Jump to content

Nzah

Members
  • Posts

    16
  • Joined

  • Last visited

Reputation

0 Neutral
  1. ========== Files Created - No Company Name ========== [2010/10/04 23:03:04 | 000,111,472 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\https___web.ticketking.com_TK_printer.pdf [2010/10/04 11:57:04 | 000,002,316 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\Google Chrome.lnk [2010/10/04 11:57:04 | 000,002,294 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2010/10/04 10:23:58 | 000,007,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT [2010/10/04 10:23:58 | 000,000,806 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF [2010/09/30 13:49:22 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2010/09/30 13:49:16 | 000,260,272 | RHS- | C] () -- C:\cmldr [2010/09/30 13:44:37 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010/09/30 13:44:35 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010/09/30 13:44:35 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010/09/30 13:44:35 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010/09/30 13:44:35 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010/09/30 09:01:18 | 000,018,944 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xrxscnui.dll [2010/09/30 09:01:14 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xrxftplt.exe [2010/09/30 09:00:55 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls [2010/09/30 08:50:48 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax [2010/09/30 08:50:43 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll [2010/09/30 08:50:39 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls [2010/09/30 08:50:39 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls [2010/09/30 08:46:41 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax [2010/09/30 08:45:12 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls [2010/09/30 08:45:09 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2010/09/30 08:44:07 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2010/09/30 08:42:18 | 000,165,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt53.dll [2010/09/30 08:42:13 | 000,093,696 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt42.dll [2010/09/30 08:42:08 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt34.dll [2010/09/30 08:42:02 | 000,089,088 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt33.dll [2010/09/30 08:41:57 | 000,083,968 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt21.dll [2010/09/30 08:41:44 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2010/09/30 08:39:03 | 000,029,768 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divasu.dll [2010/09/30 08:39:02 | 000,037,962 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaprop.dll [2010/09/30 08:39:01 | 000,006,216 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaci.dll [2010/09/30 08:37:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls [2010/09/30 08:37:12 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls [2010/09/30 08:37:12 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls [2010/09/30 08:37:12 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls [2010/09/30 08:37:11 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls [2010/09/30 08:37:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls [2010/09/30 08:37:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls [2010/09/30 08:37:10 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls [2010/09/30 08:37:10 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls [2010/09/30 08:37:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls [2010/09/30 08:37:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls [2010/09/30 08:37:09 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls [2010/09/30 08:37:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls [2010/09/30 08:37:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls [2010/09/30 08:37:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls [2010/09/30 08:37:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls [2010/09/30 08:37:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls [2010/09/30 08:37:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls [2010/09/30 08:37:04 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls [2010/09/30 08:37:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls [2010/09/30 08:37:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls [2010/09/30 08:37:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls [2010/09/30 08:37:03 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls [2010/09/30 08:37:03 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls [2010/09/30 08:37:03 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls [2010/09/30 08:37:03 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls [2010/09/30 08:37:02 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls [2010/09/30 08:37:02 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls [2010/09/30 08:36:58 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls [2010/09/30 08:36:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls [2010/09/30 08:36:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls [2010/09/30 08:36:57 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls [2010/09/30 08:36:57 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls [2010/09/30 08:36:57 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls [2010/09/30 08:36:43 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls [2010/09/30 08:36:41 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls [2010/09/30 08:36:30 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atixbar.sys [2010/09/30 08:36:29 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativxbar.sys [2010/09/30 08:36:29 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativttxx.sys [2010/09/30 08:36:28 | 000,009,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativmdcd.sys [2010/09/30 08:36:27 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitvsnd.sys [2010/09/30 08:36:27 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitunep.sys [2010/09/30 08:36:26 | 000,049,920 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtcap.sys [2010/09/30 08:36:26 | 000,026,880 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtsnd.sys [2010/09/30 08:36:24 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atipcxxx.sys [2010/09/30 08:36:20 | 000,046,464 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atibt829.sys [2010/09/30 07:59:09 | 3211,046,912 | -HS- | C] () -- C:\hiberfil.sys [2010/09/29 14:52:24 | 141,302,368 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\ICP420.exe [2010/09/29 13:07:10 | 379,430,944 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\visa462full.exe [2010/09/28 21:57:08 | 000,059,205 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\Marking Scheme F2010.pdf [2010/09/28 21:56:15 | 000,012,015 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\Marking Scheme F2010.docx [2010/09/28 21:06:27 | 000,142,673 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\Unfiled Notes.pdf [2010/09/28 17:05:49 | 000,000,824 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Measurement & Automation.lnk [2010/09/27 20:23:48 | 000,002,058 | ---- | C] () -- C:\Documents and Settings\nzahirov\.recently-used.xbel [2010/09/16 04:12:04 | 000,001,741 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\HijackThis.lnk [2010/08/25 21:21:50 | 000,000,024 | ---- | C] () -- C:\WINDOWS\wininit.ini [2010/08/20 08:49:09 | 001,044,056 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat [2010/07/09 14:43:04 | 000,000,176 | ---- | C] () -- C:\WINDOWS\System32\usbiun2k.ini [2010/07/09 11:16:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\nidmfpan.ini [2010/06/10 14:46:20 | 000,000,244 | ---- | C] () -- C:\WINDOWS\System32\nirpc.ini [2010/06/02 18:44:54 | 000,003,520 | ---- | C] () -- C:\WINDOWS\System32\nipalpg.dll [2009/11/16 20:56:50 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\WMIMPLEX.dll [2009/11/16 20:56:50 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\maplec.dll [2009/11/16 20:56:50 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\maplecompat.dll [2009/11/12 10:10:43 | 000,000,048 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\analyzer.set [2009/10/21 09:29:45 | 000,000,811 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\tmpFF.log [2009/10/05 09:24:33 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\PerformaxCom.dll [2009/09/16 17:27:58 | 000,508,224 | ---- | C] () -- C:\WINDOWS\System32\ICCProfiles.dll [2009/08/03 10:00:00 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\cvintdrv.sys [2009/07/31 14:13:44 | 000,000,069 | ---- | C] () -- C:\WINDOWS\pxisys.ini [2009/07/31 14:13:44 | 000,000,030 | ---- | C] () -- C:\WINDOWS\pxiesys.ini [2009/07/07 11:47:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\eDrawingOfficeAutomator.INI [2009/06/17 10:26:12 | 000,000,721 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\tmp62.log [2009/05/11 01:22:43 | 000,004,005 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\Comma Separated Values (Windows).NOT [2009/05/11 00:55:12 | 000,029,246 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\Comma Separated Values (Windows).ADR [2009/02/09 17:48:24 | 002,854,976 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [2009/01/12 22:55:58 | 000,000,146 | ---- | C] () -- C:\WINDOWS\capture.INI [2009/01/12 22:44:18 | 000,000,379 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009/01/12 22:40:48 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\NMOCOD.DLL [2009/01/12 22:37:44 | 000,903,168 | ---- | C] () -- C:\WINDOWS\System32\mitmdl30.dll [2009/01/12 22:37:43 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\lffax60n.dll [2009/01/12 22:37:43 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\lfpng60n.dll [2009/01/12 22:37:43 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\lftif60n.dll [2009/01/12 22:37:43 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\lfpcx60n.dll [2009/01/12 22:37:43 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfpct60n.dll [2009/01/12 22:37:43 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\lfpsd60n.dll [2009/01/12 22:37:43 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\lftga60n.dll [2009/01/12 22:37:43 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwpg60n.dll [2009/01/12 22:37:43 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwmf60n.dll [2009/01/12 22:37:43 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\lfmsp60n.dll [2009/01/12 22:37:43 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\lfmac60n.dll [2009/01/12 22:37:42 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\lfcmp60n.dll [2009/01/12 22:37:42 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfeps60n.dll [2009/01/12 22:37:42 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\lfbmp60n.dll [2009/01/12 21:57:24 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\PUTTY.RND [2008/11/03 11:11:22 | 003,821,568 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\filesync.metadata [2008/10/28 22:33:46 | 000,006,950 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\PrimoPDFSet.xml [2008/10/28 22:29:28 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll [2008/10/01 12:33:48 | 000,278,528 | ---- | C] () -- C:\WINDOWS\System32\IntegMotorCANComm.dll [2008/09/15 20:14:24 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008/09/15 20:12:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008/09/15 20:12:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2008/09/15 20:11:10 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll [2008/09/08 23:25:34 | 000,000,118 | ---- | C] () -- C:\WINDOWS\ConverterCore.INI [2008/09/08 23:19:34 | 000,021,240 | ---- | C] () -- C:\WINDOWS\System32\solidlocalmon.dll [2008/09/08 23:19:34 | 000,013,560 | ---- | C] () -- C:\WINDOWS\System32\solidlocalui.dll [2008/09/08 21:39:17 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\PUTTY.RND [2008/08/09 17:55:52 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008/08/09 17:55:51 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008/08/09 17:55:47 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008/08/09 17:55:46 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008/08/09 17:55:42 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008/08/09 17:55:42 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008/06/23 15:18:05 | 000,051,712 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/06/12 14:11:46 | 000,000,013 | ---- | C] () -- C:\WINDOWS\msgtn.ini [2008/06/12 14:11:09 | 000,000,639 | ---- | C] () -- C:\WINDOWS\Powerplayer.ini [2008/06/12 14:11:04 | 000,000,693 | ---- | C] () -- C:\WINDOWS\psnetwork.ini [2008/06/08 09:25:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\linecalc.INI [2008/06/05 23:57:03 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\fusioncache.dat [2008/05/26 23:42:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ads.INI [2008/05/25 11:13:45 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI [2008/05/15 09:18:03 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2008/05/15 08:40:19 | 000,910,464 | ---- | C] () -- C:\WINDOWS\System32\igmedkrn.dll [2008/05/15 08:40:19 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4860.dll [2008/05/15 08:37:57 | 000,004,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2008/05/15 08:36:49 | 000,106,496 | ---- | C] () -- C:\WINDOWS\stkbtnpn.dll [2008/05/15 08:35:46 | 000,004,442 | ---- | C] () -- C:\WINDOWS\System32\drivers\TPPWRIF.SYS [2008/04/28 12:13:33 | 000,000,310 | ---- | C] () -- C:\WINDOWS\primopdf.ini [2007/09/27 11:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2007/09/27 11:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [2007/09/27 11:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2007/07/27 02:37:40 | 000,025,269 | ---- | C] () -- C:\WINDOWS\System32\PROCDB.INI [2007/07/27 02:37:29 | 000,000,380 | ---- | C] () -- C:\WINDOWS\System32\IPSCtrl.INI [2007/07/19 03:13:22 | 000,049,696 | ---- | C] () -- C:\WINDOWS\System32\nispdu.dll [2007/07/19 02:32:30 | 000,049,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\nispdk.dll [2007/07/19 02:32:24 | 000,031,744 | ---- | C] () -- C:\WINDOWS\System32\niscdrau.dll [2007/07/18 15:17:24 | 000,066,080 | ---- | C] () -- C:\WINDOWS\System32\cfswitch.dll [2007/04/16 17:22:06 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\nipxiini.dll [2007/04/16 16:52:36 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\niidaqlv.dll [2006/09/14 12:59:23 | 001,490,999 | ---- | C] () -- C:\WINDOWS\System32\tkbtnpn1.dll [2006/09/12 15:45:14 | 000,012,653 | ---- | C] () -- C:\WINDOWS\System32\GPIB.DLL [2006/09/05 17:20:36 | 000,079,400 | ---- | C] () -- C:\WINDOWS\System32\DEVMAN.DLL [2006/06/13 16:35:32 | 000,053,760 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2006/04/30 19:36:03 | 000,004,670 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2005/02/17 11:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest [2005/02/17 11:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest [2002/02/27 11:41:28 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\nsldappr32v50.dll [2002/02/27 11:41:26 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\nsldap32v50.dll [2002/02/27 11:41:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\nsldapssl32v50.dll [2001/11/14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll [1999/11/04 11:00:38 | 000,001,840 | ---- | C] () -- C:\WINDOWS\System32\niidaqs.dll ========== Alternate Data Streams ========== @Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:888AFB86 < End of report >
  2. ========== Files/Folders - Created Within 30 Days ========== [2010/10/04 21:30:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\nzahirov\Desktop\LabVIEW 2009 [2010/10/04 20:16:43 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2010/10/04 19:49:06 | 000,000,000 | ---D | C] -- C:\_OTL [2010/10/04 19:48:21 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\nzahirov\Desktop\OTL.exe [2010/10/04 10:37:59 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy [2010/10/04 10:37:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy [2010/10/04 10:37:27 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010/10/04 10:25:44 | 000,167,936 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\wpshelper.sys [2010/10/04 10:24:28 | 000,097,096 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SysPlant.sys [2010/10/04 10:23:58 | 000,124,976 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS [2010/10/04 10:23:58 | 000,060,808 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\S32EVNT1.DLL [2010/10/04 10:23:22 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec [2010/09/30 13:49:15 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010/09/30 13:44:37 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010/09/30 13:44:35 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010/09/30 13:44:35 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010/09/30 13:44:35 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010/09/30 13:42:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010/09/30 13:38:51 | 000,000,000 | ---D | C] -- C:\Qoobox [2010/09/30 09:01:23 | 000,116,224 | ---- | C] (Xerox) -- C:\WINDOWS\System32\dllcache\xrxwiadr.dll [2010/09/30 09:01:19 | 000,023,040 | ---- | C] (Xerox Corporation) -- C:\WINDOWS\System32\dllcache\xrxwbtmp.dll [2010/09/30 09:01:10 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xrxflnch.exe [2010/09/30 09:00:55 | 000,099,865 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\xlog.exe [2010/09/30 09:00:50 | 000,016,970 | ---- | C] (US Robotics MCD (Megahertz)) -- C:\WINDOWS\System32\dllcache\xem336n5.sys [2010/09/30 09:00:49 | 000,019,455 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wvchntxx.sys [2010/09/30 09:00:45 | 000,012,063 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wsiintxx.sys [2010/09/30 09:00:44 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wshirda.dll [2010/09/30 09:00:33 | 000,008,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiacpi.sys [2010/09/30 09:00:31 | 000,154,624 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\dllcache\wlluc48.sys [2010/09/30 09:00:27 | 000,034,890 | ---- | C] (Raytheon Corp.) -- C:\WINDOWS\System32\dllcache\wlandrv2.sys [2010/09/30 09:00:19 | 000,771,581 | ---- | C] (Rockwell) -- C:\WINDOWS\System32\dllcache\winacisa.sys [2010/09/30 09:00:14 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wiamsmud.dll [2010/09/30 09:00:13 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll [2010/09/30 09:00:13 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys [2010/09/30 09:00:08 | 000,701,386 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\wdhaalba.sys [2010/09/30 09:00:07 | 000,023,615 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wch7xxnt.sys [2010/09/30 09:00:06 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wceusbsh.sys [2010/09/30 09:00:02 | 000,035,871 | ---- | C] (Winbond Electronics Corp.) -- C:\WINDOWS\System32\dllcache\wbfirdma.sys [2010/09/30 09:00:00 | 000,033,599 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\watv04nt.sys [2010/09/30 08:59:59 | 000,019,551 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\watv02nt.sys [2010/09/30 08:59:58 | 000,029,311 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\watv01nt.sys [2010/09/30 08:59:57 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll [2010/09/30 08:59:56 | 000,011,775 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wadv05nt.sys [2010/09/30 08:59:55 | 000,012,127 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wadv02nt.sys [2010/09/30 08:59:54 | 000,012,415 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wadv01nt.sys [2010/09/30 08:59:49 | 000,016,925 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w940nd.sys [2010/09/30 08:59:45 | 000,019,016 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w926nd.sys [2010/09/30 08:59:41 | 000,019,528 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w840nd.sys [2010/09/30 08:59:40 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll [2010/09/30 08:59:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll [2010/09/30 08:59:40 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll [2010/09/30 08:59:39 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll [2010/09/30 08:59:35 | 000,064,605 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\vvoice.sys [2010/09/30 08:59:31 | 000,397,502 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\vpctcom.sys [2010/09/30 08:59:26 | 000,604,253 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\vmodem.sys [2010/09/30 08:59:22 | 000,249,402 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\vinwm.sys [2010/09/30 08:59:18 | 000,024,576 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\dllcache\viairda.sys [2010/09/30 08:59:12 | 000,687,999 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usrwdxjs.sys [2010/09/30 08:59:08 | 000,765,884 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usrti.sys [2010/09/30 08:59:04 | 000,113,762 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usrpda.sys [2010/09/30 08:59:00 | 000,007,556 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usroslba.sys [2010/09/30 08:58:56 | 000,224,802 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usr1807a.sys [2010/09/30 08:58:52 | 000,794,399 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1806v.sys [2010/09/30 08:58:48 | 000,793,598 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1806.sys [2010/09/30 08:58:44 | 000,794,654 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1801.sys [2010/09/30 08:58:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbser.sys [2010/09/30 08:58:41 | 000,017,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbohci.sys [2010/09/30 08:58:39 | 000,032,384 | ---- | C] (KLSI USA, Inc.) -- C:\WINDOWS\System32\dllcache\usb101et.sys [2010/09/30 08:58:33 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxud32.dll [2010/09/30 08:58:29 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu40.dll [2010/09/30 08:58:25 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu22.dll [2010/09/30 08:58:21 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu12.dll [2010/09/30 08:58:17 | 000,050,688 | ---- | C] (UMAX DATA SYSTEMS INC.) -- C:\WINDOWS\System32\dllcache\umaxscan.dll [2010/09/30 08:58:13 | 000,022,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxpcls.sys [2010/09/30 08:58:09 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxp60.dll [2010/09/30 08:58:05 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxcam.dll [2010/09/30 08:58:01 | 000,211,968 | ---- | C] (UMAX Data Systems Inc.) -- C:\WINDOWS\System32\dllcache\um54scan.dll [2010/09/30 08:57:57 | 000,216,064 | ---- | C] (UMAX Data Systems Inc.) -- C:\WINDOWS\System32\dllcache\um34scan.dll [2010/09/30 08:57:56 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe [2010/09/30 08:57:51 | 000,166,784 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridxpm.sys [2010/09/30 08:57:47 | 000,525,568 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridxp.dll [2010/09/30 08:57:43 | 000,159,232 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridkbm.sys [2010/09/30 08:57:39 | 000,440,576 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridkb.dll [2010/09/30 08:57:35 | 000,222,336 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\trid3dm.sys [2010/09/30 08:57:31 | 000,315,520 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\trid3d.dll [2010/09/30 08:57:27 | 000,034,375 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\tpro4.sys [2010/09/30 08:57:22 | 000,230,912 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tosdvd03.sys [2010/09/30 08:57:19 | 000,241,664 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tosdvd02.sys [2010/09/30 08:57:15 | 000,028,232 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\dllcache\tos4mo.sys [2010/09/30 08:57:10 | 000,123,995 | ---- | C] (Tiger Jet Network) -- C:\WINDOWS\System32\dllcache\tjisdn.sys [2010/09/30 08:57:08 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll [2010/09/30 08:57:04 | 000,138,528 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tgiulnt5.sys [2010/09/30 08:57:00 | 000,081,408 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tgiul50.dll [2010/09/30 08:56:59 | 000,149,376 | ---- | C] (M-Systems) -- C:\WINDOWS\System32\dllcache\tffsport.sys [2010/09/30 08:56:58 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys [2010/09/30 08:56:55 | 000,017,129 | ---- | C] (TDK Corporation) -- C:\WINDOWS\System32\dllcache\tdkcd31.sys [2010/09/30 08:56:51 | 000,037,961 | ---- | C] (TDK Corporation) -- C:\WINDOWS\System32\dllcache\tdk100b.sys [2010/09/30 08:56:51 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys [2010/09/30 08:56:50 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys [2010/09/30 08:56:46 | 000,030,464 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tbatm155.sys [2010/09/30 08:56:42 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tandqic.sys [2010/09/30 08:56:38 | 000,036,640 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\t2r4mini.sys [2010/09/30 08:56:34 | 000,172,768 | ---- | C] (Number Nine Visual Technology) -- C:\WINDOWS\System32\dllcache\t2r4disp.dll [2010/09/30 08:56:29 | 000,094,293 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\sxports.dll [2010/09/30 08:56:25 | 000,103,936 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\sx.sys [2010/09/30 08:56:22 | 000,003,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swusbflt.sys [2010/09/30 08:56:18 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swpidflt.dll [2010/09/30 08:56:15 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swpdflt2.dll [2010/09/30 08:56:11 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sw_wheel.dll [2010/09/30 08:56:08 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sw_effct.dll [2010/09/30 08:56:03 | 000,155,648 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlnprop.dll [2010/09/30 08:56:00 | 000,053,248 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlncoin.dll [2010/09/30 08:55:56 | 000,285,760 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlnata.sys [2010/09/30 08:55:52 | 000,016,896 | ---- | C] (SCM Microsystems, Inc.) -- C:\WINDOWS\System32\dllcache\stcusb.sys [2010/09/30 08:55:52 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll [2010/09/30 08:55:47 | 000,048,736 | ---- | C] (3Com) -- C:\WINDOWS\System32\dllcache\srwlnd5.sys [2010/09/30 08:55:43 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll [2010/09/30 08:55:43 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusd.dll [2010/09/30 08:55:38 | 000,024,660 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxupchk.dll [2010/09/30 08:55:34 | 000,061,824 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\speed.sys [2010/09/30 08:55:30 | 000,106,584 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spdports.dll [2010/09/30 08:55:26 | 000,007,552 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypvu1.sys [2010/09/30 08:55:23 | 000,037,040 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypi.sys [2010/09/30 08:55:19 | 000,114,688 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypi.dll [2010/09/30 08:55:16 | 000,020,752 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonync.sys [2010/09/30 08:55:12 | 000,009,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sonymc.sys [2010/09/30 08:55:11 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll [2010/09/30 08:55:11 | 000,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sonyait.sys [2010/09/30 08:55:07 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snyaitmc.sys [2010/09/30 08:55:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll [2010/09/30 08:55:06 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll [2010/09/30 08:55:04 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll [2010/09/30 08:55:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll [2010/09/30 08:55:00 | 000,058,368 | ---- | C] (Silicon Motion Inc.) -- C:\WINDOWS\System32\dllcache\smiminib.sys [2010/09/30 08:55:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll [2010/09/30 08:54:59 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll [2010/09/30 08:54:56 | 000,147,200 | ---- | C] (Silicon Motion Inc.) -- C:\WINDOWS\System32\dllcache\smidispb.dll [2010/09/30 08:54:52 | 000,025,034 | ---- | C] (SMC Networks, Inc.) -- C:\WINDOWS\System32\dllcache\smcpwr2n.sys [2010/09/30 08:54:48 | 000,035,913 | ---- | C] (SMC) -- C:\WINDOWS\System32\dllcache\smcirda.sys [2010/09/30 08:54:45 | 000,024,576 | ---- | C] (SMC Networks, Inc.) -- C:\WINDOWS\System32\dllcache\smc8000n.sys [2010/09/30 08:54:41 | 000,006,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbhc.sys [2010/09/30 08:54:40 | 000,006,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbclass.sys [2010/09/30 08:54:39 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll [2010/09/30 08:54:39 | 000,016,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbbatt.sys [2010/09/30 08:54:36 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb3w.dll [2010/09/30 08:54:32 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb0w.dll [2010/09/30 08:54:32 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll [2010/09/30 08:54:28 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll [2010/09/30 08:54:28 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma0w.dll [2010/09/30 08:54:28 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll [2010/09/30 08:54:28 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll [2010/09/30 08:54:24 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll [2010/09/30 08:54:24 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm91w.dll [2010/09/30 08:54:24 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll [2010/09/30 08:54:24 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll [2010/09/30 08:54:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll [2010/09/30 08:54:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll [2010/09/30 08:54:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll [2010/09/30 08:54:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll [2010/09/30 08:54:22 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll [2010/09/30 08:54:21 | 000,063,547 | ---- | C] (Symbol Technologies) -- C:\WINDOWS\System32\dllcache\sla30nd5.sys [2010/09/30 08:54:17 | 000,091,294 | ---- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) -- C:\WINDOWS\System32\dllcache\skfpwin.sys [2010/09/30 08:54:14 | 000,094,698 | ---- | C] (SysKonnect GmbH.) -- C:\WINDOWS\System32\dllcache\sk98xwin.sys [2010/09/30 08:54:10 | 000,157,696 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisv256.dll [2010/09/30 08:54:07 | 000,050,432 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisv.sys [2010/09/30 08:54:06 | 000,032,768 | ---- | C] (SiS Corporation) -- C:\WINDOWS\System32\dllcache\sisnic.sys [2010/09/30 08:54:02 | 000,238,592 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrv.dll [2010/09/30 08:53:59 | 000,104,064 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrp.sys [2010/09/30 08:53:55 | 000,150,144 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis6306v.dll [2010/09/30 08:53:52 | 000,068,608 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis6306p.sys [2010/09/30 08:53:48 | 000,252,032 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis300iv.dll [2010/09/30 08:53:45 | 000,101,760 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis300ip.sys [2010/09/30 08:53:44 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll [2010/09/30 08:53:38 | 000,161,568 | ---- | C] (Micro Systemation) -- C:\WINDOWS\System32\dllcache\sgsmusb.sys [2010/09/30 08:53:34 | 000,018,400 | ---- | C] (Micro Systemation) -- C:\WINDOWS\System32\dllcache\sgsmld.sys [2010/09/30 08:53:31 | 000,098,080 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\sgiulnt5.sys [2010/09/30 08:53:27 | 000,386,560 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\sgiul50.dll [2010/09/30 08:53:24 | 000,036,480 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\sfmanm.sys [2010/09/30 08:53:19 | 000,006,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\serscan.sys [2010/09/30 08:53:16 | 000,017,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sermouse.sys [2010/09/30 08:53:15 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll [2010/09/30 08:53:11 | 000,006,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\seaddsmc.sys [2010/09/30 08:53:10 | 000,011,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scsiscan.sys [2010/09/30 08:53:07 | 000,011,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scsiprnt.sys [2010/09/30 08:53:06 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll [2010/09/30 08:53:03 | 000,017,280 | ---- | C] (SCM Microsystems) -- C:\WINDOWS\System32\dllcache\scr111.sys [2010/09/30 08:52:59 | 000,016,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scmstcs.sys [2010/09/30 08:52:55 | 000,023,936 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\sccmusbm.sys [2010/09/30 08:52:52 | 000,023,936 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\sccmn50m.sys [2010/09/30 08:52:50 | 000,043,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sbp2port.sys [2010/09/30 08:52:47 | 000,495,616 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\sblfx.dll [2010/09/30 08:52:43 | 000,075,392 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\dllcache\s3savmxm.sys [2010/09/30 08:52:39 | 000,245,632 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\dllcache\s3savmx.dll [2010/09/30 08:52:36 | 000,077,824 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav4m.sys [2010/09/30 08:52:32 | 000,198,400 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav4.dll [2010/09/30 08:52:29 | 000,061,504 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav3dm.sys [2010/09/30 08:52:25 | 000,179,264 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav3d.dll [2010/09/30 08:52:22 | 000,210,496 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mvirge.dll [2010/09/30 08:52:19 | 000,062,496 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mtrio.dll [2010/09/30 08:52:15 | 000,041,216 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mt3d.sys [2010/09/30 08:52:12 | 000,182,272 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mt3d.dll [2010/09/30 08:52:08 | 000,166,720 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3m.sys [2010/09/30 08:52:05 | 000,065,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\s3legacy.sys [2010/09/30 08:52:01 | 000,082,432 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia450.dll [2010/09/30 08:51:58 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia430.dll [2010/09/30 08:51:58 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2010/09/30 08:51:57 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2010/09/30 08:51:56 | 000,029,696 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw450ext.dll [2010/09/30 08:51:55 | 000,027,648 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw430ext.dll [2010/09/30 08:51:54 | 000,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\rtl8139.sys [2010/09/30 08:51:50 | 000,019,017 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\rtl8029.sys [2010/09/30 08:51:47 | 000,030,720 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\dllcache\rthwcls.sys [2010/09/30 08:51:43 | 000,009,216 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\rsmgrstr.dll [2010/09/30 08:51:39 | 000,003,840 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\dllcache\rpfun.sys [2010/09/30 08:51:37 | 000,079,104 | ---- | C] (Comtrol Corporation) -- C:\WINDOWS\System32\dllcache\rocket.sys [2010/09/30 08:51:33 | 000,037,563 | ---- | C] (RadioLAN) -- C:\WINDOWS\System32\dllcache\rlnet5.sys [2010/09/30 08:51:29 | 000,086,097 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\reslog32.dll [2010/09/30 08:51:29 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe [2010/09/30 08:51:28 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe [2010/09/30 08:51:22 | 000,019,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rasirda.sys [2010/09/30 08:51:18 | 000,714,762 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\r2mdmkxx.sys [2010/09/30 08:51:15 | 000,899,146 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\r2mdkxga.sys [2010/09/30 08:51:11 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qvusd.dll [2010/09/30 08:51:08 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qv2kux.sys [2010/09/30 08:51:07 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe [2010/09/30 08:51:07 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe [2010/09/30 08:51:05 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qic157.sys [2010/09/30 08:51:00 | 000,130,942 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserlv.sys [2010/09/30 08:50:57 | 000,112,574 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserlp.sys [2010/09/30 08:50:53 | 000,128,286 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserli.sys [2010/09/30 08:50:52 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ptpusd.dll [2010/09/30 08:50:49 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ptpusb.dll [2010/09/30 08:50:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\psisload.dll [2010/09/30 08:50:40 | 000,016,128 | ---- | C] (SCM Microsystems, Inc.) -- C:\WINDOWS\System32\dllcache\pscr.sys [2010/09/30 08:50:38 | 000,017,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ppa3.sys [2010/09/30 08:50:34 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ppa.sys [2010/09/30 08:50:33 | 000,008,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\powerfil.sys [2010/09/30 08:50:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pnrmc.sys [2010/09/30 08:50:29 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll [2010/09/30 08:50:29 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll [2010/09/30 08:50:29 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll [2010/09/30 08:50:24 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phvfwext.dll [2010/09/30 08:50:20 | 000,019,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philtune.sys [2010/09/30 08:50:17 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phildec.sys [2010/09/30 08:50:13 | 000,173,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam2.sys [2010/09/30 08:50:10 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam1.sys [2010/09/30 08:50:06 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam1.dll [2010/09/30 08:50:03 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phdsext.ax [2010/09/30 08:50:03 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll [2010/09/30 08:50:02 | 000,259,328 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm3dd.dll [2010/09/30 08:50:01 | 000,028,032 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm3.sys [2010/09/30 08:50:00 | 000,211,584 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm2dll.dll [2010/09/30 08:49:59 | 000,027,904 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm2.sys [2010/09/30 08:49:58 | 000,169,984 | ---- | C] (Cisco Systems) -- C:\WINDOWS\System32\dllcache\pcx500.sys [2010/09/30 08:49:54 | 000,086,016 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\pctspk.exe [2010/09/30 08:49:51 | 000,035,328 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntpci5.sys [2010/09/30 08:49:48 | 000,029,769 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntn5m.sys [2010/09/30 08:49:44 | 000,030,282 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntn5hl.sys [2010/09/30 08:49:41 | 000,026,153 | ---- | C] (Linksys) -- C:\WINDOWS\System32\dllcache\pcmlm56.sys [2010/09/30 08:49:40 | 000,029,502 | ---- | C] (Marconi Communications, Inc.) -- C:\WINDOWS\System32\dllcache\pca200e.sys [2010/09/30 08:49:37 | 000,030,495 | ---- | C] (Linksys) -- C:\WINDOWS\System32\dllcache\pc100nds.sys [2010/09/30 08:49:36 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll [2010/09/30 08:49:35 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll [2010/09/30 08:49:35 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll [2010/09/30 08:49:31 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovui2rc.dll [2010/09/30 08:49:28 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovui2.dll [2010/09/30 08:49:24 | 000,025,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovsound2.sys [2010/09/30 08:49:21 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcoms.exe [2010/09/30 08:49:18 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcomc.dll [2010/09/30 08:49:15 | 000,351,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcodek2.sys [2010/09/30 08:49:11 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcodec2.dll [2010/09/30 08:49:08 | 000,031,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovce.sys [2010/09/30 08:49:05 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcd.sys [2010/09/30 08:49:01 | 000,048,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcam2.sys [2010/09/30 08:48:58 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovca.sys [2010/09/30 08:48:55 | 000,054,186 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otcsercb.sys [2010/09/30 08:48:52 | 000,043,689 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otceth5.sys [2010/09/30 08:48:48 | 000,027,209 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otc06x5.sys [2010/09/30 08:48:45 | 000,054,528 | ---- | C] (Yamaha Corp.) -- C:\WINDOWS\System32\dllcache\opl3sax.sys [2010/09/30 08:48:39 | 000,198,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv3.sys [2010/09/30 08:48:35 | 000,123,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv3.dll [2010/09/30 08:48:30 | 000,051,552 | ---- | C] (Kensington Technology Group) -- C:\WINDOWS\System32\dllcache\ntgrip.sys [2010/09/30 08:48:30 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll [2010/09/30 08:48:26 | 000,009,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntapm.sys [2010/09/30 08:48:22 | 000,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nsmmc.sys [2010/09/30 08:48:21 | 000,028,672 | ---- | C] (National Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\nscirda.sys [2010/09/30 08:48:17 | 000,087,040 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\nm6wdm.sys [2010/09/30 08:48:14 | 000,126,080 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\nm5a2wdm.sys [2010/09/30 08:48:10 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll [2010/09/30 08:48:10 | 000,032,840 | ---- | C] (NETGEAR Corporation.) -- C:\WINDOWS\System32\dllcache\ngrpci.sys [2010/09/30 08:48:09 | 000,132,695 | ---- | C] (802.11b) -- C:\WINDOWS\System32\dllcache\netwlan5.sys [2010/09/30 08:48:05 | 000,065,278 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\netflx3.sys [2010/09/30 08:48:01 | 000,039,264 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\neo20xx.sys [2010/09/30 08:47:58 | 000,060,480 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\neo20xx.dll [2010/09/30 08:47:55 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ne2000.sys [2010/09/30 08:47:50 | 000,091,488 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i3disp.dll [2010/09/30 08:47:47 | 000,027,936 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i3d.sys [2010/09/30 08:47:44 | 000,033,088 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128v2.sys [2010/09/30 08:47:41 | 000,059,104 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128v2.dll [2010/09/30 08:47:38 | 000,013,664 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128.sys [2010/09/30 08:47:34 | 000,035,392 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128.dll [2010/09/30 08:47:31 | 000,128,000 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\n100325.sys [2010/09/30 08:47:28 | 000,052,255 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\n1000nt5.sys [2010/09/30 08:47:25 | 000,075,520 | ---- | C] (Moxa Technologies Co., Ltd.) -- C:\WINDOWS\System32\dllcache\mxport.sys [2010/09/30 08:47:22 | 000,007,168 | ---- | C] (Moxa Technologies Co., Ltd) -- C:\WINDOWS\System32\dllcache\mxport.dll [2010/09/30 08:47:19 | 000,019,968 | ---- | C] (Macronix International Co., Ltd. ) -- C:\WINDOWS\System32\dllcache\mxnic.sys [2010/09/30 08:47:16 | 000,019,968 | ---- | C] (Moxa Technologies Co., Ltd) -- C:\WINDOWS\System32\dllcache\mxicfg.dll [2010/09/30 08:47:13 | 000,021,888 | ---- | C] (Moxa Technologies Co., Ltd.) -- C:\WINDOWS\System32\dllcache\mxcard.sys [2010/09/30 08:47:12 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll [2010/09/30 08:47:09 | 000,103,296 | ---- | C] (Matrox Graphics Inc) -- C:\WINDOWS\System32\dllcache\mtxvideo.sys [2010/09/30 08:47:03 | 000,049,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstape.sys [2010/09/30 08:46:59 | 000,012,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msriffwv.sys [2010/09/30 08:46:53 | 000,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msmpu401.sys [2010/09/30 08:46:52 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex [2010/09/30 08:46:52 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msircomm.sys [2010/09/30 08:46:51 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll [2010/09/30 08:46:45 | 000,035,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msgame.sys [2010/09/30 08:46:42 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfsio.sys [2010/09/30 08:46:35 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys [2010/09/30 08:46:31 | 000,016,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\modemcsa.sys [2010/09/30 08:46:26 | 000,006,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\miniqic.sys [2010/09/30 08:46:25 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migisol.exe [2010/09/30 08:46:22 | 000,320,384 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\mgaum.sys [2010/09/30 08:46:19 | 000,235,648 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\mgaud.dll [2010/09/30 08:46:18 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys [2010/09/30 08:46:18 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll [2010/09/30 08:46:17 | 000,026,112 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\memstpci.sys [2010/09/30 08:46:14 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\memgrp.dll [2010/09/30 08:46:11 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\memcard.sys [2010/09/30 08:46:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll [2010/09/30 08:46:07 | 000,164,586 | ---- | C] (Madge Networks Ltd) -- C:\WINDOWS\System32\dllcache\mdgndis5.sys [2010/09/30 08:46:03 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll [2010/09/30 08:46:03 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mammoth.sys [2010/09/30 08:45:59 | 000,048,768 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\maestro.sys [2010/09/30 08:45:56 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\m3092dc.dll [2010/09/30 08:45:53 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\m3091dc.dll [2010/09/30 08:45:50 | 000,022,848 | ---- | C] (Logitech Inc.) -- C:\WINDOWS\System32\dllcache\lwusbhid.sys [2010/09/30 08:45:50 | 000,020,864 | ---- | C] (Logitech Inc.) -- C:\WINDOWS\System32\dllcache\lwadihid.sys [2010/09/30 08:45:47 | 000,797,500 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltsmt.sys [2010/09/30 08:45:44 | 000,802,683 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\dllcache\ltsm.sys [2010/09/30 08:45:43 | 000,420,992 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntt.sys [2010/09/30 08:45:43 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ltotape.sys [2010/09/30 08:45:40 | 000,576,746 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntl.sys [2010/09/30 08:45:39 | 000,606,684 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmnt.sys [2010/09/30 08:45:36 | 000,727,786 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ltck000c.sys [2010/09/30 08:45:33 | 000,004,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\loop.sys [2010/09/30 08:45:32 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll [2010/09/30 08:45:29 | 000,070,730 | ---- | C] (Linksys Group, Inc.) -- C:\WINDOWS\System32\dllcache\lne100tx.sys [2010/09/30 08:45:26 | 000,020,573 | ---- | C] (The Linksts Group ) -- C:\WINDOWS\System32\dllcache\lne100.sys [2010/09/30 08:45:23 | 000,025,065 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\lmndis3.sys [2010/09/30 08:45:19 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\dllcache\lbrtfdc.sys [2010/09/30 08:45:19 | 000,015,744 | ---- | C] (Litronic Industries) -- C:\WINDOWS\System32\dllcache\lit220p.sys [2010/09/30 08:45:16 | 000,026,442 | ---- | C] (SMSC) -- C:\WINDOWS\System32\dllcache\lanepic5.sys [2010/09/30 08:45:13 | 000,019,016 | ---- | C] (Kingston Technology Company ) -- C:\WINDOWS\System32\dllcache\ktc111.sys [2010/09/30 08:45:09 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kousd.dll [2010/09/30 08:45:08 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll [2010/09/30 08:45:07 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kdsusd.dll [2010/09/30 08:45:07 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kdsui.dll [2010/09/30 08:45:06 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll [2010/09/30 08:45:03 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll [2010/09/30 08:45:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll [2010/09/30 08:45:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll [2010/09/30 08:44:59 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkor.dll [2010/09/30 08:44:57 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdjpn.dll [2010/09/30 08:44:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106.dll [2010/09/30 08:44:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd103.dll [2010/09/30 08:44:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101c.dll [2010/09/30 08:44:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101b.dll [2010/09/30 08:44:41 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll [2010/09/30 08:44:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll [2010/09/30 08:44:40 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll [2010/09/30 08:44:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll [2010/09/30 08:44:37 | 000,026,624 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\dllcache\irstusb.sys [2010/09/30 08:44:34 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irmon.dll [2010/09/30 08:44:34 | 000,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irsir.sys [2010/09/30 08:44:31 | 000,023,552 | ---- | C] (MKNet Corporation) -- C:\WINDOWS\System32\dllcache\irmk7.sys [2010/09/30 08:44:30 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irftp.exe [2010/09/30 08:44:30 | 000,088,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irda.sys [2010/09/30 08:44:25 | 000,045,632 | ---- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) -- C:\WINDOWS\System32\dllcache\ip5515.sys [2010/09/30 08:44:22 | 000,090,200 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\io8ports.dll [2010/09/30 08:44:20 | 000,038,784 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\io8.sys [2010/09/30 08:44:17 | 000,013,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inport.sys [2010/09/30 08:44:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll [2010/09/30 08:44:14 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll [2010/09/30 08:44:13 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe [2010/09/30 08:44:12 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe [2010/09/30 08:44:10 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe [2010/09/30 08:44:09 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe [2010/09/30 08:44:09 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll [2010/09/30 08:44:08 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe [2010/09/30 08:44:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll [2010/09/30 08:44:06 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe [2010/09/30 08:44:06 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll [2010/09/30 08:44:05 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll [2010/09/30 08:43:58 | 000,372,824 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\iconf32.dll [2010/09/30 08:43:55 | 000,100,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5usb.sys [2010/09/30 08:43:53 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5ext.dll [2010/09/30 08:43:50 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5com.dll [2010/09/30 08:43:47 | 000,154,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4usb.sys [2010/09/30 08:43:45 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4ext.dll [2010/09/30 08:43:42 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4com.dll [2010/09/30 08:43:39 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam3ext.dll [2010/09/30 08:43:36 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam3.sys [2010/09/30 08:43:34 | 000,038,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ibmvcap.sys [2010/09/30 08:43:31 | 000,109,085 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmtrp.sys [2010/09/30 08:43:28 | 000,100,936 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmtok.sys [2010/09/30 08:43:26 | 000,009,216 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmsgnet.dll [2010/09/30 08:43:23 | 000,028,700 | ---- | C] (IBM Corp.) -- C:\WINDOWS\System32\dllcache\ibmexmp.sys [2010/09/30 08:43:22 | 000,161,020 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\i81xnt5.sys [2010/09/30 08:43:21 | 000,702,845 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\i81xdnt5.dll [2010/09/30 08:43:18 | 000,058,592 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\i740nt5.sys [2010/09/30 08:43:16 | 000,353,184 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\i740dnt5.dll [2010/09/30 08:43:15 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll [2010/09/30 08:43:13 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll [2010/09/30 08:43:09 | 000,488,383 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_v124.sys [2010/09/30 08:43:06 | 000,050,751 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_tone.sys [2010/09/30 08:43:04 | 000,073,279 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_spkp.sys [2010/09/30 08:43:01 | 000,044,863 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_soar.sys [2010/09/30 08:42:58 | 000,057,471 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_samp.sys [2010/09/30 08:42:56 | 000,542,879 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_msft.sys [2010/09/30 08:42:53 | 000,391,199 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_k56k.sys [2010/09/30 08:42:50 | 000,009,759 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_inst.dll [2010/09/30 08:42:47 | 000,115,807 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_fsks.sys [2010/09/30 08:42:45 | 000,199,711 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_faxx.sys [2010/09/30 08:42:42 | 000,289,887 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_fall.sys [2010/09/30 08:42:40 | 000,067,167 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_bsc2.sys [2010/09/30 08:42:37 | 000,150,239 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_amos.sys [2010/09/30 08:42:34 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hr1w.dll [2010/09/30 08:42:31 | 000,005,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpt4qic.sys [2010/09/30 08:42:29 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpsjmcro.dll [2010/09/30 08:42:26 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpojwia.dll [2010/09/30 08:42:23 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgtmcro.dll [2010/09/30 08:42:21 | 000,068,608 | ---- | C] (Avisioin) -- C:\WINDOWS\System32\dllcache\hpgt53tk.dll [2010/09/30 08:42:15 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt42tk.dll [2010/09/30 08:42:10 | 000,126,976 | ---- | C] (Hewlett Packard) -- C:\WINDOWS\System32\dllcache\hpgt34tk.dll [2010/09/30 08:42:05 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt33tk.dll [2010/09/30 08:42:00 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt21tk.dll [2010/09/30 08:41:55 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpdigwia.dll [2010/09/30 08:41:51 | 000,002,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidswvd.sys [2010/09/30 08:41:49 | 000,008,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidgame.sys [2010/09/30 08:41:48 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidbatt.sys [2010/09/30 08:41:45 | 000,907,456 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hcf_msft.sys [2010/09/30 08:41:45 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll [2010/09/30 08:41:43 | 000,028,288 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grserial.sys [2010/09/30 08:41:40 | 000,082,304 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grclass.sys [2010/09/30 08:41:38 | 000,017,408 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\gpr400.sys [2010/09/30 08:41:36 | 000,059,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gckernel.sys [2010/09/30 08:41:36 | 000,010,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gameenum.sys [2010/09/30 08:41:33 | 000,322,432 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g400m.sys [2010/09/30 08:41:31 | 001,733,120 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g400d.dll [2010/09/30 08:41:29 | 000,320,384 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g200m.sys [2010/09/30 08:41:27 | 000,470,144 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g200d.dll [2010/09/30 08:41:24 | 000,454,912 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fxusbase.sys [2010/09/30 08:41:22 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll [2010/09/30 08:41:22 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe [2010/09/30 08:41:19 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll [2010/09/30 08:41:19 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll [2010/09/30 08:41:16 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fuusd.dll [2010/09/30 08:41:14 | 000,455,296 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fusbbase.sys [2010/09/30 08:41:11 | 000,455,680 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fus2base.sys [2010/09/30 08:41:10 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll [2010/09/30 08:41:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll [2010/09/30 08:41:07 | 000,442,240 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpnpbase.sys [2010/09/30 08:41:05 | 000,441,728 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcmbase.sys [2010/09/30 08:41:03 | 000,444,416 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcibase.sys [2010/09/30 08:41:01 | 000,034,173 | ---- | C] (Marconi Communications, Inc.) -- C:\WINDOWS\System32\dllcache\forehe.sys [2010/09/30 08:40:59 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fnfilter.dll [2010/09/30 08:40:58 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe [2010/09/30 08:40:56 | 000,027,165 | ---- | C] (VIA Technologies, Inc. ) -- C:\WINDOWS\System32\dllcache\fetnd5.sys [2010/09/30 08:40:49 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll [2010/09/30 08:40:49 | 000,022,090 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\fem556n5.sys [2010/09/30 08:40:46 | 000,024,618 | ---- | C] (NETGEAR) -- C:\WINDOWS\System32\dllcache\fa410nd5.sys [2010/09/30 08:40:44 | 000,016,074 | ---- | C] (NETGEAR Corp.) -- C:\WINDOWS\System32\dllcache\fa312nd5.sys [2010/09/30 08:40:42 | 000,011,850 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xj.sys [2010/09/30 08:40:40 | 000,012,362 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xi.sys [2010/09/30 08:40:37 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exabyte2.sys [2010/09/30 08:40:35 | 000,016,998 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\ex10.sys [2010/09/30 08:40:33 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll [2010/09/30 08:40:33 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys [2010/09/30 08:40:31 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunib.dll [2010/09/30 08:40:29 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll [2010/09/30 08:40:29 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuni.dll [2010/09/30 08:40:26 | 000,034,816 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimg.dll [2010/09/30 08:40:26 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll [2010/09/30 08:40:24 | 000,137,088 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\essm2e.sys [2010/09/30 08:40:24 | 000,043,008 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucm.dll [2010/09/30 08:40:21 | 000,063,360 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\ess.sys [2010/09/30 08:40:19 | 000,347,550 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56tpi.sys [2010/09/30 08:40:17 | 000,594,238 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56hpi.sys [2010/09/30 08:40:15 | 000,595,647 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56cvmp.sys [2010/09/30 08:40:13 | 000,174,464 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es198x.sys [2010/09/30 08:40:11 | 000,072,192 | ---- | C] (ESS Technology Inc.) -- C:\WINDOWS\System32\dllcache\es1969.sys [2010/09/30 08:40:09 | 000,040,704 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\es1371mp.sys [2010/09/30 08:40:07 | 000,037,120 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\es1370mp.sys [2010/09/30 08:40:05 | 000,061,952 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnloop.exe [2010/09/30 08:40:03 | 000,051,200 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnlogr.exe [2010/09/30 08:40:01 | 000,053,248 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqndiag.exe [2010/09/30 08:39:58 | 000,629,952 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqn.sys [2010/09/30 08:39:56 | 000,114,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\epstw2k.sys [2010/09/30 08:39:54 | 000,018,503 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\epro4.sys [2010/09/30 08:39:53 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\epcfw2k.sys [2010/09/30 08:39:51 | 000,283,904 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\emu10k1m.sys [2010/09/30 08:39:47 | 000,019,996 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\em556n4.sys [2010/09/30 08:39:46 | 000,025,159 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\elnk3.sys [2010/09/30 08:39:44 | 000,007,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\elmsmc.sys [2010/09/30 08:39:43 | 000,171,520 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el99xn51.sys [2010/09/30 08:39:41 | 000,070,174 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el98xn5.sys [2010/09/30 08:39:40 | 000,455,199 | ---- | C] (3Com Corporation.) -- C:\WINDOWS\System32\dllcache\el985n51.sys [2010/09/30 08:39:39 | 000,153,631 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el90xnd5.sys [2010/09/30 08:39:37 | 000,066,591 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el90xbc5.sys [2010/09/30 08:39:36 | 000,241,206 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656se5.sys [2010/09/30 08:39:34 | 000,077,386 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656nd5.sys [2010/09/30 08:39:33 | 000,634,134 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656ct5.sys [2010/09/30 08:39:32 | 000,069,194 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656cd5.sys [2010/09/30 08:39:30 | 000,026,141 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el589nd5.sys [2010/09/30 08:39:29 | 000,069,692 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el575nd5.sys [2010/09/30 08:39:27 | 000,024,653 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el574nd4.sys [2010/09/30 08:39:26 | 000,055,999 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el556nd5.sys [2010/09/30 08:39:25 | 000,044,103 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el515.sys [2010/09/30 08:39:24 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll [2010/09/30 08:39:23 | 000,019,594 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\e100isa4.sys [2010/09/30 08:39:21 | 000,050,719 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\e1000nt5.sys [2010/09/30 08:39:17 | 000,334,208 | ---- | C] (Yamaha Corp.) -- C:\WINDOWS\System32\dllcache\ds1wdm.sys [2010/09/30 08:39:15 | 000,028,062 | ---- | C] (National Semiconductor Coproration) -- C:\WINDOWS\System32\dllcache\dp83820.sys [2010/09/30 08:39:13 | 000,023,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4usb.sys [2010/09/30 08:39:12 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4scan.sys [2010/09/30 08:39:11 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4prt.sys [2010/09/30 08:39:10 | 000,206,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4.sys [2010/09/30 08:39:07 | 000,029,696 | ---- | C] (CNet Technology, Inc. ) -- C:\WINDOWS\System32\dllcache\dm9pci5.sys [2010/09/30 08:39:07 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dlttape.sys [2010/09/30 08:39:06 | 000,026,698 | ---- | C] (D-Link Corporation) -- C:\WINDOWS\System32\dllcache\dlh5xnd5.sys [2010/09/30 08:39:04 | 000,952,007 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\diwan.sys [2010/09/30 08:38:59 | 000,236,060 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\ditrace.exe [2010/09/30 08:38:58 | 000,038,985 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvsu.dll [2010/09/30 08:38:57 | 000,031,305 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvpp.dll [2010/09/30 08:38:56 | 000,006,729 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvci.dll [2010/09/30 08:38:54 | 000,091,305 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\dimaint.sys [2010/09/30 08:38:53 | 000,614,429 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiview.exe [2010/09/30 08:38:51 | 000,042,432 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\digirlpt.sys [2010/09/30 08:38:50 | 000,110,621 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\digirlpt.dll [2010/09/30 08:38:49 | 000,021,606 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiisdn.sys [2010/09/30 08:38:48 | 000,041,046 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiisdn.dll [2010/09/30 08:38:47 | 000,102,484 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiinf.dll [2010/09/30 08:38:45 | 000,159,828 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digihlc.dll [2010/09/30 08:38:44 | 000,229,462 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digifwrk.dll [2010/09/30 08:38:43 | 000,090,525 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digifep5.sys [2010/09/30 08:38:42 | 000,103,044 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digidxb.sys [2010/09/30 08:38:41 | 000,131,156 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digidbp.dll [2010/09/30 08:38:39 | 000,037,735 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiasyn.sys [2010/09/30 08:38:38 | 000,065,622 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiasyn.dll [2010/09/30 08:38:36 | 000,419,357 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgconfig.dll [2010/09/30 08:38:35 | 000,029,531 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\dgapci.sys [2010/09/30 08:38:33 | 000,024,649 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650d.sys [2010/09/30 08:38:32 | 000,024,648 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650.sys [2010/09/30 08:38:31 | 000,024,064 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\devldr32.exe [2010/09/30 08:38:30 | 000,256,512 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\devcon32.dll [2010/09/30 08:38:28 | 000,020,928 | ---- | C] (Digital Networks, LLC) -- C:\WINDOWS\System32\dllcache\defpa.sys [2010/09/30 08:38:27 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddsmc.sys [2010/09/30 08:38:25 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc260usd.dll [2010/09/30 08:38:24 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc240usd.dll [2010/09/30 08:38:23 | 000,063,208 | ---- | C] (Intel Corporation.) -- C:\WINDOWS\System32\dllcache\dc21x4.sys [2010/09/30 08:38:22 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc210usd.dll [2010/09/30 08:38:21 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc210_32.dll [2010/09/30 08:38:18 | 000,117,760 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\d100ib5.sys [2010/09/30 08:38:17 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzports.dll [2010/09/30 08:38:15 | 000,049,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzport.sys [2010/09/30 08:38:14 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzcoins.dll [2010/09/30 08:38:13 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyyports.dll [2010/09/30 08:38:12 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyyport.sys [2010/09/30 08:38:11 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyycoins.dll [2010/09/30 08:38:10 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyclom-y.sys [2010/09/30 08:38:08 | 000,048,640 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwrwdm.sys [2010/09/30 08:38:08 | 000,017,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyclad-z.sys [2010/09/30 08:38:07 | 000,093,952 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcwdm.sys [2010/09/30 08:38:06 | 000,111,872 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcspud.sys [2010/09/30 08:38:04 | 000,003,584 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcosnt5.sys [2010/09/30 08:38:03 | 000,072,832 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbwdm.sys [2010/09/30 08:38:02 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbmidi.sys [2010/09/30 08:38:01 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbase.sys [2010/09/30 08:38:00 | 000,004,096 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\ctwdm32.dll [2010/09/30 08:37:59 | 000,249,856 | ---- | C] (Comtrol
  3. OTL log follows... OTL logfile created on: 10/5/2010 8:03:02 AM - Run 2 OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\nzahirov\Desktop Windows XP Tablet PC Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 52.00% Memory free 4.00 Gb Paging File | 3.00 Gb Available in Paging File | 67.00% Paging File free Paging file location(s): C:\pagefile.sys 1500 3000 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 275.14 Gb Total Space | 144.41 Gb Free Space | 52.49% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: JUKLEOPT Current User Name: nzahirov Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Documents and Settings\nzahirov\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Documents and Settings\nzahirov\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (Google Inc.) PRC - C:\Documents and Settings\nzahirov\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe (Google) PRC - C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation) PRC - C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe (Symantec Corporation) PRC - C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe (Symantec Corporation) PRC - C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation) PRC - C:\VXIPNP\WinNT\NIvisa\niLxiDiscovery.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\MAX\nimxs.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\lktsrv.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\lkads.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\NLSSRV32.EXE (Nalpeiron Ltd.) PRC - C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\lkcitdl.exe (National Instruments, Inc.) PRC - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe () PRC - C:\WINDOWS\system32\vmnat.exe (VMware, Inc.) PRC - C:\Program Files\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) PRC - C:\WINDOWS\system32\vmnetdhcp.exe (VMware, Inc.) PRC - C:\Program Files\VMware\VMware Player\hqtray.exe (VMware, Inc.) PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.) PRC - C:\Program Files\Lenovo\ZOOM\TpScrex.exe (Lenovo Group Limited) PRC - C:\Program Files\DynDNS Updater\DynUpSvc.exe (Dynamic Network Services, Inc.) PRC - C:\Program Files\DynDNS Updater\DynTray.exe (Dynamic Network Services, Inc.) PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation) PRC - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe (Intel® Corporation) PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) PRC - C:\WINDOWS\system32\ibmpmsvc.exe (Lenovo) PRC - C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Tablet Shortcut\TSMResident.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Tablet Shortcut\ASR\ASRSVC.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Tablet Shortcut\TSMService.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Lenovo Group Limited) PRC - C:\WINDOWS\system32\TpShocks.exe (Lenovo.) PRC - C:\Program Files\Lenovo\TrackPoint\tp4serv.exe (Lenovo Group Limited) PRC - c:\Program Files\Lenovo\System Update\SUService.exe (Lenovo Group Limited) PRC - C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) PRC - C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation.) PRC - C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited) PRC - C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE (Lenovo Group Limited) PRC - C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) PRC - C:\WINDOWS\system32\wisptis.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Microsoft Shared\Ink\tabtip.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Microsoft Shared\Ink\tcserver.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Microsoft Shared\Ink\keyboardsurrogate.exe (Microsoft Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited) PRC - c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_tray.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe (IBM) PRC - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe (Lenovo Group Limited) PRC - C:\Program Files\National Instruments\NI-DAQ\HWConfig\nidevmon.exe (National Instruments Corporation) PRC - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe () PRC - C:\Program Files\Common Files\Lenovo\Logger\logmon.exe () PRC - C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe () PRC - C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited) PRC - C:\WINDOWS\system32\TpKmpSvc.exe () PRC - C:\WINDOWS\system32\tabbtnu.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Documents and Settings\nzahirov\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\wtsapi32.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\winsta.dll (Microsoft Corporation) MOD - C:\Program Files\Common Files\Microsoft Shared\Ink\tiptsf.dll (Microsoft Corporation) MOD - C:\Program Files\Common Files\Microsoft Shared\Ink\tipcomponentsps.dll (Microsoft Corporation) MOD - C:\WINDOWS\ime\sptip.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\msvcp60.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\msctfp.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) MOD - C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) MOD - C:\WINDOWS\ime\spgrmr.dll (Microsoft Corporation) MOD - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_windows_hook.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\tvt_passwordmanager.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\css_dlgcustompolicy.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\css_banner.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\css_think_res.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\csswait.dll (Lenovo Group Limited) MOD - C:\WINDOWS\system32\cssuserdatadispatcher.dll (Lenovo Group Limited) MOD - C:\WINDOWS\system32\tcsrpc.dll (Lenovo) MOD - C:\WINDOWS\system32\tvttsp.dll (Lenovo) MOD - C:\Program Files\Common Files\Lenovo\tvt_think_res.dll (Lenovo Group Limited) MOD - C:\Program Files\Windows Journal\nbmaptip.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (SNAC) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE (Symantec Corporation) SRV - (ccSetMgr) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation) SRV - (ccEvtMgr) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation) SRV - (SmcService) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe (Symantec Corporation) SRV - (Symantec AntiVirus) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe (Symantec Corporation) SRV - (nimDNSResponder) -- C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation) SRV - (niLXIDiscovery) -- C:\VXIPNP\WinNT\NIvisa\niLxiDiscovery.exe (National Instruments Corporation) SRV - (niSvcLoc) -- C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation) SRV - (NIApplicationWebServer) -- C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation) SRV - (mxssvr) -- C:\Program Files\National Instruments\MAX\nimxs.exe (National Instruments Corporation) SRV - (NITaggerService) -- C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe (National Instruments Corporation) SRV - (NIDomainService) -- C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation) SRV - (lkTimeSync) -- C:\WINDOWS\system32\lktsrv.exe (National Instruments Corporation) SRV - (lkClassAds) -- C:\WINDOWS\system32\lkads.exe (National Instruments Corporation) SRV - (nlsX86cc) -- C:\WINDOWS\system32\NLSSRV32.EXE (Nalpeiron Ltd.) SRV - (NILM License Manager) -- C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe (Macrovision Corporation) SRV - (nipxirmu) -- C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) SRV - (nidevldu) -- C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) SRV - (ni488enumsvc) -- C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) SRV - (LkCitadelServer) -- C:\WINDOWS\system32\lkcitdl.exe (National Instruments, Inc.) SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.) SRV - (LiveUpdate) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation) SRV - (Power Manager DBC Service) -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe () SRV - (VMware NAT Service) -- C:\WINDOWS\system32\vmnat.exe (VMware, Inc.) SRV - (VMAuthdService) -- C:\Program Files\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) SRV - (VMnetDHCP) -- C:\WINDOWS\system32\vmnetdhcp.exe (VMware, Inc.) SRV - (VMUSBArbService) -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.) SRV - (ufad-ws60) -- C:\Program Files\VMware\VMware Player\vmware-ufad.exe (VMware, Inc.) SRV - (DynDNS Updater) -- C:\Program Files\DynDNS Updater\DynUpSvc.exe (Dynamic Network Services, Inc.) SRV - (EvtEng) Intel® -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation) SRV - (S24EventMonitor) Intel® -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe (Intel® Corporation) SRV - (RegSrvc) Intel® -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) SRV - (getPlusHelper) getPlus® -- C:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.) SRV - (IBMPMSVC) -- C:\WINDOWS\system32\ibmpmsvc.exe (Lenovo) SRV - (ASRSVC) -- C:\Program Files\ThinkPad\Tablet Shortcut\ASR\ASRSVC.exe (Lenovo Group Limited) SRV - (TabletSVC) -- C:\Program Files\ThinkPad\Tablet Shortcut\TSMService.exe (Lenovo Group Limited) SRV - (TPHKSVC) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Lenovo Group Limited) SRV - (SolidWorks Licensing Service) -- C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe (SolidWorks) SRV - (LENOVO.MICMUTE) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) SRV - (TPHDEXLGSVC) -- C:\WINDOWS\system32\TPHDEXLG.exe (Lenovo.) SRV - (SUService) -- c:\Program Files\Lenovo\System Update\SUService.exe (Lenovo Group Limited) SRV - (OpcEnum) -- C:\WINDOWS\system32\Opcenum.exe (OPC Foundation) SRV - (btwdins) -- C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation.) SRV - (CoventorWare Architect License Service) -- C:\Coventor\CoventorWare2008\\licensing\NT40\lmgrd.fnet.exe () SRV - (CoventorWare Microfluidics Solvers License Service) -- C:\Coventor\CoventorWare2008\\licensing\NT40\lmgrd.exe () SRV - (CoventorWare License Service) -- C:\Coventor\CoventorWare2008\\licensing\NT40\lmgrd.exe () SRV - (TVT Scheduler) -- c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited) SRV - (TSSCoreService) -- C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe (IBM) SRV - (ThinkVantage Registry Monitor Service) -- C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe (Lenovo Group Limited) SRV - (NiRioRpc) -- C:\WINDOWS\system32\NiRioRpc.exe (National Instruments Corporation) SRV - (TVT Backup Service) -- C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe (Lenovo Group Limited) SRV - (TVT Backup Protection Service) -- C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe () SRV - (tvtnetwk) -- C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe () SRV - (IPSSVC) -- C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited) SRV - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) SRV - (TpKmpSVC) -- C:\WINDOWS\system32\TpKmpSvc.exe () SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation) SRV - (WMConnectCDS) -- C:\Program Files\Windows Media Connect 2\wmccds.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (usb6xxxk) -- C:\WINDOWS\System32\drivers\usb6xxxkl.sys File not found DRV - (UIUSys) -- C:\WINDOWS\System32\DRIVERS\UIUSYS.SYS File not found DRV - (RimUsb) -- C:\WINDOWS\System32\Drivers\RimUsb.sys File not found DRV - (PCASp50) -- C:\WINDOWS\System32\Drivers\PCASp50.sys File not found DRV - (NIUSBTMC) -- C:\WINDOWS\System32\DRIVERS\NIUSBTMC.sys File not found DRV - (catchme) -- C:\TEMP\catchme.sys File not found DRV - (SymEvent) -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation) DRV - (NAVEX15) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101004.003\NAVEX15.SYS (Symantec Corporation) DRV - (NAVENG) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20101004.003\NAVENG.SYS (Symantec Corporation) DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (WpsHelper) -- C:\WINDOWS\system32\drivers\wpshelper.sys (Symantec Corporation) DRV - (WPS) -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys (Symantec Corporation) DRV - (SRTSPL) -- C:\WINDOWS\system32\drivers\srtspl.sys (Symantec Corporation) DRV - (SRTSP) -- C:\WINDOWS\system32\drivers\srtsp.sys (Symantec Corporation) DRV - (SRTSPX) -- C:\WINDOWS\system32\drivers\srtspx.sys (Symantec Corporation) DRV - (SysPlant) -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys (Symantec Corporation) DRV - (Teefer2) -- C:\WINDOWS\system32\drivers\Teefer2.sys (Symantec Corporation) DRV - (SPBBCDrv) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation) DRV - (SYMTDI) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation) DRV - (COH_Mon) -- C:\WINDOWS\system32\drivers\COH_Mon.sys (Symantec Corporation) DRV - (NiViPxiK) -- C:\WINDOWS\system32\drivers\NiViPxiKl.sys (National Instruments Corporation) DRV - (NiViPciK) -- C:\WINDOWS\system32\drivers\NiViPciKl.sys (National Instruments Corporation) DRV - (nipalusbedl) -- C:\WINDOWS\system32\drivers\nipalusbedl.sys (National Instruments Corporation) DRV - (NIPALK) -- C:\WINDOWS\System32\drivers\nipalk.sys (National Instruments Corporation) DRV - (nipalfwedl) -- C:\WINDOWS\system32\drivers\nipalfwedl.sys (National Instruments Corporation) DRV - (Usbtmc) -- C:\WINDOWS\system32\drivers\ausbtmc.sys (IVI Foundation) DRV - (FTDIBUS) -- C:\WINDOWS\system32\drivers\ftdibus.sys (FTDI Ltd.) DRV - (AlteraUSBBlaster) -- C:\WINDOWS\system32\drivers\ftdibus.sys (FTDI Ltd.) DRV - (nipbcfk) -- C:\WINDOWS\System32\drivers\nipbcfk.sys (National Instruments Corporation) DRV - (nimdbgk) -- C:\WINDOWS\system32\drivers\nimdbgkl.sys (National Instruments Corporation) DRV - (TPPWRIF) -- C:\WINDOWS\system32\drivers\TPPWRIF.SYS () DRV - (VMnetBridge) -- C:\WINDOWS\system32\drivers\vmnetbridge.sys (VMware, Inc.) DRV - (vmx86) -- C:\WINDOWS\system32\drivers\vmx86.sys (VMware, Inc.) DRV - (vmci) -- C:\WINDOWS\system32\drivers\vmci.sys (VMware, Inc.) DRV - (vmkbd) -- C:\WINDOWS\system32\drivers\VMkbd.sys (VMware, Inc.) DRV - (VMnetuserif) -- C:\WINDOWS\system32\drivers\vmnetuserif.sys (VMware, Inc.) DRV - (hcmon) -- C:\WINDOWS\system32\drivers\hcmon.sys (VMware, Inc.) DRV - (VMnetAdapter) -- C:\WINDOWS\system32\drivers\vmnetadapter.sys (VMware, Inc.) DRV - (vstor2-ws60) -- C:\Program Files\VMware\VMware Player\vstor2-ws60.sys (VMware, Inc.) DRV - (pbfilter) -- C:\Program Files\PeerBlock\pbfilter.sys () DRV - (NETw5x32) Intel® -- C:\WINDOWS\system32\drivers\NETw5x32.sys (Intel Corporation) DRV - (IBMPMDRV) -- C:\WINDOWS\system32\drivers\ibmpmdrv.sys (Lenovo.) DRV - (tvtfilter) -- C:\WINDOWS\system32\drivers\tvtfilter.sys (Lenovo) DRV - (TSMSMI) -- C:\WINDOWS\system32\drivers\tsmsmi32.sys (Lenovo Group Limited) DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation) DRV - (cvintdrv) -- C:\WINDOWS\System32\drivers\cvintdrv.sys () DRV - (TSMAPIP) -- C:\WINDOWS\system32\drivers\TSMAPIP.SYS () DRV - (nimxdfk) -- C:\WINDOWS\system32\drivers\nimxdfkl.sys (National Instruments Corporation) DRV - (nidimk) -- C:\WINDOWS\system32\drivers\nidimkl.sys (National Instruments Corporation) DRV - (nipxirmk) -- C:\WINDOWS\system32\drivers\nipxirmkl.sys (National Instruments Corporation) DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.) DRV - (Ser2pl) -- C:\WINDOWS\system32\drivers\ser2pl.sys (Prolific Technology Inc.) DRV - (Shockprf) -- C:\WINDOWS\System32\DRIVERS\Apsx86.sys (Lenovo.) DRV - (TPDIGIMN) -- C:\WINDOWS\System32\DRIVERS\ApsHM86.sys (Lenovo.) DRV - (Tp4Track) -- C:\WINDOWS\system32\drivers\tp4track.sys (Lenovo Group Limited) DRV - (e1express) Intel® -- C:\WINDOWS\system32\drivers\e1e5132.sys (Intel Corporation) DRV - (ni1045k) -- C:\WINDOWS\system32\drivers\ni1045kl.sys (National Instruments Corporation) DRV - (niorbk) -- C:\WINDOWS\system32\drivers\niorbkl.sys (National Instruments Corporation) DRV - (ni1065k) -- C:\WINDOWS\system32\drivers\ni1065k.sys (National Instruments Corporation) DRV - (ni1006k) -- C:\WINDOWS\system32\drivers\ni1006k.sys (National Instruments Corporation) DRV - (SCDEmu) -- C:\WINDOWS\System32\drivers\scdemu.sys (PowerISO Computing, Inc.) DRV - (ialm) -- C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation) DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.) DRV - (btwhid) -- C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.) DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.) DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.) DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.) DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.) DRV - (iaStor) -- C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated) DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated) DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated) DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (ZTE Incorporated) DRV - (nipxigpk) -- C:\WINDOWS\system32\drivers\nipxigpk.sys (National Instruments Corporation) DRV - (pmem) -- C:\WINDOWS\system32\drivers\pmemnt.sys (Microsoft Corporation) DRV - (TPHKDRV) -- C:\WINDOWS\system32\drivers\TPHKDRV.sys (Lenovo Group Limited) DRV - (ADIHdAudAddService) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys (Analog Devices, Inc.) DRV - (61883) -- C:\WINDOWS\system32\drivers\61883.sys (Microsoft Corporation) DRV - (Avc) -- C:\WINDOWS\system32\drivers\avc.sys (Microsoft Corporation) DRV - (MSDV) -- C:\WINDOWS\system32\drivers\msdv.sys (Microsoft Corporation) DRV - (usbaudio) USB Audio Driver (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation) DRV - (amdagp) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.) DRV - (sisagp) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider) DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.) DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.) DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.) DRV - (nihsdrk) -- C:\WINDOWS\system32\drivers\nihsdrkl.sys (National Instruments Corporation) DRV - (nixsrk) -- C:\WINDOWS\system32\drivers\nixsrkl.sys (National Instruments Corporation) DRV - (niwfrk) -- C:\WINDOWS\system32\drivers\niwfrkl.sys (National Instruments Corporation) DRV - (nissrk) -- C:\WINDOWS\system32\drivers\nissrkl.sys (National Instruments Corporation) DRV - (niesrk) -- C:\WINDOWS\system32\drivers\niesrkl.sys (National Instruments Corporation) DRV - (niemrkw) -- C:\WINDOWS\system32\drivers\niemrkw.sys (National Instruments Corporation) DRV - (niemrk) -- C:\WINDOWS\system32\drivers\niemrkl.sys (National Instruments Corporation) DRV - (nipsdk) -- C:\WINDOWS\system32\drivers\nipsdkl.sys (National Instruments Corporation) DRV - (nimru2k) -- C:\WINDOWS\system32\drivers\nimru2kl.sys (National Instruments Corporation) DRV - (ninshsdk) -- C:\WINDOWS\system32\drivers\ninshsdkl.sys (National Instruments Corporation) DRV - (nidsark) -- C:\WINDOWS\system32\drivers\nidsarkl.sys (National Instruments Corporation) DRV - (niscdk) -- C:\WINDOWS\system32\drivers\niscdkl.sys (National Instruments Corporation) DRV - (nispdk) -- C:\WINDOWS\system32\drivers\nispdkl.sys (National Instruments Corporation) DRV - (nitiork) -- C:\WINDOWS\system32\drivers\nitiorkl.sys (National Instruments Corporation) DRV - (nimsdrk) -- C:\WINDOWS\system32\drivers\nimsdrkl.sys (National Instruments Corporation) DRV - (niswdk) -- C:\WINDOWS\system32\drivers\niswdkl.sys (National Instruments Corporation) DRV - (nisdigk) -- C:\WINDOWS\system32\drivers\nisdigkl.sys (National Instruments Corporation) DRV - (usb6xxxkw) -- C:\WINDOWS\system32\drivers\usb6xxxkw.sys (National Instruments Corporation) DRV - (nisftk) -- C:\WINDOWS\system32\drivers\nisftkl.sys (National Instruments Corporation) DRV - (nifslk) -- C:\WINDOWS\system32\drivers\nifslkl.sys (National Instruments Corporation) DRV - (nistcrk) -- C:\WINDOWS\system32\drivers\nistcrkl.sys (National Instruments Corporation) DRV - (nicdrk) -- C:\WINDOWS\system32\drivers\nicdrkl.sys (National Instruments Corporation) DRV - (nistc2k) -- C:\WINDOWS\system32\drivers\nistc2kl.sys (National Instruments Corporation) DRV - (nidmxfk) -- C:\WINDOWS\system32\drivers\nidmxfkl.sys (National Instruments Corporation) DRV - (nimxpk) -- C:\WINDOWS\system32\drivers\nimxpkl.sys (National Instruments Corporation) DRV - (nimstsk) -- C:\WINDOWS\system32\drivers\nimstskl.sys (National Instruments Corporation) DRV - (nirfsa2k) -- C:\WINDOWS\system32\drivers\niRFSA2kl.sys (National Instruments Corporation) DRV - (nimsrlk) -- C:\WINDOWS\system32\drivers\nimsrlk.dll (National Instruments Corporation) DRV - (nimslk) -- C:\WINDOWS\system32\drivers\nimslk.dll (National Instruments Corporation) DRV - (nisldk) -- C:\WINDOWS\system32\drivers\nisldkl.sys (National Instruments Corporation) DRV - (nisrcdk) -- C:\WINDOWS\system32\drivers\nisrcdkl.sys (National Instruments Corporation) DRV - (TVTI2C) -- C:\WINDOWS\system32\drivers\tvti2c.sys (Lenovo (United States) Inc.) DRV - (psadd) -- C:\WINDOWS\system32\drivers\psadd.sys (Lenovo (United States) Inc.) DRV - (NETw4x32) Intel® -- C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation) DRV - (nidmmk) -- C:\WINDOWS\system32\drivers\nidmmk.dll (National Instruments Corporation) DRV - (Nidaq32k) -- C:\WINDOWS\System32\drivers\nidaq32k.sys (National Instruments Corporation) DRV - (nistck) -- C:\WINDOWS\system32\drivers\niSTCk.dll (National Instruments Corporation) DRV - (nimdsk) -- C:\WINDOWS\system32\drivers\nimdsk.dll (National Instruments Corporation) DRV - (nibffrk) -- C:\WINDOWS\system32\drivers\nibffrk.dll (National Instruments Corporation) DRV - (niarbk) -- C:\WINDOWS\system32\drivers\niarbk.dll (National Instruments Corporation) DRV - (smihlp) SMI Helper Driver (smihlp) -- C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys (UPEK Inc.) DRV - (TcUsb) -- C:\WINDOWS\system32\drivers\tcusb.sys (UPEK Inc.) DRV - (gpibprtk) -- C:\WINDOWS\system32\drivers\gpibprtk.sys (National Instruments Corporation) DRV - (ni488lock) -- C:\WINDOWS\system32\drivers\ni488lock.sys (National Instruments Corporation) DRV - (nitnr2k) -- C:\WINDOWS\system32\drivers\nitnr2kl.sys (National Instruments Corporation) DRV - (nidwgk) -- C:\WINDOWS\system32\drivers\nidwgkl.sys (National Instruments Corporation) DRV - (nigplk) -- C:\WINDOWS\system32\drivers\nigplkl.sys (National Instruments Corporation) DRV - (TVTPktFilter) -- C:\WINDOWS\system32\drivers\tvtpktfilter.sys (Lenovo Group Limited) DRV - (lvalarmk) -- C:\WINDOWS\system32\drivers\lvalarmk.sys (National Instruments Corporation) DRV - (PROCDD) -- C:\WINDOWS\system32\drivers\PROCDD.SYS (Lenovo Group Limited) DRV - (Sntnlusb) -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS (Rainbow Technologies Inc.) DRV - (Sentinel) -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS (Rainbow Technologies, Inc.) DRV - (HBtnKey) -- C:\WINDOWS\system32\drivers\tkbtnpn.sys (Lenovo) DRV - (atmeltpm) -- C:\WINDOWS\system32\drivers\atmeltpm.sys (Atmel, Inc.) DRV - (Hardlock) -- C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.) DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation) DRV - (DgiVecp) -- C:\WINDOWS\system32\drivers\DGIVECP.SYS (DeviceGuys, Inc.) DRV - (DS1410D) -- C:\WINDOWS\system32\drivers\DS1410d.SYS (Dallas Semiconductor MAXIM) DRV - (SIF32X) -- C:\WINDOWS\system32\drivers\SiF32x.sys (Silicon Laboratories) DRV - (Sparrow) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.) DRV - (sym_u3) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic) DRV - (sym_hi) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic) DRV - (symc8xx) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic) DRV - (symc810) -- C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.) DRV - (ultra) -- C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.) DRV - (ql12160) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation) DRV - (ql1080) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation) DRV - (ql1280) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation) DRV - (dac2w2k) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation) DRV - (mraid35x) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.) DRV - (asc) -- C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.) DRV - (asc3550) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.) DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (CmdIde) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (TwoTrack) -- C:\WINDOWS\system32\drivers\TwoTrack.sys (IBM Corporation) DRV - (ac97intc) Intel® 82801 Audio Driver Install Service (WDM) -- C:\WINDOWS\system32\drivers\ac97intc.sys (Intel Corporation) ========== Standard Registry (All) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2 FF - prefs.js..extensions.enabledItems: {CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}:1.5.2.35 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1 FF - prefs.js..extensions.enabledItems: npminuwet@uwaterloo.ca:2.0.0.1 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.13 FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/08/17 10:21:06 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2008/12/07 19:12:16 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/05 08:00:57 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/05 08:00:57 | 000,000,000 | ---D | M] [2008/08/27 19:33:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Extensions [2008/08/27 19:33:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2010/10/04 10:16:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions [2009/08/18 09:28:57 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009/03/14 23:10:24 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus®)) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7} [2010/05/11 09:03:55 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009/09/13 06:43:30 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus®)) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2009/07/13 09:32:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\npminuwet@uwaterloo.ca [2010/10/04 10:16:42 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/10/05 08:00:57 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2008/09/08 20:26:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} [2008/10/26 17:33:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [2008/12/07 19:12:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [2009/11/08 11:04:48 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} [2010/10/05 08:00:39 | 000,023,512 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll [2010/10/05 08:00:39 | 000,137,176 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll [2010/02/04 21:35:19 | 000,027,960 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\atgpcdec.dll [2010/02/04 21:35:20 | 000,126,344 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\atgpcext.dll [2009/08/06 10:57:58 | 000,046,408 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\atmccli.dll [2010/02/04 21:35:29 | 000,098,696 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\ieatgpc.dll [2009/05/01 17:02:48 | 001,044,480 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\Mozilla Firefox\plugins\libdivx.dll [2009/08/06 10:57:12 | 000,061,840 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\npatgpc.dll [2009/10/11 05:17:27 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll [2008/09/15 20:11:52 | 001,335,600 | ---- | M] (DivX,Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll [2008/09/15 20:12:12 | 000,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll [2010/06/25 13:57:18 | 000,025,088 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv2010win32.dll [2006/01/23 10:32:04 | 000,020,992 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\NPLV80Win32.dll [2007/02/08 10:48:16 | 000,028,448 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\NPLV82Win32.dll [2007/07/24 19:03:42 | 000,023,040 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv85win32.dll [2008/12/10 14:49:34 | 000,023,040 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv86win32.dll [2010/05/25 12:43:16 | 000,025,088 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv90win32.dll [2010/10/05 08:00:50 | 000,064,984 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll [2009/12/21 19:34:06 | 000,103,864 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll [2009/09/03 11:53:00 | 000,030,912 | ---- | M] (NOS Microsystems Ltd.) -- C:\Program Files\Mozilla Firefox\plugins\np_gp.dll [2009/05/01 17:02:48 | 000,200,704 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\Mozilla Firefox\plugins\ssldivx.dll [2010/10/05 08:00:52 | 000,001,394 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom.xml [2010/10/05 08:00:52 | 000,002,193 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\answers.xml [2010/10/05 08:00:52 | 000,001,534 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\creativecommons.xml [2010/10/05 08:00:52 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay.xml [2010/10/05 08:00:52 | 000,002,371 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml [2010/10/05 08:00:52 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia.xml [2010/10/05 08:00:52 | 000,000,792 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo.xml O1 HOSTS File: ([2010/09/30 15:07:23 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKCU\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [bLOG] C:\Program Files\ThinkPad\Utilities\BATLOGEX.DLL () O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) O4 - HKLM..\Run: [cssauth] C:\Program Files\Lenovo\Client Security Solution\cssauth.exe (Lenovo Group Limited) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [installValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707] C:\Program Files\National Instruments\Shared\NIUninstaller\InstallValidator.exe () O4 - HKLM..\Run: [LENOVO.TPFNF6R] C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe (Lenovo Group Limited) O4 - HKLM..\Run: [LENTBCTL] C:\Program Files\ThinkPad\Tablet Shortcut\LENTBCTL.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [LPMailChecker] C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [LPManager] C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [NI Background Service] C:\Program Files\National Instruments\Shared\Update Service\niupdate.exe (National Instruments) O4 - HKLM..\Run: [niDevMon] C:\Program Files\National Instruments\NI-DAQ\HWConfig\nidevmon.exe (National Instruments Corporation) O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) O4 - HKLM..\Run: [PWRMGRTR] C:\Program Files\ThinkPad\Utilities\PWRMGRTR.DLL (Lenovo Group Limited) O4 - HKLM..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [TabletButton] C:\Program Files\ThinkPad\Tablet Shortcut\TabletButton.EXE (Lenovo Group Limited ) O4 - HKLM..\Run: [TabletTip] C:\Program Files\Common Files\microsoft shared\ink\tabtip.exe (Microsoft Corporation) O4 - HKLM..\Run: [TPFNF7] C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe (Lenovo) O4 - HKLM..\Run: [TpShocks] C:\WINDOWS\System32\TpShocks.exe (Lenovo.) O4 - HKLM..\Run: [TrackPointSrv] C:\Program Files\Lenovo\TrackPoint\tp4serv.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TSMResident] C:\Program Files\ThinkPad\Tablet Shortcut\TSMRESIDENT.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited) O4 - HKLM..\Run: [VMware hqtray] C:\Program Files\VMware\VMware Player\hqtray.exe (VMware, Inc.) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation) O4 - HKCU..\Run: [Google Update] C:\Documents and Settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DynDNS Updater Tray Icon.lnk = C:\Program Files\DynDNS Updater\DynTray.exe (Dynamic Network Services, Inc.) O4 - Startup: C:\Documents and Settings\nzahirov\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll (National Instruments Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Program Files\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O16 - DPF: {20C2C286-BDE8-441B-B73D-AFA22D914DA5} http://download.ppstream.com/bin/powerplayer.cab (PowerList Control) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2...78f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/as...abs/tgctlsr.cab (Symantec Script Runner Class) O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.3.7.cab (DLM Control) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd...b?1211688977287 (WUWebControl Class) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 64.71.255.198 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\OrCAD\OrCAD_10.5\tools\capture\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\OrCAD\OrCAD_10.5\tools\capture\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\WINDOWS\system32\acaptuser32.dll) - C:\WINDOWS\system32\acaptuser32.dll (Adobe Systems, Inc.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation) O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation) O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation) O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation) O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O20 - Winlogon\Notify\loginkey: DllName - C:\Program Files\Common Files\Microsoft Shared\Ink\loginkey.dll - C:\Program Files\Common Files\Microsoft Shared\Ink\loginkey.dll (Microsoft Corporation) O20 - Winlogon\Notify\NavLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found O20 - Winlogon\Notify\psfus: DllName - C:\WINDOWS\system32\psqlpwd.dll - C:\WINDOWS\system32\psqlpwd.dll (UPEK Inc.) O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\TabBtnWL: DllName - TabBtnWL.dll - C:\WINDOWS\System32\tabbtnwl.dll (Microsoft Corporation) O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\tpfnf2: DllName - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll () O20 - Winlogon\Notify\tpgwlnotify: DllName - tpgwlnot.dll - C:\WINDOWS\System32\tpgwlnot.dll (Microsoft Corporation) O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O24 - Desktop Components:0 (My Current Home Page) - About:Home O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/04/30 19:14:37 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKCU\...com [@ = ComFile] -- Reg Error: Key error. File not found O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found
  4. Hello, Please find the log attached. Looks like all the files were already identified with the exception of the matlab related virus. Is this it then? Thanks for all your help so far! C:\Program Files\MATLAB\R2008a\toolbox\rtw\targets\xpc\target\build\xpcblocks\adrtddm6420.mexw32 probably a variant of Win32/Agent.KRDRJQX trojan cleaned by deleting - quarantined C:\Program Files\MATLAB\R2008a\toolbox\rtw\targets\xpc\target\build\xpcblocks\adrtddm6430.mexw32 probably a variant of Win32/Agent.FXHULZN trojan cleaned by deleting - quarantined C:\Qoobox\Quarantine\C\WINDOWS\system32\Drivers\yonrfjde.sys.vir a variant of Win32/Bubnix.AW trojan cleaned by deleting - quarantined C:\System Volume Information\_restore{31B8BED5-9D7F-4557-ABBD-A1EED92B436E}\RP1\A0000060.sys Win32/Olmarik.ZC trojan cleaned - quarantined
  5. MBAM results follow... no infections found. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4741 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 10/4/2010 8:13:37 PM mbam-log-2010-10-04 (20-13-37).txt Scan type: Quick scan Objects scanned: 173883 Time elapsed: 11 minute(s), 1 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
  6. Hello, Yes, my problems are effectively solved. No more win32 services crashes and browsers are now solid. The result of the OTL comands are shown below. They are aggregated since I missed a character in the first execution. Best, nzah ========== FILES ========== C:\zrpt.xml moved successfully. File\Folder c:\windows\Imuxixaxet.bin not found. File\Folder c:\windows\Rzusih.dat not found. ========== SERVICES/DRIVERS ========== Service khqlmxop stopped successfully! Service khqlmxop deleted successfully! Service bwsao stopped successfully! Service bwsao deleted successfully! ========== COMMANDS ========== Error: Unable to interpret <[emptytemp> in the current context! OTL by OldTimer - Version 3.2.14.1 log created on 10042010_194906 All processes killed ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 1127526 bytes ->Flash cache emptied: 13412 bytes User: NetworkService ->Temp folder emptied: 1792 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Java cache emptied: 19534 bytes ->Flash cache emptied: 22643 bytes User: nzahirov ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 115776682 bytes ->Java cache emptied: 50555393 bytes ->FireFox cache emptied: 99910277 bytes ->Google Chrome cache emptied: 10441483 bytes ->Flash cache emptied: 5535742 bytes User: Susan ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 78991 bytes ->FireFox cache emptied: 16903190 bytes ->Flash cache emptied: 927 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 19569 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 23009 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 557313 bytes RecycleBin emptied: 4641525 bytes Total Files Cleaned = 292.00 mb OTL by OldTimer - Version 3.2.14.1 log created on 10042010_194947 Files\Folders moved on Reboot... Registry entries deleted on Reboot...
  7. kahdah, Please find the combofix.log file below. Kitty had a snack. ComboFix 10-10-03.01 - nzahirov 10/04/2010 9:34.2.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3062.2278 [GMT -4:00] Running from: c:\documents and settings\nzahirov\Desktop\ComboFix.exe AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . Infected copy of c:\windows\system32\drivers\kbdhid.sys was found and disinfected Restored copy from - Kitty had a snack . ((((((((((((((((((((((((( Files Created from 2010-09-04 to 2010-10-04 ))))))))))))))))))))))))))))))) . 2010-10-04 13:47 . 2010-10-04 13:47 53248 ----a-w- c:\temp\catchme.dll 2010-09-30 21:14 . 2010-09-30 21:14 -------- d-----w- c:\temp\MPTelemetrySubmit 2010-09-30 13:21 . 2010-09-30 13:21 -------- d-----w- c:\temp\plugtmp 2010-09-30 13:01 . 2008-04-14 00:12 116224 ----a-w- c:\windows\system32\dllcache\xrxwiadr.dll 2010-09-30 13:01 . 2001-08-18 02:36 23040 ----a-w- c:\windows\system32\dllcache\xrxwbtmp.dll 2010-09-30 13:01 . 2008-04-14 00:12 18944 ----a-w- c:\windows\system32\dllcache\xrxscnui.dll 2010-09-30 13:01 . 2001-08-18 02:37 27648 ----a-w- c:\windows\system32\dllcache\xrxftplt.exe 2010-09-30 13:01 . 2001-08-18 02:37 4608 ----a-w- c:\windows\system32\dllcache\xrxflnch.exe 2010-09-30 12:59 . 2004-08-04 02:29 19551 ----a-w- c:\windows\system32\dllcache\watv02nt.sys 2010-09-30 12:58 . 2001-08-17 17:28 224802 ----a-w- c:\windows\system32\dllcache\usr1807a.sys 2010-09-30 12:57 . 2001-08-18 02:36 216064 ----a-w- c:\windows\system32\dllcache\um34scan.dll 2010-09-30 12:56 . 2008-04-13 18:40 149376 ----a-w- c:\windows\system32\dllcache\tffsport.sys 2010-09-30 12:55 . 2001-08-17 16:18 285760 ----a-w- c:\windows\system32\dllcache\stlnata.sys 2010-09-30 12:54 . 2004-08-04 11:00 15872 ----a-w- c:\windows\system32\dllcache\smierrsm.dll 2010-09-30 12:53 . 2001-08-17 16:50 104064 ----a-w- c:\windows\system32\dllcache\sisgrp.sys 2010-09-30 12:52 . 2001-08-17 17:51 16640 ----a-w- c:\windows\system32\dllcache\scmstcs.sys 2010-09-30 12:51 . 2004-08-04 11:00 79872 ----a-w- c:\windows\system32\dllcache\rwia330.dll 2010-09-30 12:50 . 2001-08-17 17:28 112574 ----a-w- c:\windows\system32\dllcache\ptserlp.sys 2010-09-30 12:49 . 2008-04-13 18:44 27904 ----a-w- c:\windows\system32\dllcache\perm2.sys 2010-09-30 12:48 . 2001-08-17 18:05 25088 ----a-w- c:\windows\system32\dllcache\ovca.sys 2010-09-30 12:47 . 2001-08-18 02:36 60480 ----a-w- c:\windows\system32\dllcache\neo20xx.dll 2010-09-30 12:46 . 2001-08-17 17:48 12416 ----a-w- c:\windows\system32\dllcache\msriffwv.sys 2010-09-30 12:45 . 2001-08-17 16:19 48768 ----a-w- c:\windows\system32\dllcache\maestro.sys 2010-09-30 12:44 . 2001-08-18 02:36 8192 ----a-w- c:\windows\system32\dllcache\kbdkor.dll 2010-09-30 12:43 . 2001-08-18 02:36 372824 ----a-w- c:\windows\system32\dllcache\iconf32.dll 2010-09-30 12:42 . 2001-08-17 17:28 57471 ----a-w- c:\windows\system32\dllcache\hsf_samp.sys 2010-09-30 12:41 . 2001-08-18 02:36 83968 ----a-w- c:\windows\system32\dllcache\hpgt21.dll 2010-09-30 12:40 . 2001-08-18 02:36 71680 ----a-w- c:\windows\system32\dllcache\fnfilter.dll 2010-09-30 12:39 . 2001-08-17 16:17 629952 ----a-w- c:\windows\system32\dllcache\eqn.sys 2010-09-30 12:38 . 2001-08-18 02:36 236060 ----a-w- c:\windows\system32\dllcache\ditrace.exe 2010-09-30 12:37 . 2008-04-14 00:11 249856 ----a-w- c:\windows\system32\dllcache\ctmasetp.dll 2010-09-30 12:36 . 2001-08-17 17:51 13824 ----a-w- c:\windows\system32\dllcache\bulltlp3.sys 2010-09-30 12:35 . 2001-08-17 18:55 689216 ----a-w- c:\windows\system32\dllcache\3dfxvs.dll 2010-09-30 12:35 . 2001-08-17 16:48 148352 ----a-w- c:\windows\system32\dllcache\3dfxvsm.sys 2010-09-30 12:35 . 2001-08-17 18:06 11264 ----a-w- c:\windows\system32\dllcache\1394vdbg.sys 2010-09-30 12:35 . 2001-08-17 17:28 762780 ----a-w- c:\windows\system32\dllcache\3cwmcru.sys 2010-09-30 12:35 . 2004-08-04 11:00 7168 ----a-w- c:\windows\system32\dllcache\wamregps.dll 2010-09-30 12:35 . 2001-08-17 18:56 66048 ----a-w- c:\windows\system32\dllcache\s3legacy.dll 2010-09-30 12:35 . 2004-08-04 11:00 7680 ----a-w- c:\windows\system32\dllcache\inetmgr.exe 2010-09-30 12:35 . 2004-08-04 11:00 19968 ----a-w- c:\windows\system32\dllcache\inetsloc.dll 2010-09-30 12:35 . 2004-08-04 11:00 5632 ----a-w- c:\windows\system32\dllcache\iisrstap.dll 2010-09-30 12:35 . 2004-08-04 11:00 169984 ----a-w- c:\windows\system32\dllcache\iisui.dll 2010-09-30 12:35 . 2004-08-04 11:00 6144 ----a-w- c:\windows\system32\dllcache\ftpsapi2.dll 2010-09-30 12:35 . 2004-08-04 11:00 14336 ----a-w- c:\windows\system32\dllcache\iisreset.exe 2010-09-30 12:02 . 2010-10-04 13:17 -------- d-----w- c:\temp\Acrobat Distiller 9 2010-09-29 00:58 . 2010-04-28 22:35 19456 ----a-w- c:\windows\system32\drivers\ausbtmc.sys 2010-09-29 00:58 . 2010-09-29 00:58 -------- d-----w- c:\documents and settings\All Users\Application Data\IVI Foundation 2010-09-28 20:47 . 2010-09-28 20:47 -------- d-----w- c:\windows\system32\Common Files 2010-09-28 20:46 . 2010-09-28 20:46 -------- d-----w- C:\Packages 2010-09-25 14:03 . 2008-04-13 18:45 60032 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys 2010-09-25 14:03 . 2008-04-13 18:45 60032 ----a-w- c:\windows\system32\dllcache\usbaudio.sys 2010-09-25 02:53 . 2010-09-25 02:53 -------- d-----w- c:\program files\Microsoft Silverlight 2010-09-21 09:08 . 2010-09-21 09:08 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Adobe 2010-09-18 09:49 . 2010-09-23 02:27 -------- d-----w- C:\slike_tetke 2010-09-18 09:44 . 2010-09-27 19:54 -------- d-----w- C:\slike 2010-09-16 08:12 . 2010-09-16 08:12 -------- d-----w- c:\program files\Trend Micro 2010-09-16 04:54 . 2010-09-16 04:54 -------- d-sh--w- c:\documents and settings\LocalService\IECompatCache 2010-09-14 00:37 . 2010-09-14 00:37 -------- d-----w- c:\program files\Veetle . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-04 13:33 . 2008-05-25 14:04 -------- d-----w- c:\program files\Symantec AntiVirus 2010-10-04 13:33 . 2008-06-12 22:10 -------- d-----w- c:\documents and settings\All Users\Application Data\VMware 2010-10-04 13:32 . 2008-06-12 22:11 -------- d-----w- c:\documents and settings\LocalService\Application Data\VMware 2010-10-04 13:28 . 2010-08-20 12:49 1044056 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat 2010-09-29 17:57 . 2009-07-31 12:07 -------- d-----w- c:\documents and settings\All Users\Application Data\National Instruments 2010-09-29 17:12 . 2008-05-15 13:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help 2010-09-29 17:12 . 2009-07-31 12:05 -------- d-----w- c:\program files\Common Files\Merge Modules 2010-09-29 14:46 . 2009-07-31 12:02 -------- d-----w- c:\program files\National Instruments 2010-09-28 17:45 . 2009-07-31 12:22 -------- d-----w- c:\program files\IVI 2010-09-27 23:42 . 2009-12-17 20:17 -------- d-----w- c:\program files\Lexmark Toolbar 2010-09-27 23:33 . 2008-05-25 14:08 -------- d-----w- c:\program files\uTorrent 2010-09-27 00:38 . 2010-08-25 02:16 -------- d-----w- c:\program files\PeerBlock 2010-09-26 23:07 . 2008-06-12 04:20 -------- d-----w- c:\documents and settings\nzahirov\Application Data\uTorrent 2010-09-26 13:11 . 2009-12-17 20:18 -------- d-----w- c:\program files\Lx_cats 2010-09-25 15:46 . 2008-08-25 18:04 -------- d-----w- c:\documents and settings\nzahirov\Application Data\Skype 2010-09-25 14:01 . 2008-08-25 18:07 -------- d-----w- c:\documents and settings\nzahirov\Application Data\skypePM 2010-09-16 08:11 . 2009-01-26 22:00 1984 ----a-w- c:\windows\system32\d3d9caps.dat 2010-08-31 16:11 . 2010-08-31 16:11 3401880 ----a-w- c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll 2010-08-31 15:55 . 2010-08-31 15:55 275096 ----a-w- c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\npgoogletalk.dll 2010-08-31 15:39 . 2010-08-31 15:39 3734536 ----a-w- c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\Google Talk Plugin Extras\d3dx9_36.dll 2010-08-24 02:45 . 2010-06-27 04:01 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Nitro PDF 2010-08-23 01:55 . 2009-07-09 16:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2010-08-23 01:54 . 2009-07-09 16:20 -------- d-----w- c:\program files\sonnet.12.52 2010-08-23 01:51 . 2010-08-23 01:51 -------- d-----w- c:\documents and settings\nzahirov\Application Data\Leadertech 2010-08-23 01:50 . 2008-05-15 12:53 -------- d-----w- c:\program files\InterVideo 2010-08-23 01:50 . 2008-05-15 12:35 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-08-11 16:01 . 2010-08-11 16:00 -------- d-----w- c:\program files\sonnet.12.56 2010-08-11 15:58 . 2008-06-08 15:55 -------- d-----w- c:\documents and settings\nzahirov\Application Data\FileZilla 2010-06-25 17:57 . 2010-06-25 17:57 158720 ----a-w- c:\program files\internet explorer\plugins\LV2010ActiveXControl.dll 2004-03-15 21:51 . 2004-03-15 21:51 114688 ------w- c:\program files\internet explorer\plugins\LV71ActiveXControl.dll 2003-05-01 13:36 . 2003-05-01 13:36 114688 ------w- c:\program files\internet explorer\plugins\LV7ActiveXControl.dll 2006-01-23 14:32 . 2006-01-23 14:32 131072 ------w- c:\program files\internet explorer\plugins\LV80ActiveXControl.dll 2007-02-08 14:48 . 2007-02-08 14:48 133920 ------w- c:\program files\internet explorer\plugins\LV82ActiveXControl.dll 2007-07-24 23:03 . 2007-07-24 23:03 118784 ----a-w- c:\program files\internet explorer\plugins\LV85ActiveXControl.dll 2008-12-10 18:50 . 2008-12-10 18:50 118784 ----a-w- c:\program files\internet explorer\plugins\LV86ActiveXControl.dll 2010-05-25 16:43 . 2010-05-25 16:43 158720 ----a-w- c:\program files\internet explorer\plugins\LV90ActiveXControl.dll 2010-02-05 01:35 . 2009-08-06 14:57 27960 ----a-w- c:\program files\mozilla firefox\plugins\atgpcdec.dll 2010-02-05 01:35 . 2009-08-06 14:57 126344 ----a-w- c:\program files\mozilla firefox\plugins\atgpcext.dll 2009-08-06 14:57 . 2009-08-06 14:58 46408 ------w- c:\program files\mozilla firefox\plugins\atmccli.dll 2010-02-05 01:35 . 2009-08-06 14:58 98696 ----a-w- c:\program files\mozilla firefox\plugins\ieatgpc.dll 2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll 2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Google Update"="c:\documents and settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-02 133104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "TabletTip"="c:\program files\Common Files\microsoft shared\ink\tabtip.exe" [2008-04-14 271872] "PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2009-10-23 421888] "BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2009-10-23 208896] "TPFNF7"="c:\progra~1\Lenovo\NPDIRECT\TPFNF7SP.exe" [2009-08-03 62240] "TrackPointSrv"="c:\program files\Lenovo\TrackPoint\tp4serv.exe" [2009-06-26 92960] "TPHOTKEY"="c:\program files\Lenovo\HOTKEY\TPOSDSVC.exe" [2009-03-13 68976] "TpShocks"="TpShocks.exe" [2009-07-09 337184] "TSMResident"="c:\program files\ThinkPad\Tablet Shortcut\TSMRESIDENT.EXE" [2009-08-18 472352] "TVT Scheduler Proxy"="c:\program files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe" [2008-03-04 487424] "AwaySch"="c:\program files\Lenovo\AwayTask\AwaySch.EXE" [2006-11-07 91688] "LPManager"="c:\progra~1\THINKV~2\PrdCtr\LPMGR.exe" [2009-01-29 185688] "cssauth"="c:\program files\Lenovo\Client Security Solution\cssauth.exe" [2007-08-03 2630968] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016] "vptray"="c:\progra~1\SYMANT~1\\vptray.exe" [2007-03-14 125632] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-03 866584] "PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224] "niDevMon"="c:\program files\National Instruments\NI-DAQ\HWConfig\nidevmon.exe" [2007-07-14 106064] "LENOVO.TPFNF6R"="c:\program files\Lenovo\HOTKEY\TPFNF6R.exe" [2009-08-20 62752] "TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2007-01-09 868352] "LENTBCTL"="c:\program files\ThinkPad\Tablet Shortcut\LENTBCTL.EXE" [2009-08-18 1230112] "TabletButton"="c:\program files\ThinkPad\Tablet Shortcut\TabletButton.EXE" [2009-08-18 58656] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-04-24 1036288] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-09 166912] "Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-09 135680] "LPMailChecker"="c:\progra~1\THINKV~2\PrdCtr\LPMLCHK.exe" [2009-01-29 124248] "VMware hqtray"="c:\program files\VMware\VMware Player\hqtray.exe" [2009-10-22 64048] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672] "Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2009-10-03 38768] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2009-10-03 640376] "NI Background Service"="c:\program files\National Instruments\Shared\Update Service\niupdate.exe" [2010-05-28 77824] "InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707"="c:\program files\National Instruments\Shared\NIUninstaller\InstallValidator.exe" [2010-06-22 232144] c:\documents and settings\nzahirov\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632] c:\documents and settings\All Users\Start Menu\Programs\Startup\ DynDNS Updater Tray Icon.lnk - c:\program files\DynDNS Updater\DynTray.exe [2009-9-28 91504] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\loginkey] 2008-04-14 00:11 47104 ------w- c:\program files\Common Files\Microsoft Shared\Ink\loginkey.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus] 2007-03-15 05:17 89600 ------w- c:\windows\system32\psqlpwd.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\TabBtnWL] 2002-08-29 10:41 11776 ------w- c:\windows\system32\tabbtnwl.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2] 2006-09-06 21:37 34344 ----a-w- c:\program files\Lenovo\HOTKEY\notifyf2.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpgwlnotify] 2008-04-14 00:12 32256 ------w- c:\windows\system32\tpgwlnot.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\system32\acaptuser32.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ scecli psqlpwd [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 00:12 1695232 ------w- c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TabletWizard] 2008-04-14 00:12 16384 ------w- c:\windows\Help\splshwrp.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\ADS2006U3\\bin\\hpeesofemx.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\fbserver.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\ODBCutil.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\coventorStart.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\glish.exe"= "c:\\Program Files\\MATLAB\\R2008a\\bin\\win32\\MATLAB.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\javaWrap.exe"= "c:\\Coventor\\CoventorWare2008\\runtime\\jre\\1.6.0_01\\NT40\\bin\\java.exe"= "c:\\Documents and Settings\\nzahirov\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.dll"= "c:\\Documents and Settings\\nzahirov\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\TecplotWrapper.exe"= "c:\\Program Files\\CMC MicroSystems\\CMC Access CADpass\\CADpass.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\OrCAD\\OrCAD_10.5\\setconfig.exe"= "c:\\OrCAD\\OrCAD_10.5\\updates.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsdoc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsinfo.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsmps.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsMsgServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsNameServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsRemshClient.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsRunHidden.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsUnzip.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdswhich.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsZip.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cds_root.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\clsAdminTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\clsbd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\clu.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cmfeedback.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\consmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\dregprint.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\mpsinfo.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmppath.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\obServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\van.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\versionviewer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\capture.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\comp16.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pcadi.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pspiceexplorersrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pstswp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\regsvr32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\sch2cap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\SETBROWS.EXE"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\tutorial\\CAPTUTOR.EXE"= "c:\\OrCAD\\OrCAD_10.5\\tools\\cdsdoc\\bin\\cdsdocIndexer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\cdsdoc\\bin\\obServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\cdsservipc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\skill.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\skill_g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\bodygen.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\cpmaccess.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\libaccess.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\mkdefcfg.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\newgenasym.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\projmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\psetup.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\versiontool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\javaws-1_2_0_02-windows-i586-i.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\java.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\javaw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\jpicpl32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\keytool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\kinit.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\klist.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\ktab.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\orbd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\policytool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmid.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmiregistry.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\servertool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\tnameserv.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\fvupdateutil.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcam.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcdin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\idfin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\ipc356.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\layout.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\libcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\lsession.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\max2hyp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxascb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxascx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxdxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxeco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxfnetx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxorcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxp99x.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxprotb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxprotx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxstrb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxstrx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxtangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxtangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\mfceco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\orcadodb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\padb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\padx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcb2max.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\prcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\protb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\protx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\searchTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\setbrows.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\specin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\strb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\strx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\to386.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\toidf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tomax.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tospec.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\update90.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\fonts\\f2g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\fonts\\g2r.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\apstub.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\custaped.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\gerbline.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\gerbtool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\system\\fixtbar.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\samples\\demo\\reset.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\sroute\\batch32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\sroute\\sroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tutorial\\laytutor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\vcadd\\vcadd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\fvupdateutil.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcam.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcdin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\idfin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\ipc356.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\layout.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\libcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\lsession.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\max2hyp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxascb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxascx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxdxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxeco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxfnetx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxorcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxp99x.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxprotb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxprotx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxstrb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxstrx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxtangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxtangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\mfceco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\orcadodb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\padb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\padx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcb2max.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\prcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\protb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\protx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\searchTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\setbrows.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\specin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\strb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\strx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\to386.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\toidf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tomax.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tospec.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\update90.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\fonts\\f2g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\fonts\\g2r.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\apstub.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\custaped.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\gerbline.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\gerbtool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\system\\fixtbar.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\samples\\demo\\reset.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\sroute\\batch32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\sroute\\sroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tutorial\\laytutor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\vcadd\\vcadd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\fvupdateutil.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcam.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcdin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\idfin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\ipc356.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\layout.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\libcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\lsession.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\max2hyp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxdxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxeco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxfnetx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxorcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxp99x.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\mfceco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\orcadodb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcb2max.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\prcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\searchTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\setbrows.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\specin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\to386.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\toidf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tomax.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tospec.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\update90.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\fonts\\f2g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\fonts\\g2r.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\apstub.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\custaped.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbline.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbtool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\system\\fixtbar.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\samples\\demo\\reset.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\sroute\\batch32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\sroute\\sroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tutorial\\laytutor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\vcadd\\vcadd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\a2dxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\a2sdf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\aconvmap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\allegro.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\allegro_free_viewer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\aprepmap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\artwork.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ashowmap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\batch_drc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\bbvia.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\bem2d.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\brd2dml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\cns_report.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\create_devices.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\create_sym.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbdoctor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbdoctor14.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbdoctor_ui.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbfix11.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbfix12.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbfix13.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbstat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dfa_dlg.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dfa_update.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dml2brd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dmlcheck.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dmlcrypt.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\downrev_library.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\draw_check.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dump_libraries.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dxf2a.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ecl_schedule.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\enved.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\explot.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\extracta.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\flash_convert.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\fpbrowse.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSvia.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSviaSolver.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ftsmerge.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gbplot.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genfeedformat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genrad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gloss.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibis2signoise.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk3.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk4.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_out.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_out.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\il_allegro.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ipc356_out.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\j2script.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\lis2buf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mbs2lib.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mergedml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mkdeviceindex.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelintegrity.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelsim.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ncroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\nctape.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netrev.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pads_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pad_designer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\parallel.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pcad_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pe_wordpad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\placement.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\plctxt.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pre_check.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\productServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\quad2signoise.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\qvupdate.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_padstack.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_symbol.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_vs.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\reftxt.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\report.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\signoise.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave_sc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxsect.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2dml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2spc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif_batch.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\swap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\systemdump.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sys_root.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile13.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile14.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlp2.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlsim.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ts2dml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\uprev.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\zrouter.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\bin\\perl.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\bin\\perlglob.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\ntt\\cmd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\appmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\IndiceFileGeneration.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\lxcwin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\Magneticdesigner.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\modeled.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\MrkSrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\msgview.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\optimize.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\PDesign.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psched.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspice.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceaa.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceexplorersrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psp_cmd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\regsvr32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simsrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\stmed.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\specctra\\bin\\specctra.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\bin\\cdsdocIndexer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\merge.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\mkvdk.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\search.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\setup.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\v_uninst.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\callback.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\filter.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmlini.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmserv.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\index.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jstree.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jvtree.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\kvoop.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\regsvr32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\summary.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\viewers\\amovie.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\specctra\\bin\\specctra.com"= "c:\\Program Files\\Ansoft\\HFSS12\\hfss.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\Maple 13\\jre\\bin\\maple.exe"= "c:\\Program Files\\VMware\\VMware Player\\vmware-authd.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\Boxee\\BOXEE.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\National Instruments\\Shared\\NI WebServer\\ApplicationWebServer.exe"= "c:\\Program Files\\National Instruments\\Shared\\NI WebServer\\SystemWebServer.exe"= "c:\\Program Files\\National Instruments\\Shared\\mDNS Responder\\nimdnsResponder.exe"= "c:\\Program Files\\IVI\\Drivers\\niScope\\NI-SCOPE Soft Front Panel.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 "135:TCP"= 135:TCP:TCP Port 135 "5000:TCP"= 5000:TCP:TCP Port 5000 "5001:TCP"= 5001:TCP:TCP Port 5001 "5002:TCP"= 5002:TCP:TCP Port 5002 "5003:TCP"= 5003:TCP:TCP Port 5003 "5004:TCP"= 5004:TCP:TCP Port 5004 "5005:TCP"= 5005:TCP:TCP Port 5005 "5006:TCP"= 5006:TCP:TCP Port 5006 "5007:TCP"= 5007:TCP:TCP Port 5007 "5008:TCP"= 5008:TCP:TCP Port 5008 "5009:TCP"= 5009:TCP:TCP Port 5009 "5010:TCP"= 5010:TCP:TCP Port 5010 "5011:TCP"= 5011:TCP:TCP Port 5011 "5012:TCP"= 5012:TCP:TCP Port 5012 "5013:TCP"= 5013:TCP:TCP Port 5013 "5014:TCP"= 5014:TCP:TCP Port 5014 "5015:TCP"= 5015:TCP:TCP Port 5015 "5016:TCP"= 5016:TCP:TCP Port 5016 "5017:TCP"= 5017:TCP:TCP Port 5017 "5018:TCP"= 5018:TCP:TCP Port 5018 "5019:TCP"= 5019:TCP:TCP Port 5019 "5020:TCP"= 5020:TCP:TCP Port 5020 R0 nipbcfk;National Instruments Class Upper Filter Driver;c:\windows\system32\drivers\nipbcfk.sys [3/24/2010 12:27 PM 15448] R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [6/29/2009 2:51 PM 20520] R1 TSMSMI;TSM System Interface Driver;c:\windows\system32\drivers\tsmsmi32.sys [5/15/2008 8:39 AM 15784] R2 ASRSVC;ASR Service;c:\program files\ThinkPad\Tablet Shortcut\ASR\ASRSVC.exe [12/29/2009 11:03 AM 79136] R2 DynDNS Updater;DynDNS Updater;c:\program files\DynDNS Updater\DynUpSvc.exe [9/28/2009 8:38 AM 99704] R2 ni488enumsvc;NI-488.2 Enumeration Service;c:\windows\system32\nipalsm.exe [3/24/2010 3:23 PM 12696] R2 NIApplicationWebServer;NI Application Web Server;c:\program files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [6/22/2010 5:02 PM 47776] R2 niarbk;niarbk;c:\windows\system32\drivers\niarbk.dll [4/16/2007 3:40 PM 37376] R2 nibffrk;nibffrk;c:\windows\system32\drivers\nibffrk.dll [4/16/2007 3:40 PM 21504] R2 nidevldu;NI Device Loader;c:\windows\system32\nipalsm.exe [3/24/2010 3:23 PM 12696] R2 niLXIDiscovery;National Instruments LXI Discovery Service;c:\vxipnp\WinNT\NIvisa\niLxiDiscovery.exe [6/23/2010 1:14 PM 131776] R2 nimDNSResponder;National Instruments mDNS Responder Service;c:\program files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [6/23/2010 4:21 PM 193712] R2 nimdsk;nimdsk;c:\windows\system32\drivers\nimdsk.dll [4/16/2007 3:41 PM 30208] R2 nipxirmk;nipxirmk;c:\windows\system32\drivers\nipxirmkl.sys [7/7/2009 1:43 PM 11344] R2 nistck;nistck;c:\windows\system32\drivers\niSTCk.dll [4/16/2007 3:42 PM 111616] R2 NiViPxiK;NI-VISA PXI Driver;c:\windows\system32\drivers\NiViPxiKl.sys [6/23/2010 10:04 AM 11432] R2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [6/11/2010 11:16 AM 65856] R2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.exe [8/18/2009 9:55 AM 53248] R2 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [3/14/2007 7:48 PM 116416] R2 smihlp;SMI Helper Driver (smihlp);c:\program files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [3/15/2007 1:10 AM 11152] R2 TabletSVC;TABLET Service;c:\program files\ThinkPad\Tablet Shortcut\TSMService.exe [12/29/2009 11:03 AM 58656] R2 TPHKSVC;On Screen Display;c:\program files\Lenovo\HOTKEY\TPHKSVC.exe [3/30/2007 4:39 AM 62320] R2 TVT Backup Protection Service;TVT Backup Protection Service;c:\program files\Lenovo\Rescue and Recovery\rrpservice.exe [7/11/2007 8:38 PM 569344] R2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [10/22/2009 5:45 AM 70704] R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 7:19 PM 13592] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [9/19/2010 3:05 AM 102448] R3 nidimk;nidimk;c:\windows\system32\drivers\nidimkl.sys [7/7/2009 4:50 PM 11360] R3 nimru2k;nimru2k;c:\windows\system32\drivers\nimru2kl.sys [7/24/2007 12:19 PM 11360] R3 nimstsk;nimstsk;c:\windows\system32\drivers\nimstskl.sys [7/13/2007 8:00 PM 11360] R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [5/10/2007 12:34 PM 23080] R3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\drivers\tvti2c.sys [5/22/2007 6:59 PM 30336] R3 WacomPen;Wacom Serial Pen HID Driver;c:\windows\system32\drivers\wacompen.sys [5/15/2008 8:23 AM 14208] S0 bwsao;bwsao;c:\windows\system32\drivers\amuil.sys --> c:\windows\system32\drivers\amuil.sys [?] S0 khqlmxop;khqlmxop;c:\windows\system32\drivers\oopuhnpkpjv.sys --> c:\windows\system32\drivers\oopuhnpkpjv.sys [?] S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\Lenovo\HOTKEY\micmute.exe [5/21/2009 8:48 PM 45424] S2 Nidaq32k;Nidaq32k;c:\windows\system32\drivers\nidaq32k.sys [4/16/2007 5:04 PM 674304] S2 nidmmk;NI DMM and Data Logger Kernel Driver;c:\windows\system32\drivers\nidmmk.dll [4/16/2007 5:06 PM 50688] S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files\Common Files\VMware\USB\vmware-usbarbitrator.exe [10/22/2009 4:47 AM 563760] S3 AlteraUSBBlaster;Altera USB-Blaster Device Driver;c:\windows\system32\drivers\ftdibus.sys [5/26/2008 3:09 PM 58184] S3 gpibprtk;gpibprtk;c:\windows\system32\drivers\gpibprtk.sys [7/31/2009 8:44 AM 215840] S3 lvalarmk;lvalarmk;c:\windows\system32\drivers\lvalarmk.sys [1/11/2007 10:18 AM 20256] S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [8/15/2009 8:35 AM 7680] S3 ni1006k;NI PXI-1006 Chassis Pilot;c:\windows\system32\drivers\ni1006k.sys [4/1/2009 3:16 PM 26192] S3 ni1045k;NI PXI-1045 Chassis Pilot;c:\windows\system32\drivers\ni1045kl.sys [6/17/2009 11:35 AM 11344] S3 ni1065k;NI PXIe-1065 Chassis Pilot;c:\windows\system32\drivers\ni1065k.sys [4/1/2009 3:31 PM 22608] S3 ni488lock;NI-488.2 Locking Service;c:\windows\system32\drivers\ni488lock.sys [2/26/2007 12:40 PM 16672] S3 nicdrk;nicdrk;c:\windows\system32\drivers\nicdrkl.sys [7/15/2007 5:44 PM 11352] S3 nidmxfk;nidmxfk;c:\windows\system32\drivers\nidmxfkl.sys [7/13/2007 10:38 PM 11336] S3 nidsark;nidsark;c:\windows\system32\drivers\nidsarkl.sys [7/19/2007 3:06 AM 11344] S3 nidwgk;nidwgk;c:\windows\system32\drivers\nidwgkl.sys [2/23/2007 10:32 PM 11552] S3 niemrk;niemrk;c:\windows\system32\drivers\niemrkl.sys [7/24/2007 7:37 PM 11336] S3 niemrkw;niemrkw;c:\windows\system32\drivers\niemrkw.sys [7/31/2009 8:48 AM 11336] S3 niesrk;niesrk;c:\windows\system32\drivers\niesrkl.sys [7/24/2007 7:37 PM 11336] S3 nifslk;nifslk;c:\windows\system32\drivers\nifslkl.sys [7/15/2007 6:31 PM 11352] S3 nigplk;nigplk;c:\windows\system32\drivers\nigplkl.sys [2/23/2007 4:20 PM 11552] S3 nihsdrk;nihsdrk;c:\windows\system32\drivers\nihsdrkl.sys [7/24/2007 10:01 PM 11352] S3 nimsdrk;nimsdrk;c:\windows\system32\drivers\nimsdrkl.sys [7/18/2007 10:47 AM 11392] S3 nimslk;nimslk;c:\windows\system32\drivers\nimslk.dll [6/21/2007 12:19 AM 14464] S3 nimsrlk;nimsrlk;c:\windows\system32\drivers\nimsrlk.dll [6/21/2007 12:19 AM 151683] S3 nimxpk;nimxpk;c:\windows\system32\drivers\nimxpkl.sys [7/13/2007 8:01 PM 11368] S3 ninshsdk;ninshsdk;c:\windows\system32\drivers\ninshsdkl.sys [7/19/2007 1:49 PM 11360] S3 nipalfwedl;nipalfwedl;c:\windows\system32\drivers\nipalfwedl.sys [6/2/2010 6:44 PM 11968] S3 nipalusbedl;nipalusbedl;c:\windows\system32\drivers\nipalusbedl.sys [6/2/2010 6:45 PM 11968] S3 nipsdk;nipsdk;c:\windows\system32\drivers\nipsdkl.sys [7/24/2007 3:29 PM 11552] S3 nipxigpk;NI PXI Generic Chassis Pilot;c:\windows\system32\drivers\nipxigpk.sys [6/25/2008 12:02 PM 20568] S3 nirfsa2k;nirfsa2k;c:\windows\system32\drivers\niRFSA2kl.sys [6/30/2007 11:07 PM 11552] S3 NiRioRpc;National Instruments RIO Server;c:\windows\system32\NiRioRpc.exe [7/27/2007 5:09 AM 28232] S3 niscdk;niscdk;c:\windows\system32\drivers\niscdkl.sys [7/19/2007 2:32 AM 11376] S3 nisdigk;nisdigk;c:\windows\system32\drivers\nisdigkl.sys [7/17/2007 12:27 AM 11352] S3 nisftk;nisftk;c:\windows\system32\drivers\nisftkl.sys [7/16/2007 12:52 PM 11344] S3 nisldk;nisldk;c:\windows\system32\drivers\nisldkl.sys [6/16/2007 12:38 AM 11624] S3 nispdk;nispdk;c:\windows\system32\drivers\nispdkl.sys [7/19/2007 2:32 AM 11376] S3 nisrcdk;nisrcdk;c:\windows\system32\drivers\nisrcdkl.sys [6/1/2007 3:39 PM 11552] S3 nissrk;nissrk;c:\windows\system32\drivers\nissrkl.sys [7/24/2007 7:37 PM 11336] S3 nistc2k;nistc2k;c:\windows\system32\drivers\nistc2kl.sys [7/15/2007 4:48 PM 11312] S3 nistcrk;nistcrk;c:\windows\system32\drivers\nistcrkl.sys [7/15/2007 5:50 PM 11360] S3 niswdk;niswdk;c:\windows\system32\drivers\niswdkl.sys [7/17/2007 4:18 AM 11336] S3 nitiork;nitiork;c:\windows\system32\drivers\nitiorkl.sys [7/18/2007 10:15 PM 11360] S3 nitnr2k;nitnr2k;c:\windows\system32\drivers\nitnr2kl.sys [2/24/2007 12:09 AM 11552] S3 NIUSBTMC;NI-VISA USB TMC Driver;c:\windows\system32\DRIVERS\NIUSBTMC.sys --> c:\windows\system32\DRIVERS\NIUSBTMC.sys [?] S3 NiViPciK;NI-VISA PCI Driver;c:\windows\system32\drivers\NiViPciKl.sys [6/23/2010 10:03 AM 11432] S3 niwfrk;niwfrk;c:\windows\system32\drivers\niwfrkl.sys [7/24/2007 7:37 PM 11336] S3 nixsrk;nixsrk;c:\windows\system32\drivers\nixsrkl.sys [7/24/2007 7:38 PM 11336] S3 Normandy;Normandy SR2; [x] S3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [8/24/2010 10:16 PM 14424] S3 SIF32X;SIF32X;c:\windows\system32\drivers\SiF32x.sys [10/5/2009 9:24 AM 9600] S3 usb6xxxk;usb6xxxk;\??\c:\windows\system32\drivers\usb6xxxkl.sys --> c:\windows\system32\drivers\usb6xxxkl.sys [?] S3 usb6xxxkw;usb6xxxkw;c:\windows\system32\drivers\usb6xxxkw.sys [7/31/2009 8:48 AM 11312] S3 Usbtmc;ausbtmc;c:\windows\system32\drivers\ausbtmc.sys [9/28/2010 8:58 PM 19456] S4 CoventorWare Architect License Service;CoventorWare Architect License Service;c:\coventor\CoventorWare2008\licensing\NT40\lmgrd.fnet.exe [3/11/2008 9:59 PM 1294336] S4 CoventorWare License Service;CoventorWare License Service;c:\coventor\CoventorWare2008\licensing\NT40\lmgrd.exe [3/11/2008 7:20 PM 815104] S4 CoventorWare Microfluidics Solvers License Service;CoventorWare Microfluidics Solvers License Service;c:\coventor\CoventorWare2008\licensing\NT40\lmgrd.exe [3/11/2008 7:20 PM 815104] S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [7/7/2009 9:49 AM 721904] --- Other Services/Drivers In Memory --- *NewlyCreated* - NIPALK [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 getPlusHelper REG_MULTI_SZ getPlusHelper . Contents of the 'Scheduled Tasks' folder 2010-10-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4223995798-2641801745-1403671520-1009Core.job - c:\documents and settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-02 19:06] 2010-10-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4223995798-2641801745-1403671520-1009UA.job - c:\documents and settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-02 19:06] 2010-10-04 c:\windows\Tasks\MP Scheduled Scan.job - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 23:20] 2010-10-03 c:\windows\Tasks\PMTask.job - c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2008-05-15 06:04] . . ------- Supplementary Scan ------- . IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000 IE: Send to &Bluetooth Device... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm IE: Send To Bluetooth - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie.htm LSP: c:\program files\VMware\VMware Player\vsocklib.dll DPF: {20C2C286-BDE8-441B-B73D-AFA22D914DA5} - hxxp://download.ppstream.com/bin/powerplayer.cab FF - ProfilePath - c:\documents and settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\ FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ . . ------- File Associations ------- . .txt=MECEdit.Document . . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,1b,cf,eb,71,53,6b,b3,43,bd,f7,58,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,1b,cf,eb,71,53,6b,b3,43,bd,f7,58,\ . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(252) c:\windows\system32\psqlpwd.dll c:\program files\ThinkVantage Fingerprint Software\homefus2.dll c:\program files\ThinkVantage Fingerprint Software\infra.dll c:\program files\ThinkVantage Fingerprint Software\homepass.dll c:\program files\ThinkVantage Fingerprint Software\bio.dll c:\program files\ThinkVantage Fingerprint Software\ps2css.dll c:\program files\ThinkVantage Fingerprint Software\pscssint.dll c:\program files\ThinkVantage Fingerprint Software\remote.dll c:\program files\ThinkVantage Fingerprint Software\crypto.dll - - - - - - - > 'lsass.exe'(312) c:\windows\system32\psqlpwd.dll c:\program files\ThinkVantage Fingerprint Software\homefus2.dll c:\program files\ThinkVantage Fingerprint Software\infra.dll c:\program files\ThinkVantage Fingerprint Software\remote.dll . Completion time: 2010-10-04 09:50:22 ComboFix-quarantined-files.txt 2010-10-04 13:50 ComboFix2.txt 2010-09-30 19:19 Pre-Run: 159,777,173,504 bytes free Post-Run: 159,737,245,696 bytes free - - End Of File - - E4FDF2D7174423DD27C521C547FDC265
  8. I have submitted the file to bleepingcomputer.com as requested. The file was already deleted. But, luckily, it was still in the recycling bin. When I couldn't identify the file with a quick google search I assumed it was malicious and promptly deleted it. Thanks for your help, Nzah
  9. ComboFix 10-09-29.04 - nzahirov 09/30/2010 14:03:30.1.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3062.2248 [GMT -4:00] Running from: c:\documents and settings\nzahirov\Desktop\ComboFix.exe AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\nzahirov\Local Settings\Application Data\{B54B5AE6-CB17-4BC6-80EC-5A5475ED9500} c:\documents and settings\nzahirov\Local Settings\Application Data\{B54B5AE6-CB17-4BC6-80EC-5A5475ED9500}\chrome.manifest c:\documents and settings\nzahirov\Local Settings\Application Data\{B54B5AE6-CB17-4BC6-80EC-5A5475ED9500}\chrome\content\_cfg.js c:\documents and settings\nzahirov\Local Settings\Application Data\{B54B5AE6-CB17-4BC6-80EC-5A5475ED9500}\chrome\content\overlay.xul c:\documents and settings\nzahirov\Local Settings\Application Data\{B54B5AE6-CB17-4BC6-80EC-5A5475ED9500}\install.rdf c:\documents and settings\nzahirov\Local Settings\Application Data\Windows Server c:\documents and settings\nzahirov\Local Settings\Application Data\Windows Server\server.dat C:\Documents c:\windows\system32\debug_log.scr c:\windows\system32\drivers\yonrfjde.sys c:\windows\system32\Thumbs.db c:\windows\system32\drivers\oopuhnpkpjv.sys . . . is infected!! . . . Failed to find a valid replacement. . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_yonrfjde -------\Service_yonrfjde ((((((((((((((((((((((((( Files Created from 2010-08-28 to 2010-09-30 ))))))))))))))))))))))))))))))) . 2010-09-30 19:07 . 2010-09-30 19:07 53248 ----a-w- c:\temp\catchme.dll 2010-09-30 13:21 . 2010-09-30 13:21 -------- d-----w- c:\temp\plugtmp 2010-09-30 13:01 . 2008-04-14 00:12 116224 ----a-w- c:\windows\system32\dllcache\xrxwiadr.dll 2010-09-30 13:01 . 2001-08-18 02:36 23040 ----a-w- c:\windows\system32\dllcache\xrxwbtmp.dll 2010-09-30 13:01 . 2008-04-14 00:12 18944 ----a-w- c:\windows\system32\dllcache\xrxscnui.dll 2010-09-30 13:01 . 2001-08-18 02:37 27648 ----a-w- c:\windows\system32\dllcache\xrxftplt.exe 2010-09-30 13:01 . 2001-08-18 02:37 4608 ----a-w- c:\windows\system32\dllcache\xrxflnch.exe 2010-09-30 12:59 . 2004-08-04 02:29 19551 ----a-w- c:\windows\system32\dllcache\watv02nt.sys 2010-09-30 12:58 . 2001-08-17 17:28 224802 ----a-w- c:\windows\system32\dllcache\usr1807a.sys 2010-09-30 12:57 . 2001-08-18 02:36 216064 ----a-w- c:\windows\system32\dllcache\um34scan.dll 2010-09-30 12:56 . 2008-04-13 18:40 149376 ----a-w- c:\windows\system32\dllcache\tffsport.sys 2010-09-30 12:55 . 2001-08-17 16:18 285760 ----a-w- c:\windows\system32\dllcache\stlnata.sys 2010-09-30 12:54 . 2004-08-04 11:00 15872 ----a-w- c:\windows\system32\dllcache\smierrsm.dll 2010-09-30 12:53 . 2001-08-17 16:50 104064 ----a-w- c:\windows\system32\dllcache\sisgrp.sys 2010-09-30 12:52 . 2001-08-17 17:51 16640 ----a-w- c:\windows\system32\dllcache\scmstcs.sys 2010-09-30 12:51 . 2004-08-04 11:00 79872 ----a-w- c:\windows\system32\dllcache\rwia330.dll 2010-09-30 12:50 . 2001-08-17 17:28 112574 ----a-w- c:\windows\system32\dllcache\ptserlp.sys 2010-09-30 12:49 . 2008-04-13 18:44 27904 ----a-w- c:\windows\system32\dllcache\perm2.sys 2010-09-30 12:48 . 2001-08-17 18:05 25088 ----a-w- c:\windows\system32\dllcache\ovca.sys 2010-09-30 12:47 . 2001-08-18 02:36 60480 ----a-w- c:\windows\system32\dllcache\neo20xx.dll 2010-09-30 12:46 . 2001-08-17 17:48 12416 ----a-w- c:\windows\system32\dllcache\msriffwv.sys 2010-09-30 12:45 . 2001-08-17 16:19 48768 ----a-w- c:\windows\system32\dllcache\maestro.sys 2010-09-30 12:44 . 2001-08-18 02:36 8192 ----a-w- c:\windows\system32\dllcache\kbdkor.dll 2010-09-30 12:43 . 2001-08-18 02:36 372824 ----a-w- c:\windows\system32\dllcache\iconf32.dll 2010-09-30 12:42 . 2001-08-17 17:28 57471 ----a-w- c:\windows\system32\dllcache\hsf_samp.sys 2010-09-30 12:41 . 2001-08-18 02:36 83968 ----a-w- c:\windows\system32\dllcache\hpgt21.dll 2010-09-30 12:40 . 2001-08-18 02:36 71680 ----a-w- c:\windows\system32\dllcache\fnfilter.dll 2010-09-30 12:39 . 2001-08-17 16:17 629952 ----a-w- c:\windows\system32\dllcache\eqn.sys 2010-09-30 12:38 . 2001-08-18 02:36 236060 ----a-w- c:\windows\system32\dllcache\ditrace.exe 2010-09-30 12:37 . 2008-04-14 00:11 249856 ----a-w- c:\windows\system32\dllcache\ctmasetp.dll 2010-09-30 12:36 . 2001-08-17 17:51 13824 ----a-w- c:\windows\system32\dllcache\bulltlp3.sys 2010-09-30 12:35 . 2001-08-17 18:55 689216 ----a-w- c:\windows\system32\dllcache\3dfxvs.dll 2010-09-30 12:35 . 2001-08-17 16:48 148352 ----a-w- c:\windows\system32\dllcache\3dfxvsm.sys 2010-09-30 12:35 . 2001-08-17 18:06 11264 ----a-w- c:\windows\system32\dllcache\1394vdbg.sys 2010-09-30 12:35 . 2001-08-17 17:28 762780 ----a-w- c:\windows\system32\dllcache\3cwmcru.sys 2010-09-30 12:35 . 2004-08-04 11:00 7168 ----a-w- c:\windows\system32\dllcache\wamregps.dll 2010-09-30 12:35 . 2001-08-17 18:56 66048 ----a-w- c:\windows\system32\dllcache\s3legacy.dll 2010-09-30 12:35 . 2004-08-04 11:00 7680 ----a-w- c:\windows\system32\dllcache\inetmgr.exe 2010-09-30 12:35 . 2004-08-04 11:00 19968 ----a-w- c:\windows\system32\dllcache\inetsloc.dll 2010-09-30 12:35 . 2004-08-04 11:00 5632 ----a-w- c:\windows\system32\dllcache\iisrstap.dll 2010-09-30 12:35 . 2004-08-04 11:00 169984 ----a-w- c:\windows\system32\dllcache\iisui.dll 2010-09-30 12:35 . 2004-08-04 11:00 6144 ----a-w- c:\windows\system32\dllcache\ftpsapi2.dll 2010-09-30 12:35 . 2004-08-04 11:00 14336 ----a-w- c:\windows\system32\dllcache\iisreset.exe 2010-09-30 12:02 . 2010-09-30 19:09 -------- d-----w- c:\temp\Acrobat Distiller 9 2010-09-29 00:58 . 2010-04-28 22:35 19456 ----a-w- c:\windows\system32\drivers\ausbtmc.sys 2010-09-29 00:58 . 2010-09-29 00:58 -------- d-----w- c:\documents and settings\All Users\Application Data\IVI Foundation 2010-09-28 20:47 . 2010-09-28 20:47 -------- d-----w- c:\windows\system32\Common Files 2010-09-28 20:46 . 2010-09-28 20:46 -------- d-----w- C:\Packages 2010-09-25 14:03 . 2008-04-13 18:45 60032 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys 2010-09-25 14:03 . 2008-04-13 18:45 60032 ----a-w- c:\windows\system32\dllcache\usbaudio.sys 2010-09-25 02:53 . 2010-09-25 02:53 -------- d-----w- c:\program files\Microsoft Silverlight 2010-09-21 09:08 . 2010-09-23 11:37 72320 ----a-w- c:\windows\system32\drivers\oopuhnpkpjv.sys 2010-09-21 09:08 . 2010-09-21 09:08 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Adobe 2010-09-18 09:49 . 2010-09-23 02:27 -------- d-----w- C:\slike_tetke 2010-09-18 09:44 . 2010-09-27 19:54 -------- d-----w- C:\slike 2010-09-16 08:12 . 2010-09-16 08:12 -------- d-----w- c:\program files\Trend Micro 2010-09-16 04:54 . 2010-09-16 04:54 -------- d-sh--w- c:\documents and settings\LocalService\IECompatCache 2010-09-14 00:37 . 2010-09-14 00:37 -------- d-----w- c:\program files\Veetle . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-09-30 18:30 . 2008-05-25 14:04 -------- d-----w- c:\program files\Symantec AntiVirus 2010-09-30 18:27 . 2008-06-12 22:11 -------- d-----w- c:\documents and settings\LocalService\Application Data\VMware 2010-09-30 18:27 . 2008-06-12 22:10 -------- d-----w- c:\documents and settings\All Users\Application Data\VMware 2010-09-30 18:22 . 2010-08-20 12:49 1044056 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat 2010-09-29 17:57 . 2009-07-31 12:07 -------- d-----w- c:\documents and settings\All Users\Application Data\National Instruments 2010-09-29 17:12 . 2008-05-15 13:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help 2010-09-29 17:12 . 2009-07-31 12:05 -------- d-----w- c:\program files\Common Files\Merge Modules 2010-09-29 14:46 . 2009-07-31 12:02 -------- d-----w- c:\program files\National Instruments 2010-09-28 17:45 . 2009-07-31 12:22 -------- d-----w- c:\program files\IVI 2010-09-27 23:42 . 2009-12-17 20:17 -------- d-----w- c:\program files\Lexmark Toolbar 2010-09-27 23:33 . 2008-05-25 14:08 -------- d-----w- c:\program files\uTorrent 2010-09-27 00:38 . 2010-08-25 02:16 -------- d-----w- c:\program files\PeerBlock 2010-09-26 23:07 . 2008-06-12 04:20 -------- d-----w- c:\documents and settings\nzahirov\Application Data\uTorrent 2010-09-26 13:11 . 2009-12-17 20:18 -------- d-----w- c:\program files\Lx_cats 2010-09-25 15:46 . 2008-08-25 18:04 -------- d-----w- c:\documents and settings\nzahirov\Application Data\Skype 2010-09-25 14:01 . 2008-08-25 18:07 -------- d-----w- c:\documents and settings\nzahirov\Application Data\skypePM 2010-09-16 08:11 . 2009-01-26 22:00 1984 ----a-w- c:\windows\system32\d3d9caps.dat 2010-09-16 05:06 . 2010-08-25 02:16 0 ----a-w- c:\windows\Imuxixaxet.bin 2010-09-07 16:42 . 2010-08-25 02:16 120 ----a-w- c:\windows\Rzusih.dat 2010-08-31 16:11 . 2010-08-31 16:11 3401880 ----a-w- c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll 2010-08-31 15:55 . 2010-08-31 15:55 275096 ----a-w- c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\npgoogletalk.dll 2010-08-31 15:39 . 2010-08-31 15:39 3734536 ----a-w- c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\Google Talk Plugin Extras\d3dx9_36.dll 2010-08-24 02:45 . 2010-06-27 04:01 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Nitro PDF 2010-08-23 01:55 . 2009-07-09 16:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2010-08-23 01:54 . 2009-07-09 16:20 -------- d-----w- c:\program files\sonnet.12.52 2010-08-23 01:51 . 2010-08-23 01:51 -------- d-----w- c:\documents and settings\nzahirov\Application Data\Leadertech 2010-08-23 01:50 . 2008-05-15 12:53 -------- d-----w- c:\program files\InterVideo 2010-08-23 01:50 . 2008-05-15 12:35 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-08-11 16:01 . 2010-08-11 16:00 -------- d-----w- c:\program files\sonnet.12.56 2010-08-11 15:58 . 2008-06-08 15:55 -------- d-----w- c:\documents and settings\nzahirov\Application Data\FileZilla 2010-06-25 17:57 . 2010-06-25 17:57 158720 ----a-w- c:\program files\internet explorer\plugins\LV2010ActiveXControl.dll 2004-03-15 21:51 . 2004-03-15 21:51 114688 ------w- c:\program files\internet explorer\plugins\LV71ActiveXControl.dll 2003-05-01 13:36 . 2003-05-01 13:36 114688 ------w- c:\program files\internet explorer\plugins\LV7ActiveXControl.dll 2006-01-23 14:32 . 2006-01-23 14:32 131072 ------w- c:\program files\internet explorer\plugins\LV80ActiveXControl.dll 2007-02-08 14:48 . 2007-02-08 14:48 133920 ------w- c:\program files\internet explorer\plugins\LV82ActiveXControl.dll 2007-07-24 23:03 . 2007-07-24 23:03 118784 ----a-w- c:\program files\internet explorer\plugins\LV85ActiveXControl.dll 2008-12-10 18:50 . 2008-12-10 18:50 118784 ----a-w- c:\program files\internet explorer\plugins\LV86ActiveXControl.dll 2010-05-25 16:43 . 2010-05-25 16:43 158720 ----a-w- c:\program files\internet explorer\plugins\LV90ActiveXControl.dll 2010-02-05 01:35 . 2009-08-06 14:57 27960 ----a-w- c:\program files\mozilla firefox\plugins\atgpcdec.dll 2010-02-05 01:35 . 2009-08-06 14:57 126344 ----a-w- c:\program files\mozilla firefox\plugins\atgpcext.dll 2009-08-06 14:57 . 2009-08-06 14:58 46408 ------w- c:\program files\mozilla firefox\plugins\atmccli.dll 2010-02-05 01:35 . 2009-08-06 14:58 98696 ----a-w- c:\program files\mozilla firefox\plugins\ieatgpc.dll 2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll 2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Google Update"="c:\documents and settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-09-02 133104] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "TabletTip"="c:\program files\Common Files\microsoft shared\ink\tabtip.exe" [2008-04-14 271872] "PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2009-10-23 421888] "BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2009-10-23 208896] "TPFNF7"="c:\progra~1\Lenovo\NPDIRECT\TPFNF7SP.exe" [2009-08-03 62240] "TrackPointSrv"="c:\program files\Lenovo\TrackPoint\tp4serv.exe" [2009-06-26 92960] "TPHOTKEY"="c:\program files\Lenovo\HOTKEY\TPOSDSVC.exe" [2009-03-13 68976] "TpShocks"="TpShocks.exe" [2009-07-09 337184] "TSMResident"="c:\program files\ThinkPad\Tablet Shortcut\TSMRESIDENT.EXE" [2009-08-18 472352] "TVT Scheduler Proxy"="c:\program files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe" [2008-03-04 487424] "AwaySch"="c:\program files\Lenovo\AwayTask\AwaySch.EXE" [2006-11-07 91688] "LPManager"="c:\progra~1\THINKV~2\PrdCtr\LPMGR.exe" [2009-01-29 185688] "cssauth"="c:\program files\Lenovo\Client Security Solution\cssauth.exe" [2007-08-03 2630968] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016] "vptray"="c:\progra~1\SYMANT~1\\vptray.exe" [2007-03-14 125632] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-11-03 866584] "PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224] "niDevMon"="c:\program files\National Instruments\NI-DAQ\HWConfig\nidevmon.exe" [2007-07-14 106064] "LENOVO.TPFNF6R"="c:\program files\Lenovo\HOTKEY\TPFNF6R.exe" [2009-08-20 62752] "TPKMAPHELPER"="c:\program files\ThinkPad\Utilities\TpKmapAp.exe" [2007-01-09 868352] "LENTBCTL"="c:\program files\ThinkPad\Tablet Shortcut\LENTBCTL.EXE" [2009-08-18 1230112] "TabletButton"="c:\program files\ThinkPad\Tablet Shortcut\TabletButton.EXE" [2009-08-18 58656] "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-04-24 1036288] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-09 166912] "Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-09 135680] "LPMailChecker"="c:\progra~1\THINKV~2\PrdCtr\LPMLCHK.exe" [2009-01-29 124248] "VMware hqtray"="c:\program files\VMware\VMware Player\hqtray.exe" [2009-10-22 64048] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672] "Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2009-10-03 38768] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2009-10-03 640376] "NI Background Service"="c:\program files\National Instruments\Shared\Update Service\niupdate.exe" [2010-05-28 77824] "InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707"="c:\program files\National Instruments\Shared\NIUninstaller\InstallValidator.exe" [2010-06-22 232144] c:\documents and settings\nzahirov\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632] c:\documents and settings\All Users\Start Menu\Programs\Startup\ DynDNS Updater Tray Icon.lnk - c:\program files\DynDNS Updater\DynTray.exe [2009-9-28 91504] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\loginkey] 2008-04-14 00:11 47104 ------w- c:\program files\Common Files\Microsoft Shared\Ink\loginkey.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus] 2007-03-15 05:17 89600 ------w- c:\windows\system32\psqlpwd.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\TabBtnWL] 2002-08-29 10:41 11776 ------w- c:\windows\system32\tabbtnwl.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2] 2006-09-06 21:37 34344 ----a-w- c:\program files\Lenovo\HOTKEY\notifyf2.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpgwlnotify] 2008-04-14 00:12 32256 ------w- c:\windows\system32\tpgwlnot.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\system32\acaptuser32.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ scecli psqlpwd [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 00:12 1695232 ------w- c:\program files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TabletWizard] 2008-04-14 00:12 16384 ------w- c:\windows\Help\splshwrp.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\ADS2006U3\\bin\\hpeesofemx.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\fbserver.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\ODBCutil.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\coventorStart.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\glish.exe"= "c:\\Program Files\\MATLAB\\R2008a\\bin\\win32\\MATLAB.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\javaWrap.exe"= "c:\\Coventor\\CoventorWare2008\\runtime\\jre\\1.6.0_01\\NT40\\bin\\java.exe"= "c:\\Documents and Settings\\nzahirov\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.dll"= "c:\\Documents and Settings\\nzahirov\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe"= "c:\\Coventor\\CoventorWare2008\\bin\\NT40\\TecplotWrapper.exe"= "c:\\Program Files\\CMC MicroSystems\\CMC Access CADpass\\CADpass.exe"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\OrCAD\\OrCAD_10.5\\setconfig.exe"= "c:\\OrCAD\\OrCAD_10.5\\updates.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsdoc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsinfo.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsmps.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsMsgServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsNameServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsRemshClient.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsRunHidden.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsUnzip.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdswhich.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cdsZip.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cds_root.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\clsAdminTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\clsbd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\clu.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\cmfeedback.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\consmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\dregprint.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\mpsinfo.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\nmppath.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\obServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\van.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\bin\\versionviewer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\capture.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\comp16.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pcadi.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pspiceexplorersrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\pstswp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\regsvr32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\sch2cap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\SETBROWS.EXE"= "c:\\OrCAD\\OrCAD_10.5\\tools\\capture\\tutorial\\CAPTUTOR.EXE"= "c:\\OrCAD\\OrCAD_10.5\\tools\\cdsdoc\\bin\\cdsdocIndexer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\cdsdoc\\bin\\obServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\cdsservipc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\skill.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\dfII\\bin\\skill_g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\bodygen.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\cpmaccess.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\libaccess.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\mkdefcfg.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\newgenasym.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\projmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\psetup.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\fet\\bin\\versiontool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\javaws-1_2_0_02-windows-i586-i.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\java.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\javaw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\jpicpl32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\keytool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\kinit.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\klist.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\ktab.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\orbd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\policytool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmid.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\rmiregistry.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\servertool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\jre\\bin\\tnameserv.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\fvupdateutil.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcam.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gcdin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\idfin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\ipc356.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\layout.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\libcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\lsession.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\max2hyp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxascb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxascx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxdxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxeco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxfnetx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxminx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxorcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxp99x.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxpcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxprotb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxprotx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxstrb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxstrx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxtangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\maxtangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\mfceco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\orcadodb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\padb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\padx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\pcb2max.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\prcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\protb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\protx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\searchTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\setbrows.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\specin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\strb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\strx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\to386.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\toidf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tomax.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tospec.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\update90.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\fonts\\f2g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\fonts\\g2r.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\apstub.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\custaped.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\gerbline.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\program\\gerbtool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\gtool\\system\\fixtbar.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\samples\\demo\\reset.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\sroute\\batch32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\sroute\\sroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\tutorial\\laytutor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout\\vcadd\\vcadd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\fvupdateutil.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcam.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gcdin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\idfin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\ipc356.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\layout.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\libcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\lsession.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\max2hyp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxascb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxascx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxdxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxeco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxfnetx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxminx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxorcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxp99x.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxpcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxprotb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxprotx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxstrb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxstrx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxtangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\maxtangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\mfceco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\orcadodb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\padb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\padx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\pcb2max.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\prcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\protb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\protx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\searchTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\setbrows.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\specin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\strb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\strx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\to386.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\toidf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tomax.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tospec.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\update90.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\fonts\\f2g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\fonts\\g2r.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\apstub.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\custaped.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\gerbline.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\program\\gerbtool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\gtool\\system\\fixtbar.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\samples\\demo\\reset.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\sroute\\batch32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\sroute\\sroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\tutorial\\laytutor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_eng_ed\\vcadd\\vcadd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\fvupdateutil.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcam.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gcdin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\idfin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\ipc356.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\layout.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\libcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\lsession.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\max2hyp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxascx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxdxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxeco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxfnetx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminw.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxminx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxorcad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxp99x.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxpcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxprotx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxstrx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\maxtangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\mfceco.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\orcadodb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\padx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcadx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\pcb2max.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\prcat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\protx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\searchTool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\setbrows.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\specin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\strx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangb.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tangx.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\to386.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\toidf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tomax.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tospec.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\update90.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\fonts\\f2g.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\fonts\\g2r.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\apstub.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\custaped.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbline.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\program\\gerbtool.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\gtool\\system\\fixtbar.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\samples\\demo\\reset.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\sroute\\batch32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\sroute\\sroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\tutorial\\laytutor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\layout_plus\\vcadd\\vcadd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\a2dxf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\a2sdf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\aconvmap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\allegro.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\allegro_free_viewer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\aprepmap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\artwork.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ashowmap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\batch_drc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\bbvia.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\bem2d.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\brd2dml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\cns_report.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\create_devices.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\create_sym.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbdoctor.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbdoctor14.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbdoctor_ui.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbfix11.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbfix12.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbfix13.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dbstat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dfa_dlg.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dfa_update.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dml2brd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dmlcheck.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dmlcrypt.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\downrev_library.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\draw_check.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dump_libraries.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\dxf2a.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ecl_schedule.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\enved.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\explot.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\extracta.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\flash_convert.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\fpbrowse.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSvia.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\FSviaSolver.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ftsmerge.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gbplot.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genfeedformat.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\genrad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\gloss.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibis2signoise.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk3.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ibischk4.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\idf_out.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\iges_out.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\il_allegro.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ipc356_out.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\j2script.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\lis2buf.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mbs2lib.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mergedml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\mkdeviceindex.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelintegrity.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\modelsim.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ncroute.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\nctape.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\netrev.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pads_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pad_designer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\parallel.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pcad_in.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pe_wordpad.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\placement.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\plctxt.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\pre_check.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\productServer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\quad2signoise.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\qvupdate.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_padstack.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_symbol.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\refresh_vs.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\reftxt.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\report.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\signoise.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigwave_sc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxp.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sigxsect.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2dml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spc2spc.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\spif_batch.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\swap.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\systemdump.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\sys_root.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile13.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\techfile14.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlp2.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\tlsim.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\ts2dml.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\uprev.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pcb\\bin\\zrouter.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\bin\\perl.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\bin\\perlglob.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\perl5\\ntt\\cmd32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\appmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\IndiceFileGeneration.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\lxcwin.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\Magneticdesigner.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\modeled.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\MrkSrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\msgview.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\optimize.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\PDesign.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psched.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspice.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceaa.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\pspiceexplorersrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\psp_cmd.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\regsvr32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simmgr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\simsrvr.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\pspice\\stmed.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\specctra\\bin\\specctra.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\bin\\cdsdocIndexer.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\merge.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\mkvdk.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\search.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\setup.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\bin\\v_uninst.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\callback.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\filter.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmlini.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\htmserv.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\index.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jstree.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\jvtree.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\kvoop.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\regsvr32.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\summary.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\verity\\_nti40\\filters\\viewers\\amovie.exe"= "c:\\OrCAD\\OrCAD_10.5\\tools\\specctra\\bin\\specctra.com"= "c:\\Program Files\\Ansoft\\HFSS12\\hfss.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\Maple 13\\jre\\bin\\maple.exe"= "c:\\Program Files\\VMware\\VMware Player\\vmware-authd.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= "c:\\Program Files\\Boxee\\BOXEE.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\National Instruments\\Shared\\NI WebServer\\ApplicationWebServer.exe"= "c:\\Program Files\\National Instruments\\Shared\\NI WebServer\\SystemWebServer.exe"= "c:\\Program Files\\National Instruments\\Shared\\mDNS Responder\\nimdnsResponder.exe"= "c:\\Program Files\\IVI\\Drivers\\niScope\\NI-SCOPE Soft Front Panel.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 "135:TCP"= 135:TCP:TCP Port 135 "5000:TCP"= 5000:TCP:TCP Port 5000 "5001:TCP"= 5001:TCP:TCP Port 5001 "5002:TCP"= 5002:TCP:TCP Port 5002 "5003:TCP"= 5003:TCP:TCP Port 5003 "5004:TCP"= 5004:TCP:TCP Port 5004 "5005:TCP"= 5005:TCP:TCP Port 5005 "5006:TCP"= 5006:TCP:TCP Port 5006 "5007:TCP"= 5007:TCP:TCP Port 5007 "5008:TCP"= 5008:TCP:TCP Port 5008 "5009:TCP"= 5009:TCP:TCP Port 5009 "5010:TCP"= 5010:TCP:TCP Port 5010 "5011:TCP"= 5011:TCP:TCP Port 5011 "5012:TCP"= 5012:TCP:TCP Port 5012 "5013:TCP"= 5013:TCP:TCP Port 5013 "5014:TCP"= 5014:TCP:TCP Port 5014 "5015:TCP"= 5015:TCP:TCP Port 5015 "5016:TCP"= 5016:TCP:TCP Port 5016 "5017:TCP"= 5017:TCP:TCP Port 5017 "5018:TCP"= 5018:TCP:TCP Port 5018 "5019:TCP"= 5019:TCP:TCP Port 5019 "5020:TCP"= 5020:TCP:TCP Port 5020 R0 nipbcfk;National Instruments Class Upper Filter Driver;c:\windows\system32\drivers\nipbcfk.sys [3/24/2010 12:27 PM 15448] R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [6/29/2009 2:51 PM 20520] R1 TSMSMI;TSM System Interface Driver;c:\windows\system32\drivers\tsmsmi32.sys [5/15/2008 8:39 AM 15784] R2 ASRSVC;ASR Service;c:\program files\ThinkPad\Tablet Shortcut\ASR\ASRSVC.exe [12/29/2009 11:03 AM 79136] R2 DynDNS Updater;DynDNS Updater;c:\program files\DynDNS Updater\DynUpSvc.exe [9/28/2009 8:38 AM 99704] R2 ni488enumsvc;NI-488.2 Enumeration Service;c:\windows\system32\nipalsm.exe [3/24/2010 3:23 PM 12696] R2 NIApplicationWebServer;NI Application Web Server;c:\program files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [6/22/2010 5:02 PM 47776] R2 niarbk;niarbk;c:\windows\system32\drivers\niarbk.dll [4/16/2007 3:40 PM 37376] R2 nibffrk;nibffrk;c:\windows\system32\drivers\nibffrk.dll [4/16/2007 3:40 PM 21504] R2 Nidaq32k;Nidaq32k;c:\windows\system32\drivers\nidaq32k.sys [4/16/2007 5:04 PM 674304] R2 nidevldu;NI Device Loader;c:\windows\system32\nipalsm.exe [3/24/2010 3:23 PM 12696] R2 nidmmk;NI DMM and Data Logger Kernel Driver;c:\windows\system32\drivers\nidmmk.dll [4/16/2007 5:06 PM 50688] R2 niLXIDiscovery;National Instruments LXI Discovery Service;c:\vxipnp\WinNT\NIvisa\niLxiDiscovery.exe [6/23/2010 1:14 PM 131776] R2 nimDNSResponder;National Instruments mDNS Responder Service;c:\program files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [6/23/2010 4:21 PM 193712] R2 nimdsk;nimdsk;c:\windows\system32\drivers\nimdsk.dll [4/16/2007 3:41 PM 30208] R2 nipxirmk;nipxirmk;c:\windows\system32\drivers\nipxirmkl.sys [7/7/2009 1:43 PM 11344] R2 nistck;nistck;c:\windows\system32\drivers\niSTCk.dll [4/16/2007 3:42 PM 111616] R2 NiViPxiK;NI-VISA PXI Driver;c:\windows\system32\drivers\NiViPxiKl.sys [6/23/2010 10:04 AM 11432] R2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [6/11/2010 11:16 AM 65856] R2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.exe [8/18/2009 9:55 AM 53248] R2 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [3/14/2007 7:48 PM 116416] R2 smihlp;SMI Helper Driver (smihlp);c:\program files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys [3/15/2007 1:10 AM 11152] R2 TabletSVC;TABLET Service;c:\program files\ThinkPad\Tablet Shortcut\TSMService.exe [12/29/2009 11:03 AM 58656] R2 TPHKSVC;On Screen Display;c:\program files\Lenovo\HOTKEY\TPHKSVC.exe [3/30/2007 4:39 AM 62320] R2 TVT Backup Protection Service;TVT Backup Protection Service;c:\program files\Lenovo\Rescue and Recovery\rrpservice.exe [7/11/2007 8:38 PM 569344] R2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [10/22/2009 5:45 AM 70704] R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 7:19 PM 13592] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [9/19/2010 3:05 AM 102448] R3 nidimk;nidimk;c:\windows\system32\drivers\nidimkl.sys [7/7/2009 4:50 PM 11360] R3 nimru2k;nimru2k;c:\windows\system32\drivers\nimru2kl.sys [7/24/2007 12:19 PM 11360] R3 nimstsk;nimstsk;c:\windows\system32\drivers\nimstskl.sys [7/13/2007 8:00 PM 11360] R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [5/10/2007 12:34 PM 23080] R3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\drivers\tvti2c.sys [5/22/2007 6:59 PM 30336] R3 WacomPen;Wacom Serial Pen HID Driver;c:\windows\system32\drivers\wacompen.sys [5/15/2008 8:23 AM 14208] S0 bwsao;bwsao;c:\windows\system32\drivers\amuil.sys --> c:\windows\system32\drivers\amuil.sys [?] S0 khqlmxop;khqlmxop;c:\windows\system32\drivers\oopuhnpkpjv.sys [9/21/2010 5:08 AM 72320] S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\Lenovo\HOTKEY\micmute.exe [5/21/2009 8:48 PM 45424] S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files\Common Files\VMware\USB\vmware-usbarbitrator.exe [10/22/2009 4:47 AM 563760] S3 AlteraUSBBlaster;Altera USB-Blaster Device Driver;c:\windows\system32\drivers\ftdibus.sys [5/26/2008 3:09 PM 58184] S3 gpibprtk;gpibprtk;c:\windows\system32\drivers\gpibprtk.sys [7/31/2009 8:44 AM 215840] S3 lvalarmk;lvalarmk;c:\windows\system32\drivers\lvalarmk.sys [1/11/2007 10:18 AM 20256] S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [8/15/2009 8:35 AM 7680] S3 ni1006k;NI PXI-1006 Chassis Pilot;c:\windows\system32\drivers\ni1006k.sys [4/1/2009 3:16 PM 26192] S3 ni1045k;NI PXI-1045 Chassis Pilot;c:\windows\system32\drivers\ni1045kl.sys [6/17/2009 11:35 AM 11344] S3 ni1065k;NI PXIe-1065 Chassis Pilot;c:\windows\system32\drivers\ni1065k.sys [4/1/2009 3:31 PM 22608] S3 ni488lock;NI-488.2 Locking Service;c:\windows\system32\drivers\ni488lock.sys [2/26/2007 12:40 PM 16672] S3 nicdrk;nicdrk;c:\windows\system32\drivers\nicdrkl.sys [7/15/2007 5:44 PM 11352] S3 nidmxfk;nidmxfk;c:\windows\system32\drivers\nidmxfkl.sys [7/13/2007 10:38 PM 11336] S3 nidsark;nidsark;c:\windows\system32\drivers\nidsarkl.sys [7/19/2007 3:06 AM 11344] S3 nidwgk;nidwgk;c:\windows\system32\drivers\nidwgkl.sys [2/23/2007 10:32 PM 11552] S3 niemrk;niemrk;c:\windows\system32\drivers\niemrkl.sys [7/24/2007 7:37 PM 11336] S3 niemrkw;niemrkw;c:\windows\system32\drivers\niemrkw.sys [7/31/2009 8:48 AM 11336] S3 niesrk;niesrk;c:\windows\system32\drivers\niesrkl.sys [7/24/2007 7:37 PM 11336] S3 nifslk;nifslk;c:\windows\system32\drivers\nifslkl.sys [7/15/2007 6:31 PM 11352] S3 nigplk;nigplk;c:\windows\system32\drivers\nigplkl.sys [2/23/2007 4:20 PM 11552] S3 nihsdrk;nihsdrk;c:\windows\system32\drivers\nihsdrkl.sys [7/24/2007 10:01 PM 11352] S3 nimsdrk;nimsdrk;c:\windows\system32\drivers\nimsdrkl.sys [7/18/2007 10:47 AM 11392] S3 nimslk;nimslk;c:\windows\system32\drivers\nimslk.dll [6/21/2007 12:19 AM 14464] S3 nimsrlk;nimsrlk;c:\windows\system32\drivers\nimsrlk.dll [6/21/2007 12:19 AM 151683] S3 nimxpk;nimxpk;c:\windows\system32\drivers\nimxpkl.sys [7/13/2007 8:01 PM 11368] S3 ninshsdk;ninshsdk;c:\windows\system32\drivers\ninshsdkl.sys [7/19/2007 1:49 PM 11360] S3 nipalfwedl;nipalfwedl;c:\windows\system32\drivers\nipalfwedl.sys [6/2/2010 6:44 PM 11968] S3 nipalusbedl;nipalusbedl;c:\windows\system32\drivers\nipalusbedl.sys [6/2/2010 6:45 PM 11968] S3 nipsdk;nipsdk;c:\windows\system32\drivers\nipsdkl.sys [7/24/2007 3:29 PM 11552] S3 nipxigpk;NI PXI Generic Chassis Pilot;c:\windows\system32\drivers\nipxigpk.sys [6/25/2008 12:02 PM 20568] S3 nirfsa2k;nirfsa2k;c:\windows\system32\drivers\niRFSA2kl.sys [6/30/2007 11:07 PM 11552] S3 NiRioRpc;National Instruments RIO Server;c:\windows\system32\NiRioRpc.exe [7/27/2007 5:09 AM 28232] S3 niscdk;niscdk;c:\windows\system32\drivers\niscdkl.sys [7/19/2007 2:32 AM 11376] S3 nisdigk;nisdigk;c:\windows\system32\drivers\nisdigkl.sys [7/17/2007 12:27 AM 11352] S3 nisftk;nisftk;c:\windows\system32\drivers\nisftkl.sys [7/16/2007 12:52 PM 11344] S3 nisldk;nisldk;c:\windows\system32\drivers\nisldkl.sys [6/16/2007 12:38 AM 11624] S3 nispdk;nispdk;c:\windows\system32\drivers\nispdkl.sys [7/19/2007 2:32 AM 11376] S3 nisrcdk;nisrcdk;c:\windows\system32\drivers\nisrcdkl.sys [6/1/2007 3:39 PM 11552] S3 nissrk;nissrk;c:\windows\system32\drivers\nissrkl.sys [7/24/2007 7:37 PM 11336] S3 nistc2k;nistc2k;c:\windows\system32\drivers\nistc2kl.sys [7/15/2007 4:48 PM 11312] S3 nistcrk;nistcrk;c:\windows\system32\drivers\nistcrkl.sys [7/15/2007 5:50 PM 11360] S3 niswdk;niswdk;c:\windows\system32\drivers\niswdkl.sys [7/17/2007 4:18 AM 11336] S3 nitiork;nitiork;c:\windows\system32\drivers\nitiorkl.sys [7/18/2007 10:15 PM 11360] S3 nitnr2k;nitnr2k;c:\windows\system32\drivers\nitnr2kl.sys [2/24/2007 12:09 AM 11552] S3 NIUSBTMC;NI-VISA USB TMC Driver;c:\windows\system32\DRIVERS\NIUSBTMC.sys --> c:\windows\system32\DRIVERS\NIUSBTMC.sys [?] S3 NiViPciK;NI-VISA PCI Driver;c:\windows\system32\drivers\NiViPciKl.sys [6/23/2010 10:03 AM 11432] S3 niwfrk;niwfrk;c:\windows\system32\drivers\niwfrkl.sys [7/24/2007 7:37 PM 11336] S3 nixsrk;nixsrk;c:\windows\system32\drivers\nixsrkl.sys [7/24/2007 7:38 PM 11336] S3 pbfilter;pbfilter;c:\program files\PeerBlock\pbfilter.sys [8/24/2010 10:16 PM 14424] S3 SIF32X;SIF32X;c:\windows\system32\drivers\SiF32x.sys [10/5/2009 9:24 AM 9600] S3 usb6xxxk;usb6xxxk;\??\c:\windows\system32\drivers\usb6xxxkl.sys --> c:\windows\system32\drivers\usb6xxxkl.sys [?] S3 usb6xxxkw;usb6xxxkw;c:\windows\system32\drivers\usb6xxxkw.sys [7/31/2009 8:48 AM 11312] S3 Usbtmc;ausbtmc;c:\windows\system32\drivers\ausbtmc.sys [9/28/2010 8:58 PM 19456] S4 CoventorWare Architect License Service;CoventorWare Architect License Service;c:\coventor\CoventorWare2008\licensing\NT40\lmgrd.fnet.exe [3/11/2008 9:59 PM 1294336] S4 CoventorWare License Service;CoventorWare License Service;c:\coventor\CoventorWare2008\licensing\NT40\lmgrd.exe [3/11/2008 7:20 PM 815104] S4 CoventorWare Microfluidics Solvers License Service;CoventorWare Microfluidics Solvers License Service;c:\coventor\CoventorWare2008\licensing\NT40\lmgrd.exe [3/11/2008 7:20 PM 815104] S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [7/7/2009 9:49 AM 721904] --- Other Services/Drivers In Memory --- *NewlyCreated* - NIPALK [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 getPlusHelper REG_MULTI_SZ getPlusHelper . Contents of the 'Scheduled Tasks' folder 2010-09-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4223995798-2641801745-1403671520-1009Core.job - c:\documents and settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-02 19:06] 2010-09-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4223995798-2641801745-1403671520-1009UA.job - c:\documents and settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-02 19:06] 2010-09-30 c:\windows\Tasks\MP Scheduled Scan.job - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 23:20] 2010-09-30 c:\windows\Tasks\PMTask.job - c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2008-05-15 06:04] . . ------- Supplementary Scan ------- . IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000 IE: Send to &Bluetooth Device... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm IE: Send To Bluetooth - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie.htm LSP: c:\program files\VMware\VMware Player\vsocklib.dll DPF: {20C2C286-BDE8-441B-B73D-AFA22D914DA5} - hxxp://download.ppstream.com/bin/powerplayer.cab FF - ProfilePath - c:\documents and settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\ FF - plugin: c:\documents and settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\npminuwet@uwaterloo.ca\plugins\npminuwet.dll FF - plugin: c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\npgoogletalk.dll FF - plugin: c:\documents and settings\nzahirov\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll FF - plugin: c:\documents and settings\nzahirov\Local Settings\Application Data\Google\Update\1.2.183.29\npGoogleOneClick8.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npatgpc.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\nplv2010win32.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\NPLV80Win32.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\NPLV82Win32.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\nplv85win32.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\nplv86win32.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\nplv90win32.dll FF - plugin: c:\program files\Veetle\Player\npvlc.dll FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll FF - plugin: c:\program files\Veetle\VLCBroadcast\npvbp.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ . . ------- File Associations ------- . .txt=MECEdit.Document . - - - - ORPHANS REMOVED - - - - HKLM-Run-IBMTBCTL - c:\program files\ThinkPad\Tablet Shortcut\IBMTBCTL.EXE MSConfigStartUp-EzPrint - c:\program files\Lexmark 9300 Series\ezprint.exe MSConfigStartUp-Xvaroh - c:\windows\ewofoqipofevinuy.dll ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-09-30 15:07 Windows 5.1.2600 Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... c:\windows\TEMP\TMP0000006037A7D0DF072D8040 524288 bytes scan completed successfully hidden files: 1 ************************************************************************** Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x8A15BEC5]<< kernel: MBR read successfully detected MBR rootkit hooks: \Driver\Disk -> CLASSPNP.SYS @ 0xba0ecf28 \Driver\ACPI -> ACPI.sys @ 0xb9f7fcb8 \Driver\atapi -> atapi.sys @ 0xb9e2c852 \Driver\iaStor -> iaStor.sys @ 0xb9d896ae IoDeviceObjectType ->\Device\Harddisk0\DR0 ->NDIS: Intel® Wireless WiFi Link 4965AGN -> SendCompleteHandler -> NDIS.sys @ 0xb9c6fbb0 PacketIndicateHandler -> NDIS.sys @ 0xb9c7ca21 SendHandler -> NDIS.sys @ 0xb9c5a87b user & kernel MBR OK ************************************************************************** . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,1b,cf,eb,71,53,6b,b3,43,bd,f7,58,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,1b,cf,eb,71,53,6b,b3,43,bd,f7,58,\ . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(244) c:\windows\system32\WININET.dll c:\windows\system32\psqlpwd.dll c:\program files\ThinkVantage Fingerprint Software\homefus2.dll c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll c:\program files\ThinkVantage Fingerprint Software\infra.dll c:\program files\ThinkVantage Fingerprint Software\homepass.dll c:\program files\ThinkVantage Fingerprint Software\bio.dll c:\program files\ThinkVantage Fingerprint Software\ps2css.dll c:\program files\ThinkVantage Fingerprint Software\remote.dll c:\program files\ThinkVantage Fingerprint Software\pscssint.dll c:\program files\ThinkVantage Fingerprint Software\crypto.dll - - - - - - - > 'lsass.exe'(308) c:\windows\system32\WININET.dll c:\windows\system32\psqlpwd.dll c:\program files\ThinkVantage Fingerprint Software\homefus2.dll c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll c:\program files\ThinkVantage Fingerprint Software\infra.dll c:\program files\ThinkVantage Fingerprint Software\remote.dll - - - - - - - > 'explorer.exe'(4352) c:\windows\system32\WININET.dll c:\program files\Lenovo\Client Security Solution\tvtpwm_windows_hook.dll c:\program files\Lenovo\Client Security Solution\tvt_passwordmanager.dll c:\program files\Lenovo\Client Security Solution\css_banner.dll c:\program files\Lenovo\Client Security Solution\csswait.dll c:\windows\system32\cssuserdatadispatcher.dll c:\program files\Lenovo\Client Security Solution\css_dlgcustompolicy.dll c:\windows\system32\tvttsp.dll c:\windows\system32\tcsrpc.dll c:\program files\Common Files\Lenovo\tvt_think_res.dll c:\program files\Lenovo\Client Security Solution\css_think_res.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\ibmpmsvc.exe c:\program files\Intel\WiFi\bin\S24EvMon.exe c:\program files\Common Files\Microsoft Shared\Ink\KeyboardSurrogate.exe c:\program files\Common Files\Symantec Shared\ccSetMgr.exe c:\program files\Common Files\Symantec Shared\ccEvtMgr.exe c:\program files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe c:\windows\system32\IPSSVC.EXE c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Symantec AntiVirus\DefWatch.exe c:\program files\Intel\WiFi\bin\EvtEng.exe c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\lkcitdl.exe c:\windows\system32\lkads.exe c:\windows\system32\lktsrv.exe c:\program files\National Instruments\MAX\nimxs.exe c:\program files\National Instruments\Shared\Security\nidmsrv.exe c:\program files\National Instruments\Shared\NI WebServer\SystemWebServer.exe c:\program files\National Instruments\Shared\Tagger\tagsrv.exe c:\program files\Common Files\Intel\WirelessCommon\RegSrvc.exe c:\program files\Symantec AntiVirus\Rtvscan.exe c:\program files\Common Files\Lenovo\tvt_reg_monitor_svc.exe c:\windows\system32\TpKmpSVC.exe c:\program files\Lenovo\Client Security Solution\tvttcsd.exe c:\program files\Lenovo\Rescue and Recovery\rrservice.exe c:\program files\Common Files\Lenovo\Scheduler\tvtsched.exe c:\program files\Lenovo\Rescue and Recovery\ADM\IUService.exe c:\program files\Common Files\Lenovo\Logger\logmon.exe c:\windows\system32\wdfmgr.exe c:\windows\system32\vmnat.exe c:\windows\system32\SearchIndexer.exe c:\program files\lenovo\system update\suservice.exe c:\program files\VMware\VMware Player\vmware-authd.exe c:\windows\system32\vmnetdhcp.exe c:\program files\ThinkPad\Bluetooth Software\bin\btwdins.exe c:\windows\system32\wbem\unsecapp.exe c:\windows\SYSTEM32\WISPTIS.EXE c:\windows\System32\tabbtnu.exe c:\program files\Common Files\Microsoft Shared\Ink\TCServer.exe c:\windows\system32\rundll32.exe c:\windows\system32\TpShocks.exe c:\program files\Lenovo\HOTKEY\TPONSCR.exe c:\program files\Lenovo\Zoom\TpScrex.exe c:\progra~1\SYMANT~1\vptray.exe c:\windows\system32\igfxsrvc.exe c:\program files\Lenovo\Client Security Solution\tvtpwm_tray.exe . ************************************************************************** . Completion time: 2010-09-30 15:19:11 - machine was rebooted ComboFix-quarantined-files.txt 2010-09-30 19:19 Pre-Run: 159,017,984,000 bytes free Post-Run: 159,175,487,488 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons UnsupportedDebug="do not select this" /debug multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect - - End Of File - - 62AFE2D181F29E82F030B2945AF17291
  10. ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0087583F-1ED8-4A92-88A4-D49DCD56FC6B}" = NI Circuit Design Suite 10 Core "{00D0E2A8-E43E-480E-B9D1-E22C9C1D2F72}" = NI-DAQ C and VB6 API "{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.0.0 (r181) "{01CF3725-EE33-4308-BBF9-90BF6AC43814}" = NI Logos 5.2.0 "{01E47856-B1A1-4B69-A0DF-714942D5E4E8}" = NI-MDBG 1.7.0f0 for Phar Lap ETS "{01EDE5EB-64AB-4C69-83C7-A4E40C791B3E}" = NI LabVIEW 2010 Simulation "{0285C8EA-A48F-4EAF-A485-69C46C464271}" = NI LabVIEW 8.5 VI.lib "{03148858-69DC-4143-8CA0-12972E5922F8}" = NI LabVIEW 2010 "{0326ECD9-FA62-4D9E-9C2E-148E61F7039F}" = Sonnet 12.56 "{035456F9-982A-49C0-A8D8-E9C0FEA659E4}" = NI-Serial 3.3 "{03B96C48-4001-46C7-AA89-6D8C5C32A5B8}" = NI Variable Manager "{03BF551E-8F4B-463D-A859-B606AB984554}" = NI CompactRIO 2.3.1 "{03CAB33F-D1C2-48C6-8766-DAE84DFC25FE}" = Microsoft Sync Framework Services v1.0 (x86) "{03FECA97-52A3-4079-937E-7840EE4FF52C}" = NI Web Application Server 1.0 "{04003739-4638-4213-9E1F-3E0385D2E70C}" = NI Logos Support for LabVIEW Real-Time "{0551E151-A312-44B2-956D-32715A988EB8}" = NI-PAL 2.1.0f1 for Phar Lap ETS "{05DA0832-0D81-4B7E-A033-6B5DA95DB93A}" = NI PXI Platform Services 2.5.2 for LabVIEW Real-Time "{061AE98B-178A-4143-A52A-68ED9279644D}" = NI Legacy DAQmxRF "{0633AAD6-4FBD-4F94-A420-FE5FAC85FD24}" = NI-Serial 3.3 MAX Provider "{06BF046D-7CDE-495B-82F3-52E185DC0714}" = NI LabVIEW SignalExpress 2010 LabVIEW Support "{06E94DFA-ECCE-4A6D-BDCA-1F00D030B0C0}" = NI LabVIEW Merge Utility 10.0.0 "{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour "{0759CACC-6CF9-4C3C-92C5-39668679AB16}" = Microsoft Ink Desktop "{076A4ADF-5FBD-4BE3-A39D-0F0139FCCD78}" = NI Installer for Xilinx Tools 6 "{078A5D0D-BF50-4BB1-89FB-1018391E9F06}" = NI LabVIEW 2010 "{08133ED0-B6EB-49CD-B0EF-60502E41D15E}" = NI Xerces Delay Load 2.7.1 "{09860281-0D72-418B-B691-CADCE0AF2192}" = NI Assistant Framework LabVIEW 2010 Support "{0998FE6E-B0B5-4DF0-8383-42AAE3FEDAC3}" = NI LabVIEW Real-Time files for cRIO-900x (705F) "{0A0FF37C-514F-4965-8D5E-A424B6D01742}" = NI-SCOPE 3.3.2 "{0AAB121C-8EA7-49F5-B37C-DF117FB46771}" = NI LabVIEW Run-Time Engine 2009 SP1 "{0B7F1849-865F-457A-AC37-7D7A32287991}" = NI LabVIEW Real-Time Support for PXI-8156B and 817x (E002) "{0B9E27C7-9ECD-4362-B311-030EA48F8E72}" = Crystal XI "{0C34B801-6AEC-4667-B053-03A67E2D0415}" = Apple Application Support "{0CAD092C-5D1E-48AD-A845-E1EBA9AF1AF8}" = Tablet PC Tutorials for Microsoft Windows XP SP2 "{0CF669FF-D168-4CA3-8D9B-E5B74C192E88}" = NI Variable Engine LabVIEW 2010 Support "{0D3F2D86-F2F2-4B05-BB46-83C15DC88CD1}" = NI LabVIEW 2010 Real-Time Error Dialog "{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0 "{0D55A96E-61D3-448E-AC78-0C01F921D7BF}" = NI-VISA GPIB-VXI (Legacy) Passport 5.0.0 "{0D679CB2-66E1-4B13-AFBF-E2A6E6D48DFC}" = NI IVI hp33120a Driver "{0D77EC38-3091-40AE-A028-3C7BBEB0FC09}" = NI LabVIEW 8.5 License "{0E0DBEB6-AD30-4F1B-9EDC-C330EB4FB1B0}" = NI LabVIEW Real-Time Support for cFP-21xx (7115) "{0F7038A9-4CA2-4A63-B4F4-D3DB79B089D4}" = NI-Serial 3.3 Help "{0FA913CA-3064-4FAF-9C59-94EC94B59EE5}" = NI BIOS Updater "{0FB31DF8-38DF-4C9D-B313-AFAFC3FBA02B}" = NI LVBrokerAux 8.2.1 "{0FCE0BA9-8AD4-4622-9ADF-EFF0355EEAE7}" = NI LabVIEW Run-Time Engine Interop 2009 "{0FD812C9-3BBE-4CC5-A43C-B7304E3EC581}" = NI Web Pipeline 2.0.1 "{1007F41F-7D69-468E-8017-3849A5A973C2}" = ThinkVantage Technologies Welcome Message "{112FE5D5-EB7A-4795-B906-79FB08E936C6}" = NI-RPC 4.2.0f0 for Phar Lap ETS "{11A52F80-21E6-41F4-BFE9-CB3B2DC389E2}" = NI Variable Engine Serial Support RT "{122E90F8-A899-4225-AA82-94CBA2AEA98D}" = NI LabVIEW 8.5 Examples "{1297C681-92D7-40EF-93BF-03F66EC5105C}" = ThinkPad EasyEject Utility "{12B5EBC4-D764-4C37-89D0-BD5A89BCCD44}" = NI Variable Engine Serial Support "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter "{14081443-583A-4605-BB91-83D38ADAC939}" = Microsoft Windows XP Tablet PC Edition 2005 Recognizer Pack "{1538B06D-3F62-4622-B9D2-27B894C3496C}" = NI LVBrokerAux 8.5.0 "{155156B0-7C04-47A2-9CB4-D395DC4F1595}" = NI LabVIEW 8.5 FPGA Realtime Support "{15B05C75-6B0C-4969-BD33-C9B8FBEFA251}" = NI LabVIEW 2010 License "{1621361B-A165-4ABF-AB5D-86EA36E5C861}" = NI LabVIEW Modulation Toolkit 4.0 "{1692ADD0-675A-45B5-A095-9D427944E01F}" = NI LabVIEW 2010 Control Design and Simulation Module "{1759CACC-6CF9-4C3C-92C5-39668679AB17}" = Microsoft Ink Crossword "{1767C198-96AA-4D7C-B4DD-C34165607E7D}" = NI-Intel8254x for LabVIEW Real-Time "{18B7064D-EAA8-44C4-8977-99EE4B21F68C}" = NI cRIO-910x Core "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{19F59734-0740-49E6-818D-53C1CA6B4ABE}" = NI System State Publisher "{1C523A18-9AAF-422F-A494-96D2ABF0D19E}" = NI LabVIEW Simulation Module Shared Files "{1C7A57F9-94F1-4A92-A7E6-41C2BB42CA05}" = NI LabVIEW Real-Time Support for cRIO-901x (718F) "{1C885277-8F54-4C07-8E2B-05DE800A07E7}" = NI SCXI 1.8.1 "{1CF99BB2-C257-49A9-A5AB-078132CFFFC5}" = NI-STE10/100A 2.1.0f2 for Phar Lap ETS "{1D1C5997-8531-4B48-9467-1754022FB265}" = NI PXI Platform Services 2.5.2 Expert "{1E5C217C-FEE5-4A54-8A07-F6308D112CB3}" = NI MXS 4.7.0 "{200927E3-5E45-493A-9343-508613BC59CE}" = NI LabVIEW Web Services Runtime "{20F02F78-9022-4E29-9094-08221E287D29}" = NI LabVIEW SignalExpress 2010 Datatypes LabVIEW 2010 Support "{2111B23F-7FDA-4A41-8309-E5A1663CA296}" = ThinkPad Keyboard Customizer Utility "{2158570A-D8E4-4A40-9AE4-92FC1E3BC223}" = NI Real-Time Execution Trace Toolkit "{216886AA-525A-4E20-A845-EBB75FB5AD1E}" = NI PXI-5660 Support "{21DFC7B6-3C9E-4D37-AA0A-4C75EE72E745}" = NI-RIO 2.3.1 driver for Real-Time Embedded Targets "{21EF2C48-A06F-4001-8E0B-72DCA779860F}" = NI DataSocket 4.8 "{221861B8-D133-4377-803D-F005EB2B733C}" = NI LVBrokerAux1071 "{2254CBFE-56BB-47BD-9958-5103AA58C5F7}" = NI System Web Server Base 1.0 "{22AA7895-4A04-46C9-8C61-5EE6E4A4A999}" = NI CompactRIO Module Software 2.3.1 "{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe "{2461AEFD-6597-4B5F-9174-754B9DB56091}" = NI LabVIEW 8.5 Project "{24D0A76F-34E1-43F7-B972-0608518CD2A7}" = Release OrCAD 10.5 "{24D2C6D6-B47C-4B27-BDD7-EE70F745E78A}" = NI-RIO 2.3.1 "{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype
  11. ========== Files Created - No Company Name ========== [2010/10/01 09:03:59 | 000,133,632 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\RKUnhookerLE.EXE [2010/09/30 13:49:22 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2010/09/30 13:49:16 | 000,260,272 | RHS- | C] () -- C:\cmldr [2010/09/30 13:44:37 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010/09/30 13:44:35 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010/09/30 13:44:35 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010/09/30 13:44:35 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010/09/30 13:44:35 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010/09/30 13:37:45 | 003,858,414 | R--- | C] () -- C:\Documents and Settings\nzahirov\Desktop\ComboFix.exe [2010/09/30 09:01:18 | 000,018,944 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xrxscnui.dll [2010/09/30 09:01:14 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xrxftplt.exe [2010/09/30 09:00:55 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls [2010/09/30 08:50:48 | 000,033,280 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisrndr.ax [2010/09/30 08:50:43 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\dllcache\psisdecd.dll [2010/09/30 08:50:39 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls [2010/09/30 08:50:39 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls [2010/09/30 08:46:41 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax [2010/09/30 08:45:12 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls [2010/09/30 08:45:09 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2010/09/30 08:44:07 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2010/09/30 08:42:18 | 000,165,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt53.dll [2010/09/30 08:42:13 | 000,093,696 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt42.dll [2010/09/30 08:42:08 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt34.dll [2010/09/30 08:42:02 | 000,089,088 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt33.dll [2010/09/30 08:41:57 | 000,083,968 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt21.dll [2010/09/30 08:41:44 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2010/09/30 08:39:03 | 000,029,768 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divasu.dll [2010/09/30 08:39:02 | 000,037,962 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaprop.dll [2010/09/30 08:39:01 | 000,006,216 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaci.dll [2010/09/30 08:37:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls [2010/09/30 08:37:12 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls [2010/09/30 08:37:12 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls [2010/09/30 08:37:12 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls [2010/09/30 08:37:11 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls [2010/09/30 08:37:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls [2010/09/30 08:37:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls [2010/09/30 08:37:10 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls [2010/09/30 08:37:10 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls [2010/09/30 08:37:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls [2010/09/30 08:37:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls [2010/09/30 08:37:09 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls [2010/09/30 08:37:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls [2010/09/30 08:37:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls [2010/09/30 08:37:09 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls [2010/09/30 08:37:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls [2010/09/30 08:37:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls [2010/09/30 08:37:08 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls [2010/09/30 08:37:07 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls [2010/09/30 08:37:06 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls [2010/09/30 08:37:05 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls [2010/09/30 08:37:04 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls [2010/09/30 08:37:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls [2010/09/30 08:37:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls [2010/09/30 08:37:04 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls [2010/09/30 08:37:03 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls [2010/09/30 08:37:03 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls [2010/09/30 08:37:03 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls [2010/09/30 08:37:03 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls [2010/09/30 08:37:02 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls [2010/09/30 08:37:02 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls [2010/09/30 08:37:01 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls [2010/09/30 08:37:00 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls [2010/09/30 08:36:59 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls [2010/09/30 08:36:58 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls [2010/09/30 08:36:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls [2010/09/30 08:36:58 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls [2010/09/30 08:36:57 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls [2010/09/30 08:36:57 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls [2010/09/30 08:36:57 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls [2010/09/30 08:36:43 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls [2010/09/30 08:36:41 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls [2010/09/30 08:36:30 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atixbar.sys [2010/09/30 08:36:29 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativxbar.sys [2010/09/30 08:36:29 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativttxx.sys [2010/09/30 08:36:28 | 000,009,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativmdcd.sys [2010/09/30 08:36:27 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitvsnd.sys [2010/09/30 08:36:27 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitunep.sys [2010/09/30 08:36:26 | 000,049,920 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtcap.sys [2010/09/30 08:36:26 | 000,026,880 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtsnd.sys [2010/09/30 08:36:24 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atipcxxx.sys [2010/09/30 08:36:20 | 000,046,464 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atibt829.sys [2010/09/30 07:59:09 | 3211,046,912 | -HS- | C] () -- C:\hiberfil.sys [2010/09/29 14:52:24 | 141,302,368 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\ICP420.exe [2010/09/29 13:07:10 | 379,430,944 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\visa462full.exe [2010/09/28 21:57:08 | 000,059,205 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\Marking Scheme F2010.pdf [2010/09/28 21:56:15 | 000,012,015 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\Marking Scheme F2010.docx [2010/09/28 21:06:27 | 000,142,673 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\Unfiled Notes.pdf [2010/09/28 17:05:49 | 000,000,824 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Measurement & Automation.lnk [2010/09/27 20:23:48 | 000,002,058 | ---- | C] () -- C:\Documents and Settings\nzahirov\.recently-used.xbel [2010/09/16 04:12:04 | 000,001,741 | ---- | C] () -- C:\Documents and Settings\nzahirov\Desktop\HijackThis.lnk [2010/08/25 21:21:50 | 000,000,024 | ---- | C] () -- C:\WINDOWS\wininit.ini [2010/08/20 08:49:09 | 001,044,056 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat [2010/07/09 14:43:04 | 000,000,176 | ---- | C] () -- C:\WINDOWS\System32\usbiun2k.ini [2010/07/09 11:16:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\nidmfpan.ini [2010/06/10 14:46:20 | 000,000,244 | ---- | C] () -- C:\WINDOWS\System32\nirpc.ini [2010/06/02 18:44:54 | 000,003,520 | ---- | C] () -- C:\WINDOWS\System32\nipalpg.dll [2009/11/16 20:56:50 | 000,212,992 | ---- | C] () -- C:\WINDOWS\System32\WMIMPLEX.dll [2009/11/16 20:56:50 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\maplec.dll [2009/11/16 20:56:50 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\maplecompat.dll [2009/11/12 10:10:43 | 000,000,048 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\analyzer.set [2009/10/21 09:29:45 | 000,000,811 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\tmpFF.log [2009/10/05 09:24:33 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\PerformaxCom.dll [2009/09/16 17:27:58 | 000,508,224 | ---- | C] () -- C:\WINDOWS\System32\ICCProfiles.dll [2009/08/03 10:00:00 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\cvintdrv.sys [2009/07/31 14:13:44 | 000,000,069 | ---- | C] () -- C:\WINDOWS\pxisys.ini [2009/07/31 14:13:44 | 000,000,030 | ---- | C] () -- C:\WINDOWS\pxiesys.ini [2009/07/07 11:47:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\eDrawingOfficeAutomator.INI [2009/06/17 10:26:12 | 000,000,721 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\tmp62.log [2009/05/11 01:22:43 | 000,004,005 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\Comma Separated Values (Windows).NOT [2009/05/11 00:55:12 | 000,029,246 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\Comma Separated Values (Windows).ADR [2009/02/09 17:48:24 | 002,854,976 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll [2009/01/12 22:55:58 | 000,000,146 | ---- | C] () -- C:\WINDOWS\capture.INI [2009/01/12 22:44:18 | 000,000,379 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2009/01/12 22:40:48 | 000,240,640 | ---- | C] () -- C:\WINDOWS\System32\NMOCOD.DLL [2009/01/12 22:37:44 | 000,903,168 | ---- | C] () -- C:\WINDOWS\System32\mitmdl30.dll [2009/01/12 22:37:43 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\lffax60n.dll [2009/01/12 22:37:43 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\lfpng60n.dll [2009/01/12 22:37:43 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\lftif60n.dll [2009/01/12 22:37:43 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\lfpcx60n.dll [2009/01/12 22:37:43 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfpct60n.dll [2009/01/12 22:37:43 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\lfpsd60n.dll [2009/01/12 22:37:43 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\lftga60n.dll [2009/01/12 22:37:43 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwpg60n.dll [2009/01/12 22:37:43 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwmf60n.dll [2009/01/12 22:37:43 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\lfmsp60n.dll [2009/01/12 22:37:43 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\lfmac60n.dll [2009/01/12 22:37:42 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\lfcmp60n.dll [2009/01/12 22:37:42 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfeps60n.dll [2009/01/12 22:37:42 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\lfbmp60n.dll [2009/01/12 21:57:24 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\PUTTY.RND [2008/11/03 11:11:22 | 003,821,568 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\filesync.metadata [2008/10/28 22:33:46 | 000,006,923 | ---- | C] () -- C:\Documents and Settings\nzahirov\Application Data\PrimoPDFSet.xml [2008/10/28 22:29:28 | 000,176,235 | ---- | C] () -- C:\WINDOWS\System32\Primomonnt.dll [2008/10/01 12:33:48 | 000,278,528 | ---- | C] () -- C:\WINDOWS\System32\IntegMotorCANComm.dll [2008/09/15 20:14:24 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008/09/15 20:12:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008/09/15 20:12:02 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2008/09/15 20:11:10 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll [2008/09/08 23:25:34 | 000,000,118 | ---- | C] () -- C:\WINDOWS\ConverterCore.INI [2008/09/08 23:19:34 | 000,021,240 | ---- | C] () -- C:\WINDOWS\System32\solidlocalmon.dll [2008/09/08 23:19:34 | 000,013,560 | ---- | C] () -- C:\WINDOWS\System32\solidlocalui.dll [2008/09/08 21:39:17 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\PUTTY.RND [2008/08/09 17:55:52 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2008/08/09 17:55:51 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2008/08/09 17:55:47 | 000,755,027 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008/08/09 17:55:46 | 000,159,839 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008/08/09 17:55:42 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008/08/09 17:55:42 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2008/06/23 15:18:05 | 000,051,712 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/06/12 14:11:46 | 000,000,013 | ---- | C] () -- C:\WINDOWS\msgtn.ini [2008/06/12 14:11:09 | 000,000,639 | ---- | C] () -- C:\WINDOWS\Powerplayer.ini [2008/06/12 14:11:04 | 000,000,693 | ---- | C] () -- C:\WINDOWS\psnetwork.ini [2008/06/08 09:25:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\linecalc.INI [2008/06/05 23:57:03 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\nzahirov\Local Settings\Application Data\fusioncache.dat [2008/05/26 23:42:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ads.INI [2008/05/25 11:13:45 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI [2008/05/15 09:18:03 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2008/05/15 08:40:19 | 000,910,464 | ---- | C] () -- C:\WINDOWS\System32\igmedkrn.dll [2008/05/15 08:40:19 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4860.dll [2008/05/15 08:37:57 | 000,004,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2008/05/15 08:36:49 | 000,106,496 | ---- | C] () -- C:\WINDOWS\stkbtnpn.dll [2008/05/15 08:35:46 | 000,004,442 | ---- | C] () -- C:\WINDOWS\System32\drivers\TPPWRIF.SYS [2008/04/28 12:13:33 | 000,000,310 | ---- | C] () -- C:\WINDOWS\primopdf.ini [2007/09/27 11:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini [2007/09/27 11:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini [2007/09/27 11:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini [2007/07/27 02:37:40 | 000,025,341 | ---- | C] () -- C:\WINDOWS\System32\PROCDB.INI [2007/07/27 02:37:29 | 000,000,380 | ---- | C] () -- C:\WINDOWS\System32\IPSCtrl.INI [2007/07/19 03:13:22 | 000,049,696 | ---- | C] () -- C:\WINDOWS\System32\nispdu.dll [2007/07/19 02:32:30 | 000,049,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\nispdk.dll [2007/07/19 02:32:24 | 000,031,744 | ---- | C] () -- C:\WINDOWS\System32\niscdrau.dll [2007/07/18 15:17:24 | 000,066,080 | ---- | C] () -- C:\WINDOWS\System32\cfswitch.dll [2007/04/16 17:22:06 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\nipxiini.dll [2007/04/16 16:52:36 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\niidaqlv.dll [2006/09/14 12:59:23 | 001,490,999 | ---- | C] () -- C:\WINDOWS\System32\tkbtnpn1.dll [2006/09/12 15:45:14 | 000,012,653 | ---- | C] () -- C:\WINDOWS\System32\GPIB.DLL [2006/09/05 17:20:36 | 000,079,400 | ---- | C] () -- C:\WINDOWS\System32\DEVMAN.DLL [2006/06/13 16:35:32 | 000,053,760 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2006/04/30 19:36:03 | 000,004,670 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2005/02/17 11:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest [2005/02/17 11:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest [2002/02/27 11:41:28 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\nsldappr32v50.dll [2002/02/27 11:41:26 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\nsldap32v50.dll [2002/02/27 11:41:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\nsldapssl32v50.dll [2001/11/14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll [1999/11/04 11:00:38 | 000,001,840 | ---- | C] () -- C:\WINDOWS\System32\niidaqs.dll ========== LOP Check ========== [2009/07/07 09:59:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite [2009/11/02 10:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DassaultSystemes [2009/09/02 16:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DynDNS [2010/09/28 20:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IVI Foundation [2009/08/18 10:42:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Lenovo [2010/09/29 13:57:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\National Instruments [2010/06/26 10:21:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nitro PDF [2008/09/08 23:19:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SolidDocuments [2008/08/09 14:22:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP [2008/05/15 08:38:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UIB [2009/08/13 06:58:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint [2009/09/09 22:09:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2009/08/19 11:50:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Avaya [2009/05/11 00:36:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Blackberry Desktop [2010/03/26 00:17:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\BOXEE [2009/10/07 08:02:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\CMC MicroSystems [2009/03/19 23:12:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2009/07/07 10:01:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\DAEMON Tools Lite [2009/11/02 10:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\DassaultSystemes [2010/06/26 10:20:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Downloaded Installations [2009/07/07 11:48:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\DWGeditor [2010/08/11 11:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\FileZilla [2010/05/17 20:08:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\gtk-2.0 [2008/10/04 15:24:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Inkscape [2008/11/03 15:12:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Intervideo [2010/08/22 21:51:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Leadertech [2009/08/18 10:53:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Lenovo [2009/11/16 23:16:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Maple [2010/06/26 10:23:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Nitro PDF [2008/06/13 14:37:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\ppStream [2008/08/08 22:33:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Publish Providers [2009/05/11 00:32:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Research In Motion [2009/02/22 21:30:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\SolidDocuments [2008/08/08 22:32:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Sony [2008/08/08 21:55:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Sony Setup [2008/09/08 20:31:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\StarNet [2008/12/16 16:52:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\SumatraPDF [2009/12/29 10:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\SystemRequirementsLab [2010/09/26 19:07:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\uTorrent [2009/08/06 10:58:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\webex [2009/11/13 12:46:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Windows Search [2010/09/30 17:02:34 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job [2010/09/30 17:00:58 | 000,000,306 | ---- | M] () -- C:\WINDOWS\Tasks\PMTask.job ========== Purity Check ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:
  12. BEGIN EXTRAS.TXT ============= OTL Extras logfile created on: 10/1/2010 9:08:02 AM - Run 1 OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\nzah****\Desktop Windows XP Tablet PC Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free 4.00 Gb Paging File | 3.00 Gb Available in Paging File | 75.00% Paging File free Paging file location(s): C:\pagefile.sys 1500 3000 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 275.14 Gb Total Space | 148.25 Gb Free Space | 53.88% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded Drive F: | 501.22 Mb Total Space | 220.33 Mb Free Space | 43.96% Space Free | Partition Type: FAT G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: JUKLEOPT Current User Name: nzah**** Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .bat [@ = batfile] -- Reg Error: Key error. File not found .cmd [@ = cmdfile] -- Reg Error: Key error. File not found .com [@ = ComFile] -- Reg Error: Key error. File not found .exe [@ = exefile] -- Reg Error: Key error. File not found .hta [@ = htafile] -- Reg Error: Key error. File not found .html [@ = ChromeHTML] -- Reg Error: Key error. File not found .url [@ = InternetShortcut] -- Reg Error: Key error. File not found .txt [@ = MECEdit.Document] -- Reg Error: Key error. File not found .vbs [@ = VBSFile] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~4\Office12\ONENOTE.EXE "%L" (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 4 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Connect "10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Connect "10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Connect "10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Connect "10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Connect "10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Connect "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 "3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Connect "10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Connect "10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Connect "10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Connect "10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Connect "10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Connect "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009 "135:TCP" = 135:TCP:*:Enabled:TCP Port 135 "5000:TCP" = 5000:TCP:*:Enabled:TCP Port 5000 "5001:TCP" = 5001:TCP:*:Enabled:TCP Port 5001 "5002:TCP" = 5002:TCP:*:Enabled:TCP Port 5002 "5003:TCP" = 5003:TCP:*:Enabled:TCP Port 5003 "5004:TCP" = 5004:TCP:*:Enabled:TCP Port 5004 "5005:TCP" = 5005:TCP:*:Enabled:TCP Port 5005 "5006:TCP" = 5006:TCP:*:Enabled:TCP Port 5006 "5007:TCP" = 5007:TCP:*:Enabled:TCP Port 5007 "5008:TCP" = 5008:TCP:*:Enabled:TCP Port 5008 "5009:TCP" = 5009:TCP:*:Enabled:TCP Port 5009 "5010:TCP" = 5010:TCP:*:Enabled:TCP Port 5010 "5011:TCP" = 5011:TCP:*:Enabled:TCP Port 5011 "5012:TCP" = 5012:TCP:*:Enabled:TCP Port 5012 "5013:TCP" = 5013:TCP:*:Enabled:TCP Port 5013 "5014:TCP" = 5014:TCP:*:Enabled:TCP Port 5014 "5015:TCP" = 5015:TCP:*:Enabled:TCP Port 5015 "5016:TCP" = 5016:TCP:*:Enabled:TCP Port 5016 "5017:TCP" = 5017:TCP:*:Enabled:TCP Port 5017 "5018:TCP" = 5018:TCP:*:Enabled:TCP Port 5018 "5019:TCP" = 5019:TCP:*:Enabled:TCP Port 5019 "5020:TCP" = 5020:TCP:*:Enabled:TCP Port 5020 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "C:\OrCAD\OrCAD_10.5\setconfig.exe" = C:\OrCAD\OrCAD_10.5\setconfig.exe:*:Enabled:setconfig (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\updates.exe" = C:\OrCAD\OrCAD_10.5\updates.exe:*:Enabled:updates (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsdoc.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsdoc.exe:*:Enabled:cdsdoc (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsinfo.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsinfo.exe:*:Enabled:cdsinfo (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsmps.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsmps.exe:*:Enabled:cdsmps (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsMsgServer.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsNameServer.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsRemshClient.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsRunHidden.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsUnzip.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip (Release OrCAD 10.5) -- (DataFocus, Inc.) "C:\OrCAD\OrCAD_10.5\tools\bin\cdswhich.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdswhich.exe:*:Enabled:cdswhich (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cdsZip.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cdsZip.exe:*:Enabled:cdsZip (Release OrCAD 10.5) -- (DataFocus, Inc.) "C:\OrCAD\OrCAD_10.5\tools\bin\cds_root.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cds_root.exe:*:Enabled:cds_root (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\clsAdminTool.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\clsbd.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\clsbd.exe:*:Enabled:clsbd (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\clu.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\clu.exe:*:Enabled:clu (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\cmfeedback.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\cmfeedback.exe:*:Enabled:cmfeedback (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\consmgr.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\consmgr.exe:*:Enabled:consmgr (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\bin\dregprint.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\dregprint.exe:*:Enabled:dregprint (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\mpsinfo.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\mpsinfo.exe:*:Enabled:mpsinfo (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\nmp.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\nmp.exe:*:Enabled:nmp (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\nmppath.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\nmppath.exe:*:Enabled:nmppath (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\obServer.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\obServer.exe:*:Enabled:obServer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\van.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\van.exe:*:Enabled:van (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\bin\versionviewer.exe" = C:\OrCAD\OrCAD_10.5\tools\bin\versionviewer.exe:*:Enabled:versionviewer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\capture\capture.exe" = C:\OrCAD\OrCAD_10.5\tools\capture\capture.exe:*:Enabled:capture (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\capture\comp16.exe" = C:\OrCAD\OrCAD_10.5\tools\capture\comp16.exe:*:Enabled:comp16 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\capture\pcadi.exe" = C:\OrCAD\OrCAD_10.5\tools\capture\pcadi.exe:*:Enabled:pcadi (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\capture\pspiceexplorersrvr.exe" = C:\OrCAD\OrCAD_10.5\tools\capture\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\capture\pstswp.exe" = C:\OrCAD\OrCAD_10.5\tools\capture\pstswp.exe:*:Enabled:pstswp (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\capture\regsvr32.exe" = C:\OrCAD\OrCAD_10.5\tools\capture\regsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 10.5) -- (Microsoft Corporation) "C:\OrCAD\OrCAD_10.5\tools\capture\sch2cap.exe" = C:\OrCAD\OrCAD_10.5\tools\capture\sch2cap.exe:*:Enabled:sch2cap (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\capture\SETBROWS.EXE" = C:\OrCAD\OrCAD_10.5\tools\capture\SETBROWS.EXE:*:Enabled:SETBROWS (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\capture\tutorial\CAPTUTOR.EXE" = C:\OrCAD\OrCAD_10.5\tools\capture\tutorial\CAPTUTOR.EXE:*:Enabled:CAPTUTOR (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\cdsdoc\bin\cdsdocIndexer.exe" = C:\OrCAD\OrCAD_10.5\tools\cdsdoc\bin\cdsdocIndexer.exe:*:Enabled:cdsdocIndexer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\cdsdoc\bin\obServer.exe" = C:\OrCAD\OrCAD_10.5\tools\cdsdoc\bin\obServer.exe:*:Enabled:obServer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\dfII\bin\cdsservipc.exe" = C:\OrCAD\OrCAD_10.5\tools\dfII\bin\cdsservipc.exe:*:Enabled:cdsservipc (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\dfII\bin\skill.exe" = C:\OrCAD\OrCAD_10.5\tools\dfII\bin\skill.exe:*:Enabled:skill (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\dfII\bin\skill_g.exe" = C:\OrCAD\OrCAD_10.5\tools\dfII\bin\skill_g.exe:*:Enabled:skill_g (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\fet\bin\bodygen.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\bodygen.exe:*:Enabled:bodygen (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\fet\bin\cpmaccess.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\cpmaccess.exe:*:Enabled:cpmaccess (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\fet\bin\libaccess.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\libaccess.exe:*:Enabled:libaccess (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\fet\bin\mkdefcfg.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\fet\bin\newgenasym.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\newgenasym.exe:*:Enabled:newgenasym (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\fet\bin\projmgr.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\projmgr.exe:*:Enabled:projmgr (Release OrCAD 10.5) -- (Cadence Design Systems Inc) "C:\OrCAD\OrCAD_10.5\tools\fet\bin\psetup.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\psetup.exe:*:Enabled:psetup (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\fet\bin\versiontool.exe" = C:\OrCAD\OrCAD_10.5\tools\fet\bin\versiontool.exe:*:Enabled:versiontool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\javaws-1_2_0_02-windows-i586-i.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\javaws-1_2_0_02-windows-i586-i.exe:*:Enabled:javaws-1_2_0_02-windows-i586-i (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\java.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\java.exe:*:Enabled:java (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\javaw.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\javaw.exe:*:Enabled:javaw (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\jpicpl32.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\jpicpl32.exe:*:Enabled:jpicpl32 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\keytool.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\keytool.exe:*:Enabled:keytool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\kinit.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\kinit.exe:*:Enabled:kinit (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\klist.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\klist.exe:*:Enabled:klist (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\ktab.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\ktab.exe:*:Enabled:ktab (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\orbd.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\orbd.exe:*:Enabled:orbd (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\policytool.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\policytool.exe:*:Enabled:policytool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\rmid.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\rmid.exe:*:Enabled:rmid (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\rmiregistry.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\servertool.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\servertool.exe:*:Enabled:servertool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\jre\bin\tnameserv.exe" = C:\OrCAD\OrCAD_10.5\tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\fvupdateutil.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\fvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gcad.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gcad.exe:*:Enabled:gcad (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gcam.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gcam.exe:*:Enabled:gcam (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gcdin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gcdin.exe:*:Enabled:gcdin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\idfin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\idfin.exe:*:Enabled:idfin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\ipc356.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\ipc356.exe:*:Enabled:ipc356 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\layout.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\layout.exe:*:Enabled:layout (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\libcat.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\libcat.exe:*:Enabled:libcat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\lsession.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\lsession.exe:*:Enabled:lsession (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout\max2hyp.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\max2hyp.exe:*:Enabled:max2hyp (Release OrCAD 10.5) -- (HyperLynx) "C:\OrCAD\OrCAD_10.5\tools\layout\maxascb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxascb.exe:*:Enabled:maxascb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxascx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxascx.exe:*:Enabled:maxascx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxdxf.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxdxf.exe:*:Enabled:maxdxf (Release OrCAD 10.5) -- (OrCAD) "C:\OrCAD\OrCAD_10.5\tools\layout\maxeco.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxeco.exe:*:Enabled:maxeco (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxfnetx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxminb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxminb.exe:*:Enabled:maxminb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxminw.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxminw.exe:*:Enabled:maxminw (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxminx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxminx.exe:*:Enabled:maxminx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxorcad.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxorcad.exe:*:Enabled:maxorcad (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxp99x.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxp99x.exe:*:Enabled:maxp99x (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxpadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxpadb.exe:*:Enabled:maxpadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxpadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxpadx.exe:*:Enabled:maxpadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxpcadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxpcadb.exe:*:Enabled:maxpcadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxpcadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxpcadx.exe:*:Enabled:maxpcadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxprotb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxprotb.exe:*:Enabled:maxprotb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxprotx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxprotx.exe:*:Enabled:maxprotx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxstrb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxstrb.exe:*:Enabled:maxstrb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxstrx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxstrx.exe:*:Enabled:maxstrx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxtangb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxtangb.exe:*:Enabled:maxtangb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\maxtangx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\maxtangx.exe:*:Enabled:maxtangx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\mfceco.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\mfceco.exe:*:Enabled:mfceco (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\orcadodb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\orcadodb.exe:*:Enabled:orcadodb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\padb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\padb.exe:*:Enabled:padb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\padx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\padx.exe:*:Enabled:padx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\pcadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\pcadb.exe:*:Enabled:pcadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\pcadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\pcadx.exe:*:Enabled:pcadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\pcb2max.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\pcb2max.exe:*:Enabled:pcb2max (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\prcat.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\prcat.exe:*:Enabled:prcat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\protb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\protb.exe:*:Enabled:protb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\protx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\protx.exe:*:Enabled:protx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\searchTool.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\searchTool.exe:*:Enabled:searchTool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\setbrows.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\setbrows.exe:*:Enabled:setbrows (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\specin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\specin.exe:*:Enabled:specin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\strb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\strb.exe:*:Enabled:strb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\strx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\strx.exe:*:Enabled:strx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\tangb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\tangb.exe:*:Enabled:tangb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\tangx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\tangx.exe:*:Enabled:tangx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\to386.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\to386.exe:*:Enabled:to386 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\toidf.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\toidf.exe:*:Enabled:toidf (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\tomax.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\tomax.exe:*:Enabled:tomax (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\tospec.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\tospec.exe:*:Enabled:tospec (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\update90.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\update90.exe:*:Enabled:update90 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gtool\fonts\f2g.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gtool\fonts\f2g.exe:*:Enabled:f2g (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gtool\fonts\g2r.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gtool\fonts\g2r.exe:*:Enabled:g2r (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\apstub.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\apstub.exe:*:Enabled:apstub (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\custaped.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\custaped.exe:*:Enabled:custaped (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\gerbline.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\gerbline.exe:*:Enabled:gerbline (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\gerbtool.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gtool\program\gerbtool.exe:*:Enabled:gerbtool (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout\gtool\system\fixtbar.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\gtool\system\fixtbar.exe:*:Enabled:fixtbar (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout\samples\demo\reset.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\samples\demo\reset.exe:*:Enabled:reset (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\sroute\batch32.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\sroute\batch32.exe:*:Enabled:batch32 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout\sroute\sroute.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\sroute\sroute.exe:*:Enabled:sroute (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout\tutorial\laytutor.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\tutorial\laytutor.exe:*:Enabled:laytutor (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout\vcadd\vcadd32.exe" = C:\OrCAD\OrCAD_10.5\tools\layout\vcadd\vcadd32.exe:*:Enabled:vcadd32 (Release OrCAD 10.5) -- (OrCAD Corporation) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\fvupdateutil.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\fvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gcad.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gcad.exe:*:Enabled:gcad (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gcam.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gcam.exe:*:Enabled:gcam (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gcdin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gcdin.exe:*:Enabled:gcdin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\idfin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\idfin.exe:*:Enabled:idfin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\ipc356.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\ipc356.exe:*:Enabled:ipc356 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\layout.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\layout.exe:*:Enabled:layout (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\libcat.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\libcat.exe:*:Enabled:libcat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\lsession.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\lsession.exe:*:Enabled:lsession (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\max2hyp.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\max2hyp.exe:*:Enabled:max2hyp (Release OrCAD 10.5) -- (HyperLynx) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxascb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxascb.exe:*:Enabled:maxascb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxascx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxascx.exe:*:Enabled:maxascx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxdxf.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxdxf.exe:*:Enabled:maxdxf (Release OrCAD 10.5) -- (OrCAD) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxeco.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxeco.exe:*:Enabled:maxeco (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxfnetx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxminb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxminb.exe:*:Enabled:maxminb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxminw.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxminw.exe:*:Enabled:maxminw (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxminx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxminx.exe:*:Enabled:maxminx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxorcad.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxorcad.exe:*:Enabled:maxorcad (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxp99x.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxp99x.exe:*:Enabled:maxp99x (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpadb.exe:*:Enabled:maxpadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpadx.exe:*:Enabled:maxpadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpcadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpcadb.exe:*:Enabled:maxpcadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpcadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxpcadx.exe:*:Enabled:maxpcadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxprotb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxprotb.exe:*:Enabled:maxprotb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxprotx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxprotx.exe:*:Enabled:maxprotx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxstrb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxstrb.exe:*:Enabled:maxstrb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxstrx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxstrx.exe:*:Enabled:maxstrx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxtangb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxtangb.exe:*:Enabled:maxtangb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxtangx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\maxtangx.exe:*:Enabled:maxtangx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\mfceco.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\mfceco.exe:*:Enabled:mfceco (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\orcadodb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\orcadodb.exe:*:Enabled:orcadodb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\padb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\padb.exe:*:Enabled:padb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\padx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\padx.exe:*:Enabled:padx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\pcadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\pcadb.exe:*:Enabled:pcadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\pcadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\pcadx.exe:*:Enabled:pcadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\pcb2max.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\pcb2max.exe:*:Enabled:pcb2max (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\prcat.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\prcat.exe:*:Enabled:prcat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\protb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\protb.exe:*:Enabled:protb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\protx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\protx.exe:*:Enabled:protx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\searchTool.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\searchTool.exe:*:Enabled:searchTool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\setbrows.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\setbrows.exe:*:Enabled:setbrows (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\specin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\specin.exe:*:Enabled:specin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\strb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\strb.exe:*:Enabled:strb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\strx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\strx.exe:*:Enabled:strx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tangb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tangb.exe:*:Enabled:tangb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tangx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tangx.exe:*:Enabled:tangx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\to386.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\to386.exe:*:Enabled:to386 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\toidf.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\toidf.exe:*:Enabled:toidf (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tomax.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tomax.exe:*:Enabled:tomax (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tospec.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tospec.exe:*:Enabled:tospec (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\update90.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\update90.exe:*:Enabled:update90 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\fonts\f2g.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\fonts\f2g.exe:*:Enabled:f2g (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\fonts\g2r.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\fonts\g2r.exe:*:Enabled:g2r (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\apstub.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\apstub.exe:*:Enabled:apstub (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\custaped.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\custaped.exe:*:Enabled:custaped (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\gerbline.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\gerbline.exe:*:Enabled:gerbline (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\gerbtool.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\program\gerbtool.exe:*:Enabled:gerbtool (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\system\fixtbar.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\gtool\system\fixtbar.exe:*:Enabled:fixtbar (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\samples\demo\reset.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\samples\demo\reset.exe:*:Enabled:reset (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\sroute\batch32.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\sroute\batch32.exe:*:Enabled:batch32 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\sroute\sroute.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\sroute\sroute.exe:*:Enabled:sroute (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tutorial\laytutor.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\tutorial\laytutor.exe:*:Enabled:laytutor (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\vcadd\vcadd32.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_eng_ed\vcadd\vcadd32.exe:*:Enabled:vcadd32 (Release OrCAD 10.5) -- (OrCAD Corporation) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\fvupdateutil.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\fvupdateutil.exe:*:Enabled:fvupdateutil (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gcad.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gcad.exe:*:Enabled:gcad (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gcam.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gcam.exe:*:Enabled:gcam (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gcdin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gcdin.exe:*:Enabled:gcdin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\idfin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\idfin.exe:*:Enabled:idfin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\ipc356.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\ipc356.exe:*:Enabled:ipc356 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\layout.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\layout.exe:*:Enabled:layout (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\libcat.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\libcat.exe:*:Enabled:libcat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\lsession.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\lsession.exe:*:Enabled:lsession (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\max2hyp.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\max2hyp.exe:*:Enabled:max2hyp (Release OrCAD 10.5) -- (HyperLynx) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxascb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxascb.exe:*:Enabled:maxascb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxascx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxascx.exe:*:Enabled:maxascx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxdxf.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxdxf.exe:*:Enabled:maxdxf (Release OrCAD 10.5) -- (OrCAD) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxeco.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxeco.exe:*:Enabled:maxeco (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxfnetx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxfnetx.exe:*:Enabled:maxfnetx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxminb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxminb.exe:*:Enabled:maxminb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxminw.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxminw.exe:*:Enabled:maxminw (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxminx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxminx.exe:*:Enabled:maxminx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxorcad.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxorcad.exe:*:Enabled:maxorcad (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxp99x.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxp99x.exe:*:Enabled:maxp99x (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpadb.exe:*:Enabled:maxpadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpadx.exe:*:Enabled:maxpadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpcadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpcadb.exe:*:Enabled:maxpcadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpcadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxpcadx.exe:*:Enabled:maxpcadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxprotb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxprotb.exe:*:Enabled:maxprotb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxprotx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxprotx.exe:*:Enabled:maxprotx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxstrb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxstrb.exe:*:Enabled:maxstrb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxstrx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxstrx.exe:*:Enabled:maxstrx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxtangb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxtangb.exe:*:Enabled:maxtangb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxtangx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\maxtangx.exe:*:Enabled:maxtangx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\mfceco.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\mfceco.exe:*:Enabled:mfceco (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\orcadodb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\orcadodb.exe:*:Enabled:orcadodb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\padb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\padb.exe:*:Enabled:padb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\padx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\padx.exe:*:Enabled:padx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\pcadb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\pcadb.exe:*:Enabled:pcadb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\pcadx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\pcadx.exe:*:Enabled:pcadx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\pcb2max.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\pcb2max.exe:*:Enabled:pcb2max (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\prcat.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\prcat.exe:*:Enabled:prcat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\protb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\protb.exe:*:Enabled:protb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\protx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\protx.exe:*:Enabled:protx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\searchTool.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\searchTool.exe:*:Enabled:searchTool (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\setbrows.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\setbrows.exe:*:Enabled:setbrows (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\specin.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\specin.exe:*:Enabled:specin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\strb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\strb.exe:*:Enabled:strb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\strx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\strx.exe:*:Enabled:strx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\tangb.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\tangb.exe:*:Enabled:tangb (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\tangx.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\tangx.exe:*:Enabled:tangx (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\to386.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\to386.exe:*:Enabled:to386 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\toidf.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\toidf.exe:*:Enabled:toidf (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\tomax.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\tomax.exe:*:Enabled:tomax (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\tospec.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\tospec.exe:*:Enabled:tospec (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\update90.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\update90.exe:*:Enabled:update90 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\fonts\f2g.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\fonts\f2g.exe:*:Enabled:f2g (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\fonts\g2r.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\fonts\g2r.exe:*:Enabled:g2r (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\apstub.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\apstub.exe:*:Enabled:apstub (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\custaped.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\custaped.exe:*:Enabled:custaped (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\gerbline.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\gerbline.exe:*:Enabled:gerbline (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\gerbtool.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\program\gerbtool.exe:*:Enabled:gerbtool (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\system\fixtbar.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\gtool\system\fixtbar.exe:*:Enabled:fixtbar (Release OrCAD 10.5) -- (WISE Software Solutions, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\samples\demo\reset.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\samples\demo\reset.exe:*:Enabled:reset (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\sroute\batch32.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\sroute\batch32.exe:*:Enabled:batch32 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\layout_plus\sroute\sroute.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\sroute\sroute.exe:*:Enabled:sroute (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\tutorial\laytutor.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\tutorial\laytutor.exe:*:Enabled:laytutor (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\layout_plus\vcadd\vcadd32.exe" = C:\OrCAD\OrCAD_10.5\tools\layout_plus\vcadd\vcadd32.exe:*:Enabled:vcadd32 (Release OrCAD 10.5) -- (OrCAD Corporation) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\a2dxf.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\a2dxf.exe:*:Enabled:a2dxf (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\a2sdf.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\a2sdf.exe:*:Enabled:a2sdf (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\aconvmap.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\aconvmap.exe:*:Enabled:aconvmap (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\allegro.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\allegro.exe:*:Enabled:allegro (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\allegro_free_viewer.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\allegro_free_viewer.exe:*:Enabled:allegro_free_viewer (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\aprepmap.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\aprepmap.exe:*:Enabled:aprepmap (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\artwork.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\artwork.exe:*:Enabled:artwork (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ashowmap.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ashowmap.exe:*:Enabled:ashowmap (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\batch_drc.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\batch_drc.exe:*:Enabled:batch_drc (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\bbvia.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\bbvia.exe:*:Enabled:bbvia (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\bem2d.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\bem2d.exe:*:Enabled:bem2d (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\brd2dml.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\brd2dml.exe:*:Enabled:brd2dml (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\cns_report.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\cns_report.exe:*:Enabled:cns_report (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\create_devices.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\create_devices.exe:*:Enabled:create_devices (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\create_sym.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\create_sym.exe:*:Enabled:create_sym (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbdoctor.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbdoctor.exe:*:Enabled:dbdoctor (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbdoctor14.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbdoctor14.exe:*:Enabled:dbdoctor14 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbdoctor_ui.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbdoctor_ui.exe:*:Enabled:dbdoctor_ui (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbfix11.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbfix11.exe:*:Enabled:dbfix11 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbfix12.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbfix12.exe:*:Enabled:dbfix12 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbfix13.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbfix13.exe:*:Enabled:dbfix13 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbstat.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dbstat.exe:*:Enabled:dbstat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dfa_dlg.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dfa_dlg.exe:*:Enabled:dfa_dlg (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dfa_update.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dfa_update.exe:*:Enabled:dfa_update (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dml2brd.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dml2brd.exe:*:Enabled:dml2brd (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dmlcheck.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dmlcheck.exe:*:Enabled:dmlcheck (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dmlcrypt.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dmlcrypt.exe:*:Enabled:dmlcrypt (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\downrev_library.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\downrev_library.exe:*:Enabled:downrev_library (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\draw_check.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\draw_check.exe:*:Enabled:draw_check (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dump_libraries.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dump_libraries.exe:*:Enabled:dump_libraries (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dxf2a.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\dxf2a.exe:*:Enabled:dxf2a (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ecl_schedule.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ecl_schedule.exe:*:Enabled:ecl_schedule (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\enved.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\enved.exe:*:Enabled:enved (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\explot.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\explot.exe:*:Enabled:explot (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\extracta.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\extracta.exe:*:Enabled:extracta (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\flash_convert.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\flash_convert.exe:*:Enabled:flash_convert (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\fpbrowse.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\fpbrowse.exe:*:Enabled:fpbrowse (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\FSvia.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\FSvia.exe:*:Enabled:FSvia (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\FSviaSolver.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\FSviaSolver.exe:*:Enabled:FSviaSolver (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ftsmerge.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ftsmerge.exe:*:Enabled:ftsmerge (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\gbplot.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\gbplot.exe:*:Enabled:gbplot (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\genfeedformat.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\genfeedformat.exe:*:Enabled:genfeedformat (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\genrad.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\genrad.exe:*:Enabled:genrad (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\gloss.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\gloss.exe:*:Enabled:gloss (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ibis2signoise.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ibis2signoise.exe:*:Enabled:ibis2signoise (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ibischk3.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ibischk3.exe:*:Enabled:ibischk3 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ibischk4.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ibischk4.exe:*:Enabled:ibischk4 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\idf_in.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\idf_in.exe:*:Enabled:idf_in (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\idf_out.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\idf_out.exe:*:Enabled:idf_out (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\iges_in.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\iges_in.exe:*:Enabled:iges_in (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\iges_out.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\iges_out.exe:*:Enabled:iges_out (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\il_allegro.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\il_allegro.exe:*:Enabled:il_allegro (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ipc356_out.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ipc356_out.exe:*:Enabled:ipc356_out (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\j2script.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\j2script.exe:*:Enabled:j2script (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\lis2buf.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\lis2buf.exe:*:Enabled:lis2buf (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\mbs2lib.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\mbs2lib.exe:*:Enabled:mbs2lib (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\mergedml.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\mergedml.exe:*:Enabled:mergedml (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\mkdeviceindex.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\mkdeviceindex.exe:*:Enabled:mkdeviceindex (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\modelintegrity.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\modelintegrity.exe:*:Enabled:modelintegrity (Release OrCAD 10.5) -- (Cadence Design Systems) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\modelsim.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\modelsim.exe:*:Enabled:modelsim (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ncroute.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ncroute.exe:*:Enabled:ncroute (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\nctape.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\nctape.exe:*:Enabled:nctape (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\netin.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\netin.exe:*:Enabled:netin (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\netrev.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\netrev.exe:*:Enabled:netrev (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pads_in.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pads_in.exe:*:Enabled:pads_in (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pad_designer.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pad_designer.exe:*:Enabled:pad_designer (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\parallel.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\parallel.exe:*:Enabled:parallel (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pcad_in.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pcad_in.exe:*:Enabled:pcad_in (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pe_wordpad.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pe_wordpad.exe:*:Enabled:pe_wordpad (Release OrCAD 10.5) -- (Microsoft Corporation) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\placement.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\placement.exe:*:Enabled:placement (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\plctxt.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\plctxt.exe:*:Enabled:plctxt (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pre_check.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\pre_check.exe:*:Enabled:pre_check (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\productServer.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\productServer.exe:*:Enabled:productServer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\quad2signoise.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\quad2signoise.exe:*:Enabled:quad2signoise (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\qvupdate.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\qvupdate.exe:*:Enabled:qvupdate (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\refresh_padstack.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\refresh_padstack.exe:*:Enabled:refresh_padstack (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\refresh_symbol.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\refresh_symbol.exe:*:Enabled:refresh_symbol (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\refresh_vs.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\refresh_vs.exe:*:Enabled:refresh_vs (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\reftxt.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\reftxt.exe:*:Enabled:reftxt (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\report.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\report.exe:*:Enabled:report (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\signoise.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\signoise.exe:*:Enabled:signoise (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigwave.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigwave.exe:*:Enabled:sigwave (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigwave_sc.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigwave_sc.exe:*:Enabled:sigwave_sc (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigxp.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigxp.exe:*:Enabled:sigxp (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigxsect.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sigxsect.exe:*:Enabled:sigxsect (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spc2dml.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spc2dml.exe:*:Enabled:spc2dml (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spc2spc.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spc2spc.exe:*:Enabled:spc2spc (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spif.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spif.exe:*:Enabled:spif (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spif_batch.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\spif_batch.exe:*:Enabled:spif_batch (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\swap.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\swap.exe:*:Enabled:swap (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\systemdump.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\systemdump.exe:*:Enabled:systemdump (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sys_root.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\sys_root.exe:*:Enabled:sys_root (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\techfile.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\techfile.exe:*:Enabled:techfile (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\techfile13.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\techfile13.exe:*:Enabled:techfile13 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\techfile14.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\techfile14.exe:*:Enabled:techfile14 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\tlp2.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\tlp2.exe:*:Enabled:tlp2 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\tlsim.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\tlsim.exe:*:Enabled:tlsim (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ts2dml.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\ts2dml.exe:*:Enabled:ts2dml (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\uprev.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\uprev.exe:*:Enabled:uprev (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pcb\bin\zrouter.exe" = C:\OrCAD\OrCAD_10.5\tools\pcb\bin\zrouter.exe:*:Enabled:zrouter (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\perl5\bin\perl.exe" = C:\OrCAD\OrCAD_10.5\tools\perl5\bin\perl.exe:*:Enabled:perl (Release OrCAD 10.5) -- (hip communications inc.) "C:\OrCAD\OrCAD_10.5\tools\perl5\bin\perlglob.exe" = C:\OrCAD\OrCAD_10.5\tools\perl5\bin\perlglob.exe:*:Enabled:perlglob (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\perl5\ntt\cmd32.exe" = C:\OrCAD\OrCAD_10.5\tools\perl5\ntt\cmd32.exe:*:Enabled:cmd32 (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\appmgr.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\appmgr.exe:*:Enabled:appmgr (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pspice\IndiceFileGeneration.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\lxcwin.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\lxcwin.exe:*:Enabled:lxcwin (Release OrCAD 10.5) -- (MicroSim Corporation) "C:\OrCAD\OrCAD_10.5\tools\pspice\Magneticdesigner.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\modeled.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\modeled.exe:*:Enabled:modeled (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pspice\MrkSrvr.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\msgview.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\msgview.exe:*:Enabled:msgview (Release OrCAD 10.5) -- (Cadence Design Systems) "C:\OrCAD\OrCAD_10.5\tools\pspice\optimize.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\optimize.exe:*:Enabled:optimize (Release OrCAD 10.5) -- (Cadence Design System) "C:\OrCAD\OrCAD_10.5\tools\pspice\PDesign.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\PDesign.exe:*:Enabled:PDesign (Release OrCAD 10.5) -- (Cadence Design Systems) "C:\OrCAD\OrCAD_10.5\tools\pspice\psched.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\psched.exe:*:Enabled:psched (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\pspice.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\pspice.exe:*:Enabled:pspice (Release OrCAD 10.5) -- (Cadence Design Systems) "C:\OrCAD\OrCAD_10.5\tools\pspice\pspiceaa.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa (Release OrCAD 10.5) -- (Cadence Design Systems) "C:\OrCAD\OrCAD_10.5\tools\pspice\pspiceexplorersrvr.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\pspiceexplorersrvr.exe:*:Enabled:pspiceexplorersrvr (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\psp_cmd.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\regsvr32.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\regsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 10.5) -- (Microsoft Corporation) "C:\OrCAD\OrCAD_10.5\tools\pspice\simmgr.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\simmgr.exe:*:Enabled:simmgr (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\pspice\simsrvr.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\simsrvr.exe:*:Enabled:simsrvr (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\pspice\stmed.exe" = C:\OrCAD\OrCAD_10.5\tools\pspice\stmed.exe:*:Enabled:stmed (Release OrCAD 10.5) -- (Cadence Design System) "C:\OrCAD\OrCAD_10.5\tools\specctra\bin\specctra.exe" = C:\OrCAD\OrCAD_10.5\tools\specctra\bin\specctra.exe:*:Enabled:specctra (Release OrCAD 10.5) -- (Cadence Design Systems, Inc.) "C:\OrCAD\OrCAD_10.5\tools\verity\bin\cdsdocIndexer.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\bin\cdsdocIndexer.exe:*:Enabled:cdsdocIndexer (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\merge.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\merge.exe:*:Enabled:merge (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\mkvdk.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\mkvdk.exe:*:Enabled:mkvdk (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\search.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\search.exe:*:Enabled:search (Release OrCAD 10.5) -- (Verity, Inc.) "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\setup.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\setup.exe:*:Enabled:setup (Release OrCAD 10.5) -- (Verity, Inc.) "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\v_uninst.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\bin\v_uninst.exe:*:Enabled:v_uninst (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\callback.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\callback.exe:*:Enabled:callback (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\filter.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\filter.exe:*:Enabled:filter (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\htmlini.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\htmlini.exe:*:Enabled:htmlini (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\htmserv.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\htmserv.exe:*:Enabled:htmserv (Release OrCAD 10.5) -- (Verity, Inc.) "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\index.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\index.exe:*:Enabled:index (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\jstree.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\jstree.exe:*:Enabled:jstree (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\jvtree.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\jvtree.exe:*:Enabled:jvtree (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\kvoop.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\kvoop.exe:*:Enabled:kvoop (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\regsvr32.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\regsvr32.exe:*:Enabled:regsvr32 (Release OrCAD 10.5) -- (Microsoft Corporation) "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\summary.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\summary.exe:*:Enabled:summary (Release OrCAD 10.5) -- () "C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\viewers\amovie.exe" = C:\OrCAD\OrCAD_10.5\tools\verity\_nti40\filters\viewers\amovie.exe:*:Enabled:amovie (Release OrCAD 10.5) -- (Microsoft Corporation) "C:\OrCAD\OrCAD_10.5\tools\specctra\bin\specctra.com" = C:\OrCAD\OrCAD_10.5\tools\specctra\bin\specctra.com:*:Enabled:specctra (Release OrCAD 10.5) -- () "C:\Program Files\Ansoft\HFSS12\hfss.exe" = C:\Program Files\Ansoft\HFSS12\hfss.exe:*:Enabled:Ansoft HFSS 12 -- (Ansoft LLC) "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
  13. ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* > [2008/09/09 10:51:29 | 000,000,126 | ---- | M] () -- C:\.bash_history [2009/11/20 13:38:09 | 000,001,024 | ---- | M] () -- C:\.rnd [2006/04/30 19:14:37 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2010/09/16 01:39:51 | 000,000,211 | ---- | M] () -- C:\Boot.bak [2010/09/30 13:49:23 | 000,000,327 | RHS- | M] () -- C:\boot.ini [2004/08/03 23:00:00 | 000,260,272 | RHS- | M] () -- C:\cmldr [2010/09/30 15:19:15 | 000,063,646 | ---- | M] () -- C:\ComboFix.txt [2006/04/30 19:14:37 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2010/05/15 19:18:49 | 006,631,302 | ---- | M] () -- C:\CrappyC.zip [2010/05/03 15:39:24 | 000,000,082 | ---- | M] () -- C:\Documents~ [2008/05/15 08:48:46 | 000,003,084 | ---- | M] () -- C:\drivez.log [2009/03/03 00:47:38 | 000,049,233 | ---- | M] () -- C:\fat32format.exe [2010/05/15 14:48:26 | 022,480,754 | ---- | M] () -- C:\FinishedSweep2.zip [2010/09/30 16:58:54 | 3211,046,912 | -HS- | M] () -- C:\hiberfil.sys [2009/10/05 13:18:34 | 000,007,223 | ---- | M] () -- C:\INSTALLINFO.TXT [2006/04/30 19:14:37 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2009/09/05 18:47:22 | 004,805,045 | ---- | M] () -- C:\LabView-Ver2.zip [2010/09/20 00:50:59 | 000,001,184 | ---- | M] () -- C:\lxcq.log [2006/04/30 19:14:37 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2004/08/04 07:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM [2008/05/25 16:58:32 | 000,250,048 | RHS- | M] () -- C:\NTLDR [2010/09/30 16:58:52 | 1572,864,000 | -HS- | M] () -- C:\pagefile.sys [2010/05/17 08:51:12 | 002,321,601 | ---- | M] () -- C:\Sweep.ace [2008/05/15 08:21:33 | 000,000,099 | ---- | M] () -- C:\syslevel.lgl [2010/05/15 14:57:26 | 016,980,439 | ---- | M] () -- C:\test.zip [2009/08/18 09:17:55 | 000,001,656 | ---- | M] () -- C:\TPHKLOCK.TXT [2010/09/30 17:01:59 | 000,069,413 | ---- | M] () -- C:\tracelog.txt [2008/09/22 09:50:42 | 000,018,508 | ---- | M] () -- C:\UWMEMSDevices.cat [2010/08/24 22:14:40 | 000,000,005 | ---- | M] () -- C:\zrpt.xml < %SYSTEMROOT%\system32\*.dll /lockedfiles > [1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] < %SYSTEMROOT%\Tasks\*.job /lockedfiles > < %SYSTEMROOT%\system32\config\*.sav > [2006/04/30 12:01:46 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav [2006/04/30 12:01:46 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav [2006/04/30 12:01:46 | 000,876,544 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav < %SYSTEMROOT%\system32\drivers\*.sys /90 > < %SYSTEMROOT%\system32\Spool\prtprocs\w32x86\*.dll > [2008/07/06 08:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll [2008/04/04 21:01:40 | 000,272,896 | ---- | M] (Hewlett-Packard Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\hpcpp5r1.DLL [2002/08/29 06:41:00 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\jnwppr.dll [2006/10/26 19:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll [2007/12/10 09:00:00 | 000,057,344 | ---- | M] (Zenographics, Inc.) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\ZIMFPRNT.DLL ========== Alternate Data Streams ========== @Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:888AFB86 < End of report >
  14. ========== Files/Folders - Created Within 30 Days ========== [2010/10/01 09:03:55 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\nzahirov\Desktop\OTL.exe [2010/09/30 17:16:51 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010/09/30 13:49:15 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010/09/30 13:44:37 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010/09/30 13:44:35 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010/09/30 13:44:35 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010/09/30 13:44:35 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010/09/30 13:42:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010/09/30 13:38:51 | 000,000,000 | ---D | C] -- C:\Qoobox [2010/09/30 09:01:23 | 000,116,224 | ---- | C] (Xerox) -- C:\WINDOWS\System32\dllcache\xrxwiadr.dll [2010/09/30 09:01:19 | 000,023,040 | ---- | C] (Xerox Corporation) -- C:\WINDOWS\System32\dllcache\xrxwbtmp.dll [2010/09/30 09:01:10 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xrxflnch.exe [2010/09/30 09:00:55 | 000,099,865 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\xlog.exe [2010/09/30 09:00:50 | 000,016,970 | ---- | C] (US Robotics MCD (Megahertz)) -- C:\WINDOWS\System32\dllcache\xem336n5.sys [2010/09/30 09:00:49 | 000,019,455 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wvchntxx.sys [2010/09/30 09:00:45 | 000,012,063 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wsiintxx.sys [2010/09/30 09:00:44 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wshirda.dll [2010/09/30 09:00:33 | 000,008,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiacpi.sys [2010/09/30 09:00:31 | 000,154,624 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\dllcache\wlluc48.sys [2010/09/30 09:00:27 | 000,034,890 | ---- | C] (Raytheon Corp.) -- C:\WINDOWS\System32\dllcache\wlandrv2.sys [2010/09/30 09:00:19 | 000,771,581 | ---- | C] (Rockwell) -- C:\WINDOWS\System32\dllcache\winacisa.sys [2010/09/30 09:00:14 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wiamsmud.dll [2010/09/30 09:00:13 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll [2010/09/30 09:00:13 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys [2010/09/30 09:00:08 | 000,701,386 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\wdhaalba.sys [2010/09/30 09:00:07 | 000,023,615 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wch7xxnt.sys [2010/09/30 09:00:06 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wceusbsh.sys [2010/09/30 09:00:02 | 000,035,871 | ---- | C] (Winbond Electronics Corp.) -- C:\WINDOWS\System32\dllcache\wbfirdma.sys [2010/09/30 09:00:00 | 000,033,599 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\watv04nt.sys [2010/09/30 08:59:59 | 000,019,551 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\watv02nt.sys [2010/09/30 08:59:58 | 000,029,311 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\watv01nt.sys [2010/09/30 08:59:57 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll [2010/09/30 08:59:56 | 000,011,775 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wadv05nt.sys [2010/09/30 08:59:55 | 000,012,127 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wadv02nt.sys [2010/09/30 08:59:54 | 000,012,415 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\wadv01nt.sys [2010/09/30 08:59:49 | 000,016,925 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w940nd.sys [2010/09/30 08:59:45 | 000,019,016 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w926nd.sys [2010/09/30 08:59:41 | 000,019,528 | ---- | C] (Winbond Electronics Corporation) -- C:\WINDOWS\System32\dllcache\w840nd.sys [2010/09/30 08:59:40 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll [2010/09/30 08:59:40 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll [2010/09/30 08:59:40 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll [2010/09/30 08:59:39 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll [2010/09/30 08:59:35 | 000,064,605 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\vvoice.sys [2010/09/30 08:59:31 | 000,397,502 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\vpctcom.sys [2010/09/30 08:59:26 | 000,604,253 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\vmodem.sys [2010/09/30 08:59:22 | 000,249,402 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\vinwm.sys [2010/09/30 08:59:18 | 000,024,576 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\dllcache\viairda.sys [2010/09/30 08:59:12 | 000,687,999 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usrwdxjs.sys [2010/09/30 08:59:08 | 000,765,884 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usrti.sys [2010/09/30 08:59:04 | 000,113,762 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usrpda.sys [2010/09/30 08:59:00 | 000,007,556 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usroslba.sys [2010/09/30 08:58:56 | 000,224,802 | ---- | C] (U.S. Robotics Corporation) -- C:\WINDOWS\System32\dllcache\usr1807a.sys [2010/09/30 08:58:52 | 000,794,399 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1806v.sys [2010/09/30 08:58:48 | 000,793,598 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1806.sys [2010/09/30 08:58:44 | 000,794,654 | ---- | C] (U.S. Robotics, Inc.) -- C:\WINDOWS\System32\dllcache\usr1801.sys [2010/09/30 08:58:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbser.sys [2010/09/30 08:58:41 | 000,017,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbohci.sys [2010/09/30 08:58:39 | 000,032,384 | ---- | C] (KLSI USA, Inc.) -- C:\WINDOWS\System32\dllcache\usb101et.sys [2010/09/30 08:58:33 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxud32.dll [2010/09/30 08:58:29 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu40.dll [2010/09/30 08:58:25 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu22.dll [2010/09/30 08:58:21 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxu12.dll [2010/09/30 08:58:17 | 000,050,688 | ---- | C] (UMAX DATA SYSTEMS INC.) -- C:\WINDOWS\System32\dllcache\umaxscan.dll [2010/09/30 08:58:13 | 000,022,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxpcls.sys [2010/09/30 08:58:09 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxp60.dll [2010/09/30 08:58:05 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\umaxcam.dll [2010/09/30 08:58:01 | 000,211,968 | ---- | C] (UMAX Data Systems Inc.) -- C:\WINDOWS\System32\dllcache\um54scan.dll [2010/09/30 08:57:57 | 000,216,064 | ---- | C] (UMAX Data Systems Inc.) -- C:\WINDOWS\System32\dllcache\um34scan.dll [2010/09/30 08:57:56 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe [2010/09/30 08:57:51 | 000,166,784 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridxpm.sys [2010/09/30 08:57:47 | 000,525,568 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridxp.dll [2010/09/30 08:57:43 | 000,159,232 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridkbm.sys [2010/09/30 08:57:39 | 000,440,576 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tridkb.dll [2010/09/30 08:57:35 | 000,222,336 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\trid3dm.sys [2010/09/30 08:57:31 | 000,315,520 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\trid3d.dll [2010/09/30 08:57:27 | 000,034,375 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\tpro4.sys [2010/09/30 08:57:22 | 000,230,912 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tosdvd03.sys [2010/09/30 08:57:19 | 000,241,664 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tosdvd02.sys [2010/09/30 08:57:15 | 000,028,232 | ---- | C] (TOSHIBA Corporation) -- C:\WINDOWS\System32\dllcache\tos4mo.sys [2010/09/30 08:57:10 | 000,123,995 | ---- | C] (Tiger Jet Network) -- C:\WINDOWS\System32\dllcache\tjisdn.sys [2010/09/30 08:57:08 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll [2010/09/30 08:57:04 | 000,138,528 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tgiulnt5.sys [2010/09/30 08:57:00 | 000,081,408 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\tgiul50.dll [2010/09/30 08:56:59 | 000,149,376 | ---- | C] (M-Systems) -- C:\WINDOWS\System32\dllcache\tffsport.sys [2010/09/30 08:56:58 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys [2010/09/30 08:56:55 | 000,017,129 | ---- | C] (TDK Corporation) -- C:\WINDOWS\System32\dllcache\tdkcd31.sys [2010/09/30 08:56:51 | 000,037,961 | ---- | C] (TDK Corporation) -- C:\WINDOWS\System32\dllcache\tdk100b.sys [2010/09/30 08:56:51 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys [2010/09/30 08:56:50 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys [2010/09/30 08:56:46 | 000,030,464 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\dllcache\tbatm155.sys [2010/09/30 08:56:42 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tandqic.sys [2010/09/30 08:56:38 | 000,036,640 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\t2r4mini.sys [2010/09/30 08:56:34 | 000,172,768 | ---- | C] (Number Nine Visual Technology) -- C:\WINDOWS\System32\dllcache\t2r4disp.dll [2010/09/30 08:56:29 | 000,094,293 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\sxports.dll [2010/09/30 08:56:25 | 000,103,936 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\sx.sys [2010/09/30 08:56:22 | 000,003,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swusbflt.sys [2010/09/30 08:56:18 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swpidflt.dll [2010/09/30 08:56:15 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\swpdflt2.dll [2010/09/30 08:56:11 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sw_wheel.dll [2010/09/30 08:56:08 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sw_effct.dll [2010/09/30 08:56:03 | 000,155,648 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlnprop.dll [2010/09/30 08:56:00 | 000,053,248 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlncoin.dll [2010/09/30 08:55:56 | 000,285,760 | ---- | C] (Stallion Technologies) -- C:\WINDOWS\System32\dllcache\stlnata.sys [2010/09/30 08:55:52 | 000,016,896 | ---- | C] (SCM Microsystems, Inc.) -- C:\WINDOWS\System32\dllcache\stcusb.sys [2010/09/30 08:55:52 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll [2010/09/30 08:55:47 | 000,048,736 | ---- | C] (3Com) -- C:\WINDOWS\System32\dllcache\srwlnd5.sys [2010/09/30 08:55:43 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll [2010/09/30 08:55:43 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusd.dll [2010/09/30 08:55:38 | 000,024,660 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxupchk.dll [2010/09/30 08:55:34 | 000,061,824 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\speed.sys [2010/09/30 08:55:30 | 000,106,584 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spdports.dll [2010/09/30 08:55:26 | 000,007,552 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypvu1.sys [2010/09/30 08:55:23 | 000,037,040 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypi.sys [2010/09/30 08:55:19 | 000,114,688 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonypi.dll [2010/09/30 08:55:16 | 000,020,752 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\sonync.sys [2010/09/30 08:55:12 | 000,009,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sonymc.sys [2010/09/30 08:55:11 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll [2010/09/30 08:55:11 | 000,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sonyait.sys [2010/09/30 08:55:07 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snyaitmc.sys [2010/09/30 08:55:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll [2010/09/30 08:55:06 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll [2010/09/30 08:55:04 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll [2010/09/30 08:55:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll [2010/09/30 08:55:00 | 000,058,368 | ---- | C] (Silicon Motion Inc.) -- C:\WINDOWS\System32\dllcache\smiminib.sys [2010/09/30 08:55:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll [2010/09/30 08:54:59 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll [2010/09/30 08:54:56 | 000,147,200 | ---- | C] (Silicon Motion Inc.) -- C:\WINDOWS\System32\dllcache\smidispb.dll [2010/09/30 08:54:52 | 000,025,034 | ---- | C] (SMC Networks, Inc.) -- C:\WINDOWS\System32\dllcache\smcpwr2n.sys [2010/09/30 08:54:48 | 000,035,913 | ---- | C] (SMC) -- C:\WINDOWS\System32\dllcache\smcirda.sys [2010/09/30 08:54:45 | 000,024,576 | ---- | C] (SMC Networks, Inc.) -- C:\WINDOWS\System32\dllcache\smc8000n.sys [2010/09/30 08:54:41 | 000,006,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbhc.sys [2010/09/30 08:54:40 | 000,006,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbclass.sys [2010/09/30 08:54:39 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll [2010/09/30 08:54:39 | 000,016,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smbbatt.sys [2010/09/30 08:54:36 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb3w.dll [2010/09/30 08:54:32 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb0w.dll [2010/09/30 08:54:32 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll [2010/09/30 08:54:28 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll [2010/09/30 08:54:28 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma0w.dll [2010/09/30 08:54:28 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll [2010/09/30 08:54:28 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll [2010/09/30 08:54:24 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll [2010/09/30 08:54:24 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm91w.dll [2010/09/30 08:54:24 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll [2010/09/30 08:54:24 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll [2010/09/30 08:54:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll [2010/09/30 08:54:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll [2010/09/30 08:54:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll [2010/09/30 08:54:23 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll [2010/09/30 08:54:22 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll [2010/09/30 08:54:21 | 000,063,547 | ---- | C] (Symbol Technologies) -- C:\WINDOWS\System32\dllcache\sla30nd5.sys [2010/09/30 08:54:17 | 000,091,294 | ---- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) -- C:\WINDOWS\System32\dllcache\skfpwin.sys [2010/09/30 08:54:14 | 000,094,698 | ---- | C] (SysKonnect GmbH.) -- C:\WINDOWS\System32\dllcache\sk98xwin.sys [2010/09/30 08:54:10 | 000,157,696 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisv256.dll [2010/09/30 08:54:07 | 000,050,432 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisv.sys [2010/09/30 08:54:06 | 000,032,768 | ---- | C] (SiS Corporation) -- C:\WINDOWS\System32\dllcache\sisnic.sys [2010/09/30 08:54:02 | 000,238,592 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrv.dll [2010/09/30 08:53:59 | 000,104,064 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sisgrp.sys [2010/09/30 08:53:55 | 000,150,144 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis6306v.dll [2010/09/30 08:53:52 | 000,068,608 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis6306p.sys [2010/09/30 08:53:48 | 000,252,032 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis300iv.dll [2010/09/30 08:53:45 | 000,101,760 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\dllcache\sis300ip.sys [2010/09/30 08:53:44 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll [2010/09/30 08:53:38 | 000,161,568 | ---- | C] (Micro Systemation) -- C:\WINDOWS\System32\dllcache\sgsmusb.sys [2010/09/30 08:53:34 | 000,018,400 | ---- | C] (Micro Systemation) -- C:\WINDOWS\System32\dllcache\sgsmld.sys [2010/09/30 08:53:31 | 000,098,080 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\sgiulnt5.sys [2010/09/30 08:53:27 | 000,386,560 | ---- | C] (Trident Microsystems Inc.) -- C:\WINDOWS\System32\dllcache\sgiul50.dll [2010/09/30 08:53:24 | 000,036,480 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\sfmanm.sys [2010/09/30 08:53:19 | 000,006,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\serscan.sys [2010/09/30 08:53:16 | 000,017,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sermouse.sys [2010/09/30 08:53:15 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll [2010/09/30 08:53:11 | 000,006,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\seaddsmc.sys [2010/09/30 08:53:10 | 000,011,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scsiscan.sys [2010/09/30 08:53:07 | 000,011,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scsiprnt.sys [2010/09/30 08:53:06 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll [2010/09/30 08:53:03 | 000,017,280 | ---- | C] (SCM Microsystems) -- C:\WINDOWS\System32\dllcache\scr111.sys [2010/09/30 08:52:59 | 000,016,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scmstcs.sys [2010/09/30 08:52:55 | 000,023,936 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\sccmusbm.sys [2010/09/30 08:52:52 | 000,023,936 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\sccmn50m.sys [2010/09/30 08:52:50 | 000,043,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sbp2port.sys [2010/09/30 08:52:47 | 000,495,616 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\sblfx.dll [2010/09/30 08:52:43 | 000,075,392 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\dllcache\s3savmxm.sys [2010/09/30 08:52:39 | 000,245,632 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\dllcache\s3savmx.dll [2010/09/30 08:52:36 | 000,077,824 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav4m.sys [2010/09/30 08:52:32 | 000,198,400 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav4.dll [2010/09/30 08:52:29 | 000,061,504 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav3dm.sys [2010/09/30 08:52:25 | 000,179,264 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3sav3d.dll [2010/09/30 08:52:22 | 000,210,496 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mvirge.dll [2010/09/30 08:52:19 | 000,062,496 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mtrio.dll [2010/09/30 08:52:15 | 000,041,216 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mt3d.sys [2010/09/30 08:52:12 | 000,182,272 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3mt3d.dll [2010/09/30 08:52:08 | 000,166,720 | ---- | C] (S3 Incorporated) -- C:\WINDOWS\System32\dllcache\s3m.sys [2010/09/30 08:52:05 | 000,065,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\s3legacy.sys [2010/09/30 08:52:01 | 000,082,432 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia450.dll [2010/09/30 08:51:58 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia430.dll [2010/09/30 08:51:58 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2010/09/30 08:51:57 | 000,079,872 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2010/09/30 08:51:56 | 000,029,696 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw450ext.dll [2010/09/30 08:51:55 | 000,027,648 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw430ext.dll [2010/09/30 08:51:54 | 000,020,992 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\rtl8139.sys [2010/09/30 08:51:50 | 000,019,017 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\rtl8029.sys [2010/09/30 08:51:47 | 000,030,720 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\dllcache\rthwcls.sys [2010/09/30 08:51:43 | 000,009,216 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\rsmgrstr.dll [2010/09/30 08:51:39 | 000,003,840 | ---- | C] (Conexant Systems Inc.) -- C:\WINDOWS\System32\dllcache\rpfun.sys [2010/09/30 08:51:37 | 000,079,104 | ---- | C] (Comtrol Corporation) -- C:\WINDOWS\System32\dllcache\rocket.sys [2010/09/30 08:51:33 | 000,037,563 | ---- | C] (RadioLAN) -- C:\WINDOWS\System32\dllcache\rlnet5.sys [2010/09/30 08:51:29 | 000,086,097 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\reslog32.dll [2010/09/30 08:51:29 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe [2010/09/30 08:51:28 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe [2010/09/30 08:51:22 | 000,019,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rasirda.sys [2010/09/30 08:51:18 | 000,714,762 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\r2mdmkxx.sys [2010/09/30 08:51:15 | 000,899,146 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\r2mdkxga.sys [2010/09/30 08:51:11 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qvusd.dll [2010/09/30 08:51:08 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qv2kux.sys [2010/09/30 08:51:07 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe [2010/09/30 08:51:07 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe [2010/09/30 08:51:05 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qic157.sys [2010/09/30 08:51:00 | 000,130,942 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserlv.sys [2010/09/30 08:50:57 | 000,112,574 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserlp.sys [2010/09/30 08:50:53 | 000,128,286 | ---- | C] (PCTEL, INC.) -- C:\WINDOWS\System32\dllcache\ptserli.sys [2010/09/30 08:50:52 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ptpusd.dll [2010/09/30 08:50:49 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ptpusb.dll [2010/09/30 08:50:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\psisload.dll [2010/09/30 08:50:40 | 000,016,128 | ---- | C] (SCM Microsystems, Inc.) -- C:\WINDOWS\System32\dllcache\pscr.sys [2010/09/30 08:50:38 | 000,017,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ppa3.sys [2010/09/30 08:50:34 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ppa.sys [2010/09/30 08:50:33 | 000,008,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\powerfil.sys [2010/09/30 08:50:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pnrmc.sys [2010/09/30 08:50:29 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll [2010/09/30 08:50:29 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll [2010/09/30 08:50:29 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll [2010/09/30 08:50:24 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phvfwext.dll [2010/09/30 08:50:20 | 000,019,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philtune.sys [2010/09/30 08:50:17 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phildec.sys [2010/09/30 08:50:13 | 000,173,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam2.sys [2010/09/30 08:50:10 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam1.sys [2010/09/30 08:50:06 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\philcam1.dll [2010/09/30 08:50:03 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phdsext.ax [2010/09/30 08:50:03 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll [2010/09/30 08:50:02 | 000,259,328 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm3dd.dll [2010/09/30 08:50:01 | 000,028,032 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm3.sys [2010/09/30 08:50:00 | 000,211,584 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm2dll.dll [2010/09/30 08:49:59 | 000,027,904 | ---- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) -- C:\WINDOWS\System32\dllcache\perm2.sys [2010/09/30 08:49:58 | 000,169,984 | ---- | C] (Cisco Systems) -- C:\WINDOWS\System32\dllcache\pcx500.sys [2010/09/30 08:49:54 | 000,086,016 | ---- | C] (PCtel, Inc.) -- C:\WINDOWS\System32\dllcache\pctspk.exe [2010/09/30 08:49:51 | 000,035,328 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntpci5.sys [2010/09/30 08:49:48 | 000,029,769 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntn5m.sys [2010/09/30 08:49:44 | 000,030,282 | ---- | C] (AMD Inc.) -- C:\WINDOWS\System32\dllcache\pcntn5hl.sys [2010/09/30 08:49:41 | 000,026,153 | ---- | C] (Linksys) -- C:\WINDOWS\System32\dllcache\pcmlm56.sys [2010/09/30 08:49:40 | 000,029,502 | ---- | C] (Marconi Communications, Inc.) -- C:\WINDOWS\System32\dllcache\pca200e.sys [2010/09/30 08:49:37 | 000,030,495 | ---- | C] (Linksys) -- C:\WINDOWS\System32\dllcache\pc100nds.sys [2010/09/30 08:49:36 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll [2010/09/30 08:49:35 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll [2010/09/30 08:49:35 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll [2010/09/30 08:49:31 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovui2rc.dll [2010/09/30 08:49:28 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovui2.dll [2010/09/30 08:49:24 | 000,025,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovsound2.sys [2010/09/30 08:49:21 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcoms.exe [2010/09/30 08:49:18 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcomc.dll [2010/09/30 08:49:15 | 000,351,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcodek2.sys [2010/09/30 08:49:11 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcodec2.dll [2010/09/30 08:49:08 | 000,031,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovce.sys [2010/09/30 08:49:05 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcd.sys [2010/09/30 08:49:01 | 000,048,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovcam2.sys [2010/09/30 08:48:58 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ovca.sys [2010/09/30 08:48:55 | 000,054,186 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otcsercb.sys [2010/09/30 08:48:52 | 000,043,689 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otceth5.sys [2010/09/30 08:48:48 | 000,027,209 | ---- | C] (Ositech Communications, Inc.) -- C:\WINDOWS\System32\dllcache\otc06x5.sys [2010/09/30 08:48:45 | 000,054,528 | ---- | C] (Yamaha Corp.) -- C:\WINDOWS\System32\dllcache\opl3sax.sys [2010/09/30 08:48:39 | 000,198,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv3.sys [2010/09/30 08:48:35 | 000,123,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv3.dll [2010/09/30 08:48:30 | 000,051,552 | ---- | C] (Kensington Technology Group) -- C:\WINDOWS\System32\dllcache\ntgrip.sys [2010/09/30 08:48:30 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll [2010/09/30 08:48:26 | 000,009,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntapm.sys [2010/09/30 08:48:22 | 000,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nsmmc.sys [2010/09/30 08:48:21 | 000,028,672 | ---- | C] (National Semiconductor Corporation) -- C:\WINDOWS\System32\dllcache\nscirda.sys [2010/09/30 08:48:17 | 000,087,040 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\nm6wdm.sys [2010/09/30 08:48:14 | 000,126,080 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\nm5a2wdm.sys [2010/09/30 08:48:10 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll [2010/09/30 08:48:10 | 000,032,840 | ---- | C] (NETGEAR Corporation.) -- C:\WINDOWS\System32\dllcache\ngrpci.sys [2010/09/30 08:48:09 | 000,132,695 | ---- | C] (802.11b) -- C:\WINDOWS\System32\dllcache\netwlan5.sys [2010/09/30 08:48:05 | 000,065,278 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\netflx3.sys [2010/09/30 08:48:01 | 000,039,264 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\neo20xx.sys [2010/09/30 08:47:58 | 000,060,480 | ---- | C] (NeoMagic Corporation) -- C:\WINDOWS\System32\dllcache\neo20xx.dll [2010/09/30 08:47:55 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ne2000.sys [2010/09/30 08:47:50 | 000,091,488 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i3disp.dll [2010/09/30 08:47:47 | 000,027,936 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i3d.sys [2010/09/30 08:47:44 | 000,033,088 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128v2.sys [2010/09/30 08:47:41 | 000,059,104 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128v2.dll [2010/09/30 08:47:38 | 000,013,664 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128.sys [2010/09/30 08:47:34 | 000,035,392 | ---- | C] (Number Nine Visual Technology Corp.) -- C:\WINDOWS\System32\dllcache\n9i128.dll [2010/09/30 08:47:31 | 000,128,000 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\n100325.sys [2010/09/30 08:47:28 | 000,052,255 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\dllcache\n1000nt5.sys [2010/09/30 08:47:25 | 000,075,520 | ---- | C] (Moxa Technologies Co., Ltd.) -- C:\WINDOWS\System32\dllcache\mxport.sys [2010/09/30 08:47:22 | 000,007,168 | ---- | C] (Moxa Technologies Co., Ltd) -- C:\WINDOWS\System32\dllcache\mxport.dll [2010/09/30 08:47:19 | 000,019,968 | ---- | C] (Macronix International Co., Ltd. ) -- C:\WINDOWS\System32\dllcache\mxnic.sys [2010/09/30 08:47:16 | 000,019,968 | ---- | C] (Moxa Technologies Co., Ltd) -- C:\WINDOWS\System32\dllcache\mxicfg.dll [2010/09/30 08:47:13 | 000,021,888 | ---- | C] (Moxa Technologies Co., Ltd.) -- C:\WINDOWS\System32\dllcache\mxcard.sys [2010/09/30 08:47:12 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll [2010/09/30 08:47:09 | 000,103,296 | ---- | C] (Matrox Graphics Inc) -- C:\WINDOWS\System32\dllcache\mtxvideo.sys [2010/09/30 08:47:03 | 000,049,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstape.sys [2010/09/30 08:46:59 | 000,012,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msriffwv.sys [2010/09/30 08:46:53 | 000,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msmpu401.sys [2010/09/30 08:46:52 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex [2010/09/30 08:46:52 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msircomm.sys [2010/09/30 08:46:51 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll [2010/09/30 08:46:45 | 000,035,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msgame.sys [2010/09/30 08:46:42 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfsio.sys [2010/09/30 08:46:35 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpe.sys [2010/09/30 08:46:31 | 000,016,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\modemcsa.sys [2010/09/30 08:46:26 | 000,006,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\miniqic.sys [2010/09/30 08:46:25 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migisol.exe [2010/09/30 08:46:22 | 000,320,384 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\mgaum.sys [2010/09/30 08:46:19 | 000,235,648 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\mgaud.dll [2010/09/30 08:46:18 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys [2010/09/30 08:46:18 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll [2010/09/30 08:46:17 | 000,026,112 | ---- | C] (Sony Corporation) -- C:\WINDOWS\System32\dllcache\memstpci.sys [2010/09/30 08:46:14 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\memgrp.dll [2010/09/30 08:46:11 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\memcard.sys [2010/09/30 08:46:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll [2010/09/30 08:46:07 | 000,164,586 | ---- | C] (Madge Networks Ltd) -- C:\WINDOWS\System32\dllcache\mdgndis5.sys [2010/09/30 08:46:03 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll [2010/09/30 08:46:03 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mammoth.sys [2010/09/30 08:45:59 | 000,048,768 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\maestro.sys [2010/09/30 08:45:56 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\m3092dc.dll [2010/09/30 08:45:53 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\m3091dc.dll [2010/09/30 08:45:50 | 000,022,848 | ---- | C] (Logitech Inc.) -- C:\WINDOWS\System32\dllcache\lwusbhid.sys [2010/09/30 08:45:50 | 000,020,864 | ---- | C] (Logitech Inc.) -- C:\WINDOWS\System32\dllcache\lwadihid.sys [2010/09/30 08:45:47 | 000,797,500 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltsmt.sys [2010/09/30 08:45:44 | 000,802,683 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\dllcache\ltsm.sys [2010/09/30 08:45:43 | 000,420,992 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntt.sys [2010/09/30 08:45:43 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ltotape.sys [2010/09/30 08:45:40 | 000,576,746 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntl.sys [2010/09/30 08:45:39 | 000,606,684 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmnt.sys [2010/09/30 08:45:36 | 000,727,786 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ltck000c.sys [2010/09/30 08:45:33 | 000,004,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\loop.sys [2010/09/30 08:45:32 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll [2010/09/30 08:45:29 | 000,070,730 | ---- | C] (Linksys Group, Inc.) -- C:\WINDOWS\System32\dllcache\lne100tx.sys [2010/09/30 08:45:26 | 000,020,573 | ---- | C] (The Linksts Group ) -- C:\WINDOWS\System32\dllcache\lne100.sys [2010/09/30 08:45:23 | 000,025,065 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\lmndis3.sys [2010/09/30 08:45:19 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\dllcache\lbrtfdc.sys [2010/09/30 08:45:19 | 000,015,744 | ---- | C] (Litronic Industries) -- C:\WINDOWS\System32\dllcache\lit220p.sys [2010/09/30 08:45:16 | 000,026,442 | ---- | C] (SMSC) -- C:\WINDOWS\System32\dllcache\lanepic5.sys [2010/09/30 08:45:13 | 000,019,016 | ---- | C] (Kingston Technology Company ) -- C:\WINDOWS\System32\dllcache\ktc111.sys [2010/09/30 08:45:09 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kousd.dll [2010/09/30 08:45:08 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll [2010/09/30 08:45:07 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kdsusd.dll [2010/09/30 08:45:07 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kdsui.dll [2010/09/30 08:45:06 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll [2010/09/30 08:45:03 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll [2010/09/30 08:45:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll [2010/09/30 08:45:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll [2010/09/30 08:44:59 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkor.dll [2010/09/30 08:44:57 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdjpn.dll [2010/09/30 08:44:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106.dll [2010/09/30 08:44:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd103.dll [2010/09/30 08:44:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101c.dll [2010/09/30 08:44:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101b.dll [2010/09/30 08:44:41 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll [2010/09/30 08:44:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll [2010/09/30 08:44:40 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll [2010/09/30 08:44:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll [2010/09/30 08:44:37 | 000,026,624 | ---- | C] (SigmaTel, Inc.) -- C:\WINDOWS\System32\dllcache\irstusb.sys [2010/09/30 08:44:34 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irmon.dll [2010/09/30 08:44:34 | 000,018,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irsir.sys [2010/09/30 08:44:31 | 000,023,552 | ---- | C] (MKNet Corporation) -- C:\WINDOWS\System32\dllcache\irmk7.sys [2010/09/30 08:44:30 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irftp.exe [2010/09/30 08:44:30 | 000,088,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irda.sys [2010/09/30 08:44:25 | 000,045,632 | ---- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) -- C:\WINDOWS\System32\dllcache\ip5515.sys [2010/09/30 08:44:22 | 000,090,200 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\io8ports.dll [2010/09/30 08:44:20 | 000,038,784 | ---- | C] (Perle Systems Ltd. ) -- C:\WINDOWS\System32\dllcache\io8.sys [2010/09/30 08:44:17 | 000,013,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inport.sys [2010/09/30 08:44:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll [2010/09/30 08:44:14 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll [2010/09/30 08:44:13 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe [2010/09/30 08:44:12 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe [2010/09/30 08:44:10 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe [2010/09/30 08:44:09 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe [2010/09/30 08:44:09 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll [2010/09/30 08:44:08 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe [2010/09/30 08:44:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll [2010/09/30 08:44:06 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe [2010/09/30 08:44:06 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll [2010/09/30 08:44:05 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll [2010/09/30 08:43:58 | 000,372,824 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\iconf32.dll [2010/09/30 08:43:55 | 000,100,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5usb.sys [2010/09/30 08:43:53 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5ext.dll [2010/09/30 08:43:50 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam5com.dll [2010/09/30 08:43:47 | 000,154,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4usb.sys [2010/09/30 08:43:45 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4ext.dll [2010/09/30 08:43:42 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam4com.dll [2010/09/30 08:43:39 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam3ext.dll [2010/09/30 08:43:36 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icam3.sys [2010/09/30 08:43:34 | 000,038,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ibmvcap.sys [2010/09/30 08:43:31 | 000,109,085 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmtrp.sys [2010/09/30 08:43:28 | 000,100,936 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmtok.sys [2010/09/30 08:43:26 | 000,009,216 | ---- | C] (IBM Corporation) -- C:\WINDOWS\System32\dllcache\ibmsgnet.dll [2010/09/30 08:43:23 | 000,028,700 | ---- | C] (IBM Corp.) -- C:\WINDOWS\System32\dllcache\ibmexmp.sys [2010/09/30 08:43:22 | 000,161,020 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\i81xnt5.sys [2010/09/30 08:43:21 | 000,702,845 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\dllcache\i81xdnt5.dll [2010/09/30 08:43:18 | 000,058,592 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\i740nt5.sys [2010/09/30 08:43:16 | 000,353,184 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\i740dnt5.dll [2010/09/30 08:43:15 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll [2010/09/30 08:43:13 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll [2010/09/30 08:43:09 | 000,488,383 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_v124.sys [2010/09/30 08:43:06 | 000,050,751 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_tone.sys [2010/09/30 08:43:04 | 000,073,279 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_spkp.sys [2010/09/30 08:43:01 | 000,044,863 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_soar.sys [2010/09/30 08:42:58 | 000,057,471 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_samp.sys [2010/09/30 08:42:56 | 000,542,879 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_msft.sys [2010/09/30 08:42:53 | 000,391,199 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_k56k.sys [2010/09/30 08:42:50 | 000,009,759 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_inst.dll [2010/09/30 08:42:47 | 000,115,807 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_fsks.sys [2010/09/30 08:42:45 | 000,199,711 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_faxx.sys [2010/09/30 08:42:42 | 000,289,887 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_fall.sys [2010/09/30 08:42:40 | 000,067,167 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_bsc2.sys [2010/09/30 08:42:37 | 000,150,239 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hsf_amos.sys [2010/09/30 08:42:34 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hr1w.dll [2010/09/30 08:42:31 | 000,005,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpt4qic.sys [2010/09/30 08:42:29 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpsjmcro.dll [2010/09/30 08:42:26 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpojwia.dll [2010/09/30 08:42:23 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgtmcro.dll [2010/09/30 08:42:21 | 000,068,608 | ---- | C] (Avisioin) -- C:\WINDOWS\System32\dllcache\hpgt53tk.dll [2010/09/30 08:42:15 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt42tk.dll [2010/09/30 08:42:10 | 000,126,976 | ---- | C] (Hewlett Packard) -- C:\WINDOWS\System32\dllcache\hpgt34tk.dll [2010/09/30 08:42:05 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt33tk.dll [2010/09/30 08:42:00 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpgt21tk.dll [2010/09/30 08:41:55 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hpdigwia.dll [2010/09/30 08:41:51 | 000,002,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidswvd.sys [2010/09/30 08:41:49 | 000,008,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidgame.sys [2010/09/30 08:41:48 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidbatt.sys [2010/09/30 08:41:45 | 000,907,456 | ---- | C] (Conexant) -- C:\WINDOWS\System32\dllcache\hcf_msft.sys [2010/09/30 08:41:45 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll [2010/09/30 08:41:43 | 000,028,288 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grserial.sys [2010/09/30 08:41:40 | 000,082,304 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grclass.sys [2010/09/30 08:41:38 | 000,017,408 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\gpr400.sys [2010/09/30 08:41:36 | 000,059,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gckernel.sys [2010/09/30 08:41:36 | 000,010,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gameenum.sys [2010/09/30 08:41:33 | 000,322,432 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g400m.sys [2010/09/30 08:41:31 | 001,733,120 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g400d.dll [2010/09/30 08:41:29 | 000,320,384 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g200m.sys [2010/09/30 08:41:27 | 000,470,144 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\dllcache\g200d.dll [2010/09/30 08:41:24 | 000,454,912 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fxusbase.sys [2010/09/30 08:41:22 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll [2010/09/30 08:41:22 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe [2010/09/30 08:41:19 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll [2010/09/30 08:41:19 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll [2010/09/30 08:41:16 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fuusd.dll [2010/09/30 08:41:14 | 000,455,296 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fusbbase.sys [2010/09/30 08:41:11 | 000,455,680 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fus2base.sys [2010/09/30 08:41:10 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll [2010/09/30 08:41:10 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll [2010/09/30 08:41:07 | 000,442,240 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpnpbase.sys [2010/09/30 08:41:05 | 000,441,728 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcmbase.sys [2010/09/30 08:41:03 | 000,444,416 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcibase.sys [2010/09/30 08:41:01 | 000,034,173 | ---- | C] (Marconi Communications, Inc.) -- C:\WINDOWS\System32\dllcache\forehe.sys [2010/09/30 08:40:59 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fnfilter.dll [2010/09/30 08:40:58 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe [2010/09/30 08:40:56 | 000,027,165 | ---- | C] (VIA Technologies, Inc. ) -- C:\WINDOWS\System32\dllcache\fetnd5.sys [2010/09/30 08:40:49 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll [2010/09/30 08:40:49 | 000,022,090 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\fem556n5.sys [2010/09/30 08:40:46 | 000,024,618 | ---- | C] (NETGEAR) -- C:\WINDOWS\System32\dllcache\fa410nd5.sys [2010/09/30 08:40:44 | 000,016,074 | ---- | C] (NETGEAR Corp.) -- C:\WINDOWS\System32\dllcache\fa312nd5.sys [2010/09/30 08:40:42 | 000,011,850 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xj.sys [2010/09/30 08:40:40 | 000,012,362 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xi.sys [2010/09/30 08:40:37 | 000,007,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exabyte2.sys [2010/09/30 08:40:35 | 000,016,998 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\ex10.sys [2010/09/30 08:40:33 | 000,045,056 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll [2010/09/30 08:40:33 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys [2010/09/30 08:40:31 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunib.dll [2010/09/30 08:40:29 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll [2010/09/30 08:40:29 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuni.dll [2010/09/30 08:40:26 | 000,034,816 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimg.dll [2010/09/30 08:40:26 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll [2010/09/30 08:40:24 | 000,137,088 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\essm2e.sys [2010/09/30 08:40:24 | 000,043,008 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucm.dll [2010/09/30 08:40:21 | 000,063,360 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\ess.sys [2010/09/30 08:40:19 | 000,347,550 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56tpi.sys [2010/09/30 08:40:17 | 000,594,238 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56hpi.sys [2010/09/30 08:40:15 | 000,595,647 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es56cvmp.sys [2010/09/30 08:40:13 | 000,174,464 | ---- | C] (ESS Technology, Inc.) -- C:\WINDOWS\System32\dllcache\es198x.sys [2010/09/30 08:40:11 | 000,072,192 | ---- | C] (ESS Technology Inc.) -- C:\WINDOWS\System32\dllcache\es1969.sys [2010/09/30 08:40:09 | 000,040,704 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\es1371mp.sys [2010/09/30 08:40:07 | 000,037,120 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\es1370mp.sys [2010/09/30 08:40:05 | 000,061,952 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnloop.exe [2010/09/30 08:40:03 | 000,051,200 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnlogr.exe [2010/09/30 08:40:01 | 000,053,248 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqndiag.exe [2010/09/30 08:39:58 | 000,629,952 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqn.sys [2010/09/30 08:39:56 | 000,114,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\epstw2k.sys [2010/09/30 08:39:54 | 000,018,503 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\epro4.sys [2010/09/30 08:39:53 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\epcfw2k.sys [2010/09/30 08:39:51 | 000,283,904 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\emu10k1m.sys [2010/09/30 08:39:47 | 000,019,996 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\em556n4.sys [2010/09/30 08:39:46 | 000,025,159 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\elnk3.sys [2010/09/30 08:39:44 | 000,007,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\elmsmc.sys [2010/09/30 08:39:43 | 000,171,520 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el99xn51.sys [2010/09/30 08:39:41 | 000,070,174 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el98xn5.sys [2010/09/30 08:39:40 | 000,455,199 | ---- | C] (3Com Corporation.) -- C:\WINDOWS\System32\dllcache\el985n51.sys [2010/09/30 08:39:39 | 000,153,631 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el90xnd5.sys [2010/09/30 08:39:37 | 000,066,591 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el90xbc5.sys [2010/09/30 08:39:36 | 000,241,206 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656se5.sys [2010/09/30 08:39:34 | 000,077,386 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656nd5.sys [2010/09/30 08:39:33 | 000,634,134 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656ct5.sys [2010/09/30 08:39:32 | 000,069,194 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el656cd5.sys [2010/09/30 08:39:30 | 000,026,141 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el589nd5.sys [2010/09/30 08:39:29 | 000,069,692 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el575nd5.sys [2010/09/30 08:39:27 | 000,024,653 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el574nd4.sys [2010/09/30 08:39:26 | 000,055,999 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el556nd5.sys [2010/09/30 08:39:25 | 000,044,103 | ---- | C] (3Com Corporation) -- C:\WINDOWS\System32\dllcache\el515.sys [2010/09/30 08:39:24 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll [2010/09/30 08:39:23 | 000,019,594 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\e100isa4.sys [2010/09/30 08:39:21 | 000,050,719 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\e1000nt5.sys [2010/09/30 08:39:17 | 000,334,208 | ---- | C] (Yamaha Corp.) -- C:\WINDOWS\System32\dllcache\ds1wdm.sys [2010/09/30 08:39:15 | 000,028,062 | ---- | C] (National Semiconductor Coproration) -- C:\WINDOWS\System32\dllcache\dp83820.sys [2010/09/30 08:39:13 | 000,023,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4usb.sys [2010/09/30 08:39:12 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4scan.sys [2010/09/30 08:39:11 | 000,012,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4prt.sys [2010/09/30 08:39:10 | 000,206,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dot4.sys [2010/09/30 08:39:07 | 000,029,696 | ---- | C] (CNet Technology, Inc. ) -- C:\WINDOWS\System32\dllcache\dm9pci5.sys [2010/09/30 08:39:07 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dlttape.sys [2010/09/30 08:39:06 | 000,026,698 | ---- | C] (D-Link Corporation) -- C:\WINDOWS\System32\dllcache\dlh5xnd5.sys [2010/09/30 08:39:04 | 000,952,007 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\diwan.sys [2010/09/30 08:38:59 | 000,236,060 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\ditrace.exe [2010/09/30 08:38:58 | 000,038,985 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvsu.dll [2010/09/30 08:38:57 | 000,031,305 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvpp.dll [2010/09/30 08:38:56 | 000,006,729 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvci.dll [2010/09/30 08:38:54 | 000,091,305 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\dimaint.sys [2010/09/30 08:38:53 | 000,614,429 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiview.exe [2010/09/30 08:38:51 | 000,042,432 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\digirlpt.sys [2010/09/30 08:38:50 | 000,110,621 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\digirlpt.dll [2010/09/30 08:38:49 | 000,021,606 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiisdn.sys [2010/09/30 08:38:48 | 000,041,046 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiisdn.dll [2010/09/30 08:38:47 | 000,102,484 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiinf.dll [2010/09/30 08:38:45 | 000,159,828 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digihlc.dll [2010/09/30 08:38:44 | 000,229,462 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digifwrk.dll [2010/09/30 08:38:43 | 000,090,525 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digifep5.sys [2010/09/30 08:38:42 | 000,103,044 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digidxb.sys [2010/09/30 08:38:41 | 000,131,156 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digidbp.dll [2010/09/30 08:38:39 | 000,037,735 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiasyn.sys [2010/09/30 08:38:38 | 000,065,622 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\digiasyn.dll [2010/09/30 08:38:36 | 000,419,357 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgconfig.dll [2010/09/30 08:38:35 | 000,029,531 | ---- | C] (Digi International Inc.) -- C:\WINDOWS\System32\dllcache\dgapci.sys [2010/09/30 08:38:33 | 000,024,649 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650d.sys [2010/09/30 08:38:32 | 000,024,648 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650.sys [2010/09/30 08:38:31 | 000,024,064 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\devldr32.exe [2010/09/30 08:38:30 | 000,256,512 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\devcon32.dll [2010/09/30 08:38:28 | 000,020,928 | ---- | C] (Digital Networks, LLC) -- C:\WINDOWS\System32\dllcache\defpa.sys [2010/09/30 08:38:27 | 000,007,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ddsmc.sys [2010/09/30 08:38:25 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc260usd.dll [2010/09/30 08:38:24 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc240usd.dll [2010/09/30 08:38:23 | 000,063,208 | ---- | C] (Intel Corporation.) -- C:\WINDOWS\System32\dllcache\dc21x4.sys [2010/09/30 08:38:22 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc210usd.dll [2010/09/30 08:38:21 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dc210_32.dll [2010/09/30 08:38:18 | 000,117,760 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\d100ib5.sys [2010/09/30 08:38:17 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzports.dll [2010/09/30 08:38:15 | 000,049,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzport.sys [2010/09/30 08:38:14 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyzcoins.dll [2010/09/30 08:38:13 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyyports.dll [2010/09/30 08:38:12 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyyport.sys [2010/09/30 08:38:11 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyycoins.dll [2010/09/30 08:38:10 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyclom-y.sys [2010/09/30 08:38:08 | 000,048,640 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwrwdm.sys [2010/09/30 08:38:08 | 000,017,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cyclad-z.sys [2010/09/30 08:38:07 | 000,093,952 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcwdm.sys [2010/09/30 08:38:06 | 000,111,872 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcspud.sys [2010/09/30 08:38:04 | 000,003,584 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcosnt5.sys [2010/09/30 08:38:03 | 000,072,832 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbwdm.sys [2010/09/30 08:38:02 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbmidi.sys [2010/09/30 08:38:01 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbase.sys [2010/09/30 08:38:00 | 000,004,096 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\dllcache\ctwdm32.dll [2010/09/30 08:37:59 | 000,249,856 | ---- | C] (Comtrol
  15. Hello and thanks in advance for your help. After hearing that ComboFix worked to repair this problem for Patti Johnson for what appeared to be the same error I was having, I attempted to apply the same fix. Before running ComboFix, Google Chrome would not display any webpages including the startup page. Firefox still ran and would display pages but would not restart after closing the main window. After running ComboFix Firefox will no longer run. ComboFix did not work for me. Win32 Host Process still fails in ntdll.dll at the same offset as before. Please advise if you would like to see the combofix log. Rootkit Unhooker is still running and has been scanning C:\ for over an hour. I am posting these from another machine with the files transferred via USB stick. I will post the Rootkit Unhooker results as soon as the scan completes. Please find the OTL.txt file below. It is too long for a single posting. I will post in multiple chunks. Extras.txt will be included in subsequent post (initial post was too long with both). BEGIN OTL.TXT ========== OTL logfile created on: 10/1/2010 9:08:02 AM - Run 1 OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\nzah****\Desktop Windows XP Tablet PC Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 60.00% Memory free 4.00 Gb Paging File | 3.00 Gb Available in Paging File | 75.00% Paging File free Paging file location(s): C:\pagefile.sys 1500 3000 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 275.14 Gb Total Space | 148.25 Gb Free Space | 53.88% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded Drive F: | 501.22 Mb Total Space | 220.33 Mb Free Space | 43.96% Space Free | Partition Type: FAT G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: JUK****T Current User Name: nzah**** Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Documents and Settings\nzahirov\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation) PRC - C:\VXIPNP\WinNT\NIvisa\niLxiDiscovery.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\MAX\nimxs.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe (National Instruments Corporation) PRC - C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\lktsrv.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\lkads.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\NLSSRV32.EXE (Nalpeiron Ltd.) PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) PRC - C:\WINDOWS\system32\lkcitdl.exe (National Instruments, Inc.) PRC - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe () PRC - C:\WINDOWS\system32\vmnat.exe (VMware, Inc.) PRC - C:\Program Files\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) PRC - C:\WINDOWS\system32\vmnetdhcp.exe (VMware, Inc.) PRC - C:\Program Files\VMware\VMware Player\hqtray.exe (VMware, Inc.) PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.) PRC - C:\Program Files\Lenovo\ZOOM\TpScrex.exe (Lenovo Group Limited) PRC - C:\Program Files\DynDNS Updater\DynUpSvc.exe (Dynamic Network Services, Inc.) PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation) PRC - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe (Intel® Corporation) PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) PRC - C:\WINDOWS\system32\ibmpmsvc.exe (Lenovo) PRC - C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Tablet Shortcut\TSMResident.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Tablet Shortcut\ASR\ASRSVC.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Tablet Shortcut\TSMService.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Lenovo Group Limited) PRC - C:\WINDOWS\system32\TpShocks.exe (Lenovo.) PRC - c:\Program Files\Lenovo\System Update\SUService.exe (Lenovo Group Limited) PRC - C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) PRC - C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation.) PRC - C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) PRC - C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited) PRC - C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE (Lenovo Group Limited) PRC - C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) PRC - C:\WINDOWS\system32\wisptis.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Microsoft Shared\Ink\tabtip.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Microsoft Shared\Ink\tcserver.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Microsoft Shared\Ink\keyboardsurrogate.exe (Microsoft Corporation) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited) PRC - c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_tray.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe (IBM) PRC - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe (Lenovo Group Limited) PRC - C:\Program Files\National Instruments\NI-DAQ\HWConfig\nidevmon.exe (National Instruments Corporation) PRC - C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe (Lenovo Group Limited) PRC - C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe () PRC - C:\Program Files\Common Files\Lenovo\Logger\logmon.exe () PRC - C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation) PRC - C:\Program Files\Symantec AntiVirus\SavRoam.exe (symantec) PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation) PRC - C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation) PRC - C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe () PRC - C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited) PRC - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation) PRC - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation) PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) PRC - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) PRC - C:\WINDOWS\system32\TpKmpSvc.exe () PRC - C:\WINDOWS\system32\tabbtnu.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Documents and Settings\nzahirov\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\wtsapi32.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\winsta.dll (Microsoft Corporation) MOD - C:\Program Files\Common Files\Microsoft Shared\Ink\tiptsf.dll (Microsoft Corporation) MOD - C:\Program Files\Common Files\Microsoft Shared\Ink\tipcomponentsps.dll (Microsoft Corporation) MOD - C:\WINDOWS\ime\sptip.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\msvcp60.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\msctfp.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) MOD - C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) MOD - C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) MOD - C:\WINDOWS\ime\spgrmr.dll (Microsoft Corporation) MOD - C:\Program Files\Lenovo\HOTKEY\HKVOLKEY.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_windows_hook.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_keyboard_hook.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\tvt_passwordmanager.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\css_dlgcustompolicy.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\css_banner.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\css_think_res.dll (Lenovo Group Limited) MOD - C:\Program Files\Lenovo\Client Security Solution\csswait.dll (Lenovo Group Limited) MOD - C:\WINDOWS\system32\cssuserdatadispatcher.dll (Lenovo Group Limited) MOD - C:\WINDOWS\system32\tcsrpc.dll (Lenovo) MOD - C:\WINDOWS\system32\tvttsp.dll (Lenovo) MOD - C:\Program Files\Common Files\Lenovo\tvt_think_res.dll (Lenovo Group Limited) MOD - C:\Program Files\Windows Journal\nbmaptip.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (nimDNSResponder) -- C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation) SRV - (niLXIDiscovery) -- C:\VXIPNP\WinNT\NIvisa\niLxiDiscovery.exe (National Instruments Corporation) SRV - (niSvcLoc) -- C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation) SRV - (NIApplicationWebServer) -- C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation) SRV - (mxssvr) -- C:\Program Files\National Instruments\MAX\nimxs.exe (National Instruments Corporation) SRV - (NITaggerService) -- C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe (National Instruments Corporation) SRV - (NIDomainService) -- C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation) SRV - (lkTimeSync) -- C:\WINDOWS\system32\lktsrv.exe (National Instruments Corporation) SRV - (lkClassAds) -- C:\WINDOWS\system32\lkads.exe (National Instruments Corporation) SRV - (nlsX86cc) -- C:\WINDOWS\system32\NLSSRV32.EXE (Nalpeiron Ltd.) SRV - (NILM License Manager) -- C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe (Macrovision Corporation) SRV - (nipxirmu) -- C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) SRV - (nidevldu) -- C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) SRV - (ni488enumsvc) -- C:\WINDOWS\system32\nipalsm.exe (National Instruments Corporation) SRV - (LkCitadelServer) -- C:\WINDOWS\system32\lkcitdl.exe (National Instruments, Inc.) SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.) SRV - (LiveUpdate) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation) SRV - (Power Manager DBC Service) -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe () SRV - (VMware NAT Service) -- C:\WINDOWS\system32\vmnat.exe (VMware, Inc.) SRV - (VMAuthdService) -- C:\Program Files\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) SRV - (VMnetDHCP) -- C:\WINDOWS\system32\vmnetdhcp.exe (VMware, Inc.) SRV - (VMUSBArbService) -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.) SRV - (ufad-ws60) -- C:\Program Files\VMware\VMware Player\vmware-ufad.exe (VMware, Inc.) SRV - (DynDNS Updater) -- C:\Program Files\DynDNS Updater\DynUpSvc.exe (Dynamic Network Services, Inc.) SRV - (EvtEng) Intel® -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation) SRV - (S24EventMonitor) Intel® -- C:\Program Files\Intel\WiFi\bin\S24EvMon.exe (Intel® Corporation) SRV - (RegSrvc) Intel® -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) SRV - (getPlusHelper) getPlus® -- C:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.) SRV - (IBMPMSVC) -- C:\WINDOWS\system32\ibmpmsvc.exe (Lenovo) SRV - (ASRSVC) -- C:\Program Files\ThinkPad\Tablet Shortcut\ASR\ASRSVC.exe (Lenovo Group Limited) SRV - (TabletSVC) -- C:\Program Files\ThinkPad\Tablet Shortcut\TSMService.exe (Lenovo Group Limited) SRV - (TPHKSVC) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Lenovo Group Limited) SRV - (SolidWorks Licensing Service) -- C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe (SolidWorks) SRV - (LENOVO.MICMUTE) -- C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) SRV - (TPHDEXLGSVC) -- C:\WINDOWS\system32\TPHDEXLG.exe (Lenovo.) SRV - (SUService) -- c:\Program Files\Lenovo\System Update\SUService.exe (Lenovo Group Limited) SRV - (OpcEnum) -- C:\WINDOWS\system32\Opcenum.exe (OPC Foundation) SRV - (btwdins) -- C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation.) SRV - (CoventorWare Architect License Service) -- C:\Coventor\CoventorWare2008\\licensing\NT40\lmgrd.fnet.exe () SRV - (CoventorWare Microfluidics Solvers License Service) -- C:\Coventor\CoventorWare2008\\licensing\NT40\lmgrd.exe () SRV - (CoventorWare License Service) -- C:\Coventor\CoventorWare2008\\licensing\NT40\lmgrd.exe () SRV - (TVT Scheduler) -- c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited) SRV - (TSSCoreService) -- C:\Program Files\Lenovo\Client Security Solution\tvttcsd.exe (IBM) SRV - (ThinkVantage Registry Monitor Service) -- C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe (Lenovo Group Limited) SRV - (NiRioRpc) -- C:\WINDOWS\system32\NiRioRpc.exe (National Instruments Corporation) SRV - (TVT Backup Service) -- C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe (Lenovo Group Limited) SRV - (TVT Backup Protection Service) -- C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe () SRV - (SavRoam) -- C:\Program Files\Symantec AntiVirus\SavRoam.exe (symantec) SRV - (Symantec AntiVirus) -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation) SRV - (DefWatch) -- C:\Program Files\Symantec AntiVirus\DefWatch.exe (Symantec Corporation) SRV - (SNDSrvc) -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation) SRV - (tvtnetwk) -- C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe () SRV - (IPSSVC) -- C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited) SRV - (SPBBCSvc) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe (Symantec Corporation) SRV - (ccSetMgr) -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (Symantec Corporation) SRV - (ccEvtMgr) -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (Symantec Corporation) SRV - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) SRV - (TpKmpSVC) -- C:\WINDOWS\system32\TpKmpSvc.exe () SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation) SRV - (WMConnectCDS) -- C:\Program Files\Windows Media Connect 2\wmccds.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (usb6xxxk) -- C:\WINDOWS\System32\drivers\usb6xxxkl.sys File not found DRV - (UIUSys) -- C:\WINDOWS\System32\DRIVERS\UIUSYS.SYS File not found DRV - (RimUsb) -- C:\WINDOWS\System32\Drivers\RimUsb.sys File not found DRV - (PCASp50) -- C:\WINDOWS\System32\Drivers\PCASp50.sys File not found DRV - (NIUSBTMC) -- C:\WINDOWS\System32\DRIVERS\NIUSBTMC.sys File not found DRV - (khqlmxop) -- C:\WINDOWS\System32\drivers\oopuhnpkpjv.sys File not found DRV - (catchme) -- C:\ComboFix\catchme.sys File not found DRV - (bwsao) -- C:\WINDOWS\System32\drivers\amuil.sys File not found DRV - (NAVEX15) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20100930.004\NAVEX15.SYS (Symantec Corporation) DRV - (NAVENG) -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20100930.004\NAVENG.SYS (Symantec Corporation) DRV - (NiViPxiK) -- C:\WINDOWS\system32\drivers\NiViPxiKl.sys (National Instruments Corporation) DRV - (NiViPciK) -- C:\WINDOWS\system32\drivers\NiViPciKl.sys (National Instruments Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (nipalusbedl) -- C:\WINDOWS\system32\drivers\nipalusbedl.sys (National Instruments Corporation) DRV - (NIPALK) -- C:\WINDOWS\System32\drivers\nipalk.sys (National Instruments Corporation) DRV - (nipalfwedl) -- C:\WINDOWS\system32\drivers\nipalfwedl.sys (National Instruments Corporation) DRV - (eeCtrl) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation) DRV - (Usbtmc) -- C:\WINDOWS\system32\drivers\ausbtmc.sys (IVI Foundation) DRV - (FTDIBUS) -- C:\WINDOWS\system32\drivers\ftdibus.sys (FTDI Ltd.) DRV - (AlteraUSBBlaster) -- C:\WINDOWS\system32\drivers\ftdibus.sys (FTDI Ltd.) DRV - (nipbcfk) -- C:\WINDOWS\System32\drivers\nipbcfk.sys (National Instruments Corporation) DRV - (nimdbgk) -- C:\WINDOWS\system32\drivers\nimdbgkl.sys (National Instruments Corporation) DRV - (TPPWRIF) -- C:\WINDOWS\system32\drivers\TPPWRIF.SYS () DRV - (VMnetBridge) -- C:\WINDOWS\system32\drivers\vmnetbridge.sys (VMware, Inc.) DRV - (vmx86) -- C:\WINDOWS\system32\drivers\vmx86.sys (VMware, Inc.) DRV - (vmci) -- C:\WINDOWS\system32\drivers\vmci.sys (VMware, Inc.) DRV - (vmkbd) -- C:\WINDOWS\system32\drivers\VMkbd.sys (VMware, Inc.) DRV - (VMnetuserif) -- C:\WINDOWS\system32\drivers\vmnetuserif.sys (VMware, Inc.) DRV - (hcmon) -- C:\WINDOWS\system32\drivers\hcmon.sys (VMware, Inc.) DRV - (VMnetAdapter) -- C:\WINDOWS\system32\drivers\vmnetadapter.sys (VMware, Inc.) DRV - (vstor2-ws60) -- C:\Program Files\VMware\VMware Player\vstor2-ws60.sys (VMware, Inc.) DRV - (pbfilter) -- C:\Program Files\PeerBlock\pbfilter.sys () DRV - (NETw5x32) Intel® -- C:\WINDOWS\system32\drivers\NETw5x32.sys (Intel Corporation) DRV - (IBMPMDRV) -- C:\WINDOWS\system32\drivers\ibmpmdrv.sys (Lenovo.) DRV - (tvtfilter) -- C:\WINDOWS\system32\drivers\tvtfilter.sys (Lenovo) DRV - (TSMSMI) -- C:\WINDOWS\system32\drivers\tsmsmi32.sys (Lenovo Group Limited) DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation) DRV - (cvintdrv) -- C:\WINDOWS\System32\drivers\cvintdrv.sys () DRV - (TSMAPIP) -- C:\WINDOWS\system32\drivers\TSMAPIP.SYS () DRV - (nimxdfk) -- C:\WINDOWS\system32\drivers\nimxdfkl.sys (National Instruments Corporation) DRV - (nidimk) -- C:\WINDOWS\system32\drivers\nidimkl.sys (National Instruments Corporation) DRV - (nipxirmk) -- C:\WINDOWS\system32\drivers\nipxirmkl.sys (National Instruments Corporation) DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.) DRV - (Ser2pl) -- C:\WINDOWS\system32\drivers\ser2pl.sys (Prolific Technology Inc.) DRV - (Shockprf) -- C:\WINDOWS\System32\DRIVERS\Apsx86.sys (Lenovo.) DRV - (TPDIGIMN) -- C:\WINDOWS\System32\DRIVERS\ApsHM86.sys (Lenovo.) DRV - (Tp4Track) -- C:\WINDOWS\system32\drivers\tp4track.sys (Lenovo Group Limited) DRV - (e1express) Intel® -- C:\WINDOWS\system32\drivers\e1e5132.sys (Intel Corporation) DRV - (ni1045k) -- C:\WINDOWS\system32\drivers\ni1045kl.sys (National Instruments Corporation) DRV - (niorbk) -- C:\WINDOWS\system32\drivers\niorbkl.sys (National Instruments Corporation) DRV - (ni1065k) -- C:\WINDOWS\system32\drivers\ni1065k.sys (National Instruments Corporation) DRV - (ni1006k) -- C:\WINDOWS\system32\drivers\ni1006k.sys (National Instruments Corporation) DRV - (SCDEmu) -- C:\WINDOWS\System32\drivers\scdemu.sys (PowerISO Computing, Inc.) DRV - (ialm) -- C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation) DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.) DRV - (btwhid) -- C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.) DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.) DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.) DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.) DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.) DRV - (iaStor) -- C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation) DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated) DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated) DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated) DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (ZTE Incorporated) DRV - (SymEvent) -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation) DRV - (nipxigpk) -- C:\WINDOWS\system32\drivers\nipxigpk.sys (National Instruments Corporation) DRV - (pmem) -- C:\WINDOWS\system32\drivers\pmemnt.sys (Microsoft Corporation) DRV - (TPHKDRV) -- C:\WINDOWS\system32\drivers\TPHKDRV.sys (Lenovo Group Limited) DRV - (ADIHdAudAddService) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys (Analog Devices, Inc.) DRV - (61883) -- C:\WINDOWS\system32\drivers\61883.sys (Microsoft Corporation) DRV - (Avc) -- C:\WINDOWS\system32\drivers\avc.sys (Microsoft Corporation) DRV - (MSDV) -- C:\WINDOWS\system32\drivers\msdv.sys (Microsoft Corporation) DRV - (usbaudio) USB Audio Driver (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation) DRV - (amdagp) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.) DRV - (sisagp) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows ® Server 2003 DDK provider) DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.) DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.) DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.) DRV - (nihsdrk) -- C:\WINDOWS\system32\drivers\nihsdrkl.sys (National Instruments Corporation) DRV - (nixsrk) -- C:\WINDOWS\system32\drivers\nixsrkl.sys (National Instruments Corporation) DRV - (niwfrk) -- C:\WINDOWS\system32\drivers\niwfrkl.sys (National Instruments Corporation) DRV - (nissrk) -- C:\WINDOWS\system32\drivers\nissrkl.sys (National Instruments Corporation) DRV - (niesrk) -- C:\WINDOWS\system32\drivers\niesrkl.sys (National Instruments Corporation) DRV - (niemrkw) -- C:\WINDOWS\system32\drivers\niemrkw.sys (National Instruments Corporation) DRV - (niemrk) -- C:\WINDOWS\system32\drivers\niemrkl.sys (National Instruments Corporation) DRV - (nipsdk) -- C:\WINDOWS\system32\drivers\nipsdkl.sys (National Instruments Corporation) DRV - (nimru2k) -- C:\WINDOWS\system32\drivers\nimru2kl.sys (National Instruments Corporation) DRV - (ninshsdk) -- C:\WINDOWS\system32\drivers\ninshsdkl.sys (National Instruments Corporation) DRV - (nidsark) -- C:\WINDOWS\system32\drivers\nidsarkl.sys (National Instruments Corporation) DRV - (niscdk) -- C:\WINDOWS\system32\drivers\niscdkl.sys (National Instruments Corporation) DRV - (nispdk) -- C:\WINDOWS\system32\drivers\nispdkl.sys (National Instruments Corporation) DRV - (nitiork) -- C:\WINDOWS\system32\drivers\nitiorkl.sys (National Instruments Corporation) DRV - (nimsdrk) -- C:\WINDOWS\system32\drivers\nimsdrkl.sys (National Instruments Corporation) DRV - (niswdk) -- C:\WINDOWS\system32\drivers\niswdkl.sys (National Instruments Corporation) DRV - (nisdigk) -- C:\WINDOWS\system32\drivers\nisdigkl.sys (National Instruments Corporation) DRV - (usb6xxxkw) -- C:\WINDOWS\system32\drivers\usb6xxxkw.sys (National Instruments Corporation) DRV - (nisftk) -- C:\WINDOWS\system32\drivers\nisftkl.sys (National Instruments Corporation) DRV - (nifslk) -- C:\WINDOWS\system32\drivers\nifslkl.sys (National Instruments Corporation) DRV - (nistcrk) -- C:\WINDOWS\system32\drivers\nistcrkl.sys (National Instruments Corporation) DRV - (nicdrk) -- C:\WINDOWS\system32\drivers\nicdrkl.sys (National Instruments Corporation) DRV - (nistc2k) -- C:\WINDOWS\system32\drivers\nistc2kl.sys (National Instruments Corporation) DRV - (nidmxfk) -- C:\WINDOWS\system32\drivers\nidmxfkl.sys (National Instruments Corporation) DRV - (nimxpk) -- C:\WINDOWS\system32\drivers\nimxpkl.sys (National Instruments Corporation) DRV - (nimstsk) -- C:\WINDOWS\system32\drivers\nimstskl.sys (National Instruments Corporation) DRV - (nirfsa2k) -- C:\WINDOWS\system32\drivers\niRFSA2kl.sys (National Instruments Corporation) DRV - (nimsrlk) -- C:\WINDOWS\system32\drivers\nimsrlk.dll (National Instruments Corporation) DRV - (nimslk) -- C:\WINDOWS\system32\drivers\nimslk.dll (National Instruments Corporation) DRV - (nisldk) -- C:\WINDOWS\system32\drivers\nisldkl.sys (National Instruments Corporation) DRV - (nisrcdk) -- C:\WINDOWS\system32\drivers\nisrcdkl.sys (National Instruments Corporation) DRV - (TVTI2C) -- C:\WINDOWS\system32\drivers\tvti2c.sys (Lenovo (United States) Inc.) DRV - (psadd) -- C:\WINDOWS\system32\drivers\psadd.sys (Lenovo (United States) Inc.) DRV - (NETw4x32) Intel® -- C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation) DRV - (nidmmk) -- C:\WINDOWS\system32\drivers\nidmmk.dll (National Instruments Corporation) DRV - (Nidaq32k) -- C:\WINDOWS\System32\drivers\nidaq32k.sys (National Instruments Corporation) DRV - (nistck) -- C:\WINDOWS\system32\drivers\niSTCk.dll (National Instruments Corporation) DRV - (nimdsk) -- C:\WINDOWS\system32\drivers\nimdsk.dll (National Instruments Corporation) DRV - (nibffrk) -- C:\WINDOWS\system32\drivers\nibffrk.dll (National Instruments Corporation) DRV - (niarbk) -- C:\WINDOWS\system32\drivers\niarbk.dll (National Instruments Corporation) DRV - (smihlp) SMI Helper Driver (smihlp) -- C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys (UPEK Inc.) DRV - (TcUsb) -- C:\WINDOWS\system32\drivers\tcusb.sys (UPEK Inc.) DRV - (gpibprtk) -- C:\WINDOWS\system32\drivers\gpibprtk.sys (National Instruments Corporation) DRV - (ni488lock) -- C:\WINDOWS\system32\drivers\ni488lock.sys (National Instruments Corporation) DRV - (nitnr2k) -- C:\WINDOWS\system32\drivers\nitnr2kl.sys (National Instruments Corporation) DRV - (nidwgk) -- C:\WINDOWS\system32\drivers\nidwgkl.sys (National Instruments Corporation) DRV - (nigplk) -- C:\WINDOWS\system32\drivers\nigplkl.sys (National Instruments Corporation) DRV - (SYMTDI) -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation) DRV - (SYMREDRV) -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation) DRV - (TVTPktFilter) -- C:\WINDOWS\system32\drivers\tvtpktfilter.sys (Lenovo Group Limited) DRV - (lvalarmk) -- C:\WINDOWS\system32\drivers\lvalarmk.sys (National Instruments Corporation) DRV - (SPBBCDrv) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation) DRV - (PROCDD) -- C:\WINDOWS\system32\drivers\PROCDD.SYS (Lenovo Group Limited) DRV - (Sntnlusb) -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS (Rainbow Technologies Inc.) DRV - (Sentinel) -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS (Rainbow Technologies, Inc.) DRV - (SAVRT) -- C:\Program Files\Symantec AntiVirus\savrt.sys (Symantec Corporation) DRV - (SAVRTPEL) -- C:\Program Files\Symantec AntiVirus\Savrtpel.sys (Symantec Corporation) DRV - (HBtnKey) -- C:\WINDOWS\system32\drivers\tkbtnpn.sys (Lenovo) DRV - (atmeltpm) -- C:\WINDOWS\system32\drivers\atmeltpm.sys (Atmel, Inc.) DRV - (Hardlock) -- C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.) DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation) DRV - (DgiVecp) -- C:\WINDOWS\system32\drivers\DGIVECP.SYS (DeviceGuys, Inc.) DRV - (DS1410D) -- C:\WINDOWS\system32\drivers\DS1410d.SYS (Dallas Semiconductor MAXIM) DRV - (SIF32X) -- C:\WINDOWS\system32\drivers\SiF32x.sys (Silicon Laboratories) DRV - (Sparrow) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.) DRV - (sym_u3) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic) DRV - (sym_hi) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic) DRV - (symc8xx) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic) DRV - (symc810) -- C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.) DRV - (ultra) -- C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.) DRV - (ql12160) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation) DRV - (ql1080) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation) DRV - (ql1280) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation) DRV - (dac2w2k) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation) DRV - (mraid35x) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.) DRV - (asc) -- C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.) DRV - (asc3550) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.) DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.) DRV - (CmdIde) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.) DRV - (TwoTrack) -- C:\WINDOWS\system32\drivers\TwoTrack.sys (IBM Corporation) DRV - (ac97intc) Intel® 82801 Audio Driver Install Service (WDM) -- C:\WINDOWS\system32\drivers\ac97intc.sys (Intel Corporation) ========== Standard Registry (All) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2 FF - prefs.js..extensions.enabledItems: {CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}:1.5.2.35 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1 FF - prefs.js..extensions.enabledItems: npminuwet@uwaterloo.ca:2.0.0.1 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.9 FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/08/17 10:21:06 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2008/12/07 19:12:16 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/05/28 03:32:44 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.9\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/09/28 21:13:14 | 000,000,000 | ---D | M] [2008/08/27 19:33:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Extensions [2008/08/27 19:33:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2010/09/30 08:17:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions [2009/08/18 09:28:57 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009/03/14 23:10:24 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus®)) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7} [2010/05/11 09:03:55 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009/09/13 06:43:30 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus®)) -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2009/07/13 09:32:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\nzahirov\Application Data\Mozilla\Firefox\Profiles\mb4v5p2v.default\extensions\npminuwet@uwaterloo.ca [2010/09/30 08:17:30 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2010/05/28 03:32:44 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2008/09/08 20:26:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} [2008/10/26 17:33:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [2008/12/07 19:12:38 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} [2009/11/08 11:04:48 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} [2010/05/28 03:32:39 | 000,023,512 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll [2010/05/28 03:32:39 | 000,137,176 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll [2010/02/04 21:35:19 | 000,027,960 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\atgpcdec.dll [2010/02/04 21:35:20 | 000,126,344 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\atgpcext.dll [2009/08/06 10:57:58 | 000,046,408 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\atmccli.dll [2010/02/04 21:35:29 | 000,098,696 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\ieatgpc.dll [2009/05/01 17:02:48 | 001,044,480 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\Mozilla Firefox\plugins\libdivx.dll [2009/08/06 10:57:12 | 000,061,840 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\npatgpc.dll [2009/10/11 05:17:27 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll [2008/09/15 20:11:52 | 001,335,600 | ---- | M] (DivX,Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll [2008/09/15 20:12:12 | 000,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll [2010/06/25 13:57:18 | 000,025,088 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv2010win32.dll [2006/01/23 10:32:04 | 000,020,992 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\NPLV80Win32.dll [2007/02/08 10:48:16 | 000,028,448 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\NPLV82Win32.dll [2007/07/24 19:03:42 | 000,023,040 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv85win32.dll [2008/12/10 14:49:34 | 000,023,040 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv86win32.dll [2010/05/25 12:43:16 | 000,025,088 | ---- | M] (National Instruments) -- C:\Program Files\Mozilla Firefox\plugins\nplv90win32.dll [2010/05/28 03:32:41 | 000,064,984 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll [2009/12/21 19:34:06 | 000,103,864 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll [2009/09/09 22:07:41 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll [2009/09/03 11:53:00 | 000,030,912 | ---- | M] (NOS Microsystems Ltd.) -- C:\Program Files\Mozilla Firefox\plugins\np_gp.dll [2009/05/01 17:02:48 | 000,200,704 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\Mozilla Firefox\plugins\ssldivx.dll [2010/03/09 00:34:02 | 000,001,394 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom.xml [2010/03/09 00:34:03 | 000,002,193 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\answers.xml [2010/03/09 00:34:03 | 000,001,534 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\creativecommons.xml [2010/03/09 00:34:03 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay.xml [2010/03/09 00:34:03 | 000,002,371 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml [2010/03/09 00:34:03 | 000,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia.xml [2010/03/09 00:34:03 | 000,000,792 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo.xml O1 HOSTS File: ([2010/09/30 15:07:23 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKCU\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [bLOG] C:\Program Files\ThinkPad\Utilities\BATLOGEX.DLL () O4 - HKLM..\Run: [cssauth] C:\Program Files\Lenovo\Client Security Solution\cssauth.exe (Lenovo Group Limited) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation) O4 - HKLM..\Run: [installValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707] C:\Program Files\National Instruments\Shared\NIUninstaller\InstallValidator.exe () O4 - HKLM..\Run: [LENOVO.TPFNF6R] C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe (Lenovo Group Limited) O4 - HKLM..\Run: [LENTBCTL] C:\Program Files\ThinkPad\Tablet Shortcut\LENTBCTL.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [LPMailChecker] C:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [LPManager] C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [NI Background Service] C:\Program Files\National Instruments\Shared\Update Service\niupdate.exe (National Instruments) O4 - HKLM..\Run: [niDevMon] C:\Program Files\National Instruments\NI-DAQ\HWConfig\nidevmon.exe (National Instruments Corporation) O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation) O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) O4 - HKLM..\Run: [PWRMGRTR] C:\Program Files\ThinkPad\Utilities\PWRMGRTR.DLL (Lenovo Group Limited) O4 - HKLM..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [TabletButton] C:\Program Files\ThinkPad\Tablet Shortcut\TabletButton.EXE (Lenovo Group Limited ) O4 - HKLM..\Run: [TabletTip] C:\Program Files\Common Files\microsoft shared\ink\tabtip.exe (Microsoft Corporation) O4 - HKLM..\Run: [TPFNF7] C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe (Lenovo) O4 - HKLM..\Run: [TpShocks] C:\WINDOWS\System32\TpShocks.exe (Lenovo.) O4 - HKLM..\Run: [TrackPointSrv] C:\Program Files\Lenovo\TrackPoint\tp4serv.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TSMResident] C:\Program Files\ThinkPad\Tablet Shortcut\TSMRESIDENT.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited) O4 - HKLM..\Run: [VMware hqtray] C:\Program Files\VMware\VMware Player\hqtray.exe (VMware, Inc.) O4 - HKLM..\Run: [vptray] C:\PROGRA~1\SYMANT~1\\vptray.exe () O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation) O4 - HKCU..\Run: [Google Update] C:\Documents and Settings\nzahirov\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (Google Inc.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\DynDNS Updater Tray Icon.lnk = C:\Program Files\DynDNS Updater\DynTray.exe (Dynamic Network Services, Inc.) O4 - Startup: C:\Documents and Settings\nzahirov\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll (National Instruments Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Program Files\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O16 - DPF: {20C2C286-BDE8-441B-B73D-AFA22D914DA5} http://download.ppstream.com/bin/powerplayer.cab (PowerList Control) O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2...78f/wvc1dmo.cab (Reg Error: Key error.) O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/as...abs/tgctlsr.cab (Symantec Script Runner Class) O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.3.7.cab (DLM Control) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd...b?1211688977287 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 129.97.2.1 129.97.129.10 129.97.2.2 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\OrCAD\OrCAD_10.5\tools\capture\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\OrCAD\OrCAD_10.5\tools\capture\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\WINDOWS\system32\acaptuser32.dll) - C:\WINDOWS\system32\acaptuser32.dll (Adobe Systems, Inc.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation) O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation) O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation) O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation) O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation) O20 - Winlogon\Notify\loginkey: DllName - C:\Program Files\Common Files\Microsoft Shared\Ink\loginkey.dll - C:\Program Files\Common Files\Microsoft Shared\Ink\loginkey.dll (Microsoft Corporation) O20 - Winlogon\Notify\NavLogon: DllName - C:\WINDOWS\system32\NavLogon.dll - C:\WINDOWS\system32\NavLogon.dll (Symantec Corporation) O20 - Winlogon\Notify\psfus: DllName - C:\WINDOWS\system32\psqlpwd.dll - C:\WINDOWS\system32\psqlpwd.dll (UPEK Inc.) O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\TabBtnWL: DllName - TabBtnWL.dll - C:\WINDOWS\System32\tabbtnwl.dll (Microsoft Corporation) O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\tpfnf2: DllName - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll () O20 - Winlogon\Notify\tpgwlnotify: DllName - tpgwlnot.dll - C:\WINDOWS\System32\tpgwlnot.dll (Microsoft Corporation) O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O24 - Desktop Components:0 (My Current Home Page) - About:Home O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/04/30 19:14:37 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKCU\...com [@ = ComFile] -- Reg Error: Key error. File not found O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found NetSvcs: 6to4 - File not found NetSvcs: Ias - File not found NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.