azygos

Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4276 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 7/5/2010 2:03:39 PM mbam-log-2010-07-05 (14-03-39).txt Scan type: Full scan (C:\|D:\|) Objects scanned: 306341 Time elapsed: 1 hour(s), 25 minute(s), 48 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Users\Saurav\AppData\Local\Temp\dssknt.exe (Virus.Agent) -> Quarantined and deleted successfully. D:\Program Files\BookCAT\Keygen.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

OTL logfile created on: 7/5/2010 11:50:58 AM - Run 4 OTL by OldTimer - Version 3.2.7.1 Folder = C:\Download 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 40.00% Memory free 7.00 Gb Paging File | 5.00 Gb Available in Paging File | 73.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 70.22 Gb Total Space | 36.12 Gb Free Space | 51.43% Space Free | Partition Type: NTFS Drive D: | 154.23 Gb Total Space | 107.27 Gb Free Space | 69.55% Space Free | Partition Type: NTFS Drive E: | 97.65 Gb Total Space | 2.70 Gb Free Space | 2.76% Space Free | Partition Type: NTFS Drive F: | 195.31 Gb Total Space | 9.13 Gb Free Space | 4.67% Space Free | Partition Type: NTFS Drive G: | 195.31 Gb Total Space | 7.15 Gb Free Space | 3.66% Space Free | Partition Type: NTFS Drive H: | 195.31 Gb Total Space | 5.70 Gb Free Space | 2.92% Space Free | Partition Type: NTFS Drive I: | 48.83 Gb Total Space | 3.06 Gb Free Space | 6.26% Space Free | Partition Type: NTFS Drive J: | 146.48 Gb Total Space | 3.45 Gb Free Space | 2.35% Space Free | Partition Type: NTFS Drive M: | 214.21 Gb Total Space | 21.00 Gb Free Space | 9.80% Space Free | Partition Type: NTFS Drive O: | 52.62 Gb Total Space | 0.75 Gb Free Space | 1.43% Space Free | Partition Type: NTFS Computer Name: PC-2010 Current User Name: Saurav Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard ========== Processes (SafeList) ========== PRC - [2010/07/05 11:49:43 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Download\OTL.exe PRC - [2010/06/28 02:06:32 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2010/06/10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe PRC - [2010/04/22 13:59:36 | 000,339,016 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe PRC - [2010/04/13 17:17:44 | 000,961,096 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe PRC - [2010/04/12 16:31:06 | 001,498,696 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe PRC - [2010/04/12 16:31:00 | 001,069,640 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe PRC - [2010/04/12 16:31:00 | 000,410,696 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe PRC - [2010/04/01 14:46:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe PRC - [2009/01/06 23:25:02 | 000,689,464 | ---- | M] (American Power Conversion Corporation) -- C:\Program Files (x86)\APC\APC PowerChute Personal Edition\mainserv.exe PRC - [2009/01/06 23:24:54 | 000,656,696 | ---- | M] (American Power Conversion Corporation) -- C:\Program Files (x86)\APC\APC PowerChute Personal Edition\apcsystray.exe ========== Modules (SafeList) ========== MOD - [2010/07/05 11:49:43 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Download\OTL.exe MOD - [2009/07/14 06:44:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009/07/14 06:33:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010/03/03 09:42:12 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2009/07/14 07:11:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService) SRV:64bit: - [2009/07/14 07:11:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc) SRV:64bit: - [2009/07/14 07:11:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009/07/14 07:10:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService) SRV:64bit: - [2009/07/14 07:10:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010/06/10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2010/04/22 13:59:36 | 000,339,016 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe -- (GDScan) SRV - [2010/04/19 17:15:04 | 000,262,376 | ---- | M] (Systweak Inc., (www.systweak.com)) [Auto | Running] -- C:\Program Files (x86)\Advanced System Optimizer 3\ASO3DefragSrv64.exe -- (ASO3DiskOptimizer) SRV - [2010/04/16 05:08:54 | 001,666,096 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe -- (GDFwSvc) SRV - [2010/04/12 16:31:00 | 001,069,640 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe -- (AVKProxy) SRV - [2010/04/12 16:31:00 | 000,410,696 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe -- (AVKService) SRV - [2010/03/18 17:23:04 | 000,044,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe -- (aspnet_state) SRV - [2010/03/18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64) SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010/03/15 11:23:40 | 001,778,336 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe -- (AVKWCtl) SRV - [2009/01/06 23:25:02 | 000,689,464 | ---- | M] (American Power Conversion Corporation) [Auto | Running] -- C:\Program Files (x86)\APC\APC PowerChute Personal Edition\mainserv.exe -- (APC UPS Service) ========== Driver Services (SafeList) ========== DRV:64bit: - File not found [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pxscan.sys -- (pxscan) DRV:64bit: - File not found [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\pxrts.sys -- (pxrts) DRV:64bit: - File not found [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pxkbf.sys -- (pxkbf) DRV:64bit: - File not found [File_System | Auto | Stopped] -- C:\Windows\SysNative\DRIVERS\eamonm.sys -- (eamonm) DRV:64bit: - [2010/06/29 09:33:33 | 000,106,224 | ---- | M] (G Data Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GRD.sys -- (GRD) DRV:64bit: - [2010/06/29 09:06:03 | 000,057,288 | ---- | M] (G DATA Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PktIcpt.sys -- (GDPkIcpt) DRV:64bit: - [2010/06/29 09:06:03 | 000,040,392 | ---- | M] (G Data Software AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\GDBehave.sys -- (GDBehave) DRV:64bit: - [2010/06/29 09:05:59 | 000,049,096 | ---- | M] (G Data Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HookCentre.sys -- (HookCentre) DRV:64bit: - [2010/06/29 09:05:42 | 000,084,936 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\MiniIcpt.sys -- (GDMnIcpt) DRV:64bit: - [2010/06/29 09:05:41 | 000,048,584 | ---- | M] (G DATA Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gdwfpcd64.sys -- (gdwfpcd) DRV:64bit: - [2010/06/02 02:36:45 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2010/05/11 12:00:40 | 000,020,968 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz133_x64.sys -- (cpuz133) DRV:64bit: - [2010/04/16 21:24:34 | 000,027,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (USB) DRV:64bit: - [2010/03/03 09:53:10 | 006,402,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:64bit: - [2010/03/03 09:53:10 | 006,402,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag) DRV:64bit: - [2010/03/03 08:37:32 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2009/12/30 12:21:24 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt) DRV:64bit: - [2009/09/28 02:02:38 | 000,019,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\PeerBlock\pbfilter.sys -- (pbfilter) DRV:64bit: - [2009/09/23 07:16:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr) DRV:64bit: - [2009/09/23 07:16:17 | 000,359,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm) DRV:64bit: - [2009/09/23 07:02:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb) DRV:64bit: - [2009/09/23 07:02:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus) DRV:64bit: - [2009/08/20 21:35:06 | 000,239,616 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2009/07/18 00:22:00 | 000,201,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:64bit: - [2009/07/14 07:22:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2009/07/14 07:22:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2009/07/14 07:22:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/14 07:18:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/14 07:17:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009/07/14 07:15:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus) DRV:64bit: - [2009/07/14 07:15:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt) DRV:64bit: - [2009/07/14 07:15:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc) DRV:64bit: - [2009/07/14 07:15:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/07/14 05:12:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap) DRV:64bit: - [2009/07/14 05:12:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID) DRV:64bit: - [2009/07/14 04:54:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC) DRV:64bit: - [2009/06/11 02:08:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009/06/11 02:04:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/11 02:04:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/11 02:04:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/11 02:01:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009/05/09 01:14:20 | 000,015,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr) DRV:64bit: - [2009/05/04 22:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV:64bit: - [2009/04/03 06:39:58 | 000,034,872 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:64bit: - [2008/02/22 18:54:00 | 000,019,496 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GearAspiWDM) DRV - [2010/03/13 12:58:52 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/06/21 15:59:36] [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/ IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BA C5 0B C6 9C 07 CB 01 [binary data] IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.1.27 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {5384767E-00D9-40E9-B72F-9CC39D655D6F}:1.2.9.1 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2 FF - prefs.js..extensions.enabledItems: {a7c6cf7f-112c-4500-a7ea-39801a327e5f}:1.0.9 FF - prefs.js..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170633FE}:20.1.0.4 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/06/28 02:06:33 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/06/28 02:06:33 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010/06/18 11:17:53 | 000,000,000 | ---D | M] -- C:\Users\Saurav\AppData\Roaming\Mozilla\Extensions [2010/07/05 08:10:55 | 000,000,000 | ---D | M] -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions [2010/07/03 21:44:25 | 000,000,000 | ---D | M] (FlashGot) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34} [2010/06/23 13:49:48 | 000,000,000 | ---D | M] (EPUBReader) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2010/06/23 14:07:05 | 000,000,000 | ---D | M] (FireFTP) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2010/06/23 13:52:40 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010/07/05 08:10:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010/06/29 09:05:51 | 000,000,000 | ---D | M] (G Data WebFilter) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} [2010/06/21 15:42:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010/06/21 15:42:17 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll [2010/06/21 14:21:00 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll [2010/03/31 12:02:08 | 000,787,744 | ---- | M] (Medical Informatics Engineering, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npzzatif.dll O1 HOSTS File: ([2010/07/05 08:29:35 | 000,000,899 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 http://internetdownloadmanager.com O1 - Hosts: 127.0.0.1 www.internetdownloadmanager.com O2:64bit: - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIEx64.dll (G Data Software AG) O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Tonec Inc.) O2 - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIE.dll (G Data Software AG) O3:64bit: - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIEx64.dll (G Data Software AG) O3 - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIE.dll (G Data Software AG) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Display] C:\Program Files (x86)\APC\APC PowerChute Personal Edition\DataCollectionLauncher.exe (American Power Conversion Corporation) O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG) O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG) O4 - HKU\S-1-5-19..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8:64bit: - Extra context menu item: Download FLV video content with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm () O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 59.179.243.70 203.94.243.70 O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (sasnative64) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010/07/05 11:05:46 | 000,062,464 | ---- | C] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll-10222339 [2010/07/05 08:10:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\IDM [2010/07/05 08:10:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\Downloads [2010/07/05 08:10:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager [2010/07/05 08:02:23 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys [2010/07/05 08:02:22 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group [2010/07/05 07:41:16 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2010/07/05 06:39:44 | 000,000,000 | ---D | C] -- C:\Users\Saurav\DoctorWeb [2010/07/04 12:20:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2010/07/04 11:15:30 | 000,000,000 | ---D | C] -- C:\_OTS [2010/07/01 23:39:01 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\EMDB [2010/07/01 23:38:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EMDB [2010/07/01 18:42:40 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\G DATA [2010/06/29 09:06:03 | 000,057,288 | ---- | C] (G DATA Software AG) -- C:\Windows\SysNative\drivers\PktIcpt.sys [2010/06/29 09:05:59 | 000,049,096 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys [2010/06/29 02:44:22 | 000,000,000 | ---D | C] -- C:\_OTL [2010/06/28 20:57:47 | 000,106,224 | ---- | C] (G Data Software) -- C:\Windows\SysNative\drivers\GRD.sys [2010/06/28 20:55:50 | 000,040,392 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\GDBehave.sys [2010/06/28 19:51:51 | 000,084,936 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\MiniIcpt.sys [2010/06/28 19:51:21 | 000,126,312 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\GEARASpi64.dll [2010/06/28 19:51:21 | 000,019,496 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys [2010/06/28 19:51:15 | 000,048,584 | ---- | C] (G DATA Software AG) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys [2010/06/28 19:50:59 | 000,000,000 | ---D | C] -- C:\ProgramData\G DATA [2010/06/28 19:50:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\G Data [2010/06/28 19:50:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\G DATA [2010/06/28 03:00:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Advanced System Optimizer 3 [2010/06/26 14:40:02 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\RaimaRadioPro [2010/06/26 14:39:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RarmaRadio [2010/06/26 13:20:38 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Ashampoo [2010/06/26 13:20:27 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\ashampoo [2010/06/26 13:20:27 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo [2010/06/26 13:20:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ashampoo [2010/06/25 22:53:33 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\VitySoft [2010/06/24 00:05:07 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll [2010/06/24 00:05:07 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll [2010/06/24 00:05:07 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll [2010/06/24 00:05:07 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll [2010/06/24 00:05:07 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll [2010/06/24 00:05:07 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll [2010/06/24 00:05:07 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll [2010/06/24 00:05:07 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll [2010/06/24 00:05:06 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll [2010/06/24 00:05:06 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll [2010/06/24 00:05:06 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll [2010/06/24 00:05:06 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll [2010/06/24 00:05:06 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2010/06/24 00:05:06 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2010/06/24 00:05:06 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll [2010/06/24 00:05:06 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll [2010/06/24 00:05:06 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll [2010/06/24 00:05:06 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll [2010/06/24 00:05:06 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2010/06/24 00:05:06 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2010/06/24 00:05:06 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2010/06/24 00:05:06 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2010/06/24 00:05:06 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2010/06/24 00:05:06 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2010/06/24 00:05:05 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2010/06/24 00:05:05 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2010/06/24 00:05:05 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2010/06/24 00:05:05 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2010/06/24 00:05:04 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2010/06/24 00:05:04 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2010/06/24 00:05:04 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2010/06/24 00:05:04 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2010/06/24 00:05:04 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2010/06/24 00:05:04 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2010/06/24 00:05:04 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2010/06/24 00:05:04 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2010/06/24 00:05:03 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2010/06/24 00:05:03 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2010/06/24 00:05:03 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2010/06/24 00:05:03 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2010/06/24 00:05:03 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2010/06/24 00:05:03 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2010/06/24 00:05:03 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2010/06/24 00:05:03 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2010/06/24 00:05:03 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2010/06/24 00:05:03 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2010/06/24 00:05:02 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2010/06/24 00:05:02 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2010/06/24 00:05:02 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2010/06/24 00:05:02 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2010/06/24 00:05:02 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2010/06/24 00:05:02 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2010/06/24 00:05:02 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2010/06/24 00:05:02 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2010/06/24 00:05:01 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2010/06/24 00:05:01 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2010/06/24 00:05:00 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2010/06/24 00:05:00 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2010/06/24 00:05:00 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2010/06/24 00:05:00 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2010/06/24 00:04:59 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2010/06/24 00:04:59 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2010/06/24 00:04:59 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2010/06/24 00:04:59 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2010/06/23 23:53:13 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx [2010/06/23 23:15:28 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2010/06/23 23:15:28 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2010/06/23 23:15:28 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2010/06/23 23:15:28 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2010/06/23 23:15:28 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2010/06/23 23:15:28 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2010/06/23 23:15:28 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll [2010/06/23 23:15:28 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2010/06/23 23:15:28 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2010/06/23 23:15:28 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2010/06/23 23:15:28 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2010/06/23 23:15:28 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll [2010/06/23 23:15:27 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2010/06/23 23:15:27 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2010/06/23 23:15:27 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2010/06/23 23:15:27 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2010/06/23 23:15:27 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2010/06/23 23:15:27 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2010/06/23 23:15:27 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2010/06/23 23:15:27 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2010/06/23 23:15:27 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2010/06/23 23:15:27 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2010/06/23 23:15:27 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2010/06/23 23:15:27 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2010/06/23 23:15:26 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2010/06/23 23:15:26 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2010/06/23 23:15:26 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2010/06/23 23:15:26 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2010/06/23 23:15:26 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2010/06/23 23:15:26 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2010/06/23 23:15:26 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2010/06/23 23:15:26 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2010/06/23 23:15:26 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2010/06/23 23:15:26 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2010/06/23 23:15:26 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2010/06/23 23:15:26 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2010/06/23 23:15:26 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2010/06/23 23:15:26 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2010/06/23 23:15:25 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2010/06/23 23:15:25 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2010/06/23 23:15:25 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2010/06/23 23:15:25 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2010/06/23 23:15:25 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2010/06/23 23:15:25 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2010/06/23 23:15:24 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2010/06/23 23:15:24 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2010/06/23 23:15:24 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2010/06/23 23:15:24 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2010/06/23 23:15:24 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2010/06/23 23:15:24 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2010/06/23 23:15:23 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2010/06/23 23:15:23 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2010/06/23 23:15:23 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll [2010/06/23 23:15:23 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll [2010/06/23 23:15:23 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll [2010/06/23 23:15:23 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll [2010/06/23 23:15:23 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2010/06/23 23:15:23 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2010/06/23 23:15:23 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2010/06/23 23:15:23 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2010/06/23 23:15:22 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll [2010/06/23 23:15:22 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll [2010/06/23 23:15:22 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll [2010/06/23 23:15:22 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll [2010/06/23 23:15:22 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll [2010/06/23 23:15:22 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll [2010/06/23 23:15:22 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll [2010/06/23 23:15:22 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll [2010/06/23 23:15:22 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll [2010/06/23 23:15:22 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll [2010/06/23 23:15:22 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll [2010/06/23 23:15:22 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll [2010/06/23 23:15:21 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2010/06/23 23:15:21 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2010/06/23 23:15:21 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll [2010/06/23 23:15:21 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll [2010/06/23 23:15:21 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll [2010/06/23 23:15:21 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll [2010/06/23 23:15:21 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll [2010/06/23 23:15:21 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll [2010/06/23 23:15:20 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll [2010/06/23 23:15:20 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll [2010/06/23 23:15:20 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll [2010/06/23 23:15:20 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll [2010/06/23 23:15:20 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll [2010/06/23 23:15:20 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll [2010/06/23 23:15:20 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll [2010/06/23 23:15:20 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll [2010/06/23 23:15:20 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll [2010/06/23 23:15:20 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll [2010/06/23 23:15:20 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll [2010/06/23 23:15:20 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll [2010/06/23 23:15:20 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll [2010/06/23 23:15:20 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll [2010/06/23 23:15:20 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll [2010/06/23 23:15:20 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll [2010/06/23 23:15:18 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll [2010/06/23 23:15:18 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll [2010/06/23 23:15:17 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll [2010/06/23 23:15:17 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll [2010/06/23 23:15:17 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll [2010/06/23 23:15:17 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll [2010/06/23 23:15:17 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll [2010/06/23 23:15:17 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll [2010/06/23 23:15:17 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll [2010/06/23 23:15:17 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll [2010/06/23 23:15:16 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll [2010/06/23 23:15:16 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll [2010/06/23 23:15:16 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll [2010/06/23 23:15:16 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll [2010/06/23 23:15:16 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll [2010/06/23 23:15:16 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll [2010/06/23 23:15:16 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll [2010/06/23 23:15:16 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll [2010/06/23 23:00:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Games [2010/06/23 17:41:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\MiniLyrics [2010/06/23 14:24:23 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010/06/23 14:24:23 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010/06/23 14:24:23 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010/06/23 14:24:22 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010/06/23 14:24:22 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010/06/23 14:24:22 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010/06/23 14:24:22 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010/06/23 12:33:00 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2010/06/23 12:33:00 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2010/06/22 23:31:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oxford [2010/06/22 13:12:40 | 000,000,000 | ---D | C] -- C:\Program Files\Canon [2010/06/22 13:12:28 | 000,000,000 | -H-D | C] -- C:\Windows\SysNative\CanonIJ Uninstaller Information [2010/06/22 13:12:18 | 000,279,040 | ---- | C] (CANON INC.) -- C:\Windows\SysNative\CNMLM9M.DLL [2010/06/22 13:12:04 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ [2010/06/22 13:11:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon [2010/06/22 12:59:30 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ [2010/06/22 11:44:35 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\SoundSpectrum [2010/06/22 11:40:06 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2010/06/22 11:40:05 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2010/06/22 11:40:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SoundSpectrum [2010/06/22 10:48:41 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Zero G Registry [2010/06/22 10:48:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Britannica 10.0 [2010/06/22 10:47:49 | 000,000,000 | -H-D | C] -- C:\Users\Saurav\InstallAnywhere [2010/06/22 01:55:46 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\vlc [2010/06/22 01:55:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN [2010/06/22 01:53:13 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\VS Revo Group [2010/06/21 23:19:21 | 000,000,000 | ---D | C] -- C:\Programs [2010/06/21 23:14:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BR4 [2010/06/21 23:01:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Everything [2010/06/21 22:50:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010/06/21 22:14:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2010/06/21 21:49:50 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\DMCache [2010/06/21 20:03:45 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\ACD Systems [2010/06/21 20:03:45 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\ACD Systems [2010/06/21 20:00:27 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems [2010/06/21 20:00:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ACD Systems [2010/06/21 20:00:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ACD Systems [2010/06/21 19:58:30 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Downloaded Installations [2010/06/21 16:36:22 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\Digsby Logs [2010/06/21 16:32:51 | 000,000,000 | ---D | C] -- C:\Lyrics [2010/06/21 16:32:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Minilyrics [2010/06/21 16:30:06 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Digsby [2010/06/21 16:30:06 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Digsby [2010/06/21 16:30:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Digsby [2010/06/21 16:28:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Digsby [2010/06/21 16:27:20 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Malwarebytes [2010/06/21 16:27:15 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010/06/21 16:27:14 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010/06/21 16:27:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010/06/21 16:27:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010/06/21 16:15:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Systweak [2010/06/21 16:14:53 | 000,000,000 | ---D | C] -- C:\Windows\Repair [2010/06/21 16:14:52 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Systweak [2010/06/21 16:00:02 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Cyberlink [2010/06/21 16:00:01 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\CyberLink [2010/06/21 16:00:01 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\CyberLink [2010/06/21 15:59:37 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink [2010/06/21 15:59:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\CyberLink [2010/06/21 15:59:02 | 000,000,000 | ---D | C] -- C:\Program Files\ComicRack [2010/06/21 15:58:37 | 000,505,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp71.dll [2010/06/21 15:58:37 | 000,353,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll [2010/06/21 15:58:37 | 000,029,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2010/06/21 15:58:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CyberLink [2010/06/21 15:58:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp [2010/06/21 15:47:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010/06/21 15:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010/06/21 15:42:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010/06/21 15:42:22 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010/06/21 15:42:22 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010/06/21 15:42:22 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010/06/21 15:42:21 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010/06/21 15:42:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010/06/21 15:30:35 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010/06/21 15:30:35 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010/06/21 15:30:35 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010/06/21 15:30:35 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010/06/21 15:30:35 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010/06/21 15:30:35 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010/06/21 15:30:35 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010/06/21 15:30:35 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010/06/21 15:18:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinDjView [2010/06/21 15:05:19 | 000,000,000 | ---D | C] -- C:\Program Files\Paint.NET [2010/06/21 15:05:10 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Paint.NET [2010/06/21 14:54:18 | 000,020,968 | ---- | C] (Windows ® Win 7 DDK provider) -- C:\Windows\SysNative\drivers\cpuz133_x64.sys [2010/06/21 14:54:18 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID [2010/06/21 14:21:32 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Foxit [2010/06/21 14:21:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software [2010/06/21 13:26:08 | 000,000,000 | ---D | C] -- C:\Download [2010/06/21 13:25:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent [2010/06/21 13:24:27 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\uTorrent [2010/06/21 13:22:34 | 000,000,000 | ---D | C] -- C:\Program Files\PeerBlock [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\zh-TW [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\zh-CN [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Virtual PC [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\tr-TR [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\th-TH [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\sv-SE [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ru-RU [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ro-RO [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pt-PT [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pt-BR [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pl-PL [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\nl-NL [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\nb-NO [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ko-KR [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ja-JP [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\it-IT [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\hu-HU [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\he-IL [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\fr-FR [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\fi-FI [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\es-ES [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\el-GR [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\da-DK [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\cs-CZ [2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ar-SA [2010/06/20 05:56:07 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpchbuspipe.dll [2010/06/20 05:56:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpchbus.sys.mui [2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcuxd.sys.mui [2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcuxd.sys.mui [2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcusb.sys.mui [2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcusb.sys.mui [2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcnfltr.sys.mui [2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcnfltr.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcuxd.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcusb.sys.mui [2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcusb.sys.mui [2010/06/20 05:56:05 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcvmm.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcnfltr.sys.mui [2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcnfltr.sys.mui [2010/06/20 05:56:03 | 004,513,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpc.exe [2010/06/20 05:56:03 | 002,262,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VPCWizard.exe [2010/06/20 05:56:03 | 001,369,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VPCSettings.exe [2010/06/20 05:56:03 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vmsal.exe [2010/06/20 05:56:03 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VMCPropertyHandler.dll [2010/06/20 05:56:03 | 000,359,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcvmm.sys [2010/06/20 05:56:03 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpchbus.sys [2010/06/20 05:56:03 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcusb.sys [2010/06/20 05:56:03 | 000,066,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcnfltr.sys [2010/06/20 05:56:02 | 001,209,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VMWindow.exe [2010/06/20 05:56:02 | 000,936,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmsal.exe [2010/06/20 04:32:24 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2010/06/20 03:51:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Office Genuine Advantage [2010/06/20 03:48:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys [2010/06/18 12:21:02 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010/06/18 12:21:02 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010/06/18 12:21:02 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010/06/18 12:21:02 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010/06/18 11:17:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Mozilla [2010/06/18 11:17:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Mozilla [2010/06/18 11:17:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010/06/18 11:16:20 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Apple Computer [2010/06/18 11:16:19 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Apple Computer [2010/06/18 11:15:50 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} [2010/06/18 11:15:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010/06/18 11:15:07 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Apple [2010/06/18 11:15:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010/06/18 11:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2010/06/18 11:14:48 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2010/06/18 11:14:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2010/06/18 11:14:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010/06/18 11:14:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2010/06/12 10:11:18 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Media Player Classic [2010/06/12 09:52:24 | 000,000,000 | ---D | C] -- C:\Program Files\MPC HomeCinema (x64) [2010/06/09 23:35:12 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip [2010/06/09 23:35:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZip ========== Files - Modified Within 30 Days ========== [2010/07/05 11:58:05 | 004,456,448 | -HS- | M] () -- C:\Users\Saurav\NTUSER.DAT [2010/07/05 11:05:46 | 000,062,464 | ---- | M] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll-10222339 [2010/07/05 08:29:35 | 000,000,899 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2010/07/05 08:25:10 | 000,019,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010/07/05 08:25:10 | 000,019,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010/07/05 08:24:29 | 000,778,150 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010/07/05 08:24:29 | 000,661,172 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010/07/05 08:24:29 | 000,121,090 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010/07/05 08:20:06 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010/07/05 08:20:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010/07/05 08:20:04 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys [2010/07/05 08:19:16 | 001,549,858 | -H-- | M] () -- C:\Users\Saurav\AppData\Local\IconCache.db [2010/07/05 08:06:31 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\At2.job [2010/07/05 08:06:31 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\At1.job [2010/07/05 08:02:24 | 000,000,973 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk [2010/07/02 00:51:27 | 000,057,952 | ---- | M] () -- C:\Users\Saurav\AppData\Local\GDIPFONTCACHEV1.DAT [2010/07/02 00:50:51 | 000,266,848 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010/07/01 23:39:00 | 000,000,899 | ---- | M] () -- C:\Users\Saurav\Desktop\EMDB.lnk [2010/06/29 09:33:33 | 000,106,224 | ---- | M] (G Data Software) -- C:\Windows\SysNative\drivers\GRD.sys [2010/06/29 09:06:03 | 000,057,288 | ---- | M] (G DATA Software AG) -- C:\Windows\SysNative\drivers\PktIcpt.sys [2010/06/29 09:06:03 | 000,040,392 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\GDBehave.sys [2010/06/29 09:06:00 | 000,002,082 | ---- | M] () -- C:\Users\Public\Desktop\G Data InternetSecurity 2011.lnk [2010/06/29 09:05:59 | 000,049,096 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys [2010/06/29 09:05:42 | 000,084,936 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\MiniIcpt.sys [2010/06/29 09:05:41 | 000,048,584 | ---- | M] (G DATA Software AG) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys [2010/06/28 03:00:24 | 000,002,276 | ---- | M] () -- C:\Users\Public\Desktop\Advanced System Optimizer.lnk [2010/06/27 22:17:07 | 000,001,470 | ---- | M] () -- C:\Users\Saurav\Desktop\Peerblock.lnk [2010/06/26 14:40:06 | 000,000,967 | ---- | M] () -- C:\Users\Saurav\Desktop\RarmaRadio.lnk [2010/06/26 13:20:25 | 000,001,185 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 10.lnk [2010/06/25 22:52:27 | 000,001,387 | ---- | M] () -- C:\Users\Saurav\Desktop\Freerapid.lnk [2010/06/23 23:02:31 | 000,001,241 | ---- | M] () -- C:\Users\Saurav\Desktop\A Vampyre Story.lnk [2010/06/22 23:33:43 | 000,001,065 | ---- | M] () -- C:\Users\Saurav\Desktop\Oxford English Dictionary.lnk [2010/06/22 13:12:42 | 000,001,804 | ---- | M] () -- C:\Users\Public\Desktop\My Printer.lnk [2010/06/22 10:53:28 | 000,001,961 | ---- | M] () -- C:\Users\Public\Desktop\Ultimate Reference Suite.lnk [2010/06/21 23:14:29 | 000,000,926 | ---- | M] () -- C:\Users\Saurav\Desktop\BookReader.lnk [2010/06/21 23:02:00 | 000,001,035 | ---- | M] () -- C:\Users\Saurav\Desktop\Search Everything.lnk [2010/06/21 22:50:45 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2010/06/21 20:00:30 | 000,002,885 | ---- | M] () -- C:\Users\Public\Desktop\ACDSee Photo Manager 12.lnk [2010/06/21 16:30:05 | 000,001,111 | ---- | M] () -- C:\Users\Saurav\Application Data\Microsoft\Internet Explorer\Quick Launch\Digsby.lnk [2010/06/21 16:30:05 | 000,001,087 | ---- | M] () -- C:\Users\Saurav\Desktop\Digsby.lnk [2010/06/21 16:27:17 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010/06/21 15:59:35 | 000,002,121 | ---- | M] () -- C:\Users\Public\Desktop\CyberLink PowerDVD 10.lnk [2010/06/21 15:59:03 | 000,000,840 | ---- | M] () -- C:\Users\Public\Desktop\ComicRack.lnk [2010/06/21 15:58:06 | 000,505,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp71.dll [2010/06/21 15:58:06 | 000,353,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll [2010/06/21 15:58:06 | 000,029,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2010/06/21 15:51:30 | 000,774,176 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010/06/21 15:42:17 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010/06/21 15:42:17 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010/06/21 15:42:17 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010/06/21 15:42:17 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010/06/21 15:05:44 | 000,001,176 | ---- | M] () -- C:\Users\Public\Desktop\Paint.NET.lnk [2010/06/21 14:54:18 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk [2010/06/21 14:21:33 | 000,001,234 | ---- | M] () -- C:\Users\Saurav\Desktop\Foxit Reader.lnk [2010/06/21 13:25:13 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\

I am running Win 7 Ultimate 64 Bit. Other OSs on my system are Win XP SP3 and Ubuntu 10.02 I most likely infected windows 7 with this file here around 15 days back. I was using ESET Smart Security 64 bit updated, and Malwarebytes Free Version both of which had erroneously reported the file as clean. http://www.virustotal.com/analisis/d1c008e...a230-1277733577 http://virscan.org/report/253011f2168eebe2...ce9b2e561d.html I was blissfully aware of the infection until a few days when I observed hectic activity when system was idle [monitor power off] which made me suspicious. On a hunch, I opened task scheduler, and found several rogue processes namely at1, at2, at3, at4, etc which were all executing a file dssknt.exe [see attached zip. Password: virus123 and screenshot task.png] The file dssknt.exe is always created in the app\local\temp folder I ran full system scan with ESS 64 which again found nothing. I ran Malwarebytes. It found something called virus.agent in file dssknt.exe and it asked me to reboot to kill the infection which I did. A google search of dssknt.exe also led me to this....http://www.threatexpert.com/report.aspx?md5=95ffe78fa1582a6f00514178011f8102 Malwarebytes only deleted the file but it didnt seem to have cleaned any registry entries or processes. Sure enough, the file and the processes in task scheduler which I had deleted returned within 12 hours. I uninstalled ESS and installed G-Data internet security 2011. Through its boot CD, i scanned the system, and it found Trojan.Generic.4078397 in firefox cache and killed it. But virus/trojan, the file dssknt.exe and the rogue processes in task scheduler were back within few hours. GMER gives me a blank log and doesn't seem to like Windows 7 64. I am attaching OTL and Malwarebytes logs along. Hope you can provide some help as I am totally exasperated by the dreadful nature of this infection dssknt.zip OTL.Txt