-07-16 11:00 77824 c:\windows\system32\Macromed\Shockwave 10\SwInit.exe
    + 2009-07-16 11:00 . 2009-07-16 11:00 24576 c:\windows\system32\Macromed\Shockwave 10\DynaPlayer.dll
    + 2009-03-16 08:59 . 2009-03-16 08:59 53248 c:\windows\system32\Macromed\Common\SwSupport.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 13312 c:\windows\system32\lsass.exe
    + 2009-07-03 14:22 . 2008-04-14 00:11 10240 c:\windows\system32\lprhelp.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 22016 c:\windows\system32\lpk.dll
    + 2004-08-04 07:56 . 2008-04-14 00:12 59392 c:\windows\system32\logman.exe
    + 2009-07-03 14:21 . 2008-04-14 00:12 75264 c:\windows\system32\locator.exe
    + 2009-07-03 14:22 . 2008-04-14 00:11 11776 c:\windows\system32\localui.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 97280 c:\windows\system32\loadperf.dll
    + 2009-07-03 14:21 . 2008-04-14 00:11 13824 c:\windows\system32\lmhsvc.dll
    + 2009-07-14 08:03 . 2008-04-14 00:11 19968 c:\windows\system32\linkinfo.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 58880 c:\windows\system32\licwmi.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 22016 c:\windows\system32\licmgr10.dll
    + 2010-07-17 14:39 . 2006-10-06 08:35 90112 c:\windows\system32\lfjbg13n.dll
    + 2010-07-17 14:39 . 2006-10-06 08:35 73728 c:\windows\system32\lffax13n.dll
    + 2009-07-03 14:22 . 2006-10-19 05:47 11264 c:\windows\system32\LAPRXY.dll
    + 2009-07-21 22:10 . 2009-07-21 22:10 10111 c:\windows\system32\Lang\TradChin.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 12247 c:\windows\system32\Lang\Thai.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 13560 c:\windows\system32\Lang\SWEDISH.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 15409 c:\windows\system32\Lang\Spanish.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 15050 c:\windows\system32\Lang\Russian.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 14634 c:\windows\system32\Lang\Portuguese_Default.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 13746 c:\windows\system32\Lang\Portuguese_Brazilian.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 13431 c:\windows\system32\Lang\Polish.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 11498 c:\windows\system32\Lang\Korean.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 13345 c:\windows\system32\Lang\Japanese.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 15718 c:\windows\system32\Lang\Italian.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 13966 c:\windows\system32\Lang\Greek.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 14873 c:\windows\system32\Lang\German.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 15325 c:\windows\system32\Lang\French.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 12032 c:\windows\system32\Lang\English.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 14470 c:\windows\system32\Lang\Dutch.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 13831 c:\windows\system32\Lang\Danish.bin
    + 2009-07-21 22:10 . 2009-07-21 22:10 11842 c:\windows\system32\Lang\Arabic.bin
    + 2009-07-22 18:15 . 2008-04-14 00:11 37376 c:\windows\system32\l2gpstore.dll
    + 2009-07-03 14:22 . 2004-08-04 05:49 92224 c:\windows\system32\krnl386.exe
    + 2009-07-22 18:15 . 2008-04-14 00:11 61440 c:\windows\system32\kmsvc.dll
    + 2006-04-28 17:58 . 2008-04-14 00:11 15872 c:\windows\system32\jsproxy.dll
    - 2003-03-31 12:00 . 2006-04-06 23:15 27648 c:\windows\system32\JGPL400.DLL
    + 2003-03-31 12:00 . 2008-04-14 00:11 27648 c:\windows\system32\jgpl400.dll
    + 2009-07-03 14:22 . 2009-11-27 16:07 48128 c:\windows\system32\iyuv_32.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 54272 c:\windows\system32\ixsso.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 32768 c:\windows\system32\isrdbg32.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 81920 c:\windows\system32\isign32.dll
    + 2003-03-31 12:00 . 2008-04-14 00:11 22016 c:\windows\system32\ipxwan.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 23552 c:\windows\system32\ipxroute.exe
    + 2006-08-16 12:14 . 2008-04-14 00:11 59904 c:\windows\system32\ipv6mon.dll
    + 2006-08-16 09:28 . 2008-04-14 00:12 53248 c:\windows\system32\ipv6.exe
    + 2006-08-16 12:14 . 2008-04-14 00:11 94720 c:\windows\system32\iphlpapi.dll
    + 2009-07-03 14:22 . 2008-04-14 00:12 55808 c:\windows\system32\ipconfig.exe
    + 2009-07-03 14:22 . 2008-04-14 00:11 96256 c:\windows\system32\inseng.dll
    + 2009-07-03 14:22 . 2008-04-13 16:22 48128 c:\windows\system32\inetres.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 15872 c:\windows\system32\inetppui.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 75264 c:\windows\system32\inetpp.dll
    + 2006-08-16 12:14 . 2008-04-14 00:11 32768 c:\windows\system32\inetmib1.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 35840 c:\windows\system32\imgutil.dll
    + 2009-07-03 14:22 . 2008-04-14 00:11 36921 c:\windows\system32\imeshare.dll
    + 2009-07-14 08:40 . 2008-04-14 00:10 10240 c:\windows\system32\IME\TINTLGNT\TMIGRATE.DLL
    + 2009-07-14 08:40 . 2003-03-31 12:00 44032 c:\windows\system32\IME\TINTLGNT\TINTLPHR.EXE
    + 2009-07-14 08:40 . 2008-04-14 00:10 67584 c:\windows\system32\IME\PINTLGNT\PMIGRATE.DLL
    + 2009-07-14 08:40 . 2008-04-13 16:43 70144 c:\windows\system32\IME\PINTLGNT\PINTLPHR.EXE
    + 2009-07-14 08:40 . 2003-03-31 12:00 59392 c:\windows\system32\IME\PINTLGNT\IMSCINST.EXE
    + 2009-07-03 14:22 . 2008-04-14 00:11 81920
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.3K Banking & Borrowing
  • 253.7K Reduce Debt & Boost Income
  • 454.4K Spending & Discounts
  • 245.4K Work, Benefits & Business
  • 601.1K Mortgages, Homes & Bills
  • 177.6K Life & Family
  • 259.2K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.