1. الإدارة العامة

    صفحة منتديات زيزووم للأمن والحماية

  2. الإدارة العامة

    الصفحة الرسمية لمنتديات زيزووم للأمن والحماية الفيس بوك

  3. الإدارة العامة

    الصفحة الرسمية لمنتديات زيزووم للأمن والحماية التلكرام

╗◄مـــشكلــة xxx ●●● جــــهـــــازي يــهنـق ع ـند إيقـــاف التـشـغـيـل ●● أرجــــو الدخــول ●● شـ

الموضوع في 'منتدى مشاكـل وحلول الحـاسب' بواسطة (مجرد انسان), بتاريخ ‏يوليو 16, 2009.

  1. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7


    ╗◄مـــشكلــة ●●●جـــهـــازي يــهنـق ع ـند إيقـــاف التـشـغـيـل ●● أرجــــو الدخــول ●● شــكــرا ►╔

    [B][FONT=Times New Roman][COLOR=Black][SIZE=3][B][FONT=Times New Roman][COLOR=Black][SIZE=3][B][FONT=Times New Roman][COLOR=Black][SIZE=3][B][FONT=Times New Roman][COLOR=Black][SIZE=3][B][FONT=Times New Roman][COLOR=Black][SIZE=3][B][FONT=Times New Roman][COLOR=Black][SIZE=3][B][URL="http://www.zyzoomup.com/uploads/images/zyzoom-0b41e44752.gif"][IMG]http://img34.imageshack.us/img34/8/salam.gif[/IMG][/URL]

    [SIZE=5][COLOR=YellowGreen]

    :king:


    :b: يا هلا باخواني [COLOR=Red]الزيزوميين[/COLOR] :b:



    لو سمحتوا أنا جهازي [COLOR=Red]يهنق[/COLOR] (يعلق) إذا عملت [COLOR=Red]إيقاف[/COLOR] أو إعادة تشغيل

    :er:

    يهنق عند هذه الشاشة :cr:
    [IMG]http://www.zyzoomup.com/out.php/i23218_320x200.jpg[/IMG]


    والله أنا محتاج حل لهذه المشكلة .. تعبتني والله :no:


    والله يـ [COLOR=Red]ع[/COLOR] ـطيكم 10000 [COLOR=Red]ع[/COLOR] ـافية ويجعلها في ميزان حسناتكم يوم القيامة

    :openmouth:k:



    متابع للموضوع [COLOR=Red]أول بأول [/COLOR]
    :y:




    [COLOR=Red]شكراً[/COLOR]



    :smile:
    [/COLOR][/SIZE][/B][/SIZE][/COLOR][/FONT][/B][/SIZE][/COLOR][/FONT][/B][/SIZE][/COLOR][/FONT][/B][/SIZE][/COLOR][/FONT][/B][/SIZE][/COLOR][/FONT][/B][/SIZE][/COLOR][/FONT][/B]
     
    آخر تعديل بواسطة المشرف: ‏مايو 12, 2014
  2. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    تقرير الهايجاك


    .:: تقرير الهايجاك ::.




    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:49:55 م, on 16/07/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Parallels\Parallels Workstation\PRLDHCP.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\UPHClean\uphclean.exe
    C:\Program Files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
    C:\Program Files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
    C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
    C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
    C:\Documents and Settings\الشبكه\Desktop\البرامج\Zyzoom.org_Tool_V_1.0.exe
    C:\DOCUME~1\CA17~1\LOCALS~1\Temp\zyaoom Tool\Hijack.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
    O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 9\SnagItBHO.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 9\SnagItIEAddin.dll
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
    O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
    O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
    O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
    O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetVL.htm
    O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
    O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {E001C731-5E37-4538-A5CB-8168736A2360} (ActiveQscan Control) - http://quickscan.bitdefender.com/cab/ActiveQscan.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
    O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Parallels DHCP Service for Virtual NIC (PRLDHCP) - Parallels Software International, Inc. - C:\Program Files\Parallels\Parallels Workstation\PRLDHCP.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    O23 - Service: WUSB54GCSVC - GEMTEKS - C:\Program Files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe

    --
    End of file - 7378 bytes



    THANKS
     
  3. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
  4. فارس الملاك

    فارس الملاك زيزوومى محترف

    إنضم إلينا في:
    ‏ديسمبر 17, 2007
    المشاركات:
    5,514
    الإعجابات :
    37
    نقاط الجائزة:
    830
    الإقامة:
    زيزووم
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 7
  5. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    تم تشغيل الأداة

    وهذه مواصفات الجهاز
    تفضل :king:


    [​IMG]



    وهذي بطريقة أخرى
    [​IMG]
    وجزاك الله 1000 خير

     
  6. إكس زيرو

    إكس زيرو زيزوومى فضى

    إنضم إلينا في:
    ‏ابريل 26, 2009
    المشاركات:
    5,414
    الإعجابات :
    54
    نقاط الجائزة:
    840
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows XP
    :openmouth:k:​

    وإذا نفس الوضع إستخدم برنامج

    [​IMG]

    Uniblue SpeedUpMyPC 2009

    وهو برنامج يقوم بتحليل النظام من الألف الى الياء
    وعمله هو حذف الملفات المؤقته الخاصه بالإنترنت
    وحذف مخلفات النظام وحذف مخلفات البرامج أيضاً
    وحذف كل ما هو غير مهم بالويندوز ويأخذ مساحة دون فائدة
    يعمل على تسريع النظام ويعطيك ثبات واستقرار أكثر للويندوز

    تحميل البرنامج

    الكيجن
     
  7. فارس الملاك

    فارس الملاك زيزوومى محترف

    إنضم إلينا في:
    ‏ديسمبر 17, 2007
    المشاركات:
    5,514
    الإعجابات :
    37
    نقاط الجائزة:
    830
    الإقامة:
    زيزووم
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 7
    (1)
    عطل جميع برامج الحماية ,,
    وحمل هذه الاداة واحفظها على سطح المكتب
    http://download.bleepingcomputer.com/sUBs/ComboFix.exe
    عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
    بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
    انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
    وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
    انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم
     
    آخر تعديل بواسطة المشرف: ‏مايو 12, 2014
  8. إكس زيرو

    إكس زيرو زيزوومى فضى

    إنضم إلينا في:
    ‏ابريل 26, 2009
    المشاركات:
    5,414
    الإعجابات :
    54
    نقاط الجائزة:
    840
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows XP
    إذاممكن شغل برنامج CCleaner

    ثم أدخل على Tools ثم Start Up لإيقاف البرامج الثانوية
     
  9. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    جاري التجربة بإذن الله
    والله يعطيكم العافية
     
  10. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    هذا تقرير أداة الكمبوفيكس
    واعذروني على التأخير لـ توقف النت ..

    بسم الله


    ComboFix 09-07-14.08 - zyzoom 07/17/2009 4:27.2.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1256.966.1033.18.2037.1514 [GMT -7:00]
    Running from: c:\documents and settings\الشبكه\Desktop\ComboFix.exe
    AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
    FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\Installer\22f24.msi
    c:\windows\Installer\280bf.msi
    c:\windows\Installer\63e53.msi

    .
    ((((((((((((((((((((((((( Files Created from 2009-06-17 to 2009-07-17 )))))))))))))))))))))))))))))))
    .

    2009-07-17 11:30 . 2009-07-17 11:30 262144 ----a-w- c:\windows\system32\default_user_class.dat
    2009-07-17 11:25 . 2009-07-17 11:25 -------- dc----w- c:\documents and settings\All Users\Application Data\{C4C0E335-EDDF-46A0-A57D-F3802AE44275}
    2009-07-17 11:00 . 2009-07-17 11:00 -------- d--h--r- C:\AHCache
    2009-07-17 09:31 . 2009-07-17 09:33 3775175 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
    2009-07-17 09:29 . 2009-07-13 20:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-07-17 09:29 . 2009-07-13 20:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-07-17 09:28 . 2009-07-17 09:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2009-07-16 22:44 . 2009-07-16 22:44 -------- d-----w- c:\program files\Common Files\xing shared
    2009-07-16 22:17 . 2009-07-16 22:17 -------- d-----w- c:\program files\FileHippo.com
    2009-07-16 13:40 . 2004-02-23 08:00 1386496 ----a-w- c:\windows\system32\MSVBVM60.DLL
    2009-07-16 11:32 . 2009-07-16 11:32 165888 ----a-w- c:\documents and settings\الشبكه\Application Data\Thinstall\Mozilla Firefox (3.0.4)\400000c00002i\jqsnotify.exe
    2009-07-16 11:32 . 2009-07-16 11:32 165888 ----a-w- c:\documents and settings\الشبكه\Application Data\Thinstall\Mozilla Firefox (3.0.4)\4000004d00002i\firefox.exe
    2009-07-15 04:55 . 2009-07-15 04:56 -------- d-----w- c:\program files\FLV to AVI MPEG WMV 3GP MP4 iPod Converter
    2009-07-14 21:16 . 2008-07-10 20:56 107864 ----a-w- c:\windows\system32\tsccvid.dll
    2009-07-14 21:16 . 2009-07-14 21:16 -------- d-----w- c:\windows\system32\QuickTime
    2009-07-14 21:15 . 2009-07-14 21:15 -------- d-----w- c:\program files\Common Files\TechSmith Shared
    2009-07-14 20:38 . 2009-07-14 20:38 435712 ----a-w- c:\documents and settings\الشبكه\Application Data\Thinstall\Camtasia Studio 5\300000003400002i\dwwin.exe
    2009-07-14 20:38 . 2009-07-14 20:38 435712 ----a-w- c:\documents and settings\الشبكه\Application Data\Thinstall\Camtasia Studio 5\300000008100002i\POWERPNT.EXE
    2009-07-14 20:30 . 2009-07-14 20:30 435712 ----a-w- c:\documents and settings\الشبكه\Application Data\Thinstall\Camtasia Studio 5\400000b300002i\ACDSeeQV10.exe
    2009-07-14 20:28 . 2009-07-14 20:28 435712 ----a-w- c:\documents and settings\الشبكه\Application Data\Thinstall\Camtasia Studio 5\40000049600002i\CamRecorder.exe
    2009-07-14 20:28 . 2009-07-14 20:28 435712 ----a-w- c:\documents and settings\الشبكه\Application Data\Thinstall\Camtasia Studio 5\400000d00002i\TSCHelp.exe
    2009-07-13 20:45 . 2009-07-13 20:45 -------- d-----w- c:\documents and settings\الشبكه\Application Data\Moyea
    2009-07-11 22:09 . 2008-06-22 01:54 11779 ----a-w- c:\windows\REGTWEAK.REG
    2009-07-10 21:41 . 2009-07-01 23:30 52224 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\{3aaa6ede-0f45-43da-8b81-608a1d8108a2}\components\FFExternalAlert.dll
    2009-07-10 21:41 . 2009-07-01 23:30 114688 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\{3aaa6ede-0f45-43da-8b81-608a1d8108a2}\components\npmozax.dll
    2009-07-10 21:41 . 2009-07-07 05:44 937984 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\piclens@cooliris.com\libs\PicLensHelper.exe
    2009-07-10 21:41 . 2009-07-07 05:44 65536 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\piclens@cooliris.com\components\coolirisstub.dll
    2009-07-10 21:41 . 2009-07-07 05:44 4722688 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\piclens@cooliris.com\libs\cooliris19.dll
    2009-07-10 21:41 . 2009-07-07 05:44 106496 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\piclens@cooliris.com\plugins\npcoolirisplugin.dll
    2009-07-10 21:41 . 2009-07-07 05:44 103424 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\piclens@cooliris.com\libs\pixomatic.dll
    2009-07-10 21:41 . 2009-07-07 05:44 344064 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\piclens@cooliris.com\libs\LaunchCooliris.exe
    2009-07-10 01:25 . 2009-07-02 17:21 3561744 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\setup\mbam-setup.exe
    2009-07-10 01:04 . 2009-07-10 01:04 296976 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.459\sys\i386\5.1\klif.sys
    2009-07-10 01:04 . 2009-07-10 01:04 128016 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.459\sys\i386\kl1.sys
    2009-07-10 01:02 . 2009-07-10 01:02 128016 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\sys\i386\kl1.sys
    2009-07-10 01:01 . 2009-07-10 01:02 296976 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\sys\i386\5.1\klif.sys
    2009-07-07 00:44 . 2009-07-07 00:47 4995872 ----a-w- c:\documents and settings\الشبكه\Application Data\OpenCandy\XobniSetup-4.exe
    2009-07-07 00:44 . 2009-07-07 00:44 -------- d-----w- c:\documents and settings\الشبكه\Application Data\OpenCandy
    2009-07-07 00:44 . 2009-07-07 00:44 -------- d-----w- c:\program files\Regensoft
    2009-07-07 00:44 . 2009-07-07 00:44 -------- d-----w- c:\program files\AviSynth 2.5
    2009-07-07 00:44 . 2009-07-07 00:44 -------- d-----w- c:\program files\Red Kawa
    2009-07-07 00:18 . 2009-07-07 00:18 -------- d-----w- c:\program files\Xilisoft
    2009-07-07 00:01 . 2009-07-12 09:37 -------- d-----w- c:\documents and settings\الشبكه\Application Data\GetRightToGo
    2009-07-05 23:26 . 2009-07-05 23:26 -------- d-----w- c:\documents and settings\الشبكه\Local Settings\Application Data\VSO
    2009-07-05 23:23 . 2009-07-05 23:23 -------- d-----w- c:\program files\VSO
    2009-07-05 18:49 . 2009-07-05 18:49 -------- d-----w- c:\program files\Common Files\PCSuite
    2009-07-05 18:48 . 2008-08-26 17:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
    2009-07-05 18:48 . 2009-07-05 18:48 -------- d-----w- c:\program files\PC Connectivity Solution
    2009-07-05 18:47 . 2009-02-09 15:37 7808 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
    2009-07-05 18:47 . 2009-02-09 15:37 7808 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
    2009-07-05 18:47 . 2009-02-09 15:37 659968 ----a-w- c:\windows\system32\nmwcdcocls.dll
    2009-07-05 18:47 . 2009-02-09 15:37 22016 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
    2009-07-05 18:47 . 2009-02-09 15:37 17664 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
    2009-07-05 18:47 . 2009-02-09 15:32 1112288 ----a-w- c:\windows\system32\wdfcoinstaller01007.dll
    2009-07-05 18:47 . 2009-07-05 11:52 34008688 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Nokia_PC_Suite_7_1_30_9_ara.exe
    2009-07-05 18:46 . 2009-07-05 18:46 95232 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\pcswpcsi.exe
    2009-07-05 18:46 . 2009-07-05 18:46 8192 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\UninstCCD.exe
    2009-07-05 18:46 . 2009-07-05 18:46 61440 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\UninstPCSFEMsi.exe
    2009-07-05 18:46 . 2009-07-05 18:46 10240 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{3D39E775-DDDA-4327-B747-0BDC5F191331}\Installer\CommonCustomActions\UninstPCS.exe
    2009-07-05 03:15 . 2009-07-05 03:15 -------- dc----w- c:\documents and settings\All Users\Application Data\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}
    2009-07-04 04:32 . 2008-01-16 22:22 12310 ----a-w- c:\windows\system32\drivers\pvsnet.sys
    2009-07-04 04:31 . 2008-01-16 22:22 28800 ----a-w- c:\windows\system32\drivers\pvs.sys
    2009-07-04 04:31 . 2008-01-16 22:22 13344 ----a-w- c:\windows\system32\drivers\pvspth.sys
    2009-07-04 04:31 . 2008-01-16 22:20 8320 ----a-w- c:\windows\system32\drivers\PvsUM.sys
    2009-07-04 04:31 . 2008-01-16 22:19 51712 ----a-w- c:\windows\system32\drivers\hypervisor.sys
    2009-07-04 04:31 . 2008-01-16 22:20 22752 ----a-w- c:\windows\system32\drivers\pvsusb.sys
    2009-07-04 04:31 . 2009-07-04 04:31 -------- d-----w- c:\program files\Parallels
    2009-07-04 04:29 . 2008-01-16 22:20 4412 ----a-w- c:\windows\system32\drivers\pvsvnic.sys
    2009-06-28 18:49 . 2009-06-28 18:49 -------- d-----w- c:\documents and settings\الشبكه\Application Data\AMPSoft
    2009-06-28 18:49 . 2009-06-28 18:49 -------- d-----w- c:\program files\AMP Font Viewer
    2009-06-26 20:44 . 2009-06-26 20:45 -------- d-----w- c:\program files\FinePixViewerS
    2009-06-26 02:37 . 2009-06-26 02:37 932368 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\profiles-1-6.dll
    2009-06-26 02:37 . 2009-06-26 02:37 678416 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\content_interpreter-1-1.dll
    2009-06-26 02:37 . 2009-06-26 02:37 604688 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\gsg-3-9.dll
    2009-06-26 02:37 . 2009-06-26 02:37 1096208 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\filtration-4-6.dll
    2009-06-26 02:37 . 2009-06-26 02:37 522768 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\database-1-5.dll
    2009-06-26 02:37 . 2009-06-26 02:37 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
    2009-06-26 02:15 . 2009-06-26 02:15 94643 ----a-w- c:\windows\system32\drivers\klick.dat
    2009-06-26 02:15 . 2009-06-26 02:15 105395 ----a-w- c:\windows\system32\drivers\klin.dat
    2009-06-26 02:12 . 2009-07-17 10:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
    2009-06-26 02:12 . 2009-06-26 02:12 -------- d-----w- c:\program files\Kaspersky Lab
    2009-06-26 02:08 . 2009-06-26 02:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
    2009-06-26 01:51 . 2009-06-26 01:51 -------- d-----w- c:\documents and settings\الشبكه\Application Data\Malwarebytes
    2009-06-26 01:51 . 2009-07-16 10:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-06-26 01:45 . 2009-06-26 01:45 -------- d-----w- c:\documents and settings\الشبكه\DoctorWeb
    2009-06-26 00:55 . 2009-06-26 00:55 -------- d-----w- c:\documents and settings\الشبكه\Application Data\QuickScan
    2009-06-26 00:46 . 2009-07-17 11:32 -------- d-----w- c:\windows\system32\CatRoot2
    2009-06-26 00:43 . 2009-06-26 05:41 -------- d-----w- c:\documents and settings\الشبكه\Application Data\Desktopicon
    2009-06-26 00:43 . 2009-06-26 00:44 -------- d-----w- c:\program files\Unlocker
    2009-06-26 00:27 . 2009-06-26 00:27 -------- d-----w- c:\program files\UPHClean
    2009-06-26 00:14 . 2009-06-26 00:15 -------- d-----w- C:\rsit
    2009-06-25 23:47 . 2009-06-25 23:47 -------- d-----w- c:\documents and settings\الشبكه\Application Data\TeamViewer
    2009-06-25 23:47 . 2009-06-25 23:47 -------- d-----w- c:\documents and settings\الشبكه\temp
    2009-06-25 22:30 . 2009-06-25 22:30 -------- d-----w- c:\documents and settings\الشبكه\Local Settings\Application Data\Runscanner.net
    2009-06-25 20:11 . 2009-06-17 16:51 781435 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\firedownload@mozilla.org\Download.dll
    2009-06-25 20:11 . 2009-05-07 19:49 22528 ----a-w- c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\firedownload@mozilla.org\components\firedownload.dll
    2009-06-25 06:36 . 2009-06-25 06:36 -------- d-----w- c:\program files\VS Revo Group
    2009-06-24 21:00 . 2009-06-24 21:00 -------- d-----w- c:\windows\system32\wbem\Repository

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-07-17 11:26 . 2009-01-29 18:59 -------- d-----w- c:\documents and settings\الشبكه\Application Data\DMCache
    2009-07-17 05:40 . 2009-04-04 18:45 -------- d-----w- c:\documents and settings\الشبكه\Application Data\Vso
    2009-07-16 22:44 . 2009-01-28 06:10 -------- d-----w- c:\program files\Common Files\Real
    2009-07-16 22:43 . 2009-01-28 06:10 348160 ----a-w- c:\windows\system32\msvcr71.dll
    2009-07-16 22:43 . 2003-03-19 04:14 499712 ----a-w- c:\windows\system32\msvcp71.dll
    2009-07-16 11:32 . 2009-05-11 16:13 -------- d-----w- c:\documents and settings\الشبكه\Application Data\Thinstall
    2009-07-16 11:08 . 2009-01-28 05:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2009-07-14 21:15 . 2009-02-03 05:47 -------- d-----w- c:\program files\TechSmith
    2009-07-10 08:41 . 2009-01-29 18:27 -------- d-----w- c:\program files\Golden Al-Wafi Translator
    2009-07-10 01:04 . 2009-05-24 22:30 128016 ----a-w- c:\windows\system32\drivers\kl1.sys
    2009-07-09 04:58 . 2009-07-09 04:58 0 ---ha-w- c:\windows\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
    2009-07-09 04:58 . 2009-07-09 04:58 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_user_01_07_00.Wdf
    2009-07-09 04:57 . 2009-07-09 04:57 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
    2009-07-07 00:20 . 2009-05-04 18:52 -------- d-----w- c:\documents and settings\الشبكه\Application Data\Xilisoft Corporation
    2009-07-05 18:49 . 2009-02-15 16:15 -------- d-----w- c:\program files\Common Files\Nokia
    2009-07-05 18:49 . 2009-01-29 14:25 -------- d-----w- c:\program files\Nokia
    2009-07-05 18:48 . 2009-01-29 14:26 -------- d-----w- c:\program files\DIFX
    2009-07-05 11:53 . 2009-01-29 14:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
    2009-07-04 04:31 . 2009-01-28 05:39 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-06-28 20:02 . 2009-01-28 05:29 149096 ----a-w- c:\documents and settings\الشبكه\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-06-26 20:48 . 2009-03-20 10:50 -------- d-----w- c:\documents and settings\الشبكه\Application Data\FUJIFILM
    2009-06-26 00:14 . 2009-04-30 16:56 -------- d-----w- c:\program files\Trend Micro
    2009-06-21 07:00 . 2009-06-16 08:14 -------- d-----w- c:\documents and settings\الشبكه\Application Data\IDM
    2009-06-16 14:36 . 2004-08-03 21:56 119808 ----a-w- c:\windows\system32\t2embed.dll
    2009-06-16 14:36 . 2001-08-23 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
    2009-06-16 08:14 . 2009-06-16 08:14 198064 ----a-w- c:\documents and settings\الشبكه\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
    2009-06-16 08:14 . 2009-06-16 08:14 -------- d-----w- c:\program files\MatriX
    2009-06-16 08:14 . 2009-01-29 18:59 -------- d-----w- c:\program files\Internet Download Manager
    2009-06-15 06:13 . 2009-06-15 06:13 -------- d-----w- c:\program files\Media Player Classic
    2009-06-14 19:56 . 2009-02-23 23:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
    2009-06-14 19:52 . 2009-01-28 06:09 -------- d-----w- c:\program files\GRETECH
    2009-06-13 21:13 . 2009-06-13 21:13 -------- d-----w- c:\documents and settings\الشبكه\Application Data\CyberScrub
    2009-06-13 21:12 . 2009-06-13 21:12 -------- d-----w- c:\documents and settings\الشبكه\Application Data\cleaner
    2009-06-13 20:30 . 2009-06-13 20:30 -------- d-----w- c:\program files\CodeStuff
    2009-06-13 18:15 . 2009-06-12 18:48 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
    2009-06-12 21:31 . 2009-06-12 21:31 552 ----a-w- c:\windows\system32\d3d8caps.dat
    2009-06-04 16:00 . 2009-06-04 16:00 59992 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2010 9.0.0.459\English\setup.exe
    2009-06-03 19:09 . 2004-08-03 21:56 1291264 ----a-w- c:\windows\system32\quartz.dll
    2009-06-01 15:07 . 2009-06-01 15:07 -------- d-----w- c:\program files\XP Codec Pack
    2009-05-31 16:09 . 2009-05-25 15:33 -------- d-----w- c:\program files\SWiSH Max2
    2009-05-28 07:11 . 2009-05-28 07:11 -------- d-----w- c:\program files\ImageShack Corp
    2009-05-26 19:03 . 2009-05-26 19:03 -------- d-----w- c:\documents and settings\الشبكه\Application Data\HiYo
    2009-05-25 12:21 . 2009-05-25 12:21 219664 ----a-w- c:\windows\system32\klogon.dll
    2009-05-25 12:18 . 2009-05-25 12:18 27507 ----a-w- c:\windows\system32\drivers\klopp.dat
    2009-05-18 14:12 . 2009-05-18 14:13 40812 ----a-w- c:\windows\Fonts\انجليزي رهسسب.ttf
    2009-05-17 22:21 . 2009-05-17 22:21 3351812 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7169FA93-66C2-43BD-86E0-CD332A686B29}\Installer\CommonCustomActions\msxml6Exec.exe
    2009-05-17 22:21 . 2009-05-17 22:21 36864 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7169FA93-66C2-43BD-86E0-CD332A686B29}\Installer\CommonCustomActions\Sleep.exe
    2009-05-17 22:21 . 2009-05-17 22:21 3181612 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7169FA93-66C2-43BD-86E0-CD332A686B29}\Installer\CommonCustomActions\vcredistExec.exe
    2009-05-17 22:17 . 2009-05-17 22:21 24368104 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7169FA93-66C2-43BD-86E0-CD332A686B29}\NokiaSoftwareUpdaterSetup_1.6.11AR.exe
    2009-05-17 03:59 . 2009-05-17 03:59 19472 ----a-w- c:\windows\system32\drivers\klmouflt.sys
    2009-05-14 00:46 . 2009-05-14 00:46 31760 ----a-w- c:\windows\system32\drivers\klim5.sys
    2009-05-11 19:47 . 2009-05-11 19:47 1302600 ----a-w- c:\windows\system32\WUDFUpdate_01007.dll
    2009-05-07 15:32 . 2004-08-03 21:56 345600 ----a-w- c:\windows\system32\localspl.dll
    2009-04-29 04:46 . 2004-08-03 21:56 666624 ----a-w- c:\windows\system32\wininet.dll
    2009-04-29 04:46 . 2004-08-03 21:56 81920 ----a-w- c:\windows\system32\ieencode.dll
    2009-04-25 13:14 . 2009-04-25 13:14 8192 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7694EC32-CB0E-4B35-9088-7B320CB1F4FE}\Installer\CommonCustomActions\UninstCCD.exe
    2009-04-25 13:14 . 2009-04-25 13:14 61440 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7694EC32-CB0E-4B35-9088-7B320CB1F4FE}\Installer\CommonCustomActions\UninstPCSFEMsi.exe
    2009-04-25 13:14 . 2009-04-25 13:14 10240 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7694EC32-CB0E-4B35-9088-7B320CB1F4FE}\Installer\CommonCustomActions\UninstPCS.exe
    2009-04-25 12:53 . 2009-04-25 13:14 34649904 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{7694EC32-CB0E-4B35-9088-7B320CB1F4FE}\Nokia_PC_Suite_7_1_26_0_ara.exe
    2009-04-18 16:44 . 2009-04-18 16:44 90112 ----a-w- c:\windows\system32\agsaami.dll
    2009-04-18 16:44 . 2009-04-18 16:44 610304 ----a-w- c:\windows\system32\agsaamg.dll
    2009-04-18 16:44 . 2009-04-18 16:44 372736 ----a-w- c:\windows\system32\agsaamc.dll
    2009-04-18 16:44 . 2009-04-18 16:44 2535424 ----a-w- c:\windows\system32\agsaamj.dll
    2009-04-18 16:44 . 2009-04-18 16:44 1986560 ----a-w- c:\windows\system32\akll.dll
    2009-04-18 16:44 . 2009-04-18 16:44 196608 ----a-w- c:\windows\system32\maag.dll
    2009-04-18 16:44 . 2009-04-18 16:44 1245184 ----a-w- c:\windows\system32\bkll.dll
    2009-04-18 16:44 . 2009-04-18 16:44 1212416 ----a-w- c:\windows\system32\ckll.dll
    2009-07-07 20:19 . 2009-01-28 14:42 137208 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-06-13_20.11.07 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-07-17 11:31 . 2009-07-17 11:31 16384 c:\windows\temp\Perflib_Perfdata_a8.dat
    - 2006-04-11 22:26 . 2006-09-16 07:30 55296 c:\windows\system32\WudfSvc.dll
    + 2006-04-11 22:26 . 2008-01-19 07:37 55296 c:\windows\system32\WudfSvc.dll
    + 2006-04-11 22:30 . 2008-01-19 07:37 87552 c:\windows\system32\WUDFCoinstaller.dll
    + 2009-01-28 05:09 . 2008-10-16 22:09 51224 c:\windows\system32\wuauclt.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 37888 c:\windows\system32\url.dll
    - 2009-01-29 16:57 . 2008-07-09 07:38 17272 c:\windows\system32\spmsg.dll
    + 2009-01-29 16:57 . 2008-07-08 13:02 17272 c:\windows\system32\spmsg.dll
    + 2001-08-23 12:00 . 2009-06-16 04:55 59576 c:\windows\system32\perfc009.dat
    + 2004-08-03 21:56 . 2008-04-14 00:12 96256 c:\windows\system32\occache.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 69120 c:\windows\system32\notepad.exe
    + 2009-01-29 14:25 . 2009-02-09 15:37 91136 c:\windows\system32\nmwcdcls.dll
    - 2009-01-29 14:25 . 2009-02-09 14:37 91136 c:\windows\system32\nmwcdcls.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 32768 c:\windows\system32\netfxperf.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 53760 c:\windows\system32\narrator.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 90624 c:\windows\system32\mydocs.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 74240 c:\windows\system32\mscories.dll
    + 2009-01-28 06:07 . 2009-07-13 20:45 88590 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
    - 2009-04-25 13:15 . 2008-08-26 17:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    + 2009-07-05 18:48 . 2008-08-26 17:26 18816 c:\windows\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.sys
    + 2009-07-05 18:47 . 2009-02-09 15:37 22016 c:\windows\system32\DRVSTORE\ccdcmbo_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmbo.sys
    + 2009-07-05 18:47 . 2009-02-09 15:37 91136 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdcls.dll
    + 2009-07-05 18:47 . 2009-02-09 15:37 17664 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\ccdcmb.sys
    + 2006-04-11 22:29 . 2008-01-19 05:53 83328 c:\windows\system32\drivers\WudfRd.sys
    + 2006-04-11 22:26 . 2008-01-19 05:52 77696 c:\windows\system32\drivers\WudfPf.sys
    + 2008-12-16 03:41 . 2008-12-16 03:41 33808 c:\windows\system32\drivers\klbg.sys
    - 2008-01-30 01:29 . 2008-12-16 03:41 33808 c:\windows\system32\drivers\klbg.sys
    + 2009-06-16 14:36 . 2009-06-16 14:36 81920 c:\windows\system32\dllcache\fontsub.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 83456 c:\windows\system32\dfshim.dll
    + 2001-08-23 12:00 . 2001-08-23 12:00 66560 c:\windows\system32\console.dll
    + 2009-01-28 05:18 . 2009-06-23 18:33 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2009-01-28 05:18 . 2009-05-29 14:59 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    - 2009-01-28 05:18 . 2009-05-29 14:59 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2009-01-28 05:18 . 2009-06-23 18:33 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2009-01-28 05:18 . 2009-05-29 14:59 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2009-01-28 05:18 . 2009-06-23 18:33 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
    + 2004-08-03 21:56 . 2008-04-14 00:12 64000 c:\windows\system32\cleanmgr.exe
    + 2004-08-03 21:56 . 2008-04-14 00:11 84480 c:\windows\system32\cabview.dll
    + 2004-08-03 21:56 . 2008-04-14 00:11 29184 c:\windows\system32\batmeter.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 98304 c:\windows\system32\ahui.exe
    + 2009-05-27 17:01 . 2009-07-16 22:28 78562 c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
    - 2009-04-28 10:23 . 2009-04-28 10:23 94208 c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
    + 2009-06-04 12:15 . 2009-06-04 12:15 94208 c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
    + 2009-06-04 11:45 . 2009-06-04 11:45 79488 c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
    + 2009-01-27 21:00 . 2008-04-14 00:12 69120 c:\windows\notepad.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 28160 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 71680 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
    + 2005-09-23 14:28 . 2005-09-23 14:28 86016 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 47616 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 59072 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 78336 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 14848 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 96440 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
    + 2005-09-23 14:29 . 2005-09-23 14:29 22528 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 10240 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 66240 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 67072 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 81408 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 73216 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 73728 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
    + 2005-09-23 13:36 . 2005-09-23 13:36 85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll
    + 2005-09-23 13:29 . 2005-09-23 13:29 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll
    + 2005-09-23 13:47 . 2005-09-23 13:47 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll
    + 2005-09-23 13:30 . 2005-09-23 13:30 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll
    + 2005-09-23 13:47 . 2005-09-23 13:47 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll
    + 2005-09-23 13:47 . 2005-09-23 13:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll
    + 2005-09-23 13:47 . 2005-09-23 13:47 82432 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll
    + 2005-09-23 13:47 . 2005-09-23 13:47 82432 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll
    + 2005-09-23 13:46 . 2005-09-23 13:46 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll
    + 2005-09-23 13:46 . 2005-09-23 13:46 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll
    + 2005-09-23 13:46 . 2005-09-23 13:46 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll
    + 2005-09-23 13:44 . 2005-09-23 13:44 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll
    + 2005-09-23 13:42 . 2005-09-23 13:42 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll
    + 2005-09-23 13:40 . 2005-09-23 13:40 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll
    + 2005-09-23 13:40 . 2005-09-23 13:40 83968 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll
    + 2005-09-23 13:40 . 2005-09-23 13:40 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll
    + 2005-09-23 13:38 . 2005-09-23 13:38 86016 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll
    + 2005-09-23 13:38 . 2005-09-23 13:38 81408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll
    + 2005-09-23 10:46 . 2005-09-23 10:46 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll
    + 2005-09-23 13:36 . 2005-09-23 13:36 87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll
    + 2005-09-23 13:34 . 2005-09-23 13:34 85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll
    + 2005-09-23 13:34 . 2005-09-23 13:34 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll
    + 2005-09-23 13:34 . 2005-09-23 13:34 82944 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll
    + 2005-09-23 13:32 . 2005-09-23 13:32 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll
    + 2005-09-23 13:29 . 2005-09-23 13:29 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 55296 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 52736 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 31936 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 68608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 17920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 76984 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 88576 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 29888 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 29896 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 26824 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 70656 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 23552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 55488 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 86528 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 72704 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
    + 2009-02-01 05:56 . 2009-02-01 05:56 48128 c:\windows\Installer\af80de.msi
    + 2009-03-20 10:42 . 2009-03-20 10:42 30720 c:\windows\Installer\872af5b.msi
    + 2009-06-12 16:05 . 2009-06-12 16:05 16896 c:\windows\Installer\54b7d4.msi
    + 2009-03-19 10:40 . 2009-03-19 10:40 23040 c:\windows\Installer\3505662.msi
    + 2009-03-19 10:39 . 2009-03-19 10:39 25088 c:\windows\Installer\350560f.msi
    + 2009-03-19 10:39 . 2009-03-19 10:39 28160 c:\windows\Installer\3505608.msi
    + 2009-03-19 10:39 . 2009-03-19 10:39 83456 c:\windows\Installer\35055f2.msi
    + 2009-03-19 10:39 . 2009-03-19 10:39 59904 c:\windows\Installer\35055eb.msi
    + 2009-06-26 00:27 . 2009-06-26 00:27 25214 c:\windows\Installer\{FF77941A-2BFA-4A18-BE2E-69B9498E4D55}\_294823.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2009-07-05 18:49 . 2009-07-05 18:49 15086 c:\windows\Installer\{3D39E775-DDDA-4327-B747-0BDC5F191331}\ARPPRODUCTICON.exe
    + 2009-07-05 18:48 . 2009-07-05 18:48 10134 c:\windows\Installer\{0C973594-7DDF-4BD0-84ED-3517F7622037}\ARPPRODUCTICON.exe
    + 2006-10-27 04:09 . 2006-10-27 04:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PUBTRAP.DLL
    + 2009-06-16 05:48 . 2009-06-16 05:48 81920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4537d17483445d4285de9c0b50b987a3\Microsoft.Build.Framework.ni.dll
    + 2009-06-16 05:48 . 2009-06-16 05:48 15360 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\f25993ba4d322444a23364f044b6dbeb\dfsvc.ni.exe
    + 2009-06-16 05:48 . 2009-06-16 05:48 26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\7c797bfdada196408d21c52c19fe8f17\Accessibility.ni.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 86016 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
    + 2009-06-16 04:52 . 2009-06-16 04:52 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
    + 2009-06-16 04:52 . 2009-06-16 04:52 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 73728 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 36864 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 68608 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    + 2009-01-28 06:14 . 2009-07-16 22:43 5632 c:\windows\system32\pndx5032.dll
    - 2009-01-28 06:14 . 2009-02-11 19:04 5632 c:\windows\system32\pndx5032.dll
    - 2009-01-28 06:14 . 2009-02-11 19:04 6656 c:\windows\system32\pndx5016.dll
    + 2009-01-28 06:14 . 2009-07-16 22:43 6656 c:\windows\system32\pndx5016.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 6144 c:\windows\system32\mui\0409\mscorees.dll
    + 2009-07-05 18:48 . 2009-03-19 21:48 8320 c:\windows\system32\DRVSTORE\nmwcdnsuc_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdnsuc.sys
    + 2009-07-05 18:47 . 2009-02-09 15:37 7808 c:\windows\system32\DRVSTORE\ccdcmbm_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\usbser_lowerflt.sys
    + 2009-07-05 18:47 . 2009-02-09 15:37 7808 c:\windows\system32\DRVSTORE\ccdcmbcj_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\usbser_lowerfltj.sys
    - 2009-04-28 10:26 . 2009-04-28 10:26 9216 c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
    + 2009-06-04 12:17 . 2009-06-04 12:17 9216 c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 7680 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 4608 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 4608 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 7680 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 7680 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 7680 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 7680 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5632 c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_iehost.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 5120 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
    + 2009-07-05 18:48 . 2009-07-05 18:48 3262 c:\windows\Installer\{52D02A2B-03D2-4E34-A358-DC5D951FD296}\ARPPRODUCTICON.exe
    + 2009-06-16 04:52 . 2009-06-16 04:52 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 5632 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 114176 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 338432 c:\windows\system32\zipfldr.dll
    + 2006-04-11 22:27 . 2008-01-19 07:37 305152 c:\windows\system32\WUDFx.dll
    - 2006-04-11 22:26 . 2006-09-16 06:29 163840 c:\windows\system32\WudfPlatform.dll
    + 2006-04-11 22:26 . 2008-01-19 05:52 163840 c:\windows\system32\WudfPlatform.dll
    + 2006-04-11 22:27 . 2008-01-19 07:33 142336 c:\windows\system32\WudfHost.exe
    + 2009-01-28 05:09 . 2008-04-14 00:12 165888 c:\windows\system32\wuauclt1.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 293376 c:\windows\system32\winsrv.dll
    + 2004-08-03 21:56 . 2008-04-14 00:11 756224 c:\windows\system32\WINNTBBU.DLL
    + 2004-08-03 21:56 . 2008-04-14 00:12 589312 c:\windows\system32\wiashext.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 433664 c:\windows\system32\wiaacmgr.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 276480 c:\windows\system32\webcheck.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 245248 c:\windows\system32\usmt\migwiz.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 385536 c:\windows\system32\themeui.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 135680 c:\windows\system32\taskmgr.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 990208 c:\windows\system32\syssetup.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 106496 c:\windows\system32\sysocmgr.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 121856 c:\windows\system32\stobject.dll
    + 2009-01-28 05:07 . 2001-08-23 12:00 138752 c:\windows\system32\sndvol32.exe
    + 2009-01-28 05:07 . 2008-04-14 00:12 131584 c:\windows\system32\sndrec32.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 474112 c:\windows\system32\shlwapi.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 438272 c:\windows\system32\shimgvw.dll
    + 2004-08-03 21:56 . 2008-04-13 17:03 549376 c:\windows\system32\shdoclc.dll
    + 2009-01-28 06:14 . 2009-07-16 22:43 185920 c:\windows\system32\rmoc3260.dll
    - 2009-01-28 06:14 . 2009-02-11 19:04 185920 c:\windows\system32\rmoc3260.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 658432 c:\windows\system32\rasdlg.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 560640 c:\windows\system32\printui.dll
    + 2008-06-10 06:38 . 2009-07-16 22:43 278528 c:\windows\system32\pncrt.dll
    + 2001-08-23 12:00 . 2009-06-16 04:55 395336 c:\windows\system32\perfh009.dat
    + 2004-08-03 21:56 . 2008-04-14 00:12 143360 c:\windows\system32\ntshrui.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 247808 c:\windows\system32\newdev.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 139264 c:\windows\system32\netid.dll
    + 2009-01-28 05:09 . 2008-04-14 00:12 274944 c:\windows\system32\mstask.dll
    + 2009-01-28 05:06 . 2008-04-14 00:12 343040 c:\windows\system32\mspaint.exe
    + 2004-08-03 21:56 . 2008-04-14 00:11 997376 c:\windows\system32\msgina.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 150016 c:\windows\system32\mscorier.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 270848 c:\windows\system32\mscoree.dll
    + 2004-08-03 21:56 . 2008-04-13 16:45 216064 c:\windows\system32\moricons.dll
    + 2009-02-03 02:07 . 2009-02-03 02:07 240544 c:\windows\system32\Macromed\Flash\FlashUtil10b.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 514560 c:\windows\system32\logonui.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 220672 c:\windows\system32\logon.scr
    + 2004-08-03 21:56 . 2008-04-14 00:11 150528 c:\windows\system32\keymgr.dll
    + 2001-08-23 12:00 . 2001-08-23 12:00 110592 c:\windows\system32\inetcplc.dll
    + 2004-08-03 21:56 . 2008-04-14 00:11 144896 c:\windows\system32\hotplug.dll
    + 2004-08-03 21:56 . 2008-04-14 00:11 382976 c:\windows\system32\fontext.dll
    + 2009-01-27 20:59 . 2009-06-28 20:09 458048 c:\windows\system32\FNTCACHE.DAT
    + 2009-07-05 18:48 . 2009-05-11 20:30 547840 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\PCCSWpdDriver.dll
    + 2009-07-05 18:47 . 2009-03-19 21:48 136704 c:\windows\system32\DRVSTORE\nmwcdnsu_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdnsu.sys
    + 2009-07-05 18:47 . 2009-02-09 15:37 659968 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\nmwcdcocls.dll
    + 2009-05-11 20:30 . 2009-05-11 20:30 547840 c:\windows\system32\drivers\umdf\PCCSWpdDriver.dll
    - 2009-02-01 22:12 . 2009-05-25 01:20 296976 c:\windows\system32\drivers\klif.sys
    + 2009-06-26 02:11 . 2009-07-10 01:04 296976 c:\windows\system32\drivers\klif.sys
    + 2009-06-16 14:36 . 2009-06-16 14:36 119808 c:\windows\system32\dllcache\t2embed.dll
    + 2004-05-26 12:37 . 2004-05-26 12:37 719872 c:\windows\system32\devil.dll
    + 2004-08-03 21:56 . 2008-04-14 00:11 163840 c:\windows\system32\credui.dll
    + 2009-06-21 21:43 . 2009-06-21 21:43 294912 c:\windows\system32\config\systemprofile\ntuser.dat
    + 2004-08-03 21:56 . 2008-04-14 00:11 344064 c:\windows\system32\cmdial32.dll
    + 2004-08-03 21:56 . 2008-04-14 00:12 389120 c:\windows\system32\cmd.exe
    + 2009-01-28 05:07 . 2001-08-23 12:00 114688 c:\windows\system32\calc.exe
    + 2008-12-21 21:46 . 2008-12-21 21:46 351744 c:\windows\system32\avisynth.dll
    + 2009-06-04 11:45 . 2009-06-04 11:45 132472 c:\windows\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
    - 2009-04-28 10:24 . 2009-04-28 10:24 114688 c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
    + 2009-06-04 12:15 . 2009-06-04 12:15 114688 c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
    + 2009-06-05 11:38 . 2009-06-05 11:38 468408 c:\windows\system32\Adobe\Shockwave 11\SwHelper_1150600.exe
    + 2009-06-04 12:17 . 2009-06-04 12:17 446464 c:\windows\system32\Adobe\Shockwave 11\Proj.dll
    - 2009-04-28 10:26 . 2009-04-28 10:26 446464 c:\windows\system32\Adobe\Shockwave 11\Proj.dll
    + 2009-06-04 12:16 . 2009-06-04 12:16 372736 c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
    - 2009-04-28 10:24 . 2009-04-28 10:24 372736 c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
    + 2009-06-05 11:34 . 2009-06-05 11:34 714752 c:\windows\system32\Adobe\Shockwave 11\gi.dll
    - 2009-04-28 10:26 . 2009-04-28 10:26 614400 c:\windows\system32\Adobe\Shockwave 11\Control.dll
    + 2009-06-04 12:15 . 2009-06-04 12:15 614400 c:\windows\system32\Adobe\Shockwave 11\Control.dll
    + 2009-06-05 11:38 . 2009-06-05 11:38 202168 c:\windows\system32\Adobe\Director\SwDir.dll
    - 2009-04-29 10:29 . 2009-04-29 10:29 202168 c:\windows\system32\Adobe\Director\SwDir.dll
    - 2009-04-28 10:25 . 2009-04-28 10:25 131072 c:\windows\system32\Adobe\Director\np32dsw.dll
    + 2009-06-04 12:17 . 2009-06-04 12:17 131072 c:\windows\system32\Adobe\Director\np32dsw.dll
    + 2009-02-02 11:43 . 2004-07-17 08:41 366080 c:\windows\ServicePackFiles\i386\digreqex.msi
    + 2009-02-02 11:43 . 2004-07-17 08:41 863232 c:\windows\ServicePackFiles\i386\digopt.msi
    + 2004-08-03 21:56 . 2008-04-14 00:12 146432 c:\windows\regedit.exe
    + 2009-01-28 05:09 . 2008-04-14 00:12 769024 c:\windows\pchealth\helpctr\binaries\helpctr.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 298496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 823296 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 260096 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 299008 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 368640 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 700416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 397312 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 884736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 716800 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 482304 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 389120 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 377344 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 107520 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 136192 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 226816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 330752 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 102400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 326144 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 288768 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 800768 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 667648 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 647168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 413696 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
    + 2005-09-23 14:57 . 2005-09-23 14:57 245408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll
    + 2005-09-23 14:01 . 2005-09-23 14:01 609472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 224952 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 788992 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 547840 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 503808 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 138240 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 208896 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 183808 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 136192 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
    + 2009-01-28 05:33 . 2009-01-28 05:33 390656 c:\windows\Installer\e72d0.msi
    + 2009-02-01 05:57 . 2009-02-01 05:57 500224 c:\windows\Installer\af8123.msi
    + 2009-02-01 05:57 . 2009-02-01 05:57 514560 c:\windows\Installer\af811b.msi
    + 2009-02-01 05:57 . 2009-02-01 05:57 506880 c:\windows\Installer\af8114.msi
    + 2009-02-01 05:56 . 2009-02-01 05:56 516608 c:\windows\Installer\af810c.msi
    + 2009-02-01 05:56 . 2009-02-01 05:56 500736 c:\windows\Installer\af80fe.msi
    + 2009-04-29 11:53 . 2009-04-29 11:53 803328 c:\windows\Installer\91aa3e.msi
    + 2007-10-15 06:44 . 2007-10-15 06:44 324608 c:\windows\Installer\872aebd.msp
    + 2007-10-13 02:51 . 2007-10-13 02:51 965632 c:\windows\Installer\872aeb5.msp
    + 2009-01-28 06:10 . 2009-01-28 06:10 164352 c:\windows\Installer\7c31e.msi
    + 2009-04-17 14:59 . 2009-04-17 14:59 331264 c:\windows\Installer\6a4f11f.msi
    + 2009-01-29 14:25 . 2009-01-29 14:25 163840 c:\windows\Installer\42b415e.msi
    + 2008-01-23 23:45 . 2008-01-23 23:45 738816 c:\windows\Installer\3c5e05.msp
    + 2009-03-19 10:40 . 2009-03-19 10:40 876032 c:\windows\Installer\3505669.msi
    + 2009-03-19 10:39 . 2009-03-19 10:39 140288 c:\windows\Installer\3505601.msi
    + 2009-03-19 10:39 . 2009-03-19 10:39 202752 c:\windows\Installer\35055f9.msi
    + 2009-03-19 10:39 . 2009-03-19 10:39 107008 c:\windows\Installer\35055e4.msi
    + 2009-03-19 10:38 . 2009-03-19 10:38 301056 c:\windows\Installer\35055dd.msi
    + 2009-05-28 07:11 . 2009-05-28 07:11 164352 c:\windows\Installer\30140e.msi
    + 2009-06-26 00:27 . 2009-06-26 00:27 139264 c:\windows\Installer\1fe645.msi
    + 2009-02-02 09:50 . 2009-02-02 09:50 432640 c:\windows\Installer\1d5218f.msi
    + 2009-01-28 05:19 . 2009-01-28 05:19 264704 c:\windows\Installer\1aaa8.msi
    + 2009-07-05 18:49 . 2009-07-05 18:49 879104 c:\windows\Installer\18f4f19.msi
    + 2009-07-05 18:48 . 2009-07-05 18:48 549888 c:\windows\Installer\18f4e70.msi
    + 2009-07-05 18:48 . 2009-07-05 18:48 331264 c:\windows\Installer\18f4e38.msi
    + 2009-05-27 01:53 . 2009-05-27 01:53 579072 c:\windows\Installer\137167e.msp
    + 2009-03-18 14:34 . 2009-03-18 14:34 562176 c:\windows\Installer\132a215.msi
    + 2009-02-01 06:00 . 2009-07-16 11:08 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    + 2009-07-14 21:16 . 2009-07-14 21:16 680448 c:\windows\Installer\{4761EB82-E8BD-45A4-B19B-586FA9D1D7E6}\IconEF5C48881.exe
    + 2009-05-05 15:04 . 2009-05-05 15:04 350296 c:\windows\Downloaded Installations\Virtual Desktop Manager Powertoy for Windows XP.msi
    + 2009-06-16 05:50 . 2009-06-16 05:50 237568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\71807505c74eac4393a8c74c484d77c7\System.Web.RegularExpressions.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 684032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\af4b7bef24878c469098d6c90c278dc1\System.Transactions.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\f4a5a0f71adea34fae6a5f78195d7926\System.Security.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7d177e5501cdd04d95a92de4fe906739\System.EnterpriseServices.Wrapper.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 659456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\7d177e5501cdd04d95a92de4fe906739\System.EnterpriseServices.ni.dll
    + 2009-06-16 04:54 . 2009-06-16 04:54 229376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\4b8c39569cec0545adb73b6e048936d5\System.Drawing.Design.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 512000 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\6c8dd4f4f9d81a4d9a419b211c269042\System.DirectoryServices.Protocols.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 962560 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\1d279596e6cd1047ab1a741946eec271\System.Configuration.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\c1820aee576ce247ad077119f2a42ff2\Microsoft.Build.Utilities.ni.dll
    + 2009-06-16 05:48 . 2009-06-16 05:48 880640 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\984d62da05aab64d971f52cab2c74cff\Microsoft.Build.Engine.ni.dll
    + 2009-06-16 05:48 . 2009-06-16 05:48 237568 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\1d56aff8b93b4e49a55914cc37b23ff9\CustomMarshalers.ni.dll
    + 2009-06-16 05:48 . 2009-06-16 05:48 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\221811dd7cd77f45a80b3f8ef47a3569\AspNetMMCExt.ni.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 823296 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 299008 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 368640 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 700416 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 397312 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 884736 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 716800 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 389120 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 667648 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 745472 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 647168 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 413696 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 503808 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 260096 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 114176 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 482304 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
    + 2004-08-03 21:56 . 2008-04-13 17:39 2897920 c:\windows\system32\xpsp2res.dll
    + 2004-07-17 08:35 . 2004-07-17 08:35 1326080 c:\windows\system32\webfldrs.msi
    + 2004-08-03 21:56 . 2008-04-14 00:12 1703936 c:\windows\system32\netshell.dll
    + 2009-01-28 05:06 . 2008-04-14 00:11 2061824 c:\windows\system32\mstscax.dll
    - 2003-03-19 04:20 . 2003-03-19 04:20 1060864 c:\windows\system32\mfc71.dll
    + 2008-02-25 08:26 . 2008-02-25 08:26 1060864 c:\windows\system32\MFC71.dll
    + 2001-09-06 04:00 . 2001-09-06 04:00 1700352 c:\windows\system32\gdiplus.dll
    + 2009-07-05 18:48 . 2009-05-11 19:47 1302600 c:\windows\system32\DRVSTORE\pccswpddri_1C34ED6F4888FC93BE68C7A31A24834F522D3CBF\WUDFUpdate_01007.dll
    + 2009-07-05 18:47 . 2009-02-09 15:32 1112288 c:\windows\system32\DRVSTORE\ccdcmb_34CB4225E6E4893AE1D3E4443E91C2B9703B729C\wdfcoinstaller01007.dll
    + 2008-05-07 05:12 . 2009-06-03 19:09 1291264 c:\windows\system32\dllcache\quartz.dll
    + 2004-08-03 21:56 . 2008-04-14 00:11 1025024 c:\windows\system32\browseui.dll
    - 2009-04-28 10:00 . 2009-04-28 10:00 1011712 c:\windows\system32\Adobe\Shockwave 11\iml32.dll
    + 2009-06-04 11:51 . 2009-06-04 11:51 1011712 c:\windows\system32\Adobe\Shockwave 11\iml32.dll
    + 2009-06-04 11:45 . 2009-06-04 11:45 1886320 c:\windows\system32\Adobe\Shockwave 11\gt.exe
    - 2009-04-28 10:04 . 2009-04-28 10:04 1798144 c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
    + 2009-06-04 11:55 . 2009-06-04 11:55 1798144 c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
    + 2009-02-02 11:43 . 2004-07-17 08:35 1326080 c:\windows\ServicePackFiles\i386\webfldrs.msi
    + 2009-02-02 11:43 . 2004-07-17 08:41 5080576 c:\windows\ServicePackFiles\i386\msnmsgs.msi
    + 2005-09-23 14:28 . 2005-09-23 14:28 1306624 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
    + 2005-09-23 14:29 . 2005-09-23 14:29 1140920 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
    + 2005-09-23 14:28 . 2005-09-23 14:28 2035712 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 5316608 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 3018752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 5050368 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 2878976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 5615616 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 4308992 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
    + 2005-09-23 14:28 . 2005-09-23 14:28 1144832 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
    + 2009-02-03 05:47 . 2009-02-03 05:47 2239488 c:\windows\Installer\bd8d09.msi
    + 2009-02-01 05:57 . 2009-02-01 05:57 1637888 c:\windows\Installer\af813f.msi
    + 2009-02-01 05:57 . 2009-02-01 05:57 1652224 c:\windows\Installer\af8138.msi
    + 2009-02-01 05:57 . 2009-02-01 05:57 1653248 c:\windows\Installer\af8131.msi
    + 2009-02-01 05:57 . 2009-02-01 05:57 1638400 c:\windows\Installer\af812a.msi
    + 2009-02-01 05:56 . 2009-02-01 05:56 2325504 c:\windows\Installer\af8105.msi
    + 2009-02-01 05:56 . 2009-02-01 05:56 1647616 c:\windows\Installer\af80f7.msi
    + 2009-02-01 05:56 . 2009-02-01 05:56 2397184 c:\windows\Installer\af80f0.msi
    + 2009-02-01 05:56 . 2009-02-01 05:56 1640448 c:\windows\Installer\af80d6.msi
    + 2009-02-01 05:56 . 2009-02-01 05:56 2021888 c:\windows\Installer\af80cf.msi
    + 2009-02-01 05:55 . 2009-02-01 05:55 1745408 c:\windows\Installer\af80c8.msi
    + 2009-02-01 05:55 . 2009-02-01 05:55 2393600 c:\windows\Installer\af80c0.msi
    + 2009-03-28 16:50 . 2009-03-28 16:50 5025792 c:\windows\Installer\919bc.msp
    + 2007-10-15 06:43 . 2007-10-15 06:43 5749760 c:\windows\Installer\872ae37.msp
    + 2008-02-15 15:54 . 2008-02-15 15:54 9736192 c:\windows\Installer\8538cc1.msp
    + 2007-03-31 05:20 . 2007-03-31 05:20 5800960 c:\windows\Installer\8538c79.msp
    + 2008-04-12 01:08 . 2008-04-12 01:08 6302720 c:\windows\Installer\8538c17.msp
    + 2008-04-12 01:48 . 2008-04-12 01:48 6774272 c:\windows\Installer\8538be3.msp
    + 2008-05-21 07:45 . 2008-05-21 07:45 5246976 c:\windows\Installer\8538bc9.msp
    + 2009-02-07 06:31 . 2009-02-07 06:31 5047808 c:\windows\Installer\8538b82.msp
    + 2007-06-01 22:54 . 2007-06-01 22:54 9626624 c:\windows\Installer\8538b6a.msp
    + 2008-10-20 17:18 . 2008-10-20 17:18 6474240 c:\windows\Installer\8538b52.msp
    + 2009-01-28 06:17 . 2009-01-28 06:17 1771008 c:\windows\Installer\7c325.msi
    + 2009-01-28 06:09 . 2009-01-28 06:09 1480704 c:\windows\Installer\7c317.msi
    + 2009-01-28 06:06 . 2009-01-28 06:06 8584192 c:\windows\Installer\7c30b.msi
    + 2009-03-18 10:52 . 2009-03-18 10:52 2918400 c:\windows\Installer\6527b7.msi
    + 2009-04-17 11:06 . 2009-04-17 11:06 1267712 c:\windows\Installer\5cf85cc.msi
    + 2009-05-27 01:54 . 2009-05-27 01:54 4192768 c:\windows\Installer\59ab5.msp
    + 2009-07-02 23:23 . 2009-07-02 23:23 5027328 c:\windows\Installer\59a98.msp
    + 2008-01-14 23:53 . 2008-01-14 23:53 5213696 c:\windows\Installer\3c5e2c.msp
    + 2008-10-25 16:15 . 2008-10-25 16:15 6227456 c:\windows\Installer\3c5e1f.msp
    + 2009-06-26 02:15 . 2009-06-26 02:15 3173376 c:\windows\Installer\3485fe.msi
    + 2009-04-26 09:25 . 2009-04-26 09:25 4852224 c:\windows\Installer\21ffd5e.msi
    + 2009-06-16 04:53 . 2009-06-16 04:53 2109440 c:\windows\Installer\1c9fc3d.msi
    + 2009-04-24 19:28 . 2009-04-24 19:28 4450816 c:\windows\Installer\1a605ef.msp
    + 2009-05-17 22:22 . 2009-05-17 22:22 1985024 c:\windows\Installer\190487b.msi
    + 2009-05-04 14:46 . 2009-05-04 14:46 8299008 c:\windows\Installer\13716e2.msp
    + 2009-05-04 14:47 . 2009-05-04 14:47 9124864 c:\windows\Installer\13716c9.msp
    + 2009-04-24 19:30 . 2009-04-24 19:30 2583552 c:\windows\Installer\13716b0.msp
    + 2009-05-07 16:17 . 2009-05-07 16:17 5026816 c:\windows\Installer\1371696.msp
    + 2009-04-24 19:29 . 2009-04-24 19:29 9013760 c:\windows\Installer\1371666.msp
    + 2009-02-01 06:00 . 2009-07-16 11:08 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    + 2009-02-01 06:00 . 2009-07-16 11:08 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    - 2009-02-01 06:00 . 2009-06-13 18:32 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-07-14 21:16 . 2009-07-14 21:16 1653248 c:\windows\Installer\{4761EB82-E8BD-45A4-B19B-586FA9D1D7E6}\IconEF5C48883.exe
    + 2004-08-03 21:56 . 2008-04-14 00:12 1033728 c:\windows\explorer.exe
    + 2009-06-16 04:54 . 2009-06-16 04:54 8093696 c:\windows\assembly\NativeImages_v2.0.50727_32\System\0a4e71a431e44b40a735da1c93a50261\System.ni.dll
    + 2009-06-16 04:54 . 2009-06-16 04:54 5640192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\e423d10f22ea0745a2e16f83dba8b2fc\System.Xml.ni.dll
    + 2009-06-16 05:50 . 2009-06-16 05:50 1945600 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\b55ddbd9ea574c4f8c86490d738fdd4a\System.Web.Services.ni.dll
    + 2009-06-16 05:50 . 2009-06-16 05:50 2310144 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\71f85735231fa341b623dab3441acb01\System.Web.Mobile.ni.dll
    + 2009-06-16 04:54 . 2009-06-16 04:54 1626112 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\90ccbd9917a00a4ba0aeff78b202e04c\System.Drawing.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 1220608 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\20a662a61b4bdf47b35f60d5c3a4cea8\System.DirectoryServices.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\9533ea4a975882488c75825a4801890d\System.Deployment.ni.dll
    + 2009-06-16 04:54 . 2009-06-16 04:54 6688768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\0760a4a1e4f17f469c9c2a2eb07697f3\System.Data.ni.dll
    + 2009-06-16 05:49 . 2009-06-16 05:49 1724416 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\60aae4e3fde4bf428c04cbd00994b864\Microsoft.VisualBasic.ni.dll
    + 2009-06-16 05:48 . 2009-06-16 05:48 1691648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\6e294fb33d64c8428d27bb81d2d76d4a\Microsoft.Build.Tasks.ni.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 3018752 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 2035712 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 5316608 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 5050368 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 5025792 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 2878976 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 4308992 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
    + 2009-02-02 09:56 . 2009-07-07 15:10 24539592 c:\windows\system32\MRT.exe
    + 2005-09-23 14:48 . 2005-09-23 14:48 24863744 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\netfx.msi
    + 2009-02-01 06:00 . 2009-02-01 06:00 18181632 c:\windows\Installer\af8147.msi
    + 2009-07-14 21:16 . 2009-07-14 21:16 10134016 c:\windows\Installer\94007e4.msi
    + 2007-10-13 02:51 . 2007-10-13 02:51 16764416 c:\windows\Installer\872ae6f.msp
    + 2007-10-13 02:51 . 2007-10-13 02:51 12220416 c:\windows\Installer\872ae5f.msp
    + 2007-10-15 06:43 . 2007-10-15 06:43 12743168 c:\windows\Installer\872ae4b.msp
    + 2007-10-15 06:43 . 2007-10-15 06:43 21981184 c:\windows\Installer\872ae2d.msp
    + 2008-10-20 17:22 . 2008-10-20 17:22 11758592 c:\windows\Installer\8538caa.msp
    + 2008-10-20 17:21 . 2008-10-20 17:21 11937280 c:\windows\Installer\8538c92.msp
    + 2008-08-11 18:51 . 2008-08-11 18:51 15916544 c:\windows\Installer\8538c61.msp
    + 2008-10-20 17:16 . 2008-10-20 17:16 13211648 c:\windows\Installer\8538c49.msp
    + 2008-08-11 18:49 . 2008-08-11 18:49 22457344 c:\windows\Installer\8538c2f.msp
    + 2008-09-24 19:05 . 2008-09-24 19:05 16381440 c:\windows\Installer\8538bfb.msp
    + 2008-05-21 08:30 . 2008-05-21 08:30 14308864 c:\windows\Installer\8538bac.msp
    + 2008-07-30 15:50 . 2008-07-30 15:50 12506112 c:\windows\Installer\3c5e48.msp
    + 2008-06-04 20:29 . 2008-06-04 20:29 16905728 c:\windows\Installer\3c5e3a.msp
    + 2008-01-14 22:24 . 2008-01-14 22:24 10721280 c:\windows\Installer\3c5e12.msp
    + 2009-02-26 02:05 . 2009-02-26 02:05 11840000 c:\windows\Installer\2bce968.msp
    + 2009-02-26 02:07 . 2009-02-26 02:07 11646464 c:\windows\Installer\2bce950.msp
    + 2009-05-04 14:49 . 2009-05-04 14:49 10955776 c:\windows\Installer\105041.msp
    + 2009-06-16 04:54 . 2009-06-16 04:54 13107200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ab1bf13c65cce24b90719c603255fbba\System.Windows.Forms.ni.dll
    + 2009-06-16 05:50 . 2009-06-16 05:50 11808768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\8a1872941608f14eb552132af4db7958\System.Web.ni.dll
    + 2009-06-16 04:55 . 2009-06-16 04:55 10723328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\39a7cec094be544db68b04d078544f2b\System.Design.ni.dll
    + 2009-06-16 04:53 . 2009-06-16 04:53 11415552 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\55f762a526c6984ba2672894315a7d60\mscorlib.ni.dll
    + 2007-07-27 15:10 . 2007-07-27 15:10 108331008 c:\windows\Installer\872af52.msp
    + 2007-10-15 06:43 . 2007-10-15 06:43 229852160 c:\windows\Installer\872ae24.msp
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "SynchronousMachineGroupPolicy"= 0 (0x0)
    "SynchronousUserGroupPolicy"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
    backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Exif Launcher S.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Exif Launcher S.lnk
    backup=c:\windows\pss\Exif Launcher S.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^SnagIt 9.lnk]
    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\SnagIt 9.lnk
    backup=c:\windows\pss\SnagIt 9.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^الشبكه^Start Menu^Programs^Startup^IDMan.exe.lnk]
    path=c:\documents and settings\الشبكه\Start Menu\Programs\Startup\IDMan.exe.lnk
    backup=c:\windows\pss\IDMan.exe.lnkStartup

    [HKLM\~\startupfolder\C:^Documents and Settings^الشبكه^Start Menu^Programs^Startup^RocketDock.lnk]
    path=c:\documents and settings\الشبكه\Start Menu\Programs\Startup\RocketDock.lnk
    backup=c:\windows\pss\RocketDock.lnkStartup

    [HKLM\~\startupfolder\C:^Documents and Settings^الشبكه^Start Menu^Programs^Startup^TransBar.lnk]
    path=c:\documents and settings\الشبكه\Start Menu\Programs\Startup\TransBar.lnk
    backup=c:\windows\pss\TransBar.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusOverride"=dword:00000001
    "FirewallOverride"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"=
    "c:\\Program Files\\Messenger\\msmsgs.exe"=
    "c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
    "c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
    "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "c:\\Program Files\\Internet Download Manager\\IDMan.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "3389:TCP"= 3389:TCP:angry:xpsp2res.dll,-22009

    R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [15/12/2008 08:41 م 33808]
    R2 hypervisor;Parallels Hypervisor;c:\windows\system32\drivers\hypervisor.sys [03/07/2009 09:31 م 51712]
    R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [17/07/2009 02:29 ص 211216]
    R2 PRLDHCP;Parallels DHCP Service for Virtual NIC;c:\program files\Parallels\Parallels Workstation\PRLDHCP.exe [03/07/2009 09:31 م 32768]
    R2 pvs;Parallels Kernel Driver;c:\windows\system32\drivers\pvs.sys [03/07/2009 09:31 م 28800]
    R2 pvsnet;Parallels Network Driver;c:\windows\system32\drivers\pvsnet.sys [03/07/2009 09:32 م 12310]
    R2 pvspth;Parallels Passthrough Driver;c:\windows\system32\drivers\pvspth.sys [03/07/2009 09:31 م 13344]
    R2 pvsum;Parallels USB Manager;c:\windows\system32\drivers\PvsUM.sys [03/07/2009 09:31 م 8320]
    R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [13/05/2009 05:46 م 31760]
    R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [16/05/2009 08:59 م 19472]
    R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [17/07/2009 02:29 ص 19096]
    S3 PVSVNIC;Parallels Virtual NIC Driver;c:\windows\system32\drivers\pvsvnic.sys [03/07/2009 09:29 م 4412]

    --- Other Services/Drivers In Memory ---

    *Deregistered* - uphcleanhlp
    .
    Contents of the 'Scheduled Tasks' folder

    2009-07-17 c:\windows\Tasks\OGADaily.job
    - c:\windows\system32\OGAVerify.exe [2009-01-01 00:04]

    2009-07-17 c:\windows\Tasks\OGALogon.job
    - c:\windows\system32\OGAVerify.exe [2009-01-01 00:04]
    .
    - - - - ORPHANS REMOVED - - - -

    WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
    WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)


    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com/
    mStart Page = about:blank
    uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
    IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    IE: تحميل الكل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetAll.htm
    IE: تحميل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEExt.htm
    IE: تحميل محتوى FLV بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetVL.htm
    FF - ProfilePath - c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\
    FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1654009&SearchSource=3&q=
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.sa/
    FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
    FF - component: c:\documents and settings\الشبكه\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
    FF - component: c:\documents and settings\الشبكه\Application Data\Mozilla\Firefox\Profiles\kvkuets8.default\extensions\firedownload@mozilla.org\components\firedownload.dll
    FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
    FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll

    ---- FIREFOX POLICIES ----
    user_pref('capability.policy.policynames', 'localfilelinks');user_pref('capability.policy.localfilelinks.sites', 'hxxp://www.webmynd.com http://www.google.com');user_pref('capability.policy.localfilelinks.checkloaduri.enabled', 'allAccess');c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
    c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-07-17 04:33
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...


    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-746137067-963894560-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*c*t*t* \OpenWithList]
    @Class="Shell"
    "a"="msnmsgr.exe"
    "MRUList"="a"

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{36a08edf-18bb-4d10-894e-78d505cbd85d}]
    @Denied: (Full) (Everyone)
    "Model"=dword:00000075
    "Therad"=dword:00000015
    "MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
    38,95,44,85,b1,12,f9,90,dd,23,a1,49,8c,bf,1a,9d,fe,41,71,cb,3f,46,a4,7c,ab,\

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{3af545be-cb5b-4677-a51c-293290fe72b3}]
    @Denied: (Full) (Everyone)
    "Model"=dword:00000070
    "Therad"=dword:0000001d

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
    @Denied: (Full) (Everyone)
    "scansk"=hex(0):d1,a9,7e,8d,cc,6e,46,0e,de,3f,a3,16,f0,7f,93,c7,9c,b2,4f,86,56,
    df,ac,2b,68,d3,6a,12,a0,d7,7d,b5,c7,0a,46,5e,a7,a7,64,32,00,00,00,00,00,00,\

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
    @Denied: (Full) (Everyone)
    "scansk"=hex(0):d6,b7,aa,db,a4,9d,e2,c0,5c,cd,38,8c,07,cf,bc,97,44,c5,18,15,54,
    f1,86,63,f5,71,04,99,01,9a,46,34,0e,29,0b,97,ea,6b,e0,aa,00,00,00,00,00,00,\
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    c:\program files\UPHClean\uphclean.exe
    c:\program files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
    c:\program files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
    .
    **************************************************************************
    .
    Completion time: 2009-07-17 4:36 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-07-17 11:35
    ComboFix2.txt 2009-06-13 20:14

    Pre-Run: 16,853,766,144 bytes free
    Post-Run: 16,695,201,792 bytes free

    907 --- E O F --- 2009-07-16 11:08


    وشكراً


    :king:
     
  11. Corporation

    Corporation زيزوومى فضى

    إنضم إلينا في:
    ‏نوفمبر 12, 2008
    المشاركات:
    5,514
    الإعجابات :
    312
    نقاط الجائزة:
    870
    الجنس:
    ذكر
    الإقامة:
    ٍف القبـر ، دعواتكم بعفو الله وكرمه
    برامج الحماية:
    COMODO
    نظام التشغيل:
    Windows 7
    أخوي من run

    أكتب msconfig

    ومن على خيار boot من الأعلى صور لي الرسالة ..

    +

    تقرير هايجاك جديد ..​
     
  12. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    تفضل يالغالي
    [​IMG]

    وهذا تقرير الهايجاك

    تفضل

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 04:45:51 م, on 17/07/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\Program Files\Parallels\Parallels Workstation\PRLDHCP.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\UPHClean\uphclean.exe
    C:\Program Files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
    C:\Program Files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Internet Download Manager\IDMan.exe
    C:\Program Files\Internet Download Manager\IEMonitor.exe
    C:\Program Files\TechSmith\SnagIt 9\SnagIt32.exe
    C:\Program Files\TechSmith\SnagIt 9\TSCHelp.exe
    C:\Program Files\TechSmith\SnagIt 9\SnagPriv.exe
    C:\Program Files\TechSmith\SnagIt 9\snagiteditor.exe
    C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
    C:\Documents and Settings\الشبكه\Desktop\البرامج\Zyzoom.org_Tool_V_1.0.exe
    C:\DOCUME~1\CA17~1\LOCALS~1\Temp\zyaoom Tool\Hijack.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
    O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 9\SnagItBHO.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 9\SnagItIEAddin.dll
    O4 - HKLM\..\Run: [avp] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
    O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
    O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetVL.htm
    O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
    O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {E001C731-5E37-4538-A5CB-8168736A2360} (ActiveQscan Control) - http://quickscan.bitdefender.com/cab/ActiveQscan.cab
    O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    O23 - Service: Parallels DHCP Service for Virtual NIC (PRLDHCP) - Parallels Software International, Inc. - C:\Program Files\Parallels\Parallels Workstation\PRLDHCP.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    O23 - Service: WUSB54GCSVC - GEMTEKS - C:\Program Files\Linksys\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe

    --
    End of file - 7283 bytes

     
  13. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
  14. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    ::.لا اله الا أنت سبحانك اني كنت من الظالمين.::
     
  15. دويتو غريب

    دويتو غريب زيزوومى مميز

    إنضم إلينا في:
    ‏أغسطس 25, 2008
    المشاركات:
    528
    الإعجابات :
    0
    نقاط الجائزة:
    520
    الإقامة:
    يبي
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows XP
    رفع لعيونك :)
     
  16. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    ^^^
    تسلم يالغالي

    _ __ _ __ _ __ _ __ _ __ _ __ _ __ __ _


    ولكن هل من حل للمشكلة يالغوالي .؟؟
     
  17. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    up up up up up up
    up up up up
    upup up
    up up
    up
    up
     
  18. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    o0o للرفع o0o
    o0o

    o0o

    o0o

    o0o

     
  19. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    o0oo0oo0oo0oo0oo0o0o


     
  20. (مجرد انسان)

    (مجرد انسان) زيزوومى محترف

    إنضم إلينا في:
    ‏نوفمبر 14, 2008
    المشاركات:
    2,025
    الإعجابات :
    28
    نقاط الجائزة:
    730
    الإقامة:
    ALKHARJ City ^^
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7

مشاركة هذه الصفحة

جاري تحميل الصفحة...