Viper Paintball

Updated Antivir during the night Everything seems to be fine now. Thank you SO VERY MUCH for all of the help!

No worries about the online scan. This connection jst drives me bonkers sometimes. However, I appreciate ALL of the help and will suffer through whatever is necessary. AntiVir installed Text of checkup.txt Results of screen317's Security Check version 0.99.2 Windows XP Service Pack 3 Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Enabled! Avira AntiVir Personal - Free Antivirus Antivirus out of date! ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware HijackThis 2.0.2 Java 6 Update 18 Adobe Flash Player 10 ```````````````````````````````` Process Check: objlist.exe by Laurent Malwarebytes' Anti-Malware mbamservice.exe Malwarebytes' Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe ```````````````````````````````` DNS Vulnerability Check: GREAT! (Not vulnerable to DNS cache poisoning) ``````````End of Log````````````

Just mbam and Spybot S&D

Well, I can now access antivirus websites like Malwarebytes.or, and I can update mbam normally. Looks like there's light at the end of the tunnel! Here is the checkup log after re enabling security Results of screen317's Security Check version 0.99.1 Windows XP Service Pack 3 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Enabled! WMIC entry does not exist for antivirus; attempting automatic update. `````````````````````````````` Anti-malware/Other Utilities Check: Spybot - Search & Destroy HijackThis 2.0.2 Java 6 Update 18 Java Auto Updater Out of date Java installed! Adobe Flash Player 10 `````````````````````````````` Process Check: objlist.exe by Laurent Malwarebytes' Anti-Malware mbamservice.exe Malwarebytes' Anti-Malware mbamgui.exe `````````````````````````````` DNS Vulnerability Check: Request Timed Out (Wireless Internet connection/Disconnected Internet/Proxy?) `````````End of Log```````````

Oh...and I'm re enabling the firewall and antivirus.

Finally! (Whew!) Scanning Report Saturday, March 20, 2010 15:28:34 - 15:49:01 Computer name: PAMMAIN Scanning type: Scan system for malware, spyware and rootkits Target: C:\ 1 malware found Worm:W32/Downadup.gen!A (spyware) * System (Disinfected) Statistics Scanned: * Files: 48829 * System: 2890 * Not scanned: 8 Actions: * Disinfected: 1 * Renamed: 0 * Deleted: 0 * Not cleaned: 0 * Submitted: 0 Files not scanned: * C:\PAGEFILE.SYS * C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT * C:\WINDOWS\SYSTEM32\CONFIG\SAM * C:\WINDOWS\SYSTEM32\CONFIG\SECURITY * C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE * C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM * C:\DOCUMENTS AND SETTINGS\PAM\LOCAL SETTINGS\TEMP\HSPERFDATA_PAM\3732 * C:\DOCUMENTS AND SETTINGS\PAM\LOCAL SETTINGS\TEMP\HSPERFDATA_PAM\2848 Options Scanning engines: Scanning options: * Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML XXX ANI AVB BAT CMD JOB LSP MAP MHT MIF PHP POT SWF WMF NWS TAR * Use advanced heuristics Copyright

I don't know if the firewall caused the issue, but the scan is running and I've turned the firewall off for now.

OMG! The scan finished, I chose "Automatic cleaning (recommended)" and then it errored out! AAARRGGGHHH!! It claimed it didn't have access to repair the files. Running it again now. I can totally understand how people get upset and put a bullet through their computers!

It's scanning! Hurray!!!!

Well...I made it to 86% that time Sometimes I HATE living in the sticks! Trying again....

Well the weather has cleared up and we may make it after all. It's at 68%.

Okay I'm on an aircard in a rural area and the weather is horrible right now. The online scan has timed out about 10 times, and never made it past 54% of the download. Is there ANY other option we can use, or do I just need to wait until the Internet connection is faster/stronger?

Scan failed during the night. I fell asleep. Running it again. Sorry for the delay. Will post when finished. In the meantime here are the files you requested. ComboFix2.txt ComboFix3.txt ComboFix4.txt ComboFix5.txt _euetjw_.dll.zip

Hopefully this is okay. I went ahead and submitted the file while I'm waiting for the online scan to finish it's downloading.

No, it didn't prompt for an upload. I will do the rest as you directed and post shortly. Thank you, SO much, for your help so far!

As you directed... ComboFix 10-03-19.06 - Pam 03/20/2010 0:53.6.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1791.1218 [GMT -5:00] Running from: c:\documents and settings\Pam\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Pam\Desktop\CFScript.txt file zipped: c:\windows\system32\euetjw.dll . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\euetjw.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_DSDEEIXO -------\Service_dsdeeixo ((((((((((((((((((((((((( Files Created from 2010-02-20 to 2010-03-20 ))))))))))))))))))))))))))))))) . 2010-03-19 20:24 . 2006-06-28 16:38 105088 ----a-r- c:\windows\system32\drivers\nvata_2.sys 2010-03-19 19:54 . 2010-03-19 19:54 552 ----a-w- c:\windows\system32\d3d8caps.dat 2010-03-19 19:53 . 2010-03-19 19:54 664 ----a-w- c:\windows\system32\d3d9caps.dat 2010-03-19 19:45 . 2010-01-07 21:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-03-19 19:45 . 2010-03-19 19:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-03-19 19:45 . 2010-01-07 21:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-03-19 19:07 . 2010-03-19 19:07 -------- d-----w- c:\windows\system32\wbem\Repository 2010-03-19 18:20 . 2010-03-19 19:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware(2) 2010-03-19 17:54 . 2010-03-19 17:54 -------- d-----w- c:\windows\system32\LogFiles 2010-03-19 17:08 . 2010-03-19 20:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2010-03-19 17:08 . 2010-03-19 20:09 -------- d-----w- c:\program files\Spybot - Search & Destroy 2010-03-13 00:36 . 2010-03-13 00:36 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Intuit 2010-03-11 20:18 . 2010-03-11 20:18 1687 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\qbbackup.sys 2010-03-10 09:30 . 2010-03-10 09:30 975136 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\qbpatch2.exe 2010-03-10 09:30 . 2010-03-10 09:30 44832 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\qbpatch.exe 2010-03-10 09:30 . 2010-03-10 09:30 499712 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\msvcp71.dll 2010-03-10 09:30 . 2010-03-10 09:30 348160 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\msvcr71.dll 2010-03-09 22:12 . 2010-03-09 22:12 -------- d-----w- C:\Viper Books 2010-03-09 21:47 . 2010-03-09 21:47 -------- d-----w- c:\documents and settings\Pam\Local Settings\Application Data\Intuit 2010-03-09 21:37 . 2009-06-22 15:14 4194304 ----a-w- c:\windows\system32\cdintf400.dll 2010-03-09 21:33 . 2010-03-13 00:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Intuit 2010-03-09 21:33 . 2010-03-09 21:34 -------- d-----w- c:\program files\Common Files\Intuit 2010-03-09 21:33 . 2010-03-09 21:33 -------- d-----w- c:\program files\Intuit 2010-03-09 21:33 . 2010-03-09 21:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Nuance 2010-03-09 21:33 . 2010-03-09 22:12 -------- d-----w- c:\documents and settings\All Users\Application Data\SQL Anywhere 11 2010-03-09 21:33 . 2010-03-09 21:33 -------- d-----w- c:\documents and settings\All Users\Application Data\COMMON FILES 2010-03-09 21:32 . 2010-03-09 21:32 -------- d-----w- c:\program files\MSXML 4.0 2010-03-09 21:28 . 2010-03-09 21:28 -------- d-----w- c:\windows\Intuit 2010-02-24 05:21 . 2010-02-24 05:21 -------- d-----w- c:\windows\Sun . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-03-19 19:12 . 2010-03-19 19:12 4526 ----a-w- c:\windows\system32\PerfStringBackup.TMP 2010-03-09 21:53 . 2009-12-11 00:59 21976 ----a-w- c:\documents and settings\Pam\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-02-11 17:30 . 2010-02-11 17:30 -------- d-----w- c:\program files\Common Files\Java 2010-02-11 17:30 . 2010-02-11 17:30 503808 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6bccd7a8-n\msvcp71.dll 2010-02-11 17:30 . 2010-02-11 17:30 499712 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6bccd7a8-n\jmc.dll 2010-02-11 17:30 . 2010-02-11 17:30 348160 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6bccd7a8-n\msvcr71.dll 2010-02-11 17:28 . 2010-02-11 17:28 61440 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-11b5169c-n\decora-sse.dll 2010-02-11 17:28 . 2010-02-11 17:28 12800 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-11b5169c-n\decora-d3d.dll 2010-02-11 17:27 . 2010-02-11 17:28 411368 ----a-w- c:\windows\system32\deploytk.dll 2010-02-11 17:27 . 2010-02-11 17:27 -------- d-----w- c:\program files\Java . ((((((((((((((((((((((((((((( SnapShot@2010-03-19_20.31.53 ))))))))))))))))))))))))))))))))))))))))) . + 2010-03-20 05:56 . 2010-03-20 05:56 16384 c:\windows\Temp\Perflib_Perfdata_5e0.dat - 2007-07-27 15:41 . 2007-07-27 15:41 16760 c:\windows\SoftwareDistribution\Download\b1a699b1a4c9708753b07a76c391fefe\spmsg.dll - 2007-07-27 16:41 . 2007-07-27 16:41 16760 c:\windows\SoftwareDistribution\Download\aadd6ccc4585cbf4ee04287eb0e679df\spmsg.dll - 2008-04-14 00:12 . 2008-04-14 00:12 30720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\xcopy.exe - 2008-04-13 18:46 . 2008-04-13 18:46 19200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wstcodec.sys - 2008-04-14 00:12 . 2008-04-14 00:12 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmpui.dll - 2008-04-14 00:12 . 2008-04-14 00:12 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmpcore.dll - 2008-04-14 00:12 . 2008-04-14 00:12 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmpcd.dll - 2008-04-14 00:12 . 2008-04-14 00:12 69120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wlanapi.dll - 2008-04-14 00:12 . 2008-04-14 00:12 53760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\winsta.dll - 2008-04-14 00:12 . 2008-04-14 00:12 43520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wbemsvc.dll - 2008-04-14 00:12 . 2008-04-14 00:12 71680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wbemcons.dll - 2008-04-13 18:57 . 2008-04-13 18:57 34560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wanarp.sys - 2008-04-14 00:12 . 2008-04-14 00:12 76800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wam51.dll - 2008-04-14 00:12 . 2008-04-14 00:12 46080 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wab.exe - 2008-04-13 18:36 . 2008-04-13 18:36 42240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\viaagp.sys - 2008-04-14 00:12 . 2008-04-14 00:12 53760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\vfwwdm32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 74240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\usbui.dll - 2008-04-13 18:45 . 2008-04-13 18:45 59520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\usbhub.sys - 2008-04-13 18:45 . 2008-04-13 18:45 25600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\usbcamd.sys - 2008-04-13 18:56 . 2008-04-13 18:56 12800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\usb8023x.sys - 2008-04-13 18:56 . 2008-04-13 18:56 12800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\usb8023.sys - 2008-04-14 00:12 . 2008-04-14 00:12 74240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\unimdmat.dll - 2008-04-14 00:12 . 2008-04-14 00:12 35840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\umandlg.dll - 2008-04-14 00:11 . 2008-04-14 00:11 25600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tscupdc.dll - 2008-04-14 00:12 . 2008-04-14 00:12 12800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tree.com - 2008-04-14 00:12 . 2008-04-14 00:12 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tlntadmn.exe - 2008-04-14 00:13 . 2008-04-14 00:13 40840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\termdd.sys - 2008-04-14 00:13 . 2008-04-14 00:13 12040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tdpipe.sys - 2007-06-27 12:59 . 2007-06-27 12:59 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\system.web.regularexpressions.dll - 2008-04-13 16:11 . 2008-04-13 16:11 48640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\system.enterpriseservices.thunk.dll - 2008-04-14 00:12 . 2008-04-14 00:12 71680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sysinfo.exe - 2008-04-13 19:15 . 2008-04-13 19:15 60800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sysaudio.sys - 2008-04-14 00:12 . 2008-04-14 00:12 33280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sstub.dll - 2008-04-14 00:12 . 2008-04-14 00:12 71680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ssdpsrv.dll - 2008-04-14 00:12 . 2008-04-14 00:12 33280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\snmp.exe - 2008-04-14 00:12 . 2008-04-14 00:12 89600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\smlogsvc.exe - 2008-04-13 18:36 . 2008-04-13 18:36 16000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\smbbatt.sys - 2009-12-12 22:12 . 2004-08-04 04:41 13240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\slwdmsup.sys - 2008-04-13 18:36 . 2008-04-13 18:36 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sisagp.sys - 2008-04-13 18:40 . 2008-04-13 18:40 10240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sffp_mmc.sys - 2008-04-14 00:12 . 2008-04-14 00:12 23040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\setup.exe - 2008-04-14 00:12 . 2008-04-14 00:12 56320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\servdeps.dll - 2008-04-14 00:12 . 2008-04-14 00:12 56320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\secur32.dll - 2008-04-13 16:39 . 2008-04-13 16:39 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\secdrv.sys - 2008-04-13 18:45 . 2008-04-13 18:45 11520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\scsiscan.sys - 2008-04-14 00:12 . 2008-04-14 00:12 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sclgntfy.dll - 2008-04-14 00:12 . 2008-04-14 00:12 64000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\samlib.dll - 2008-04-14 00:12 . 2008-04-14 00:12 43520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\safrcdlg.dll - 2008-04-14 00:12 . 2008-04-14 00:12 33280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rundll32.exe - 2008-04-14 00:12 . 2008-04-14 00:12 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rrcm.dll - 2008-04-14 00:12 . 2008-04-14 00:12 58880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\resutils.dll - 2008-04-13 18:40 . 2008-04-13 18:40 57600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\redbook.sys - 2008-04-14 00:12 . 2008-04-14 00:12 35840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rcimlby.exe - 2008-04-14 00:12 . 2008-04-14 00:12 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rasman.dll - 2008-04-14 00:12 . 2008-04-14 00:12 43520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\racpldlg.dll - 2008-04-14 00:12 . 2008-04-14 00:12 76800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\qutil.dll - 2008-04-14 00:12 . 2008-04-14 00:12 43520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pstorec.dll - 2008-04-13 18:56 . 2008-04-13 18:56 69120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\psched.sys - 2008-04-14 00:12 . 2008-04-14 00:12 23040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\psapi.dll - 2008-04-13 18:31 . 2008-04-13 18:31 35840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\processr.sys - 2008-04-14 00:12 . 2008-04-14 00:12 58880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pnrpnsp.dll - 2008-04-14 00:12 . 2008-04-14 00:12 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pjlmon.dll - 2008-04-14 00:12 . 2008-04-14 00:12 17920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ping.exe - 2008-04-14 00:12 . 2008-04-14 00:12 17920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\perfnet.dll - 2008-04-13 16:11 . 2008-04-13 16:11 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\perfcounter.dll - 2008-04-13 18:40 . 2008-04-13 18:40 24960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pciidex.sys - 2008-04-14 00:12 . 2008-04-14 00:12 38400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pchsvc.dll - 2008-04-14 00:12 . 2008-04-14 00:12 51200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\oobebaln.exe - 2008-04-14 00:12 . 2008-04-14 00:12 20510 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\odpdx32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 20510 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\odfox32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 20510 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\odexl32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ocgen.dll - 2008-04-13 18:56 . 2008-04-13 18:56 88320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\nwlnkipx.sys - 2008-04-14 00:12 . 2008-04-14 00:12 64000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\nwapi32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntvdmd.dll - 2008-04-14 00:12 . 2008-04-14 00:12 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntmsapi.dll - 2009-12-12 22:12 . 2006-02-28 12:00 34560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntio804.sys - 2009-12-12 22:12 . 2006-02-28 12:00 34560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntio404.sys - 2009-12-12 22:12 . 2006-02-28 12:00 33840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntio.sys - 2008-04-14 00:12 . 2008-04-14 00:12 76800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\nslookup.exe - 2008-04-14 00:12 . 2008-04-14 00:12 10240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\npwmsdrm.dll - 2008-04-14 00:12 . 2008-04-14 00:12 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\nppagent.exe - 2008-04-14 00:12 . 2008-04-14 00:12 69120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\notepad.exe - 2008-04-13 18:53 . 2008-04-13 18:53 40320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\nmnt.sys - 2008-04-14 00:12 . 2008-04-14 00:12 81920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\nmchat.dll - 2008-04-13 19:20 . 2008-04-13 19:20 91520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ndiswan.sys - 2008-04-13 18:46 . 2008-04-13 18:46 10880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ndisip.sys - 2008-04-14 00:12 . 2008-04-14 00:12 17920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\nddeapi.dll - 2008-04-14 00:12 . 2008-04-14 00:12 53760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\narrator.exe - 2008-04-14 00:12 . 2008-04-14 00:12 30720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mtxdm.dll - 2008-04-14 00:12 . 2008-04-14 00:12 66560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mtxclu.dll - 2008-04-13 18:30 . 2008-04-13 18:30 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msvcrt40.dll - 2008-04-13 18:14 . 2008-04-13 18:14 76800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msshamsg.dll - 2008-04-13 17:24 . 2008-04-13 17:24 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msorc32r.dll - 2008-04-14 00:12 . 2008-04-14 00:12 30720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msobshel.dll - 2008-04-14 00:11 . 2008-04-14 00:11 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msisip.dll - 2008-04-14 00:12 . 2008-04-14 00:12 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msiregmv.exe - 2008-04-14 00:11 . 2008-04-14 00:11 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msgrocm.dll - 2008-04-13 18:46 . 2008-04-13 18:46 51200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msdv.sys - 2008-04-14 00:11 . 2008-04-14 00:11 58880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msdtclog.dll - 2008-04-14 00:11 . 2008-04-14 00:11 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msdatt.dll - 2008-04-14 00:11 . 2008-04-14 00:11 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msadcf.dll - 2008-04-13 17:25 . 2008-04-13 17:25 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msadcer.dll - 2008-04-14 00:11 . 2008-04-14 00:11 71680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msacm32.dll - 2008-04-14 00:11 . 2008-04-14 00:11 87040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mprapi.dll - 2008-04-13 18:39 . 2008-04-13 18:39 23040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mouclass.sys - 2008-04-13 19:00 . 2008-04-13 19:00 30080 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\modem.sys - 2008-04-14 00:11 . 2008-04-14 00:11 34560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mnmdd.dll - 2008-04-14 00:11 . 2008-04-14 00:11 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mmcshext.dll - 2008-04-14 00:11 . 2008-04-14 00:11 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mmcexr.dll - 2008-04-14 00:11 . 2008-04-14 00:11 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mf3216.dll - 2008-04-14 00:11 . 2008-04-14 00:11 23040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mciseq.dll - 2008-04-14 00:11 . 2008-04-14 00:11 84480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mciavi32.dll - 2008-04-14 00:11 . 2008-04-14 00:11 10240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lprhelp.dll - 2008-04-14 00:11 . 2008-04-14 00:11 97280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\loadperf.dll - 2008-04-14 00:11 . 2008-04-14 00:11 58880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\licwmi.dll - 2008-04-14 00:10 . 2008-04-14 00:10 10240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\tmigrate.dll - 2008-04-14 00:10 . 2008-04-14 00:10 53760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\pintlcsd.dll - 2008-04-14 00:10 . 2008-04-14 00:10 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\padrs804.dll - 2008-04-14 00:09 . 2008-04-14 00:09 56320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\chtskdic.dll - 2008-04-14 00:11 . 2008-04-14 00:11 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\kmsvc.dll - 2008-04-14 00:11 . 2008-04-14 00:11 48640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\kdsui.dll - 2007-06-27 12:54 . 2007-06-27 12:54 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\jsc.exe - 2008-04-14 00:11 . 2008-04-14 00:11 81920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\isign32.dll - 2008-04-14 00:11 . 2008-04-14 00:11 28160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\irmon.dll - 2008-04-14 00:11 . 2008-04-14 00:11 94720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\iphlpapi.dll - 2008-04-13 18:43 . 2008-04-13 18:43 12800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spiisupd.exe - 2008-04-14 00:12 . 2008-04-14 00:12 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\inetwiz.exe - 2008-04-14 00:12 . 2008-04-14 00:12 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\inetin51.exe - 2008-04-14 00:11 . 2008-04-14 00:11 35840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\imgutil.dll - 2008-04-14 00:11 . 2008-04-14 00:11 81920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ils.dll - 2008-04-14 00:12 . 2008-04-14 00:12 30720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\iisrstas.exe - 2008-04-14 00:11 . 2008-04-14 00:11 48640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\iernonce.dll - 2008-04-14 00:11 . 2008-04-14 00:11 81920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ieencode.dll - 2008-04-14 00:11 . 2008-04-14 00:11 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\icwconn.dll - 2008-04-13 19:18 . 2008-04-13 19:18 52480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\i8042prt.sys - 2008-04-13 18:41 . 2008-04-13 18:41 18560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\i2omp.sys - 2008-04-14 00:11 . 2008-04-14 00:11 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\httpod51.dll - 2008-04-14 00:11 . 2008-04-14 00:11 10240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\hpcjrrps.dll - 2008-04-13 18:45 . 2008-04-13 18:45 24960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\hidparse.sys - 2008-04-13 18:45 . 2008-04-13 18:45 19200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\hidir.sys - 2008-04-13 18:46 . 2008-04-13 18:46 25600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\hidbth.sys - 2008-04-14 00:12 . 2008-04-14 00:12 15120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fp98sadm.exe - 2008-04-14 00:11 . 2008-04-14 00:11 41020 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fp4avnb.dll - 2008-04-14 00:11 . 2008-04-14 00:11 49210 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fp4areg.dll - 2008-04-14 00:12 . 2008-04-14 00:12 23040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fltmc.exe - 2008-04-13 18:40 . 2008-04-13 18:40 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\flpydisk.sys - 2008-04-14 00:12 . 2008-04-14 00:12 92160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\evntwin.exe - 2008-04-14 00:11 . 2008-04-14 00:11 56320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\eventlog.dll - 2008-04-14 00:11 . 2008-04-14 00:11 23040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ersvc.dll - 2008-04-13 16:26 . 2008-04-13 16:26 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ep9res.dll - 2008-04-14 00:11 . 2008-04-14 00:11 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\encapi.dll - 2008-04-14 00:11 . 2008-04-14 00:11 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\eappprxy.dll - 2008-04-14 00:11 . 2008-04-14 00:11 30720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\eapolqec.dll - 2008-04-14 00:12 . 2008-04-14 00:12 17920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dvdupgrd.exe - 2008-04-14 00:11 . 2008-04-14 00:11 51200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dssec.dll - 2008-04-14 00:11 . 2008-04-14 00:11 71680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dsdmoprp.dll - 2008-04-14 00:11 . 2008-04-14 00:11 87040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\drmstor.dll - 2008-04-13 18:45 . 2008-04-13 18:45 60160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\drmk.sys - 2008-04-14 00:12 . 2008-04-14 00:12 17920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dpnsvr.exe - 2008-04-14 00:11 . 2008-04-14 00:11 56320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dot3msm.dll - 2009-12-12 22:12 . 2006-02-28 12:00 53840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dosx.exe - 2008-04-14 00:11 . 2008-04-14 00:11 35840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dmloader.dll - 2008-04-14 00:11 . 2008-04-14 00:11 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dmcompos.dll - 2008-04-14 00:12 . 2008-04-14 00:12 87040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\diantz.exe - 2008-04-14 00:11 . 2008-04-14 00:11 48640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dhcpqec.dll - 2008-04-14 00:11 . 2008-04-14 00:11 40960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dcap32.dll - 2009-12-12 22:12 . 2004-08-04 04:32 48640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cwrwdm.sys - 2008-04-14 00:12 . 2008-04-14 00:12 15360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ctfmon.exe - 2008-04-14 00:11 . 2008-04-14 00:11 53760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cryptext.dll - 2008-04-14 00:11 . 2008-04-14 00:11 33280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cryptdll.dll - 2008-04-14 00:11 . 2008-04-14 00:11 12800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\credssp.dll - 2008-04-13 18:36 . 2008-04-13 18:36 10240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\compbatt.sys - 2008-04-14 00:11 . 2008-04-14 00:11 28160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\comaddin.dll - 2008-04-13 16:44 . 2008-04-13 16:44 17920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cobramsg.dll - 2008-04-14 00:11 . 2008-04-14 00:11 79360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cnbjmon2.dll - 2008-04-14 00:12 . 2008-04-14 00:12 25600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cmdl32.exe - 2008-04-14 00:12 . 2008-04-14 00:12 33280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\clipsrv.exe - 2008-04-14 00:12 . 2008-04-14 00:12 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cliconfg.exe - 2008-04-14 00:12 . 2008-04-14 00:12 64000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cleanmgr.exe - 2008-04-14 00:11 . 2008-04-14 00:11 69120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ciodm.dll - 2008-04-14 00:11 . 2008-04-14 00:11 66560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cdm.dll - 2008-04-14 00:11 . 2008-04-14 00:11 84480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cabview.dll - 2008-04-13 18:46 . 2008-04-13 18:46 36480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\bthprint.sys - 2008-04-14 00:12 . 2008-04-14 00:12 71680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\blastcln.exe - 2008-04-14 00:11 . 2008-04-14 00:11 20540 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\author.dll - 2008-04-14 00:11 . 2008-04-14 00:11 58880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\atl.dll - 2008-04-13 16:09 . 2008-04-13 16:09 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\aspnet_filter.dll - 2008-04-13 18:51 . 2008-04-13 18:51 60800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\arp1394.sys - 2008-04-13 18:31 . 2008-04-13 18:31 37760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\amdk7.sys - 2007-04-02 18:26 . 2007-04-02 18:26 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\agt0c0a.dll - 2007-04-02 18:26 . 2007-04-02 18:26 20480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\agt0416.dll - 2008-04-14 00:11 . 2008-04-14 00:11 99840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\advpack.dll - 2008-04-14 00:11 . 2008-04-14 00:11 43520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\admwprox.dll - 2008-04-14 00:11 . 2008-04-14 00:11 61440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\admparse.dll - 2009-12-12 22:11 . 2004-08-04 04:32 10880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\admjoy.sys - 2008-04-14 00:11 . 2008-04-14 00:11 20540 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\admin.dll - 2009-12-12 22:11 . 2004-08-04 04:32 84480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ac97via.sys - 2007-07-27 16:41 . 2007-07-27 16:41 16760 c:\windows\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\spmsg.dll - 2007-07-27 16:41 . 2007-07-27 16:41 16760 c:\windows\SoftwareDistribution\Download\06c06c7b51bc17c7102b0619a1cb08c2\spmsg.dll - 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmm2ext.dll - 2009-12-12 22:12 . 2006-02-28 12:00 5120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\winnls.dll - 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\spdwnwxp.exe - 2008-04-14 00:12 . 2008-04-14 00:12 5120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sfc.dll - 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rasadhlp.dll - 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pwsdata.dll - 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\migregdb.exe - 2008-04-13 18:40 . 2008-04-13 18:40 7040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ltotape.sys - 2008-04-14 00:09 . 2008-04-14 00:09 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\kbdsmsno.dll - 2008-04-14 00:09 . 2008-04-14 00:09 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\kbdsmsfi.dll - 2008-04-13 16:44 . 2008-04-13 16:44 2560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\iconlib.dll - 2008-04-14 00:12 . 2008-04-14 00:12 7680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\forcedos.exe - 2008-04-13 18:40 . 2008-04-13 18:40 8320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dlttape.sys - 2008-04-14 00:12 . 2008-04-14 00:12 5120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dllhost.exe - 2009-12-13 18:43 . 2008-07-08 13:02 382840 c:\windows\SoftwareDistribution\Download\fbadf956b1f29cd6cc8927434ddbc900\update\updspapi.dll - 2007-07-27 15:41 . 2007-07-27 15:41 382840 c:\windows\SoftwareDistribution\Download\b1a699b1a4c9708753b07a76c391fefe\update\updspapi.dll - 2009-04-02 05:02 . 2009-04-02 05:02 604160 c:\windows\SoftwareDistribution\Download\aadd6ccc4585cbf4ee04287eb0e679df\wm11\wmspdmod.dll - 2009-04-10 07:01 . 2009-04-10 07:01 530280 c:\windows\SoftwareDistribution\Download\aadd6ccc4585cbf4ee04287eb0e679df\wm10\wmspdmod.dll - 2007-07-27 16:41 . 2007-07-27 16:41 382840 c:\windows\SoftwareDistribution\Download\aadd6ccc4585cbf4ee04287eb0e679df\update\updspapi.dll - 2009-12-13 19:28 . 2008-07-08 13:02 382840 c:\windows\SoftwareDistribution\Download\9cf59263a134ab3fbbee78365a2fa5fc\update\updspapi.dll - 2008-04-13 18:53 . 2008-04-13 18:53 558080 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\xpnetdg.exe - 2009-12-12 22:12 . 2006-02-28 12:00 174200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\xenroll.dll - 2008-04-14 00:12 . 2008-04-14 00:12 483840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wzcsvc.dll - 2008-04-14 00:12 . 2008-04-14 00:12 120320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wuweb.dll - 2008-04-14 00:12 . 2008-04-14 00:12 112640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wucltui.dll - 2008-04-14 00:12 . 2008-04-14 00:12 604160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wsecedit.dll - 2008-04-14 00:12 . 2008-04-14 00:12 115200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmsdmoe.dll - 2008-04-14 00:12 . 2008-04-14 00:12 102400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmpshell.dll - 2008-04-14 00:12 . 2008-04-14 00:12 140800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmidcprv.dll - 2008-04-14 00:12 . 2008-04-14 00:12 670720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmadmoe.dll - 2008-04-14 00:12 . 2008-04-14 00:12 176640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wintrust.dll - 2008-04-14 00:12 . 2008-04-14 00:12 102400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\win32spl.dll - 2008-04-14 00:12 . 2008-04-14 00:12 463360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wiadefui.dll - 2008-04-14 00:12 . 2008-04-14 00:12 135680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\webvw.dll - 2008-04-14 00:12 . 2008-04-14 00:12 276480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\webcheck.dll - 2008-04-14 00:12 . 2008-04-14 00:12 197120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wbemupgd.dll - 2008-04-14 00:12 . 2008-04-14 00:12 273920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wbemess.dll - 2008-04-14 00:12 . 2008-04-14 00:12 483840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\w95upgnt.dll - 2007-06-27 12:59 . 2007-06-27 12:59 716800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\vbc.exe - 2008-04-14 00:12 . 2008-04-14 00:12 727040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\userenv.dll - 2008-04-14 00:12 . 2008-04-14 00:12 578560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\user32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 619520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\urlmon.dll - 2009-12-12 22:12 . 2007-08-11 02:46 382840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\update\updspapi.dll - 2008-04-14 00:12 . 2008-04-14 00:12 279040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tshoot.dll - 2008-04-14 00:12 . 2008-04-14 00:12 358400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\termmgr.dll - 2008-04-14 00:12 . 2008-04-14 00:12 135680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\taskmgr.exe - 2008-04-14 00:12 . 2008-04-14 00:12 181760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\tapi32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 117760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\t2embed.dll - 2008-04-14 00:12 . 2008-04-14 00:12 180800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sqlunirl.dll - 2008-04-13 18:38 . 2008-04-13 18:38 732160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\sprb0424.dll - 2008-04-14 00:12 . 2008-04-14 00:12 358400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\snmpincl.dll - 2009-12-12 22:12 . 2004-08-04 04:41 404990 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\slntamr.sys - 2008-04-14 00:12 . 2008-04-14 00:12 199680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\scripta.dll - 2008-04-14 00:12 . 2008-04-14 00:12 314880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\scesrv.dll - 2008-04-14 00:12 . 2008-04-14 00:12 107520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rsnotify.exe - 2008-04-14 00:12 . 2008-04-14 00:12 399360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rpcss.dll - 2008-04-14 00:12 . 2008-04-14 00:12 102400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\rcbdyctl.dll - 2008-04-14 00:12 . 2008-04-14 00:12 279040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\qdv.dll - 2008-04-14 00:12 . 2008-04-14 00:12 363520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\psisdecd.dll - 2008-04-14 00:12 . 2008-04-14 00:12 560640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\printui.dll - 2008-04-14 00:12 . 2008-04-14 00:12 412160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pmh.dll - 2008-04-14 00:12 . 2008-04-14 00:12 284160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pdh.dll - 2008-04-14 00:12 . 2008-04-14 00:12 153600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\p2p.dll - 2008-04-13 18:31 . 2008-04-13 18:31 230400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\osloader.exe - 2008-04-14 00:12 . 2008-04-14 00:12 122880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\oledlg.dll - 2008-04-14 00:12 . 2008-04-14 00:12 192000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\offfilt.dll - 2008-04-14 00:12 . 2008-04-14 00:12 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntshrui.dll - 2009-12-12 22:12 . 2004-08-04 04:41 180360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntmtlfax.sys - 2008-04-14 00:12 . 2008-04-14 00:12 435200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntmssvc.dll - 2008-04-14 00:12 . 2008-04-14 00:12 179200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntmsdba.dll - 2008-04-14 00:12 . 2008-04-14 00:12 245760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\netui1.dll - 2008-04-14 00:12 . 2008-04-14 00:12 407040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\netlogon.dll - 2008-04-14 00:12 . 2008-04-14 00:12 176640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\napstat.exe - 2008-04-14 00:12 . 2008-04-14 00:12 701440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msxml2.dll - 2008-04-14 00:12 . 2008-04-14 00:12 245760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mswmdm.dll - 2008-04-14 00:12 . 2008-04-14 00:12 343040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msvcrt.dll - 2008-04-14 00:12 . 2008-04-14 00:12 532480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mstime.dll - 2008-04-14 00:12 . 2008-04-14 00:12 343040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mspaint.exe - 2008-04-14 00:12 . 2008-04-14 00:12 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msorcl32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 102400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msjro.dll - 2008-04-14 00:11 . 2008-04-14 00:11 271360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msihnd.dll - 2008-04-14 00:11 . 2008-04-14 00:11 204800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msdaps.dll - 2008-04-14 00:11 . 2008-04-14 00:11 532480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msdaipp.dll - 2008-04-13 16:10 . 2008-04-13 16:10 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mscorrc.kor.dll - 2008-04-13 16:10 . 2008-04-13 16:10 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mscorrc.ja.dll - 2008-04-13 16:10 . 2008-04-13 16:10 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mscorrc.dll - 2008-04-13 16:10 . 2008-04-13 16:10 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mscorrc.cht.dll - 2008-04-13 16:10 . 2008-04-13 16:10 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mscorrc.chs.dll - 2008-04-14 00:11 . 2008-04-14 00:11 220160 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mscandui.dll - 2008-04-14 00:11 . 2008-04-14 00:11 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msadco.dll - 2008-04-14 00:11 . 2008-04-14 00:11 663040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mqqm.dll - 2008-04-14 00:11 . 2008-04-14 00:11 225280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mqoa.dll - 2008-04-14 00:11 . 2008-04-14 00:11 138240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mqad.dll - 2008-04-14 00:11 . 2008-04-14 00:11 368640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mpvis.dll - 2008-04-14 00:11 . 2008-04-14 00:11 240640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mpg4dmod.dll - 2008-04-14 00:11 . 2008-04-14 00:11 153600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\modemui.dll - 2008-04-14 00:12 . 2008-04-14 00:12 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mobsync.exe - 2008-04-14 00:11 . 2008-04-14 00:11 207360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mobsync.dll - 2008-04-14 00:11 . 2008-04-14 00:11 184320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mmc30.dll - 2008-04-14 00:11 . 2008-04-14 00:11 586240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mlang.dll - 2008-04-14 00:11 . 2008-04-14 00:11 261120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\migisma.dll - 2007-06-27 12:54 . 2007-06-27 12:54 286720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\microsoft.visualbasic.dll - 2007-04-03 03:14 . 2007-04-03 03:14 981760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mfc42u.dll - 2008-04-14 00:12 . 2008-04-14 00:12 514560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\logonui.exe - 2008-04-14 00:11 . 2008-04-14 00:11 343040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\localspl.dll - 2009-12-12 22:12 . 2006-02-28 12:00 262200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\lang\imjputy.exe - 2008-04-14 00:11 . 2008-04-14 00:11 299520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\kerberos.dll - 2008-04-14 00:11 . 2008-04-14 00:11 512000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\jscript.dll - 2008-04-14 00:11 . 2008-04-14 00:11 163840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\jgdw400.dll - 2008-04-14 00:11 . 2008-04-14 00:11 138240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\itss.dll - 2008-04-14 00:11 . 2008-04-14 00:11 755200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ir50_32.dll - 2008-04-14 00:11 . 2008-04-14 00:11 120320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ir41_qc.dll - 2008-04-14 00:11 . 2008-04-14 00:11 384000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ipsmsnap.dll - 2008-04-14 00:11 . 2008-04-14 00:11 161280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ipmontr.dll - 2008-04-13 18:39 . 2008-04-13 18:39 322560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprc0804.dll - 2008-04-13 18:39 . 2008-04-13 18:39 627200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprc0419.dll - 2008-04-13 18:39 . 2008-04-13 18:39 645120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprc0413.dll - 2008-04-13 18:39 . 2008-04-13 18:39 645120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprc040e.dll - 2008-04-13 18:39 . 2008-04-13 18:39 663040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprc040c.dll - 2008-04-13 18:39 . 2008-04-13 18:39 327680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprc0404.dll - 2008-04-13 18:38 . 2008-04-13 18:38 724480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprb041f.dll - 2008-04-13 18:38 . 2008-04-13 18:38 724480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprb041d.dll - 2008-04-13 18:36 . 2008-04-13 18:36 801280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprb0408.dll - 2008-04-13 18:37 . 2008-04-13 18:37 788480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprb0407.dll - 2008-04-13 18:36 . 2008-04-13 18:36 734720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\sprb0405.dll - 2008-04-13 18:35 . 2008-04-13 18:35 194560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0816.dll - 2008-04-13 18:35 . 2008-04-13 18:35 161280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0804.dll - 2008-04-13 18:35 . 2008-04-13 18:35 186880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0425.dll - 2008-04-13 18:35 . 2008-04-13 18:35 194560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0415.dll - 2008-04-13 18:35 . 2008-04-13 18:35 189440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0414.dll - 2008-04-13 18:35 . 2008-04-13 18:35 181760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra040d.dll - 2008-04-13 18:35 . 2008-04-13 18:35 199680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0407.dll - 2008-04-13 18:35 . 2008-04-13 18:35 192000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0406.dll - 2008-04-13 18:35 . 2008-04-13 18:35 161280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0404.dll - 2008-04-13 18:35 . 2008-04-13 18:35 189440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0402.dll - 2008-04-13 18:35 . 2008-04-13 18:35 186880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\spra0401.dll - 2008-04-14 00:12 . 2008-04-14 00:12 189440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\smtpadm.dll - 2008-04-13 18:40 . 2008-04-13 18:40 435200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\obrb0816.dll - 2008-04-13 18:40 . 2008-04-13 18:40 409600 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\obrb0416.dll - 2008-04-13 18:40 . 2008-04-13 18:40 391680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\obrb0415.dll - 2008-04-13 18:40 . 2008-04-13 18:40 401920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\obrb0413.dll - 2008-04-13 18:40 . 2008-04-13 18:40 384000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\obrb040d.dll - 2008-04-13 18:40 . 2008-04-13 18:40 212480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ip\obrb0404.dll - 2008-04-14 00:11 . 2008-04-14 00:11 829440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\inetmgr.dll - 2008-04-14 00:11 . 2008-04-14 00:11 110080 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\imm32.dll - 2008-04-13 16:10 . 2008-04-13 16:10 184320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ilasm.exe - 2008-04-14 00:11 . 2008-04-14 00:11 135680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ifmon.dll - 2008-04-14 00:11 . 2008-04-14 00:11 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ieakeng.dll - 2009-12-12 22:12 . 2004-08-04 04:29 161020 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\i81xnt5.sys - 2008-04-13 18:31 . 2008-04-13 18:31 134400 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\halmacpi.dll - 2008-04-13 18:31 . 2008-04-13 18:31 131840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\halaacpi.dll - 2008-04-14 00:11 . 2008-04-14 00:11 115200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\guitrna.dll - 2008-04-14 00:11 . 2008-04-14 00:11 133120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\guitrn.dll - 2008-04-14 00:11 . 2008-04-14 00:11 199680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\gptext.dll - 2008-04-14 00:11 . 2008-04-14 00:11 122880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\glu32.dll - 2008-04-14 00:12 . 2008-04-14 00:12 109840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\fp98swin.exe - 2008-04-14 00:11 . 2008-04-14 00:11 337920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\filemgmt.dll - 2007-06-27 12:54 . 2007-06-27 12:54 798720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\eventlogmessages.dll - 2009-12-12 22:12 . 2004-07-17 17:39 120320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\epcl5res.dll - 2008-04-14 00:11 . 2008-04-14 00:11 186880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\encdec.dll - 2008-04-14 00:13 . 2008-04-14 00:13 299520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\drmclien.dll - 2008-04-14 00:11 . 2008-04-14 00:11 212480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dpvoice.dll - 2008-04-14 00:12 . 2008-04-14 00:12 163840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\diskpart.exe - 2008-04-14 00:11 . 2008-04-14 00:11 181760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dinput8.dll - 2008-04-14 00:11 . 2008-04-14 00:11 158720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dinput.dll - 2009-12-12 22:12 . 2006-02-28 12:00 366080 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\digreqex.msi - 2008-04-14 00:11 . 2008-04-14 00:11 640000 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\dbghelp.dll - 2008-04-14 00:11 . 2008-04-14 00:11 824320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\d3dim700.dll - 2008-04-14 00:11 . 2008-04-14 00:11 599040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\crypt32.dll - 2008-04-14 00:11 . 2008-04-14 00:11 163840 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\credui.dll - 2008-04-14 00:12 . 2008-04-14 00:12 389120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cmd.exe - 2008-04-14 00:11 . 2008-04-14 00:11 148480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cic.dll - 2008-04-14 00:12 . 2008-04-14 00:12 188480 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cfgwiz.exe - 2008-04-14 00:11 . 2008-04-14 00:11 194560 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\certcli.dll - 2008-04-14 00:11 . 2008-04-14 00:11 151040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cdfview.dll - 2008-04-13 18:51 . 2008-04-13 18:51 101120 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\bthpan.sys - 2008-04-14 00:11 . 2008-04-14 00:11 286720 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\blackbox.dll - 2008-04-14 00:12 . 2008-04-14 00:12 588800 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\autochk.exe - 2009-12-12 22:11 . 2004-08-04 04:29 104960 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\atinrvxx.sys - 2009-12-12 22:11 . 2004-08-04 04:29 701440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ati2mtag.sys - 2009-12-12 22:11 . 2004-08-04 04:29 327040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ati2mtaa.sys - 2008-04-14 00:12 . 2008-04-14 00:12 343040 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\asms\70\msft\windows\mswincrt\msvcrt.dll - 2008-04-14 00:11 . 2008-04-14 00:11 263680 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\adsnt.dll - 2008-04-14 00:11 . 2008-04-14 00:11 143360 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\adsldpc.dll - 2008-04-14 00:12 . 2008-04-14 00:12 184320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\accwiz.exe - 2009-12-13 19:05 . 2007-11-30 11:18 382840 c:\windows\SoftwareDistribution\Download\6b4e49f1a78b9558feeb103a07b06a32\update\updspapi.dll - 2009-07-13 16:08 . 2009-07-13 16:08 286720 c:\windows\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\wm10l\wmpdxm.dll - 2007-07-27 16:41 . 2007-07-27 16:41 382840 c:\windows\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\update\updspapi.dll - 2009-12-13 19:56 . 2007-11-30 12:39 382840 c:\windows\SoftwareDistribution\Download\1201b6f74bae1015eceeea43baed9814\update\updspapi.dll - 2008-05-09 10:45 . 2008-05-09 10:45 430080 c:\windows\SoftwareDistribution\Download\1201b6f74bae1015eceeea43baed9814\sp3qfe\vbscript.dll - 2008-05-09 10:45 . 2008-05-09 10:45 512000 c:\windows\SoftwareDistribution\Download\1201b6f74bae1015eceeea43baed9814\sp3qfe\jscript.dll - 2007-07-27 16:41 . 2007-07-27 16:41 382840 c:\windows\SoftwareDistribution\Download\06c06c7b51bc17c7102b0619a1cb08c2\update\updspapi.dll - 2008-06-10 13:07 . 2008-06-10 13:07 2376760 c:\windows\SoftwareDistribution\Download\b1a699b1a4c9708753b07a76c391fefe\wm10l\wmvcore.dll - 2008-04-13 17:39 . 2008-04-13 17:39 2897920 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\xpsp2res.dll - 2008-04-14 00:12 . 2008-04-14 00:12 2109440 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmvcore.dll - 2008-04-14 00:12 . 2008-04-14 00:12 4874240 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\wmp.dll - 2009-12-12 22:12 . 2006-02-28 12:00 1326080 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\webfldrs.msi - 2007-05-15 08:08 . 2007-05-15 08:08 1057280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\pcl5ures.dll - 2008-04-13 19:24 . 2008-04-13 19:24 2145280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntkrnlmp.exe - 2008-04-14 00:12 . 2008-04-14 00:12 1200640 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ntbackup.exe - 2009-12-12 22:12 . 2006-02-28 12:00 1327320 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\msnsusii.exe - 2008-04-14 00:11 . 2008-04-14 00:11 3066880 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mshtml.dll - 2007-12-17 11:58 . 2007-12-17 11:58 2273280 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\mscorsvr.dll - 2008-04-14 00:11 . 2008-04-14 00:11 1267200 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\comsvcs.dll - 2008-04-14 00:11 . 2008-04-14 00:11 2091520 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\cdosys.dll - 2008-04-14 00:11 . 2008-04-14 00:11 1057760 c:\windows\SoftwareDistribution\Download\9866fb57abdc0ea2f5d4e132d055ba4e\ati3d2ag.dll - 2009-07-12 18:21 . 2009-07-12 18:21 4874240 c:\windows\SoftwareDistribution\Download\122ece420ea2cadf18cdf04c90b6d8f1\wm9\wmp.dll - 2009-05-20 18:44 . 2009-05-20 18:44 2355200 c:\windows\SoftwareDistribution\Download\06c06c7b51bc17c7102b0619a1cb08c2\wm10\wmvcore.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-23 620152] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-07-12 7626752] "nwiz"="nwiz.exe" [2006-07-12 1519616] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-07-12 86016] "RTHDCPL"="RTHDCPL.EXE" [2006-06-01 16208384] "SkyTel"="SkyTel.EXE" [2006-05-16 2879488] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504] "Intuit SyncManager"="c:\program files\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2009-08-31 996616] "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-01-07 429392] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe [2009-12-10 295606] Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] QuickBooks Update Agent.lnk - c:\program files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2009-9-3 1153824] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Intuit\\QuickBooks 2010\\QBDBMgrN.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1225:TCP"= 1225:TCP:omfbqo R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [3/19/2010 2:45 PM 236368] R2 ubsbm;Unibrain 1394 SBM Driver;c:\windows\system32\drivers\UBSBM.sys [7/27/2005 6:25 PM 14080] R2 ubumapi;Unibrain 1394 FireAPI Driver;c:\windows\system32\drivers\UBUMAPI.sys [7/27/2005 6:25 PM 36352] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [3/19/2010 2:45 PM 19160] R3 ubohci;Unibrain 1394 OHCI Driver;c:\windows\system32\drivers\ubohci.sys [7/27/2005 6:25 PM 77056] S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [12/10/2009 4:30 PM 100992] . . ------- Supplementary Scan ------- . uInternet Settings,ProxyOverride = *.local IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 Handler: intu-help-qb3 - {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - c:\program files\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll FF - ProfilePath - c:\documents and settings\Pam\Application Data\Mozilla\Firefox\Profiles\0wl5i4zl.default\ FF - prefs.js: browser.startup.homepage - hxxp://us.mc370.mail.yahoo.com/mc/welcome?.gx=1&.tm=1263491915&.rand=c4idftimdjbmv FF - prefs.js: network.proxy.type - 4 FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- FF - user.js: yahoo.ytff.general.dontshowhpoffer - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32); c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25); c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5); c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com"); c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com"); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-03-20 00:57 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'explorer.exe'(1236) c:\windows\system32\WININET.dll c:\windows\system32\webcheck.dll c:\windows\system32\IEFRAME.dll c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\RUNDLL32.EXE c:\windows\RTHDCPL.EXE c:\program files\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\nvsvc32.exe c:\program files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe c:\windows\system32\wscntfy.exe . ************************************************************************** . Completion time: 2010-03-20 01:00:25 - machine was rebooted ComboFix-quarantined-files.txt 2010-03-20 06:00 ComboFix2.txt 2010-03-20 02:13 ComboFix3.txt 2010-03-19 23:01 ComboFix4.txt 2010-03-19 21:40 ComboFix5.txt 2010-03-20 05:52 Pre-Run: 209,531,801,600 bytes free Post-Run: 210,347,761,664 bytes free - - End Of File - - 2558B30AD6C4B2E8532E10A8D1758BA6

Sorry for being impatient. I appreciate your help. Here are the logs you requested DDS LOG DDS (Ver_10-03-17.01) - NTFSx86 Run by Pam at 21:07:46.81 on Fri 03/19/2010 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_18 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1791.1311 [GMT -5:00] ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe svchost.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\WINDOWS\explorer.exe C:\Program Files\Alltel\QuickLink Mobile\QuickLink Mobile.exe C:\Documents and Settings\Pam\Desktop\dds.scr ============== Pseudo HJT Report =============== uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn\YTSingleInstance.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll uRun: [spybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 8.0\acrobat\Acrotray.exe" mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [RTHDCPL] RTHDCPL.EXE mRun: [skyTel] SkyTel.EXE mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [intuit SyncManager] c:\program files\common files\intuit\sync\IntuitSyncManager.exe startup mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000003}\_SC_Acrobat.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobea~2.lnk - c:\program files\adobe\acrobat 8.0\acrobat\AdobeCollabSync.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe IE: Append to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1260490627171 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab TCP: {3FD7FDA8-F3FC-43EF-B10B-411AEE834083} = 75.116.127.154 75.116.63.154 Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL Handler: intu-help-qb3 - {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - c:\program files\intuit\quickbooks 2010\HelpAsyncPluggableProtocol.dll Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - c:\windows\system32\mscoree.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\pam\applic~1\mozilla\firefox\profiles\0wl5i4zl.default\ FF - prefs.js: browser.startup.homepage - hxxp://us.mc370.mail.yahoo.com/mc/welcome?.gx=1&.tm=1263491915&.rand=c4idftimdjbmv FF - prefs.js: network.proxy.type - 4 FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} ---- FIREFOX POLICIES ---- FF - user.js: yahoo.ytff.general.dontshowhpoffer - truec:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); ============= SERVICES / DRIVERS =============== R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2010-3-19 236368] R2 ubsbm;Unibrain 1394 SBM Driver;c:\windows\system32\drivers\UBSBM.sys [2005-7-27 14080] R2 ubumapi;Unibrain 1394 FireAPI Driver;c:\windows\system32\drivers\UBUMAPI.sys [2005-7-27 36352] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2010-3-19 19160] R3 ubohci;Unibrain 1394 OHCI Driver;c:\windows\system32\drivers\ubohci.sys [2005-7-27 77056] S2 dsdeeixo;Config Monitor;c:\windows\system32\svchost.exe -k netsvcs [2006-2-28 14336] S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [2009-12-10 100992] =============== Created Last 30 ================ 2010-03-19 23:48:32 0 d-s---w- C:\ComboFix 2010-03-19 20:24:23 105088 ----a-r- c:\windows\system32\drivers\nvata_2.sys 2010-03-19 20:22:41 0 d-sha-r- C:\cmdcons 2010-03-19 20:11:15 98816 ----a-w- c:\windows\sed.exe 2010-03-19 20:11:15 77312 ----a-w- c:\windows\MBR.exe 2010-03-19 20:11:15 261632 ----a-w- c:\windows\PEV.exe 2010-03-19 20:11:15 161792 ----a-w- c:\windows\SWREG.exe 2010-03-19 19:54:25 552 ----a-w- c:\windows\system32\d3d8caps.dat 2010-03-19 19:53:59 664 ----a-w- c:\windows\system32\d3d9caps.dat 2010-03-19 19:45:03 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-03-19 19:45:02 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-03-19 19:45:02 0 d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-03-19 19:12:18 4526 ----a-w- c:\windows\system32\PerfStringBackup.TMP 2010-03-19 19:07:51 0 d-----w- c:\windows\system32\wbem\Repository 2010-03-19 18:20:36 0 d-----w- c:\program files\Malwarebytes' Anti-Malware(2) 2010-03-19 17:54:29 0 d-----w- c:\windows\system32\LogFiles 2010-03-19 17:08:01 0 d-----w- c:\program files\Spybot - Search & Destroy 2010-03-19 17:08:01 0 d-----w- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2010-03-09 22:12:19 0 d-----w- C:\Viper Books 2010-03-09 21:37:05 4194304 ----a-w- c:\windows\system32\cdintf400.dll 2010-03-09 21:33:39 0 d-----w- c:\program files\Intuit 2010-03-09 21:33:39 0 d-----w- c:\program files\common files\Intuit 2010-03-09 21:33:39 0 d-----w- c:\docume~1\alluse~1\applic~1\Nuance 2010-03-09 21:33:39 0 d-----w- c:\docume~1\alluse~1\applic~1\Intuit 2010-03-09 21:33:20 95 ----a-w- c:\windows\QBChanUtil_Trigger.ini 2010-03-09 21:33:20 0 d-----w- c:\docume~1\alluse~1\applic~1\SQL Anywhere 11 2010-03-09 21:33:19 0 d-----w- c:\docume~1\alluse~1\applic~1\COMMON FILES 2010-03-09 21:32:34 0 d-----w- c:\program files\MSXML 4.0 2010-03-09 21:28:34 0 d-----w- c:\windows\Intuit ==================== Find3M ==================== 2010-02-11 17:27:51 411368 ----a-w- c:\windows\system32\deploytk.dll 2009-03-21 14:06:58 556260 --sha-r- c:\windows\system32\euetjw.dll 2009-12-13 04:15:56 245760 --sha-w- c:\windows\system32\config\systemprofile\ietldcache\index.dat 2009-12-13 04:15:56 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009121220091213\index.dat ============= FINISH: 21:08:01.23 =============== COMBOFIX LOG ComboFix 10-03-19.04 - Pam 03/19/2010 21:09:48.5.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1791.1312 [GMT -5:00] Running from: c:\documents and settings\Pam\Desktop\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2010-02-20 to 2010-03-20 ))))))))))))))))))))))))))))))) . 2010-03-19 20:24 . 2006-06-28 16:38 105088 ----a-r- c:\windows\system32\drivers\nvata_2.sys 2010-03-19 19:54 . 2010-03-19 19:54 552 ----a-w- c:\windows\system32\d3d8caps.dat 2010-03-19 19:53 . 2010-03-19 19:54 664 ----a-w- c:\windows\system32\d3d9caps.dat 2010-03-19 19:45 . 2010-01-07 21:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-03-19 19:45 . 2010-03-19 19:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-03-19 19:45 . 2010-01-07 21:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-03-19 19:07 . 2010-03-19 19:07 -------- d-----w- c:\windows\system32\wbem\Repository 2010-03-19 18:20 . 2010-03-19 19:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware(2) 2010-03-19 17:54 . 2010-03-19 17:54 -------- d-----w- c:\windows\system32\LogFiles 2010-03-19 17:08 . 2010-03-19 20:09 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2010-03-19 17:08 . 2010-03-19 20:09 -------- d-----w- c:\program files\Spybot - Search & Destroy 2010-03-13 00:36 . 2010-03-13 00:36 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Intuit 2010-03-11 20:18 . 2010-03-11 20:18 1687 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\qbbackup.sys 2010-03-10 09:30 . 2010-03-10 09:30 975136 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\qbpatch2.exe 2010-03-10 09:30 . 2010-03-10 09:30 44832 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\qbpatch.exe 2010-03-10 09:30 . 2010-03-10 09:30 499712 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\msvcp71.dll 2010-03-10 09:30 . 2010-03-10 09:30 348160 ----a-w- c:\documents and settings\All Users\Application Data\Intuit\QuickBooks 2010\Components\DownloadQB20\Patch\msvcr71.dll 2010-03-09 22:12 . 2010-03-09 22:12 -------- d-----w- C:\Viper Books 2010-03-09 21:47 . 2010-03-09 21:47 -------- d-----w- c:\documents and settings\Pam\Local Settings\Application Data\Intuit 2010-03-09 21:37 . 2009-06-22 15:14 4194304 ----a-w- c:\windows\system32\cdintf400.dll 2010-03-09 21:33 . 2010-03-13 00:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Intuit 2010-03-09 21:33 . 2010-03-09 21:34 -------- d-----w- c:\program files\Common Files\Intuit 2010-03-09 21:33 . 2010-03-09 21:33 -------- d-----w- c:\program files\Intuit 2010-03-09 21:33 . 2010-03-09 21:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Nuance 2010-03-09 21:33 . 2010-03-09 22:12 -------- d-----w- c:\documents and settings\All Users\Application Data\SQL Anywhere 11 2010-03-09 21:33 . 2010-03-09 21:33 -------- d-----w- c:\documents and settings\All Users\Application Data\COMMON FILES 2010-03-09 21:32 . 2010-03-09 21:32 -------- d-----w- c:\program files\MSXML 4.0 2010-03-09 21:28 . 2010-03-09 21:28 -------- d-----w- c:\windows\Intuit 2010-02-24 05:21 . 2010-02-24 05:21 -------- d-----w- c:\windows\Sun . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-03-19 19:12 . 2010-03-19 19:12 4526 ----a-w- c:\windows\system32\PerfStringBackup.TMP 2010-03-09 21:53 . 2009-12-11 00:59 21976 ----a-w- c:\documents and settings\Pam\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-02-11 17:30 . 2010-02-11 17:30 -------- d-----w- c:\program files\Common Files\Java 2010-02-11 17:30 . 2010-02-11 17:30 503808 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6bccd7a8-n\msvcp71.dll 2010-02-11 17:30 . 2010-02-11 17:30 499712 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6bccd7a8-n\jmc.dll 2010-02-11 17:30 . 2010-02-11 17:30 348160 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-6bccd7a8-n\msvcr71.dll 2010-02-11 17:28 . 2010-02-11 17:28 61440 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-11b5169c-n\decora-sse.dll 2010-02-11 17:28 . 2010-02-11 17:28 12800 ----a-w- c:\documents and settings\Pam\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-11b5169c-n\decora-d3d.dll 2010-02-11 17:27 . 2010-02-11 17:28 411368 ----a-w- c:\windows\system32\deploytk.dll 2010-02-11 17:27 . 2010-02-11 17:27 -------- d-----w- c:\program files\Java 2009-03-21 14:06 . 2006-02-28 12:00 556260 --sha-r- c:\windows\system32\euetjw.dll . ((((((((((((((((((((((((((((( SnapShot@2010-03-19_20.31.53 ))))))))))))))))))))))))))))))))))))))))) . + 2010-03-19 22:54 . 2010-03-19 22:54 16384 c:\windows\Temp\Perflib_Perfdata_188.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-23 620152] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-07-12 7626752] "nwiz"="nwiz.exe" [2006-07-12 1519616] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-07-12 86016] "RTHDCPL"="RTHDCPL.EXE" [2006-06-01 16208384] "SkyTel"="SkyTel.EXE" [2006-05-16 2879488] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504] "Intuit SyncManager"="c:\program files\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2009-08-31 996616] "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-01-07 429392] c:\documents and settings\All Users\Start Menu\Programs\Startup\ Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe [2009-12-10 295606] Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] QuickBooks Update Agent.lnk - c:\program files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe [2009-9-3 1153824] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Intuit\\QuickBooks 2010\\QBDBMgrN.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1225:TCP"= 1225:TCP:omfbqo R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [3/19/2010 2:45 PM 236368] R2 ubsbm;Unibrain 1394 SBM Driver;c:\windows\system32\drivers\UBSBM.sys [7/27/2005 6:25 PM 14080] R2 ubumapi;Unibrain 1394 FireAPI Driver;c:\windows\system32\drivers\UBUMAPI.sys [7/27/2005 6:25 PM 36352] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [3/19/2010 2:45 PM 19160] R3 ubohci;Unibrain 1394 OHCI Driver;c:\windows\system32\drivers\ubohci.sys [7/27/2005 6:25 PM 77056] S2 dsdeeixo;Config Monitor;c:\windows\system32\svchost.exe -k netsvcs [2/28/2006 7:00 AM 14336] S3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\drivers\ewusbnet.sys [12/10/2009 4:30 PM 100992] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs dsdeeixo . . ------- Supplementary Scan ------- . uInternet Settings,ProxyOverride = *.local IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 Handler: intu-help-qb3 - {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - c:\program files\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll FF - ProfilePath - c:\documents and settings\Pam\Application Data\Mozilla\Firefox\Profiles\0wl5i4zl.default\ FF - prefs.js: browser.startup.homepage - hxxp://us.mc370.mail.yahoo.com/mc/welcome?.gx=1&.tm=1263491915&.rand=c4idftimdjbmv FF - prefs.js: network.proxy.type - 4 FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- FF - user.js: yahoo.ytff.general.dontshowhpoffer - true. ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-03-19 21:11 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\dsdeeixo] "ServiceDll"="c:\windows\system32\euetjw.dll" . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'explorer.exe'(2196) c:\windows\system32\WININET.dll c:\windows\system32\webcheck.dll c:\windows\system32\IEFRAME.dll . Completion time: 2010-03-19 21:13:10 ComboFix-quarantined-files.txt 2010-03-20 02:13 ComboFix2.txt 2010-03-19 23:01 ComboFix3.txt 2010-03-19 21:40 ComboFix4.txt 2010-03-19 20:48 ComboFix5.txt 2010-03-20 02:09 Pre-Run: 209,554,919,424 bytes free Post-Run: 209,541,996,544 bytes free - - End Of File - - A14DD3B0DDDA47BF45FB69C39F5F390E HijackThis Log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:13:56 PM, on 3/19/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\WINDOWS\explorer.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Documents and Settings\Pam\Desktop\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [intuit SyncManager] C:\Program Files\Common Files\Intuit\Sync\IntuitSyncManager.exe startup O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1260490627171 O18 - Protocol: intu-help-qb3 - {C5E479EA-0A65-4B05-8C6C-2FC8CC682EB4} - C:\Program Files\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing) O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: QBCFMonitorService - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 7990 bytes

Anyone? Bueller?

Okay, tried one other thing that I found on forums. Still no luck. So here is the latest HJT log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 6:09:14 PM, on 3/19/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\WINDOWS\explorer.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Documents and Settings\Pam\Desktop\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [intuit SyncManager] C:\Program Files\Common Files\Intuit\Sync\IntuitSyncManager.exe startup O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1260490627171 O18 - Protocol: intu-help-qb3 - {C5E479EA-0A65-4B05-8C6C-2FC8CC682EB4} - C:\Program Files\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing) O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: QBCFMonitorService - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 7990 bytes

Oh, and I can't access malwarebytes.org via that machine

The infected machine cannot access malwarebytes.org Tried all the tricks I could find on forums. Got mbam to run, but won't update Ran ComboFix and HijakThis Any help would be appreciated Here's the log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 3:57:24 PM, on 3/19/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\WINDOWS\explorer.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Documents and Settings\Pam\Desktop\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [skyTel] SkyTel.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [intuit SyncManager] C:\Program Files\Common Files\Intuit\Sync\IntuitSyncManager.exe startup O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1260490627171 O18 - Protocol: intu-help-qb3 - {C5E479EA-0A65-4B05-8C6C-2FC8CC682EB4} - C:\Program Files\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing) O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: QBCFMonitorService - Intuit - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 8104 bytes