Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Professional Help is All I need


  • This topic is locked This topic is locked
67 replies to this topic

#1 kymberly

kymberly

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 26 May 2009 - 12:51 AM

DDS (Ver_09-05-14.01) - NTFSx86
Run by We Bleed Pink at 15:19:15.91 on Sun 05/24/2009
Internet Explorer: 7.0.6000.16830
Microsoft Windows Vista Home Premium 6.0.6000.0.1252.1.1033.18.1918.913 [GMT -6:00]

AV: Norton Internet Security *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\lxcycoms.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Windows\System32\rundll32.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\blu & orange 4 life\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.att.net/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Presario&pf=desktop
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Presario&pf=desktop
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {1e8a6170-7264-4d0f-beae-d42a53123c75} - c:\program files\common files\symantec shared\coshared\browser\1.5\NppBho.dll
TB: Show Norton Toolbar: {90222687-f593-4738-b738-fbee9c7b26df} - c:\program files\common files\symantec shared\coshared\browser\1.5\UIBHO.dll
uRun: [HPAdvisor] c:\program files\hewlett-packard\hp advisor\HPAdvisor.exe autoRun
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
mRun: [KBD] c:\hp\kbd\KbdStub.EXE
mRun: [OsdMaestro] "c:\program files\hewlett-packard\on-screen osd indicator\OSD.exe"
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [<NO NAME>]
mRun: [SnapfishMediaDetector] c:\program files\snapfish media detector\SnapfishMediaDetector.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [IS CfgWiz] "c:\program files\common files\symantec shared\opc\{31011d49-d90c-4da0-878b-78d28ad507af}\cltUIStb.exe" /MODULE CfgWiz /GUID {BC8D3EAF-F864-4d4b-AB4D-B3D0C32E2840} /MODE CfgWiz /CMDLINE "REBOOT"
mRun: [lxcymon.exe] "c:\program files\lexmark 3400 series\lxcymon.exe"
mRun: [EzPrint] "c:\program files\lexmark 3400 series\ezprint.exe"
mRun: [FaxCenterServer] "c:\program files\lexmark fax solutions\fm3032.exe" /s
mRun: [LXCYCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCYtime.dll,_RunDLLEntry@16
mRunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\snapfi~1.lnk - c:\program files\snapfish media detector\SnapfishMediaDetector.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL

============= SERVICES / DRIVERS ===============

R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service --> c:\windows\system32\lxcycoms.exe -service [?]
R3 netr73;Amigo RT73 Wireless Driver for Vista;c:\windows\system32\drivers\netr73.sys [2009-5-9 255488]
S3 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\symantec\defini~1\symcdata\idsdefs\20070108.003\IDSvix86.sys [2009-5-9 212280]

=============== Created Last 30 ================

2009-05-16 09:33 268,800 a------- c:\windows\system32\es.dll
2009-05-16 09:32 1,244,672 a------- c:\windows\system32\mcmde.dll
2009-05-16 09:32 428,032 a------- c:\windows\system32\EncDec.dll
2009-05-16 09:32 217,088 a------- c:\windows\system32\psisrndr.ax
2009-05-16 09:32 177,152 a------- c:\windows\system32\mpg2splt.ax
2009-05-16 09:32 80,896 a------- c:\windows\system32\MSNP.ax
2009-05-16 09:32 292,352 a------- c:\windows\system32\psisdecd.dll
2009-05-16 09:32 68,608 a------- c:\windows\system32\Mpeg2Data.ax
2009-05-16 09:32 57,856 a------- c:\windows\system32\MSDvbNP.ax
2009-05-16 09:27 220,160 a------- c:\windows\system32\ntprint.dll
2009-05-13 17:25 1,732 a------- c:\windows\system32\drivers\nvphy.bin
2009-05-13 17:24 361,984 a------- c:\windows\system32\IPSECSVC.DLL
2009-05-13 17:24 272,896 a------- c:\windows\system32\polstore.dll
2009-05-13 17:24 61,440 a------- c:\windows\system32\winipsec.dll
2009-05-13 17:24 28,672 a------- c:\windows\system32\FwRemoteSvr.dll
2009-05-13 17:23 241,152 a------- c:\windows\system32\PortableDeviceApi.dll
2009-05-13 17:23 95,232 a------- c:\windows\system32\PortableDeviceClassExtension.dll
2009-05-13 17:23 160,768 a------- c:\windows\system32\PortableDeviceTypes.dll
2009-05-13 17:22 205,824 a------- c:\windows\system32\msoeacct.dll
2009-05-13 17:22 87,040 a------- c:\windows\system32\msoert2.dll
2009-05-13 17:22 39,424 a------- c:\windows\system32\ACCTRES.dll
2009-05-13 17:20 376,320 a------- c:\windows\system32\winsrv.dll
2009-05-13 17:20 49,664 a------- c:\windows\system32\csrsrv.dll
2009-05-13 17:17 376,832 a------- c:\windows\system32\winhttp.dll
2009-05-13 17:16 297,472 a------- c:\windows\system32\gdi32.dll
2009-05-13 17:15 1,060,920 a------- c:\windows\system32\drivers\ntfs.sys
2009-05-13 17:14 211,456 a------- c:\windows\system32\drivers\mrxsmb10.sys
2009-05-13 17:14 500,736 a------- c:\windows\system32\msdtcprx.dll
2009-05-13 17:14 30,208 a------- c:\windows\system32\xolehlp.dll
2009-05-13 17:13 28,672 a------- c:\windows\system32\Apphlpdm.dll
2009-05-13 17:13 4,247,552 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2009-05-13 17:13 1,687,040 a------- c:\windows\system32\gameux.dll
2009-05-13 17:12 303,616 a------- c:\windows\system32\wmpeffects.dll
2009-05-13 17:11 1,194,496 a------- c:\windows\system32\msxml3.dll
2009-05-13 17:11 2,048 a------- c:\windows\system32\msxml3r.dll
2009-05-13 17:11 356,864 a------- c:\windows\system32\MediaMetadataHandler.dll
2009-05-13 17:10 392,192 a------- c:\windows\system32\FirewallAPI.dll
2009-05-13 17:10 63,488 a------- c:\windows\system32\drivers\mpsdrv.sys
2009-05-13 17:10 396,800 a------- c:\windows\system32\MPSSVC.dll
2009-05-13 17:10 178,688 a------- c:\windows\system32\iphlpsvc.dll
2009-05-13 17:10 86,016 a------- c:\windows\system32\icfupgd.dll
2009-05-13 17:10 61,952 a------- c:\windows\system32\cmifw.dll
2009-05-13 17:10 23,040 a------- c:\windows\system32\drivers\tunnel.sys
2009-05-13 17:10 16,896 a------- c:\windows\system32\wfapigp.dll
2009-05-13 17:10 15,360 a------- c:\windows\system32\drivers\TUNMP.SYS
2009-05-13 17:08 2,048 a------- c:\windows\system32\tzres.dll
2009-05-13 17:07 8,147,968 a------- c:\windows\system32\wmploc.DLL
2009-05-13 17:07 7,680 a------- c:\windows\system32\spwmp.dll
2009-05-13 17:07 4,096 a------- c:\windows\system32\msdxm.ocx
2009-05-13 17:07 4,096 a------- c:\windows\system32\dxmasf.dll
2009-05-13 17:04 109,624 a------- c:\windows\system32\drivers\ataport.sys
2009-05-13 17:04 45,112 a------- c:\windows\system32\drivers\pciidex.sys
2009-05-13 17:04 21,560 a------- c:\windows\system32\drivers\atapi.sys
2009-05-13 17:04 15,928 a------- c:\windows\system32\drivers\pciide.sys
2009-05-13 17:04 211,000 a------- c:\windows\system32\drivers\volsnap.sys
2009-05-13 17:04 154,624 a------- c:\windows\system32\drivers\nwifi.sys
2009-05-13 17:04 2,923,520 a------- c:\windows\explorer.exe
2009-05-13 17:02 803,328 a------- c:\windows\system32\drivers\tcpip.sys
2009-05-13 17:02 216,632 a------- c:\windows\system32\drivers\netio.sys
2009-05-13 17:02 167,424 a------- c:\windows\system32\tcpipcfg.dll
2009-05-13 17:02 24,064 a------- c:\windows\system32\netcfg.exe
2009-05-13 17:02 22,016 a------- c:\windows\system32\netiougc.exe
2009-05-13 16:59 3,503,584 a------- c:\windows\system32\ntkrnlpa.exe
2009-05-13 16:59 3,469,280 a------- c:\windows\system32\ntoskrnl.exe
2009-05-13 16:59 549,888 a------- c:\windows\system32\rpcss.dll
2009-05-13 16:59 654,336 a------- c:\windows\system32\printfilterpipelinesvc.exe
2009-05-13 16:59 24,576 a------- c:\windows\system32\printfilterpipelineprxy.dll
2009-05-13 16:59 53,248 a------- c:\windows\system32\iasads.dll
2009-05-13 16:59 37,888 a------- c:\windows\system32\iasdatastore.dll
2009-05-13 16:59 158,720 a------- c:\windows\system32\sdohlp.dll
2009-05-13 16:59 97,280 a------- c:\windows\system32\iasrecst.dll
2009-05-13 16:57 9,728 a------- c:\windows\system32\LAPRXY.DLL
2009-05-13 16:57 2,048 a------- c:\windows\system32\asferror.dll
2009-05-13 16:57 223,232 a------- c:\windows\system32\WMASF.DLL
2009-05-13 16:55 712,192 a------- c:\windows\system32\WindowsCodecs.dll
2009-05-13 16:55 425,472 a------- c:\windows\system32\PhotoMetadataHandler.dll
2009-05-13 16:55 347,136 a------- c:\windows\system32\WindowsCodecsExt.dll
2009-05-13 16:54 441,856 a------- c:\windows\system32\win32spl.dll
2009-05-13 16:54 37,376 a------- c:\windows\system32\printcom.dll
2009-05-13 16:54 113,664 a------- c:\windows\system32\drivers\rmcast.sys
2009-05-13 16:54 14,848 a------- c:\windows\system32\wshrm.dll
2009-05-13 16:53 11,776 a------- c:\windows\system32\sbunattend.exe
2009-05-13 16:52 290,304 a------- c:\windows\system32\drivers\srv.sys
2009-05-13 16:52 84,480 a------- c:\windows\system32\dnsrslvr.dll
2009-05-13 16:52 24,576 a------- c:\windows\system32\dnscacheugc.exe
2009-05-13 16:52 53,760 a------- c:\windows\system32\drivers\hdaudbus.sys
2009-05-13 16:51 269,824 a------- c:\windows\system32\schannel.dll
2009-05-13 16:51 2,855,424 a------- c:\windows\system32\mf.dll
2009-05-13 16:51 98,816 a------- c:\windows\system32\mfps.dll
2009-05-13 16:51 52,736 a------- c:\windows\system32\rrinstaller.exe
2009-05-13 16:51 24,576 a------- c:\windows\system32\mfpmp.exe
2009-05-13 16:51 2,048 a------- c:\windows\system32\mferror.dll
2009-05-13 16:51 996,352 a------- c:\windows\system32\WMNetMgr.dll
2009-05-13 16:51 94,720 a------- c:\windows\system32\logagent.exe
2009-05-13 16:50 130,048 a------- c:\windows\system32\drivers\srv2.sys
2009-05-13 16:50 101,888 a------- c:\windows\system32\drivers\mrxsmb.sys
2009-05-13 16:50 84,992 a------- c:\windows\system32\drivers\srvnet.sys
2009-05-13 16:50 58,368 a------- c:\windows\system32\drivers\mrxsmb20.sys
2009-05-13 16:50 788,992 a------- c:\windows\system32\rpcrt4.dll
2009-05-13 16:49 84,480 a------- c:\windows\system32\INETRES.dll
2009-05-13 16:49 737,792 a------- c:\windows\system32\inetcomm.dll
2009-05-13 16:48 1,645,568 a------- c:\windows\system32\connect.dll
2009-05-13 16:48 152,576 a------- c:\windows\system32\imagehlp.dll
2009-05-13 16:48 12,800 a------- c:\windows\system32\drivers\fs_rec.sys
2009-05-13 16:48 5,120 a------- c:\windows\system32\wmi.dll
2009-05-13 16:48 1,327,104 a------- c:\windows\system32\quartz.dll
2009-05-13 16:46 2,028,032 a------- c:\windows\system32\win32k.sys
2009-05-13 16:45 <DIR> --d----- c:\program files\MSXML 4.0
2009-05-13 16:44 633,856 a------- c:\windows\system32\user32.dll
2009-05-13 16:43 1,341,440 a------- c:\windows\system32\msxml6.dll
2009-05-13 16:43 2,048 a------- c:\windows\system32\msxml6r.dll
2009-05-13 16:40 750,080 a------- c:\windows\system32\qmgr.dll
2009-05-12 16:45 1,524,736 a------- c:\windows\system32\wucltux.dll
2009-05-12 16:44 83,456 a------- c:\windows\system32\wudriver.dll
2009-05-12 16:43 162,064 a------- c:\windows\system32\wuwebv.dll
2009-05-12 16:43 31,232 a------- c:\windows\system32\wuapp.exe
2009-05-12 10:49 1,840 a--shr-- c:\windows\system32\drivers\103C_HP_CPC_GC660AA-ABA SR5123WM_YC_0Pres_QCNX719_E73NAv3PrA1_49_INettle2_SECS_V1.0_B5.07_T070404_WUH0_L409_M1918_J320_7AMD_8Athlon 64 X2 Dual Core_92.1_#090511_N10DE03EF_Z14F12F20_G10DE03D0.MRK
2009-05-12 10:36 <DIR> --d----- c:\program files\lx_cats
2009-05-12 10:33 344,064 a------- c:\windows\system32\lxcycoin.dll
2009-05-12 10:30 45,056 a------- c:\windows\system32\LXPRMON.DLL
2009-05-12 10:30 32,768 a------- c:\windows\system32\LXPMONUI.DLL
2009-05-12 10:30 339,968 a------- c:\windows\system32\IMGMAN32.DLL
2009-05-12 10:30 98,345 a------- c:\windows\system32\IMHOST32.DLL
2009-05-12 10:30 98,304 a------- c:\windows\system32\IM31XPNG.DEL
2009-05-12 10:30 69,632 a------- c:\windows\system32\IM31XTIF.DEL
2009-05-12 10:30 49,152 a------- c:\windows\system32\IM31IMG.DIL
2009-05-12 10:30 12,288 a------- c:\windows\system32\LXPMONRC.DLL
2009-05-12 10:30 <DIR> --d----- c:\programdata\FaxCtr
2009-05-12 10:30 <DIR> --d----- c:\progra~2\FaxCtr
2009-05-12 10:29 <DIR> --d----- c:\programdata\Ezprint
2009-05-12 10:29 <DIR> --d----- c:\progra~2\Ezprint
2009-05-12 10:28 <DIR> --d----- c:\program files\Lexmark Fax Solutions
2009-05-12 10:20 <DIR> --d----- c:\program files\Lexmark 3400 Series
2009-05-12 10:20 <DIR> --d----- c:\program files\Abbyy FineReader 6.0 Sprint
2009-05-12 10:20 274,432 a------- c:\windows\system32\lxcyinst.dll
2009-05-12 10:20 323,584 a------- c:\windows\system32\lxcyhcp.dll
2009-05-12 10:20 413,696 a------- c:\windows\system32\lxcyinpa.dll
2009-05-11 16:17 44 a------- c:\windows\system\hpsysdrv.dat
2009-05-11 16:15 <DIR> --d----- c:\users\We Bleed Pink
2009-05-09 19:50 <DIR> --d----- c:\programdata\Hewlett-Packard
2009-05-09 19:47 <DIR> --d----- c:\windows\SMINST
2009-05-09 19:42 <DIR> --d-h--- C:\hp
2009-05-09 19:42 <DIR> --d----- c:\program files\Norton Internet Security
2009-05-09 19:42 172,032 a------- c:\windows\system32\UCI32m15.dll
2009-05-09 19:42 94,208 a------- c:\windows\system32\mdmxsdk.dll
2009-05-09 19:42 12,672 a------- c:\windows\system32\drivers\mdmxsdk.sys
2009-05-09 19:42 255,488 a------- c:\windows\system32\drivers\netr73.sys
2009-05-09 19:42 352,768 a------- c:\windows\system32\idecoiins.dll
2009-05-09 19:42 352,768 a------- c:\windows\system32\idecoi.dll
2009-05-09 19:42 101,672 a------- c:\windows\system32\drivers\nvstor32.sys
2009-05-09 19:41 <DIR> --d----- c:\windows\system32\OEM
2009-05-09 19:41 <DIR> --d----- c:\windows\Panther
2009-05-09 19:41 115,000 a------- c:\windows\system32\drivers\SYMEVENT.SYS
2009-05-09 19:41 8,014 a------- c:\windows\system32\drivers\SYMEVENT.CAT
2009-05-09 19:41 806 a------- c:\windows\system32\drivers\SYMEVENT.INF
2009-05-09 19:41 8,192 a--s-r-- C:\BOOTSECT.BAK
2009-05-09 19:41 438,840 a--shr-- C:\bootmgr
2009-05-09 19:41 <DIR> --dsh--- C:\Boot
2009-05-09 19:41 <DIR> --d----- c:\program files\Symantec
2009-05-09 19:41 <DIR> --d----- c:\programdata\Symantec
2009-05-09 19:41 <DIR> --d----- c:\progra~2\Symantec
2009-05-09 19:41 <DIR> --d----- c:\program files\common files\Symantec Shared
2009-05-09 19:39 <DIR> --d----- c:\program files\Yahoo!
2009-05-09 19:38 <DIR> --d----- c:\program files\Online Services
2009-05-09 19:38 <DIR> --d----- c:\program files\earthlink totalaccess
2009-05-09 19:35 <DIR> --d----- c:\programdata\PC-Doctor
2009-05-09 19:35 <DIR> --d----- c:\progra~2\PC-Doctor
2009-05-09 19:35 <DIR> --d----- c:\program files\PC-Doctor 5 for Windows
2009-05-09 19:33 <DIR> --d----- c:\programdata\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
2009-05-09 19:33 <DIR> --d----- c:\progra~2\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
2009-05-09 19:33 <DIR> --d----- c:\program files\Activation Assistant for the 2007 Microsoft Office suites
2009-05-09 19:32 32,592 a------- c:\windows\system32\msonpmon.dll
2009-05-09 19:32 <DIR> --d----- c:\windows\PCHEALTH
2009-05-09 19:31 <DIR> --d----- c:\programdata\Microsoft Help
2009-05-09 19:29 <DIR> --d----- c:\program files\Snapfish Media Detector
2009-05-09 19:28 <DIR> --d----- c:\programdata\Adobe
2009-05-09 19:27 <DIR> --d----- c:\program files\muvee Technologies
2009-05-09 19:27 <DIR> --d----- c:\program files\common files\muvee Technologies
2009-05-09 19:27 <DIR> --d----- c:\programdata\muvee Technologies
2009-05-09 19:26 <DIR> --d----- c:\program files\common files\xing shared
2009-05-09 19:26 <DIR> --d----- c:\program files\common files\Real
2009-05-09 19:25 <DIR> --d----- c:\program files\Rhapsody
2009-05-09 19:25 <DIR> a-d----- c:\program files\common files\LS Getting Started
2009-05-09 19:24 <DIR> --d----- c:\program files\common files\SureThing Shared
2009-05-09 19:23 <DIR> --d----- c:\programdata\Sonic
2009-05-09 19:23 <DIR> --d----- c:\program files\common files\PX Storage Engine
2009-05-09 19:22 <DIR> --d----- c:\programdata\Roxio
2009-05-09 19:22 <DIR> --d----- c:\program files\common files\Sonic Shared
2009-05-09 19:22 <DIR> --d----- c:\program files\Roxio
2009-05-09 19:16 <DIR> --d----- c:\program files\common files\HP
2009-05-09 19:16 <DIR> --d----- c:\program files\HP
2009-05-09 19:16 103,521 a------- c:\windows\hpqins13.dat
2009-05-09 19:16 <DIR> --d----- c:\programdata\HP
2009-05-09 19:11 <DIR> --d----- c:\programdata\WildTangent
2009-05-09 19:11 <DIR> --d----- c:\program files\HP Games
2009-05-09 19:11 <DIR> --d----- c:\progra~2\WildTangent
2009-05-09 19:06 <DIR> --d----- c:\program files\Realtek
2009-05-09 19:04 2,379,776 a------- c:\windows\system32\nvwssr.dll
2009-05-09 19:03 414,208 a------- c:\windows\system32\msscp.dll
2009-05-09 19:03 146,944 a------- c:\windows\system32\MMDevAPI.dll
2009-05-09 19:02 135,680 a------- c:\windows\system32\wusa.exe
2009-05-09 19:01 974,336 a------- c:\windows\system32\crypt32.dll
2009-05-09 19:01 104,448 a------- c:\windows\system32\DWWIN.EXE
2009-05-09 19:01 74,752 a------- c:\windows\system32\drivers\rasl2tp.sys
2009-05-09 19:01 60,928 a------- c:\windows\system32\drivers\raspptp.sys
2009-05-09 19:00 229,888 a------- c:\windows\system32\msshsq.dll
2009-05-09 18:58 223,744 a------- c:\windows\system32\drivers\usbport.sys
2009-05-09 18:58 192,000 a------- c:\windows\system32\drivers\usbhub.sys
2009-05-09 18:58 73,216 a------- c:\windows\system32\drivers\usbccgp.sys
2009-05-09 18:58 38,400 a------- c:\windows\system32\drivers\usbehci.sys
2009-05-09 18:58 19,456 a------- c:\windows\system32\drivers\usbohci.sys
2009-05-09 18:58 8,704 a------- c:\windows\system32\hccoin.dll
2009-05-09 18:58 5,888 a------- c:\windows\system32\drivers\usbd.sys
2009-05-09 18:57 61,440 -------- c:\windows\system32\OsdRemove.exe
2009-05-09 18:57 48,760 a------- c:\windows\system32\RUNCLOSE.OCX
2009-05-09 18:57 19,072 a------- c:\windows\system32\drivers\PS2.sys
2009-05-09 18:56 253,952 a------- c:\windows\system32\cPC_DMIRD.dll
2009-05-09 18:54 327,680 a------- c:\windows\system32\pythoncom24.dll
2009-05-09 18:54 102,400 a------- c:\windows\system32\pywintypes24.dll
2009-05-09 18:54 1,060,864 a------- c:\windows\system32\mfc71.dll
2009-05-09 18:54 348,160 a------- c:\windows\system32\msvcr71.dll
2009-05-09 18:53 <DIR> --dsh--- c:\windows\Installer
2009-05-09 18:46 <DIR> --d----- c:\program files\CONEXANT

==================== Find3M ====================

2009-05-16 09:31 1,808,896 a------- c:\windows\system32\NlsLexicons0046.dll
2009-05-16 09:27 61,440 a------- c:\windows\system32\ntprint.exe
2009-05-16 09:27 120,320 a------- c:\windows\system32\dhcpcsvc6.dll
2009-05-16 09:27 10,240 a------- c:\windows\system32\dhcpcmonitor.dll
2009-05-16 09:27 1,984,512 a------- c:\windows\system32\authui.dll
2009-05-16 09:27 123,904 a------- c:\windows\system32\msvfw32.dll
2009-05-16 09:27 65,024 a------- c:\windows\system32\avicap32.dll
2009-05-16 09:27 88,576 a------- c:\windows\system32\avifil32.dll
2009-05-16 09:27 82,944 a------- c:\windows\system32\mciavi32.dll
2009-05-16 09:27 69,632 a------- c:\windows\system32\sendmail.dll
2009-05-16 09:27 31,232 a------- c:\windows\system32\msvidc32.dll
2009-05-16 09:27 12,800 a------- c:\windows\system32\msrle32.dll
2009-05-16 09:27 8,138,240 a------- c:\windows\system32\ssBranded.scr
2009-05-15 15:05 174 a--sh--- c:\program files\desktop.ini
2009-05-13 17:28 51,200 a------- c:\windows\inf\infpub.dat
2009-05-13 17:28 665,600 a------- c:\windows\inf\drvindex.dat
2009-05-13 17:28 86,016 a------- c:\windows\inf\infstrng.dat
2009-05-13 17:28 86,016 a------- c:\windows\inf\infstor.dat
2009-05-13 17:21 704,000 a------- c:\windows\system32\PhotoScreensaver.scr
2009-05-13 17:21 24,064 a------- c:\windows\system32\wtsapi32.dll
2009-05-13 17:21 258,232 a------- c:\windows\system32\drivers\acpi.sys
2009-05-13 17:21 542,720 a------- c:\windows\system32\sysmain.dll
2009-05-13 17:21 502,784 a------- c:\windows\system32\wlansvc.dll
2009-05-13 17:21 290,816 a------- c:\windows\system32\wlanmsm.dll
2009-05-13 17:21 67,584 a------- c:\windows\system32\wlanhlp.dll
2009-05-13 17:21 47,104 a------- c:\windows\system32\wlanapi.dll
2009-05-13 17:21 297,984 a------- c:\windows\system32\wlansec.dll
2009-05-13 17:21 194,560 a------- c:\windows\system32\WebClnt.dll
2009-05-13 17:21 110,080 a------- c:\windows\system32\drivers\mrxdav.sys
2009-05-13 17:13 2,560 a------- c:\windows\apppatch\AcRes.dll
2009-05-13 17:13 2,144,256 a------- c:\windows\apppatch\AcGenral.dll
2009-05-13 17:13 537,600 a------- c:\windows\apppatch\AcLayers.dll
2009-05-13 17:13 449,536 a------- c:\windows\apppatch\AcSpecfc.dll
2009-05-13 17:13 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
2009-05-13 16:56 72,704 a------- c:\windows\system32\secur32.dll
2009-05-13 16:42 72,704 a------- c:\windows\system32\admparse.dll
2009-05-13 16:42 826,368 a------- c:\windows\system32\wininet.dll
2009-05-13 16:42 52,736 a------- c:\windows\apppatch\iebrshim.dll
2009-05-13 16:42 78,336 a------- c:\windows\system32\ieencode.dll
2009-05-13 16:42 48,128 a------- c:\windows\system32\mshtmler.dll
2009-05-13 16:42 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-05-13 16:42 56,320 a------- c:\windows\system32\iesetup.dll
2009-05-09 19:06 319,456 a------- c:\windows\DIFxAPI.dll
2009-05-09 19:06 315,392 a------- c:\windows\HideWin.exe
2009-05-09 19:00 160,872 a------- c:\windows\system32\halmacpi.dll
2009-05-09 19:00 134,760 a------- c:\windows\system32\halacpi.dll
2006-11-02 06:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 06:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 06:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 06:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 03:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 03:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 03:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 03:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 15:19:57.39 ===============


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-05-14.01)

Microsoft Windows Vista Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 5/9/2009 6:50:01 PM
System Uptime: 5/24/2009 1:29:37 PM (2 hours ago)

Motherboard: ECS | | Nettle2
Processor: AMD Athlon™ 64 X2 Dual Core Processor 4000+ | Socket M2 | 2000/201mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 289 GiB total, 257.262 GiB free.
D: is FIXED (NTFS) - 9 GiB total, 1.008 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================


==== Installed Programs ======================

ABBYY FineReader 6.0 Sprint
Activation Assistant for the 2007 Microsoft Office suites
Adobe Flash Player 9 ActiveX
Adobe Reader 8
AppCore
AV
ccCommon
Enhanced Multimedia Keyboard Solution
Hardware Diagnostic Tools
HP Customer Experience Enhancements
HP Customer Feedback
HP Easy Setup - Frontend
HP On-Screen Cap/Num/Scroll Lock Indicator
HP Photosmart Essential 2.0
HP Photosmart Essential2.5
HP Picasso Media Center Add-In
HP Total Care Advisor
HP Update
Lexmark 3400 Series
Lexmark Fax Solutions
LightScribe 1.4.142.1
LiveUpdate 3.2 (Symantec Corporation)
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
MSRedist
MSXML 4.0 SP2 (KB954430)
muvee autoProducer 6.0
My HP Games
Norton AntiVirus
Norton Confidential Browser Component
Norton Confidential Web Protection Component
Norton Internet Security
Norton Internet Security (Symantec Corporation)
Norton Protection Center
NVIDIA Drivers
PSSWCORE
Python 2.4.3
RealPlayer
Realtek High Definition Audio Driver
Rhapsody
Rhapsody Player Engine
Roxio Activation Module
Roxio Creator Audio
Roxio Creator Basic v9
Roxio Creator Copy
Roxio Creator Data
Roxio Creator EasyArchive
Roxio Creator Tools
Roxio Express Labeler 3
Roxio MyDVD Basic v9
Snapfish Media Detector
Soft Data Fax Modem with SmartCP
SPBBC 32bit
Symantec Real Time Storage Protection Component
SymNet

==== End Of File =====================

I just recived the blue screen of death and was able to capture some of the technical info: netio.sys 0x0000008E (oxc0000005,0x81bedb95,0x95c987cc, 0x000000000!
ok, i have done a full reinstall with disk and still same problem! I have no restore points which is very weird too me! also weird programs are running such as killit.exe, newprobe.exe! Ran a scan with a2 and if found: trace registry:JEOPARDY!!A2 trace value: hkey-local-machine\software\sonypictures\JEOPARDY!-->

Maybe this information is helpful!!

Edited by kymberly, 26 May 2009 - 12:57 AM.


BC AdBot (Login to Remove)

 


#2 Net_Surfer

Net_Surfer

  • Banned
  • 2,154 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:08 AM

Posted 07 June 2009 - 02:51 PM

Hello and :thumbup2: to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here
.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.


Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.

Thanks and again sorry for the delay
.

-----------------------------------------------------------

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE


Kind regards
Net_Surfer

:)

#3 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 08 June 2009 - 05:45 PM

Here is the new DDS reports you requested!!

DDS (Ver_09-05-14.01) - NTFSx86
Run by shoelover at 17:24:25.79 on Mon 06/08/2009
Internet Explorer: 7.0.6000.16830
Microsoft Windows Vista Home Premium 6.0.6000.0.1252.1.1033.18.1918.988 [GMT -5:00]

SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\lxcycoms.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Lexmark 3400 Series\lxcymon.exe
C:\Program Files\Lexmark 3400 Series\ezprint.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\SearchFilterHost.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\vssvc.exe
C:\Windows\system32\DllHost.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\DllHost.exe
C:\Users\Precious Cargo\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Presario&pf=desktop
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Presario&pf=desktop
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Presario&pf=desktop
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
uRun: [HPAdvisor] c:\program files\hewlett-packard\hp advisor\HPAdvisor.exe autoRun
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
mRun: [KBD] c:\hp\kbd\KbdStub.EXE
mRun: [OsdMaestro] "c:\program files\hewlett-packard\on-screen osd indicator\OSD.exe"
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [lxcymon.exe] "c:\program files\lexmark 3400 series\lxcymon.exe"
mRun: [EzPrint] "c:\program files\lexmark 3400 series\ezprint.exe"
mRun: [FaxCenterServer] "c:\program files\lexmark fax solutions\fm3032.exe" /s
mRun: [LXCYCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCYtime.dll,_RunDLLEntry@16
mRunOnce: [PCDrProfiler]
mRunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll

============= SERVICES / DRIVERS ===============

R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service --> c:\windows\system32\lxcycoms.exe -service [?]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-6-1 1153368]
R3 netr73;Amigo RT73 Wireless Driver for Vista;c:\windows\system32\drivers\netr73.sys [2009-5-27 255488]

=============== Created Last 30 ================

2009-06-04 14:18 268,800 a------- c:\windows\system32\es.dll
2009-06-03 16:49 <DIR> --d----- c:\program files\lx_cats
2009-06-03 16:46 344,064 a------- c:\windows\system32\lxcycoin.dll
2009-06-03 16:44 45,056 a------- c:\windows\system32\LXPRMON.DLL
2009-06-03 16:44 32,768 a------- c:\windows\system32\LXPMONUI.DLL
2009-06-03 16:43 339,968 a------- c:\windows\system32\IMGMAN32.DLL
2009-06-03 16:43 98,345 a------- c:\windows\system32\IMHOST32.DLL
2009-06-03 16:43 98,304 a------- c:\windows\system32\IM31XPNG.DEL
2009-06-03 16:43 69,632 a------- c:\windows\system32\IM31XTIF.DEL
2009-06-03 16:43 49,152 a------- c:\windows\system32\IM31IMG.DIL
2009-06-03 16:43 12,288 a------- c:\windows\system32\LXPMONRC.DLL
2009-06-03 16:43 <DIR> --d----- c:\programdata\FaxCtr
2009-06-03 16:43 <DIR> --d----- c:\progra~2\FaxCtr
2009-06-03 16:43 <DIR> --d----- c:\programdata\Ezprint
2009-06-03 16:43 <DIR> --d----- c:\progra~2\Ezprint
2009-06-03 16:43 <DIR> --d----- c:\program files\Lexmark Fax Solutions
2009-06-03 16:42 <DIR> --d----- c:\program files\Lexmark 3400 Series
2009-06-03 16:42 <DIR> --d----- c:\program files\Abbyy FineReader 6.0 Sprint
2009-06-03 16:33 1,877 a--shr-- c:\windows\system32\drivers\103C_HP_CPC_GC660AA-ABA SR5123WM_YC_0Pres_QCNX719_E73NAv3PrA1_49_INettle2_SECS_V1.0_B5.07_T070404_WUH0_L409_M1918_J320_7AMD_8Athlon 64 X2 Dual Core_92.1_#090530_N10DE03EF_Z14F12F20_G10DE03D0.MRK
2009-06-03 14:04 549,888 a------- c:\windows\system32\rpcss.dll
2009-06-03 14:04 3,503,584 a------- c:\windows\system32\ntkrnlpa.exe
2009-06-03 14:04 3,469,280 a------- c:\windows\system32\ntoskrnl.exe
2009-06-03 14:04 24,576 a------- c:\windows\system32\printfilterpipelineprxy.dll
2009-06-03 14:04 654,336 a------- c:\windows\system32\printfilterpipelinesvc.exe
2009-06-03 14:04 247,296 a------- c:\windows\system32\wbem\WmiPrvSE.exe
2009-06-03 14:04 130,560 a------- c:\windows\system32\wbem\WmiDcPrv.dll
2009-06-03 14:04 614,912 a------- c:\windows\system32\wbem\fastprox.dll
2009-06-03 14:04 501,760 a------- c:\windows\system32\wbem\WmiPrvSD.dll
2009-06-03 14:04 53,248 a------- c:\windows\system32\iasads.dll
2009-06-03 14:04 158,720 a------- c:\windows\system32\sdohlp.dll
2009-06-03 14:04 97,280 a------- c:\windows\system32\iasrecst.dll
2009-06-03 14:04 37,888 a------- c:\windows\system32\iasdatastore.dll
2009-06-02 16:25 <DIR> --d----- c:\windows\Desktop
2009-06-02 16:25 203 a------- c:\windows\hop.ini
2009-06-02 16:25 80 a------- c:\windows\system32\vssver.scc
2009-06-02 16:25 <DIR> --d----- c:\program files\Hooked on Phonics Learning
2009-06-02 16:24 283,648 a------- c:\windows\uninst.exe
2009-06-01 01:30 <DIR> --d----- c:\programdata\Spybot - Search & Destroy
2009-06-01 01:30 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2009-06-01 01:30 <DIR> --d----- c:\progra~2\Spybot - Search & Destroy
2009-06-01 01:19 241,152 a------- c:\windows\system32\PortableDeviceApi.dll
2009-06-01 01:19 160,768 a------- c:\windows\system32\PortableDeviceTypes.dll
2009-06-01 01:19 95,232 a------- c:\windows\system32\PortableDeviceClassExtension.dll
2009-06-01 01:19 205,824 a------- c:\windows\system32\msoeacct.dll
2009-06-01 01:19 87,040 a------- c:\windows\system32\msoert2.dll
2009-06-01 01:19 39,424 a------- c:\windows\system32\ACCTRES.dll
2009-06-01 01:17 194,560 a------- c:\windows\system32\WebClnt.dll
2009-06-01 01:17 110,080 a------- c:\windows\system32\drivers\mrxdav.sys
2009-06-01 01:17 376,320 a------- c:\windows\system32\winsrv.dll
2009-06-01 01:17 49,664 a------- c:\windows\system32\csrsrv.dll
2009-06-01 01:14 376,832 a------- c:\windows\system32\winhttp.dll
2009-06-01 01:13 297,472 a------- c:\windows\system32\gdi32.dll
2009-06-01 01:12 1,060,920 a------- c:\windows\system32\drivers\ntfs.sys
2009-06-01 01:11 211,456 a------- c:\windows\system32\drivers\mrxsmb10.sys
2009-06-01 01:11 500,736 a------- c:\windows\system32\msdtcprx.dll
2009-06-01 01:11 30,208 a------- c:\windows\system32\xolehlp.dll
2009-06-01 01:10 28,672 a------- c:\windows\system32\Apphlpdm.dll
2009-06-01 01:10 4,247,552 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2009-06-01 01:10 1,687,040 a------- c:\windows\system32\gameux.dll
2009-06-01 01:09 303,616 a------- c:\windows\system32\wmpeffects.dll
2009-06-01 01:08 1,194,496 a------- c:\windows\system32\msxml3.dll
2009-06-01 01:08 2,048 a------- c:\windows\system32\msxml3r.dll
2009-06-01 01:08 356,864 a------- c:\windows\system32\MediaMetadataHandler.dll
2009-06-01 01:06 2,048 a------- c:\windows\system32\tzres.dll
2009-06-01 01:05 1,244,672 a------- c:\windows\system32\mcmde.dll
2009-06-01 01:05 428,032 a------- c:\windows\system32\EncDec.dll
2009-06-01 01:05 292,352 a------- c:\windows\system32\psisdecd.dll
2009-06-01 01:05 217,088 a------- c:\windows\system32\psisrndr.ax
2009-06-01 01:05 177,152 a------- c:\windows\system32\mpg2splt.ax
2009-06-01 01:05 80,896 a------- c:\windows\system32\MSNP.ax
2009-06-01 01:05 68,608 a------- c:\windows\system32\Mpeg2Data.ax
2009-06-01 01:05 57,856 a------- c:\windows\system32\MSDvbNP.ax
2009-06-01 01:04 8,147,968 a------- c:\windows\system32\wmploc.DLL
2009-06-01 01:04 7,680 a------- c:\windows\system32\spwmp.dll
2009-06-01 01:04 4,096 a------- c:\windows\system32\msdxm.ocx
2009-06-01 01:04 4,096 a------- c:\windows\system32\dxmasf.dll
2009-06-01 01:01 45,112 a------- c:\windows\system32\drivers\pciidex.sys
2009-06-01 01:01 21,560 a------- c:\windows\system32\drivers\atapi.sys
2009-06-01 01:01 15,928 a------- c:\windows\system32\drivers\pciide.sys
2009-06-01 01:01 211,000 a------- c:\windows\system32\drivers\volsnap.sys
2009-06-01 01:01 154,624 a------- c:\windows\system32\drivers\nwifi.sys
2009-06-01 01:01 109,624 a------- c:\windows\system32\drivers\ataport.sys
2009-06-01 01:00 2,923,520 a------- c:\windows\explorer.exe
2009-06-01 00:58 4,981,248 a------- c:\windows\system32\NlsLexicons0013.dll
2009-06-01 00:55 1,585,664 a------- c:\windows\system32\setupapi.dll
2009-06-01 00:53 223,232 a------- c:\windows\system32\WMASF.DLL
2009-06-01 00:53 9,728 a------- c:\windows\system32\LAPRXY.DLL
2009-06-01 00:53 2,048 a------- c:\windows\system32\asferror.dll
2009-06-01 00:53 1,233,408 a------- c:\windows\system32\lsasrv.dll
2009-06-01 00:53 72,704 a------- c:\windows\system32\secur32.dll
2009-06-01 00:53 7,680 a------- c:\windows\system32\lsass.exe
2009-06-01 00:53 25,600 a------- c:\windows\system32\amxread.dll
2009-06-01 00:53 14,848 a------- c:\windows\system32\apilogen.dll
2009-06-01 00:52 268,288 a------- c:\windows\system32\mcbuilder.exe
2009-06-01 00:52 223,232 a------- c:\windows\system32\SLC.dll
2009-06-01 00:52 33,280 a------- c:\windows\system32\slwmi.dll
2009-06-01 00:52 2,605,568 a------- c:\windows\system32\SLsvc.exe
2009-06-01 00:52 566,784 a------- c:\windows\system32\SLCommDlg.dll
2009-06-01 00:52 351,232 a------- c:\windows\system32\SLUI.exe
2009-06-01 00:52 186,368 a------- c:\windows\system32\SLLUA.exe
2009-06-01 00:52 57,856 a------- c:\windows\system32\SLUINotify.dll
2009-06-01 00:52 39,936 a------- c:\windows\system32\slcinst.dll
2009-06-01 00:51 425,472 a------- c:\windows\system32\PhotoMetadataHandler.dll
2009-06-01 00:51 712,192 a------- c:\windows\system32\WindowsCodecs.dll
2009-06-01 00:51 347,136 a------- c:\windows\system32\WindowsCodecsExt.dll
2009-06-01 00:49 11,776 a------- c:\windows\system32\sbunattend.exe
2009-06-01 00:49 290,304 a------- c:\windows\system32\drivers\srv.sys
2009-06-01 00:49 84,480 a------- c:\windows\system32\dnsrslvr.dll
2009-06-01 00:49 24,576 a------- c:\windows\system32\dnscacheugc.exe
2009-06-01 00:49 53,760 a------- c:\windows\system32\drivers\hdaudbus.sys
2009-06-01 00:48 269,824 a------- c:\windows\system32\schannel.dll
2009-05-31 03:31 327,680 a------- c:\windows\ocsetup_cbs_install_NetFx3.perf
2009-05-31 03:31 65,536 a------- c:\windows\ocsetup_cbs_install_NetFx3.dpx
2009-05-31 03:31 17,235,968 a------- c:\windows\ocsetup_install_NetFx3.etl
2009-05-31 03:28 96,760 a------- c:\windows\system32\dfshim.dll
2009-05-31 03:28 41,984 a------- c:\windows\system32\netfxperf.dll
2009-05-31 03:28 282,112 a------- c:\windows\system32\mscoree.dll
2009-05-31 03:28 158,720 a------- c:\windows\system32\mscorier.dll
2009-05-31 03:28 83,968 a------- c:\windows\system32\mscories.dll
2009-05-31 03:11 2,855,424 a------- c:\windows\system32\mf.dll
2009-05-31 03:11 98,816 a------- c:\windows\system32\mfps.dll
2009-05-31 03:11 52,736 a------- c:\windows\system32\rrinstaller.exe
2009-05-31 03:11 996,352 a------- c:\windows\system32\WMNetMgr.dll
2009-05-31 03:11 94,720 a------- c:\windows\system32\logagent.exe
2009-05-31 03:11 24,576 a------- c:\windows\system32\mfpmp.exe
2009-05-31 03:11 2,048 a------- c:\windows\system32\mferror.dll
2009-05-31 03:10 101,888 a------- c:\windows\system32\drivers\mrxsmb.sys
2009-05-31 03:10 84,992 a------- c:\windows\system32\drivers\srvnet.sys
2009-05-31 03:10 58,368 a------- c:\windows\system32\drivers\mrxsmb20.sys
2009-05-31 03:10 130,048 a------- c:\windows\system32\drivers\srv2.sys
2009-05-31 03:10 788,992 a------- c:\windows\system32\rpcrt4.dll
2009-05-31 03:09 84,480 a------- c:\windows\system32\INETRES.dll
2009-05-31 03:09 737,792 a------- c:\windows\system32\inetcomm.dll
2009-05-31 03:08 1,645,568 a------- c:\windows\system32\connect.dll
2009-05-31 03:08 152,576 a------- c:\windows\system32\imagehlp.dll
2009-05-31 03:08 12,800 a------- c:\windows\system32\drivers\fs_rec.sys
2009-05-31 03:08 5,120 a------- c:\windows\system32\wmi.dll
2009-05-31 03:08 1,327,104 a------- c:\windows\system32\quartz.dll
2009-05-31 03:06 2,028,032 a------- c:\windows\system32\win32k.sys
2009-05-31 03:05 <DIR> --d----- c:\program files\MSXML 4.0
2009-05-31 03:04 633,856 a------- c:\windows\system32\user32.dll
2009-05-31 03:04 1,341,440 a------- c:\windows\system32\msxml6.dll
2009-05-31 03:04 2,048 a------- c:\windows\system32\msxml6r.dll
2009-05-31 03:00 750,080 a------- c:\windows\system32\qmgr.dll
2009-05-31 02:08 1,524,736 a------- c:\windows\system32\wucltux.dll
2009-05-31 02:06 162,064 a------- c:\windows\system32\wuwebv.dll
2009-05-31 02:06 31,232 a------- c:\windows\system32\wuapp.exe
2009-05-30 13:16 <DIR> --d----- c:\users\shoelover
2009-05-27 19:38 <DIR> --d----- c:\programdata\Hewlett-Packard
2009-05-27 19:34 <DIR> --d----- c:\windows\SMINST
2009-05-27 19:29 <DIR> --d-h--- C:\hp
2009-05-27 19:29 172,032 a------- c:\windows\system32\UCI32m15.dll
2009-05-27 19:29 94,208 a------- c:\windows\system32\mdmxsdk.dll
2009-05-27 19:29 12,672 a------- c:\windows\system32\drivers\mdmxsdk.sys
2009-05-27 19:28 255,488 a------- c:\windows\system32\drivers\netr73.sys
2009-05-27 19:28 352,768 a------- c:\windows\system32\idecoiins.dll
2009-05-27 19:28 352,768 a------- c:\windows\system32\idecoi.dll
2009-05-27 19:28 101,672 a------- c:\windows\system32\drivers\nvstor32.sys
2009-05-27 19:28 <DIR> --d----- c:\windows\system32\OEM
2009-05-27 19:28 <DIR> --d----- c:\windows\Panther
2009-05-27 19:28 8,192 a--s-r-- C:\BOOTSECT.BAK
2009-05-27 19:28 438,840 a--shr-- C:\bootmgr
2009-05-27 19:28 <DIR> --dsh--- C:\Boot
2009-05-27 19:28 <DIR> --d----- c:\programdata\Symantec
2009-05-27 19:28 <DIR> --d----- c:\progra~2\Symantec
2009-05-27 19:27 <DIR> --d----- c:\program files\common files\Symantec Shared
2009-05-27 19:26 <DIR> --d----- c:\program files\Yahoo!
2009-05-27 19:24 <DIR> --d----- c:\program files\Online Services
2009-05-27 19:24 <DIR> --d----- c:\program files\earthlink totalaccess
2009-05-27 19:22 <DIR> --d----- c:\programdata\PC-Doctor
2009-05-27 19:22 <DIR> --d----- c:\progra~2\PC-Doctor
2009-05-27 19:22 <DIR> --d----- c:\program files\PC-Doctor 5 for Windows
2009-05-27 19:20 <DIR> --d----- c:\programdata\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
2009-05-27 19:20 <DIR> --d----- c:\progra~2\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
2009-05-27 19:20 <DIR> --d----- c:\program files\Activation Assistant for the 2007 Microsoft Office suites
2009-05-27 19:19 32,592 a------- c:\windows\system32\msonpmon.dll
2009-05-27 19:18 <DIR> --d----- c:\windows\PCHEALTH
2009-05-27 19:17 <DIR> --d----- c:\programdata\Microsoft Help
2009-05-27 19:15 <DIR> --d----- c:\programdata\Adobe
2009-05-27 19:14 <DIR> --d----- c:\program files\muvee Technologies
2009-05-27 19:14 <DIR> --d----- c:\program files\common files\muvee Technologies
2009-05-27 19:14 <DIR> --d----- c:\programdata\muvee Technologies
2009-05-27 19:13 <DIR> --d----- c:\program files\common files\xing shared
2009-05-27 19:13 <DIR> --d----- c:\program files\common files\Real
2009-05-27 19:12 <DIR> --d----- c:\program files\Rhapsody
2009-05-27 19:11 <DIR> a-d----- c:\program files\common files\LS Getting Started
2009-05-27 19:11 <DIR> --d----- c:\program files\common files\SureThing Shared
2009-05-27 19:10 <DIR> --d----- c:\programdata\Sonic
2009-05-27 19:10 <DIR> --d----- c:\program files\common files\PX Storage Engine
2009-05-27 19:09 <DIR> --d----- c:\programdata\Roxio
2009-05-27 19:09 <DIR> --d----- c:\program files\common files\Sonic Shared
2009-05-27 19:09 <DIR> --d----- c:\program files\Roxio
2009-05-27 19:03 <DIR> --d----- c:\program files\common files\HP
2009-05-27 19:03 <DIR> --d----- c:\program files\HP
2009-05-27 19:03 103,521 a------- c:\windows\hpqins13.dat
2009-05-27 19:03 <DIR> --d----- c:\programdata\HP
2009-05-27 18:58 <DIR> --d----- c:\program files\HP Games
2009-05-27 18:58 <DIR> --d----- c:\programdata\WildTangent
2009-05-27 18:58 <DIR> --d----- c:\progra~2\WildTangent
2009-05-27 18:53 319,456 a------- c:\windows\DIFxAPI.dll
2009-05-27 18:53 520,192 a------- c:\windows\RtlExUpd.dll
2009-05-27 18:53 315,392 a------- c:\windows\HideWin.exe
2009-05-27 18:53 <DIR> --d----- c:\program files\Realtek
2009-05-27 18:53 <DIR> --d----- c:\windows\system32\RTCOM
2009-05-27 18:52 4,390,912 a------- c:\windows\RtHDVCpl.exe
2009-05-27 18:52 1,840,640 a------- c:\windows\system32\RtkAPO.dll
2009-05-27 18:52 1,744,928 a------- c:\windows\system32\drivers\RTKVHDA.sys
2009-05-27 18:52 1,191,936 a------- c:\windows\RtlUpd.exe
2009-05-27 18:52 532,480 a------- c:\windows\system32\RTSndMgr.cpl
2009-05-27 18:52 494,080 a------- c:\windows\system32\RtkPgExt.dll
2009-05-27 18:52 339,968 a------- c:\windows\system32\SRSTSXT.dll
2009-05-27 18:52 135,168 a------- c:\windows\system32\SRSWOW.dll
2009-05-27 18:49 146,944 a------- c:\windows\system32\MMDevAPI.dll
2009-05-27 18:48 135,680 a------- c:\windows\system32\wusa.exe
2009-05-27 18:48 974,336 a------- c:\windows\system32\crypt32.dll
2009-05-27 18:47 104,448 a------- c:\windows\system32\DWWIN.EXE
2009-05-27 18:47 74,752 a------- c:\windows\system32\drivers\rasl2tp.sys
2009-05-27 18:47 60,928 a------- c:\windows\system32\drivers\raspptp.sys
2009-05-27 18:46 229,888 a------- c:\windows\system32\msshsq.dll
2009-05-27 18:44 223,744 a------- c:\windows\system32\drivers\usbport.sys
2009-05-27 18:44 192,000 a------- c:\windows\system32\drivers\usbhub.sys
2009-05-27 18:44 73,216 a------- c:\windows\system32\drivers\usbccgp.sys
2009-05-27 18:44 38,400 a------- c:\windows\system32\drivers\usbehci.sys
2009-05-27 18:44 19,456 a------- c:\windows\system32\drivers\usbohci.sys
2009-05-27 18:44 8,704 a------- c:\windows\system32\hccoin.dll
2009-05-27 18:44 5,888 a------- c:\windows\system32\drivers\usbd.sys
2009-05-27 18:44 61,440 -------- c:\windows\system32\OsdRemove.exe
2009-05-27 18:43 48,760 a------- c:\windows\system32\RUNCLOSE.OCX
2009-05-27 18:43 19,072 a------- c:\windows\system32\drivers\PS2.sys
2009-05-27 18:42 253,952 a------- c:\windows\system32\cPC_DMIRD.dll
2009-05-27 18:40 327,680 a------- c:\windows\system32\pythoncom24.dll
2009-05-27 18:40 102,400 a------- c:\windows\system32\pywintypes24.dll
2009-05-27 18:40 1,060,864 a------- c:\windows\system32\mfc71.dll
2009-05-27 18:40 348,160 a------- c:\windows\system32\msvcr71.dll
2009-05-27 18:40 <DIR> --dsh--- c:\windows\Installer
2009-05-27 18:33 <DIR> --d----- c:\program files\CONEXANT

==================== Find3M ====================

2009-06-03 16:48 86,016 a------- c:\windows\inf\infstrng.dat
2009-06-03 16:48 51,200 a------- c:\windows\inf\infpub.dat
2009-06-03 16:47 86,016 a------- c:\windows\inf\infstor.dat
2009-06-02 16:18 665,600 a------- c:\windows\inf\drvindex.dat
2009-06-02 16:16 174 a--sh--- c:\program files\desktop.ini
2009-06-01 01:18 704,000 a------- c:\windows\system32\PhotoScreensaver.scr
2009-06-01 01:18 356,352 a------- c:\windows\system32\wbem\wbemcomn.dll
2009-06-01 01:18 258,232 a------- c:\windows\system32\drivers\acpi.sys
2009-06-01 01:18 24,064 a------- c:\windows\system32\wtsapi32.dll
2009-06-01 01:18 542,720 a------- c:\windows\system32\sysmain.dll
2009-06-01 01:18 502,784 a------- c:\windows\system32\wlansvc.dll
2009-06-01 01:18 297,984 a------- c:\windows\system32\wlansec.dll
2009-06-01 01:18 290,816 a------- c:\windows\system32\wlanmsm.dll
2009-06-01 01:18 67,584 a------- c:\windows\system32\wlanhlp.dll
2009-06-01 01:18 47,104 a------- c:\windows\system32\wlanapi.dll
2009-06-01 01:10 2,560 a------- c:\windows\apppatch\AcRes.dll
2009-06-01 01:10 2,144,256 a------- c:\windows\apppatch\AcGenral.dll
2009-06-01 01:10 537,600 a------- c:\windows\apppatch\AcLayers.dll
2009-06-01 01:10 449,536 a------- c:\windows\apppatch\AcSpecfc.dll
2009-06-01 01:10 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
2009-06-01 00:58 3,331,072 a------- c:\windows\system32\NlsLexicons0018.dll
2009-06-01 00:55 371,712 a------- c:\windows\system32\srcore.dll
2009-06-01 00:53 40,960 a------- c:\windows\apppatch\apihex86.dll
2009-05-31 03:03 826,368 a------- c:\windows\system32\wininet.dll
2009-05-31 03:03 72,704 a------- c:\windows\system32\admparse.dll
2009-05-31 03:03 52,736 a------- c:\windows\apppatch\iebrshim.dll
2009-05-31 03:03 78,336 a------- c:\windows\system32\ieencode.dll
2009-05-31 03:03 48,128 a------- c:\windows\system32\mshtmler.dll
2009-05-31 03:03 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-05-31 03:03 56,320 a------- c:\windows\system32\iesetup.dll
2009-05-27 18:50 414,208 a------- c:\windows\system32\msscp.dll
2009-05-27 18:47 160,872 a------- c:\windows\system32\halmacpi.dll
2009-05-27 18:47 134,760 a------- c:\windows\system32\halacpi.dll
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 17:29:02.93 ===============


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-05-14.01)

Microsoft Windows Vista Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 5/27/2009 6:36:31 PM
System Uptime: 6/8/2009 5:20:12 PM (0 hours ago)

Motherboard: ECS | | Nettle2
Processor: AMD Athlon™ 64 X2 Dual Core Processor 4000+ | Socket M2 | 2100/201mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 289 GiB total, 253.39 GiB free.
D: is FIXED (NTFS) - 9 GiB total, 1.008 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================


==== Installed Programs ======================

ABBYY FineReader 6.0 Sprint
Activation Assistant for the 2007 Microsoft Office suites
Adobe Flash Player 9 ActiveX
Adobe Reader 8
Enhanced Multimedia Keyboard Solution
Hardware Diagnostic Tools
Hooked on Phonics Learn to Read
HP Customer Experience Enhancements
HP Customer Feedback
HP Easy Setup - Frontend
HP On-Screen Cap/Num/Scroll Lock Indicator
HP Photosmart Essential 2.0
HP Photosmart Essential2.5
HP Picasso Media Center Add-In
HP Total Care Advisor
Lexmark 3400 Series
Lexmark Fax Solutions
LightScribe 1.4.142.1
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
MSXML 4.0 SP2 (KB954430)
muvee autoProducer 6.0
My HP Games
Norton Internet Security (Symantec Corporation)
NVIDIA Drivers
PSSWCORE
Python 2.4.3
RealPlayer
Realtek High Definition Audio Driver
Rhapsody
Rhapsody Player Engine
Roxio Activation Module
Roxio Creator Audio
Roxio Creator Basic v9
Roxio Creator Copy
Roxio Creator Data
Roxio Creator EasyArchive
Roxio Creator Tools
Roxio Express Labeler 3
Roxio MyDVD Basic v9
Soft Data Fax Modem with SmartCP
Spybot - Search & Destroy

==== End Of File ===========================


I have noticed that I have bellsouth internet services and when I logged off my computer my internet light is still flashing even though I have logged off several hours ago!! Maybe I have a keylogger or trojan as usual. I had to used the disk to restore my system because it woulnd let me get to my desktop. Whatever it is it has to be in my restore or system volume. I ran a scan a while back and believe that I got plenty of errors in system voume and pagefile. sys. I don't have any antivirus programs because everyone I have intstalled it doesn't work properly or is destroyed before I can finish downloading it. Always getting error message that this was not properly downloaded!! Please help!!

#4 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:01:08 PM

Posted 10 June 2009 - 07:28 PM

Hi kymberly,

Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.

Please give me a little time to go through your log and I will get back to you with your first instructions. Don't worry I won't abandon you.
  • Please subscribe to this topic, if you haven't already, and wait for me to get back to you.
  • Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.
  • Please reply to this post so I know you are there.
The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day then I will close the topic.

Thanks :thumbup2:
Posted Image
m0le is a proud member of UNITE

#5 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:01:08 PM

Posted 10 June 2009 - 07:55 PM

Hi kymberly,

There's nothing showing on the logs but your symptoms say we need to take a closer look.

We need to scan for Rootkits with GMER
  • Please download GMER from one of the following locations, and save it to your desktop:
    • Main Mirror
      This version will download a randomly named file (Recommended)
    • Zip Mirror
      This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.
  • Close any and all open programs, as this process may crash your computer.
  • Double click Posted Image or Posted Image on your desktop.
  • Allow the gmer.sys driver to load if asked.
  • You may see this window. If you do, click No.
    Posted Image
  • Click on Posted Image and wait for the scan to finish.
  • If you see a rootkit warning window, click OK.
  • Push Posted Image and save the logfile to your desktop.
  • Copy and Paste the contents of that file in your next post.


Then

We need to create an OTL Report
  • Please download OTL from one of the following mirrors:
  • Save it to your desktop.
  • Double click on the Posted Image icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Push the Posted Image button.
  • Two reports will open, copy and paste them in a reply here:
    • OTListIt.txt <-- Will be opened
    • Extra.txt <-- Will be minimized
Thanks :thumbup2:
Posted Image
m0le is a proud member of UNITE

#6 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 12 June 2009 - 12:55 AM

OTL Extras logfile created on: 6/12/2009 12:05:58 AM - Run 1
OTL by OldTimer - Version 2.1.1.0 Folder = C:\Users\Precious Cargo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W0D23WX9
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16830)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 0.85 Gb Available Physical Memory | 45.14% Memory free
3.96 Gb Paging File | 2.79 Gb Available in Paging File | 70.33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.30 Gb Total Space | 251.94 Gb Free Space | 87.09% Space Free | Partition Type: NTFS
Drive D: | 8.79 Gb Total Space | 1.01 Gb Free Space | 11.47% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SHOELOVER-PC
Current User Name: shoelover
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 90 Days
Company Name Whitelist: On

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
"DisableNotifications" = 0
"EnableFirewall" = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"DisableNotifications" = 0
"EnableFirewall" = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile
"DisableNotifications" = 0
"EnableFirewall" = 1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\GloballyOpenPorts\List

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
[2006/08/30 06:35:12 | 00,952,088 | ---- | M] (EarthLink, Inc.) -- C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========


========== Vista Active Application Exception List ==========

{0DCB27D3-17DF-4284-84B3-DB475AEEDE13} = PROTOCOL=6 | DIR=IN | APP=C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE |
{1C92932E-1975-438D-B659-409AC8D67F27} = PROTOCOL=17 | DIR=IN | APP=C:\PROGRAM FILES\LEXMARK 3400 SERIES\LXCYAIOX.EXE |
{8DB888BA-EA68-429D-BA97-C5B05FF253FF} = PROTOCOL=6 | DIR=IN | APP=C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE |
{925C0908-49F1-419A-BB03-FDBDFAF52C71} = PROTOCOL=17 | DIR=IN | APP=C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE |
{93BA9B65-9081-4B68-9FC4-281452F69023} = PROTOCOL=17 | DIR=IN | APP=C:\PROGRAM FILES\LEXMARK 3400 SERIES\LXCYMON.EXE |
{958D6890-1C9D-410C-86DE-DDE96B354724} = PROTOCOL=6 | DIR=IN | APP=C:\PROGRAM FILES\LEXMARK 3400 SERIES\LXCYMON.EXE |
{A47D2375-198A-411C-8B3A-A7B02872BDE9} = PROTOCOL=6 | DIR=IN | APP=C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE12\ONENOTE.EXE |
{AC171A10-CD39-4357-92F3-D254661E0EBF} = PROTOCOL=6 | DIR=IN | APP=C:\PROGRAM FILES\LEXMARK 3400 SERIES\LXCYAIOX.EXE |
{BA471326-E305-44D4-8125-7C13C97534D2} = PROTOCOL=17 | DIR=IN | APP=C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE |
{D27975BF-1088-40DA-8735-50D3F575AA34} = PROTOCOL=17 | DIR=IN | APP=C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE |
{DC98C9F7-AA42-47C0-8936-515F39373214} = PROTOCOL=17 | DIR=IN | APP=C:\WINDOWS\SYSTEM32\LXCYCOMS.EXE |
{DE6D2D8B-CB24-4616-A23B-BE406268C840} = PROTOCOL=17 | DIR=IN | APP=C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE12\ONENOTE.EXE |
{EBF2D2AE-2205-47A6-BA3A-91BE7C94AA37} = PROTOCOL=6 | DIR=IN | APP=C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE |
{F6CCA7BE-6B67-4959-9BDC-91789FC57F7D} = PROTOCOL=6 | DIR=IN | APP=C:\WINDOWS\SYSTEM32\LXCYCOMS.EXE |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{0CFD3BAF-9F4D-4D70-BD0B-638EA2504C25}" = PSSWCORE
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive
"{2990BC81-3B19-4E53-A53E-30DE3F1BFFA8}" = HP Total Care Advisor
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Roxio Activation Module
"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend
"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6AF49698-949A-4C89-9B31-041D2CCB5FBD}" = muvee autoProducer 6.0
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{75E71ADD-042C-4F30-BFAC-A9EC42351313}" = Python 2.4.3
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{8CEA85DE-955B-4BF4-87F2-0BAA62821633}" = HP Photosmart Essential2.5
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{938B1CD7-7C60-491E-AA90-1F1888168240}" = Roxio MyDVD Basic v9
"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback
"{AB5E289E-76BF-4251-9F3F-9B763F681AE0}" = HP Customer Experience Enhancements
"{AC76BA86-7AD7-1033-7B44-A80000000002}" = Adobe Reader 8
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator Basic v9
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1" = Soft Data Fax Modem with SmartCP
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HOPDKey" = Hooked on Phonics Learn to Read
"HP Photosmart Essential" = HP Photosmart Essential 2.0
"Lexmark 3400 Series" = Lexmark 3400 Series
"Lexmark Fax Solutions" = Lexmark Fax Solutions
"NVIDIA Drivers" = NVIDIA Drivers
"OsdMaestro" = HP On-Screen Cap/Num/Scroll Lock Indicator
"PC-Doctor 5 for Windows" = Hardware Diagnostic Tools
"RealPlayer 6.0" = RealPlayer
"Rhapsody" = Rhapsody
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"SymSetup.{5AA2CD16-706F-41f3-87C5-2B5A031F2B3B}" = Norton Internet Security (Symantec Corporation)
"WildTangent hpdesktop Master Uninstall" = My HP Games

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 6/1/2009 2:46:55 AM | Computer Name = shoelover-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\AVG\AVG8\avgui.exe".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/1/2009 2:48:36 AM | Computer Name = shoelover-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\AVG\AVG8\avgtray.exe".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/1/2009 2:48:43 AM | Computer Name = shoelover-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\AVG\AVG8\avgui.exe".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/1/2009 2:48:47 AM | Computer Name = shoelover-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\AVG\AVG8\avgtray.exe".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/1/2009 2:49:23 AM | Computer Name = shoelover-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\AVG\AVG8\avgui.exe".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/1/2009 2:50:11 AM | Computer Name = shoelover-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\AVG\AVG8\avglvex.dll".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 6/2/2009 6:06:25 PM | Computer Name = shoelover-PC | Source = Application Error | ID = 1000
Description = Faulting application HOP.exe, version 0.0.0.0, time stamp 0x3b85ad9c,
faulting module HOP.exe, version 0.0.0.0, time stamp 0x3b85ad9c, exception code
0xc0000094, fault offset 0x00011d39, process id 0x254, application start time 0x01c9e3c8a458d916.

Error - 6/4/2009 3:31:47 PM | Computer Name = shoelover-PC | Source = Customer Experience Improvement Program | ID = 1006
Description =

Error - 6/12/2009 12:51:26 AM | Computer Name = shoelover-PC | Source = Application Error | ID = 1000
Description = Faulting application gmer.exe, version 1.0.15.14972, time stamp 0x49f73740,
faulting module gmer.exe, version 1.0.15.14972, time stamp 0x49f73740, exception
code 0xc0000005, fault offset 0x0000c4b1, process id 0x960, application start time
0x01c9eb18f3fdaa80.

Error - 6/12/2009 12:57:01 AM | Computer Name = shoelover-PC | Source = Perflib | ID = 1008
Description =

[ System Events ]
Error - 6/8/2009 6:21:16 PM | Computer Name = shoelover-PC | Source = Microsoft-Windows-Kernel-General | ID = 5
Description =

Error - 6/9/2009 1:31:38 AM | Computer Name = shoelover-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 6:06:26 PM on 6/8/2009 was unexpected.

Error - 6/9/2009 1:31:01 AM | Computer Name = shoelover-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot
9, function 0. Please contact your system vendor for technical assistance.

Error - 6/9/2009 1:31:01 AM | Computer Name = shoelover-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot
11, function 0. Please contact your system vendor for technical assistance.

Error - 6/9/2009 1:31:01 AM | Computer Name = shoelover-PC | Source = ACPI | ID = 327686
Description = IRQARB: ACPI BIOS does not contain an IRQ for the device in PCI slot
12, function 0. Please contact your system vendor for technical assistance.

Error - 6/9/2009 1:32:09 AM | Computer Name = shoelover-PC | Source = Microsoft-Windows-Kernel-General | ID = 5
Description =

Error - 6/10/2009 12:27:59 AM | Computer Name = shoelover-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 3:43:15 AM on 6/9/2009 was unexpected.

Error - 6/10/2009 1:06:21 AM | Computer Name = shoelover-PC | Source = DCOM | ID = 10016
Description =

Error - 6/10/2009 1:06:21 AM | Computer Name = shoelover-PC | Source = DCOM | ID = 10016
Description =

Error - 6/12/2009 12:43:34 AM | Computer Name = shoelover-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 2:35:47 AM on 6/10/2009 was unexpected.


< End of report >
OTL logfile created on: 6/12/2009 12:05:58 AM - Run 1
OTL by OldTimer - Version 2.1.1.0 Folder = C:\Users\Precious Cargo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W0D23WX9
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16830)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 0.85 Gb Available Physical Memory | 45.14% Memory free
3.96 Gb Paging File | 2.79 Gb Available in Paging File | 70.33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 289.30 Gb Total Space | 251.94 Gb Free Space | 87.09% Space Free | Partition Type: NTFS
Drive D: | 8.79 Gb Total Space | 1.01 Gb Free Space | 11.47% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: SHOELOVER-PC
Current User Name: shoelover
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Output = Standard
File Age = 90 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - [2007/01/17 13:20:10 | 00,061,440 | ---- | M] (Hewlett-Packard Company) -- c:\Program Files\Common Files\LightScribe\LSSrvc.exe
PRC - [2007/06/20 05:28:55 | 00,537,264 | ---- | M] ( ) -- C:\Windows\system32\lxcycoms.exe
PRC - [2007/10/18 07:37:04 | 00,386,560 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\system32\DRIVERS\xaudio.exe
PRC - [2009/01/26 15:31:10 | 01,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2006/11/02 04:46:02 | 00,143,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\WUDFHost.exe
PRC - [2009/06/01 01:00:37 | 02,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\Explorer.EXE
PRC - [2009/06/01 01:15:03 | 01,006,264 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2006/09/28 08:42:24 | 00,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe
PRC - [2007/02/15 05:59:00 | 00,118,784 | ---- | M] (OsdMaestro) -- C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
PRC - [2007/03/01 10:38:48 | 04,390,912 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/06/25 09:34:55 | 00,291,504 | ---- | M] () -- C:\Program Files\Lexmark 3400 Series\lxcymon.exe
PRC - [2007/06/25 09:34:56 | 00,082,608 | ---- | M] (Lexmark International Inc.) -- C:\Program Files\Lexmark 3400 Series\ezprint.exe
PRC - [2007/03/12 19:44:20 | 01,773,568 | ---- | M] (Hewlett-Packard) -- C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
PRC - [2009/05/31 03:03:20 | 00,301,568 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\ieuser.exe
PRC - [2009/05/31 03:03:23 | 00,636,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe
PRC - [2009/05/31 03:03:23 | 00,636,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe
PRC - [2006/11/02 07:36:00 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
PRC - [2006/11/09 17:46:26 | 00,190,072 | R--- | M] (Adobe Systems, Inc.) -- C:\Windows\system32\Macromed\Flash\FlashUtil9b.exe
PRC - [2005/02/02 11:44:24 | 00,061,440 | ---- | M] (Hewlett-Packard Company) -- C:\hp\kbd\kbd.exe
PRC - [2006/11/02 04:45:49 | 00,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\Taskmgr.exe
PRC - [2009/06/11 23:47:27 | 00,286,208 | ---- | M] () -- C:\Users\Precious Cargo\Desktop\gmer.exe
PRC - [2009/06/11 23:54:09 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Users\Precious Cargo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W0D23WX9\OTL[1].exe

========== Win32 Services (SafeList) ==========

SRV - [2009/05/31 03:28:24 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
SRV - [2006/11/02 07:35:28 | 00,291,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehRecvr.exe -- (ehRecvr [On_Demand | Stopped])
SRV - [2006/11/02 07:35:29 | 00,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehsched.exe -- (ehSched [On_Demand | Stopped])
SRV - [2006/11/02 07:35:29 | 00,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehstart.dll -- (ehstart [Auto | Stopped])
SRV - [2006/11/02 07:36:00 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Running])
SRV - [2004/10/22 05:24:18 | 00,073,728 | ---- | M] (Macrovision Corporation) -- c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])
SRV - [2006/11/02 07:36:02 | 00,741,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])
SRV - [2007/01/17 13:20:10 | 00,061,440 | ---- | M] (Hewlett-Packard Company) -- c:\Program Files\Common Files\LightScribe\LSSrvc.exe -- (LightScribeService [Auto | Running])
SRV - [2007/06/20 05:28:55 | 00,537,264 | ---- | M] ( ) -- C:\Windows\system32\lxcycoms.exe -- (lxcy_device [Auto | Running])
SRV - [2006/11/02 07:36:02 | 00,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])
SRV - [2006/10/26 21:49:34 | 00,441,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv [On_Demand | Stopped])
SRV - [2006/10/26 16:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])
SRV - [2007/03/26 15:21:20 | 00,887,544 | ---- | M] (Sonic Solutions) -- c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe -- (RoxMediaDB9 [On_Demand | Stopped])
SRV - [2009/01/26 15:31:10 | 01,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService [Auto | Running])
SRV - [2007/03/08 20:54:46 | 00,074,656 | R--- | M] (MicroVision Development, Inc.) -- c:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- (stllssvr [On_Demand | Stopped])
SRV - [2009/06/01 01:15:03 | 00,265,912 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend [Auto | Running])
SRV - [2006/11/02 07:36:04 | 00,895,488 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])
SRV - [2007/10/18 07:37:04 | 00,386,560 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\system32\DRIVERS\xaudio.exe -- (XAudioService [Auto | Running])

========== Driver Services (SafeList) ==========

DRV - [2006/11/02 04:51:38 | 00,420,968 | ---- | M] (Adaptec, Inc.) -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx [Disabled | Stopped])
DRV - [2006/11/02 04:51:32 | 00,297,576 | ---- | M] (Adaptec, Inc.) -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci [Disabled | Stopped])
DRV - [2006/11/02 04:50:35 | 00,098,408 | ---- | M] (Adaptec, Inc.) -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m [Disabled | Stopped])
DRV - [2006/11/02 04:51:00 | 00,147,048 | ---- | M] (Adaptec, Inc.) -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320 [Disabled | Stopped])
DRV - [2006/11/02 04:50:11 | 00,071,272 | ---- | M] (Adaptec, Inc.) -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx [Disabled | Stopped])
DRV - [2006/11/02 04:49:20 | 00,014,952 | ---- | M] (Acer Laboratories Inc.) -- C:\Windows\system32\drivers\aliide.sys -- (aliide [Disabled | Stopped])
DRV - [2006/11/02 04:50:09 | 00,067,688 | ---- | M] (Adaptec, Inc.) -- C:\Windows\system32\drivers\arc.sys -- (arc [Disabled | Stopped])
DRV - [2006/11/02 04:50:10 | 00,067,688 | ---- | M] (Adaptec, Inc.) -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas [Disabled | Stopped])
DRV - [2006/11/02 03:24:45 | 00,013,568 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo [On_Demand | Stopped])
DRV - [2006/11/02 03:24:46 | 00,005,248 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp [On_Demand | Stopped])
DRV - [2006/11/02 03:25:24 | 00,071,808 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\system32\drivers\brserid.sys -- (Brserid [Disabled | Stopped])
DRV - [2006/11/02 03:24:44 | 00,062,336 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm [Disabled | Stopped])
DRV - [2006/11/02 03:24:44 | 00,012,160 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm [Disabled | Stopped])
DRV - [2006/11/02 03:24:47 | 00,011,904 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer [On_Demand | Stopped])
DRV - [2006/11/02 04:49:28 | 00,016,488 | ---- | M] (CMD Technology, Inc.) -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide [Disabled | Stopped])
DRV - [2006/11/02 02:30:54 | 00,117,760 | ---- | M] (Intel Corporation) -- C:\Windows\system32\DRIVERS\E1G60I32.sys -- (E1G60 [On_Demand | Stopped])
DRV - [2006/11/02 04:51:34 | 00,316,520 | ---- | M] (Emulex) -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor [Disabled | Stopped])
DRV - [2006/11/02 04:50:10 | 00,037,480 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs [Disabled | Stopped])
DRV - [2008/05/08 05:03:18 | 00,980,992 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\system32\DRIVERS\HSX_DP.sys -- (HSF_DP [On_Demand | Running])
DRV - [2008/05/08 05:05:18 | 00,266,752 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\system32\DRIVERS\HSXHWBS2.sys -- (HSXHWBS2 [On_Demand | Running])
DRV - [2006/11/02 04:51:25 | 00,232,040 | ---- | M] (Intel Corporation) -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV [Disabled | Stopped])
DRV - [2006/11/02 04:50:17 | 00,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp [Disabled | Stopped])
DRV - [2007/03/01 11:21:10 | 01,744,928 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\system32\drivers\RTKVHDA.sys -- (IntcAzAudAddService [On_Demand | Running])
DRV - [2006/11/02 04:50:07 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi [Disabled | Stopped])
DRV - [2006/11/02 04:50:09 | 00,035,944 | ---- | M] (Integrated Technology Express, Inc.) -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid [Disabled | Stopped])
DRV - [2006/11/02 04:50:04 | 00,065,640 | ---- | M] (LSI Logic) -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC [Disabled | Stopped])
DRV - [2006/11/02 04:50:05 | 00,065,640 | ---- | M] (LSI Logic) -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS [Disabled | Stopped])
DRV - [2006/11/02 04:50:10 | 00,065,640 | ---- | M] (LSI Logic) -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI [Disabled | Stopped])
DRV - [2006/06/19 09:26:58 | 00,012,672 | ---- | M] (Conexant) -- C:\Windows\system32\DRIVERS\mdmxsdk.sys -- (mdmxsdk [Auto | Running])
DRV - [2006/11/02 04:49:53 | 00,028,776 | ---- | M] (LSI Logic Corporation) -- C:\Windows\system32\drivers\megasas.sys -- (megasas [Disabled | Stopped])
DRV - [2006/11/02 04:49:59 | 00,033,384 | ---- | M] (LSI Logic Corporation) -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x [Disabled | Stopped])
DRV - [2007/01/04 11:41:50 | 00,255,488 | ---- | M] (Ralink Technology Inc.) -- C:\Windows\system32\DRIVERS\netr73.sys -- (netr73 [On_Demand | Stopped])
DRV - [2006/11/02 04:50:19 | 00,045,160 | ---- | M] (IBM Corporation) -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960 [Disabled | Stopped])
DRV - [2006/11/02 02:36:50 | 00,020,608 | ---- | M] (N-trig Innovative Technologies) -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi [Disabled | Stopped])
DRV - [2007/05/04 01:29:10 | 01,065,384 | ---- | M] (NVIDIA Corporation) -- C:\Windows\system32\DRIVERS\nvmfdx32.sys -- (NVENETFD [On_Demand | Running])
DRV - [2007/02/10 19:18:00 | 07,409,024 | ---- | M] (NVIDIA Corporation) -- C:\Windows\system32\DRIVERS\nvlddmkm.sys -- (nvlddmkm [On_Demand | Running])
DRV - [2006/11/02 04:50:24 | 00,088,680 | ---- | M] (NVIDIA Corporation) -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid [Disabled | Stopped])
DRV - [2006/11/02 04:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor [Disabled | Stopped])
DRV - [2007/03/19 08:58:50 | 00,101,672 | ---- | M] (NVIDIA Corporation) -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32 [Boot | Running])
DRV - [2005/12/12 12:27:00 | 00,019,072 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\system32\DRIVERS\PS2.sys -- (Ps2 [On_Demand | Running])
DRV - [2007/02/02 05:00:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])
DRV - [2006/11/02 04:51:45 | 00,900,712 | ---- | M] (QLogic Corporation) -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300 [Disabled | Stopped])
DRV - [2006/11/02 04:50:35 | 00,106,088 | ---- | M] (QLogic Corporation) -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx [Disabled | Stopped])
DRV - [2006/11/02 01:37:21 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv [Auto | Running])
DRV - [2006/11/02 04:50:10 | 00,038,504 | ---- | M] (Silicon Integrated Systems Corp.) -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2 [Disabled | Stopped])
DRV - [2006/11/02 04:50:16 | 00,071,784 | ---- | M] (Silicon Integrated Systems) -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4 [Disabled | Stopped])
DRV - [2006/11/02 04:50:05 | 00,035,944 | ---- | M] (LSI Logic) -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx [Disabled | Stopped])
DRV - [2006/11/02 04:49:56 | 00,031,848 | ---- | M] (LSI Logic) -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi [Disabled | Stopped])
DRV - [2006/11/02 04:50:03 | 00,034,920 | ---- | M] (LSI Logic) -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3 [Disabled | Stopped])
DRV - [2006/11/02 04:51:25 | 00,235,112 | ---- | M] (ULi Electronics Inc.) -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci [Disabled | Stopped])
DRV - [2006/11/02 04:50:35 | 00,098,408 | ---- | M] (Promise Technology, Inc.) -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata [Disabled | Stopped])
DRV - [2006/11/02 04:50:45 | 00,115,816 | ---- | M] (Promise Technology, Inc.) -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2 [Disabled | Stopped])
DRV - [2006/11/02 04:49:30 | 00,017,512 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\system32\drivers\viaide.sys -- (viaide [Disabled | Stopped])
DRV - [2006/11/02 04:50:41 | 00,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid [Disabled | Stopped])
DRV - [2008/05/08 05:04:16 | 00,661,504 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\system32\DRIVERS\HSX_CNXT.sys -- (winachsf [On_Demand | Running])
DRV - [2007/10/18 07:36:54 | 00,008,704 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\system32\DRIVERS\xaudio.sys -- (XAudio [Auto | Running])

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop




IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)

IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)

IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000\S-1-5-21-1597069884-2730168623-3598692205-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.att.net/
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001\S-1-5-21-1597069884-2730168623-3598692205-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



O1 HOSTS File: (306760 bytes) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 10561 more lines...
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O4 - HKLM..\Run: [EzPrint] "C:\Program Files\Lexmark 3400 Series\ezprint.exe" (Lexmark International Inc.)
O4 - HKLM..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s ()
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [KBD] C:\HP\KBD\KbdStub.EXE ()
O4 - HKLM..\Run: [LXCYCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16 (Lexmark International Inc.)
O4 - HKLM..\Run: [lxcymon.exe] "C:\Program Files\Lexmark 3400 Series\lxcymon.exe" ()
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" (OsdMaestro)
O4 - HKLM..\Run: [RtHDVCpl] RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter File not found
O4 - HKU\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter File not found
O4 - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun (Hewlett-Packard)
O4 - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun (Hewlett-Packard)
O4 - HKLM..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe (soft thinks)
O4 - HKLM..\RunOnce: [PCDrProfiler] File not found
O4 - Startup: C:\Users\Precious Cargo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [@%SystemRoot%\system32\nlasvc.dll,-1000] - C:\Windows\system32\NLAapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [@%SystemRoot%\system32\napinsp.dll,-1000] - C:\Windows\system32\napinsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [@%SystemRoot%\system32\pnrpnsp.dll,-1000] - C:\Windows\system32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [@%SystemRoot%\system32\pnrpnsp.dll,-1001] - C:\Windows\system32\pnrpnsp.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\.DEFAULT\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\.DEFAULT\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-18\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-18\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-1597069884-2730168623-3598692205-1000\..Trusted Ranges: Range1 ([http] in Local intranet)
O15 - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-1597069884-2730168623-3598692205-1001\..Trusted Ranges: Range1 ([http] in Local intranet)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/05/27 19:14:22 | 00,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009/06/08 17:21:18 | 00,000,000 | ---D | M]

========== Files/Folders - Created Within 90 Days ==========

[2009/06/04 14:30:42 | 00,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
[2009/06/04 14:30:42 | 00,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.exe
[2009/06/04 14:30:37 | 00,858,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2009/06/04 14:30:36 | 00,008,830 | ---- | C] () -- C:\Windows\System32\RacUR.xml
[2009/06/04 14:30:36 | 00,000,153 | ---- | C] () -- C:\Windows\System32\RacUREx.xml
[2009/06/04 14:18:57 | 00,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\es.dll
[2009/06/03 17:03:12 | 00,821,864 | ---- | C] () -- C:\Users\shoelover\Desktop\resume.jpg
[2009/06/03 16:55:10 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\Roaming\Macromedia
[2009/06/03 16:52:06 | 00,000,880 | ---- | C] () -- C:\Users\Public\Desktop\Lexmark Imaging Studio - 3400 Series.LNK
[2009/06/03 16:49:38 | 00,000,000 | ---D | C] -- C:\Program Files\lx_cats
[2009/06/03 16:46:39 | 00,344,064 | ---- | C] () -- C:\Windows\System32\lxcycoin.dll
[2009/06/03 16:44:12 | 00,045,056 | ---- | C] () -- C:\Windows\System32\LXPRMON.DLL
[2009/06/03 16:44:12 | 00,032,768 | ---- | C] () -- C:\Windows\System32\LXPMONUI.DLL
[2009/06/03 16:43:52 | 00,339,968 | ---- | C] (Data Techniques, Inc.) -- C:\Windows\System32\IMGMAN32.DLL
[2009/06/03 16:43:52 | 00,098,345 | ---- | C] (Data Techniques, Inc.) -- C:\Windows\System32\IMHOST32.DLL
[2009/06/03 16:43:52 | 00,098,304 | ---- | C] (Data Techniques, Inc.) -- C:\Windows\System32\IM31XPNG.DEL
[2009/06/03 16:43:52 | 00,069,632 | ---- | C] (Data Techniques, Inc.) -- C:\Windows\System32\IM31XTIF.DEL
[2009/06/03 16:43:52 | 00,049,152 | ---- | C] (Data Techniques, Inc.) -- C:\Windows\System32\IM31IMG.DIL
[2009/06/03 16:43:51 | 00,000,000 | ---D | C] -- C:\ProgramData\FaxCtr
[2009/06/03 16:43:34 | 00,000,000 | ---D | C] -- C:\ProgramData\Ezprint
[2009/06/03 16:43:04 | 00,000,000 | ---D | C] -- C:\Program Files\Lexmark Fax Solutions
[2009/06/03 16:42:51 | 00,000,000 | ---D | C] -- C:\Program Files\Lexmark 3400 Series
[2009/06/03 16:42:30 | 00,000,000 | ---D | C] -- C:\Program Files\Abbyy FineReader 6.0 Sprint
[2009/06/03 16:42:11 | 00,413,696 | ---- | C] ( ) -- C:\Windows\System32\lxcyinpa.dll
[2009/06/03 16:42:11 | 00,323,584 | ---- | C] ( ) -- C:\Windows\System32\lxcyhcp.dll
[2009/06/03 16:42:11 | 00,274,432 | ---- | C] () -- C:\Windows\System32\lxcyinst.dll
[2009/06/03 16:42:10 | 00,995,328 | ---- | C] ( ) -- C:\Windows\System32\lxcyusb1.dll
[2009/06/03 16:42:10 | 00,397,312 | ---- | C] ( ) -- C:\Windows\System32\lxcyiesc.dll
[2009/06/03 16:42:09 | 01,224,704 | ---- | C] ( ) -- C:\Windows\System32\lxcyserv.dll
[2009/06/03 16:42:09 | 00,643,072 | ---- | C] ( ) -- C:\Windows\System32\lxcypmui.dll
[2009/06/03 16:42:09 | 00,163,840 | ---- | C] ( ) -- C:\Windows\System32\lxcyprox.dll
[2009/06/03 16:42:09 | 00,094,208 | ---- | C] ( ) -- C:\Windows\System32\lxcypplc.dll
[2009/06/03 16:42:08 | 00,585,728 | ---- | C] ( ) -- C:\Windows\System32\lxcylmpm.dll
[2009/06/03 16:42:07 | 00,581,173 | ---- | C] () -- C:\Windows\System32\lxcyhelp.chm
[2009/06/03 16:42:07 | 00,385,712 | ---- | C] ( ) -- C:\Windows\System32\lxcyih.exe
[2009/06/03 16:42:06 | 00,983,107 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lxcygf.dll
[2009/06/03 16:42:06 | 00,696,320 | ---- | C] ( ) -- C:\Windows\System32\lxcyhbn3.dll
[2009/06/03 16:42:05 | 00,537,264 | ---- | C] ( ) -- C:\Windows\System32\lxcycoms.exe
[2009/06/03 16:42:05 | 00,421,888 | ---- | C] ( ) -- C:\Windows\System32\lxcycomm.dll
[2009/06/03 16:42:04 | 00,684,032 | ---- | C] ( ) -- C:\Windows\System32\lxcycomc.dll
[2009/06/03 16:42:04 | 00,381,616 | ---- | C] ( ) -- C:\Windows\System32\lxcycfg.exe
[2009/06/03 16:42:04 | 00,077,824 | ---- | C] (Lexmark International) -- C:\Windows\System32\lxcycfg.dll
[2009/06/03 16:42:04 | 00,033,016 | ---- | C] () -- C:\Windows\System32\LexFiles.ulf
[2009/06/03 16:42:04 | 00,001,834 | ---- | C] () -- C:\Windows\System32\lxcy.loc
[2009/06/03 16:33:32 | 00,001,877 | RHS- | C] () -- C:\Windows\System32\drivers\103C_HP_CPC_GC660AA-ABA SR5123WM_YC_0Pres_QCNX719_E73NAv3PrA1_49_INettle2_SECS_V1.0_B5.07_T070404_WUH0_L409_M1918_J320_7AMD_8Athlon 64 X2 Dual Core_92.1_#090530_N10DE03EF_Z14F12F20_G10DE03D0.MRK
[2009/06/03 14:06:51 | 00,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
[2009/06/03 14:06:51 | 00,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\polstore.dll
[2009/06/03 14:06:51 | 00,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winipsec.dll
[2009/06/03 14:06:51 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FwRemoteSvr.dll
[2009/06/03 14:06:02 | 00,396,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MPSSVC.dll
[2009/06/03 14:06:02 | 00,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
[2009/06/03 14:06:02 | 00,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpsdrv.sys
[2009/06/03 14:06:01 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icfupgd.dll
[2009/06/03 14:06:01 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmifw.dll
[2009/06/03 14:06:01 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wfapigp.dll
[2009/06/03 14:06:00 | 00,178,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iphlpsvc.dll
[2009/06/03 14:06:00 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tunnel.sys
[2009/06/03 14:06:00 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TUNMP.SYS
[2009/06/03 14:04:49 | 00,549,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcss.dll
[2009/06/03 14:04:47 | 03,503,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2009/06/03 14:04:45 | 03,469,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2009/06/03 14:04:43 | 00,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
[2009/06/03 14:04:42 | 00,654,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
[2009/06/03 14:04:39 | 00,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasads.dll
[2009/06/03 14:04:38 | 00,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdohlp.dll
[2009/06/03 14:04:38 | 00,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2009/06/03 14:04:38 | 00,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasdatastore.dll
[2009/06/02 16:25:16 | 00,000,000 | ---D | C] -- C:\Windows\Desktop
[2009/06/02 16:25:14 | 00,000,203 | ---- | C] () -- C:\Windows\hop.ini
[2009/06/02 16:25:12 | 00,000,080 | ---- | C] () -- C:\Windows\System32\vssver.scc
[2009/06/02 16:25:12 | 00,000,000 | ---D | C] -- C:\Program Files\Hooked on Phonics Learning
[2009/06/02 16:24:36 | 00,283,648 | ---- | C] (Stirling Technologies, Inc.) -- C:\Windows\uninst.exe
[2009/06/02 16:24:34 | 00,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2009/06/02 16:24:34 | 00,000,000 | RHS- | C] () -- C:\IO.SYS
[2009/06/01 01:30:38 | 00,001,061 | ---- | C] () -- C:\Users\shoelover\Desktop\Spybot - Search & Destroy.lnk
[2009/06/01 01:30:33 | 00,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2009/06/01 01:30:33 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009/06/01 01:20:56 | 00,001,732 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2009/06/01 01:20:27 | 00,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
[2009/06/01 01:20:27 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2009/06/01 01:20:26 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rascfg.dll
[2009/06/01 01:20:26 | 00,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndproxy.sys
[2009/06/01 01:20:26 | 00,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kmddsp.tsp
[2009/06/01 01:20:26 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasser.dll
[2009/06/01 01:20:26 | 00,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndistapi.sys
[2009/06/01 01:20:25 | 00,564,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2009/06/01 01:20:25 | 00,384,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfgx.dll
[2009/06/01 01:20:25 | 00,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wanarp.sys
[2009/06/01 01:20:25 | 00,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasdiag.dll
[2009/06/01 01:20:25 | 00,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndptsp.tsp
[2009/06/01 01:20:25 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmxs.dll
[2009/06/01 01:20:25 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icsunattend.exe
[2009/06/01 01:20:25 | 00,001,820 | ---- | C] () -- C:\Windows\System32\rasctrnm.h
[2009/06/01 01:20:24 | 00,286,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipnathlp.dll
[2009/06/01 01:20:24 | 00,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
[2009/06/01 01:20:24 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\traffic.dll
[2009/06/01 01:20:24 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pacerprf.dll
[2009/06/01 01:20:24 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshqos.dll
[2009/06/01 01:20:23 | 00,694,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
[2009/06/01 01:20:23 | 00,619,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
[2009/06/01 01:20:23 | 00,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dps.dll
[2009/06/01 01:20:23 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2009/06/01 01:19:43 | 00,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2009/06/01 01:19:43 | 00,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
[2009/06/01 01:19:43 | 00,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/06/01 01:19:02 | 00,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msoeacct.dll
[2009/06/01 01:19:02 | 00,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msoert2.dll
[2009/06/01 01:19:02 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ACCTRES.dll
[2009/06/01 01:18:15 | 00,704,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2009/06/01 01:18:14 | 00,258,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpi.sys
[2009/06/01 01:18:14 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
[2009/06/01 01:18:12 | 01,655,289 | ---- | C] () -- C:\Windows\System32\wlan.tmf
[2009/06/01 01:18:12 | 00,714,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2009/06/01 01:18:12 | 00,542,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmain.dll
[2009/06/01 01:18:11 | 00,502,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlansvc.dll
[2009/06/01 01:18:11 | 00,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlansec.dll
[2009/06/01 01:18:11 | 00,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2009/06/01 01:18:11 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanhlp.dll
[2009/06/01 01:18:11 | 00,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
[2009/06/01 01:17:34 | 00,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WebClnt.dll
[2009/06/01 01:17:34 | 00,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxdav.sys
[2009/06/01 01:17:04 | 00,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2009/06/01 01:17:04 | 00,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2009/06/01 01:14:27 | 00,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
[2009/06/01 01:13:51 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBSTOR.SYS
[2009/06/01 01:13:13 | 00,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
[2009/06/01 01:12:33 | 01,060,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ntfs.sys
[2009/06/01 01:11:55 | 00,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
[2009/06/01 01:11:13 | 00,500,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcprx.dll
[2009/06/01 01:11:13 | 00,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xolehlp.dll
[2009/06/01 01:10:27 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2009/06/01 01:10:24 | 04,247,552 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/06/01 01:10:24 | 01,687,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2009/06/01 01:09:37 | 00,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2009/06/01 01:08:54 | 01,194,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
[2009/06/01 01:08:54 | 00,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2009/06/01 01:08:05 | 00,356,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2009/06/01 01:07:27 | 00,425,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
[2009/06/01 01:06:38 | 00,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2009/06/01 01:05:04 | 01,244,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
[2009/06/01 01:05:04 | 00,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2009/06/01 01:05:04 | 00,292,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2009/06/01 01:05:04 | 00,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2009/06/01 01:05:04 | 00,177,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2009/06/01 01:05:04 | 00,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2009/06/01 01:05:04 | 00,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2009/06/01 01:05:04 | 00,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2009/06/01 01:04:17 | 10,619,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
[2009/06/01 01:04:17 | 08,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2009/06/01 01:04:16 | 00,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2009/06/01 01:04:15 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2009/06/01 01:04:15 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2009/06/01 01:02:57 | 11,315,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
[2009/06/01 01:01:09 | 00,045,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciidex.sys
[2009/06/01 01:01:09 | 00,021,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\atapi.sys
[2009/06/01 01:01:09 | 00,015,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciide.sys
[2009/06/01 01:01:08 | 00,211,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\volsnap.sys
[2009/06/01 01:01:08 | 00,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
[2009/06/01 01:01:08 | 00,109,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2009/06/01 01:00:37 | 02,923,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2009/06/01 00:59:34 | 00,216,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2009/06/01 00:59:34 | 00,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2009/06/01 00:59:34 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2009/06/01 00:59:33 | 00,803,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
[2009/06/01 00:59:33 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2009/06/01 00:59:02 | 01,808,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0046.dll
[2009/06/01 00:59:02 | 01,793,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0045.dll
[2009/06/01 00:59:01 | 05,499,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0022.dll
[2009/06/01 00:59:01 | 02,136,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0021.dll
[2009/06/01 00:59:01 | 01,782,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0039.dll
[2009/06/01 00:59:01 | 01,558,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0049.dll
[2009/06/01 00:59:01 | 01,411,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0047.dll
[2009/06/01 00:59:01 | 01,236,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0020.dll
[2009/06/01 00:59:00 | 07,964,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0024.dll
[2009/06/01 00:59:00 | 06,224,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0027.dll
[2009/06/01 00:59:00 | 05,791,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0026.dll
[2009/06/01 00:58:59 | 04,981,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0013.dll
[2009/06/01 00:58:59 | 04,175,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0010.dll
[2009/06/01 00:58:59 | 03,331,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0018.dll
[2009/06/01 00:58:59 | 02,466,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0011.dll
[2009/06/01 00:58:58 | 06,781,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0019.dll
[2009/06/01 00:58:57 | 11,722,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0001.dll
[2009/06/01 00:58:57 | 04,164,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0002.dll
[2009/06/01 00:58:57 | 01,452,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0003.dll
[2009/06/01 00:58:56 | 12,240,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
[2009/06/01 00:58:56 | 03,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004a.dll
[2009/06/01 00:58:56 | 02,644,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
[2009/06/01 00:58:56 | 01,702,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004b.dll
[2009/06/01 00:58:55 | 06,014,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001a.dll
[2009/06/01 00:58:55 | 04,093,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004c.dll
[2009/06/01 00:58:55 | 04,045,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons003e.dll
[2009/06/01 00:58:55 | 01,972,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004e.dll
[2009/06/01 00:58:55 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons002a.dll
[2009/06/01 00:58:54 | 06,585,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001b.dll
[2009/06/01 00:58:54 | 06,346,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001d.dll
[2009/06/01 00:58:53 | 09,892,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000a.dll
[2009/06/01 00:58:52 | 06,237,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
[2009/06/01 00:58:52 | 05,654,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000f.dll
[2009/06/01 00:58:52 | 04,616,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0414.dll
[2009/06/01 00:58:52 | 01,722,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000d.dll
[2009/06/01 00:58:51 | 07,042,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons081a.dll
[2009/06/01 00:58:51 | 05,090,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0416.dll
[2009/06/01 00:58:51 | 05,071,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsModels0011.dll
[2009/06/01 00:58:51 | 05,031,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0816.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0049.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0047.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0046.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0045.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0039.dll
[2009/06/01 00:58:49 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0020.dll
[2009/06/01 00:58:49 | 01,965,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0027.dll
[2009/06/01 00:58:49 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0026.dll
[2009/06/01 00:58:49 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0024.dll
[2009/06/01 00:58:49 | 01,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0022.dll
[2009/06/01 00:58:49 | 01,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0021.dll
[2009/06/01 00:58:48 | 04,493,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0010.dll
[2009/06/01 00:58:48 | 03,464,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0013.dll
[2009/06/01 00:58:48 | 02,655,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0011.dll
[2009/06/01 00:58:48 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0018.dll
[2009/06/01 00:58:47 | 04,495,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0019.dll
[2009/06/01 00:58:47 | 02,597,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0001.dll
[2009/06/01 00:58:47 | 01,523,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll
[2009/06/01 00:58:46 | 04,874,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0009.dll
[2009/06/01 00:58:46 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004a.dll
[2009/06/01 00:58:46 | 02,241,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0007.dll
[2009/06/01 00:58:46 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0003.dll
[2009/06/01 00:58:46 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0002.dll
[2009/06/01 00:58:45 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004e.dll
[2009/06/01 00:58:45 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004c.dll
[2009/06/01 00:58:45 | 03,102,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004b.dll
[2009/06/01 00:58:45 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001a.dll
[2009/06/01 00:58:45 | 01,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData003e.dll
[2009/06/01 00:58:45 | 01,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData002a.dll
[2009/06/01 00:58:44 | 09,845,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000a.dll
[2009/06/01 00:58:44 | 04,493,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001d.dll
[2009/06/01 00:58:44 | 02,641,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
[2009/06/01 00:58:44 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001b.dll
[2009/06/01 00:58:43 | 04,493,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0414.dll
[2009/06/01 00:58:43 | 02,340,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000d.dll
[2009/06/01 00:58:43 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000f.dll
[2009/06/01 00:58:42 | 04,493,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0816.dll
[2009/06/01 00:58:42 | 04,493,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0416.dll
[2009/06/01 00:58:42 | 00,797,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2009/06/01 00:58:41 | 06,917,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0c1a.dll
[2009/06/01 00:58:41 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0c1a.dll
[2009/06/01 00:58:41 | 01,963,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData081a.dll
[2009/06/01 00:55:50 | 01,585,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
[2009/06/01 00:55:30 | 00,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2009/06/01 00:55:30 | 00,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2009/06/01 00:55:30 | 00,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
[2009/06/01 00:55:30 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
[2009/06/01 00:55:29 | 00,944,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2009/06/01 00:55:29 | 00,905,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2009/06/01 00:55:29 | 00,620,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2009/06/01 00:55:29 | 00,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2009/06/01 00:55:29 | 00,224,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2009/06/01 00:55:29 | 00,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvinst.exe
[2009/06/01 00:55:29 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
[2009/06/01 00:55:29 | 00,019,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
[2009/06/01 00:55:28 | 00,558,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
[2009/06/01 00:55:28 | 00,260,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2009/06/01 00:55:28 | 00,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umpnpmgr.dll
[2009/06/01 00:55:28 | 00,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\loadperf.dll
[2009/06/01 00:55:28 | 00,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lodctr.exe
[2009/06/01 00:55:28 | 00,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2009/06/01 00:55:28 | 00,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
[2009/06/01 00:55:28 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
[2009/06/01 00:55:27 | 00,595,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedsvc.dll
[2009/06/01 00:55:27 | 00,035,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2009/06/01 00:55:27 | 00,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prflbmsg.dll
[2009/06/01 00:55:26 | 00,495,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Wdf01000.sys
[2009/06/01 00:55:26 | 00,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\i8042prt.sys
[2009/06/01 00:55:26 | 00,035,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdclass.sys
[2009/06/01 00:55:26 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dispci.dll
[2009/06/01 00:55:26 | 00,034,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouclass.sys
[2009/06/01 00:55:26 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sermouse.sys
[2009/06/01 00:55:26 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouhid.sys
[2009/06/01 00:55:26 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\batt.dll
[2009/06/01 00:55:26 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\f3ahvoas.dll
[2009/06/01 00:55:26 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd106.dll
[2009/06/01 00:53:28 | 00,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMASF.DLL
[2009/06/01 00:53:28 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LAPRXY.DLL
[2009/06/01 00:53:28 | 00,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asferror.dll
[2009/06/01 00:53:03 | 01,233,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2009/06/01 00:53:03 | 00,875,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
[2009/06/01 00:53:03 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
[2009/06/01 00:53:03 | 00,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
[2009/06/01 00:53:02 | 00,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amxread.dll
[2009/06/01 00:53:02 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apilogen.dll
[2009/06/01 00:52:29 | 00,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2009/06/01 00:52:29 | 00,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SLC.dll
[2009/06/01 00:52:29 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwmi.dll
[2009/06/01 00:52:28 | 02,605,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe
[2009/06/01 00:52:28 | 00,566,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SLCommDlg.dll
[2009/06/01 00:52:28 | 00,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SLUI.exe
[2009/06/01 00:52:28 | 00,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SLLUA.exe
[2009/06/01 00:52:28 | 00,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SLUINotify.dll
[2009/06/01 00:52:28 | 00,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slcinst.dll
[2009/06/01 00:51:54 | 00,425,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
[2009/06/01 00:51:53 | 00,712,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
[2009/06/01 00:51:53 | 00,347,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2009/06/01 00:50:49 | 00,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2009/06/01 00:50:49 | 00,204,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
[2009/06/01 00:50:49 | 00,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.exe
[2009/06/01 00:50:49 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcmonitor.dll
[2009/06/01 00:50:48 | 01,984,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2009/06/01 00:50:48 | 00,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
[2009/06/01 00:50:47 | 00,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
[2009/06/01 00:50:47 | 00,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2009/06/01 00:50:47 | 00,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2009/06/01 00:50:47 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sendmail.dll
[2009/06/01 00:50:47 | 00,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avicap32.dll
[2009/06/01 00:50:47 | 00,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvidc32.dll
[2009/06/01 00:50:47 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrle32.dll
[2009/06/01 00:50:46 | 08,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssBranded.scr
[2009/06/01 00:50:22 | 00,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
[2009/06/01 00:50:22 | 00,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printcom.dll
[2009/06/01 00:50:06 | 00,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2009/06/01 00:50:06 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshrm.dll
[2009/06/01 00:49:50 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbunattend.exe
[2009/06/01 00:49:27 | 00,290,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
[2009/06/01 00:49:17 | 00,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
[2009/06/01 00:49:17 | 00,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsrslvr.dll
[2009/06/01 00:49:17 | 00,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2009/06/01 00:49:12 | 00,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hdaudbus.sys
[2009/06/01 00:48:59 | 00,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
[2009/05/31 03:31:27 | 00,327,680 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_NetFx3.perf
[2009/05/31 03:31:27 | 00,065,536 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_NetFx3.dpx
[2009/05/31 03:31:26 | 17,235,968 | ---- | C] () -- C:\Windows\ocsetup_install_NetFx3.etl
[2009/05/31 03:28:27 | 00,096,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfshim.dll
[2009/05/31 03:28:26 | 00,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2009/05/31 03:28:25 | 00,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
[2009/05/31 03:28:25 | 00,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2009/05/31 03:28:25 | 00,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2009/05/31 03:11:03 | 02,855,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2009/05/31 03:11:03 | 00,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll
[2009/05/31 03:11:03 | 00,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rrinstaller.exe
[2009/05/31 03:11:02 | 00,996,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2009/05/31 03:11:02 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2009/05/31 03:11:02 | 00,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfpmp.exe
[2009/05/31 03:11:02 | 00,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mferror.dll
[2009/05/31 03:11:01 | 02,433,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2009/05/31 03:10:31 | 00,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb.sys
[2009/05/31 03:10:31 | 00,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srvnet.sys
[2009/05/31 03:10:31 | 00,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys
[2009/05/31 03:10:30 | 00,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv2.sys
[2009/05/31 03:10:10 | 00,788,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
[2009/05/31 03:09:27 | 00,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\INETRES.dll
[2009/05/31 03:09:26 | 00,737,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
[2009/05/31 03:08:56 | 01,645,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
[2009/05/31 03:08:27 | 00,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
[2009/05/31 03:08:27 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fs_rec.sys
[2009/05/31 03:08:27 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmi.dll
[2009/05/31 03:08:02 | 01,327,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2009/05/31 03:06:45 | 02,028,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2009/05/31 03:05:51 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2009/05/31 03:04:50 | 00,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
[2009/05/31 03:04:26 | 01,341,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
[2009/05/31 03:04:26 | 00,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
[2009/05/31 03:03:32 | 00,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2009/05/31 03:03:32 | 00,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\advpack.dll
[2009/05/31 03:03:31 | 02,455,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2009/05/31 03:03:31 | 00,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
[2009/05/31 03:03:31 | 00,383,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2009/05/31 03:03:31 | 00,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2009/05/31 03:03:31 | 00,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2009/05/31 03:03:31 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2009/05/31 03:03:30 | 00,347,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2009/05/31 03:03:30 | 00,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2009/05/31 03:03:30 | 00,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2009/05/31 03:03:29 | 06,066,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
[2009/05/31 03:03:29 | 00,459,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2009/05/31 03:03:29 | 00,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2009/05/31 03:03:27 | 03,595,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
[2009/05/31 03:03:27 | 00,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll
[2009/05/31 03:03:27 | 00,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2009/05/31 03:03:27 | 00,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2009/05/31 03:03:27 | 00,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2009/05/31 03:03:26 | 01,383,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2009/05/31 03:03:25 | 00,671,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2009/05/31 03:03:25 | 00,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardie.dll
[2009/05/31 03:03:24 | 01,830,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2009/05/31 03:03:23 | 00,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2009/05/31 03:03:22 | 01,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
[2009/05/31 03:03:22 | 00,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\occache.dll
[2009/05/31 03:03:21 | 00,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
[2009/05/31 03:03:21 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2009/05/31 03:03:21 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2009/05/31 03:03:21 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2009/05/31 03:03:21 | 00,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2009/05/31 03:00:55 | 00,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qmgr.dll
[2009/05/31 02:08:00 | 01,809,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuaueng.dll
[2009/05/31 02:08:00 | 01,524,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2009/05/31 02:08:00 | 00,051,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
[2009/05/31 02:08:00 | 00,043,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2009/05/31 02:06:39 | 00,162,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2009/05/31 02:06:39 | 00,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2009/05/30 13:35:34 | 20,116,84864 | -HS- | C] () -- C:\hiberfil.sys
[2009/05/30 13:19:25 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\Roaming\Snapfish
[2009/05/30 13:19:05 | 00,000,402 | -HS- | C] () -- C:\Users\shoelover\Documents\desktop.ini
[2009/05/30 13:19:05 | 00,000,282 | -HS- | C] () -- C:\Users\shoelover\Desktop\desktop.ini
[2009/05/30 13:19:05 | 00,000,174 | -HS- | C] () -- C:\Users\shoelover\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/05/30 13:19:05 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\LocalLow
[2009/05/30 13:18:53 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\Roaming\Identities
[2009/05/30 13:18:06 | 00,001,656 | ---- | C] () -- C:\Users\Public\Desktop\Walmart.com Digital Photo Center.lnk
[2009/05/30 13:17:53 | 00,002,063 | ---- | C] () -- C:\Users\Public\Desktop\eBay.lnk
[2009/05/30 13:17:53 | 00,002,027 | ---- | C] () -- C:\Users\Public\Desktop\Try AOL Today.lnk
[2009/05/30 13:17:53 | 00,002,021 | ---- | C] () -- C:\Users\Public\Desktop\Vonage.lnk
[2009/05/30 13:17:53 | 00,001,993 | ---- | C] () -- C:\Users\Public\Desktop\MSN.lnk
[2009/05/30 13:17:53 | 00,001,875 | ---- | C] () -- C:\Users\Public\Desktop\High-Speed Services.lnk
[2009/05/30 13:17:53 | 00,001,847 | ---- | C] () -- C:\Users\Public\Desktop\Easy Internet Services.lnk
[2009/05/30 13:17:53 | 00,000,758 | ---- | C] () -- C:\Users\Public\Desktop\Rhapsody.lnk
[2009/05/30 13:17:18 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\Roaming\Hewlett-Packard
[2009/05/30 13:16:58 | 00,000,000 | -HSD | C] -- C:\Users\shoelover\Documents\My Videos
[2009/05/30 13:16:58 | 00,000,000 | -HSD | C] -- C:\Users\shoelover\Documents\My Pictures
[2009/05/30 13:16:58 | 00,000,000 | -HSD | C] -- C:\Users\shoelover\Documents\My Music
[2009/05/30 13:16:57 | 00,000,000 | --SD | C] -- C:\Users\shoelover\AppData\Roaming\Microsoft
[2009/05/30 13:16:57 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\Roaming\Media Center Programs
[2009/05/30 13:16:57 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\Roaming
[2009/05/30 13:16:57 | 00,000,000 | ---D | C] -- C:\Users\shoelover\AppData\Local
[2009/05/27 19:38:31 | 00,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard
[2009/05/27 19:38:26 | 00,001,630 | ---- | C] () -- C:\Users\Public\Desktop\Windows Media Center.lnk
[2009/05/27 19:38:25 | 00,001,043 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2009/05/27 19:34:49 | 00,000,000 | ---D | C] -- C:\Windows\SMINST
[2009/05/27 19:29:09 | 00,000,000 | -H-D | C] -- C:\hp
[2009/05/27 19:28:55 | 00,255,488 | ---- | C] (Ralink Technology Inc.) -- C:\Windows\System32\drivers\netr73.sys
[2009/05/27 19:28:31 | 00,000,000 | ---D | C] -- C:\Windows\System32\OEM
[2009/05/27 19:28:30 | 00,000,000 | ---D | C] -- C:\Windows\Panther
[2009/05/27 19:28:18 | 00,008,192 | R-S- | C] () -- C:\BOOTSECT.BAK
[2009/05/27 19:28:16 | 00,438,840 | RHS- | C] () -- C:\bootmgr
[2009/05/27 19:28:16 | 00,000,000 | -HSD | C] -- C:\Boot
[2009/05/27 19:28:15 | 00,466,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capicom.dll
[2009/05/27 19:28:10 | 00,000,000 | ---D | C] -- C:\ProgramData\Symantec
[2009/05/27 19:27:58 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2009/05/27 19:26:41 | 00,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2009/05/27 19:24:57 | 00,000,000 | ---D | C] -- C:\Program Files\Online Services
[2009/05/27 19:24:57 | 00,000,000 | ---D | C] -- C:\Program Files\earthlink totalaccess
[2009/05/27 19:24:51 | 00,000,955 | ---- | C] () -- C:\Users\Public\Desktop\Internet Explorer.lnk
[2009/05/27 19:24:38 | 00,002,021 | ---- | C] () -- C:\Users\Public\Desktop\HP Total Care Advisor.lnk
[2009/05/27 19:22:29 | 00,000,000 | ---D | C] -- C:\ProgramData\PC-Doctor
[2009/05/27 19:22:03 | 00,000,000 | ---D | C] -- C:\Program Files\PC-Doctor 5 for Windows
[2009/05/27 19:21:46 | 00,000,172 | ---- | C] () -- C:\Users\Public\Desktop\Help and Support.lnk
[2009/05/27 19:20:17 | 00,002,136 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Office 60 Day Trial..lnk
[2009/05/27 19:20:17 | 00,000,000 | ---D | C] -- C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[2009/05/27 19:20:10 | 00,000,000 | ---D | C] -- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[2009/05/27 19:19:40 | 00,032,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msonpmon.dll
[2009/05/27 19:19:03 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2009/05/27 19:18:55 | 00,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2009/05/27 19:18:54 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2009/05/27 19:17:44 | 00,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2009/05/27 19:17:31 | 00,000,000 | RH-D | C] -- C:\MSOCache
[2009/05/27 19:17:13 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2009/05/27 19:17:04 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2009/05/27 19:15:14 | 00,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2009/05/27 19:15:09 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2009/05/27 19:15:09 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe
[2009/05/27 19:14:06 | 00,000,000 | ---D | C] -- C:\Program Files\muvee Technologies
[2009/05/27 19:14:06 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\muvee Technologies
[2009/05/27 19:14:05 | 00,000,000 | ---D | C] -- C:\ProgramData\muvee Technologies
[2009/05/27 19:13:40 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\xing shared
[2009/05/27 19:13:33 | 00,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\System32\pncrt.dll
[2009/05/27 19:13:32 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Real
[2009/05/27 19:12:58 | 00,000,000 | ---D | C] -- C:\Program Files\Real
[2009/05/27 19:12:40 | 00,000,000 | ---D | C] -- C:\Program Files\Rhapsody
[2009/05/27 19:11:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\LS Getting Started
[2009/05/27 19:11:57 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\LightScribe
[2009/05/27 19:11:49 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SureThing Shared
[2009/05/27 19:10:38 | 00,000,000 | ---D | C] -- C:\ProgramData\Sonic
[2009/05/27 19:10:16 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine
[2009/05/27 19:09:47 | 00,000,000 | ---D | C] -- C:\ProgramData\Roxio
[2009/05/27 19:09:46 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Sonic Shared
[2009/05/27 19:09:45 | 00,000,000 | ---D | C] -- C:\Program Files\Roxio
[2009/05/27 19:09:45 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Roxio Shared
[2009/05/27 19:03:41 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\HP
[2009/05/27 19:03:40 | 00,000,000 | ---D | C] -- C:\Program Files\HP
[2009/05/27 19:03:11 | 00,103,521 | ---- | C] () -- C:\Windows\hpqins13.dat
[2009/05/27 19:03:08 | 00,000,000 | ---D | C] -- C:\ProgramData\HP
[2009/05/27 19:02:50 | 00,001,997 | ---- | C] () -- C:\Users\Public\Desktop\My HP Games.lnk
[2009/05/27 18:58:08 | 00,000,000 | ---D | C] -- C:\Program Files\HP Games
[2009/05/27 18:58:07 | 00,000,000 | ---D | C] -- C:\ProgramData\WildTangent
[2009/05/27 18:57:35 | 00,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2009/05/27 18:53:16 | 00,319,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[2009/05/27 18:53:15 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/05/27 18:53:15 | 00,000,000 | ---D | C] -- C:\Program Files\Realtek
[2009/05/27 18:53:12 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009/05/27 18:53:04 | 00,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2009/05/27 18:52:50 | 04,390,912 | ---- | C] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
[2009/05/27 18:52:50 | 00,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2009/05/27 18:52:50 | 00,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2009/05/27 18:50:59 | 00,075,268 | ---- | C] () -- C:\Windows\System32\nvwsapps.xml
[2009/05/27 18:50:57 | 00,003,411 | ---- | C] () -- C:\Windows\System32\nvdisp.nvu
[2009/05/27 18:50:56 | 00,521,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpinst.exe
[2009/05/27 18:50:56 | 00,109,706 | ---- | C] () -- C:\Windows\System32\nvapps.xml
[2009/05/27 18:50:07 | 00,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2009/05/27 18:49:45 | 00,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2009/05/27 18:48:30 | 00,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2009/05/27 18:48:10 | 00,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
[2009/05/27 18:47:50 | 00,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWWIN.EXE
[2009/05/27 18:47:30 | 00,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasl2tp.sys
[2009/05/27 18:47:30 | 00,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspptp.sys
[2009/05/27 18:46:49 | 00,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
[2009/05/27 18:44:56 | 00,223,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2009/05/27 18:44:56 | 00,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
[2009/05/27 18:44:56 | 00,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
[2009/05/27 18:44:56 | 00,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
[2009/05/27 18:44:56 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbohci.sys
[2009/05/27 18:44:56 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hccoin.dll
[2009/05/27 18:44:56 | 00,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2009/05/27 18:44:04 | 00,061,440 | ---- | C] () -- C:\Windows\System32\OsdRemove.exe
[2009/05/27 18:44:03 | 00,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard
[2009/05/27 18:40:46 | 00,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom24.dll
[2009/05/27 18:40:46 | 00,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes24.dll
[2009/05/27 18:40:30 | 01,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc71.dll
[2009/05/27 18:40:30 | 00,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr71.dll
[2009/05/27 18:40:07 | 00,000,000 | -HSD | C] -- C:\Windows\Installer
[2009/05/27 18:33:57 | 00,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2009/05/27 18:33:19 | 00,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2009/05/27 18:31:51 | 00,000,000 | ---D | C] -- C:\Windows\Debug
[2009/05/27 18:30:18 | 00,000,000 | ---D | C] -- C:\Windows\Prefetch
[2009/05/27 18:30:08 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2007/03/06 03:47:24 | 00,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2007/01/12 09:07:48 | 00,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007/01/12 09:07:48 | 00,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 07:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:23:31 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006/11/02 05:23:31 | 00,000,144 | ---- | C] () -- C:\Windows\win.ini
[2006/11/02 02:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/08/14 16:07:04 | 00,065,536 | ---- | C] () -- C:\Windows\System32\lxcycaps.dll
[2006/08/08 14:58:04 | 00,692,224 | ---- | C] () -- C:\Windows\System32\lxcydrs.dll
[2006/03/23 03:33:20 | 00,040,960 | ---- | C] () -- C:\Windows\System32\lxcyvs.dll
[2006/01/25 17:11:04 | 00,061,440 | ---- | C] () -- C:\Windows\System32\lxcycnv4.dll

========== Files - Modified Within 90 Days ==========

[2009/06/11 23:49:19 | 00,716,948 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/06/11 23:49:19 | 00,618,410 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/06/11 23:49:19 | 00,103,818 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/06/11 23:43:39 | 00,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/06/11 23:43:39 | 00,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/06/11 23:43:39 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009/06/11 23:43:33 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/06/11 23:43:29 | 20,116,84864 | -HS- | M] () -- C:\hiberfil.sys
[2009/06/04 14:18:57 | 00,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
[2009/06/03 17:04:22 | 00,821,864 | ---- | M] () -- C:\Users\shoelover\Desktop\resume.jpg
[2009/06/03 16:52:06 | 00,000,880 | ---- | M] () -- C:\Users\Public\Desktop\Lexmark Imaging Studio - 3400 Series.LNK
[2009/06/03 16:49:35 | 00,033,016 | ---- | M] () -- C:\Windows\System32\LexFiles.ulf
[2009/06/03 16:33:42 | 00,001,877 | RHS- | M] () -- C:\Windows\System32\drivers\103C_HP_CPC_GC660AA-ABA SR5123WM_YC_0Pres_QCNX719_E73NAv3PrA1_49_INettle2_SECS_V1.0_B5.07_T070404_WUH0_L409_M1918_J320_7AMD_8Athlon 64 X2 Dual Core_92.1_#090530_N10DE03EF_Z14F12F20_G10DE03D0.MRK
[2009/06/03 14:06:51 | 00,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
[2009/06/03 14:06:51 | 00,272,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\polstore.dll
[2009/06/03 14:06:51 | 00,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winipsec.dll
[2009/06/03 14:06:51 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FwRemoteSvr.dll
[2009/06/03 14:06:02 | 00,396,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MPSSVC.dll
[2009/06/03 14:06:02 | 00,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
[2009/06/03 14:06:02 | 00,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpsdrv.sys
[2009/06/03 14:06:01 | 00,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icfupgd.dll
[2009/06/03 14:06:01 | 00,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmifw.dll
[2009/06/03 14:06:01 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wfapigp.dll
[2009/06/03 14:06:00 | 00,178,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iphlpsvc.dll
[2009/06/03 14:06:00 | 00,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tunnel.sys
[2009/06/03 14:06:00 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\TUNMP.SYS
[2009/06/03 14:04:49 | 00,549,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcss.dll
[2009/06/03 14:04:48 | 03,503,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2009/06/03 14:04:46 | 03,469,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2009/06/03 14:04:43 | 00,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
[2009/06/03 14:04:42 | 00,654,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
[2009/06/03 14:04:39 | 00,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasads.dll
[2009/06/03 14:04:38 | 00,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdohlp.dll
[2009/06/03 14:04:38 | 00,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2009/06/03 14:04:38 | 00,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasdatastore.dll
[2009/06/02 16:25:16 | 00,000,203 | ---- | M] () -- C:\Windows\hop.ini
[2009/06/02 16:24:34 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2009/06/02 16:24:34 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2009/06/02 16:16:38 | 00,000,749 | RH-- | M] () -- C:\Windows\WindowsShell.Manifest
[2009/06/02 16:16:38 | 00,000,280 | -HS- | M] () -- C:\Users\Public\Documents\desktop.ini
[2009/06/02 16:16:38 | 00,000,174 | -HS- | M] () -- C:\Users\Public\Desktop\desktop.ini
[2009/06/02 16:16:38 | 00,000,174 | -HS- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/06/01 01:34:54 | 00,306,760 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2009/06/01 01:30:38 | 00,001,061 | ---- | M] () -- C:\Users\shoelover\Desktop\Spybot - Search & Destroy.lnk
[2009/06/01 01:20:27 | 00,467,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
[2009/06/01 01:20:27 | 00,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2009/06/01 01:20:26 | 00,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rascfg.dll
[2009/06/01 01:20:26 | 00,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndproxy.sys
[2009/06/01 01:20:26 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kmddsp.tsp
[2009/06/01 01:20:26 | 00,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasser.dll
[2009/06/01 01:20:26 | 00,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndistapi.sys
[2009/06/01 01:20:25 | 00,564,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2009/06/01 01:20:25 | 00,384,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcfgx.dll
[2009/06/01 01:20:25 | 00,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wanarp.sys
[2009/06/01 01:20:25 | 00,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdiag.dll
[2009/06/01 01:20:25 | 00,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndptsp.tsp
[2009/06/01 01:20:25 | 00,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmxs.dll
[2009/06/01 01:20:25 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icsunattend.exe
[2009/06/01 01:20:25 | 00,001,820 | ---- | M] () -- C:\Windows\System32\rasctrnm.h
[2009/06/01 01:20:24 | 00,286,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipnathlp.dll
[2009/06/01 01:20:24 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
[2009/06/01 01:20:24 | 00,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\traffic.dll
[2009/06/01 01:20:24 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pacerprf.dll
[2009/06/01 01:20:24 | 00,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshqos.dll
[2009/06/01 01:20:23 | 00,694,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
[2009/06/01 01:20:23 | 00,619,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
[2009/06/01 01:20:23 | 00,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dps.dll
[2009/06/01 01:20:23 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2009/06/01 01:19:43 | 00,241,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2009/06/01 01:19:43 | 00,160,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
[2009/06/01 01:19:43 | 00,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/06/01 01:19:02 | 00,205,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msoeacct.dll
[2009/06/01 01:19:02 | 00,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msoert2.dll
[2009/06/01 01:19:02 | 00,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ACCTRES.dll
[2009/06/01 01:18:15 | 00,704,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2009/06/01 01:18:14 | 00,258,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpi.sys
[2009/06/01 01:18:14 | 00,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
[2009/06/01 01:18:12 | 01,655,289 | ---- | M] () -- C:\Windows\System32\wlan.tmf
[2009/06/01 01:18:12 | 00,714,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2009/06/01 01:18:12 | 00,542,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysmain.dll
[2009/06/01 01:18:11 | 00,502,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlansvc.dll
[2009/06/01 01:18:11 | 00,297,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlansec.dll
[2009/06/01 01:18:11 | 00,290,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2009/06/01 01:18:11 | 00,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanhlp.dll
[2009/06/01 01:18:11 | 00,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
[2009/06/01 01:17:34 | 00,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WebClnt.dll
[2009/06/01 01:17:34 | 00,110,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxdav.sys
[2009/06/01 01:17:04 | 00,376,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2009/06/01 01:17:04 | 00,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2009/06/01 01:14:27 | 00,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
[2009/06/01 01:13:51 | 00,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBSTOR.SYS
[2009/06/01 01:13:13 | 00,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
[2009/06/01 01:12:33 | 01,060,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ntfs.sys
[2009/06/01 01:11:55 | 00,211,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
[2009/06/01 01:11:13 | 00,500,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtcprx.dll
[2009/06/01 01:11:13 | 00,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xolehlp.dll
[2009/06/01 01:10:27 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2009/06/01 01:10:25 | 04,247,552 | ---- | M] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/06/01 01:10:24 | 01,687,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2009/06/01 01:09:37 | 00,303,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2009/06/01 01:08:54 | 01,194,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
[2009/06/01 01:08:54 | 00,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2009/06/01 01:08:05 | 00,356,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2009/06/01 01:07:28 | 00,425,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
[2009/06/01 01:06:38 | 00,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2009/06/01 01:05:05 | 01,244,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
[2009/06/01 01:05:04 | 00,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2009/06/01 01:05:04 | 00,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2009/06/01 01:05:04 | 00,217,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2009/06/01 01:05:04 | 00,177,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2009/06/01 01:05:04 | 00,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2009/06/01 01:05:04 | 00,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2009/06/01 01:05:04 | 00,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2009/06/01 01:04:17 | 10,619,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
[2009/06/01 01:04:17 | 08,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2009/06/01 01:04:16 | 00,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2009/06/01 01:04:15 | 00,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2009/06/01 01:04:15 | 00,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2009/06/01 01:02:57 | 11,315,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
[2009/06/01 01:01:09 | 00,045,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciidex.sys
[2009/06/01 01:01:09 | 00,021,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\atapi.sys
[2009/06/01 01:01:09 | 00,015,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciide.sys
[2009/06/01 01:01:08 | 00,211,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volsnap.sys
[2009/06/01 01:01:08 | 00,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
[2009/06/01 01:01:08 | 00,109,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2009/06/01 01:00:37 | 02,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2009/06/01 00:59:34 | 00,216,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2009/06/01 00:59:34 | 00,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2009/06/01 00:59:34 | 00,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2009/06/01 00:59:33 | 00,803,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
[2009/06/01 00:59:33 | 00,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2009/06/01 00:59:02 | 01,808,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0046.dll
[2009/06/01 00:59:02 | 01,793,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0045.dll
[2009/06/01 00:59:02 | 01,411,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0047.dll
[2009/06/01 00:59:01 | 05,499,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0022.dll
[2009/06/01 00:59:01 | 02,136,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0021.dll
[2009/06/01 00:59:01 | 01,782,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0039.dll
[2009/06/01 00:59:01 | 01,558,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0049.dll
[2009/06/01 00:59:01 | 01,236,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0020.dll
[2009/06/01 00:59:00 | 07,964,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0024.dll
[2009/06/01 00:59:00 | 06,224,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0027.dll
[2009/06/01 00:59:00 | 05,791,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0026.dll
[2009/06/01 00:59:00 | 04,175,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0010.dll
[2009/06/01 00:58:59 | 04,981,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0013.dll
[2009/06/01 00:58:59 | 03,331,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0018.dll
[2009/06/01 00:58:59 | 02,466,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0011.dll
[2009/06/01 00:58:58 | 11,722,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0001.dll
[2009/06/01 00:58:58 | 06,781,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0019.dll
[2009/06/01 00:58:57 | 12,240,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
[2009/06/01 00:58:57 | 04,164,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0002.dll
[2009/06/01 00:58:57 | 01,452,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0003.dll
[2009/06/01 00:58:56 | 03,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004a.dll
[2009/06/01 00:58:56 | 02,644,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
[2009/06/01 00:58:56 | 01,702,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004b.dll
[2009/06/01 00:58:55 | 06,014,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001a.dll
[2009/06/01 00:58:55 | 04,093,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004c.dll
[2009/06/01 00:58:55 | 04,045,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons003e.dll
[2009/06/01 00:58:55 | 01,972,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004e.dll
[2009/06/01 00:58:55 | 00,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons002a.dll
[2009/06/01 00:58:54 | 06,585,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001b.dll
[2009/06/01 00:58:54 | 06,346,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001d.dll
[2009/06/01 00:58:53 | 09,892,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000a.dll
[2009/06/01 00:58:53 | 06,237,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
[2009/06/01 00:58:52 | 05,654,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000f.dll
[2009/06/01 00:58:52 | 05,090,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0416.dll
[2009/06/01 00:58:52 | 04,616,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0414.dll
[2009/06/01 00:58:52 | 01,722,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000d.dll
[2009/06/01 00:58:51 | 07,042,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons081a.dll
[2009/06/01 00:58:51 | 05,071,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsModels0011.dll
[2009/06/01 00:58:51 | 05,031,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0816.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0049.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0047.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0046.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0045.dll
[2009/06/01 00:58:50 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0039.dll
[2009/06/01 00:58:49 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0020.dll
[2009/06/01 00:58:49 | 01,965,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0027.dll
[2009/06/01 00:58:49 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0026.dll
[2009/06/01 00:58:49 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0024.dll
[2009/06/01 00:58:49 | 01,799,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0022.dll
[2009/06/01 00:58:49 | 01,799,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0021.dll
[2009/06/01 00:58:48 | 04,493,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0010.dll
[2009/06/01 00:58:48 | 03,464,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0013.dll
[2009/06/01 00:58:48 | 02,655,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0011.dll
[2009/06/01 00:58:48 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0018.dll
[2009/06/01 00:58:48 | 01,523,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll
[2009/06/01 00:58:47 | 04,495,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0019.dll
[2009/06/01 00:58:47 | 02,597,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0001.dll
[2009/06/01 00:58:47 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0002.dll
[2009/06/01 00:58:46 | 04,874,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0009.dll
[2009/06/01 00:58:46 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004b.dll
[2009/06/01 00:58:46 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004a.dll
[2009/06/01 00:58:46 | 02,241,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0007.dll
[2009/06/01 00:58:46 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0003.dll
[2009/06/01 00:58:45 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004e.dll
[2009/06/01 00:58:45 | 03,102,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004c.dll
[2009/06/01 00:58:45 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001a.dll
[2009/06/01 00:58:45 | 01,799,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData003e.dll
[2009/06/01 00:58:45 | 01,799,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData002a.dll
[2009/06/01 00:58:44 | 09,845,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000a.dll
[2009/06/01 00:58:44 | 04,493,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001d.dll
[2009/06/01 00:58:44 | 02,641,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
[2009/06/01 00:58:44 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001b.dll
[2009/06/01 00:58:43 | 04,493,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0416.dll
[2009/06/01 00:58:43 | 04,493,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0414.dll
[2009/06/01 00:58:43 | 02,340,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000d.dll
[2009/06/01 00:58:43 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000f.dll
[2009/06/01 00:58:42 | 04,493,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0816.dll
[2009/06/01 00:58:42 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData081a.dll
[2009/06/01 00:58:42 | 00,797,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2009/06/01 00:58:41 | 06,917,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0c1a.dll
[2009/06/01 00:58:41 | 01,963,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0c1a.dll
[2009/06/01 00:55:50 | 01,585,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
[2009/06/01 00:55:32 | 00,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\i8042prt.sys.mui
[2009/06/01 00:55:32 | 00,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\sermouse.sys.mui
[2009/06/01 00:55:32 | 00,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouclass.sys.mui
[2009/06/01 00:55:32 | 00,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouhid.sys.mui
[2009/06/01 00:55:32 | 00,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdhid.sys.mui
[2009/06/01 00:55:31 | 00,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
[2009/06/01 00:55:30 | 00,371,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2009/06/01 00:55:30 | 00,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2009/06/01 00:55:30 | 00,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
[2009/06/01 00:55:30 | 00,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
[2009/06/01 00:55:29 | 00,944,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2009/06/01 00:55:29 | 00,905,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2009/06/01 00:55:29 | 00,620,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2009/06/01 00:55:29 | 00,613,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2009/06/01 00:55:29 | 00,224,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2009/06/01 00:55:29 | 00,221,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umpnpmgr.dll
[2009/06/01 00:55:29 | 00,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drvinst.exe
[2009/06/01 00:55:29 | 00,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
[2009/06/01 00:55:29 | 00,019,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
[2009/06/01 00:55:28 | 00,558,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
[2009/06/01 00:55:28 | 00,260,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2009/06/01 00:55:28 | 00,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\loadperf.dll
[2009/06/01 00:55:28 | 00,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lodctr.exe
[2009/06/01 00:55:28 | 00,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2009/06/01 00:55:28 | 00,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
[2009/06/01 00:55:28 | 00,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
[2009/06/01 00:55:27 | 00,595,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schedsvc.dll
[2009/06/01 00:55:27 | 00,035,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2009/06/01 00:55:27 | 00,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prflbmsg.dll
[2009/06/01 00:55:26 | 00,495,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Wdf01000.sys
[2009/06/01 00:55:26 | 00,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\i8042prt.sys
[2009/06/01 00:55:26 | 00,035,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdclass.sys
[2009/06/01 00:55:26 | 00,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dispci.dll
[2009/06/01 00:55:26 | 00,034,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouclass.sys
[2009/06/01 00:55:26 | 00,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sermouse.sys
[2009/06/01 00:55:26 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouhid.sys
[2009/06/01 00:55:26 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batt.dll
[2009/06/01 00:55:26 | 00,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\f3ahvoas.dll
[2009/06/01 00:55:26 | 00,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd106.dll
[2009/06/01 00:53:28 | 00,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMASF.DLL
[2009/06/01 00:53:28 | 00,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LAPRXY.DLL
[2009/06/01 00:53:28 | 00,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asferror.dll
[2009/06/01 00:53:03 | 01,233,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2009/06/01 00:53:03 | 00,875,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
[2009/06/01 00:53:03 | 00,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
[2009/06/01 00:53:03 | 00,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
[2009/06/01 00:53:02 | 00,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\amxread.dll
[2009/06/01 00:53:02 | 00,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apilogen.dll
[2009/06/01 00:52:29 | 00,268,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2009/06/01 00:52:29 | 00,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLC.dll
[2009/06/01 00:52:29 | 00,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slwmi.dll
[2009/06/01 00:52:28 | 02,605,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLsvc.exe
[2009/06/01 00:52:28 | 00,566,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLCommDlg.dll
[2009/06/01 00:52:28 | 00,351,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLUI.exe
[2009/06/01 00:52:28 | 00,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLLUA.exe
[2009/06/01 00:52:28 | 00,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SLUINotify.dll
[2009/06/01 00:52:28 | 00,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slcinst.dll
[2009/06/01 00:51:54 | 00,712,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
[2009/06/01 00:51:54 | 00,425,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
[2009/06/01 00:51:53 | 00,347,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2009/06/01 00:50:49 | 00,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2009/06/01 00:50:49 | 00,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
[2009/06/01 00:50:49 | 00,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntprint.exe
[2009/06/01 00:50:49 | 00,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcmonitor.dll
[2009/06/01 00:50:48 | 01,984,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2009/06/01 00:50:48 | 00,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
[2009/06/01 00:50:47 | 00,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
[2009/06/01 00:50:47 | 00,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2009/06/01 00:50:47 | 00,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2009/06/01 00:50:47 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sendmail.dll
[2009/06/01 00:50:47 | 00,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avicap32.dll
[2009/06/01 00:50:47 | 00,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvidc32.dll
[2009/06/01 00:50:47 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrle32.dll
[2009/06/01 00:50:46 | 08,138,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssBranded.scr
[2009/06/01 00:50:22 | 00,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
[2009/06/01 00:50:22 | 00,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printcom.dll
[2009/06/01 00:50:06 | 00,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2009/06/01 00:50:06 | 00,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshrm.dll
[2009/06/01 00:49:50 | 00,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sbunattend.exe
[2009/06/01 00:49:27 | 00,290,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
[2009/06/01 00:49:17 | 00,162,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
[2009/06/01 00:49:17 | 00,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsrslvr.dll
[2009/06/01 00:49:17 | 00,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2009/06/01 00:49:12 | 00,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hdaudbus.sys
[2009/06/01 00:48:59 | 00,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
[2009/06/01 00:45:38 | 17,235,968 | ---- | M] () -- C:\Windows\ocsetup_install_NetFx3.etl
[2009/06/01 00:45:38 | 00,327,680 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_NetFx3.perf
[2009/06/01 00:45:38 | 00,065,536 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_NetFx3.dpx
[2009/06/01 00:19:59 | 00,354,224 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/05/31 03:28:27 | 00,096,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfshim.dll
[2009/05/31 03:28:26 | 00,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2009/05/31 03:28:25 | 00,282,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
[2009/05/31 03:28:25 | 00,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2009/05/31 03:28:25 | 00,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2009/05/31 03:11:03 | 02,855,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2009/05/31 03:11:03 | 00,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll
[2009/05/31 03:11:03 | 00,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rrinstaller.exe
[2009/05/31 03:11:02 | 00,996,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2009/05/31 03:11:02 | 00,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2009/05/31 03:11:02 | 00,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfpmp.exe
[2009/05/31 03:11:02 | 00,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mferror.dll
[2009/05/31 03:11:01 | 02,433,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2009/05/31 03:10:31 | 00,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb.sys
[2009/05/31 03:10:31 | 00,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srvnet.sys
[2009/05/31 03:10:31 | 00,058,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys
[2009/05/31 03:10:30 | 00,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv2.sys
[2009/05/31 03:10:10 | 00,788,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
[2009/05/31 03:09:27 | 00,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\INETRES.dll
[2009/05/31 03:09:26 | 00,737,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
[2009/05/31 03:08:56 | 01,645,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
[2009/05/31 03:08:27 | 00,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
[2009/05/31 03:08:27 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fs_rec.sys
[2009/05/31 03:08:27 | 00,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmi.dll
[2009/05/31 03:08:02 | 01,327,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2009/05/31 03:06:46 | 02,028,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2009/05/31 03:04:50 | 00,633,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
[2009/05/31 03:04:26 | 01,341,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
[2009/05/31 03:04:26 | 00,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
[2009/05/31 03:03:32 | 00,385,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2009/05/31 03:03:32 | 00,124,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advpack.dll
[2009/05/31 03:03:31 | 02,455,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2009/05/31 03:03:31 | 00,826,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
[2009/05/31 03:03:31 | 00,383,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2009/05/31 03:03:31 | 00,230,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2009/05/31 03:03:31 | 00,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2009/05/31 03:03:31 | 00,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2009/05/31 03:03:30 | 00,347,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2009/05/31 03:03:30 | 00,214,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2009/05/31 03:03:30 | 00,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2009/05/31 03:03:29 | 06,066,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
[2009/05/31 03:03:29 | 00,459,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2009/05/31 03:03:29 | 00,180,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2009/05/31 03:03:27 | 03,595,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
[2009/05/31 03:03:27 | 00,477,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll
[2009/05/31 03:03:27 | 00,389,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2009/05/31 03:03:27 | 00,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2009/05/31 03:03:27 | 00,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2009/05/31 03:03:26 | 01,383,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2009/05/31 03:03:25 | 00,671,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2009/05/31 03:03:25 | 00,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icardie.dll
[2009/05/31 03:03:24 | 01,830,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2009/05/31 03:03:23 | 00,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2009/05/31 03:03:22 | 01,160,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
[2009/05/31 03:03:22 | 00,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\occache.dll
[2009/05/31 03:03:21 | 00,268,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
[2009/05/31 03:03:21 | 00,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2009/05/31 03:03:21 | 00,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2009/05/31 03:03:21 | 00,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2009/05/31 03:03:21 | 00,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2009/05/31 03:00:55 | 00,750,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qmgr.dll
[2009/05/31 02:08:00 | 01,809,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuaueng.dll
[2009/05/31 02:08:00 | 01,524,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2009/05/31 02:08:00 | 00,051,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
[2009/05/31 02:08:00 | 00,043,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2009/05/31 02:06:39 | 00,162,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2009/05/31 02:06:39 | 00,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2009/05/30 13:19:05 | 00,000,402 | -HS- | M] () -- C:\Users\shoelover\Documents\desktop.ini
[2009/05/30 13:19:05 | 00,000,282 | -HS- | M] () -- C:\Users\shoelover\Desktop\desktop.ini
[2009/05/30 13:19:05 | 00,000,174 | -HS- | M] () -- C:\Users\shoelover\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/05/30 13:18:06 | 00,001,656 | ---- | M] () -- C:\Users\Public\Desktop\Walmart.com Digital Photo Center.lnk
[2009/05/30 13:17:53 | 00,001,847 | ---- | M] () -- C:\Users\Public\Desktop\Easy Internet Services.lnk
[2009/05/27 19:28:18 | 00,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2009/05/27 19:26:49 | 00,001,875 | ---- | M] () -- C:\Users\Public\Desktop\High-Speed Services.lnk
[2009/05/27 19:26:22 | 00,002,027 | ---- | M] () -- C:\Users\Public\Desktop\Try AOL Today.lnk
[2009/05/27 19:25:33 | 00,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Vonage.lnk
[2009/05/27 19:25:09 | 00,002,063 | ---- | M] () -- C:\Users\Public\Desktop\eBay.lnk
[2009/05/27 19:25:04 | 00,001,993 | ---- | M] () -- C:\Users\Public\Desktop\MSN.lnk
[2009/05/27 19:24:38 | 00,002,021 | ---- | M] () -- C:\Users\Public\Desktop\HP Total Care Advisor.lnk
[2009/05/27 19:20:17 | 00,002,136 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Office 60 Day Trial..lnk
[2009/05/27 19:14:22 | 00,000,074 | ---- | M] () -- C:\autoexec.bat
[2009/05/27 19:13:40 | 00,001,043 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2009/05/27 19:13:33 | 00,278,528 | ---- | M] (Real Networks, Inc) -- C:\Windows\System32\pncrt.dll
[2009/05/27 19:12:58 | 00,000,758 | ---- | M] () -- C:\Users\Public\Desktop\Rhapsody.lnk
[2009/05/27 19:04:19 | 00,103,521 | ---- | M] () -- C:\Windows\hpqins13.dat
[2009/05/27 19:02:58 | 00,001,997 | ---- | M] () -- C:\Users\Public\Desktop\My HP Games.lnk
[2009/05/27 18:53:17 | 00,319,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[2009/05/27 18:50:07 | 00,414,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2009/05/27 18:49:45 | 00,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2009/05/27 18:48:30 | 00,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2009/05/27 18:48:10 | 00,974,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
[2009/05/27 18:47:50 | 00,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWWIN.EXE
[2009/05/27 18:47:30 | 00,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasl2tp.sys
[2009/05/27 18:47:30 | 00,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspptp.sys
[2009/05/27 18:47:10 | 00,160,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2009/05/27 18:47:10 | 00,160,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2009/05/27 18:47:10 | 00,134,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2009/05/27 18:46:49 | 00,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
[2009/05/27 18:44:56 | 00,223,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2009/05/27 18:44:56 | 00,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
[2009/05/27 18:44:56 | 00,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
[2009/05/27 18:44:56 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
[2009/05/27 18:44:56 | 00,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbohci.sys
[2009/05/27 18:44:56 | 00,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hccoin.dll
[2009/05/27 18:44:56 | 00,005,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2009/05/27 18:36:29 | 00,041,176 | ---- | M] () -- C:\Windows\System32\license.rtf
[2009/05/27 18:33:52 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\UMDF\Msft_User_WpdFs_01_00_00.Wdf
< End of report >
When i first ran the gmer report it stalled @ \device\harddiskvolumeshadowcopy1. so i tried again it ran but it would not let me save it to my desktop! to save the reports of the OTl i had to open up notepad and cope it to the notepad then save it like that! whatever I download or try to download the programs are being intercepted by sumhting on this computer!! One more thing I noticed that this report is stating I have Symantec antivrus & firewall which is not true. I have tried to get rid of this for months because it came with computer 3 years ago but can't seem to delete it! Maybe thts whats keeping me from having other antivirus programs running correctly. At thte moment don't have any atnivirus programs because they all are installed incorrectly when downloaded!!

Edited by kymberly, 12 June 2009 - 01:01 AM.


#7 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 12 June 2009 - 01:46 AM

GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-06-12 01:44:24
Windows 6.0.6000


---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!DialogBoxIndirectParamW 75FA14EA 5 Bytes JMP 6F221777 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!MessageBoxExA 75FB570D 5 Bytes JMP 6F2216BE C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!DialogBoxParamA 75FB65BF 5 Bytes JMP 6F22173C C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!MessageBoxIndirectW 75FBF1B3 5 Bytes JMP 6F0B16B6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!DialogBoxParamW 75FC129F 5 Bytes JMP 6F08F341 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!DialogBoxIndirectParamA 75FE29C9 5 Bytes JMP 6F2217B2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!MessageBoxIndirectA 75FEFACF 5 Bytes JMP 6F2216F8 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] USER32.dll!MessageBoxExW 75FEFBC9 5 Bytes JMP 6F221684 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] SHELL32.dll!DAD_ShowDragImage + CC 7686E958 4 Bytes [01, 0C, 9B, 6D] {ADD [EBX+EBX*4], ECX; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] SHELL32.dll!DAD_ShowDragImage + D4 7686E960 8 Bytes [0F, 0B, 9B, 6D, 8F, 32, 9A, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] SHELL32.dll!ILFree + 980 7686F430 4 Bytes [01, 0C, 9B, 6D] {ADD [EBX+EBX*4], ECX; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[2056] SHELL32.dll!ILFree + 988 7686F438 4 Bytes [0F, 0B, 9B, 6D] {UD2 ; WAIT ; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!DialogBoxIndirectParamW 75FA14EA 5 Bytes JMP 6F221777 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!MessageBoxExA 75FB570D 5 Bytes JMP 6F2216BE C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!DialogBoxParamA 75FB65BF 5 Bytes JMP 6F22173C C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!MessageBoxIndirectW 75FBF1B3 5 Bytes JMP 6F0B16B6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!DialogBoxParamW 75FC129F 5 Bytes JMP 6F08F341 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!DialogBoxIndirectParamA 75FE29C9 5 Bytes JMP 6F2217B2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!MessageBoxIndirectA 75FEFACF 5 Bytes JMP 6F2216F8 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] USER32.dll!MessageBoxExW 75FEFBC9 5 Bytes JMP 6F221684 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] SHELL32.dll!DAD_ShowDragImage + CC 7686E958 4 Bytes [01, 0C, 9B, 6D] {ADD [EBX+EBX*4], ECX; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] SHELL32.dll!DAD_ShowDragImage + D4 7686E960 8 Bytes [0F, 0B, 9B, 6D, 8F, 32, 9A, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] SHELL32.dll!ILFree + 980 7686F430 4 Bytes [01, 0C, 9B, 6D] {ADD [EBX+EBX*4], ECX; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[2252] SHELL32.dll!ILFree + 988 7686F438 4 Bytes [0F, 0B, 9B, 6D] {UD2 ; WAIT ; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxIndirectParamW 75FA14EA 5 Bytes JMP 6F221777 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxExA 75FB570D 5 Bytes JMP 6F2216BE C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxParamA 75FB65BF 5 Bytes JMP 6F22173C C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxIndirectW 75FBF1B3 5 Bytes JMP 6F0B16B6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxParamW 75FC129F 5 Bytes JMP 6F08F341 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!DialogBoxIndirectParamA 75FE29C9 5 Bytes JMP 6F2217B2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxIndirectA 75FEFACF 5 Bytes JMP 6F2216F8 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] USER32.dll!MessageBoxExW 75FEFBC9 5 Bytes JMP 6F221684 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] SHELL32.dll!DAD_ShowDragImage + CC 7686E958 4 Bytes [01, 0C, 9B, 6D] {ADD [EBX+EBX*4], ECX; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] SHELL32.dll!DAD_ShowDragImage + D4 7686E960 8 Bytes [0F, 0B, 9B, 6D, 8F, 32, 9A, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] SHELL32.dll!ILFree + 980 7686F430 4 Bytes [01, 0C, 9B, 6D] {ADD [EBX+EBX*4], ECX; INSD }
.text C:\Program Files\Internet Explorer\iexplore.exe[3636] SHELL32.dll!ILFree + 988 7686F438 4 Bytes [0F, 0B, 9B, 6D] {UD2 ; WAIT ; INSD }

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6D99FF2E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6D99FB56] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6D99EB9B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [6D998BC4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6D99E36B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6D99E945] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6D99C176] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [6D99E499] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6D99EA70] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6D99DD7D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6D99BB72] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6D99E0F1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6D99A7B9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [6D998BC4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6D99BB72] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6D99FF2E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6D99FB56] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6D99EF48] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6D99CF05] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6D99CDCE] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [6D9AC4D1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6D9ACD90] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6D9AE015] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [6D9AE325] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [6D9ADD3F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6D99A400] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6D99E0F1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6D99A682] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6D99AE32] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6D99BFC3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [6D99969E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [6D999300] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6D99A178] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6D99EA70] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [6D99E499] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6D99DE15] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [6D99943F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6D998F5F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6D9991CF] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6D99C52B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6D99CF05] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6D99CA20] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegSetValueW] [6D9AD173] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyW] [6D9AC91D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyW] [6D9AC391] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [6D9A9194] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [6D99943F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6D998F5F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegSetValueW] [6D9AD173] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueA] [6D9AD2C3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyA] [6D9ADD3F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyA] [6D9ACD90] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [6D9A5CE6] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [6D9A5C88] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6D9A4D7E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [6D9A5098] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [6D9A5188] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [6D9A408B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [6D9A5340] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [6D9A6188] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [6D9A539B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [6D9A61E3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2056] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCombineW] [6D9A3FE4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6D99FF2E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6D99FB56] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6D99EB9B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [6D998BC4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6D99E36B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6D99E945] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6D99C176] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [6D99E499] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6D99EA70] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6D99DD7D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6D99BB72] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6D99E0F1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6D99A7B9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [6D998BC4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6D99BB72] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6D99FF2E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6D99FB56] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6D99EF48] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6D99CF05] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6D99CDCE] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [6D9AC4D1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6D9ACD90] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6D9AE015] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [6D9AE325] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [6D9ADD3F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6D99A400] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6D99E0F1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6D99A682] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6D99AE32] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6D99BFC3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [6D99969E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [6D999300] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6D99A178] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6D99EA70] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [6D99E499] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6D99DE15] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [6D99943F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6D998F5F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6D9991CF] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6D99C52B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6D99CF05] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6D99CA20] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegSetValueW] [6D9AD173] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyW] [6D9AC91D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyW] [6D9AC391] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [6D9A9194] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [6D99943F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6D998F5F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegSetValueW] [6D9AD173] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueA] [6D9AD2C3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyA] [6D9ADD3F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyA] [6D9ACD90] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [6D9A5CE6] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [6D9A5C88] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6D9A4D7E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [6D9A5098] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [6D9A5188] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [6D9A408B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [6D9A5340] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [6D9A6188] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [6D9A539B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [6D9A61E3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[2252] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCombineW] [6D9A3FE4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6D99FF2E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6D99FB56] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6D99EB9B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [6D998BC4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6D99E36B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6D99E945] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6D99C176] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [6D99E499] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6D99EA70] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6D99DD7D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6D99BB72] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6D99E0F1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6D99A7B9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [6D998BC4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6D99BB72] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6D99FF2E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6D99FB56] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6D99EF48] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6D99CF05] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6D99CDCE] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [6D9AC4D1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6D9ACD90] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6D9AE015] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [6D9AE325] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [6D9ADD3F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6D99A400] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [6D99FBC9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6D99E0F1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6D99A682] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6D99AE32] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6D99B0B4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6D99BFC3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6D99B641] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [6D99969E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6D99DDF0] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [6D999300] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [6D99896E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6D99A178] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6D99A910] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6D99EA70] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [6D99E499] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6D998CF2] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6D99DE15] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [6D99943F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6D998F5F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6D9991CF] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6D99F43D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6D99C52B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6D99CF05] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6D99CA20] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegSetValueW] [6D9AD173] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyW] [6D9AC91D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCreateKeyW] [6D9AC391] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [6D9A9194] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6D9A0D38] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6D9A0291] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6D99D4D7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6D99F1D3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6D99C2A1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [6D99943F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6D998F5F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [6D99BCBB] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6D99D1C1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [6D998A99] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6D99D03C] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegSetValueW] [6D9AD173] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueA] [6D9AD2C3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyExW] [6D9AE19D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumValueW] [6D9AE4AD] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyA] [6D9ADD3F] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyA] [6D9ACD90] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6D9ADB43] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6D9AD947] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueW] [6D9AD46B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegEnumKeyW] [6D9ADEA9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegCloseKey] [6D9ACD3D] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExW] [6D9AD7A7] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExW] [6D9ACBD1] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegDeleteKeyW] [6D9ACED9] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegCreateKeyExW] [6D9AC659] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegQueryValueExA] [6D9AD607] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\ole32.dll [ADVAPI32.dll!RegOpenKeyExA] [6D9ACA59] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [6D9A5CE6] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [6D9A5C88] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6D9A4D7E] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [6D9A5098] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [6D9A5188] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [6D9A408B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [6D9A5340] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [6D9A6188] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [6D9A539B] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [6D9A61E3] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\iexplore.exe[3636] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCombineW] [6D9A3FE4] C:\Windows\AppPatch\AcRedir.DLL (Windows Compatibility DLL/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----

#8 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 12 June 2009 - 03:13 AM

Somehting really strange happen while I was sirfing the internet. I got the windows update prompt that my system would be shutting down! So I tried to postpone the shutdown but it was grayed out! It start over but then got a black screen where it just starting loading registry files, it was going so fast I caught the end of it: 7418/7418 /registry/machine/COMPONENTS! I have had this happen before and believe it was a trojan!

#9 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:01:08 PM

Posted 13 June 2009 - 12:24 PM

Hi kymberly,

Some of the files you are telling me about are definitely malware but your logs are clean.

There may be something well hidden so we'll try a powerful tool. Make sure you rename Combofix.exe to Combo-fix.exe when you download it.

Please download ComboFix from one of these locations:* IMPORTANT !!! Save ComboFix.exe to your Desktop but rename it Combo-Fix.exe
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. (Click on this link to see a list of programs that should be disabled. The list is not all inclusive.)
  • Double click on Combo-Fix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Thanks. :thumbup2:
Posted Image
m0le is a proud member of UNITE

#10 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 14 June 2009 - 08:11 PM

ComboFix 09-06-14.02 - shoelover 06/14/2009 19:44.1 - NTFSx86
Microsoft Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.1918.790 [GMT -5:00]
Running from: c:\users\Precious Cargo\Desktop\combo-fix.exe.exe
SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

D:\Desktop.ini

.
((((((((((((((((((((((((( Files Created from 2009-05-15 to 2009-06-15 )))))))))))))))))))))))))))))))
.

2009-06-15 00:50 . 2009-06-15 00:50 -------- d-----w- c:\users\shoelover\AppData\Local\temp
2009-06-04 19:30 . 2008-09-03 03:56 465408 ----a-w- c:\windows\system32\newdev.dll
2009-06-04 19:30 . 2008-09-03 03:56 74752 ----a-w- c:\windows\system32\newdev.exe
2009-06-04 19:30 . 2008-05-10 03:30 858112 ----a-w- c:\windows\system32\RacEngn.dll
2009-06-04 19:18 . 2009-06-04 19:18 268800 ----a-w- c:\windows\system32\es.dll
2009-06-04 19:15 . 2009-06-04 19:15 -------- d-----w- c:\users\Precious Cargo\AppData\Roaming\PeerNetworking
2009-06-04 19:14 . 2009-06-04 19:14 -------- d-----w- c:\users\Precious Cargo\AppData\Roaming\FaxCtr
2009-06-03 21:49 . 2009-06-03 22:02 -------- d-----w- c:\program files\lx_cats
2009-06-03 21:46 . 2007-02-22 22:31 344064 ----a-w- c:\windows\system32\lxcycoin.dll
2009-06-03 21:44 . 2006-11-22 13:51 45056 ----a-w- c:\windows\system32\LXPRMON.DLL
2009-06-03 21:44 . 2006-11-22 13:50 32768 ----a-w- c:\windows\system32\LXPMONUI.DLL
2009-06-03 21:43 . 2006-11-22 14:08 12288 ----a-w- c:\windows\system32\LXPMONRC.DLL
2009-06-03 21:43 . 2006-04-28 09:16 98345 ----a-w- c:\windows\system32\IMHOST32.DLL
2009-06-03 21:43 . 2006-04-28 09:16 339968 ----a-w- c:\windows\system32\IMGMAN32.DLL
2009-06-03 21:43 . 2009-06-03 21:43 -------- d-----w- c:\programdata\FaxCtr
2009-06-03 21:43 . 2009-06-03 21:43 -------- d-----w- c:\programdata\Ezprint
2009-06-03 21:43 . 2009-06-03 21:44 -------- d-----w- c:\program files\Lexmark Fax Solutions
2009-06-03 19:06 . 2009-06-03 19:06 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-06-03 19:06 . 2009-06-03 19:06 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2009-06-03 19:06 . 2009-06-03 19:06 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll
2009-06-03 19:06 . 2009-06-03 19:06 272896 ----a-w- c:\windows\system32\polstore.dll
2009-06-03 19:06 . 2009-06-03 19:06 63488 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2009-06-03 19:06 . 2009-06-03 19:06 396800 ----a-w- c:\windows\system32\MPSSVC.dll
2009-06-03 19:06 . 2009-06-03 19:06 392192 ----a-w- c:\windows\system32\FirewallAPI.dll
2009-06-03 19:06 . 2009-06-03 19:06 86016 ----a-w- c:\windows\system32\icfupgd.dll
2009-06-03 19:06 . 2009-06-03 19:06 61952 ----a-w- c:\windows\system32\cmifw.dll
2009-06-03 19:06 . 2009-06-03 19:06 16896 ----a-w- c:\windows\system32\wfapigp.dll
2009-06-03 19:06 . 2009-06-03 19:06 23040 ----a-w- c:\windows\system32\drivers\tunnel.sys
2009-06-03 19:06 . 2009-06-03 19:06 178688 ----a-w- c:\windows\system32\iphlpsvc.dll
2009-06-03 19:06 . 2009-06-03 19:06 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS
2009-06-03 00:08 . 2009-06-03 00:09 -------- d-----w- c:\users\Precious Cargo\AppData\Local\Adobe
2009-06-02 21:25 . 2009-06-02 21:25 -------- d-----w- c:\windows\Desktop
2009-06-02 21:25 . 2009-06-02 21:25 -------- d-----w- c:\program files\Hooked on Phonics Learning
2009-06-02 21:24 . 1962-07-08 10:24 283648 ----a-w- c:\windows\uninst.exe
2009-06-01 06:30 . 2009-06-03 21:36 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2009-06-01 06:30 . 2009-06-01 06:31 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-06-01 06:19 . 2009-06-01 06:19 95232 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-06-01 06:19 . 2009-06-01 06:19 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2009-06-01 06:19 . 2009-06-01 06:19 160768 ----a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-06-01 06:19 . 2009-06-01 06:19 87040 ----a-w- c:\windows\system32\msoert2.dll
2009-06-01 06:19 . 2009-06-01 06:19 39424 ----a-w- c:\windows\system32\ACCTRES.dll
2009-06-01 06:19 . 2009-06-01 06:19 205824 ----a-w- c:\windows\system32\msoeacct.dll
2009-06-01 06:18 . 2009-06-01 06:18 704000 ----a-w- c:\windows\system32\PhotoScreensaver.scr
2009-06-01 06:18 . 2009-06-01 06:18 356352 ----a-w- c:\windows\system32\wbem\wbemcomn.dll
2009-06-01 06:18 . 2009-06-01 06:18 258232 ----a-w- c:\windows\system32\drivers\acpi.sys
2009-06-01 06:18 . 2009-06-01 06:18 24064 ----a-w- c:\windows\system32\wtsapi32.dll
2009-06-01 06:18 . 2009-06-01 06:18 542720 ----a-w- c:\windows\system32\sysmain.dll
2009-06-01 06:18 . 2009-06-01 06:18 67584 ----a-w- c:\windows\system32\wlanhlp.dll
2009-06-01 06:18 . 2009-06-01 06:18 502784 ----a-w- c:\windows\system32\wlansvc.dll
2009-06-01 06:18 . 2009-06-01 06:18 47104 ----a-w- c:\windows\system32\wlanapi.dll
2009-06-01 06:18 . 2009-06-01 06:18 297984 ----a-w- c:\windows\system32\wlansec.dll
2009-06-01 06:18 . 2009-06-01 06:18 290816 ----a-w- c:\windows\system32\wlanmsm.dll
2009-06-01 06:17 . 2009-06-01 06:17 194560 ----a-w- c:\windows\system32\WebClnt.dll
2009-06-01 06:17 . 2009-06-01 06:17 110080 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2009-06-01 06:17 . 2009-06-01 06:17 49664 ----a-w- c:\windows\system32\csrsrv.dll
2009-06-01 06:17 . 2009-06-01 06:17 376320 ----a-w- c:\windows\system32\winsrv.dll
2009-06-01 06:14 . 2009-06-01 06:14 376832 ----a-w- c:\windows\system32\winhttp.dll
2009-06-01 06:13 . 2009-06-01 06:13 297472 ----a-w- c:\windows\system32\gdi32.dll
2009-06-01 06:12 . 2009-06-01 06:12 1060920 ----a-w- c:\windows\system32\drivers\ntfs.sys
2009-06-01 06:11 . 2009-06-01 06:11 211456 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2009-06-01 06:11 . 2009-06-01 06:11 500736 ----a-w- c:\windows\system32\msdtcprx.dll
2009-06-01 06:11 . 2009-06-01 06:11 30208 ----a-w- c:\windows\system32\xolehlp.dll
2009-06-01 06:10 . 2009-06-01 06:10 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-06-01 06:10 . 2009-06-01 06:10 4247552 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-06-01 06:10 . 2009-06-01 06:10 1687040 ----a-w- c:\windows\system32\gameux.dll
2009-06-01 06:09 . 2009-06-01 06:09 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2009-06-01 06:08 . 2009-06-01 06:08 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-06-01 06:08 . 2009-06-01 06:08 1194496 ----a-w- c:\windows\system32\msxml3.dll
2009-06-01 06:08 . 2009-06-01 06:08 356864 ----a-w- c:\windows\system32\MediaMetadataHandler.dll
2009-06-01 06:06 . 2009-06-01 06:06 2048 ----a-w- c:\windows\system32\tzres.dll
2009-06-01 06:05 . 2009-06-01 06:05 1244672 ----a-w- c:\windows\system32\mcmde.dll
2009-06-01 06:05 . 2009-06-01 06:05 428032 ----a-w- c:\windows\system32\EncDec.dll
2009-06-01 06:05 . 2009-06-01 06:05 292352 ----a-w- c:\windows\system32\psisdecd.dll
2009-06-01 06:04 . 2009-06-01 06:04 8147968 ----a-w- c:\windows\system32\wmploc.DLL
2009-06-01 06:04 . 2009-06-01 06:04 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-06-01 06:04 . 2009-06-01 06:04 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-06-01 06:01 . 2009-06-01 06:01 45112 ----a-w- c:\windows\system32\drivers\pciidex.sys
2009-06-01 06:01 . 2009-06-01 06:01 21560 ----a-w- c:\windows\system32\drivers\atapi.sys
2009-06-01 06:01 . 2009-06-01 06:01 15928 ----a-w- c:\windows\system32\drivers\pciide.sys
2009-06-01 06:01 . 2009-06-01 06:01 211000 ----a-w- c:\windows\system32\drivers\volsnap.sys
2009-06-01 06:01 . 2009-06-01 06:01 154624 ----a-w- c:\windows\system32\drivers\nwifi.sys
2009-06-01 06:01 . 2009-06-01 06:01 109624 ----a-w- c:\windows\system32\drivers\ataport.sys
2009-06-01 06:00 . 2009-06-01 06:00 2923520 ----a-w- c:\windows\explorer.exe
2009-06-01 05:58 . 2009-06-01 05:58 4981248 ----a-w- c:\windows\system32\NlsLexicons0013.dll
2009-06-01 05:55 . 2009-06-01 05:55 1585664 ----a-w- c:\windows\system32\setupapi.dll
2009-06-01 05:53 . 2009-06-01 05:53 9728 ----a-w- c:\windows\system32\LAPRXY.DLL
2009-06-01 05:53 . 2009-06-01 05:53 223232 ----a-w- c:\windows\system32\WMASF.DLL
2009-06-01 05:53 . 2009-06-01 05:53 2048 ----a-w- c:\windows\system32\asferror.dll
2009-06-01 05:53 . 2009-06-01 05:53 7680 ----a-w- c:\windows\system32\lsass.exe
2009-06-01 05:53 . 2009-06-01 05:53 72704 ----a-w- c:\windows\system32\secur32.dll
2009-06-01 05:53 . 2009-06-01 05:53 1233408 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-01 05:53 . 2009-06-01 05:53 25600 ----a-w- c:\windows\system32\amxread.dll
2009-06-01 05:53 . 2009-06-01 05:53 14848 ----a-w- c:\windows\system32\apilogen.dll
2009-06-01 05:52 . 2009-06-01 05:52 33280 ----a-w- c:\windows\system32\slwmi.dll
2009-06-01 05:52 . 2009-06-01 05:52 268288 ----a-w- c:\windows\system32\mcbuilder.exe
2009-06-01 05:52 . 2009-06-01 05:52 223232 ----a-w- c:\windows\system32\SLC.dll
2009-06-01 05:52 . 2009-06-01 05:52 57856 ----a-w- c:\windows\system32\SLUINotify.dll
2009-06-01 05:52 . 2009-06-01 05:52 566784 ----a-w- c:\windows\system32\SLCommDlg.dll
2009-06-01 05:52 . 2009-06-01 05:52 39936 ----a-w- c:\windows\system32\slcinst.dll
2009-06-01 05:52 . 2009-06-01 05:52 351232 ----a-w- c:\windows\system32\SLUI.exe
2009-06-01 05:52 . 2009-06-01 05:52 2605568 ----a-w- c:\windows\system32\SLsvc.exe
2009-06-01 05:52 . 2009-06-01 05:52 186368 ----a-w- c:\windows\system32\SLLUA.exe
2009-06-01 05:51 . 2009-06-01 05:51 425472 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2009-06-01 05:51 . 2009-06-01 05:51 712192 ----a-w- c:\windows\system32\WindowsCodecs.dll
2009-06-01 05:51 . 2009-06-01 05:51 347136 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2009-06-01 05:49 . 2009-06-01 05:49 11776 ----a-w- c:\windows\system32\sbunattend.exe
2009-06-01 05:49 . 2009-06-01 05:49 290304 ----a-w- c:\windows\system32\drivers\srv.sys
2009-06-01 05:49 . 2009-06-01 05:49 84480 ----a-w- c:\windows\system32\dnsrslvr.dll
2009-06-01 05:49 . 2009-06-01 05:49 24576 ----a-w- c:\windows\system32\dnscacheugc.exe
2009-06-01 05:49 . 2009-06-01 05:49 53760 ----a-w- c:\windows\system32\drivers\hdaudbus.sys
2009-06-01 05:48 . 2009-06-01 05:48 269824 ----a-w- c:\windows\system32\schannel.dll
2009-05-31 08:28 . 2009-05-31 08:28 96760 ----a-w- c:\windows\system32\dfshim.dll
2009-05-31 08:28 . 2009-05-31 08:28 41984 ----a-w- c:\windows\system32\netfxperf.dll
2009-05-31 08:28 . 2009-05-31 08:28 83968 ----a-w- c:\windows\system32\mscories.dll
2009-05-31 08:28 . 2009-05-31 08:28 282112 ----a-w- c:\windows\system32\mscoree.dll
2009-05-31 08:28 . 2009-05-31 08:28 158720 ----a-w- c:\windows\system32\mscorier.dll
2009-05-31 08:11 . 2009-05-31 08:11 98816 ----a-w- c:\windows\system32\mfps.dll
2009-05-31 08:11 . 2009-05-31 08:11 52736 ----a-w- c:\windows\system32\rrinstaller.exe
2009-05-31 08:11 . 2009-05-31 08:11 2855424 ----a-w- c:\windows\system32\mf.dll
2009-05-31 08:11 . 2009-05-31 08:11 996352 ----a-w- c:\windows\system32\WMNetMgr.dll
2009-05-31 08:11 . 2009-05-31 08:11 94720 ----a-w- c:\windows\system32\logagent.exe
2009-05-31 08:11 . 2009-05-31 08:11 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-05-31 08:11 . 2009-05-31 08:11 2048 ----a-w- c:\windows\system32\mferror.dll
2009-05-31 08:10 . 2009-05-31 08:10 84992 ----a-w- c:\windows\system32\drivers\srvnet.sys
2009-05-31 08:10 . 2009-05-31 08:10 58368 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-15 00:48 . 2009-06-15 00:46 111933449 ----a-w- c:\programdata\SPL8670.tmp
2009-06-03 21:44 . 2009-06-03 21:42 -------- d-----w- c:\program files\Lexmark 3400 Series
2009-06-03 21:42 . 2009-06-03 21:42 -------- d-----w- c:\program files\Abbyy FineReader 6.0 Sprint
2009-06-03 21:33 . 2009-06-03 21:33 1877 --sha-r- c:\windows\system32\drivers\103C_HP_CPC_GC660AA-ABA SR5123WM_YC_0Pres_QCNX719_E73NAv3PrA1_49_INettle2_SECS_V1.0_B5.07_T070404_WUH0_L409_M1918_J320_7AMD_8Athlon 64 X2 Dual Core_92.1_#090530_N10DE03EF_Z14F12F20_G10DE03D0.MRK
2009-06-02 21:18 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-06-02 21:12 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-06-02 21:12 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-06-02 21:12 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-06-02 21:11 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-06-01 05:59 . 2009-06-01 05:59 24064 ----a-w- c:\windows\system32\netcfg.exe
2009-06-01 05:58 . 2009-06-01 05:58 3331072 ----a-w- c:\windows\system32\NlsLexicons0018.dll
2009-06-01 05:55 . 2009-06-01 05:55 40960 ----a-w- c:\windows\system32\srclient.dll
2009-06-01 05:50 . 2009-06-01 05:50 61440 ----a-w- c:\windows\system32\ntprint.exe
2009-05-27 23:50 . 2009-05-27 23:50 414208 ----a-w- c:\windows\system32\msscp.dll
2009-05-27 23:47 . 2006-11-02 08:30 134760 ----a-w- c:\windows\system32\halacpi.dll
2009-05-27 23:47 . 2006-11-02 08:30 160872 ----a-w- c:\windows\system32\halmacpi.dll
2009-04-24 16:22 . 2009-06-12 04:51 827392 ----a-w- c:\windows\system32\wininet.dll
2009-04-24 16:14 . 2009-06-12 04:51 56320 ----a-w- c:\windows\system32\iesetup.dll
2009-04-24 16:14 . 2009-06-12 04:51 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-04-24 16:11 . 2009-06-12 04:51 72704 ----a-w- c:\windows\system32\admparse.dll
2009-04-24 13:53 . 2009-06-12 04:51 26624 ----a-w- c:\windows\system32\ieUnatt.exe
2009-04-24 12:25 . 2009-06-12 04:51 48128 ----a-w- c:\windows\system32\mshtmler.dll
2009-04-23 13:01 . 2009-06-12 04:51 788992 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-23 12:56 . 2009-06-12 04:51 696832 ----a-w- c:\windows\system32\localspl.dll
2009-04-21 12:04 . 2009-06-12 04:51 2028032 ----a-w- c:\windows\system32\win32k.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2007-03-13 1773568]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2006-09-28 65536]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"OsdMaestro"="c:\program files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe" [2007-02-15 118784]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-02-11 90192]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-02-11 8429568]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-02-11 81920]
"lxcymon.exe"="c:\program files\Lexmark 3400 Series\lxcymon.exe" [2007-06-25 291504]
"EzPrint"="c:\program files\Lexmark 3400 Series\ezprint.exe" [2007-06-25 82608]
"FaxCenterServer"="c:\program files\Lexmark Fax Solutions\fm3032.exe" [2007-06-25 295600]
"LXCYCATS"="c:\windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll" [2006-11-21 106496]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-03-01 4390912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\windows\SMINST\launcher.exe" [2007-03-07 44168]

c:\users\Precious Cargo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{A47D2375-198A-411C-8B3A-A7B02872BDE9}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{DE6D2D8B-CB24-4616-A23B-BE406268C840}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{EBF2D2AE-2205-47A6-BA3A-91BE7C94AA37}"= UDP:c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{D27975BF-1088-40DA-8735-50D3F575AA34}"= TCP:c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{8DB888BA-EA68-429D-BA97-C5B05FF253FF}"= UDP:c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{BA471326-E305-44D4-8125-7C13C97534D2}"= TCP:c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{0DCB27D3-17DF-4284-84B3-DB475AEEDE13}"= UDP:c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{925C0908-49F1-419A-BB03-FDBDFAF52C71}"= TCP:c:\program files\earthlink totalaccess\TaskPanl.exe:taskpanl
"{F6CCA7BE-6B67-4959-9BDC-91789FC57F7D}"= UDP:c:\windows\System32\lxcycoms.exe:Lexmark Communications System
"{DC98C9F7-AA42-47C0-8936-515F39373214}"= TCP:c:\windows\System32\lxcycoms.exe:Lexmark Communications System
"{958D6890-1C9D-410C-86DE-DDE96B354724}"= UDP:c:\program files\Lexmark 3400 Series\lxcymon.exe:Device Monitor
"{93BA9B65-9081-4B68-9FC4-281452F69023}"= TCP:c:\program files\Lexmark 3400 Series\lxcymon.exe:Device Monitor
"{AC171A10-CD39-4357-92F3-D254661E0EBF}"= UDP:c:\program files\Lexmark 3400 Series\lxcyaiox.exe:All In One Center
"{1C92932E-1975-438D-B659-409AC8D67F27}"= TCP:c:\program files\Lexmark 3400 Series\lxcyaiox.exe:All In One Center

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe"= c:\program files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink

R2 lxcy_device;lxcy_device;c:\windows\system32\lxcycoms.exe -service --> c:\windows\system32\lxcycoms.exe -service [?]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [6/1/2009 1:30 AM 1153368]
R3 netr73;Amigo RT73 Wireless Driver for Vista;c:\windows\System32\drivers\netr73.sys [5/27/2009 7:28 PM 255488]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Presario&pf=desktop
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=73&bd=Presario&pf=desktop
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-14 19:50
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCYCATS = rundll32 c:\windows\system32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2009-06-15 19:52
ComboFix-quarantined-files.txt 2009-06-15 00:52

Pre-Run: 267,689,111,552 bytes free
Post-Run: 266,572,365,824 bytes free

251 --- E O F --- 2009-06-12 08:03

Edited post


Also noitced that I have strange start ups such as userninit.exe, rchptvl.exe and many more!! No virus program is installed on my system becuase for some reason when I download them It tells me "You did not install right". Maybe you can assist me with a firewall program and virus program. Also I need to run a virus scan because comptuter hasn't been scanned in months due to download issues. Why does mny recycle bin has a $ sign in front of it??? Curious

Edited by m0le, 15 June 2009 - 11:30 AM.


#11 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 14 June 2009 - 08:40 PM

I know you did not ask for this but I noticed that this was a very strange boot file that I found. I will post if for your review. I just want to get to the bottom of this sick of trojans and viruses.. Here it is:

RNTFS  ? ? &y a  vnvn 3м |hhf ˈ f> NTFSuAUr Uu u h H Xr; uۣ . Z3۹ +f   @ +w f#u-fTCPAu$rhhph fSfSfUhfajf`f f fh fPSh h B fY[ZfYfY f   ufaà  < t  
A disk read error occurred
BOOTMGR is missing
BOOTMGR is compressed
Press Ctrl+Alt+Del to restart
U B O O T M G R  $ I 3 0 0 " N T L D R f f
ffRf@  f ffRffff f3ffVfNf&fff*fff.fff>fffFf f& f Sf2f f*j f6f f.X f:f2f  gx gfPgBgfH frgfHfnfnf f3ffvfFfnfJf>6  f>: f:f>Jf.f f "f  fZf\ f B gf f>>?f>f f f f# f>f f f f D f3f f>f  f>>f>f f f f  gfX f  fh f+f> h f+f>
 6 +h Pf`ff
ff ff ߃fP3fag@gf8L gf93 f 
gx # g:H  fgp
fQffY gfx  gf@f+flgf g@  4 gfPg:J@ gfrBIfQffY gx  g@f3g{  f`gfSgf
fgrfafPgfSf
gfJfAgfBf3f6Rff+f^ f`g{ kf  fafSfPfQfVfWff_f^fYf4 f; ff+fff
ff fffXff[ffQfWgfC f ff+ffTfVgfs
fff^fPfPgffPgfCfPgfV f ffqffZfYfBfQfV?ff^fYfNfffYfZfQfVffkf^fYff_fYffXf[ff`&gf_&gfOf 9fff fIf  &g&gff  fIfaf`f f"ffffjfffNf0 f
ffNff fVf fNf\fQff f f f ff>f3ff?  _fSfGf&VfPf3f
ffR f 9fVf
ffZffNff
f+f; fff+fZu ffPf3f
ffQ fYf f
ffNfff; f
f; ff륃fNff
f; ff낃f"fNf[_f?  faff"f6jf6ffRfQfRfjf>Vff f f+ & f>jfjf f ff ffXfV,f^f  f[f[fYfZf3f`fPfQf3f
ffRfWSf_f f
ffZff fYf
f;  f+fXffPfQfXffP f fQfW߃fPf_f>RfYfXf pfaf`f&VfVUfaf`f&rf6frf6*f>FfafPfSfQfJfffff fg fYf[fXg{ f+gfsgfVf; gff; f+g^f+g; > f9 ff;! ffPgf ffffffCfXf+f+ff+f+g f  f+fSfRfgffIfKf 
fgfKfIffZf[fSfRf+gff+g f  f+fZf[ffgffIfKf 
fgfKfIffZf[f  fQfVg>a g>z g. ff^fYfPfQff2gfXgCgf@fDf  fYfYf6f  fYfYf3f6gfRgfBf3f6nf3fPfVfXf^f;: fVf@fPfHrfZf^fYf[fSfQfVfRfFgf@f tfYfYfYfYfYfYf3fQfPf fff f f 3f[fYf fff 3f3fffPfS# f[f_f  5fff fRfQf f f f c ff>f3YffYfZ&f9 &f9W1 &f?/ & & &fG؋% tˌ &fGfYfZf3fPfQffYQffYfX`

a#EgܺvT2 `6 &GFf ` u[ 6 af`6 F2` u: X uf3fX f fff\  fff4 ufaf` fff` u ffWfwf fo  0 S fG[ff/fffffffffff3Gf3G f3G4ffG@ u > Hu ffWfwf fofaff3f#f3ff3f3fSff#ff#f ff#f f[yZ nܼ bf`f3۸ f# fTCPA  faf`g{  gfSgf
%gfSgfJ(f   gfB,f# f3f#2 f f; f+fQfWfRffZf_fYf fTCPAf f f f
f3faà@:

#12 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:01:08 PM

Posted 15 June 2009 - 09:36 AM

Hi kymberly,

This is all looking like boot problems.

The Combofix log is clean and there's been nothing anywhere to state that there is anything on the PC. If there was then it's possible that it has damaged some of your system files but I haven't found any malware in the logs you have posted. Most of the files you have mentioned are actually legitimate.

I am asking you to run a final online scan to make sure.

Please go to Kaspersky website and perform an online antivirus scan.

  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As....
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
  • Please post this log in your next reply.
This tool will attempt to fix Windows files which have been damaged.

Please download sreng2.zip and save it to your Desktop.
  • Create a new folder on your hard drive called Sreng2 (C:\Sreng2) and extract (unzip) the file there. (click here if you're not sure how to do this. Vista users refer to this link.)
  • Open the folder and double-click on SREngLdr.EXE to launch it.
  • Select System Repair from the left pane.
  • Click on Windows Shell/IE.
  • Put a check mark in the box next to Enable using Folder Options
  • Click Repair.
  • The Status should now show Ok.
  • Exit SREng and reboot the computer.
Please let me know if this solves any of your issues. If not then we'll look into what we do next.

:thumbup2:
Posted Image
m0le is a proud member of UNITE

#13 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 15 June 2009 - 09:53 PM

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Monday, June 15, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit (build 6000)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Tuesday, June 16, 2009 02:00:21
Records in database: 2348411
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan statistics:
Files scanned: 136537
Threat name: 0
Infected objects: 0
Suspicious objects: 0
Duration of the scan: 01:31:22

No malware has been detected. The scan area is clean.

The selected area was scanned.
This cant be true!! It doesnt even show the scan. THe last scan I did everything was locked and couldnt be scanned! Also when I start my computer the screen is black for about 2-3 minutes so whatever it is, it is hidden well! For the sreng report I selected the folder options but couldnt select repair because it was grayed out! I tried it twice what am I doing wrong!

#14 kymberly

kymberly
  • Topic Starter

  • Banned
  • 387 posts
  • OFFLINE
  •  
  • Local time:09:08 AM

Posted 15 June 2009 - 10:31 PM

I had to sign on to the adminstrator account and was then able to check the boxes and repair for the scrgn2. Also do you know why I have no restore points created? Isnt that strange??

Edited by kymberly, 15 June 2009 - 10:32 PM.


#15 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:01:08 PM

Posted 16 June 2009 - 06:13 AM

Also do you know why I have no restore points created? Isnt that strange??


Yes it is but if I remember rightly this is an issue with Vista and nothing to do with any malware or any other problems you are having.

The Kaspersky scan is clean and I am now positive that this is not a malware issue, kymberly.

Please post in the Vista forum, here. I will keep this topic open for 5 days in case anything changes drastically.

Good luck :thumbup2:
Posted Image
m0le is a proud member of UNITE




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users