ComboFix 08-07-20.5 - Zeinab2810 2008-07-21 11:09:28.6 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.961.1033.18.242 [GMT 4.5:30]
Running from: C:\Documents and Settings\Zeinab2810\Desktop\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2008-06-21 to 2008-07-21 )))))))))))))))))))))))))))))))
.
2008-07-21 00:14 . 2008-07-21 00:14 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2008-07-20 13:31 . 2008-07-20 17:06 <DIR> d-------- C:\Program Files\Common Files\delet
2008-07-15 20:28 . 2008-07-15 20:28 <DIR> d-------- C:\Program Files\DCEnhancer
2008-07-14 00:17 . 2008-07-14 00:17 <DIR> d-------- C:\WINDOWS\system32\CatRoot_bak
2008-07-13 11:20 . 2008-07-13 11:20 <DIR> d-------- C:\Program Files\VistaDrives
2008-07-11 15:53 . 2008-07-12 12:37 369 --a------ C:\WINDOWS\system\Cmicnfg.ini
2008-07-09 17:22 . 2008-07-09 17:23 <DIR> d-------- C:\Zyzoom_RFA_Platinum
2008-07-09 17:22 . 2008-07-09 17:22 <DIR> d-------- C:\silver
2008-07-04 16:38 . 2008-07-04 16:38 <DIR> d-------- C:\WINDOWS\l2schemas
2008-07-04 12:47 . 2007-02-28 12:38 2,057,600 --a------ C:\WINDOWS\system32\drivers\ntkrnlpa.exe
2008-07-01 15:44 . 2004-08-04 05:26 257,024 --a--c--- C:\WINDOWS\system32\dllcache\infocomm.dll
2008-07-01 15:43 . 2004-08-04 05:26 562,176 --a--c--- C:\WINDOWS\system32\dllcache\fxsst.dll
2008-07-01 15:42 . 2004-08-04 05:26 2,134,528 --a--c--- C:\WINDOWS\system32\dllcache\smtpsnap.dll
2008-07-01 15:40 . 2008-07-01 15:40 488 -rah----- C:\WINDOWS\system32\logonui.exe.manifest
2008-07-01 15:39 . 2001-08-23 09:30 16,384 --a--c--- C:\WINDOWS\system32\dllcache\isignup.exe
2008-07-01 15:39 . 2008-07-10 21:27 749 -rah----- C:\WINDOWS\WindowsShell.Manifest
2008-07-01 15:39 . 2008-07-10 21:27 749 -rah----- C:\WINDOWS\system32\wuaucpl.cpl.manifest
2008-07-01 15:39 . 2008-07-10 21:27 749 -rah----- C:\WINDOWS\system32\sapi.cpl.manifest
2008-07-01 15:39 . 2008-07-10 21:27 749 -rah----- C:\WINDOWS\system32\nwc.cpl.manifest
2008-07-01 15:39 . 2008-07-10 21:27 749 -rah----- C:\WINDOWS\system32\ncpa.cpl.manifest
2008-07-01 15:38 . 2004-08-04 05:26 214,528 --a--c--- C:\WINDOWS\system32\dllcache\icwconn1.exe
2008-07-01 15:38 . 2004-08-04 05:26 86,016 --a--c--- C:\WINDOWS\system32\dllcache\icwconn2.exe
2008-07-01 15:38 . 2004-08-04 05:26 32,768 --a--c--- C:\WINDOWS\system32\dllcache\icwdl.dll
2008-07-01 15:38 . 2004-08-04 05:26 20,480 --a--c--- C:\WINDOWS\system32\dllcache\inetwiz.exe
2008-07-01 15:36 . 2001-08-23 09:30 169,984 --a--c--- C:\WINDOWS\system32\dllcache\iisui.dll
2008-07-01 15:36 . 2001-08-23 09:30 60,928 --a--c--- C:\WINDOWS\system32\dllcache\iisclex4.dll
2008-07-01 15:36 . 2001-08-23 09:30 19,968 --a------ C:\WINDOWS\system32\inetsloc.dll
2008-07-01 15:36 . 2001-08-23 09:30 19,968 --a--c--- C:\WINDOWS\system32\dllcache\inetsloc.dll
2008-07-01 15:36 . 2001-08-23 09:30 7,168 --a------ C:\WINDOWS\system32\wamregps.dll
2008-07-01 15:36 . 2001-08-23 09:30 7,168 --a--c--- C:\WINDOWS\system32\dllcache\wamregps.dll
2008-07-01 15:36 . 2001-08-23 09:30 3,584 --a------ C:\WINDOWS\system32\iismui.dll
2008-07-01 15:36 . 2001-08-23 09:30 3,584 --a--c--- C:\WINDOWS\system32\dllcache\iismui.dll
2008-07-01 15:33 . 2004-08-04 05:26 133,632 --a------ C:\WINDOWS\system32\iisRtl.dll
2008-07-01 15:33 . 2004-08-04 05:26 133,632 --a--c--- C:\WINDOWS\system32\dllcache\iisrtl.dll
2008-07-01 15:24 . 2004-08-04 06:27 1,086,058 -ra------ C:\WINDOWS\SET99.tmp
2008-07-01 15:24 . 2004-08-04 06:33 1,042,903 -ra------ C:\WINDOWS\SET96.tmp
2008-07-01 15:24 . 2004-08-04 06:28 502,724 --a--c--- C:\WINDOWS\system32\dllcache\NT5INF.CAT
2008-07-01 15:24 . 2004-08-04 06:28 13,753 -ra------ C:\WINDOWS\SETA5.tmp
2008-06-28 13:57 . 2008-06-30 15:15 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2008-06-28 13:06 . 2008-06-28 13:15 <DIR> d-------- C:\Program Files\RCrawler
2008-06-27 23:58 . 2008-06-28 00:02 <DIR> d-------- C:\Program Files\Microsoft Bootvis
2008-06-27 23:37 . 2008-06-27 23:37 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2008-06-27 23:28 . 2008-06-27 23:28 <DIR> d-------- C:\Program Files\Debugging Tools for Windows
2008-06-27 13:00 . 2008-06-27 13:01 <DIR> d-------- C:\Documents and Settings\Zeinab2810\Application Data\LogoMaker
2008-06-26 23:45 . 2008-06-26 23:45 <DIR> d--hs---- C:\found.001
2008-06-26 13:40 . 2008-07-21 03:03 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2008-06-25 16:24 . 2004-01-11 01:17 45,568 --a------ C:\WINDOWS\system32\YM11AUTH.DLL
2008-06-24 19:51 . 2004-05-13 14:15 89,600 --a------ C:\WINDOWS\system32\MSCAL.OCX
2008-06-24 01:14 . 2004-01-29 14:32 132,608 --a------ C:\WINDOWS\system32\TLBINF32.DLL
2008-06-23 20:51 . 2008-06-23 20:51 <DIR> d-------- C:\Documents and Settings\Jnoubi2210\Application Data\URSoft
2008-06-23 20:51 . 2008-06-23 20:51 <DIR> d-------- C:\Documents and Settings\Jnoubi2210\Application Data\Grisoft
2008-06-23 15:22 . 2003-09-23 09:30 647,872 --a--c--- C:\WINDOWS\system32\MSCOMCT2.OCX
2008-06-23 15:20 . 2003-09-23 09:30 109,248 --a--c--- C:\WINDOWS\system32\MSWINSCK.OCX
2008-06-23 14:49 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-06-23 14:49 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-06-23 14:49 . 2008-05-29 09:35 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
2008-06-23 14:49 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-06-23 14:49 . 2008-06-15 15:28 81,920 --a------ C:\WINDOWS\system32\IEDFix.C.exe
2008-06-23 14:49 . 2008-05-23 18:21 81,920 --a------ C:\WINDOWS\system32\404Fix.exe
2008-06-23 14:49 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-06-23 14:49 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-06-22 12:03 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-06-22 12:03 . 2007-07-30 19:19 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-06-21 15:34 . 2008-07-21 11:19 534,990,848 --a------ C:\WINDOWS\MEMORY.DMP
2008-06-21 11:55 . 2006-07-22 23:49 5,376 --a------ C:\WINDOWS\system32\antiwpa.dll
2008-06-21 11:54 . 2004-08-04 05:26 96,768 --a------ C:\WINDOWS\system32\dpcdll.dll.wga
2008-06-21 11:54 . 2004-08-04 05:26 24,064 --a------ C:\WINDOWS\system32\pidgen.dll.wga
2008-06-21 11:23 . 2004-08-04 05:26 358,912 --a--c--- C:\WINDOWS\system32\dllcache\wmic.exe
2008-06-21 11:23 . 2004-08-04 05:26 92,672 --a--c--- C:\WINDOWS\system32\dllcache\policman.dll
2008-06-21 11:15 . 2004-08-04 06:27 1,086,058 -ra------ C:\WINDOWS\SET3A.tmp
2008-06-21 11:15 . 2004-08-04 06:33 1,042,903 -ra------ C:\WINDOWS\SET37.tmp
2008-06-21 11:15 . 2004-08-04 06:28 13,753 -ra------ C:\WINDOWS\SET49.tmp
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-20 12:37 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\cleaner
2008-07-20 09:16 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\Skype
2008-07-19 18:34 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\skypePM
2008-07-13 10:51 76,657 ----a-w C:\Program Files\PC-Checkup.log
2008-07-13 10:51 24,434 ----a-w C:\Program Files\PC-Checkup.lst
2008-07-13 10:51 --------- d-----w C:\Program Files\Backup
2008-07-11 11:21 --------- d-----w C:\Program Files\lg_swupdate
2008-07-01 08:10 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\Thinstall
2008-06-28 15:30 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira
2008-06-25 08:02 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-06-24 16:47 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-20 12:34 --------- d-----w C:\Documents and Settings\Administrator\Application Data\CyberScrub
2008-06-20 12:33 --------- d-----w C:\Documents and Settings\Administrator\Application Data\cleaner
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-19 12:36 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\URSoft
2008-06-17 16:30 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\Mikrotik
2008-06-09 11:09 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\Zyzoom_Autorun_Viruses_cleaner
2008-06-02 09:38 456 ----a-w C:\Program Files\note-sv.html
2008-06-02 09:38 18,304 ----a-w C:\Program Files\irunin.ini
2008-06-02 09:37 8,134 ----a-w C:\Program Files\irunin.bmp
2008-06-02 09:37 737,280 -c--a-w C:\WINDOWS\iun6002.exe
2008-06-02 09:37 7,351 ----a-w C:\Program Files\irunin.dat
2008-06-02 09:37 15,938 ----a-w C:\Program Files\irunin.lng
2008-05-29 11:33 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-05-29 11:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-05-29 11:32 --------- d-----w C:\Program Files\Messenger Plus! Live(2)
2008-05-22 11:31 --------- d-----w C:\Documents and Settings\Zeinab2810\Application Data\MyLogoMaker
2008-05-22 11:28 --------- d-----w C:\Program Files\MySoftware
2008-05-21 13:20 5,009,900 -c--a-w C:\WINDOWS\REGBK00.ZIP
2007-06-05 07:24 3,949,568 -c--a-w C:\Program Files\PCCheckUp.exe
2007-02-25 05:09 118,784 -c--a-w C:\Program Files\JkDefrag.dll
2004-01-26 13:36 110,592 -c--a-w C:\Program Files\NTAMK.dll
.
((((((((((((((((((((((((((((( snapshot@2008-07-13_15.01.04.43 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-04-21 06:56:54 1,024,000 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\browseui.dll
+ 2008-04-21 06:56:54 151,040 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\cdfview.dll
+ 2008-04-21 06:56:55 1,054,208 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\danim.dll
+ 2008-04-21 06:56:55 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\dxtmsft.dll
+ 2008-04-21 06:56:55 205,312 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\dxtrans.dll
+ 2008-04-21 06:56:55 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\extmgr.dll
+ 2008-04-17 10:46:59 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\iedw.exe
+ 2008-04-21 06:56:56 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\iepeers.dll
+ 2008-04-21 06:56:56 96,256 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\inseng.dll
+ 2008-04-21 06:56:56 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\jsproxy.dll
+ 2008-04-21 06:56:57 3,066,880 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mshtml.dll
+ 2008-04-21 06:56:57 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mshtmled.dll
+ 2008-04-21 06:56:57 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\msrating.dll
+ 2008-04-21 06:56:58 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\mstime.dll
+ 2008-04-21 06:56:58 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\pngfilt.dll
+ 2008-04-21 06:56:58 1,499,136 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\shdocvw.dll
+ 2008-04-21 06:56:58 474,112 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\shlwapi.dll
+ 2008-04-21 06:56:58 618,496 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\urlmon.dll
+ 2008-04-21 06:56:59 666,624 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\wininet.dll
+ 2008-04-17 10:37:04 351,744 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP2QFE\xpsp3res.dll
+ 2008-04-21 06:44:29 3,066,880 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\mshtml.dll
+ 2008-04-21 06:44:29 666,112 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3GDR\wininet.dll
+ 2008-04-21 06:24:01 3,067,392 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\mshtml.dll
+ 2008-04-21 06:24:02 666,624 ----a-w C:\WINDOWS\$hf_mig$\KB950759\SP3QFE\wininet.dll
+ 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB950759\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB950759\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB950759\update\spcustom.dll
+ 2007-11-30 12:39:22 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB950759\update\update.exe
+ 2007-11-30 12:39:22 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB950759\update\updspapi.dll
+ 2006-08-16 12:08:32 100,352 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
+ 2008-06-20 10:44:08 138,368 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\afd.sys
+ 2008-06-20 17:36:11 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
+ 2008-06-20 17:36:11 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
+ 2008-06-20 10:44:42 360,960 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
+ 2008-06-20 09:32:39 225,920 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
+ 2008-06-20 11:40:08 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\afd.sys
+ 2008-06-20 17:46:57 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
+ 2008-06-20 17:46:57 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
+ 2008-06-20 11:51:12 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
+ 2008-06-20 11:08:27 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
+ 2008-06-20 11:48:03 138,496 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\afd.sys
+ 2008-06-20 17:43:05 147,968 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
+ 2008-06-20 17:43:05 245,248 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
+ 2008-06-20 11:59:02 361,600 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
+ 2008-06-20 11:16:44 225,856 ----a-w C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
+ 2007-11-30 12:39:22 17,272 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spmsg.dll
+ 2007-11-30 12:39:22 231,288 ----a-w C:\WINDOWS\$hf_mig$\KB951748\spuninst.exe
+ 2007-11-30 12:39:22 26,488 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\spcustom.dll
+ 2007-11-30 12:39:18 755,576 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
+ 2007-11-30 12:39:19 382,840 ----a-w C:\WINDOWS\$hf_mig$\KB951748\update\updspapi.dll
- 2004-08-04 00:56:42 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
+ 2006-08-16 11:58:05 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
- 2004-08-04 00:56:42 1,016,832 ----a-w C:\WINDOWS\system32\browseui.dll
+ 2008-04-21 07:03:56 1,023,488 ----a-w C:\WINDOWS\system32\browseui.dll
- 2004-08-04 00:56:42 150,528 ----a-w C:\WINDOWS\system32\cdfview.dll
+ 2008-04-21 07:03:56 151,040 ----a-w C:\WINDOWS\system32\cdfview.dll
- 2004-08-04 00:56:50 98,304 ----a-w C:\WINDOWS\system32\cscript.exe
+ 2007-07-31 16:15:06 114,688 -c--a-w C:\WINDOWS\system32\cscript.exe
- 2004-08-04 00:56:42 1,053,696 ----a-w C:\WINDOWS\system32\danim.dll
+ 2008-04-21 07:03:57 1,054,208 ----a-w C:\WINDOWS\system32\danim.dll
- 2001-08-23 05:00:00 45,083 ----a-w C:\WINDOWS\system32\dispex.dll
+ 2007-07-31 16:15:24 32,768 -c--a-w C:\WINDOWS\system32\dispex.dll
- 2004-08-04 00:56:42 100,352 -c--a-w C:\WINDOWS\system32\dllcache\6to4svc.dll
+ 2006-08-16 11:58:05 100,352 -c--a-w C:\WINDOWS\system32\dllcache\6to4svc.dll
- 2004-08-03 23:14:16 138,496 -c--a-w C:\WINDOWS\system32\dllcache\afd.sys
+ 2008-06-20 10:44:38 138,368 -c--a-w C:\WINDOWS\system32\dllcache\afd.sys
- 2004-08-04 00:56:42 1,016,832 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
+ 2008-04-21 07:03:56 1,023,488 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll
- 2004-08-04 00:56:42 150,528 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
+ 2008-04-21 07:03:56 151,040 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll
- 2004-08-04 00:56:50 98,304 -c--a-w C:\WINDOWS\system32\dllcache\cscript.exe
+ 2007-07-31 16:15:06 114,688 -c--a-w C:\WINDOWS\system32\dllcache\cscript.exe
- 2004-08-04 00:56:42 1,053,696 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
+ 2008-04-21 07:03:57 1,054,208 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll
- 2004-08-04 00:56:44 561,179 -c--a-w C:\WINDOWS\system32\dllcache\dao360.dll
+ 2008-03-25 04:50:25 554,008 -c--a-w C:\WINDOWS\system32\dllcache\dao360.dll
- 2001-08-23 05:00:00 45,083 -c--a-w C:\WINDOWS\system32\dllcache\dispex.dll
+ 2007-07-31 16:15:24 32,768 -c--a-w C:\WINDOWS\system32\dllcache\dispex.dll
- 2004-08-04 00:56:44 148,480 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
+ 2008-06-20 17:41:10 148,992 -c--a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
- 2004-08-04 00:56:44 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-04-21 07:03:57 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2004-08-04 00:56:44 201,728 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-04-21 07:03:57 205,312 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
- 2004-08-04 00:56:44 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-04-21 07:03:57 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
- 2004-08-04 00:56:52 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
+ 2008-04-17 10:52:54 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe
- 2004-08-04 00:56:44 249,344 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
+ 2008-04-21 07:03:58 251,392 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll
- 2004-08-04 00:56:44 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
+ 2008-04-21 07:03:58 96,256 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll
- 2004-08-04 00:56:44 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll
+ 2007-07-31 16:15:24 491,520 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll
- 2004-08-04 00:56:44 15,872 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-04-21 07:03:58 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
- 2004-08-04 00:56:44 512,029 -c--a-w C:\WINDOWS\system32\dllcache\msexch40.dll
+ 2008-03-25 04:50:28 518,944 -c--a-w C:\WINDOWS\system32\dllcache\msexch40.dll
- 2004-08-04 00:56:44 319,517 -c--a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 -c--a-w C:\WINDOWS\system32\dllcache\msexcl40.dll
- 2004-08-04 00:56:44 3,003,392 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-04-21 07:03:59 3,059,712 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2004-08-04 00:56:44 448,512 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-04-21 07:03:59 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2004-08-04 00:56:44 1,507,356 -c--a-w C:\WINDOWS\system32\dllcache\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 -c--a-w C:\WINDOWS\system32\dllcache\msjet40.dll
- 2004-07-17 11:34:48 358,976 -c--a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
+ 2008-03-25 04:50:40 355,112 -c--a-w C:\WINDOWS\system32\dllcache\msjetol1.dll
- 2004-08-04 00:56:44 151,583 -c--a-w C:\WINDOWS\system32\dllcache\msjint40.dll
+ 2008-03-27 08:12:54 151,583 -c--a-w C:\WINDOWS\system32\dllcache\msjint40.dll
- 2004-08-04 00:56:44 53,279 -c--a-w C:\WINDOWS\system32\dllcache\msjter40.dll
+ 2008-03-25 04:50:42 60,192 -c--a-w C:\WINDOWS\system32\dllcache\msjter40.dll
- 2004-08-04 00:56:44 241,693 -c--a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 -c--a-w C:\WINDOWS\system32\dllcache\msjtes40.dll
- 2004-08-04 00:56:44 213,023 -c--a-w C:\WINDOWS\system32\dllcache\msltus40.dll
+ 2008-03-25 04:50:44 219,936 -c--a-w C:\WINDOWS\system32\dllcache\msltus40.dll
- 2004-08-04 00:56:44 348,189 -c--a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 -c--a-w C:\WINDOWS\system32\dllcache\mspbde40.dll
- 2004-08-04 00:56:44 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-04-21 07:03:59 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
- 2004-08-04 00:56:44 421,919 -c--a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 -c--a-w C:\WINDOWS\system32\dllcache\msrd2x40.dll
- 2004-08-04 00:56:44 315,423 -c--a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 -c--a-w C:\WINDOWS\system32\dllcache\msrd3x40.dll
- 2004-08-04 00:56:44 552,989 -c--a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 -c--a-w C:\WINDOWS\system32\dllcache\msrepl40.dll
- 2004-08-04 00:56:44 258,077 -c--a-w C:\WINDOWS\system32\dllcache\mstext40.dll
+ 2008-03-25 04:50:55 264,992 -c--a-w C:\WINDOWS\system32\dllcache\mstext40.dll
- 2004-08-04 00:56:44 530,432 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-04-21 07:03:59 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
- 2004-08-04 00:56:46 831,519 -c--a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 -c--a-w C:\WINDOWS\system32\dllcache\mswdat10.dll
- 2004-08-04 00:56:46 245,248 -c--a-w C:\WINDOWS\system32\dllcache\mswsock.dll
+ 2008-06-20 17:41:10 245,248 -c--a-w C:\WINDOWS\system32\dllcache\mswsock.dll
- 2004-08-04 00:56:46 614,429 -c--a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 -c--a-w C:\WINDOWS\system32\dllcache\mswstr10.dll
- 2004-08-04 00:56:46 348,189 -c--a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 -c--a-w C:\WINDOWS\system32\dllcache\msxbde40.dll
- 2004-08-04 00:56:46 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-04-21 07:03:59 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2004-08-04 00:56:46 1,287,680 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll
+ 2008-05-07 05:18:48 1,287,680 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll
- 2001-08-23 05:00:00 200,064 -c--a-w C:\WINDOWS\system32\dllcache\rmcast.sys
+ 2008-05-08 12:28:49 202,752 -c--a-w C:\WINDOWS\system32\dllcache\rmcast.sys
- 2004-08-04 00:56:46 159,744 -c--a-w C:\WINDOWS\system32\dllcache\scrobj.dll
+ 2007-07-31 16:15:28 163,840 -c--a-w C:\WINDOWS\system32\dllcache\scrobj.dll
- 2004-08-04 00:56:46 151,552 -c--a-w C:\WINDOWS\system32\dllcache\scrrun.dll
+ 2007-07-31 16:15:28 155,648 -c--a-w C:\WINDOWS\system32\dllcache\scrrun.dll
- 2004-08-04 00:56:46 1,483,264 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
+ 2008-04-21 07:04:00 1,494,528 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
- 2004-08-04 00:56:46 473,600 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2008-04-21 07:04:00 474,112 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
- 2004-08-03 23:14:42 359,040 -c--a-w C:\WINDOWS\system32\dllcache\tcpip.sys
+ 2008-06-20 10:45:13 360,320 -c--a-w C:\WINDOWS\system32\dllcache\tcpip.sys
- 2004-08-03 23:07:46 223,616 -c--a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
+ 2008-06-20 09:52:06 225,920 -c--a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
- 2004-08-04 00:56:48 601,088 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-04-21 07:04:00 615,936 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
- 2004-08-04 00:56:48 417,792 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll
+ 2007-07-31 16:15:28 413,696 -c--a-w C:\WINDOWS\system32\dllcache\vbscript.dll
- 2004-08-04 00:56:48 656,384 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-04-21 07:04:00 659,456 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
- 2005-01-28 10:44:28 224,768 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll
+ 2007-10-27 13:10:06 227,328 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll
- 2004-08-04 00:56:58 114,688 -c--a-w C:\WINDOWS\system32\dllcache\wscript.exe
+ 2007-07-31 16:15:22 135,168 -c--a-w C:\WINDOWS\system32\dllcache\wscript.exe
- 2004-08-04 00:56:48 65,536 -c--a-w C:\WINDOWS\system32\dllcache\wshext.dll
+ 2007-07-31 16:15:30 69,632 -c--a-w C:\WINDOWS\system32\dllcache\wshext.dll
- 2004-08-04 00:56:44 148,480 ----a-w C:\WINDOWS\system32\dnsapi.dll
+ 2008-06-20 17:41:10 148,992 ----a-w C:\WINDOWS\system32\dnsapi.dll
- 2001-08-23 05:00:00 200,064 ----a-w C:\WINDOWS\system32\drivers\RMCast.sys
+ 2008-05-08 12:28:49 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
- 2004-08-04 00:56:44 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
+ 2008-04-21 07:03:57 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll
- 2004-08-04 00:56:44 201,728 ----a-w C:\WINDOWS\system32\dxtrans.dll
+ 2008-04-21 07:03:57 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll
- 2004-08-04 00:56:44 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
+ 2008-04-21 07:03:57 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll
- 2004-08-04 00:56:44 249,344 ----a-w C:\WINDOWS\system32\iepeers.dll
+ 2008-04-21 07:03:58 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll
- 2004-08-04 00:56:44 96,256 ----a-w C:\WINDOWS\system32\inseng.dll
+ 2008-04-21 07:03:58 96,256 ----a-w C:\WINDOWS\system32\inseng.dll
- 2004-08-04 00:56:44 450,560 ----a-w C:\WINDOWS\system32\jscript.dll
+ 2007-07-31 16:15:24 491,520 -c--a-w C:\WINDOWS\system32\jscript.dll
- 2004-08-04 00:56:44 15,872 ----a-w C:\WINDOWS\system32\jsproxy.dll
+ 2008-04-21 07:03:58 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll
- 2004-08-04 00:56:44 512,029 ----a-w C:\WINDOWS\system32\msexch40.dll
+ 2008-03-25 04:50:28 518,944 ----a-w C:\WINDOWS\system32\msexch40.dll
- 2004-08-04 00:56:44 319,517 ----a-w C:\WINDOWS\system32\msexcl40.dll
+ 2008-03-25 04:50:30 326,432 ----a-w C:\WINDOWS\system32\msexcl40.dll
- 2004-08-04 00:56:44 3,003,392 ----a-w C:\WINDOWS\system32\mshtml.dll
+ 2008-04-21 07:03:59 3,059,712 ----a-w C:\WINDOWS\system32\mshtml.dll
- 2004-08-04 00:56:44 448,512 ----a-w C:\WINDOWS\system32\mshtmled.dll
+ 2008-04-21 07:03:59 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll
- 2004-08-04 00:56:44 1,507,356 ----a-w C:\WINDOWS\system32\msjet40.dll
+ 2008-03-25 04:50:34 1,516,568 ----a-w C:\WINDOWS\system32\msjet40.dll
- 2004-07-17 11:34:48 358,976 ----a-w C:\WINDOWS\system32\msjetoledb40.dll
+ 2008-03-25 04:50:40 355,112 ----a-w C:\WINDOWS\system32\msjetoledb40.dll
- 2004-08-04 00:56:44 151,583 ----a-w C:\WINDOWS\system32\msjint40.dll
+ 2008-03-27 08:12:54 151,583 ----a-w C:\WINDOWS\system32\msjint40.dll
- 2004-08-04 00:56:44 53,279 ----a-w C:\WINDOWS\system32\msjter40.dll
+ 2008-03-25 04:50:42 60,192 ----a-w C:\WINDOWS\system32\msjter40.dll
- 2004-08-04 00:56:44 241,693 ----a-w C:\WINDOWS\system32\msjtes40.dll
+ 2008-03-25 04:50:42 248,608 ----a-w C:\WINDOWS\system32\msjtes40.dll
- 2004-08-04 00:56:44 213,023 ----a-w C:\WINDOWS\system32\msltus40.dll
+ 2008-03-25 04:50:44 219,936 ----a-w C:\WINDOWS\system32\msltus40.dll
- 2004-08-04 00:56:44 348,189 ----a-w C:\WINDOWS\system32\mspbde40.dll
+ 2008-03-25 04:50:45 355,104 ----a-w C:\WINDOWS\system32\mspbde40.dll
- 2004-08-04 00:56:44 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
+ 2008-04-21 07:03:59 146,432 ----a-w C:\WINDOWS\system32\msrating.dll
- 2004-08-04 00:56:44 421,919 ----a-w C:\WINDOWS\system32\msrd2x40.dll
+ 2008-03-25 04:50:47 432,928 ----a-w C:\WINDOWS\system32\msrd2x40.dll
- 2004-08-04 00:56:44 315,423 ----a-w C:\WINDOWS\system32\msrd3x40.dll
+ 2008-03-25 04:50:49 322,336 ----a-w C:\WINDOWS\system32\msrd3x40.dll
- 2004-08-04 00:56:44 552,989 ----a-w C:\WINDOWS\system32\msrepl40.dll
+ 2008-03-25 04:50:52 559,904 ----a-w C:\WINDOWS\system32\msrepl40.dll
- 2004-08-04 00:56:44 258,077 ----a-w C:\WINDOWS\system32\mstext40.dll
+ 2008-03-25 04:50:55 264,992 ----a-w C:\WINDOWS\system32\mstext40.dll
- 2004-08-04 00:56:44 530,432 ----a-w C:\WINDOWS\system32\mstime.dll
+ 2008-04-21 07:03:59 532,480 ----a-w C:\WINDOWS\system32\mstime.dll
- 2004-08-04 00:56:46 831,519 ----a-w C:\WINDOWS\system32\mswdat10.dll
+ 2008-03-25 04:50:57 838,432 ----a-w C:\WINDOWS\system32\mswdat10.dll
- 2004-08-04 00:56:46 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll
+ 2008-06-20 17:41:10 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll
- 2004-08-04 00:56:46 614,429 ----a-w C:\WINDOWS\system32\mswstr10.dll
+ 2008-03-25 04:50:58 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
- 2004-08-04 00:56:46 348,189 ----a-w C:\WINDOWS\system32\msxbde40.dll
+ 2008-03-25 04:50:58 355,104 ----a-w C:\WINDOWS\system32\msxbde40.dll
- 2004-08-04 00:56:46 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
+ 2008-04-21 07:03:59 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll
- 2004-08-04 00:56:46 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
+ 2008-05-07 05:18:48 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
- 2004-08-04 00:56:46 159,744 ----a-w C:\WINDOWS\system32\scrobj.dll
+ 2007-07-31 16:15:28 163,840 -c--a-w C:\WINDOWS\system32\scrobj.dll
- 2004-08-04 00:56:46 151,552 ----a-w C:\WINDOWS\system32\scrrun.dll
+ 2007-07-31 16:15:28 155,648 -c--a-w C:\WINDOWS\system32\scrrun.dll
- 2004-08-04 00:56:46 1,483,264 ----a-w C:\WINDOWS\system32\shdocvw.dll
+ 2008-04-21 07:04:00 1,494,528 ----a-w C:\WINDOWS\system32\shdocvw.dll
- 2004-08-04 00:56:46 473,600 ----a-w C:\WINDOWS\system32\shlwapi.dll
+ 2008-04-21 07:04:00 474,112 ----a-w C:\WINDOWS\system32\shlwapi.dll
- 2004-08-04 00:56:48 601,088 ----a-w C:\WINDOWS\system32\urlmon.dll
+ 2008-04-21 07:04:00 615,936 ----a-w C:\WINDOWS\system32\urlmon.dll
- 2004-08-04 00:56:48 417,792 ----a-w C:\WINDOWS\system32\vbscript.dll
+ 2007-07-31 16:15:28 413,696 -c--a-w C:\WINDOWS\system32\vbscript.dll
- 2004-08-04 00:56:48 656,384 ----a-w C:\WINDOWS\system32\wininet.dll
+ 2008-04-21 07:04:00 659,456 ----a-w C:\WINDOWS\system32\wininet.dll
- 2005-01-28 10:44:28 224,768 -c--a-w C:\WINDOWS\system32\wmasf.dll
+ 2007-10-27 13:10:06 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
- 2004-08-04 00:56:58 114,688 ----a-w C:\WINDOWS\system32\wscript.exe
+ 2007-07-31 16:15:22 135,168 -c--a-w C:\WINDOWS\system32\wscript.exe
- 2004-08-04 00:56:48 65,536 ----a-w C:\WINDOWS\system32\wshext.dll
+ 2007-07-31 16:15:30 69,632 -c--a-w C:\WINDOWS\system32\wshext.dll
- 2006-10-31 06:42:38 265,216 -c--a-w C:\WINDOWS\system32\xpsp3res.dll
+ 2008-04-17 10:37:04 351,744 ----a-w C:\WINDOWS\system32\xpsp3res.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-08-16 17:49 5728112]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 05:26 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\azzam.exe" [2008-04-04 16:52 6731312]
"KeybdUtility"="C:\Program Files\On Screen Display\Hotkey.exe" [2005-07-26 10:48 81920]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-29 05:32 98394]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-29 05:31 688218]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-04-07 16:19 185896]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 16:30 208952]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 03:01 59392]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 03:02 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 03:02 455168]
"Vistadrv"="C:\Program Files\VistaDrives\vsdrv.exe" [2006-07-30 03:37 121089]
"AGRSMMSG"="AGRSMMSG.exe" [2004-11-09 12:49 88358 C:\WINDOWS\AGRSMMSG.exe]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"NoDispAppearancePage"= 0 (0x0)
"NoDispScrSavPage"= 0 (0x0)
"NoDispSettingsPage"= 0 (0x0)
"NoConfigPage"= 0 (0x0)
"NoDevMgrPage"= 0 (0x0)
"NoFileSysPage"= 0 (0x0)
"NoVirtMemPage"= 0 (0x0)
"DisableChangePassword"= 0 (0x0)
"NoFolderOptions"= 0 (0x0)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoClose"= 0 (0x0)
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{26F5978F-6493-4ee3-B114-C0C3ACCF9D4D}"= "C:\WINDOWS\system32\bmpsap.dll" [2006-06-01 19:24 114688]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli scecli scecli
[HKLM\~\startupfolder\C:^Documents and Settings^Zeinab2810^Start Menu^Programs^Startup^RocketDock.lnk]
backup=C:\WINDOWS\pss\RocketDock.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k [X]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartupFaster
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
--a--c--- 2004-12-07 22:40 344064 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\batterymiser]
--a--c--- 2006-06-01 19:24 335872 C:\Program Files\Battery miser\batterymiser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2004-08-04 05:26 15360 C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
--a--c--- 2004-08-04 16:30 208952 C:\WINDOWS\ime\imjp8_1\imjpmig.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IPO3]
--a--c--- 2005-06-22 13:30 1028096 C:\Program Files\LG Software\IP Operator 2005\IP Operator 2005.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LG Intelligent Update]
--a--c--- 2008-04-07 08:06 102400 C:\Program Files\lg_swupdate\autoupdate.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC-Checkup]
--a--c--- 2007-06-05 11:54 3949568 C:\Program Files\PCCheckUp.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
--a--c--- 2004-10-29 05:31 688218 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPLpr]
--a--c--- 2004-10-29 05:32 98394 C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a--c--- 2008-04-07 16:19 185896 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Tracks Eraser Pro]
--a--c--- 2008-03-18 20:43 1363816 C:\Program Files\Acesoft\Tracks Eraser Pro\te.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a--c--- 2007-04-25 20:14 35328 C:\Program Files\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
-ra--c--- 2004-11-09 12:49 88358 C:\WINDOWS\AGRSMMSG.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
.
------- Supplementary Scan -------
.
R0 -: HKLM-Main,Window Title = Microsoft Internet Explorer
O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O17 -: HKLM\CCS\Interface\{B9834850-497A-40BA-A797-D47F0845FD9F}: NameServer = 172.10.0.1 91.142.48.48
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2008-07-21 11:22:19
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
.
**************************************************************************
.
Completion time: 2008-07-21 11:29:33 - machine was rebooted [Zeinab2810]
ComboFix-quarantined-files.txt 2008-07-21 06:59:17
Pre-Run: 31,777,837,056 bytes free
Post-Run: 32,304,197,632 bytes free
479 --- E O F --- 2008-07-20 22:33:39
