Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

AV360 DDS log


  • Please log in to reply
21 replies to this topic

#1 edp333

edp333

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 25 February 2009 - 03:25 PM

hello, this laptop is infected with Antivirus 360. It is blocking MBAM from running, so I have tried the manual removal with no luck. Here is a copy of the DDS log:


DDS (Ver_09-02-01.01) - NTFSx86
Run by Paula at 13:12:27.37 on Wed 02/25/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.5.0_12
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.502.142 [GMT -6:00]

AV: Trend Micro AntiVirus *On-access scanning disabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Documents and Settings\Paula\Local Settings\Temporary Internet Files\Content.IE5\BZDD2UP8\dds[1].scr
C:\Program Files\Windows Live\Messenger\msnmsgr.exe

============== Pseudo HJT Report ===============

uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: N/A: {00a6faf6-072e-44cf-8957-5838f569a31d} - c:\program files\mywebsearch\srchastt\1.bin\MWSSRCAS.DLL
BHO: MyWebSearch Search Assistant BHO: {00a6faf1-072e-44cf-8957-5838f569a31d} - c:\program files\mywebsearch\srchastt\1.bin\MWSSRCAS.DLL
BHO: mwsBar BHO: {07b18ea1-a523-4961-b6bb-170de4475cca} - c:\program files\mywebsearch\bar\1.bin\MWSBAR.DLL
BHO: &Research: {0b014b81-4e12-46f9-806f-55867af8fd3c} - c:\windows\system32\winsystems.dll
BHO: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll
BHO: Windows Live Toolbar Helper: {bdbd1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\windows live toolbar\msntb.dll
BHO: NoExplorer - No File
TB: Windows Live Toolbar: {bdad1dad-c946-4a17-adc1-64b5b4ff55d0} - c:\program files\windows live toolbar\msntb.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
TB: Lexmark Toolbar: {1017a80c-6f09-4548-a84d-edd6ac9525f0} - c:\program files\lexmark toolbar\toolband.dll
TB: My Web Search: {07b18ea9-a523-4961-b6bb-170de4475cca} - c:\program files\mywebsearch\bar\1.bin\MWSBAR.DLL
EB: {2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
uRun: [WeatherDPA] "c:\program files\zango\bin\10.3.37.0\Weather.exe" -auto
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
uRun: [MySpaceIM] c:\program files\myspace\im\MySpaceIM.exe
uRun: [36266493996210438916126564668257] c:\program files\antivirus 2009\av360.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SynTPEnh] "c:\program files\synaptics\syntp\SynTPEnh.exe"
mRun: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
mRun: [Cpqset] c:\program files\hewlett-packard\default settings\cpqset.exe
mRun: [SynTPStart] "c:\program files\synaptics\syntp\SynTPStart.exe"
mRun: [HP Software Update] "c:\program files\hp\hp software update\HPWuSchd2.exe"
mRun: [UfSeAgnt.exe] "c:\program files\trend micro\internet security\UfSeAgnt.exe"
mRun: [lxcymon.exe] "c:\program files\lexmark 3400 series\lxcymon.exe"
mRun: [EzPrint] "c:\program files\lexmark 3400 series\ezprint.exe"
mRun: [FaxCenterServer] "c:\program files\lexmark fax solutions\fm3032.exe" /s
mRun: [LXCYCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCYtime.dll,_RunDLLEntry@16
mRun: [MyWebSearch Plugin] rundll32 c:\progra~1\mywebs~1\bar\1.bin\M3PLUGIN.DLL,UPF
mRun: [My Web Search Bar Search Scope Monitor] "c:\progra~1\mywebs~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
mRun: [MyWebSearch Email Plugin] c:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.6.0_07\bin\jusched.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
dRun: [MySpaceIM] c:\program files\myspace\im\MySpaceIM.exe
IE: &Search - http://edits.mywebsearch.com/toolbaredits/...?p=ZKxdm021YYUS
IE: &Windows Live Search - c:\program files\windows live toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - hxxp://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-3/WebfettiInitialSetup1.0.1.0.cab
DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} - hxxp://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_12-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Notify: igfxcui - igfxdev.dll
Notify: WRNotifier - WRLogonNTF.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service --> c:\windows\system32\lxcycoms.exe -service [?]
R2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [2008-4-19 52240]
R2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [2008-2-15 36368]
R3 tmproxy;Trend Micro Proxy Service;c:\program files\trend micro\internet security\TmProxy.exe [2008-4-19 648456]
S2 MyWebSearchService;My Web Search Service;c:\progra~1\mywebs~1\bar\1.bin\mwssvc.exe [2008-9-10 28762]

=============== Created Last 30 ================

2009-02-24 16:38 <DIR> --d----- C:\e82c8e16b228636f6b
2009-02-20 10:32 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes

==================== Find3M ====================

2009-01-25 19:01 2,202 a------- c:\windows\system32\TDSSfpmp.dll
2009-01-25 19:01 61,440 a------- c:\windows\system32\TDSScfub.dll
2009-01-25 19:01 60,416 a------- c:\windows\system32\drivers\TDSSpaxt.sys
2009-01-25 19:01 35,840 a------- c:\windows\system32\TDSSofxh.dll
2009-01-25 19:01 31,232 a------- c:\windows\system32\TDSSriqp.dll
2009-01-25 19:01 29,696 a------- c:\windows\system32\TDSSnrsr.dll
2009-01-21 17:33 66,048 a------- c:\windows\system32\ieupdates.exe
2008-12-20 17:15 826,368 a------- c:\windows\system32\wininet.dll
2008-10-02 15:46 16,384 a--sh--- c:\windows\temp\cookies\index.dat
2008-10-02 15:46 16,384 a--sh--- c:\windows\temp\history\history.ie5\index.dat
2008-10-02 15:46 32,768 a--sh--- c:\windows\temp\temporary internet files\content.ie5\index.dat

============= FINISH: 13:13:26.46 ===============

BC AdBot (Login to Remove)

 


#2 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 25 February 2009 - 09:50 PM

The attach.txt log is available upon request.

Edited by edp333, 25 February 2009 - 10:01 PM.


#3 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 02 March 2009 - 03:34 PM

I wasable to run esetsmartinstaller_enu and remove someof the baddies. But the MyWebSearch will not uninstall. The Hijack thislog is:

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-02-01.01)

Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 12/12/2007 11:12:28 PM
System Uptime: 2/25/2009 8:16:58 PM (0 hours ago)

Motherboard: Hewlett-Packard | | 30C6
Processor: Intel® Celeron® M CPU 420 @ 1.60GHz | U1 | 1595/mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 75 GiB total, 59.411 GiB free.
D: is CDROM ()
F: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP98: 11/21/2008 7:06:33 PM - System Checkpoint
RP99: 11/22/2008 10:48:50 AM - Software Distribution Service 3.0
RP100: 11/23/2008 11:28:11 AM - System Checkpoint
RP101: 11/24/2008 4:21:02 PM - System Checkpoint
RP102: 11/25/2008 6:33:10 PM - System Checkpoint
RP103: 11/26/2008 8:05:27 PM - System Checkpoint
RP104: 11/28/2008 12:57:29 PM - System Checkpoint
RP105: 11/29/2008 1:25:42 PM - System Checkpoint
RP106: 11/30/2008 1:29:31 PM - System Checkpoint
RP107: 12/1/2008 6:10:35 PM - System Checkpoint
RP108: 12/3/2008 8:38:22 PM - System Checkpoint
RP109: 12/4/2008 9:27:12 PM - System Checkpoint
RP110: 12/6/2008 2:36:49 AM - System Checkpoint
RP111: 12/7/2008 5:48:35 AM - System Checkpoint
RP112: 12/8/2008 9:39:37 PM - System Checkpoint
RP113: 12/10/2008 12:44:42 AM - System Checkpoint
RP114: 12/10/2008 4:27:13 PM - Software Distribution Service 3.0
RP115: 12/11/2008 4:05:43 PM - Software Distribution Service 3.0
RP116: 12/13/2008 11:51:16 AM - System Checkpoint
RP117: 12/14/2008 1:05:32 PM - System Checkpoint
RP118: 12/15/2008 4:56:30 PM - System Checkpoint
RP119: 12/16/2008 5:07:09 PM - System Checkpoint
RP120: 12/17/2008 10:59:22 PM - System Checkpoint
RP121: 12/18/2008 10:02:52 AM - Software Distribution Service 3.0
RP122: 12/19/2008 11:47:52 AM - System Checkpoint
RP123: 12/20/2008 12:56:21 PM - System Checkpoint
RP124: 12/21/2008 4:17:08 PM - System Checkpoint
RP125: 12/22/2008 10:59:51 PM - System Checkpoint
RP126: 12/24/2008 4:08:29 AM - System Checkpoint
RP127: 12/25/2008 9:39:03 AM - System Checkpoint
RP128: 12/26/2008 3:37:33 PM - System Checkpoint
RP129: 12/28/2008 1:20:20 AM - System Checkpoint
RP130: 12/29/2008 1:35:20 AM - System Checkpoint
RP131: 12/30/2008 4:23:05 AM - System Checkpoint
RP132: 12/31/2008 3:44:27 PM - System Checkpoint
RP133: 1/1/2009 8:08:33 PM - System Checkpoint
RP134: 1/2/2009 11:44:52 PM - System Checkpoint
RP135: 1/4/2009 2:15:31 PM - System Checkpoint
RP136: 1/5/2009 7:15:00 PM - System Checkpoint
RP137: 1/7/2009 2:43:18 AM - System Checkpoint
RP138: 1/8/2009 3:56:55 AM - System Checkpoint
RP139: 1/9/2009 6:00:11 PM - System Checkpoint
RP140: 1/11/2009 6:50:11 PM - System Checkpoint
RP141: 1/15/2009 10:08:38 PM - System Checkpoint
RP142: 1/16/2009 3:00:25 AM - Software Distribution Service 3.0
RP143: 1/17/2009 5:36:49 PM - System Checkpoint
RP144: 1/18/2009 5:40:39 PM - System Checkpoint
RP145: 1/19/2009 6:33:53 PM - System Checkpoint
RP146: 1/20/2009 7:19:42 PM - System Checkpoint

==== Installed Programs ======================

2007 Microsoft Office Suite Service Pack 1 (SP1)
ABBYY FineReader 6.0 Sprint
Adobe Flash Player 10 ActiveX
Adobe Shockwave Player
Apple Mobile Device Support
Apple Software Update
Bonjour
Broadcom 802.11 Wireless LAN Adapter
Canon Camera Access Library
Canon Camera Support Core Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon G.726 WMP-Decoder
Canon MovieEdit Task for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities EOS Utility
Canon Utilities PhotoStitch
Canon Utilities ZoomBrowser EX
Conexant HD Audio
Disney Pirates of the Caribbean Online
Form Fill (Windows Live Toolbar)
Google Toolbar for Internet Explorer
HDAUDIO Soft Data Fax Modem with SmartCP
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB952287)
HP Update
Intel® Graphics Media Accelerator Driver
iTunes
J2SE Runtime Environment 5.0 Update 12
Java™ 6 Update 7
Lexmark 3400 Series
Lexmark Fax Solutions
Lexmark Toolbar
LG USB Modem driver
Map Button (Windows Live Toolbar)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Software Update for Web Folders (English) 12
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft User-Mode Driver Framework Feature Pack 1.0
MSXML 6 Service Pack 2 (KB954459)
My Web Search (Webfetti)
MySpaceIM
NetWaiting
Norton PC Checkup
OneCare Advisor (Windows Live Toolbar)
OpenOffice.org Installer 1.0
Popup Blocker (Windows Live Toolbar)
QuickTime
Rhapsody Player Engine
Safari
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB958439)
Security Update for Microsoft Office Excel 2007 (KB958437)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB956828)
Security Update for Microsoft Office Word 2007 (KB956358)
Security Update for Visio 2007 (KB947590)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB960715)
Smart Menus (Windows Live Toolbar)
SmartAudio
Synaptics Pointing Device Driver
Trend Micro AntiVirus
Update for Office 2007 (KB946691)
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920342)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB925720)
Update for Windows XP (KB925876)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
WebFldrs XP
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Favorites for Windows Live Toolbar
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Live Outlook Toolbar (Windows Live Toolbar)
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Presentation Foundation
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
XML Paper Specification Shared Components Pack 1.0

==== Event Viewer Messages From Past Week ========

2/20/2009 11:26:17 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
2/20/2009 10:45:57 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Fips intelppm tmtdi
2/20/2009 11:41:57 AM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
2/20/2009 11:42:03 AM, error: Service Control Manager [7034] - The Canon Camera Access Library 8 service terminated unexpectedly. It has done this 1 time(s).
2/20/2009 11:42:09 AM, error: Service Control Manager [7034] - The Trend Micro Unauthorized Change Prevention Service service terminated unexpectedly. It has done this 1 time(s).
2/20/2009 11:42:15 AM, error: Service Control Manager [7034] - The Trend Micro Proxy Service service terminated unexpectedly. It has done this 1 time(s).
2/20/2009 11:42:23 AM, error: Service Control Manager [7034] - The Trend Micro Central Control Component service terminated unexpectedly. It has done this 1 time(s).
2/20/2009 11:42:34 AM, error: Service Control Manager [7034] - The Bonjour Service service terminated unexpectedly. It has done this 1 time(s).
2/20/2009 11:42:41 AM, error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
2/20/2009 1:23:40 PM, error: Service Control Manager [7034] - The Trend Micro Central Control Component service terminated unexpectedly. It has done this 2 time(s).
2/20/2009 2:51:14 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
2/20/2009 3:04:38 PM, error: System Error [1003] - Error code 100000d1, parameter1 e21f4000, parameter2 00000002, parameter3 00000000, parameter4 a9ce5cf6.
2/24/2009 4:43:32 PM, error: System Error [1003] - Error code 100000d1, parameter1 e1606000, parameter2 00000002, parameter3 00000000, parameter4 aa065cf6.
2/25/2009 1:05:21 PM, error: System Error [1003] - Error code 100000d1, parameter1 e1b72000, parameter2 00000002, parameter3 00000000, parameter4 a9ce5cf6.

==== End Of File ===========================

#4 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:08:49 PM

Posted 02 March 2009 - 04:49 PM

edp333

1. Go HERE and download File Lister.Save it to your Desktop
Rt Click ->> Extract all ->> And extract it to your Desktop
Additional help on extracting zip files can be found HERE
Open the File Lister Folder.
Rt Click FileLister.vbe ->>Select Open Then Open to confirm.
As the program runs, it will appear that nothing is happening.
When the program is fnished it will produce a log for you C:\Files.txt
Copy and paste the contents of that log in your reply.
Posted Image
Microsoft MVP - Windows Security

#5 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 02 March 2009 - 09:24 PM

Thanks bamajim. Here is the file lister log:

+++++++++++++++++++++++++++++++++
+ File Lister Version 1.0.6
+
+ By bamajim / bamajim.com
+++++++++++++++++++++++++++++++++

Report ran on --->>> 3/2/2009 8:20:24 PM


====== Running Processes ======

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\WINDOWS\System32\WScript.exe

====== BHO's under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects ======

BHO: (NO NAME) - {0B014B81-4E12-46F9-806F-55867AF8FD3C} -

BHO: (NO NAME) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll

BHO: (NO NAME) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

BHO: (NO NAME) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

BHO: (NO NAME) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: (NO NAME) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

BHO: (NO NAME) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll

BHO: (NO NAME) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

====== Values under HKLM\~\Run ======

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"HotKeysCmds"="C:\\WINDOWS\\system32\\hkcmd.exe"
"Persistence"="C:\\WINDOWS\\system32\\igfxpers.exe"
"SynTPEnh"="\"C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe\""
"High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe"
"Cpqset"="C:\\Program Files\\Hewlett-Packard\\Default Settings\\cpqset.exe"
"SynTPStart"="\"C:\\Program Files\\Synaptics\\SynTP\\SynTPStart.exe\""
"HP Software Update"="\"C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe\""
"UfSeAgnt.exe"="\"C:\\Program Files\\Trend Micro\\Internet Security\\UfSeAgnt.exe\""
"lxcymon.exe"="\"C:\\Program Files\\Lexmark 3400 Series\\lxcymon.exe\""
"EzPrint"="\"C:\\Program Files\\Lexmark 3400 Series\\ezprint.exe\""
"FaxCenterServer"="\"C:\\Program Files\\Lexmark Fax Solutions\\fm3032.exe\" /s"
"LXCYCATS"="rundll32 C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\LXCYtime.dll,_RunDLLEntry@16"
"MyWebSearch Plugin"="rundll32 C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\M3PLUGIN.DLL,UPF"
"My Web Search Bar Search Scope Monitor"="\"C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\m3SrchMn.exe\" /m=2 /w"
"MyWebSearch Email Plugin"="C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_07\\bin\\jusched.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"


====== Values under HKCU\~\Run ======

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"MsnMsgr"="\"C:\\Program Files\\Windows Live\\Messenger\\MsnMsgr.Exe\" /background"
"WeatherDPA"="\"C:\\Program Files\\Zango\\bin\\10.3.37.0\\Weather.exe\" -auto"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"
"MyWebSearch Email Plugin"="C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe"
"MySpaceIM"="C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"
"36266493996210438916126564668257"="C:\\Program Files\\Antivirus 2009\\av360.exe"


====== Folders and Files from "%\" and "%\Windows" Created Last 60 Days ======

1/17/2009 1:44:36 AM 0 C:\Config.Msi
2/24/2009 4:38:38 PM 825269 C:\e82c8e16b228636f6b
3/2/2009 8:20:24 PM 4377 32 C:\Files.txt
3/2/2009 8:13:45 PM 526503936 38 C:\hiberfil.sys
1/16/2009 3:03:43 AM 960704 C:\WINDOWS\$NtUninstallKB958687$
1/16/2009 3:03:43 AM 627648 C:\WINDOWS\$NtUninstallKB958687$\spuninst
2/24/2009 4:37:15 PM 744788 C:\WINDOWS\$NtUninstallKB960715$
2/24/2009 4:37:15 PM 626004 C:\WINDOWS\$NtUninstallKB960715$\spuninst
2/25/2009 1:06:45 PM 9439726 C:\WINDOWS\$NtUninstallKB967715$
2/25/2009 1:06:45 PM 628718 C:\WINDOWS\$NtUninstallKB967715$\spuninst
2/20/2009 11:38:06 AM 180224 C:\WINDOWS\Minidump
2/26/2009 3:57:51 PM 0 32 C:\WINDOWS\0.log
2/26/2009 3:57:37 PM 171994 32 C:\WINDOWS\ntbtlog.txt
2/26/2009 4:34:00 PM 1110 32 C:\WINDOWS\tmevtmgr.log
1/21/2009 5:33:27 PM 66048 32 C:\WINDOWS\system32\ieupdates.exe
1/25/2009 7:01:26 PM 2202 32 C:\WINDOWS\system32\TDSSfpmp.dll
1/25/2009 7:01:23 PM 441 32 C:\WINDOWS\system32\TDSSosvd.dat
1/25/2009 7:01:26 PM 3244 32 C:\WINDOWS\system32\TDSStkdv.log

====== Files under "\Administrator\Startup" Last 60 Days======

2/20/2009 10:44:37 AM 84 38 C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\desktop.ini

====== Files under "\All Users\Startup" Last 60 Days======


====== Folders under "\Program Files" Last 60 Days======

2/25/2009 10:22:05 PM 2332686 C:\Program Files\CCleaner
2/25/2009 10:22:05 PM 766976 C:\Program Files\CCleaner\Lang
1/17/2009 1:47:52 AM 77209892 C:\Program Files\QuickTime
1/17/2009 1:48:00 AM 2188288 C:\Program Files\QuickTime\PictureViewer.Resources
1/17/2009 1:48:00 AM 144384 C:\Program Files\QuickTime\PictureViewer.Resources\da.lproj
1/17/2009 1:48:01 AM 132608 C:\Program Files\QuickTime\PictureViewer.Resources\de.lproj
1/17/2009 1:48:01 AM 92160 C:\Program Files\QuickTime\PictureViewer.Resources\en.lproj
1/17/2009 1:48:01 AM 143872 C:\Program Files\QuickTime\PictureViewer.Resources\es.lproj
1/17/2009 1:48:01 AM 132096 C:\Program Files\QuickTime\PictureViewer.Resources\fi.lproj
1/17/2009 1:48:02 AM 141312 C:\Program Files\QuickTime\PictureViewer.Resources\fr.lproj
1/17/2009 1:48:02 AM 138240 C:\Program Files\QuickTime\PictureViewer.Resources\it.lproj
1/17/2009 1:48:02 AM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\ja.lproj
1/17/2009 1:48:02 AM 92160 C:\Program Files\QuickTime\PictureViewer.Resources\ko.lproj
1/17/2009 1:48:02 AM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\nb.lproj
1/17/2009 1:48:02 AM 134144 C:\Program Files\QuickTime\PictureViewer.Resources\nl.lproj
1/17/2009 1:48:02 AM 136192 C:\Program Files\QuickTime\PictureViewer.Resources\pl.lproj
1/17/2009 1:48:02 AM 139776 C:\Program Files\QuickTime\PictureViewer.Resources\pt_PT.lproj
1/17/2009 1:48:02 AM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\ru.lproj
1/17/2009 1:48:02 AM 140800 C:\Program Files\QuickTime\PictureViewer.Resources\sv.lproj
1/17/2009 1:48:03 AM 128512 C:\Program Files\QuickTime\PictureViewer.Resources\zh_CN.lproj
1/17/2009 1:48:03 AM 124416 C:\Program Files\QuickTime\PictureViewer.Resources\zh_TW.lproj
1/17/2009 1:48:55 AM 1010122 C:\Program Files\QuickTime\Plugins
1/17/2009 1:47:53 AM 422427 C:\Program Files\QuickTime\PropertyPanels
1/17/2009 1:47:59 AM 55808 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\da.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\de.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\en.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\es.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fi.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fr.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\it.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ja.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ko.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\nb.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\nl.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\pl.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\pt_PT.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ru.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\sv.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_CN.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_TW.lproj
1/17/2009 1:48:03 AM 75264 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\da.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\de.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\en.lproj
1/17/2009 1:48:03 AM 4608 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\es.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fi.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fr.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\it.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ja.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ko.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\nb.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\nl.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\pl.lproj
1/17/2009 1:48:04 AM 4608 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\pt_PT.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ru.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\sv.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_CN.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_TW.lproj
1/17/2009 1:47:52 AM 0 C:\Program Files\QuickTime\QTComponents
1/17/2009 1:47:52 AM 60745838 C:\Program Files\QuickTime\QTSystem
1/17/2009 1:47:58 AM 55808 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\da.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\de.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\en.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\es.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fi.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fr.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\it.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ja.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ko.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\nb.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\nl.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\pl.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\pt_PT.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ru.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\sv.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_CN.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_TW.lproj
1/17/2009 1:48:04 AM 4391588 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources
1/17/2009 1:48:04 AM 241664 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\da.lproj
1/17/2009 1:48:04 AM 247296 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\de.lproj
1/17/2009 1:48:04 AM 238080 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\en.lproj
1/17/2009 1:48:04 AM 245248 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\es.lproj
1/17/2009 1:48:04 AM 238592 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fi.lproj
1/17/2009 1:48:04 AM 247296 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fr.lproj
1/17/2009 1:48:05 AM 239616 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\it.lproj
1/17/2009 1:48:05 AM 239104 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ja.lproj
1/17/2009 1:48:05 AM 236544 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ko.lproj
1/17/2009 1:48:06 AM 254464 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\nb.lproj
1/17/2009 1:48:06 AM 245248 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\nl.lproj
1/17/2009 1:48:06 AM 240640 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\pl.lproj
1/17/2009 1:48:06 AM 241664 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\pt_PT.lproj
1/17/2009 1:48:15 AM 240640 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ru.lproj
1/17/2009 1:48:15 AM 238080 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\sv.lproj
1/17/2009 1:48:15 AM 235008 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_CN.lproj
1/17/2009 1:48:15 AM 231936 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_TW.lproj
1/17/2009 1:48:15 AM 156672 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources
1/17/2009 1:48:15 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\da.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\de.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\en.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\es.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fi.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fr.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\it.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ja.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ko.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\nb.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\nl.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\pl.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\pt_PT.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ru.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\sv.lproj
1/17/2009 1:48:17 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_CN.lproj
1/17/2009 1:48:17 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_TW.lproj
1/17/2009 1:48:17 AM 293888 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\da.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\de.lproj
1/17/2009 1:48:17 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\en.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\es.lproj
1/17/2009 1:48:17 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fi.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fr.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\it.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ja.lproj
1/17/2009 1:48:17 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ko.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\nb.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\nl.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\pl.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ru.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\sv.lproj
1/17/2009 1:48:17 AM 14848 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:17 AM 14848 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:17 AM 1379840 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\da.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\de.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\en.lproj
1/17/2009 1:48:17 AM 84480 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\es.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fi.lproj
1/17/2009 1:48:17 AM 79872 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fr.lproj
1/17/2009 1:48:17 AM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\it.lproj
1/17/2009 1:48:17 AM 79872 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ja.lproj
1/17/2009 1:48:17 AM 78848 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ko.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\nb.lproj
1/17/2009 1:48:17 AM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\nl.lproj
1/17/2009 1:48:17 AM 83456 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\pl.lproj
1/17/2009 1:48:18 AM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\pt_PT.lproj
1/17/2009 1:48:18 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ru.lproj
1/17/2009 1:48:18 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\sv.lproj
1/17/2009 1:48:18 AM 78336 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_CN.lproj
1/17/2009 1:48:18 AM 78336 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_TW.lproj
1/17/2009 1:48:18 AM 4045824 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\da.lproj
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\de.lproj
1/17/2009 1:48:18 AM 225792 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\en.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\es.lproj
1/17/2009 1:48:18 AM 225792 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fi.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fr.lproj
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\it.lproj
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ja.lproj
1/17/2009 1:48:18 AM 224256 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ko.lproj
1/17/2009 1:48:18 AM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\nb.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\nl.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\pl.lproj
1/17/2009 1:48:19 AM 227840 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:19 AM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ru.lproj
1/17/2009 1:48:19 AM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\sv.lproj
1/17/2009 1:48:19 AM 223232 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:19 AM 223232 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:19 AM 178688 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\da.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\de.lproj
1/17/2009 1:48:19 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\en.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\es.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fi.lproj
1/17/2009 1:48:19 AM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fr.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\it.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ja.lproj
1/17/2009 1:48:19 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ko.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\nb.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\nl.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\pl.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\pt_PT.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ru.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\sv.lproj
1/17/2009 1:48:20 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_CN.lproj
1/17/2009 1:48:20 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_TW.lproj
1/17/2009 1:48:20 AM 1969152 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources
1/17/2009 1:48:20 AM 115200 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\da.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\de.lproj
1/17/2009 1:48:20 AM 114688 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\en.lproj
1/17/2009 1:48:20 AM 116224 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\es.lproj
1/17/2009 1:48:20 AM 114688 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fi.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fr.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\it.lproj
1/17/2009 1:48:20 AM 113152 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ja.lproj
1/17/2009 1:48:20 AM 112640 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ko.lproj
1/17/2009 1:48:20 AM 116224 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\nb.lproj
1/17/2009 1:48:20 AM 115712 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\nl.lproj
1/17/2009 1:48:20 AM 117248 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\pl.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\pt_PT.lproj
1/17/2009 1:48:20 AM 115712 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ru.lproj
1/17/2009 1:48:20 AM 115200 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\sv.lproj
1/17/2009 1:48:20 AM 110592 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_CN.lproj
1/17/2009 1:48:20 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_TW.lproj
1/17/2009 1:48:20 AM 476160 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\da.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\de.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\en.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\es.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fi.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fr.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\it.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ja.lproj
1/17/2009 1:48:21 AM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ko.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\nb.lproj
1/17/2009 1:48:21 AM 14336 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\nl.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\pl.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\pt_PT.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ru.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\sv.lproj
1/17/2009 1:48:21 AM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_CN.lproj
1/17/2009 1:48:21 AM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_TW.lproj
1/17/2009 1:48:21 AM 66560 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\da.lproj
1/17/2009 1:48:21 AM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\de.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\en.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\es.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fi.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fr.lproj
1/17/2009 1:48:21 AM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\it.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ja.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ko.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\nb.lproj
1/17/2009 1:48:21 AM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\nl.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\pl.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\pt_PT.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ru.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\sv.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_CN.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_TW.lproj
1/17/2009 1:48:21 AM 388096 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\da.lproj
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\de.lproj
1/17/2009 1:48:21 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\en.lproj
1/17/2009 1:48:21 AM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\es.lproj
1/17/2009 1:48:21 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fi.lproj
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fr.lproj
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\it.lproj
1/17/2009 1:48:21 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ja.lproj
1/17/2009 1:48:22 AM 20992 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ko.lproj
1/17/2009 1:48:22 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\nb.lproj
1/17/2009 1:48:22 AM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\nl.lproj
1/17/2009 1:48:22 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\pl.lproj
1/17/2009 1:48:22 AM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\pt_PT.lproj
1/17/2009 1:48:22 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ru.lproj
1/17/2009 1:48:22 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\sv.lproj
1/17/2009 1:48:22 AM 20480 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_CN.lproj
1/17/2009 1:48:22 AM 20480 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_TW.lproj
1/17/2009 1:48:22 AM 2745856 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\da.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\de.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\en.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\es.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\fi.lproj
1/17/2009 1:48:22 AM 161280 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\fr.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\it.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ja.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ko.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\nb.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\nl.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\pl.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\pt_PT.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ru.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\sv.lproj
1/17/2009 1:48:22 AM 159744 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\zh_CN.lproj
1/17/2009 1:48:22 AM 159744 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\zh_TW.lproj
1/17/2009 1:48:22 AM 104960 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\da.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\de.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\en.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\es.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\fi.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\fr.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\it.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ja.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ko.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\nb.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\nl.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\pl.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\pt_PT.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ru.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\sv.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\zh_CN.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\zh_TW.lproj
1/17/2009 1:48:23 AM 103936 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\da.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\de.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\en.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\es.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\fi.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\fr.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\it.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ja.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ko.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\nb.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\nl.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\pl.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\pt_PT.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ru.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\sv.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\zh_CN.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\zh_TW.lproj
1/17/2009 1:48:23 AM 274944 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources
1/17/2009 1:48:23 AM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\da.lproj
1/17/2009 1:48:23 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\de.lproj
1/17/2009 1:48:23 AM 14848 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\en.lproj
1/17/2009 1:48:23 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\es.lproj
1/17/2009 1:48:23 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\fi.lproj
1/17/2009 1:48:24 AM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\fr.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\it.lproj
1/17/2009 1:48:24 AM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ja.lproj
1/17/2009 1:48:24 AM 14336 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ko.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\nb.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\nl.lproj
1/17/2009 1:48:24 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\pl.lproj
1/17/2009 1:48:24 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\pt_PT.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ru.lproj
1/17/2009 1:48:25 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\sv.lproj
1/17/2009 1:48:25 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_CN.lproj
1/17/2009 1:48:25 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_TW.lproj
1/17/2009 1:48:25 AM 720384 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources
1/17/2009 1:48:25 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\da.lproj
1/17/2009 1:48:25 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\de.lproj
1/17/2009 1:48:25 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\en.lproj
1/17/2009 1:48:25 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\es.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\fi.lproj
1/17/2009 1:48:28 AM 41472 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\fr.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\it.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ja.lproj
1/17/2009 1:48:28 AM 39936 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ko.lproj
1/17/2009 1:48:28 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\nb.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\nl.lproj
1/17/2009 1:48:28 AM 42496 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\pl.lproj
1/17/2009 1:48:28 AM 41984 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\pt_PT.lproj
1/17/2009 1:48:29 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ru.lproj
1/17/2009 1:48:29 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\sv.lproj
1/17/2009 1:48:29 AM 37888 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\zh_CN.lproj
1/17/2009 1:48:29 AM 37888 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\zh_TW.lproj
1/17/2009 1:48:29 AM 82944 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\da.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\de.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\en.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\es.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fi.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fr.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\it.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ja.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ko.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nb.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nl.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pl.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pt_PT.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\sv.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj
1/17/2009 1:48:30 AM 1921536 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources
1/17/2009 1:48:30 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\da.lproj
1/17/2009 1:48:30 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\de.lproj
1/17/2009 1:48:30 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\en.lproj
1/17/2009 1:48:30 AM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\es.lproj
1/17/2009 1:48:30 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\fi.lproj
1/17/2009 1:48:31 AM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\fr.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\it.lproj
1/17/2009 1:48:31 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ja.lproj
1/17/2009 1:48:31 AM 110592 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ko.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\nb.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\nl.lproj
1/17/2009 1:48:31 AM 112640 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\pl.lproj
1/17/2009 1:48:31 AM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\pt_PT.lproj
1/17/2009 1:48:31 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ru.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\sv.lproj
1/17/2009 1:48:31 AM 109568 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\zh_CN.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\zh_TW.lproj
1/17/2009 1:48:32 AM 204800 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\da.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\de.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\en.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\es.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\fi.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\fr.lproj
1/17/2009 1:48:32 AM 12288 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\it.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ja.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ko.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\nb.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\nl.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\pl.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ru.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\sv.lproj
1/17/2009 1:48:32 AM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:33 AM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:33 AM 83456 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\da.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\de.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\en.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\es.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\fi.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\fr.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\it.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ja.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ko.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\nb.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\nl.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\pl.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\pt_PT.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ru.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\sv.lproj
1/17/2009 1:48:34 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_CN.lproj
1/17/2009 1:48:34 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_TW.lproj
1/17/2009 1:48:34 AM 519168 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\da.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\de.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\en.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\es.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\fi.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\fr.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\it.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ja.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ko.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\nb.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\nl.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\pl.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\pt_PT.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ru.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\sv.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\zh_CN.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\zh_TW.lproj
1/17/2009 1:48:34 AM 99840 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources
1/17/2009 1:48:34 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\da.lproj
1/17/2009 1:48:34 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\de.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\en.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\es.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\fi.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\fr.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\it.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ja.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ko.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\nb.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\nl.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\pl.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ru.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\sv.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:35 AM 1402880 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources
1/17/2009 1:48:35 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\da.lproj
1/17/2009 1:48:35 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\de.lproj
1/17/2009 1:48:35 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\en.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\es.lproj
1/17/2009 1:48:36 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\fi.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\fr.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\it.lproj
1/17/2009 1:48:36 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ja.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ko.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\nb.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\nl.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\pl.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\pt_PT.lproj
1/17/2009 1:48:37 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ru.lproj
1/17/2009 1:48:37 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\sv.lproj
1/17/2009 1:48:37 AM 60416 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\zh_CN.lproj
1/17/2009 1:48:37 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\zh_TW.lproj
1/17/2009 1:48:29 AM 510464 C:\Program Files\QuickTime\QuickTimePlayer.Resources
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\da.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\de.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\en.lproj
1/17/2009 1:48:29 AM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\es.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\fi.lproj
1/17/2009 1:48:29 AM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\fr.lproj
1/17/2009 1:48:29 AM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\it.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ja.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ko.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\nb.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\nl.lproj
1/17/2009 1:48:29 AM 11264 C:\Program Files\QuickTime\QuickTimePlayer.Resources\pl.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\pt_PT.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ru.lproj
1/17/2009 1:48:29 AM 10752 C:\Program Files\QuickTime\QuickTimePlayer.Resources\sv.lproj
1/17/2009 1:48:29 AM 17920 C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_CN.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_TW.lproj
1/17/2009 1:39:09 AM 63340506 C:\Program Files\Safari
1/17/2009 1:39:23 AM 171446 C:\Program Files\Safari\CFNetwork.resources
1/17/2009 1:39:23 AM 9002 C:\Program Files\Safari\CFNetwork.resources\da.lproj
1/17/2009 1:39:23 AM 9384 C:\Program Files\Safari\CFNetwork.resources\de.lproj
1/17/2009 1:39:23 AM 8934 C:\Program Files\Safari\CFNetwork.resources\English.lproj
1/17/2009 1:39:23 AM 9512 C:\Program Files\Safari\CFNetwork.resources\es.lproj
1/17/2009 1:39:23 AM 8984 C:\Program Files\Safari\CFNetwork.resources\fi.lproj
1/17/2009 1:39:23 AM 9222 C:\Program Files\Safari\CFNetwork.resources\fr.lproj
1/17/2009 1:39:23 AM 9328 C:\Program Files\Safari\CFNetwork.resources\it.lproj
1/17/2009 1:39:23 AM 8530 C:\Program Files\Safari\CFNetwork.resources\ja.lproj
1/17/2009 1:39:23 AM 7804 C:\Program Files\Safari\CFNetwork.resources\ko.lproj
1/17/2009 1:39:23 AM 8916 C:\Program Files\Safari\CFNetwork.resources\nb.lproj
1/17/2009 1:39:23 AM 9110 C:\Program Files\Safari\CFNetwork.resources\nl.lproj
1/17/2009 1:39:24 AM 9102 C:\Program Files\Safari\CFNetwork.resources\pl.lproj
1/17/2009 1:39:24 AM 9298 C:\Program Files\Safari\CFNetwork.resources\pt_PT.lproj
1/17/2009 1:39:24 AM 9096 C:\Program Files\Safari\CFNetwork.resources\ru.lproj
1/17/2009 1:39:24 AM 8872 C:\Program Files\Safari\CFNetwork.resources\sv.lproj
1/17/2009 1:39:24 AM 7470 C:\Program Files\Safari\CFNetwork.resources\zh_CN.lproj
1/17/2009 1:39:24 AM 7438 C:\Program Files\Safari\CFNetwork.resources\zh_TW.lproj
1/17/2009 1:39:24 AM 780796 C:\Program Files\Safari\CoreFoundation.resources
1/17/2009 1:39:24 AM 628363 C:\Program Files\Safari\CoreFoundation.resources\CharacterSets
1/17/2009 1:39:25 AM 9126 C:\Program Files\Safari\CoreFoundation.resources\da.lproj
1/17/2009 1:39:25 AM 9824 C:\Program Files\Safari\CoreFoundation.resources\de.lproj
1/17/2009 1:39:26 AM 9194 C:\Program Files\Safari\CoreFoundation.resources\en.lproj
1/17/2009 1:39:26 AM 9340 C:\Program Files\Safari\CoreFoundation.resources\es.lproj
1/17/2009 1:39:26 AM 8888 C:\Program Files\Safari\CoreFoundation.resources\fi.lproj
1/17/2009 1:39:26 AM 9228 C:\Program Files\Safari\CoreFoundation.resources\fr.lproj
1/17/2009 1:39:27 AM 9356 C:\Program Files\Safari\CoreFoundation.resources\it.lproj
1/17/2009 1:39:27 AM 7980 C:\Program Files\Safari\CoreFoundation.resources\ja.lproj
1/17/2009 1:39:27 AM 7990 C:\Program Files\Safari\CoreFoundation.resources\ko.lproj
1/17/2009 1:39:27 AM 9162 C:\Program Files\Safari\CoreFoundation.resources\nb.lproj
1/17/2009 1:39:27 AM 9452 C:\Program Files\Safari\CoreFoundation.resources\nl.lproj
1/17/2009 1:39:27 AM 9302 C:\Program Files\Safari\CoreFoundation.resources\pl.lproj
1/17/2009 1:39:27 AM 9342 C:\Program Files\Safari\CoreFoundation.resources\pt_PT.lproj
1/17/2009 1:39:27 AM 9148 C:\Program Files\Safari\CoreFoundation.resources\ru.lproj
1/17/2009 1:39:27 AM 9238 C:\Program Files\Safari\CoreFoundation.resources\sv.lproj
1/17/2009 1:39:27 AM 7500 C:\Program Files\Safari\CoreFoundation.resources\zh_CN.lproj
1/17/2009 1:39:27 AM 7458 C:\Program Files\Safari\CoreFoundation.resources\zh_TW.lproj
1/17/2009 1:39:13 AM 112266 C:\Program Files\Safari\Plugins
1/17/2009 1:39:28 AM 526065 C:\Program Files\Safari\PubSub.resources
1/17/2009 1:39:28 AM 8770 C:\Program Files\Safari\PubSub.resources\da.lproj
1/17/2009 1:39:28 AM 9312 C:\Program Files\Safari\PubSub.resources\de.lproj
1/17/2009 1:39:28 AM 8696 C:\Program Files\Safari\PubSub.resources\English.lproj
1/17/2009 1:39:28 AM 9234 C:\Program Files\Safari\PubSub.resources\es.lproj
1/17/2009 1:39:28 AM 9057 C:\Program Files\Safari\PubSub.resources\fi.lproj
1/17/2009 1:39:28 AM 9385 C:\Program Files\Safari\PubSub.resources\fr.lproj
1/17/2009 1:39:28 AM 140868 C:\Program Files\Safari\PubSub.resources\Framework
1/17/2009 1:39:28 AM 8320 C:\Program Files\Safari\PubSub.resources\Framework\da.lproj
1/17/2009 1:39:28 AM 8876 C:\Program Files\Safari\PubSub.resources\Framework\de.lproj
1/17/2009 1:39:28 AM 8332 C:\Program Files\Safari\PubSub.resources\Framework\English.lproj
1/17/2009 1:39:28 AM 8712 C:\Program Files\Safari\PubSub.resources\Framework\es.lproj
1/17/2009 1:39:28 AM 8238 C:\Program Files\Safari\PubSub.resources\Framework\fi.lproj
1/17/2009 1:39:28 AM 8736 C:\Program Files\Safari\PubSub.resources\Framework\fr.lproj
1/17/2009 1:39:28 AM 8384 C:\Program Files\Safari\PubSub.resources\Framework\it.lproj
1/17/2009 1:39:28 AM 7310 C:\Program Files\Safari\PubSub.resources\Framework\ja.lproj
1/17/2009 1:39:28 AM 7220 C:\Program Files\Safari\PubSub.resources\Framework\ko.lproj
1/17/2009 1:39:28 AM 8232 C:\Program Files\Safari\PubSub.resources\Framework\nb.lproj
1/17/2009 1:39:28 AM 8640 C:\Program Files\Safari\PubSub.resources\Framework\nl.lproj
1/17/2009 1:39:28 AM 8448 C:\Program Files\Safari\PubSub.resources\Framework\pl.lproj
1/17/2009 1:39:28 AM 8460 C:\Program Files\Safari\PubSub.resources\Framework\pt_PT.lproj
1/17/2009 1:39:28 AM 8332 C:\Program Files\Safari\PubSub.resources\Framework\ru.lproj
1/17/2009 1:39:28 AM 8298 C:\Program Files\Safari\PubSub.resources\Framework\sv.lproj
1/17/2009 1:39:28 AM 6702 C:\Program Files\Safari\PubSub.resources\Framework\zh_CN.lproj
1/17/2009 1:39:28 AM 6686 C:\Program Files\Safari\PubSub.resources\Framework\zh_TW.lproj
1/17/2009 1:39:28 AM 9315 C:\Program Files\Safari\PubSub.resources\it.lproj
1/17/2009 1:39:28 AM 7430 C:\Program Files\Safari\PubSub.resources\ja.lproj
1/17/2009 1:39:28 AM 7628 C:\Program Files\Safari\PubSub.resources\ko.lproj
1/17/2009 1:39:29 AM 9069 C:\Program Files\Safari\PubSub.resources\nb.lproj
1/17/2009 1:39:29 AM 9426 C:\Program Files\Safari\PubSub.resources\nl.lproj
1/17/2009 1:39:29 AM 9013 C:\Program Files\Safari\PubSub.resources\pl.lproj
1/17/2009 1:39:29 AM 9023 C:\Program Files\Safari\PubSub.resources\pt_PT.lproj
1/17/2009 1:39:29 AM 8899 C:\Program Files\Safari\PubSub.resources\ru.lproj
1/17/2009 1:39:29 AM 8860 C:\Program Files\Safari\PubSub.resources\sv.lproj
1/17/2009 1:39:29 AM 6993 C:\Program Files\Safari\PubSub.resources\zh_CN.lproj
1/17/2009 1:39:29 AM 7119 C:\Program Files\Safari\PubSub.resources\zh_TW.lproj
1/17/2009 1:39:13 AM 22264234 C:\Program Files\Safari\Safari.resources
1/17/2009 1:39:14 AM 353827 C:\Program Files\Safari\Safari.resources\da.lproj
1/17/2009 1:39:14 AM 1711485 C:\Program Files\Safari\Safari.resources\de.lproj
1/17/2009 1:39:14 AM 3349661 C:\Program Files\Safari\Safari.resources\en.lproj
1/17/2009 1:39:15 AM 537504 C:\Program Files\Safari\Safari.resources\en_AU.lproj
1/17/2009 1:39:15 AM 537504 C:\Program Files\Safari\Safari.resources\en_CA.lproj
1/17/2009 1:39:15 AM 537504 C:\Program Files\Safari\Safari.resources\en_GB.lproj
1/17/2009 1:39:15 AM 1057340 C:\Program Files\Safari\Safari.resources\es.lproj
1/17/2009 1:39:17 AM 357345 C:\Program Files\Safari\Safari.resources\fi.lproj
1/17/2009 1:39:18 AM 1335172 C:\Program Files\Safari\Safari.resources\fr.lproj
1/17/2009 1:39:18 AM 2495646 C:\Program Files\Safari\Safari.resources\Help
1/17/2009 1:39:18 AM 131512 C:\Program Files\Safari\Safari.resources\Help\da.lproj
1/17/2009 1:39:18 AM 139358 C:\Program Files\Safari\Safari.resources\Help\de.lproj
1/17/2009 1:39:18 AM 124870 C:\Program Files\Safari\Safari.resources\Help\en.lproj
1/17/2009 1:39:18 AM 140100 C:\Program Files\Safari\Safari.resources\Help\es.lproj
1/17/2009 1:39:18 AM 137015 C:\Program Files\Safari\Safari.resources\Help\fi.lproj
1/17/2009 1:39:18 AM 142843 C:\Program Files\Safari\Safari.resources\Help\fr.lproj
1/17/2009 1:39:18 AM 139085 C:\Program Files\Safari\Safari.resources\Help\it.lproj
1/17/2009 1:39:18 AM 192676 C:\Program Files\Safari\Safari.resources\Help\ja.lproj
1/17/2009 1:39:19 AM 169701 C:\Program Files\Safari\Safari.resources\Help\ko.lproj
1/17/2009 1:39:19 AM 130299 C:\Program Files\Safari\Safari.resources\Help\nb.lproj
1/17/2009 1:39:19 AM 134484 C:\Program Files\Safari\Safari.resources\Help\nl.lproj
1/17/2009 1:39:19 AM 144105 C:\Program Files\Safari\Safari.resources\Help\pl.lproj
1/17/2009 1:39:19 AM 138590 C:\Program Files\Safari\Safari.resources\Help\pt_PT.lproj
1/17/2009 1:39:19 AM 137485 C:\Program Files\Safari\Safari.resources\Help\ru.lproj
1/17/2009 1:39:19 AM 131947 C:\Program Files\Safari\Safari.resources\Help\sv.lproj
1/17/2009 1:39:19 AM 134424 C:\Program Files\Safari\Safari.resources\Help\zh_CN.lproj
1/17/2009 1:39:19 AM 134285 C:\Program Files\Safari\Safari.resources\Help\zh_TW.lproj
1/17/2009 1:39:19 AM 1266541 C:\Program Files\Safari\Safari.resources\it.lproj
1/17/2009 1:39:19 AM 282355 C:\Program Files\Safari\Safari.resources\ja.lproj
1/17/2009 1:39:20 AM 292959 C:\Program Files\Safari\Safari.resources\ko.lproj
1/17/2009 1:39:20 AM 361337 C:\Program Files\Safari\Safari.resources\nb.lproj
1/17/2009 1:39:20 AM 1369855 C:\Program Files\Safari\Safari.resources\nl.lproj
1/17/2009 1:39:20 AM 358132 C:\Program Files\Safari\Safari.resources\pl.lproj
1/17/2009 1:39:20 AM 1098392 C:\Program Files\Safari\Safari.resources\pt.lproj
1/17/2009 1:39:20 AM 365860 C:\Program Files\Safari\Safari.resources\pt_PT.lproj
1/17/2009 1:39:21 AM 356510 C:\Program Files\Safari\Safari.resources\ru.lproj
1/17/2009 1:39:21 AM 19468 C:\Program Files\Safari\Safari.resources\SnippetEditor
1/17/2009 1:39:21 AM 8242 C:\Program Files\Safari\Safari.resources\SnippetEditor\Images
1/17/2009 1:39:22 AM 1236651 C:\Program Files\Safari\Safari.resources\sv.lproj
1/17/2009 1:39:22 AM 308283 C:\Program Files\Safari\Safari.resources\zh_CN.lproj
1/17/2009 1:39:22 AM 317153 C:\Program Files\Safari\Safari.resources\zh_TW.lproj
1/17/2009 1:39:23 AM 7669267 C:\Program Files\Safari\SafariTheme.resources
1/17/2009 1:39:29 AM 1094600 C:\Program Files\Safari\WebKit.resources
1/17/2009 1:39:29 AM 28710 C:\Program Files\Safari\WebKit.resources\da.lproj
1/17/2009 1:39:29 AM 29726 C:\Program Files\Safari\WebKit.resources\de.lproj
1/17/2009 1:39:29 AM 32628 C:\Program Files\Safari\WebKit.resources\en.lproj
1/17/2009 1:39:29 AM 30072 C:\Program Files\Safari\WebKit.resources\es.lproj
1/17/2009 1:39:29 AM 29246 C:\Program Files\Safari\WebKit.resources\fi.lproj
1/17/2009 1:39:29 AM 29928 C:\Program Files\Safari\WebKit.resources\fr.lproj
1/17/2009 1:39:29 AM 606668 C:\Program Files\Safari\WebKit.resources\inspector
1/17/2009 1:39:29 AM 272559 C:\Program Files\Safari\WebKit.resources\inspector\Images
1/17/2009 1:39:30 AM 29398 C:\Program Files\Safari\WebKit.resources\it.lproj
1/17/2009 1:39:30 AM 26568 C:\Program Files\Safari\WebKit.resources\ja.lproj
1/17/2009 1:39:30 AM 25762 C:\Program Files\Safari\WebKit.resources\ko.lproj
1/17/2009 1:39:30 AM 28788 C:\Program Files\Safari\WebKit.resources\nb.lproj
1/17/2009 1:39:30 AM 29574 C:\Program Files\Safari\WebKit.resources\nl.lproj
1/17/2009 1:39:30 AM 29020 C:\Program Files\Safari\WebKit.resources\pl.lproj
1/17/2009 1:39:30 AM 29710 C:\Program Files\Safari\WebKit.resources\pt_PT.lproj
1/17/2009 1:39:30 AM 29440 C:\Program Files\Safari\WebKit.resources\ru.lproj
1/17/2009 1:39:30 AM 28914 C:\Program Files\Safari\WebKit.resources\sv.lproj
1/17/2009 1:39:30 AM 24798 C:\Program Files\Safari\WebKit.resources\zh_CN.lproj
1/17/2009 1:39:30 AM 24896 C:\Program Files\Safari\WebKit.resources\zh_TW.lproj

====== Files under "\System32\Drivers" Last 60 Days======


====== Files Deleted under "%Temp%" ======

C:\DOCUME~1\Paula\LOCALS~1\Temp\3400 Series_app.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\3SWRNC2K.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\7ca9b2.mst
C:\DOCUME~1\Paula\LOCALS~1\Temp\7d62e0.mst
C:\DOCUME~1\Paula\LOCALS~1\Temp\813c_appcompat.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\a69d7fe.msi
C:\DOCUME~1\Paula\LOCALS~1\Temp\AbbyyMsiLog.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\ASPNETSetup.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\ASPNETSetup_00000.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\ASPNETSetup_00001.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\atl80.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\BZU81SC0.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\calog.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\currentversion.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_depcheckdotnetfx30.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_depcheck_NETFX20_EXP_35.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_depcheck_NETFX30_EXP_35.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_dotnetfx20error.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_dotnetfx20install.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_dotnetfx30error.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_dotnetfx30install.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_dotnetfx3install.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_netfx20MSI198F.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_netfx20UI198F.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_NET_Framework20_Setup2BF7.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_NET_Framework30_Setup2DFE.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_rgb_retMSI1DF5.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_wcf_retCA61EE.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_wcf_retCA7137.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_wcf_retMSI1E06.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_WF_3.0_x86retMSI20C7.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dd_wpf_retMSI1E47.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\dex_ob-52165-1.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\dotNetFx.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\dw.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\EDLCDFL3.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\fla33.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\fla50.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\flaA5.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\GEARInstall.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\gtb2k1033.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\gtb37D.tmp.cab
C:\DOCUME~1\Paula\LOCALS~1\Temp\HR8LZIJF.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\HZTL9PAN.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\IGVHSQK3.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\IMT2.xml
C:\DOCUME~1\Paula\LOCALS~1\Temp\IMT3.xml
C:\DOCUME~1\Paula\LOCALS~1\Temp\IMT4.xml
C:\DOCUME~1\Paula\LOCALS~1\Temp\IMTE3.xml
C:\DOCUME~1\Paula\LOCALS~1\Temp\IMTE4.xml
C:\DOCUME~1\Paula\LOCALS~1\Temp\IMTE5.xml
C:\DOCUME~1\Paula\LOCALS~1\Temp\install.isf
C:\DOCUME~1\Paula\LOCALS~1\Temp\java_install_reg.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\java_install_sp.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\jinstall.cfg
C:\DOCUME~1\Paula\LOCALS~1\Temp\jre-6u7-windows-i586-p-iftw_bdb28397.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\jusched.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\KSVO3JB0.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\libexpat.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\lxcyscan.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\LxProxy.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\mfc80.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\mfc80u.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\mfcm80.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\mfcm80u.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\Microsoft.VC80.ATL.manifest
C:\DOCUME~1\Paula\LOCALS~1\Temp\Microsoft.VC80.CRT.manifest
C:\DOCUME~1\Paula\LOCALS~1\Temp\Microsoft.VC80.MFC.manifest
C:\DOCUME~1\Paula\LOCALS~1\Temp\Microsoft.VC80.MFCLOC.manifest
C:\DOCUME~1\Paula\LOCALS~1\Temp\MSI635be.LOG
C:\DOCUME~1\Paula\LOCALS~1\Temp\MSIad54.LOG
C:\DOCUME~1\Paula\LOCALS~1\Temp\MSIf8aac.LOG
C:\DOCUME~1\Paula\LOCALS~1\Temp\MST1E3.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\msvcm80.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\msvcp80.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\msvcr80.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\N9XHH06G.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\netfx.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\netfxsl.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\netfxupdate.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\NHEKM022.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\NSFD.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\ose00000.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\QTInstallCode.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\qtplugin.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\QuickTimePlayer (2008-04-26 19.47.33).dmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\QZ4ID1VD.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\R318WT3G.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\SetupExe(20080205151355CB0).log
C:\DOCUME~1\Paula\LOCALS~1\Temp\sp32478.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\sp32555.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\sp33442.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\sp33736.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\sp34152.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\sp35444.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\sp35940.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\SST3E.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\SSTB.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\SSTC.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\SSTD.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\SSTE.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\SSTF.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR248.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR249.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR24C.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR24E.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR250.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR254.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR255.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR259.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR2F.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR30.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR32.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR37.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR3C.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR3D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR3E.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR40.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR41.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR42.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR44.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR45.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR48.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR4A.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR4D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR54.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR67.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR6A.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR6D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR6E.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR72.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR77.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR84.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR85.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR87.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR8E.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR90.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR92.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR95.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR99.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TFR9E.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\TmDbg32.dll
C:\DOCUME~1\Paula\LOCALS~1\Temp\uxeventlog.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\wecerr.txt
C:\DOCUME~1\Paula\LOCALS~1\Temp\wmplog00.sqm
C:\DOCUME~1\Paula\LOCALS~1\Temp\wmplog01.sqm
C:\DOCUME~1\Paula\LOCALS~1\Temp\wuredist.cab
C:\DOCUME~1\Paula\LOCALS~1\Temp\wuredist.xml
C:\DOCUME~1\Paula\LOCALS~1\Temp\YG9F7LNN.emf
C:\DOCUME~1\Paula\LOCALS~1\Temp\{B81B04AB-8737-4F58-9E25-BCF2FCDFA780}.blogthis
C:\DOCUME~1\Paula\LOCALS~1\Temp\{CB3BC468-693E-48B4-9EFD-7EE725D159D2}.blogthis
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF116D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF15FA.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF1F75.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF273E.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF28A0.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF290C.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF2B44.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF2E55.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF2EA0.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF2FFC.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF3053.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF3148.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF3747.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF3895.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF3A56.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF4B10.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF4C3C.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF4D49.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF4EF7.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF5280.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF56A.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF56FF.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF592A.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF5A0.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF5A66.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF5AC0.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF6272.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF634D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF6439.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF6546.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF6CFA.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF6DEB.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF6E48.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF6FA2.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF7896.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF7BB9.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF7BC8.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF7E7D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF813F.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF820.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF8B26.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF8E5C.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF98A0.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF9E66.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF9FB.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFA4EA.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFA9CE.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFBBD1.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFBCB4.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFC132.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFC381.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFC5FE.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFD5E5.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFE32F.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFE7D2.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFE7DA.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFE7ED.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFE8D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFEEFF.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFF23D.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFFE9D.tmp

212 Files deleted

====== Files and Folders under "All Users\Application Data" Last 60 Days======

2/20/2009 10:32:34 AM 0 C:\Documents and Settings\All Users\Application Data\Malwarebytes
2/20/2009 10:32:34 AM 0 C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware

====== Possible Rootkit Scan (Note: Items listed here are not necessarily bad)======


====== Values under HKLM\Software\microsoft\shared tools\msconfig\startupreg ======

HKLM\Software\microsoft\shared tools\msconfig\startupreg\


====== Services ( Services that are Whitelisted are not shown) ======

BCM43XX (Broadcom 802.11 Network Adapter Driver)- C:\WINDOWS\system32\DRIVERS\bcmwl5.sys - Manual/Running
HdAudAddService (Microsoft UAA Function Driver for High Definition Audio Service)- C:\WINDOWS\system32\drivers\CHDAud.sys - Manual/Running
HSFHWAZL (HSFHWAZL)- C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys - Manual/Running
HSF_DPV (HSF_DPV)- C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys - Manual/Running
RTL8023xp (Realtek 10/100/1000 PCI NIC Family NDIS XP Driver)- C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys - Manual/Running
SynTP (Synaptics TouchPad Driver)- C:\WINDOWS\system32\DRIVERS\SynTP.sys - Manual/Running
tmactmon (tmactmon)- \??\C:\WINDOWS\system32\drivers\tmactmon.sys - Auto/Running
tmevtmgr (tmevtmgr)- \??\C:\WINDOWS\system32\drivers\tmevtmgr.sys - Auto/Running
tmpreflt (tmpreflt)- C:\WINDOWS\system32\DRIVERS\tmpreflt.sys - Auto/Running
tmtdi (Trend Micro TDI Driver)- C:\WINDOWS\system32\DRIVERS\tmtdi.sys - System/Running
tmxpflt (tmxpflt)- C:\WINDOWS\system32\DRIVERS\tmxpflt.sys - Auto/Running
UIUSys (Conexant Setup API)- C:\WINDOWS\system32\DRIVERS\UIUSYS.SYS - Manual/Stopped
usbbus (LGE CDMA Composite USB Device)- C:\WINDOWS\system32\DRIVERS\lgusbbus.sys - Manual/Stopped
UsbDiag (LGE CDMA USB Serial Port)- C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys - Manual/Stopped
USBModem (LGE CDMA USB Modem)- C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys - Manual/Stopped
vsapint (vsapint)- C:\WINDOWS\system32\DRIVERS\vsapint.sys - Auto/Running
WmiAcpi (Microsoft Windows Management Interface for ACPI)- C:\WINDOWS\system32\DRIVERS\wmiacpi.sys - System/Running
WpdUsb (WpdUsb)- C:\WINDOWS\system32\DRIVERS\wpdusb.sys - Manual/Stopped

====== Uninstall List From Registry ======

Adobe Flash Player 10 ActiveX
Adobe Shockwave Player
Broadcom 802.11 Wireless LAN Adapter
Canon Camera Access Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon G.726 WMP-Decoder
CCleaner (remove only)
Conexant HD Audio
HDAUDIO Soft Data Fax Modem with SmartCP
Canon Camera Support Core Library
Disney Pirates of the Caribbean Online
Canon Utilities EOS Utility
Intel® Graphics Media Accelerator Driver
Microsoft Office Home and Student 2007
Microsoft Internationalized Domain Names Mitigation APIs
Windows Internet Explorer 7
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Security Update for Windows XP (KB890046)
Windows XP Hotfix - KB890859
Windows Media Format SDK Hotfix - KB891122
Windows XP Hotfix - KB891781
Windows Genuine Advantage Validation Tool (KB892130)
Security Update for Windows XP (KB893756)
Windows Installer 3.1 (KB893803)
Update for Windows XP (KB894391)
Hotfix for Windows XP (KB896344)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Update for Windows XP (KB898461)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Update for Windows XP (KB900485)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Update for Windows XP (KB904942)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Update for Windows XP (KB908531)
Microsoft Base Smart Card Cryptographic Service Provider Package
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows Media Player (KB911564)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Update for Windows XP (KB916595)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Update for Windows XP (KB920342)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Update for Windows XP (KB920872)
Security Update for Windows XP (KB921503)
Update for Windows XP (KB922582)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows Media Player 6.4 (KB925398)
Update for Windows XP (KB925720)
Update for Windows XP (KB925876)
Security Update for Windows XP (KB925902)
Hotfix for Windows XP (KB926239)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Update for Windows XP (KB927891)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Hotfix for Windows Media Format 11 SDK (KB929399)
Security Update for Windows XP (KB930178)
Update for Windows XP (KB930916)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Update for Windows XP (KB932823-v3)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Update for Windows XP (KB936357)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB938127)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows XP (KB938464)
Update for Windows XP (KB938828)
Security Update for Windows XP (KB938829)
Hotfix for Windows Media Player 11 (KB939683)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows Internet Explorer 7 (KB942615)
Update for Windows XP (KB942763)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Hotfix for Windows Internet Explorer 7 (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Update for Windows XP (KB951072-v2)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows Media Player (KB952069)
Hotfix for Windows XP (KB952287)
Security Update for Windows XP (KB952954)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Update for Windows XP (KB955839)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows Internet Explorer 7 (KB961260)
Update for Windows XP (KB967715)
Lexmark 3400 Series
Lexmark Fax Solutions
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 1.1
Canon MovieEdit Task for ZoomBrowser EX
Microsoft Compression Client Pack 1.0 for Windows XP
MySpaceIM
My Web Search (Webfetti)
Microsoft National Language Support Downlevel APIs
Norton PC Checkup
Canon Utilities PhotoStitch
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Synaptics Pointing Device Driver
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Live Toolbar
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Format 11 runtime
Windows Media Player 11
Microsoft User-Mode Driver Framework Feature Pack 1.0
XML Paper Specification Shared Components Pack 1.0
Canon Utilities ZoomBrowser EX
OpenOffice.org Installer 1.0
Lexmark Toolbar
Windows Live Mail
MSXML 6 Service Pack 2 (KB954459)
Google Toolbar for Internet Explorer
Microsoft .NET Framework 3.0 Service Pack 1
Windows Live Photo Gallery
J2SE Runtime Environment 5.0 Update 12
Java™ 6 Update 7
Windows Live Toolbar Extension (Windows Live Toolbar)
WebFldrs XP
Windows Live Outlook Toolbar (Windows Live Toolbar)
NetWaiting
iTunes
Windows Live Messenger
Form Fill (Windows Live Toolbar)
Safari
Popup Blocker (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Apple Software Update
Trend Micro AntiVirus
Map Button (Windows Live Toolbar)
Windows Live Favorites for Windows Live Toolbar
Bonjour
Rhapsody Player Engine
Microsoft Software Update for Web Folders (English) 12
Microsoft Office Excel MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office PowerPoint MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Word MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (French) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (Spanish) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office OneNote MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Shared Setup Metadata MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Home and Student 2007
Security Update for Microsoft Office Word 2007 (KB956358)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Excel 2007 (KB958437)
Security Update for 2007 Microsoft Office System (KB958439)
Security Update for Visio 2007 (KB947590)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for Microsoft Office system 2007 (KB956828)
Update for Office 2007 (KB946691)
Security Update for 2007 Microsoft Office System (KB951550)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Windows Live Writer
Trend Micro AntiVirus
Windows Live installer
ABBYY FineReader 6.0 Sprint
SmartAudio
Windows Live Sign-in Assistant
Microsoft .NET Framework 2.0 Service Pack 1
Windows Presentation Foundation
LG USB Modem driver
HP Update
Microsoft .NET Framework 1.1
Windows Live Toolbar
OneCare Advisor (Windows Live Toolbar)
Apple Mobile Device Support
Smart Menus (Windows Live Toolbar)
Microsoft SQL Server 2005 Compact Edition [ENU]
QuickTime

======== Other Info ========

TOTAL PHYSICAL RAM: 526 MB

#6 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:08:49 PM

Posted 02 March 2009 - 09:57 PM

edp333

You are most welcome.

1. Please download The Avenger by Swandog46 to your Desktop.
  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop
    (How to extract (decompress) zipped or compressed files, help in the link here: )
2. Copy all the text contained in the bold below to your Clipboard by highlighting it and pressing (Ctrl+C):


Files to Delete:
c:\windows\system32\TDSSfpmp.dll
c:\windows\system32\TDSScfub.dll
c:\windows\system32\drivers\TDSSpaxt.sys
c:\windows\system32\TDSSofxh.dll
c:\windows\system32\TDSSriqp.dll
c:\windows\system32\TDSSnrsr.dll
C:\WINDOWS\system32\TDSSosvd.dat
C:\WINDOWS\system32\TDSStkdv.log

Folders to Delete:
C:\Program Files\Antivirus 2009


Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by clicking on its icon on your desktop.
  • Select Load Script
  • Select Paste from Clipboard
  • The information should now appear in the Open window
  • Select Execute
  • Answer Yes When prompted "Are you sure you want to execute the current script?"
4. The Avenger will automatically do the following:
  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avengerís actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply
Posted Image
Microsoft MVP - Windows Security

#7 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 03 March 2009 - 10:05 AM

Here is the avenger text:

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "UACd.sys" found!
ImagePath: \systemroot\system32\drivers\UACwqbdvigb.sys
Start Type: 1 (System)

Rootkit scan completed.

File "c:\windows\system32\TDSSfpmp.dll" deleted successfully.

Error: file "c:\windows\system32\TDSScfub.dll" not found!
Deletion of file "c:\windows\system32\TDSScfub.dll" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\system32\drivers\TDSSpaxt.sys" not found!
Deletion of file "c:\windows\system32\drivers\TDSSpaxt.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\system32\TDSSofxh.dll" not found!
Deletion of file "c:\windows\system32\TDSSofxh.dll" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\system32\TDSSriqp.dll" not found!
Deletion of file "c:\windows\system32\TDSSriqp.dll" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\system32\TDSSnrsr.dll" not found!
Deletion of file "c:\windows\system32\TDSSnrsr.dll" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist

File "C:\WINDOWS\system32\TDSSosvd.dat" deleted successfully.
File "C:\WINDOWS\system32\TDSStkdv.log" deleted successfully.

Error: folder "C:\Program Files\Antivirus 2009" not found!
Deletion of folder "C:\Program Files\Antivirus 2009" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.

#8 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:08:49 PM

Posted 03 March 2009 - 10:20 AM

edp333

Looking good. We are going to run Avenger once more

1. Rerun Avenger

2. Copy all the text contained in the bold below to your Clipboard by highlighting it and pressing (Ctrl+C):

Drivers to Delete:
UACd.sys

Files to Delete:
C:\Windows\system32\drivers\UACwqbdvigb.sys


Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by clicking on its icon on your desktop.
  • Select Load Script
  • Select Paste from Clipboard
  • The information should now appear in the Open window
  • Select Execute
  • Answer Yes When prompted "Are you sure you want to execute the current script?"
4. The Avenger will automatically do the following:
  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avengerís actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply along with a fresh FileLister log
Posted Image
Microsoft MVP - Windows Security

#9 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 03 March 2009 - 04:08 PM

After deleting the drivers with Avenger Trend Micro was able to detect Troj EAKEAV.AGY, but not able to qaurantine.

The Avenger log is:

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "UACd.sys" found!
ImagePath: \systemroot\system32\drivers\UACwqbdvigb.sys
Start Type: 4 (Disabled)

Rootkit scan completed.

Driver "UACd.sys" deleted successfully.
File "C:\Windows\system32\drivers\UACwqbdvigb.sys" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

#10 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:08:49 PM

Posted 03 March 2009 - 04:16 PM

edp333

That's not unexpected. We will get it.

Did you rerun Filelister so I could see a fresh FileLister log?
Posted Image
Microsoft MVP - Windows Security

#11 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 03 March 2009 - 04:48 PM

My apologies, my poor eyes missed the Filelister:


+++++++++++++++++++++++++++++++++
+ File Lister Version 1.0.6
+
+ By bamajim / bamajim.com
+++++++++++++++++++++++++++++++++

Report ran on --->>> 3/3/2009 3:45:28 PM


====== Running Processes ======

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\WINDOWS\System32\WScript.exe

====== BHO's under HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects ======

BHO: (NO NAME) - {0B014B81-4E12-46F9-806F-55867AF8FD3C} -

BHO: (NO NAME) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll

BHO: (NO NAME) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

BHO: (NO NAME) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

BHO: (NO NAME) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: (NO NAME) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

BHO: (NO NAME) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll

BHO: (NO NAME) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

====== Values under HKLM\~\Run ======

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"HotKeysCmds"="C:\\WINDOWS\\system32\\hkcmd.exe"
"Persistence"="C:\\WINDOWS\\system32\\igfxpers.exe"
"SynTPEnh"="\"C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe\""
"High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe"
"Cpqset"="C:\\Program Files\\Hewlett-Packard\\Default Settings\\cpqset.exe"
"SynTPStart"="\"C:\\Program Files\\Synaptics\\SynTP\\SynTPStart.exe\""
"HP Software Update"="\"C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe\""
"UfSeAgnt.exe"="\"C:\\Program Files\\Trend Micro\\Internet Security\\UfSeAgnt.exe\""
"lxcymon.exe"="\"C:\\Program Files\\Lexmark 3400 Series\\lxcymon.exe\""
"EzPrint"="\"C:\\Program Files\\Lexmark 3400 Series\\ezprint.exe\""
"FaxCenterServer"="\"C:\\Program Files\\Lexmark Fax Solutions\\fm3032.exe\" /s"
"LXCYCATS"="rundll32 C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\LXCYtime.dll,_RunDLLEntry@16"
"MyWebSearch Plugin"="rundll32 C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\M3PLUGIN.DLL,UPF"
"My Web Search Bar Search Scope Monitor"="\"C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\m3SrchMn.exe\" /m=2 /w"
"MyWebSearch Email Plugin"="C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_07\\bin\\jusched.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"


====== Values under HKCU\~\Run ======

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"MsnMsgr"="\"C:\\Program Files\\Windows Live\\Messenger\\MsnMsgr.Exe\" /background"
"WeatherDPA"="\"C:\\Program Files\\Zango\\bin\\10.3.37.0\\Weather.exe\" -auto"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"
"MyWebSearch Email Plugin"="C:\\PROGRA~1\\MYWEBS~1\\bar\\1.bin\\mwsoemon.exe"
"MySpaceIM"="C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"
"36266493996210438916126564668257"="C:\\Program Files\\Antivirus 2009\\av360.exe"


====== Folders and Files from "%\" and "%\Windows" Created Last 60 Days ======

3/3/2009 9:01:22 AM 6369 C:\Avenger
1/17/2009 1:44:36 AM 0 C:\Config.Msi
2/24/2009 4:38:38 PM 825269 C:\e82c8e16b228636f6b
3/3/2009 3:00:04 PM 1372 32 C:\avenger.txt
3/2/2009 8:20:24 PM 4387 32 C:\Files.txt
3/2/2009 8:13:45 PM 526503936 38 C:\hiberfil.sys
1/16/2009 3:03:43 AM 960704 C:\WINDOWS\$NtUninstallKB958687$
1/16/2009 3:03:43 AM 627648 C:\WINDOWS\$NtUninstallKB958687$\spuninst
2/24/2009 4:37:15 PM 744788 C:\WINDOWS\$NtUninstallKB960715$
2/24/2009 4:37:15 PM 626004 C:\WINDOWS\$NtUninstallKB960715$\spuninst
2/25/2009 1:06:45 PM 9439726 C:\WINDOWS\$NtUninstallKB967715$
2/25/2009 1:06:45 PM 628718 C:\WINDOWS\$NtUninstallKB967715$\spuninst
2/20/2009 11:38:06 AM 180224 C:\WINDOWS\Minidump
2/26/2009 3:57:51 PM 0 32 C:\WINDOWS\0.log
2/26/2009 3:57:37 PM 171994 32 C:\WINDOWS\ntbtlog.txt
3/2/2009 8:21:39 PM 1607 32 C:\WINDOWS\setupapi.log
3/3/2009 3:00:52 PM 580 32 C:\WINDOWS\TmComm.log
2/26/2009 4:34:00 PM 2220 32 C:\WINDOWS\tmevtmgr.log
3/3/2009 9:01:10 AM 108 32 C:\WINDOWS\TMFilter.log
3/3/2009 8:57:54 AM 0 C:\WINDOWS\system32\log
1/21/2009 5:33:27 PM 66048 32 C:\WINDOWS\system32\ieupdates.exe
2/20/2009 10:09:51 AM 60347 32 C:\WINDOWS\system32\UACalknxmct.log
2/20/2009 10:09:39 AM 127 32 C:\WINDOWS\system32\UACexhosrsu.dat
2/20/2009 10:09:51 AM 5155 32 C:\WINDOWS\system32\uacinit.dll
2/20/2009 10:09:38 AM 31232 32 C:\WINDOWS\system32\UACvsotobyu.dll
2/20/2009 10:09:43 AM 27136 32 C:\WINDOWS\system32\UACyfucfubk.dll

====== Files under "\Administrator\Startup" Last 60 Days======

2/20/2009 10:44:37 AM 84 38 C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\desktop.ini

====== Files under "\All Users\Startup" Last 60 Days======


====== Folders under "\Program Files" Last 60 Days======

2/25/2009 10:22:05 PM 2332686 C:\Program Files\CCleaner
2/25/2009 10:22:05 PM 766976 C:\Program Files\CCleaner\Lang
1/17/2009 1:47:52 AM 77209892 C:\Program Files\QuickTime
1/17/2009 1:48:00 AM 2188288 C:\Program Files\QuickTime\PictureViewer.Resources
1/17/2009 1:48:00 AM 144384 C:\Program Files\QuickTime\PictureViewer.Resources\da.lproj
1/17/2009 1:48:01 AM 132608 C:\Program Files\QuickTime\PictureViewer.Resources\de.lproj
1/17/2009 1:48:01 AM 92160 C:\Program Files\QuickTime\PictureViewer.Resources\en.lproj
1/17/2009 1:48:01 AM 143872 C:\Program Files\QuickTime\PictureViewer.Resources\es.lproj
1/17/2009 1:48:01 AM 132096 C:\Program Files\QuickTime\PictureViewer.Resources\fi.lproj
1/17/2009 1:48:02 AM 141312 C:\Program Files\QuickTime\PictureViewer.Resources\fr.lproj
1/17/2009 1:48:02 AM 138240 C:\Program Files\QuickTime\PictureViewer.Resources\it.lproj
1/17/2009 1:48:02 AM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\ja.lproj
1/17/2009 1:48:02 AM 92160 C:\Program Files\QuickTime\PictureViewer.Resources\ko.lproj
1/17/2009 1:48:02 AM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\nb.lproj
1/17/2009 1:48:02 AM 134144 C:\Program Files\QuickTime\PictureViewer.Resources\nl.lproj
1/17/2009 1:48:02 AM 136192 C:\Program Files\QuickTime\PictureViewer.Resources\pl.lproj
1/17/2009 1:48:02 AM 139776 C:\Program Files\QuickTime\PictureViewer.Resources\pt_PT.lproj
1/17/2009 1:48:02 AM 92672 C:\Program Files\QuickTime\PictureViewer.Resources\ru.lproj
1/17/2009 1:48:02 AM 140800 C:\Program Files\QuickTime\PictureViewer.Resources\sv.lproj
1/17/2009 1:48:03 AM 128512 C:\Program Files\QuickTime\PictureViewer.Resources\zh_CN.lproj
1/17/2009 1:48:03 AM 124416 C:\Program Files\QuickTime\PictureViewer.Resources\zh_TW.lproj
1/17/2009 1:48:55 AM 1010122 C:\Program Files\QuickTime\Plugins
1/17/2009 1:47:53 AM 422427 C:\Program Files\QuickTime\PropertyPanels
1/17/2009 1:47:59 AM 55808 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\da.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\de.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\en.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\es.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fi.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\fr.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\it.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ja.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ko.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\nb.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\nl.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\pl.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\pt_PT.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\ru.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\sv.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_CN.lproj
1/17/2009 1:48:00 AM 3072 C:\Program Files\QuickTime\PropertyPanels\PanelHelperBase.Resources\zh_TW.lproj
1/17/2009 1:48:03 AM 75264 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\da.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\de.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\en.lproj
1/17/2009 1:48:03 AM 4608 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\es.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fi.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\fr.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\it.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ja.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ko.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\nb.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\nl.lproj
1/17/2009 1:48:03 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\pl.lproj
1/17/2009 1:48:04 AM 4608 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\pt_PT.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\ru.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\sv.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_CN.lproj
1/17/2009 1:48:04 AM 4096 C:\Program Files\QuickTime\PropertyPanels\PropPanelHelpers.Resources\zh_TW.lproj
1/17/2009 1:47:52 AM 0 C:\Program Files\QuickTime\QTComponents
1/17/2009 1:47:52 AM 60745838 C:\Program Files\QuickTime\QTSystem
1/17/2009 1:47:58 AM 55808 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\da.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\de.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\en.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\es.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fi.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\fr.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\it.lproj
1/17/2009 1:47:58 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ja.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ko.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\nb.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\nl.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\pl.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\pt_PT.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\ru.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\sv.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_CN.lproj
1/17/2009 1:47:59 AM 3072 C:\Program Files\QuickTime\QTSystem\CoreVideo.Resources\zh_TW.lproj
1/17/2009 1:48:04 AM 4391588 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources
1/17/2009 1:48:04 AM 241664 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\da.lproj
1/17/2009 1:48:04 AM 247296 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\de.lproj
1/17/2009 1:48:04 AM 238080 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\en.lproj
1/17/2009 1:48:04 AM 245248 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\es.lproj
1/17/2009 1:48:04 AM 238592 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fi.lproj
1/17/2009 1:48:04 AM 247296 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\fr.lproj
1/17/2009 1:48:05 AM 239616 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\it.lproj
1/17/2009 1:48:05 AM 239104 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ja.lproj
1/17/2009 1:48:05 AM 236544 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ko.lproj
1/17/2009 1:48:06 AM 254464 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\nb.lproj
1/17/2009 1:48:06 AM 245248 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\nl.lproj
1/17/2009 1:48:06 AM 240640 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\pl.lproj
1/17/2009 1:48:06 AM 241664 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\pt_PT.lproj
1/17/2009 1:48:15 AM 240640 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\ru.lproj
1/17/2009 1:48:15 AM 238080 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\sv.lproj
1/17/2009 1:48:15 AM 235008 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_CN.lproj
1/17/2009 1:48:15 AM 231936 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\zh_TW.lproj
1/17/2009 1:48:15 AM 156672 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources
1/17/2009 1:48:15 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\da.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\de.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\en.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\es.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fi.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\fr.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\it.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ja.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ko.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\nb.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\nl.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\pl.lproj
1/17/2009 1:48:16 AM 9216 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\pt_PT.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\ru.lproj
1/17/2009 1:48:16 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\sv.lproj
1/17/2009 1:48:17 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_CN.lproj
1/17/2009 1:48:17 AM 8704 C:\Program Files\QuickTime\QTSystem\QuickTime3GPP.Resources\zh_TW.lproj
1/17/2009 1:48:17 AM 293888 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\da.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\de.lproj
1/17/2009 1:48:17 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\en.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\es.lproj
1/17/2009 1:48:17 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fi.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\fr.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\it.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ja.lproj
1/17/2009 1:48:17 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ko.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\nb.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\nl.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\pl.lproj
1/17/2009 1:48:17 AM 17408 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\ru.lproj
1/17/2009 1:48:17 AM 16896 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\sv.lproj
1/17/2009 1:48:17 AM 14848 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:17 AM 14848 C:\Program Files\QuickTime\QTSystem\QuickTime3GPPAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:17 AM 1379840 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\da.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\de.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\en.lproj
1/17/2009 1:48:17 AM 84480 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\es.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fi.lproj
1/17/2009 1:48:17 AM 79872 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\fr.lproj
1/17/2009 1:48:17 AM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\it.lproj
1/17/2009 1:48:17 AM 79872 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ja.lproj
1/17/2009 1:48:17 AM 78848 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ko.lproj
1/17/2009 1:48:17 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\nb.lproj
1/17/2009 1:48:17 AM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\nl.lproj
1/17/2009 1:48:17 AM 83456 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\pl.lproj
1/17/2009 1:48:18 AM 83968 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\pt_PT.lproj
1/17/2009 1:48:18 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\ru.lproj
1/17/2009 1:48:18 AM 79360 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\sv.lproj
1/17/2009 1:48:18 AM 78336 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_CN.lproj
1/17/2009 1:48:18 AM 78336 C:\Program Files\QuickTime\QTSystem\QuickTimeAudioSupport.Resources\zh_TW.lproj
1/17/2009 1:48:18 AM 4045824 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\da.lproj
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\de.lproj
1/17/2009 1:48:18 AM 225792 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\en.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\es.lproj
1/17/2009 1:48:18 AM 225792 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fi.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\fr.lproj
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\it.lproj
1/17/2009 1:48:18 AM 226816 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ja.lproj
1/17/2009 1:48:18 AM 224256 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ko.lproj
1/17/2009 1:48:18 AM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\nb.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\nl.lproj
1/17/2009 1:48:18 AM 227328 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\pl.lproj
1/17/2009 1:48:19 AM 227840 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:19 AM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\ru.lproj
1/17/2009 1:48:19 AM 226304 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\sv.lproj
1/17/2009 1:48:19 AM 223232 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:19 AM 223232 C:\Program Files\QuickTime\QTSystem\QuickTimeAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:19 AM 178688 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\da.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\de.lproj
1/17/2009 1:48:19 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\en.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\es.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fi.lproj
1/17/2009 1:48:19 AM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\fr.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\it.lproj
1/17/2009 1:48:19 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ja.lproj
1/17/2009 1:48:19 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ko.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\nb.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\nl.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\pl.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\pt_PT.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\ru.lproj
1/17/2009 1:48:20 AM 10240 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\sv.lproj
1/17/2009 1:48:20 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_CN.lproj
1/17/2009 1:48:20 AM 9728 C:\Program Files\QuickTime\QTSystem\QuickTimeCapture.Resources\zh_TW.lproj
1/17/2009 1:48:20 AM 1969152 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources
1/17/2009 1:48:20 AM 115200 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\da.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\de.lproj
1/17/2009 1:48:20 AM 114688 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\en.lproj
1/17/2009 1:48:20 AM 116224 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\es.lproj
1/17/2009 1:48:20 AM 114688 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fi.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\fr.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\it.lproj
1/17/2009 1:48:20 AM 113152 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ja.lproj
1/17/2009 1:48:20 AM 112640 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ko.lproj
1/17/2009 1:48:20 AM 116224 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\nb.lproj
1/17/2009 1:48:20 AM 115712 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\nl.lproj
1/17/2009 1:48:20 AM 117248 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\pl.lproj
1/17/2009 1:48:20 AM 116736 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\pt_PT.lproj
1/17/2009 1:48:20 AM 115712 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\ru.lproj
1/17/2009 1:48:20 AM 115200 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\sv.lproj
1/17/2009 1:48:20 AM 110592 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_CN.lproj
1/17/2009 1:48:20 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeEffects.Resources\zh_TW.lproj
1/17/2009 1:48:20 AM 476160 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\da.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\de.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\en.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\es.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fi.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\fr.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\it.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ja.lproj
1/17/2009 1:48:21 AM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ko.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\nb.lproj
1/17/2009 1:48:21 AM 14336 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\nl.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\pl.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\pt_PT.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\ru.lproj
1/17/2009 1:48:21 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\sv.lproj
1/17/2009 1:48:21 AM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_CN.lproj
1/17/2009 1:48:21 AM 13312 C:\Program Files\QuickTime\QTSystem\QuickTimeEssentials.Resources\zh_TW.lproj
1/17/2009 1:48:21 AM 66560 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\da.lproj
1/17/2009 1:48:21 AM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\de.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\en.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\es.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fi.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\fr.lproj
1/17/2009 1:48:21 AM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\it.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ja.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ko.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\nb.lproj
1/17/2009 1:48:21 AM 4096 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\nl.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\pl.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\pt_PT.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\ru.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\sv.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_CN.lproj
1/17/2009 1:48:21 AM 3584 C:\Program Files\QuickTime\QTSystem\QuickTimeH264.Resources\zh_TW.lproj
1/17/2009 1:48:21 AM 388096 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\da.lproj
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\de.lproj
1/17/2009 1:48:21 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\en.lproj
1/17/2009 1:48:21 AM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\es.lproj
1/17/2009 1:48:21 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fi.lproj
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\fr.lproj
1/17/2009 1:48:21 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\it.lproj
1/17/2009 1:48:21 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ja.lproj
1/17/2009 1:48:22 AM 20992 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ko.lproj
1/17/2009 1:48:22 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\nb.lproj
1/17/2009 1:48:22 AM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\nl.lproj
1/17/2009 1:48:22 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\pl.lproj
1/17/2009 1:48:22 AM 22528 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\pt_PT.lproj
1/17/2009 1:48:22 AM 22016 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\ru.lproj
1/17/2009 1:48:22 AM 21504 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\sv.lproj
1/17/2009 1:48:22 AM 20480 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_CN.lproj
1/17/2009 1:48:22 AM 20480 C:\Program Files\QuickTime\QTSystem\QuickTimeImage.Resources\zh_TW.lproj
1/17/2009 1:48:22 AM 2745856 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\da.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\de.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\en.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\es.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\fi.lproj
1/17/2009 1:48:22 AM 161280 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\fr.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\it.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ja.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ko.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\nb.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\nl.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\pl.lproj
1/17/2009 1:48:22 AM 160768 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\pt_PT.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\ru.lproj
1/17/2009 1:48:22 AM 160256 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\sv.lproj
1/17/2009 1:48:22 AM 159744 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\zh_CN.lproj
1/17/2009 1:48:22 AM 159744 C:\Program Files\QuickTime\QTSystem\QuickTimeInternetExtras.Resources\zh_TW.lproj
1/17/2009 1:48:22 AM 104960 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\da.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\de.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\en.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\es.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\fi.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\fr.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\it.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ja.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ko.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\nb.lproj
1/17/2009 1:48:22 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\nl.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\pl.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\pt_PT.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\ru.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\sv.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\zh_CN.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG.Resources\zh_TW.lproj
1/17/2009 1:48:23 AM 103936 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\da.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\de.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\en.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\es.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\fi.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\fr.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\it.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ja.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ko.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\nb.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\nl.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\pl.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\pt_PT.lproj
1/17/2009 1:48:23 AM 6144 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\ru.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\sv.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\zh_CN.lproj
1/17/2009 1:48:23 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4.Resources\zh_TW.lproj
1/17/2009 1:48:23 AM 274944 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources
1/17/2009 1:48:23 AM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\da.lproj
1/17/2009 1:48:23 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\de.lproj
1/17/2009 1:48:23 AM 14848 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\en.lproj
1/17/2009 1:48:23 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\es.lproj
1/17/2009 1:48:23 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\fi.lproj
1/17/2009 1:48:24 AM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\fr.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\it.lproj
1/17/2009 1:48:24 AM 15872 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ja.lproj
1/17/2009 1:48:24 AM 14336 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ko.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\nb.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\nl.lproj
1/17/2009 1:48:24 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\pl.lproj
1/17/2009 1:48:24 AM 16384 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\pt_PT.lproj
1/17/2009 1:48:24 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\ru.lproj
1/17/2009 1:48:25 AM 15360 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\sv.lproj
1/17/2009 1:48:25 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_CN.lproj
1/17/2009 1:48:25 AM 13824 C:\Program Files\QuickTime\QTSystem\QuickTimeMPEG4Authoring.Resources\zh_TW.lproj
1/17/2009 1:48:25 AM 720384 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources
1/17/2009 1:48:25 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\da.lproj
1/17/2009 1:48:25 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\de.lproj
1/17/2009 1:48:25 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\en.lproj
1/17/2009 1:48:25 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\es.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\fi.lproj
1/17/2009 1:48:28 AM 41472 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\fr.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\it.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ja.lproj
1/17/2009 1:48:28 AM 39936 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ko.lproj
1/17/2009 1:48:28 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\nb.lproj
1/17/2009 1:48:28 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\nl.lproj
1/17/2009 1:48:28 AM 42496 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\pl.lproj
1/17/2009 1:48:28 AM 41984 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\pt_PT.lproj
1/17/2009 1:48:29 AM 40960 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\ru.lproj
1/17/2009 1:48:29 AM 40448 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\sv.lproj
1/17/2009 1:48:29 AM 37888 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\zh_CN.lproj
1/17/2009 1:48:29 AM 37888 C:\Program Files\QuickTime\QTSystem\QuickTimeMusic.Resources\zh_TW.lproj
1/17/2009 1:48:29 AM 82944 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\da.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\de.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\en.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\es.lproj
1/17/2009 1:48:29 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fi.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fr.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\it.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ja.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ko.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nb.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nl.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pl.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pt_PT.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\sv.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj
1/17/2009 1:48:30 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj
1/17/2009 1:48:30 AM 1921536 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources
1/17/2009 1:48:30 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\da.lproj
1/17/2009 1:48:30 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\de.lproj
1/17/2009 1:48:30 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\en.lproj
1/17/2009 1:48:30 AM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\es.lproj
1/17/2009 1:48:30 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\fi.lproj
1/17/2009 1:48:31 AM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\fr.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\it.lproj
1/17/2009 1:48:31 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ja.lproj
1/17/2009 1:48:31 AM 110592 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ko.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\nb.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\nl.lproj
1/17/2009 1:48:31 AM 112640 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\pl.lproj
1/17/2009 1:48:31 AM 112128 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\pt_PT.lproj
1/17/2009 1:48:31 AM 111616 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\ru.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\sv.lproj
1/17/2009 1:48:31 AM 109568 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\zh_CN.lproj
1/17/2009 1:48:31 AM 111104 C:\Program Files\QuickTime\QTSystem\QuickTimeStreaming.Resources\zh_TW.lproj
1/17/2009 1:48:32 AM 204800 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\da.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\de.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\en.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\es.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\fi.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\fr.lproj
1/17/2009 1:48:32 AM 12288 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\it.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ja.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ko.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\nb.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\nl.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\pl.lproj
1/17/2009 1:48:32 AM 11776 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\ru.lproj
1/17/2009 1:48:32 AM 11264 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\sv.lproj
1/17/2009 1:48:32 AM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:33 AM 10752 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:33 AM 83456 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\da.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\de.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\en.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\es.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\fi.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\fr.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\it.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ja.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ko.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\nb.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\nl.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\pl.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\pt_PT.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\ru.lproj
1/17/2009 1:48:33 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\sv.lproj
1/17/2009 1:48:34 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_CN.lproj
1/17/2009 1:48:34 AM 4608 C:\Program Files\QuickTime\QTSystem\QuickTimeStreamingExtras.Resources\zh_TW.lproj
1/17/2009 1:48:34 AM 519168 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\da.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\de.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\en.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\es.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\fi.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\fr.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\it.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ja.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ko.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\nb.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\nl.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\pl.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\pt_PT.lproj
1/17/2009 1:48:34 AM 29696 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\ru.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\sv.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\zh_CN.lproj
1/17/2009 1:48:34 AM 29184 C:\Program Files\QuickTime\QTSystem\QuickTimeVR.Resources\zh_TW.lproj
1/17/2009 1:48:34 AM 99840 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources
1/17/2009 1:48:34 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\da.lproj
1/17/2009 1:48:34 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\de.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\en.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\es.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\fi.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\fr.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\it.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ja.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ko.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\nb.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\nl.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\pl.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\pt_PT.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\ru.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\sv.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\zh_CN.lproj
1/17/2009 1:48:35 AM 5632 C:\Program Files\QuickTime\QTSystem\QuickTimeVRAuthoring.Resources\zh_TW.lproj
1/17/2009 1:48:35 AM 1402880 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources
1/17/2009 1:48:35 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\da.lproj
1/17/2009 1:48:35 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\de.lproj
1/17/2009 1:48:35 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\en.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\es.lproj
1/17/2009 1:48:36 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\fi.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\fr.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\it.lproj
1/17/2009 1:48:36 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ja.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ko.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\nb.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\nl.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\pl.lproj
1/17/2009 1:48:36 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\pt_PT.lproj
1/17/2009 1:48:37 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\ru.lproj
1/17/2009 1:48:37 AM 61440 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\sv.lproj
1/17/2009 1:48:37 AM 60416 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\zh_CN.lproj
1/17/2009 1:48:37 AM 60928 C:\Program Files\QuickTime\QTSystem\QuickTimeWebHelper.Resources\zh_TW.lproj
1/17/2009 1:48:29 AM 510464 C:\Program Files\QuickTime\QuickTimePlayer.Resources
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\da.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\de.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\en.lproj
1/17/2009 1:48:29 AM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\es.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\fi.lproj
1/17/2009 1:48:29 AM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\fr.lproj
1/17/2009 1:48:29 AM 10240 C:\Program Files\QuickTime\QuickTimePlayer.Resources\it.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ja.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ko.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\nb.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\nl.lproj
1/17/2009 1:48:29 AM 11264 C:\Program Files\QuickTime\QuickTimePlayer.Resources\pl.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\pt_PT.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\ru.lproj
1/17/2009 1:48:29 AM 10752 C:\Program Files\QuickTime\QuickTimePlayer.Resources\sv.lproj
1/17/2009 1:48:29 AM 17920 C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_CN.lproj
1/17/2009 1:48:29 AM 9728 C:\Program Files\QuickTime\QuickTimePlayer.Resources\zh_TW.lproj
1/17/2009 1:39:09 AM 63340506 C:\Program Files\Safari
1/17/2009 1:39:23 AM 171446 C:\Program Files\Safari\CFNetwork.resources
1/17/2009 1:39:23 AM 9002 C:\Program Files\Safari\CFNetwork.resources\da.lproj
1/17/2009 1:39:23 AM 9384 C:\Program Files\Safari\CFNetwork.resources\de.lproj
1/17/2009 1:39:23 AM 8934 C:\Program Files\Safari\CFNetwork.resources\English.lproj
1/17/2009 1:39:23 AM 9512 C:\Program Files\Safari\CFNetwork.resources\es.lproj
1/17/2009 1:39:23 AM 8984 C:\Program Files\Safari\CFNetwork.resources\fi.lproj
1/17/2009 1:39:23 AM 9222 C:\Program Files\Safari\CFNetwork.resources\fr.lproj
1/17/2009 1:39:23 AM 9328 C:\Program Files\Safari\CFNetwork.resources\it.lproj
1/17/2009 1:39:23 AM 8530 C:\Program Files\Safari\CFNetwork.resources\ja.lproj
1/17/2009 1:39:23 AM 7804 C:\Program Files\Safari\CFNetwork.resources\ko.lproj
1/17/2009 1:39:23 AM 8916 C:\Program Files\Safari\CFNetwork.resources\nb.lproj
1/17/2009 1:39:23 AM 9110 C:\Program Files\Safari\CFNetwork.resources\nl.lproj
1/17/2009 1:39:24 AM 9102 C:\Program Files\Safari\CFNetwork.resources\pl.lproj
1/17/2009 1:39:24 AM 9298 C:\Program Files\Safari\CFNetwork.resources\pt_PT.lproj
1/17/2009 1:39:24 AM 9096 C:\Program Files\Safari\CFNetwork.resources\ru.lproj
1/17/2009 1:39:24 AM 8872 C:\Program Files\Safari\CFNetwork.resources\sv.lproj
1/17/2009 1:39:24 AM 7470 C:\Program Files\Safari\CFNetwork.resources\zh_CN.lproj
1/17/2009 1:39:24 AM 7438 C:\Program Files\Safari\CFNetwork.resources\zh_TW.lproj
1/17/2009 1:39:24 AM 780796 C:\Program Files\Safari\CoreFoundation.resources
1/17/2009 1:39:24 AM 628363 C:\Program Files\Safari\CoreFoundation.resources\CharacterSets
1/17/2009 1:39:25 AM 9126 C:\Program Files\Safari\CoreFoundation.resources\da.lproj
1/17/2009 1:39:25 AM 9824 C:\Program Files\Safari\CoreFoundation.resources\de.lproj
1/17/2009 1:39:26 AM 9194 C:\Program Files\Safari\CoreFoundation.resources\en.lproj
1/17/2009 1:39:26 AM 9340 C:\Program Files\Safari\CoreFoundation.resources\es.lproj
1/17/2009 1:39:26 AM 8888 C:\Program Files\Safari\CoreFoundation.resources\fi.lproj
1/17/2009 1:39:26 AM 9228 C:\Program Files\Safari\CoreFoundation.resources\fr.lproj
1/17/2009 1:39:27 AM 9356 C:\Program Files\Safari\CoreFoundation.resources\it.lproj
1/17/2009 1:39:27 AM 7980 C:\Program Files\Safari\CoreFoundation.resources\ja.lproj
1/17/2009 1:39:27 AM 7990 C:\Program Files\Safari\CoreFoundation.resources\ko.lproj
1/17/2009 1:39:27 AM 9162 C:\Program Files\Safari\CoreFoundation.resources\nb.lproj
1/17/2009 1:39:27 AM 9452 C:\Program Files\Safari\CoreFoundation.resources\nl.lproj
1/17/2009 1:39:27 AM 9302 C:\Program Files\Safari\CoreFoundation.resources\pl.lproj
1/17/2009 1:39:27 AM 9342 C:\Program Files\Safari\CoreFoundation.resources\pt_PT.lproj
1/17/2009 1:39:27 AM 9148 C:\Program Files\Safari\CoreFoundation.resources\ru.lproj
1/17/2009 1:39:27 AM 9238 C:\Program Files\Safari\CoreFoundation.resources\sv.lproj
1/17/2009 1:39:27 AM 7500 C:\Program Files\Safari\CoreFoundation.resources\zh_CN.lproj
1/17/2009 1:39:27 AM 7458 C:\Program Files\Safari\CoreFoundation.resources\zh_TW.lproj
1/17/2009 1:39:13 AM 112266 C:\Program Files\Safari\Plugins
1/17/2009 1:39:28 AM 526065 C:\Program Files\Safari\PubSub.resources
1/17/2009 1:39:28 AM 8770 C:\Program Files\Safari\PubSub.resources\da.lproj
1/17/2009 1:39:28 AM 9312 C:\Program Files\Safari\PubSub.resources\de.lproj
1/17/2009 1:39:28 AM 8696 C:\Program Files\Safari\PubSub.resources\English.lproj
1/17/2009 1:39:28 AM 9234 C:\Program Files\Safari\PubSub.resources\es.lproj
1/17/2009 1:39:28 AM 9057 C:\Program Files\Safari\PubSub.resources\fi.lproj
1/17/2009 1:39:28 AM 9385 C:\Program Files\Safari\PubSub.resources\fr.lproj
1/17/2009 1:39:28 AM 140868 C:\Program Files\Safari\PubSub.resources\Framework
1/17/2009 1:39:28 AM 8320 C:\Program Files\Safari\PubSub.resources\Framework\da.lproj
1/17/2009 1:39:28 AM 8876 C:\Program Files\Safari\PubSub.resources\Framework\de.lproj
1/17/2009 1:39:28 AM 8332 C:\Program Files\Safari\PubSub.resources\Framework\English.lproj
1/17/2009 1:39:28 AM 8712 C:\Program Files\Safari\PubSub.resources\Framework\es.lproj
1/17/2009 1:39:28 AM 8238 C:\Program Files\Safari\PubSub.resources\Framework\fi.lproj
1/17/2009 1:39:28 AM 8736 C:\Program Files\Safari\PubSub.resources\Framework\fr.lproj
1/17/2009 1:39:28 AM 8384 C:\Program Files\Safari\PubSub.resources\Framework\it.lproj
1/17/2009 1:39:28 AM 7310 C:\Program Files\Safari\PubSub.resources\Framework\ja.lproj
1/17/2009 1:39:28 AM 7220 C:\Program Files\Safari\PubSub.resources\Framework\ko.lproj
1/17/2009 1:39:28 AM 8232 C:\Program Files\Safari\PubSub.resources\Framework\nb.lproj
1/17/2009 1:39:28 AM 8640 C:\Program Files\Safari\PubSub.resources\Framework\nl.lproj
1/17/2009 1:39:28 AM 8448 C:\Program Files\Safari\PubSub.resources\Framework\pl.lproj
1/17/2009 1:39:28 AM 8460 C:\Program Files\Safari\PubSub.resources\Framework\pt_PT.lproj
1/17/2009 1:39:28 AM 8332 C:\Program Files\Safari\PubSub.resources\Framework\ru.lproj
1/17/2009 1:39:28 AM 8298 C:\Program Files\Safari\PubSub.resources\Framework\sv.lproj
1/17/2009 1:39:28 AM 6702 C:\Program Files\Safari\PubSub.resources\Framework\zh_CN.lproj
1/17/2009 1:39:28 AM 6686 C:\Program Files\Safari\PubSub.resources\Framework\zh_TW.lproj
1/17/2009 1:39:28 AM 9315 C:\Program Files\Safari\PubSub.resources\it.lproj
1/17/2009 1:39:28 AM 7430 C:\Program Files\Safari\PubSub.resources\ja.lproj
1/17/2009 1:39:28 AM 7628 C:\Program Files\Safari\PubSub.resources\ko.lproj
1/17/2009 1:39:29 AM 9069 C:\Program Files\Safari\PubSub.resources\nb.lproj
1/17/2009 1:39:29 AM 9426 C:\Program Files\Safari\PubSub.resources\nl.lproj
1/17/2009 1:39:29 AM 9013 C:\Program Files\Safari\PubSub.resources\pl.lproj
1/17/2009 1:39:29 AM 9023 C:\Program Files\Safari\PubSub.resources\pt_PT.lproj
1/17/2009 1:39:29 AM 8899 C:\Program Files\Safari\PubSub.resources\ru.lproj
1/17/2009 1:39:29 AM 8860 C:\Program Files\Safari\PubSub.resources\sv.lproj
1/17/2009 1:39:29 AM 6993 C:\Program Files\Safari\PubSub.resources\zh_CN.lproj
1/17/2009 1:39:29 AM 7119 C:\Program Files\Safari\PubSub.resources\zh_TW.lproj
1/17/2009 1:39:13 AM 22264234 C:\Program Files\Safari\Safari.resources
1/17/2009 1:39:14 AM 353827 C:\Program Files\Safari\Safari.resources\da.lproj
1/17/2009 1:39:14 AM 1711485 C:\Program Files\Safari\Safari.resources\de.lproj
1/17/2009 1:39:14 AM 3349661 C:\Program Files\Safari\Safari.resources\en.lproj
1/17/2009 1:39:15 AM 537504 C:\Program Files\Safari\Safari.resources\en_AU.lproj
1/17/2009 1:39:15 AM 537504 C:\Program Files\Safari\Safari.resources\en_CA.lproj
1/17/2009 1:39:15 AM 537504 C:\Program Files\Safari\Safari.resources\en_GB.lproj
1/17/2009 1:39:15 AM 1057340 C:\Program Files\Safari\Safari.resources\es.lproj
1/17/2009 1:39:17 AM 357345 C:\Program Files\Safari\Safari.resources\fi.lproj
1/17/2009 1:39:18 AM 1335172 C:\Program Files\Safari\Safari.resources\fr.lproj
1/17/2009 1:39:18 AM 2495646 C:\Program Files\Safari\Safari.resources\Help
1/17/2009 1:39:18 AM 131512 C:\Program Files\Safari\Safari.resources\Help\da.lproj
1/17/2009 1:39:18 AM 139358 C:\Program Files\Safari\Safari.resources\Help\de.lproj
1/17/2009 1:39:18 AM 124870 C:\Program Files\Safari\Safari.resources\Help\en.lproj
1/17/2009 1:39:18 AM 140100 C:\Program Files\Safari\Safari.resources\Help\es.lproj
1/17/2009 1:39:18 AM 137015 C:\Program Files\Safari\Safari.resources\Help\fi.lproj
1/17/2009 1:39:18 AM 142843 C:\Program Files\Safari\Safari.resources\Help\fr.lproj
1/17/2009 1:39:18 AM 139085 C:\Program Files\Safari\Safari.resources\Help\it.lproj
1/17/2009 1:39:18 AM 192676 C:\Program Files\Safari\Safari.resources\Help\ja.lproj
1/17/2009 1:39:19 AM 169701 C:\Program Files\Safari\Safari.resources\Help\ko.lproj
1/17/2009 1:39:19 AM 130299 C:\Program Files\Safari\Safari.resources\Help\nb.lproj
1/17/2009 1:39:19 AM 134484 C:\Program Files\Safari\Safari.resources\Help\nl.lproj
1/17/2009 1:39:19 AM 144105 C:\Program Files\Safari\Safari.resources\Help\pl.lproj
1/17/2009 1:39:19 AM 138590 C:\Program Files\Safari\Safari.resources\Help\pt_PT.lproj
1/17/2009 1:39:19 AM 137485 C:\Program Files\Safari\Safari.resources\Help\ru.lproj
1/17/2009 1:39:19 AM 131947 C:\Program Files\Safari\Safari.resources\Help\sv.lproj
1/17/2009 1:39:19 AM 134424 C:\Program Files\Safari\Safari.resources\Help\zh_CN.lproj
1/17/2009 1:39:19 AM 134285 C:\Program Files\Safari\Safari.resources\Help\zh_TW.lproj
1/17/2009 1:39:19 AM 1266541 C:\Program Files\Safari\Safari.resources\it.lproj
1/17/2009 1:39:19 AM 282355 C:\Program Files\Safari\Safari.resources\ja.lproj
1/17/2009 1:39:20 AM 292959 C:\Program Files\Safari\Safari.resources\ko.lproj
1/17/2009 1:39:20 AM 361337 C:\Program Files\Safari\Safari.resources\nb.lproj
1/17/2009 1:39:20 AM 1369855 C:\Program Files\Safari\Safari.resources\nl.lproj
1/17/2009 1:39:20 AM 358132 C:\Program Files\Safari\Safari.resources\pl.lproj
1/17/2009 1:39:20 AM 1098392 C:\Program Files\Safari\Safari.resources\pt.lproj
1/17/2009 1:39:20 AM 365860 C:\Program Files\Safari\Safari.resources\pt_PT.lproj
1/17/2009 1:39:21 AM 356510 C:\Program Files\Safari\Safari.resources\ru.lproj
1/17/2009 1:39:21 AM 19468 C:\Program Files\Safari\Safari.resources\SnippetEditor
1/17/2009 1:39:21 AM 8242 C:\Program Files\Safari\Safari.resources\SnippetEditor\Images
1/17/2009 1:39:22 AM 1236651 C:\Program Files\Safari\Safari.resources\sv.lproj
1/17/2009 1:39:22 AM 308283 C:\Program Files\Safari\Safari.resources\zh_CN.lproj
1/17/2009 1:39:22 AM 317153 C:\Program Files\Safari\Safari.resources\zh_TW.lproj
1/17/2009 1:39:23 AM 7669267 C:\Program Files\Safari\SafariTheme.resources
1/17/2009 1:39:29 AM 1094600 C:\Program Files\Safari\WebKit.resources
1/17/2009 1:39:29 AM 28710 C:\Program Files\Safari\WebKit.resources\da.lproj
1/17/2009 1:39:29 AM 29726 C:\Program Files\Safari\WebKit.resources\de.lproj
1/17/2009 1:39:29 AM 32628 C:\Program Files\Safari\WebKit.resources\en.lproj
1/17/2009 1:39:29 AM 30072 C:\Program Files\Safari\WebKit.resources\es.lproj
1/17/2009 1:39:29 AM 29246 C:\Program Files\Safari\WebKit.resources\fi.lproj
1/17/2009 1:39:29 AM 29928 C:\Program Files\Safari\WebKit.resources\fr.lproj
1/17/2009 1:39:29 AM 606668 C:\Program Files\Safari\WebKit.resources\inspector
1/17/2009 1:39:29 AM 272559 C:\Program Files\Safari\WebKit.resources\inspector\Images
1/17/2009 1:39:30 AM 29398 C:\Program Files\Safari\WebKit.resources\it.lproj
1/17/2009 1:39:30 AM 26568 C:\Program Files\Safari\WebKit.resources\ja.lproj
1/17/2009 1:39:30 AM 25762 C:\Program Files\Safari\WebKit.resources\ko.lproj
1/17/2009 1:39:30 AM 28788 C:\Program Files\Safari\WebKit.resources\nb.lproj
1/17/2009 1:39:30 AM 29574 C:\Program Files\Safari\WebKit.resources\nl.lproj
1/17/2009 1:39:30 AM 29020 C:\Program Files\Safari\WebKit.resources\pl.lproj
1/17/2009 1:39:30 AM 29710 C:\Program Files\Safari\WebKit.resources\pt_PT.lproj
1/17/2009 1:39:30 AM 29440 C:\Program Files\Safari\WebKit.resources\ru.lproj
1/17/2009 1:39:30 AM 28914 C:\Program Files\Safari\WebKit.resources\sv.lproj
1/17/2009 1:39:30 AM 24798 C:\Program Files\Safari\WebKit.resources\zh_CN.lproj
1/17/2009 1:39:30 AM 24896 C:\Program Files\Safari\WebKit.resources\zh_TW.lproj

====== Files under "\System32\Drivers" Last 60 Days======


====== Files Deleted under "%Temp%" ======

C:\DOCUME~1\Paula\LOCALS~1\Temp\jusched.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\lxcyscan.log
C:\DOCUME~1\Paula\LOCALS~1\Temp\ose00000.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\UAC1ebe.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF2DE5.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF2F1B.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF4CB1.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DF7BC8.tmp
C:\DOCUME~1\Paula\LOCALS~1\Temp\~DFA8C1.tmp

9 Files deleted

====== Files and Folders under "All Users\Application Data" Last 60 Days======

2/20/2009 10:32:34 AM 0 C:\Documents and Settings\All Users\Application Data\Malwarebytes
2/20/2009 10:32:34 AM 0 C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware

====== Possible Rootkit Scan (Note: Items listed here are not necessarily bad)======


====== Values under HKLM\Software\microsoft\shared tools\msconfig\startupreg ======

HKLM\Software\microsoft\shared tools\msconfig\startupreg\


====== Services ( Services that are Whitelisted are not shown) ======

BCM43XX (Broadcom 802.11 Network Adapter Driver)- C:\WINDOWS\system32\DRIVERS\bcmwl5.sys - Manual/Running
HdAudAddService (Microsoft UAA Function Driver for High Definition Audio Service)- C:\WINDOWS\system32\drivers\CHDAud.sys - Manual/Running
HSFHWAZL (HSFHWAZL)- C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys - Manual/Running
HSF_DPV (HSF_DPV)- C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys - Manual/Running
RTL8023xp (Realtek 10/100/1000 PCI NIC Family NDIS XP Driver)- C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys - Manual/Running
SynTP (Synaptics TouchPad Driver)- C:\WINDOWS\system32\DRIVERS\SynTP.sys - Manual/Running
tmactmon (tmactmon)- \??\C:\WINDOWS\system32\drivers\tmactmon.sys - Auto/Running
tmevtmgr (tmevtmgr)- \??\C:\WINDOWS\system32\drivers\tmevtmgr.sys - Auto/Running
tmpreflt (tmpreflt)- C:\WINDOWS\system32\DRIVERS\tmpreflt.sys - Auto/Running
tmtdi (Trend Micro TDI Driver)- C:\WINDOWS\system32\DRIVERS\tmtdi.sys - System/Running
tmxpflt (tmxpflt)- C:\WINDOWS\system32\DRIVERS\tmxpflt.sys - Auto/Running
UIUSys (Conexant Setup API)- C:\WINDOWS\system32\DRIVERS\UIUSYS.SYS - Manual/Stopped
usbbus (LGE CDMA Composite USB Device)- C:\WINDOWS\system32\DRIVERS\lgusbbus.sys - Manual/Stopped
UsbDiag (LGE CDMA USB Serial Port)- C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys - Manual/Stopped
USBModem (LGE CDMA USB Modem)- C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys - Manual/Stopped
vsapint (vsapint)- C:\WINDOWS\system32\DRIVERS\vsapint.sys - Auto/Running
WmiAcpi (Microsoft Windows Management Interface for ACPI)- C:\WINDOWS\system32\DRIVERS\wmiacpi.sys - System/Running
WpdUsb (WpdUsb)- C:\WINDOWS\system32\DRIVERS\wpdusb.sys - Manual/Stopped

====== Uninstall List From Registry ======

Adobe Flash Player 10 ActiveX
Adobe Shockwave Player
Broadcom 802.11 Wireless LAN Adapter
Canon Camera Access Library
Canon Camera Window DC_DV 5 for ZoomBrowser EX
Canon Camera Window DC_DV 6 for ZoomBrowser EX
Canon Camera Window MC 6 for ZoomBrowser EX
Canon G.726 WMP-Decoder
CCleaner (remove only)
Conexant HD Audio
HDAUDIO Soft Data Fax Modem with SmartCP
Canon Camera Support Core Library
Disney Pirates of the Caribbean Online
Canon Utilities EOS Utility
Intel® Graphics Media Accelerator Driver
Microsoft Office Home and Student 2007
Microsoft Internationalized Domain Names Mitigation APIs
Windows Internet Explorer 7
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Security Update for Windows XP (KB890046)
Windows XP Hotfix - KB890859
Windows Media Format SDK Hotfix - KB891122
Windows XP Hotfix - KB891781
Windows Genuine Advantage Validation Tool (KB892130)
Security Update for Windows XP (KB893756)
Windows Installer 3.1 (KB893803)
Update for Windows XP (KB894391)
Hotfix for Windows XP (KB896344)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Update for Windows XP (KB898461)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Update for Windows XP (KB900485)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Update for Windows XP (KB904942)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Update for Windows XP (KB908531)
Microsoft Base Smart Card Cryptographic Service Provider Package
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows Media Player (KB911564)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Update for Windows XP (KB916595)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Update for Windows XP (KB920342)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Update for Windows XP (KB920872)
Security Update for Windows XP (KB921503)
Update for Windows XP (KB922582)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows Media Player 6.4 (KB925398)
Update for Windows XP (KB925720)
Update for Windows XP (KB925876)
Security Update for Windows XP (KB925902)
Hotfix for Windows XP (KB926239)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Update for Windows XP (KB927891)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Hotfix for Windows Media Format 11 SDK (KB929399)
Security Update for Windows XP (KB930178)
Update for Windows XP (KB930916)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Update for Windows XP (KB932823-v3)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Update for Windows XP (KB936357)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB938127)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows XP (KB938464)
Update for Windows XP (KB938828)
Security Update for Windows XP (KB938829)
Hotfix for Windows Media Player 11 (KB939683)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB942615)
Security Update for Windows Internet Explorer 7 (KB942615)
Update for Windows XP (KB942763)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Hotfix for Windows Internet Explorer 7 (KB947864)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Update for Windows XP (KB951072-v2)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows Media Player (KB952069)
Hotfix for Windows XP (KB952287)
Security Update for Windows XP (KB952954)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Update for Windows XP (KB955839)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows XP (KB960715)
Security Update for Windows Internet Explorer 7 (KB961260)
Update for Windows XP (KB967715)
Lexmark 3400 Series
Lexmark Fax Solutions
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 1.1
Canon MovieEdit Task for ZoomBrowser EX
Microsoft Compression Client Pack 1.0 for Windows XP
MySpaceIM
My Web Search (Webfetti)
Microsoft National Language Support Downlevel APIs
Norton PC Checkup
Canon Utilities PhotoStitch
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Synaptics Pointing Device Driver
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Live Toolbar
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Format 11 runtime
Windows Media Player 11
Microsoft User-Mode Driver Framework Feature Pack 1.0
XML Paper Specification Shared Components Pack 1.0
Canon Utilities ZoomBrowser EX
OpenOffice.org Installer 1.0
Lexmark Toolbar
Windows Live Mail
MSXML 6 Service Pack 2 (KB954459)
Google Toolbar for Internet Explorer
Microsoft .NET Framework 3.0 Service Pack 1
Windows Live Photo Gallery
J2SE Runtime Environment 5.0 Update 12
Java™ 6 Update 7
Windows Live Toolbar Extension (Windows Live Toolbar)
WebFldrs XP
Windows Live Outlook Toolbar (Windows Live Toolbar)
NetWaiting
iTunes
Windows Live Messenger
Form Fill (Windows Live Toolbar)
Safari
Popup Blocker (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Apple Software Update
Trend Micro AntiVirus
Map Button (Windows Live Toolbar)
Windows Live Favorites for Windows Live Toolbar
Bonjour
Rhapsody Player Engine
Microsoft Software Update for Web Folders (English) 12
Microsoft Office Excel MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office PowerPoint MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Word MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (French) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proof (Spanish) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office OneNote MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Shared Setup Metadata MUI (English) 2007
2007 Microsoft Office Suite Service Pack 1 (SP1)
Microsoft Office Home and Student 2007
Security Update for Microsoft Office Word 2007 (KB956358)
Security Update for Microsoft Office PowerPoint 2007 (KB951338)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office Excel 2007 (KB958437)
Security Update for 2007 Microsoft Office System (KB958439)
Security Update for Visio 2007 (KB947590)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for Microsoft Office system 2007 (KB956828)
Update for Office 2007 (KB946691)
Security Update for 2007 Microsoft Office System (KB951550)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Windows Live Writer
Trend Micro AntiVirus
Windows Live installer
ABBYY FineReader 6.0 Sprint
SmartAudio
Windows Live Sign-in Assistant
Microsoft .NET Framework 2.0 Service Pack 1
Windows Presentation Foundation
LG USB Modem driver
HP Update
Microsoft .NET Framework 1.1
Windows Live Toolbar
OneCare Advisor (Windows Live Toolbar)
Apple Mobile Device Support
Smart Menus (Windows Live Toolbar)
Microsoft SQL Server 2005 Compact Edition [ENU]
QuickTime

======== Other Info ========

TOTAL PHYSICAL RAM: 526 MB

#12 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:08:49 PM

Posted 03 March 2009 - 05:39 PM

edp333

No problem. I catch myself missing stuff many times.

We are going to use Avenger once again.

1.Rerun Avenger

2. Copy all the text contained in the bold below to your Clipboard by highlighting it and pressing (Ctrl+C):

Files to delete:
C:\WINDOWS\system32\UACalknxmct.log
C:\WINDOWS\system32\UACexhosrsu.dat
C:\WINDOWS\system32\uacinit.dll
C:\WINDOWS\system32\UACvsotobyu.dll
C:\WINDOWS\system32\UACyfucfubk.dll


Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by clicking on its icon on your desktop.
  • Select Load Script
  • Select Paste from Clipboard
  • The information should now appear in the Open window
  • Select Execute
  • Answer Yes When prompted "Are you sure you want to execute the current script?"
4. The Avenger will automatically do the following:
  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avengerís actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply. This time I would like a Hijackthis log please.

Note if you do not have Hijackthis here are the instructions to get it

Please download HJT Installer from Here and save it to your Desktop.Double click on the HJTInstall.exe.
at the next window Select Install.
It will be installed by default here: C:\Program Files\Trend Micro\HijackThis.
A shortcut to the application will also be placed on your Desktop.
The program will open automatically after installation.
Select "Do a system scan and save logfile"
It will open in Notepad. save it to your Desktop
Before closing HJT, please click on the AnalyzeThis button. "Analyze This" is for use by TrendMicro, and DOES NOT mean "Analyze My Log". You will need to post your log on the Hijackthis Board.
Close the web page that appears and then close the program.
Open the Hijackthis log you saved to your desktop and copy and paste the results as a reply to this thread.
Use the Hijackthis shortcut to run future scans.

Posted Image
Microsoft MVP - Windows Security

#13 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 03 March 2009 - 06:24 PM

Ran successfully, but I am confused with the post in Hijackthis Board. This forum is the first one listed on the HJT Analyzethis webpage.
Here are the log files:

Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "UACd.sys" found!
ImagePath: \systemroot\system32\drivers\UACwqbdvigb.sys
Start Type: 4 (Disabled)

Rootkit scan completed.

Driver "UACd.sys" deleted successfully.
File "C:\Windows\system32\drivers\UACwqbdvigb.sys" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:20:32 PM, on 3/3/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Documents and Settings\Paula\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: (no name) - {0B014B81-4E12-46F9-806F-55867AF8FD3C} - (no file)
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [SynTPStart] "C:\Program Files\Synaptics\SynTP\SynTPStart.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Zango\bin\10.3.37.0\Weather.exe" -auto
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [36266493996210438916126564668257] C:\Program Files\Antivirus 2009\av360.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...?p=ZKxdm021YYUS
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co...ex/qtplugin.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f...etup1.0.1.0.cab
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testAc...OnlineGames.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

--
End of file - 10468 bytes

Edited by edp333, 03 March 2009 - 06:36 PM.


#14 bamajim

bamajim

  • Members
  • 894 posts
  • OFFLINE
  •  
  • Local time:08:49 PM

Posted 04 March 2009 - 10:32 AM

edp333

I see you got the Hijackthis log.

The Avenger log you posted is from a previous run Yesterday, 03:08 PM

I need to see the one you ran with the new script showing the file deletion please c:\avenger.txt

1. Rerun Hijackthis (scan only) and place checks beside the following entriesR3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: (no name) - {0B014B81-4E12-46F9-806F-55867AF8FD3C} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [36266493996210438916126564668257] C:\Program Files\Antivirus 2009\av360.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...?p=ZKxdm021YYUS

Close all other open windows except Hijackthis and Select "Fix checked"

Close Hijackthis ->> Reboot your PC ->> Rerun Hijackthis and post a fresh Hijackthis log
Posted Image
Microsoft MVP - Windows Security

#15 edp333

edp333
  • Topic Starter

  • Members
  • 66 posts
  • OFFLINE
  •  
  • Local time:07:49 PM

Posted 04 March 2009 - 11:09 AM

Thank you for being patient. Here is the Avenger log:
Logfile of The Avenger Version 2.0, © by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\WINDOWS\system32\UACalknxmct.log" deleted successfully.
File "C:\WINDOWS\system32\UACexhosrsu.dat" deleted successfully.
File "C:\WINDOWS\system32\uacinit.dll" deleted successfully.
File "C:\WINDOWS\system32\UACvsotobyu.dll" deleted successfully.
File "C:\WINDOWS\system32\UACyfucfubk.dll" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

And the new Hijack this log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:06:35 AM, on 3/4/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\lxcycoms.exe
C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\Documents and Settings\Paula\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [SynTPStart] "C:\Program Files\Synaptics\SynTP\SynTPStart.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKLM\..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [LXCYCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Zango\bin\10.3.37.0\Weather.exe" -auto
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co...ex/qtplugin.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f...etup1.0.1.0.cab
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testAc...OnlineGames.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

--
End of file - 9663 bytes




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users