New Trojan infected PC, cant remove despite all efforts

[azygos]

I am running Win 7 Ultimate 64 Bit. Other OSs on my system are Win XP SP3 and Ubuntu 10.02

I most likely infected windows 7 with this file here around 15 days back. I was using ESET Smart Security 64 bit updated, and Malwarebytes Free Version both of which had erroneously reported the file as clean.

http://www.virustotal.com/analisis/d1c008e...a230-1277733577

http://virscan.org/report/253011f2168eebe2...ce9b2e561d.html

I was blissfully aware of the infection until a few days when I observed hectic activity when system was idle [monitor power off] which made me suspicious. On a hunch, I opened task scheduler, and found several rogue processes namely at1, at2, at3, at4, etc which were all executing a file dssknt.exe [see attached zip. Password: virus123 and screenshot task.png] The file dssknt.exe is always created in the app\local\temp folder

I ran full system scan with ESS 64 which again found nothing.

I ran Malwarebytes. It found something called virus.agent in file dssknt.exe and it asked me to reboot to kill the infection which I did.

A google search of dssknt.exe also led me to this....http://www.threatexpert.com/report.aspx?md5=95ffe78fa1582a6f00514178011f8102 Malwarebytes only deleted the file but it didnt seem to have cleaned any registry entries or processes.

Sure enough, the file and the processes in task scheduler which I had deleted returned within 12 hours. I uninstalled ESS and installed G-Data internet security 2011. Through its boot CD, i scanned the system, and it found Trojan.Generic.4078397 in firefox cache and killed it. But virus/trojan, the file dssknt.exe and the rogue processes in task scheduler were back within few hours.

GMER gives me a blank log and doesn't seem to like Windows 7 64. I am attaching OTL and Malwarebytes logs along. Hope you can provide some help as I am totally exasperated by the dreadful nature of this infection

dssknt.zip

OTL.Txt

[azygos]

OTL logfile created on: 7/5/2010 11:50:58 AM - Run 4

OTL by OldTimer - Version 3.2.7.1 Folder = C:\Download

64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.7600.16385)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 40.00% Memory free

7.00 Gb Paging File | 5.00 Gb Available in Paging File | 73.00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 70.22 Gb Total Space | 36.12 Gb Free Space | 51.43% Space Free | Partition Type: NTFS

Drive D: | 154.23 Gb Total Space | 107.27 Gb Free Space | 69.55% Space Free | Partition Type: NTFS

Drive E: | 97.65 Gb Total Space | 2.70 Gb Free Space | 2.76% Space Free | Partition Type: NTFS

Drive F: | 195.31 Gb Total Space | 9.13 Gb Free Space | 4.67% Space Free | Partition Type: NTFS

Drive G: | 195.31 Gb Total Space | 7.15 Gb Free Space | 3.66% Space Free | Partition Type: NTFS

Drive H: | 195.31 Gb Total Space | 5.70 Gb Free Space | 2.92% Space Free | Partition Type: NTFS

Drive I: | 48.83 Gb Total Space | 3.06 Gb Free Space | 6.26% Space Free | Partition Type: NTFS

Drive J: | 146.48 Gb Total Space | 3.45 Gb Free Space | 2.35% Space Free | Partition Type: NTFS

Drive M: | 214.21 Gb Total Space | 21.00 Gb Free Space | 9.80% Space Free | Partition Type: NTFS

Drive O: | 52.62 Gb Total Space | 0.75 Gb Free Space | 1.43% Space Free | Partition Type: NTFS

Computer Name: PC-2010

Current User Name: Saurav

Logged in as Administrator.

Current Boot Mode: Normal

Scan Mode: All users

Include 64bit Scans

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/07/05 11:49:43 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Download\OTL.exe

PRC - [2010/06/28 02:06:32 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

PRC - [2010/06/10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

PRC - [2010/04/22 13:59:36 | 000,339,016 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe

PRC - [2010/04/13 17:17:44 | 000,961,096 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe

PRC - [2010/04/12 16:31:06 | 001,498,696 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe

PRC - [2010/04/12 16:31:00 | 001,069,640 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe

PRC - [2010/04/12 16:31:00 | 000,410,696 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe

PRC - [2010/04/01 14:46:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

PRC - [2009/01/06 23:25:02 | 000,689,464 | ---- | M] (American Power Conversion Corporation) -- C:\Program Files (x86)\APC\APC PowerChute Personal Edition\mainserv.exe

PRC - [2009/01/06 23:24:54 | 000,656,696 | ---- | M] (American Power Conversion Corporation) -- C:\Program Files (x86)\APC\APC PowerChute Personal Edition\apcsystray.exe

========== Modules (SafeList) ==========

MOD - [2010/07/05 11:49:43 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Download\OTL.exe

MOD - [2009/07/14 06:44:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx

MOD - [2009/07/14 06:33:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/03/03 09:42:12 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2009/07/14 07:11:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)

SRV:64bit: - [2009/07/14 07:11:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)

SRV:64bit: - [2009/07/14 07:11:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:64bit: - [2009/07/14 07:10:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)

SRV:64bit: - [2009/07/14 07:10:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2010/06/10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2010/04/22 13:59:36 | 000,339,016 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe -- (GDScan)

SRV - [2010/04/19 17:15:04 | 000,262,376 | ---- | M] (Systweak Inc., (www.systweak.com)) [Auto | Running] -- C:\Program Files (x86)\Advanced System Optimizer 3\ASO3DefragSrv64.exe -- (ASO3DiskOptimizer)

SRV - [2010/04/16 05:08:54 | 001,666,096 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe -- (GDFwSvc)

SRV - [2010/04/12 16:31:00 | 001,069,640 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe -- (AVKProxy)

SRV - [2010/04/12 16:31:00 | 000,410,696 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe -- (AVKService)

SRV - [2010/03/18 17:23:04 | 000,044,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe -- (aspnet_state)

SRV - [2010/03/18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)

SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010/03/15 11:23:40 | 001,778,336 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe -- (AVKWCtl)

SRV - [2009/01/06 23:25:02 | 000,689,464 | ---- | M] (American Power Conversion Corporation) [Auto | Running] -- C:\Program Files (x86)\APC\APC PowerChute Personal Edition\mainserv.exe -- (APC UPS Service)

========== Driver Services (SafeList) ==========

DRV:64bit: - File not found [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pxscan.sys -- (pxscan)

DRV:64bit: - File not found [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\pxrts.sys -- (pxrts)

DRV:64bit: - File not found [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pxkbf.sys -- (pxkbf)

DRV:64bit: - File not found [File_System | Auto | Stopped] -- C:\Windows\SysNative\DRIVERS\eamonm.sys -- (eamonm)

DRV:64bit: - [2010/06/29 09:33:33 | 000,106,224 | ---- | M] (G Data Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GRD.sys -- (GRD)

DRV:64bit: - [2010/06/29 09:06:03 | 000,057,288 | ---- | M] (G DATA Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PktIcpt.sys -- (GDPkIcpt)

DRV:64bit: - [2010/06/29 09:06:03 | 000,040,392 | ---- | M] (G Data Software AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\GDBehave.sys -- (GDBehave)

DRV:64bit: - [2010/06/29 09:05:59 | 000,049,096 | ---- | M] (G Data Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HookCentre.sys -- (HookCentre)

DRV:64bit: - [2010/06/29 09:05:42 | 000,084,936 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\MiniIcpt.sys -- (GDMnIcpt)

DRV:64bit: - [2010/06/29 09:05:41 | 000,048,584 | ---- | M] (G DATA Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gdwfpcd64.sys -- (gdwfpcd)

DRV:64bit: - [2010/06/02 02:36:45 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)

DRV:64bit: - [2010/05/11 12:00:40 | 000,020,968 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz133_x64.sys -- (cpuz133)

DRV:64bit: - [2010/04/16 21:24:34 | 000,027,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (USB)

DRV:64bit: - [2010/03/03 09:53:10 | 006,402,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)

DRV:64bit: - [2010/03/03 09:53:10 | 006,402,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)

DRV:64bit: - [2010/03/03 08:37:32 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2009/12/30 12:21:24 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)

DRV:64bit: - [2009/09/28 02:02:38 | 000,019,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\PeerBlock\pbfilter.sys -- (pbfilter)

DRV:64bit: - [2009/09/23 07:16:18 | 000,066,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)

DRV:64bit: - [2009/09/23 07:16:17 | 000,359,552 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)

DRV:64bit: - [2009/09/23 07:02:39 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)

DRV:64bit: - [2009/09/23 07:02:33 | 000,187,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)

DRV:64bit: - [2009/08/20 21:35:06 | 000,239,616 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2009/07/18 00:22:00 | 000,201,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)

DRV:64bit: - [2009/07/14 07:22:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2009/07/14 07:22:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2009/07/14 07:22:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009/07/14 07:18:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009/07/14 07:17:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2009/07/14 07:15:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)

DRV:64bit: - [2009/07/14 07:15:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)

DRV:64bit: - [2009/07/14 07:15:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)

DRV:64bit: - [2009/07/14 07:15:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009/07/14 05:12:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)

DRV:64bit: - [2009/07/14 05:12:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)

DRV:64bit: - [2009/07/14 04:54:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)

DRV:64bit: - [2009/06/11 02:08:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)

DRV:64bit: - [2009/06/11 02:04:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009/06/11 02:04:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009/06/11 02:04:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009/06/11 02:01:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009/05/09 01:14:20 | 000,015,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr)

DRV:64bit: - [2009/05/04 22:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO)

DRV:64bit: - [2009/04/03 06:39:58 | 000,034,872 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:64bit: - [2008/02/22 18:54:00 | 000,019,496 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GearAspiWDM)

DRV - [2010/03/13 12:58:52 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/06/21 15:59:36] [Kernel | Auto | Running] -- C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl -- ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/

IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us

IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BA C5 0B C6 9C 07 CB 01 [binary data]

IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.1.27

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - prefs.js..extensions.enabledItems: {5384767E-00D9-40E9-B72F-9CC39D655D6F}:1.2.9.1

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2

FF - prefs.js..extensions.enabledItems: {a7c6cf7f-112c-4500-a7ea-39801a327e5f}:1.0.9

FF - prefs.js..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170633FE}:20.1.0.4

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/06/28 02:06:33 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/06/28 02:06:33 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

[2010/06/18 11:17:53 | 000,000,000 | ---D | M] -- C:\Users\Saurav\AppData\Roaming\Mozilla\Extensions

[2010/07/05 08:10:55 | 000,000,000 | ---D | M] -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions

[2010/07/03 21:44:25 | 000,000,000 | ---D | M] (FlashGot) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}

[2010/06/23 13:49:48 | 000,000,000 | ---D | M] (EPUBReader) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F}

[2010/06/23 14:07:05 | 000,000,000 | ---D | M] (FireFTP) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}

[2010/06/23 13:52:40 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Saurav\AppData\Roaming\Mozilla\Firefox\Profiles\28dgh3mc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}

[2010/07/05 08:10:55 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions

[2010/06/29 09:05:51 | 000,000,000 | ---D | M] (G Data WebFilter) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}

[2010/06/21 15:42:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

[2010/06/21 15:42:17 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll

[2010/06/21 14:21:00 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll

[2010/03/31 12:02:08 | 000,787,744 | ---- | M] (Medical Informatics Engineering, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npzzatif.dll

O1 HOSTS File: ([2010/07/05 08:29:35 | 000,000,899 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 http://internetdownloadmanager.com

O1 - Hosts: 127.0.0.1 www.internetdownloadmanager.com

O2:64bit: - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIEx64.dll (G Data Software AG)

O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Tonec Inc.)

O2 - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIE.dll (G Data Software AG)

O3:64bit: - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIEx64.dll (G Data Software AG)

O3 - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AvkWebIE.dll (G Data Software AG)

O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [Display] C:\Program Files (x86)\APC\APC PowerChute Personal Edition\DataCollectionLauncher.exe (American Power Conversion Corporation)

O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG)

O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG)

O4 - HKU\S-1-5-19..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-1702038753-2411031353-2640621168-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0

O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()

O8:64bit: - Extra context menu item: Download FLV video content with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm ()

O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()

O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()

O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm ()

O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()

O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O13 - gopher Prefix: missing

O13 - gopher Prefix: missing

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 59.179.243.70 203.94.243.70

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O34 - HKLM BootExecute: (sasnative64) - File not found

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/07/05 11:05:46 | 000,062,464 | ---- | C] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll-10222339

[2010/07/05 08:10:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\IDM

[2010/07/05 08:10:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\Downloads

[2010/07/05 08:10:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager

[2010/07/05 08:02:23 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys

[2010/07/05 08:02:22 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group

[2010/07/05 07:41:16 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR

[2010/07/05 06:39:44 | 000,000,000 | ---D | C] -- C:\Users\Saurav\DoctorWeb

[2010/07/04 12:20:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab

[2010/07/04 11:15:30 | 000,000,000 | ---D | C] -- C:\_OTS

[2010/07/01 23:39:01 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\EMDB

[2010/07/01 23:38:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EMDB

[2010/07/01 18:42:40 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\G DATA

[2010/06/29 09:06:03 | 000,057,288 | ---- | C] (G DATA Software AG) -- C:\Windows\SysNative\drivers\PktIcpt.sys

[2010/06/29 09:05:59 | 000,049,096 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys

[2010/06/29 02:44:22 | 000,000,000 | ---D | C] -- C:\_OTL

[2010/06/28 20:57:47 | 000,106,224 | ---- | C] (G Data Software) -- C:\Windows\SysNative\drivers\GRD.sys

[2010/06/28 20:55:50 | 000,040,392 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\GDBehave.sys

[2010/06/28 19:51:51 | 000,084,936 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\MiniIcpt.sys

[2010/06/28 19:51:21 | 000,126,312 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\GEARASpi64.dll

[2010/06/28 19:51:21 | 000,019,496 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys

[2010/06/28 19:51:15 | 000,048,584 | ---- | C] (G DATA Software AG) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys

[2010/06/28 19:50:59 | 000,000,000 | ---D | C] -- C:\ProgramData\G DATA

[2010/06/28 19:50:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\G Data

[2010/06/28 19:50:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\G DATA

[2010/06/28 03:00:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Advanced System Optimizer 3

[2010/06/26 14:40:02 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\RaimaRadioPro

[2010/06/26 14:39:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RarmaRadio

[2010/06/26 13:20:38 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Ashampoo

[2010/06/26 13:20:27 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\ashampoo

[2010/06/26 13:20:27 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo

[2010/06/26 13:20:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ashampoo

[2010/06/25 22:53:33 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\VitySoft

[2010/06/24 00:05:07 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll

[2010/06/24 00:05:07 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll

[2010/06/24 00:05:07 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll

[2010/06/24 00:05:07 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll

[2010/06/24 00:05:07 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll

[2010/06/24 00:05:07 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll

[2010/06/24 00:05:07 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll

[2010/06/24 00:05:07 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll

[2010/06/24 00:05:06 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll

[2010/06/24 00:05:06 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll

[2010/06/24 00:05:06 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll

[2010/06/24 00:05:06 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll

[2010/06/24 00:05:06 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll

[2010/06/24 00:05:06 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll

[2010/06/24 00:05:06 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll

[2010/06/24 00:05:06 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll

[2010/06/24 00:05:06 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll

[2010/06/24 00:05:06 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll

[2010/06/24 00:05:06 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll

[2010/06/24 00:05:06 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll

[2010/06/24 00:05:06 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll

[2010/06/24 00:05:06 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll

[2010/06/24 00:05:06 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll

[2010/06/24 00:05:06 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll

[2010/06/24 00:05:05 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll

[2010/06/24 00:05:05 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll

[2010/06/24 00:05:05 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll

[2010/06/24 00:05:05 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll

[2010/06/24 00:05:04 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll

[2010/06/24 00:05:04 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll

[2010/06/24 00:05:04 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll

[2010/06/24 00:05:04 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll

[2010/06/24 00:05:04 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll

[2010/06/24 00:05:04 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll

[2010/06/24 00:05:04 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll

[2010/06/24 00:05:04 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll

[2010/06/24 00:05:03 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll

[2010/06/24 00:05:03 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll

[2010/06/24 00:05:03 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll

[2010/06/24 00:05:03 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll

[2010/06/24 00:05:03 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll

[2010/06/24 00:05:03 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll

[2010/06/24 00:05:03 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll

[2010/06/24 00:05:03 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll

[2010/06/24 00:05:03 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll

[2010/06/24 00:05:03 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll

[2010/06/24 00:05:02 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll

[2010/06/24 00:05:02 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll

[2010/06/24 00:05:02 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll

[2010/06/24 00:05:02 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll

[2010/06/24 00:05:02 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll

[2010/06/24 00:05:02 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll

[2010/06/24 00:05:02 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll

[2010/06/24 00:05:02 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll

[2010/06/24 00:05:01 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll

[2010/06/24 00:05:01 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll

[2010/06/24 00:05:00 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll

[2010/06/24 00:05:00 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll

[2010/06/24 00:05:00 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll

[2010/06/24 00:05:00 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll

[2010/06/24 00:04:59 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll

[2010/06/24 00:04:59 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll

[2010/06/24 00:04:59 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll

[2010/06/24 00:04:59 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll

[2010/06/23 23:53:13 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx

[2010/06/23 23:15:28 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll

[2010/06/23 23:15:28 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll

[2010/06/23 23:15:28 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll

[2010/06/23 23:15:28 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll

[2010/06/23 23:15:28 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll

[2010/06/23 23:15:28 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll

[2010/06/23 23:15:28 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll

[2010/06/23 23:15:28 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll

[2010/06/23 23:15:28 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll

[2010/06/23 23:15:28 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll

[2010/06/23 23:15:28 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll

[2010/06/23 23:15:28 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll

[2010/06/23 23:15:27 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll

[2010/06/23 23:15:27 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll

[2010/06/23 23:15:27 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll

[2010/06/23 23:15:27 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll

[2010/06/23 23:15:27 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll

[2010/06/23 23:15:27 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll

[2010/06/23 23:15:27 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll

[2010/06/23 23:15:27 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll

[2010/06/23 23:15:27 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll

[2010/06/23 23:15:27 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll

[2010/06/23 23:15:27 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll

[2010/06/23 23:15:27 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll

[2010/06/23 23:15:26 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll

[2010/06/23 23:15:26 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll

[2010/06/23 23:15:26 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll

[2010/06/23 23:15:26 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll

[2010/06/23 23:15:26 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll

[2010/06/23 23:15:26 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll

[2010/06/23 23:15:26 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll

[2010/06/23 23:15:26 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll

[2010/06/23 23:15:26 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll

[2010/06/23 23:15:26 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll

[2010/06/23 23:15:26 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll

[2010/06/23 23:15:26 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll

[2010/06/23 23:15:26 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll

[2010/06/23 23:15:26 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll

[2010/06/23 23:15:25 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll

[2010/06/23 23:15:25 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll

[2010/06/23 23:15:25 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll

[2010/06/23 23:15:25 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll

[2010/06/23 23:15:25 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll

[2010/06/23 23:15:25 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll

[2010/06/23 23:15:24 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll

[2010/06/23 23:15:24 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll

[2010/06/23 23:15:24 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll

[2010/06/23 23:15:24 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll

[2010/06/23 23:15:24 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll

[2010/06/23 23:15:24 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll

[2010/06/23 23:15:23 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll

[2010/06/23 23:15:23 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll

[2010/06/23 23:15:23 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll

[2010/06/23 23:15:23 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll

[2010/06/23 23:15:23 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll

[2010/06/23 23:15:23 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll

[2010/06/23 23:15:23 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll

[2010/06/23 23:15:23 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll

[2010/06/23 23:15:23 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll

[2010/06/23 23:15:23 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll

[2010/06/23 23:15:22 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll

[2010/06/23 23:15:22 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll

[2010/06/23 23:15:22 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll

[2010/06/23 23:15:22 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll

[2010/06/23 23:15:22 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll

[2010/06/23 23:15:22 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll

[2010/06/23 23:15:22 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll

[2010/06/23 23:15:22 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll

[2010/06/23 23:15:22 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll

[2010/06/23 23:15:22 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll

[2010/06/23 23:15:22 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll

[2010/06/23 23:15:22 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll

[2010/06/23 23:15:21 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll

[2010/06/23 23:15:21 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll

[2010/06/23 23:15:21 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll

[2010/06/23 23:15:21 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll

[2010/06/23 23:15:21 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll

[2010/06/23 23:15:21 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll

[2010/06/23 23:15:21 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll

[2010/06/23 23:15:21 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll

[2010/06/23 23:15:20 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll

[2010/06/23 23:15:20 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll

[2010/06/23 23:15:20 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll

[2010/06/23 23:15:20 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll

[2010/06/23 23:15:20 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll

[2010/06/23 23:15:20 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll

[2010/06/23 23:15:20 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll

[2010/06/23 23:15:20 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll

[2010/06/23 23:15:20 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll

[2010/06/23 23:15:20 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll

[2010/06/23 23:15:20 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll

[2010/06/23 23:15:20 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll

[2010/06/23 23:15:20 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll

[2010/06/23 23:15:20 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll

[2010/06/23 23:15:20 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll

[2010/06/23 23:15:20 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll

[2010/06/23 23:15:18 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll

[2010/06/23 23:15:18 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll

[2010/06/23 23:15:17 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll

[2010/06/23 23:15:17 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll

[2010/06/23 23:15:17 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll

[2010/06/23 23:15:17 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll

[2010/06/23 23:15:17 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll

[2010/06/23 23:15:17 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll

[2010/06/23 23:15:17 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll

[2010/06/23 23:15:17 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll

[2010/06/23 23:15:16 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll

[2010/06/23 23:15:16 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll

[2010/06/23 23:15:16 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll

[2010/06/23 23:15:16 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll

[2010/06/23 23:15:16 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll

[2010/06/23 23:15:16 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll

[2010/06/23 23:15:16 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll

[2010/06/23 23:15:16 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll

[2010/06/23 23:00:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Games

[2010/06/23 17:41:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\MiniLyrics

[2010/06/23 14:24:23 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll

[2010/06/23 14:24:23 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll

[2010/06/23 14:24:23 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax

[2010/06/23 14:24:22 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll

[2010/06/23 14:24:22 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax

[2010/06/23 14:24:22 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax

[2010/06/23 14:24:22 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax

[2010/06/23 12:33:00 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll

[2010/06/23 12:33:00 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll

[2010/06/22 23:31:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oxford

[2010/06/22 13:12:40 | 000,000,000 | ---D | C] -- C:\Program Files\Canon

[2010/06/22 13:12:28 | 000,000,000 | -H-D | C] -- C:\Windows\SysNative\CanonIJ Uninstaller Information

[2010/06/22 13:12:18 | 000,279,040 | ---- | C] (CANON INC.) -- C:\Windows\SysNative\CNMLM9M.DLL

[2010/06/22 13:12:04 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ

[2010/06/22 13:11:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Canon

[2010/06/22 12:59:30 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ

[2010/06/22 11:44:35 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\SoundSpectrum

[2010/06/22 11:40:06 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll

[2010/06/22 11:40:05 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll

[2010/06/22 11:40:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SoundSpectrum

[2010/06/22 10:48:41 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Zero G Registry

[2010/06/22 10:48:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Britannica 10.0

[2010/06/22 10:47:49 | 000,000,000 | -H-D | C] -- C:\Users\Saurav\InstallAnywhere

[2010/06/22 01:55:46 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\vlc

[2010/06/22 01:55:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN

[2010/06/22 01:53:13 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\VS Revo Group

[2010/06/21 23:19:21 | 000,000,000 | ---D | C] -- C:\Programs

[2010/06/21 23:14:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BR4

[2010/06/21 23:01:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Everything

[2010/06/21 22:50:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime

[2010/06/21 22:14:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt

[2010/06/21 21:49:50 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\DMCache

[2010/06/21 20:03:45 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\ACD Systems

[2010/06/21 20:03:45 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\ACD Systems

[2010/06/21 20:00:27 | 000,000,000 | ---D | C] -- C:\ProgramData\ACD Systems

[2010/06/21 20:00:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ACD Systems

[2010/06/21 20:00:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ACD Systems

[2010/06/21 19:58:30 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Downloaded Installations

[2010/06/21 16:36:22 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\Digsby Logs

[2010/06/21 16:32:51 | 000,000,000 | ---D | C] -- C:\Lyrics

[2010/06/21 16:32:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Minilyrics

[2010/06/21 16:30:06 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Digsby

[2010/06/21 16:30:06 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Digsby

[2010/06/21 16:30:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Digsby

[2010/06/21 16:28:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Digsby

[2010/06/21 16:27:20 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Malwarebytes

[2010/06/21 16:27:15 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys

[2010/06/21 16:27:14 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys

[2010/06/21 16:27:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2010/06/21 16:27:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware

[2010/06/21 16:15:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Systweak

[2010/06/21 16:14:53 | 000,000,000 | ---D | C] -- C:\Windows\Repair

[2010/06/21 16:14:52 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Systweak

[2010/06/21 16:00:02 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Cyberlink

[2010/06/21 16:00:01 | 000,000,000 | ---D | C] -- C:\Users\Saurav\Documents\CyberLink

[2010/06/21 16:00:01 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\CyberLink

[2010/06/21 15:59:37 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink

[2010/06/21 15:59:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\CyberLink

[2010/06/21 15:59:02 | 000,000,000 | ---D | C] -- C:\Program Files\ComicRack

[2010/06/21 15:58:37 | 000,505,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp71.dll

[2010/06/21 15:58:37 | 000,353,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll

[2010/06/21 15:58:37 | 000,029,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll

[2010/06/21 15:58:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CyberLink

[2010/06/21 15:58:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Temp

[2010/06/21 15:47:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET

[2010/06/21 15:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

[2010/06/21 15:42:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

[2010/06/21 15:42:22 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll

[2010/06/21 15:42:22 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe

[2010/06/21 15:42:22 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe

[2010/06/21 15:42:21 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe

[2010/06/21 15:42:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java

[2010/06/21 15:30:35 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll

[2010/06/21 15:30:35 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll

[2010/06/21 15:30:35 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe

[2010/06/21 15:30:35 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe

[2010/06/21 15:30:35 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll

[2010/06/21 15:30:35 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll

[2010/06/21 15:30:35 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll

[2010/06/21 15:30:35 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll

[2010/06/21 15:18:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinDjView

[2010/06/21 15:05:19 | 000,000,000 | ---D | C] -- C:\Program Files\Paint.NET

[2010/06/21 15:05:10 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Paint.NET

[2010/06/21 14:54:18 | 000,020,968 | ---- | C] (Windows ® Win 7 DDK provider) -- C:\Windows\SysNative\drivers\cpuz133_x64.sys

[2010/06/21 14:54:18 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID

[2010/06/21 14:21:32 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Foxit

[2010/06/21 14:21:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Foxit Software

[2010/06/21 13:26:08 | 000,000,000 | ---D | C] -- C:\Download

[2010/06/21 13:25:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent

[2010/06/21 13:24:27 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\uTorrent

[2010/06/21 13:22:34 | 000,000,000 | ---D | C] -- C:\Program Files\PeerBlock

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\zh-TW

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\zh-CN

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Virtual PC

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\tr-TR

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\th-TH

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\sv-SE

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ru-RU

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ro-RO

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pt-PT

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pt-BR

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pl-PL

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\nl-NL

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\nb-NO

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ko-KR

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ja-JP

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\it-IT

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\hu-HU

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\he-IL

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\fr-FR

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\fi-FI

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\es-ES

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\el-GR

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\da-DK

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\cs-CZ

[2010/06/20 05:57:00 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\ar-SA

[2010/06/20 05:56:07 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpchbuspipe.dll

[2010/06/20 05:56:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpchbus.sys.mui

[2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcuxd.sys.mui

[2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcuxd.sys.mui

[2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcusb.sys.mui

[2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcusb.sys.mui

[2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcnfltr.sys.mui

[2010/06/20 05:56:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcnfltr.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcuxd.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcusb.sys.mui

[2010/06/20 05:56:06 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcusb.sys.mui

[2010/06/20 05:56:05 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\el-GR\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nl-NL\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcvmm.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-TW\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\zh-CN\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tr-TR\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\th-TH\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\sv-SE\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ru-RU\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ro-RO\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-PT\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pt-BR\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pl-PL\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\nb-NO\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ko-KR\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ja-JP\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\it-IT\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hu-HU\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\he-IL\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fr-FR\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fi-FI\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\es-ES\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\de-DE\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\da-DK\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cs-CZ\vpcnfltr.sys.mui

[2010/06/20 05:56:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ar-SA\vpcnfltr.sys.mui

[2010/06/20 05:56:03 | 004,513,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpc.exe

[2010/06/20 05:56:03 | 002,262,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VPCWizard.exe

[2010/06/20 05:56:03 | 001,369,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VPCSettings.exe

[2010/06/20 05:56:03 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vmsal.exe

[2010/06/20 05:56:03 | 000,562,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VMCPropertyHandler.dll

[2010/06/20 05:56:03 | 000,359,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcvmm.sys

[2010/06/20 05:56:03 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpchbus.sys

[2010/06/20 05:56:03 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcusb.sys

[2010/06/20 05:56:03 | 000,066,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vpcnfltr.sys

[2010/06/20 05:56:02 | 001,209,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VMWindow.exe

[2010/06/20 05:56:02 | 000,936,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmsal.exe

[2010/06/20 04:32:24 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat

[2010/06/20 03:51:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Office Genuine Advantage

[2010/06/20 03:48:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys

[2010/06/18 12:21:02 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll

[2010/06/18 12:21:02 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll

[2010/06/18 12:21:02 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll

[2010/06/18 12:21:02 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll

[2010/06/18 11:17:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Mozilla

[2010/06/18 11:17:49 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Mozilla

[2010/06/18 11:17:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2010/06/18 11:16:20 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Apple Computer

[2010/06/18 11:16:19 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Apple Computer

[2010/06/18 11:15:50 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

[2010/06/18 11:15:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer

[2010/06/18 11:15:07 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Local\Apple

[2010/06/18 11:15:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update

[2010/06/18 11:14:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple

[2010/06/18 11:14:48 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour

[2010/06/18 11:14:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour

[2010/06/18 11:14:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple

[2010/06/18 11:14:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple

[2010/06/12 10:11:18 | 000,000,000 | ---D | C] -- C:\Users\Saurav\AppData\Roaming\Media Player Classic

[2010/06/12 09:52:24 | 000,000,000 | ---D | C] -- C:\Program Files\MPC HomeCinema (x64)

[2010/06/09 23:35:12 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip

[2010/06/09 23:35:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZip

========== Files - Modified Within 30 Days ==========

[2010/07/05 11:58:05 | 004,456,448 | -HS- | M] () -- C:\Users\Saurav\NTUSER.DAT

[2010/07/05 11:05:46 | 000,062,464 | ---- | M] (Prevx) -- C:\Windows\SysWow64\PxSecure.dll-10222339

[2010/07/05 08:29:35 | 000,000,899 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2010/07/05 08:25:10 | 000,019,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2010/07/05 08:25:10 | 000,019,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2010/07/05 08:24:29 | 000,778,150 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2010/07/05 08:24:29 | 000,661,172 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2010/07/05 08:24:29 | 000,121,090 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2010/07/05 08:20:06 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT

[2010/07/05 08:20:05 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2010/07/05 08:20:04 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys

[2010/07/05 08:19:16 | 001,549,858 | -H-- | M] () -- C:\Users\Saurav\AppData\Local\IconCache.db

[2010/07/05 08:06:31 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\At2.job

[2010/07/05 08:06:31 | 000,000,376 | ---- | M] () -- C:\Windows\tasks\At1.job

[2010/07/05 08:02:24 | 000,000,973 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk

[2010/07/02 00:51:27 | 000,057,952 | ---- | M] () -- C:\Users\Saurav\AppData\Local\GDIPFONTCACHEV1.DAT

[2010/07/02 00:50:51 | 000,266,848 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2010/07/01 23:39:00 | 000,000,899 | ---- | M] () -- C:\Users\Saurav\Desktop\EMDB.lnk

[2010/06/29 09:33:33 | 000,106,224 | ---- | M] (G Data Software) -- C:\Windows\SysNative\drivers\GRD.sys

[2010/06/29 09:06:03 | 000,057,288 | ---- | M] (G DATA Software AG) -- C:\Windows\SysNative\drivers\PktIcpt.sys

[2010/06/29 09:06:03 | 000,040,392 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\GDBehave.sys

[2010/06/29 09:06:00 | 000,002,082 | ---- | M] () -- C:\Users\Public\Desktop\G Data InternetSecurity 2011.lnk

[2010/06/29 09:05:59 | 000,049,096 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys

[2010/06/29 09:05:42 | 000,084,936 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\MiniIcpt.sys

[2010/06/29 09:05:41 | 000,048,584 | ---- | M] (G DATA Software AG) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys

[2010/06/28 03:00:24 | 000,002,276 | ---- | M] () -- C:\Users\Public\Desktop\Advanced System Optimizer.lnk

[2010/06/27 22:17:07 | 000,001,470 | ---- | M] () -- C:\Users\Saurav\Desktop\Peerblock.lnk

[2010/06/26 14:40:06 | 000,000,967 | ---- | M] () -- C:\Users\Saurav\Desktop\RarmaRadio.lnk

[2010/06/26 13:20:25 | 000,001,185 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 10.lnk

[2010/06/25 22:52:27 | 000,001,387 | ---- | M] () -- C:\Users\Saurav\Desktop\Freerapid.lnk

[2010/06/23 23:02:31 | 000,001,241 | ---- | M] () -- C:\Users\Saurav\Desktop\A Vampyre Story.lnk

[2010/06/22 23:33:43 | 000,001,065 | ---- | M] () -- C:\Users\Saurav\Desktop\Oxford English Dictionary.lnk

[2010/06/22 13:12:42 | 000,001,804 | ---- | M] () -- C:\Users\Public\Desktop\My Printer.lnk

[2010/06/22 10:53:28 | 000,001,961 | ---- | M] () -- C:\Users\Public\Desktop\Ultimate Reference Suite.lnk

[2010/06/21 23:14:29 | 000,000,926 | ---- | M] () -- C:\Users\Saurav\Desktop\BookReader.lnk

[2010/06/21 23:02:00 | 000,001,035 | ---- | M] () -- C:\Users\Saurav\Desktop\Search Everything.lnk

[2010/06/21 22:50:45 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk

[2010/06/21 20:00:30 | 000,002,885 | ---- | M] () -- C:\Users\Public\Desktop\ACDSee Photo Manager 12.lnk

[2010/06/21 16:30:05 | 000,001,111 | ---- | M] () -- C:\Users\Saurav\Application Data\Microsoft\Internet Explorer\Quick Launch\Digsby.lnk

[2010/06/21 16:30:05 | 000,001,087 | ---- | M] () -- C:\Users\Saurav\Desktop\Digsby.lnk

[2010/06/21 16:27:17 | 000,001,013 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk

[2010/06/21 15:59:35 | 000,002,121 | ---- | M] () -- C:\Users\Public\Desktop\CyberLink PowerDVD 10.lnk

[2010/06/21 15:59:03 | 000,000,840 | ---- | M] () -- C:\Users\Public\Desktop\ComicRack.lnk

[2010/06/21 15:58:06 | 000,505,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp71.dll

[2010/06/21 15:58:06 | 000,353,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll

[2010/06/21 15:58:06 | 000,029,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll

[2010/06/21 15:51:30 | 000,774,176 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2010/06/21 15:42:17 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll

[2010/06/21 15:42:17 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe

[2010/06/21 15:42:17 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe

[2010/06/21 15:42:17 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe

[2010/06/21 15:05:44 | 000,001,176 | ---- | M] () -- C:\Users\Public\Desktop\Paint.NET.lnk

[2010/06/21 14:54:18 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk

[2010/06/21 14:21:33 | 000,001,234 | ---- | M] () -- C:\Users\Saurav\Desktop\Foxit Reader.lnk

[2010/06/21 13:25:13 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\

[azygos]

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4276

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

7/5/2010 2:03:39 PM

mbam-log-2010-07-05 (14-03-39).txt

Scan type: Full scan (C:\|D:\|)

Objects scanned: 306341

Time elapsed: 1 hour(s), 25 minute(s), 48 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Users\Saurav\AppData\Local\Temp\dssknt.exe (Virus.Agent) -> Quarantined and deleted successfully.

D:\Program Files\BookCAT\Keygen.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

[screen317]

Hi and welcome to Malwarebytes.

My apologies for the delay; do you still need help?

-screen317

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!