SOS!!!!!!!!!!!!!!!!! spyware

Profil bloqué -  
 Profil bloqué -
Bonjour,
bonjour je un sywar qui se nome ie security
voila le raport
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:36:58, on 26/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Athan\Athan.exe
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\crypserv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
O2 - BHO: LmIE.BHO - {2D28EBA6-4EC0-45F1-AF6E-A8E174AA7E83} - C:\WINDOWS\system32\gjgsys.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Windows Logon Application] C:\WINDOWS\system32\logon.exe
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [QUAD Windows service] C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe -h
O4 - HKCU\..\Run: [QUAD Scheduler] C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKLM\..\Policies\Explorer\Run: [DirectX For Microsoft® Windows] C:\WINDOWS\system32\fservice.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Windows Network Data Management System Service (BNDMSS) - Unknown owner - C:\WINDOWS\system32\bndmss.exe (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Crypkey License - CrypKey (Canada) Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 7480 bytes
Configuration: Windows XP
Firefox 3.0.6

11 réponses

  1. manbu Messages postés 196 Statut Membre 73
     
    Tu a au moins 2 saloperies a enlever d'urgence :

    O4 - HKLM\..\Run: [Windows Logon Application] C:\WINDOWS\system32\logon.exe

    O4 - HKLM\..\Policies\Explorer\Run: [DirectX For Microsoft® Windows] C:\WINDOWS\system32\fservice.exe :

    Coche les avec ton hijackthis et fixe les.
    0
    1. toptitbal Messages postés 5341 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 232
       
      Bonjour

      Cela ne supprimera pas les fichiers....
      0
  2. ebc08 Messages postés 444 Statut Membre 298
     
    spybot le supprimera
    0
  3. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  4. Profil bloqué
     
    Salut
    Quand j'ouvre un dossier une page web souvre au lieu du dossier je peux donc entrer dans mes dossier une fois sur 4,ses énervent parceque j'ai mon rapport de stage a faire svp aidez ,je veux pas formater

    Mzerd un l'instant avast vient de sonné l'alarme jai un cheval de troie,puis il resonne 20 seconde aprè est il dit que j'ai un virus merd je fais quoi????????

    Je vais me fair tuer ces le pc de ma soeur!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

    SOS
    0
  5. Profil bloqué
     
    Spybot ne peut rien pour moi
    je suis foutu
    0
  6. ebc08 Messages postés 444 Statut Membre 298
     
    démarre avast (click droit sur l'icone d'avast > démarrer avast! antivirus) une fois que le test de démarrage est terminé click sur la flèche qui pointe vers le haut et click sur "planifier un scan au demarrage" > click sur "scanner tous les disque locaux" et active "scan des archives" > active "options avancés" > dans la 1ère option, choisi "déplacer dans la quarantaine" et au-dessous "demander confirmation" > click sur planifier
    un message avast va te demander de redémarrer ; enregistre ton travail et click sur oui.

    Quand ton ordinateur aura redémarré, il fera un scan complet qui peut durer 1/2 heure à 3, 4 heures en fonction si tu as peu ou beaucoup de fichiers
    0
  7. ebc08 Messages postés 444 Statut Membre 298
     
    tu n'est pas foutu mais ton rapport de stage va être retardé :-(
    0
  8. toptitbal Messages postés 5341 Date d'inscription   Statut Contributeur sécurité Dernière intervention   2 232
     
    "Spybot ne peut rien pour moi, je suis foutu"

    Spybot ne peut plus grand chose à part gêner le fonctionnement de certains Fix...

    Foutu pour foutu, essaie ceci :

    Télécharge SDFix sur ton bureau :
    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe.

    --->Double-clique sur SDFix.exe et choisis "Install" .

    ( tuto ici : https://www.malekal.com/slenfbot-still-an-other-irc-bot/ )

    Puis une fois l'installe faite, redémarre en mode sans échec .

    Comment aller en Mode sans échec :
    1) Redémarre ton ordi
    2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
    3) Tu verras un écran avec options de démarrage apparaître
    4) Choisis la première option : Sans Échec, et valide avec "Entrée"
    5) Choisis ton compte habituel, et non Administrateur (si besoin ... )

    /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

    Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
    --->Tapes Y pour lancer le script ...
    Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
    presse une touche pour redémarrer quand il te le sera demandé .

    Le PC va mettre du temps avant de démarrer ( c'est normal), après le chargement du Bureau presse une touche lorsque "Finished" s'affiche .

    Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier C:\SDFix sous le nom "Report.txt".
    Poste ce dernier dans ta prochaine réponse.

    0
  9. Profil bloqué
     
    VOILA LE RAPORT

    [b]System Report[/b]
    *************

    Run on 26/02/2009 at 13:41

    Microsoft Windows XP [version 5.1.2600]

    Current user is an administrator

    [b]Running Processes[/b]:

    \SystemRoot\System32\smss.exe [604]
    \??\C:\WINDOWS\system32\csrss.exe [684]
    \??\C:\WINDOWS\system32\winlogon.exe [708]
    C:\WINDOWS\system32\services.exe [756]
    C:\WINDOWS\system32\lsass.exe [768]
    C:\WINDOWS\system32\svchost.exe [928]
    C:\WINDOWS\system32\svchost.exe [988]
    C:\WINDOWS\System32\svchost.exe [1084]
    C:\WINDOWS\System32\svchost.exe [1136]
    C:\WINDOWS\System32\svchost.exe [1228]
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [1408]
    C:\Program Files\Alwil Software\Avast4\ashServ.exe [1464]
    C:\WINDOWS\system32\spoolsv.exe [1724]
    C:\WINDOWS\Explorer.exe [1984]
    C:\WINDOWS\system32\RUNDLL32.EXE [1036]
    C:\WINDOWS\SOUNDMAN.EXE [1044]
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [1052]
    C:\Program Files\Athan\Athan.exe [1060]
    C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe [1068]
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [1188]
    C:\WINDOWS\system32\ctfmon.exe [1296]
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [1404]
    C:\Program Files\Bonjour\mDNSResponder.exe [1308]
    C:\WINDOWS\system32\crypserv.exe [1804]
    C:\WINDOWS\System32\nvsvc32.exe [1884]
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe [156]
    C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe [500]
    C:\Program Files\DNA\btdna.exe [528]
    C:\Program Files\Messenger\msmsgs.exe [540]
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [1372]
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [1980]
    C:\WINDOWS\System32\svchost.exe [2880]
    C:\WINDOWS\system32\wuauclt.exe [2556]
    C:\Program Files\Mozilla Firefox\firefox.exe [3620]
    C:\WINDOWS\system32\NOTEPAD.EXE [664]
    C:\WINDOWS\system32\NOTEPAD.EXE [3684]

    [b]Drivers - Running[/b]:

    Aavmker4
    ACPI
    AFD
    ALCXWDM
    Arp1394
    aswFsBlk
    aswMon2
    aswRdr
    aswSP
    aswTdi
    atapi
    audstub
    Beep
    Cdfs
    Cdrom
    Disk
    dmio
    dmload
    Fastfat
    Fdc
    Fips
    FltMgr
    Ftdisk
    Gpc
    hidusb
    HTTP
    Imapi
    IPSec
    isapnp
    Kbdclass
    kbdhid
    kmixer
    KSecDD
    mnmdd
    Mouclass
    mouhid
    MountMgr
    MRxDAV
    MRxSmb
    Msfs
    mssmbios
    Mup
    NDIS
    NdisTapi
    Ndisuio
    NdisWan
    NDProxy
    NetBIOS
    NetBT
    NetworkX
    NIC1394
    Npfs
    Ntfs
    Null
    nv
    ohci1394
    oreans32
    Parport
    PartMgr
    ParVdm
    PCI
    PCIIde
    PptpMiniport
    Processor
    PSched
    Ptilink
    PxHelp20
    RasAcd
    Rasl2tp
    RasPppoe
    Raspti
    Rdbss
    RDPCDD
    rdpdr
    redbook
    serenum
    Serial
    sptd
    sr
    Srv
    swenum
    sysaudio
    Tcpip
    TermDD
    Update
    usbccgp
    usbehci
    usbhub
    usbohci
    usbstor
    USB_RNDIS
    VgaSave
    VolSnap
    Wanarp
    wdmaud

    [b]Drivers - Stopped[/b]:

    Abiosdsk
    abp480n5
    ACPIEC
    adpu160m
    aec
    Aha154x
    aic78u2
    aic78xx
    AliIde
    amsint
    asc
    asc3350p
    asc3550
    AsyncMac
    Atdisk
    Atmarpc
    cbidf2k
    cd20xrnt
    Cdaudio
    Changer
    CmdIde
    Cpqarray
    dac960nt
    dmboot
    DMusic
    dpti2o
    drmkaud
    Flpydisk
    hpn
    i2omgmt
    i2omp
    i8042prt
    ini910u
    IntelIde
    ip6fw
    IpFilterDriver
    IpInIp
    IpNat
    IRENUM
    lbrtfdc
    Modem
    mraid35x
    MSKSSRV
    MSPCLOCK
    MSPQM
    NwlnkFlt
    NwlnkFwd
    PCIDump
    Pcmcia
    PDCOMP
    PDFRAME
    PDRELI
    PDRFRAME
    perc2
    perc2hib
    ql1080
    Ql10wnt
    ql12160
    ql1240
    ql1280
    RDPWD
    Secdrv
    Sfloppy
    Simbad
    Sparrow
    splitter
    swmidi
    symc810
    symc8xx
    sym_hi
    sym_u3
    TDPIPE
    TDTCP
    TosIde
    Udfs
    ultra
    ViaIde
    WDICA
    WudfPf
    WudfRd

    [b]Services - Running[/b]:

    aswUpdSv
    AudioSrv
    avast!
    avast!
    avast!
    Bonjour
    Browser
    Crypkey
    CryptSvc
    DcomLaunch
    Dhcp
    dmserver
    Dnscache
    ERSvc
    Eventlog
    EventSystem
    FastUserSwitchingCompatibility
    helpsvc
    HidServ
    HTTPFilter
    lanmanserver
    lanmanworkstation
    LmHosts
    Netman
    Nla
    NVSvc
    PlugPlay
    PolicyAgent
    ProtectedStorage
    RasMan
    RemoteRegistry
    RpcSs
    SamSs
    Schedule
    seclogon
    SENS
    ShellHWDetection
    Spooler
    srservice
    SSDPSRV
    TapiSrv
    TermService
    Themes
    TrkWks
    upnphost
    W32Time
    WebClient
    winmgmt
    wuauserv
    WZCSVC

    [b]Services - Stopped[/b]:

    Alerter
    ALG
    AppMgmt
    BITS
    BNDMSS
    CiSvc
    ClipSrv
    COMSysApp
    dmadmin
    Dot3svc
    EapHost
    FLEXnet
    gusvc
    hkmsvc
    ImapiService
    Messenger
    mnmsrvc
    MSDTC
    MSIServer
    napagent
    NetDDE
    NetDDEdsdm
    Netlogon
    NtLmSsp
    NtmsSvc
    RasAuto
    RDSessMgr
    RemoteAccess
    RpcLocator
    RSVP
    SCardSvr
    SharedAccess
    stisvc
    SwPrv
    SysmonLog
    TlntSvr
    UPS
    VSS
    WmdmPmSN
    Wmi
    WmiApSrv
    WMPNetworkSvc
    wscsvc
    WudfSvc
    xmlprov

    [b]Files Created/Modified - 60 Days[/b]:

    C:\

    16 Feb 2009 15:30:22 0 A.... "C:\AUTOEXEC.BAT"
    16 Feb 2009 15:30:22 0 A.... "C:\CONFIG.SYS"
    16 Feb 2009 15:30:22 0 A.SHR "C:\IO.SYS"
    16 Feb 2009 15:30:22 0 A.SHR "C:\MSDOS.SYS"
    26 Feb 2009 12:10:14 1 610 612 736 A.SH. "C:\pagefile.sys"

    C:\WINDOWS\

    26 Feb 2009 12:10:16 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
    18 Feb 2009 15:54:34 737 280 A.... "C:\WINDOWS\iun6002.exe"
    16 Feb 2009 16:38:44 0 A.... "C:\WINDOWS\nsreg.dat"
    16 Feb 2009 21:36:54 4 A.... "C:\WINDOWS\vx86036.dat"
    16 Feb 2009 15:30:16 2 678 ..... "C:\WINDOWS\$NtServicePackUninstall$\03tzdb7r.dat"
    16 Feb 2009 15:30:16 2 678 ..... "C:\WINDOWS\$NtServicePackUninstall$\13fj35nn.dat"
    16 Feb 2009 15:30:16 23 ..... "C:\WINDOWS\$NtServicePackUninstall$\a6535733.dat"
    16 Feb 2009 15:30:16 558 142 ..... "C:\WINDOWS\$NtServicePackUninstall$\a6535733.zip"
    16 Feb 2009 15:30:16 1 299 ..... "C:\WINDOWS\$NtServicePackUninstall$\fj5bfpbt.dat"
    16 Feb 2009 15:30:16 2 678 ..... "C:\WINDOWS\$NtServicePackUninstall$\hvh3zlrf.dat"
    16 Feb 2009 15:30:18 2 678 ..... "C:\WINDOWS\$NtServicePackUninstall$\lb9nhnf1.dat"
    16 Feb 2009 15:30:16 2 678 ..... "C:\WINDOWS\$NtServicePackUninstall$\tndz3317.dat"
    16 Feb 2009 15:30:16 23 ..... "C:\WINDOWS\$NtServicePackUninstall$\ya5zvlf1.dat"
    16 Feb 2009 15:30:16 155 995 ..... "C:\WINDOWS\$NtServicePackUninstall$\ya5zvlf1.zip"
    16 Feb 2009 15:30:16 1 299 ..... "C:\WINDOWS\$NtServicePackUninstall$\zlr73rft.dat"
    16 Feb 2009 15:30:22 229 376 A..H. "C:\WINDOWS\repair\ntuser.dat"
    26 Feb 2009 3:25:08 101 A.... "C:\WINDOWS\system\sservice.exe.bat"
    5 Feb 2009 22:11:36 1 256 296 A.... "C:\WINDOWS\system32\aswBoot.exe"
    16 Feb 2009 15:27:18 21 892 A.... "C:\WINDOWS\system32\emptyregdb.dat"
    26 Feb 2009 10:18:46 1 396 712 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
    26 Feb 2009 10:28:44 105 A.... "C:\WINDOWS\system32\fservice.exe.bat"
    26 Feb 2009 1:45:40 106 496 A.... "C:\WINDOWS\system32\gjgsys.dll"
    16 Jan 2009 21:15:42 3 594 752 A.... "C:\WINDOWS\system32\mshtml.dll"
    16 Feb 2009 17:04:18 499 712 A.... "C:\WINDOWS\system32\msvcp71.dll"
    16 Feb 2009 17:04:18 348 160 A.... "C:\WINDOWS\system32\msvcr71.dll"
    26 Feb 2009 10:20:06 39 992 A.... "C:\WINDOWS\system32\perfc009.dat"
    26 Feb 2009 10:20:06 48 616 A.... "C:\WINDOWS\system32\perfc00C.dat"
    26 Feb 2009 10:20:06 311 604 A.... "C:\WINDOWS\system32\perfh009.dat"
    26 Feb 2009 10:20:06 367 658 A.... "C:\WINDOWS\system32\perfh00C.dat"
    16 Feb 2009 17:04:18 278 528 A.... "C:\WINDOWS\system32\pncrt.dll"
    16 Feb 2009 17:04:18 6 656 A.... "C:\WINDOWS\system32\pndx5016.dll"
    16 Feb 2009 17:04:18 5 632 A.... "C:\WINDOWS\system32\pndx5032.dll"
    16 Feb 2009 17:04:22 185 920 A.... "C:\WINDOWS\system32\rmoc3260.dll"
    6 Feb 2009 18:52:40 49 504 A.... "C:\WINDOWS\system32\sirenacm.dll"
    26 Feb 2009 12:10:20 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
    26 Feb 2009 13:41:22 0 A.... "C:\WINDOWS\Temp\scs15.tmp"
    16 Feb 2009 15:30:16 558 142 A.... "C:\WINDOWS\java\Packages\A6535733.ZIP"
    16 Feb 2009 15:30:16 155 995 A.... "C:\WINDOWS\java\Packages\YA5ZVLF1.ZIP"
    16 Jan 2009 21:15:42 3 594 752 ..... "C:\WINDOWS\system32\dllcache\mshtml.dll"
    5 Feb 2009 22:05:12 26 944 A.... "C:\WINDOWS\system32\drivers\aavmker4.sys"
    5 Feb 2009 22:07:12 20 560 A.... "C:\WINDOWS\system32\drivers\aswFsBlk.sys"
    5 Feb 2009 22:08:20 93 296 A.... "C:\WINDOWS\system32\drivers\aswmon.sys"
    5 Feb 2009 22:08:10 94 032 A.... "C:\WINDOWS\system32\drivers\aswmon2.sys"
    5 Feb 2009 22:06:10 23 152 A.... "C:\WINDOWS\system32\drivers\aswRdr.sys"
    5 Feb 2009 22:07:24 114 768 A.... "C:\WINDOWS\system32\drivers\aswSP.sys"
    5 Feb 2009 22:06:20 51 376 A.... "C:\WINDOWS\system32\drivers\aswTdi.sys"
    11 Feb 2009 10:19:34 15 504 A.... "C:\WINDOWS\system32\drivers\mbam.sys"
    11 Feb 2009 10:19:42 38 496 A.... "C:\WINDOWS\system32\drivers\mbamswissarmy.sys"
    26 Feb 2009 1:39:04 33 824 A.... "C:\WINDOWS\system32\drivers\oreans32.sys"
    25 Feb 2009 13:59:04 717 296 A.... "C:\WINDOWS\system32\drivers\sptd.sys"
    26 Feb 2009 10:18:32 32 047 A.... "C:\WINDOWS\system32\oobe\updshell.htm"
    26 Feb 2009 11:52:50 952 A.... "C:\WINDOWS\system32\Restore\rstrlog.dat"
    16 Feb 2009 15:30:16 2 678 A.... "C:\WINDOWS\java\Packages\Data\03TZDB7R.DAT"
    16 Feb 2009 15:30:16 2 678 A.... "C:\WINDOWS\java\Packages\Data\13FJ35NN.DAT"
    16 Feb 2009 15:30:16 23 A.... "C:\WINDOWS\java\Packages\Data\A6535733.DAT"
    16 Feb 2009 15:30:16 1 299 A.... "C:\WINDOWS\java\Packages\Data\FJ5BFPBT.DAT"
    16 Feb 2009 15:30:16 2 678 A.... "C:\WINDOWS\java\Packages\Data\HVH3ZLRF.DAT"
    16 Feb 2009 15:30:18 2 678 A.... "C:\WINDOWS\java\Packages\Data\LB9NHNF1.DAT"
    16 Feb 2009 15:30:16 2 678 A.... "C:\WINDOWS\java\Packages\Data\TNDZ3317.DAT"
    16 Feb 2009 15:30:16 23 A.... "C:\WINDOWS\java\Packages\Data\YA5ZVLF1.DAT"
    16 Feb 2009 15:30:16 1 299 A.... "C:\WINDOWS\java\Packages\Data\ZLR73RFT.DAT"
    26 Feb 2009 10:14:40 86 327 A.... "C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat"
    16 Feb 2009 16:18:06 89 102 A.... "C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe"
    17 Feb 2009 12:53:30 84 661 A.... "C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe"
    26 Feb 2009 10:18:32 5 723 A.... "C:\WINDOWS\system32\oobe\setup\autoupdt.htm"
    26 Feb 2009 10:18:32 15 646 A.... "C:\WINDOWS\system32\oobe\setup\au_plcy.htm"
    16 Feb 2009 15:30:04 714 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm"
    16 Feb 2009 15:30:04 2 915 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm"
    16 Feb 2009 15:30:04 13 525 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm"
    16 Feb 2009 15:30:04 30 494 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm"
    16 Feb 2009 15:30:02 2 911 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm"
    26 Feb 2009 10:13:36 16 302 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm"
    26 Feb 2009 10:13:36 5 691 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm"
    16 Feb 2009 15:30:04 1 678 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm"
    16 Feb 2009 15:30:02 2 335 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm"
    26 Feb 2009 10:13:36 3 151 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm"
    16 Feb 2009 15:30:02 3 394 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm"
    16 Feb 2009 15:30:02 2 637 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm"
    16 Feb 2009 15:30:02 4 555 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm"
    16 Feb 2009 15:30:02 321 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm"
    26 Feb 2009 10:13:36 3 623 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm"
    16 Feb 2009 15:30:02 4 864 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm"
    26 Feb 2009 10:13:36 8 188 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm"
    16 Feb 2009 15:30:02 7 798 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm"
    16 Feb 2009 15:30:02 8 553 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm"
    16 Feb 2009 15:30:02 5 351 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm"
    16 Feb 2009 15:30:02 4 404 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm"
    16 Feb 2009 15:30:02 15 107 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm"
    26 Feb 2009 10:13:36 30 864 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm"
    16 Feb 2009 15:30:02 1 298 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm"
    26 Feb 2009 10:13:36 3 311 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm"
    16 Feb 2009 15:30:02 13 777 A.... "C:\WINDOWS\PCHealth\HelpCtr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm"

    C:\Program Files\

    7 Jan 2009 20:42:36 24 576 A.... "C:\Program Files\adslTV\adsltv-r.exe"
    18 Feb 2009 9:54:28 983 718 A.... "C:\Program Files\adslTV\adsltv.dat"
    7 Jan 2009 20:41:38 2 891 776 A.... "C:\Program Files\adslTV\adsltv.exe"
    17 Feb 2009 15:57:22 98 453 A.... "C:\Program Files\adslTV\Uninstal.exe"
    18 Jan 2009 22:31:46 1 081 344 A.... "C:\Program Files\Athan\Athan.exe"
    18 Feb 2009 15:54:34 119 062 A.... "C:\Program Files\Athan\irunin.dat"
    2 Jan 2009 19:01:44 282 697 A.... "C:\Program Files\Athan\vbp.dll"
    17 Feb 2009 1:02:48 86 032 A.... "C:\Program Files\BitTorrent\uninst.exe"
    20 Jan 2009 17:00:48 1 451 248 A.... "C:\Program Files\CCleaner\CCleaner.exe"
    16 Feb 2009 17:13:48 114 658 A.... "C:\Program Files\CCleaner\uninst.exe"
    29 Dec 2008 11:40:30 687 560 A.... "C:\Program Files\DAEMON Tools Lite\daemon.exe"
    29 Dec 2008 11:39:42 1 093 064 A.... "C:\Program Files\DAEMON Tools Lite\DTCommonRes.dll"
    29 Dec 2008 11:39:34 1 306 056 A.... "C:\Program Files\DAEMON Tools Lite\Engine.dll"
    29 Dec 2008 11:41:04 693 192 A.... "C:\Program Files\DAEMON Tools Lite\uninst.exe"
    19 Feb 2009 18:18:08 507 707 A.... "C:\Program Files\DivX\DivXBundleUninstall.exe"
    19 Feb 2009 18:18:00 507 707 A.... "C:\Program Files\DivX\DivXCodecUninstall.exe"
    19 Feb 2009 18:18:04 507 707 A.... "C:\Program Files\DivX\DivXConverterUninstall.exe"
    19 Feb 2009 18:18:06 507 707 A.... "C:\Program Files\DivX\DivXDSFiltersUninstall.exe"
    19 Feb 2009 18:18:06 507 707 A.... "C:\Program Files\DivX\DivXPlayerUninstall.exe"
    19 Feb 2009 18:18:08 507 707 A.... "C:\Program Files\DivX\DivXWebPlayerUninstall.exe"
    17 Feb 2009 1:02:46 342 848 A.... "C:\Program Files\DNA\btdna.exe"
    17 Feb 2009 0:50:44 1 973 A.... "C:\Program Files\Drive Rescue\unins000.dat"
    17 Feb 2009 0:50:44 72 676 A.... "C:\Program Files\Drive Rescue\unins000.exe"
    11 Feb 2009 10:19:34 380 048 A.... "C:\Program Files\Malwarebytes' Anti-Malware\mbam-dor.exe"
    11 Feb 2009 10:19:30 73 360 A.... "C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll"
    11 Feb 2009 10:19:32 1 273 488 A.... "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe"
    11 Feb 2009 10:19:36 73 360 A.... "C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll"
    11 Feb 2009 10:19:38 399 504 A.... "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe"
    11 Feb 2009 10:19:38 179 856 A.... "C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe"
    11 Feb 2009 10:19:40 44 688 A.... "C:\Program Files\Malwarebytes' Anti-Malware\ssubtmr6.dll"
    26 Feb 2009 12:04:44 8 929 A.... "C:\Program Files\Malwarebytes' Anti-Malware\unins000.dat"
    26 Feb 2009 12:04:32 688 784 A.... "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    11 Feb 2009 10:19:42 77 968 A.... "C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll"
    20 Jan 2009 7:34:44 17 400 A.... "C:\Program Files\Mozilla Firefox\AccessibleMarshal.dll"
    20 Jan 2009 7:34:46 185 848 A.... "C:\Program Files\Mozilla Firefox\crashreporter.exe"
    20 Jan 2009 7:34:46 307 704 A.... "C:\Program Files\Mozilla Firefox\firefox.exe"
    20 Jan 2009 0:28:04 233 472 A.... "C:\Program Files\Mozilla Firefox\freebl3.dll"
    20 Jan 2009 7:34:46 695 288 A.... "C:\Program Files\Mozilla Firefox\js3250.dll"
    20 Jan 2009 7:34:46 710 136 A.... "C:\Program Files\Mozilla Firefox\mozcrt19.dll"
    20 Jan 2009 7:34:46 198 136 A.... "C:\Program Files\Mozilla Firefox\nspr4.dll"
    20 Jan 2009 7:34:46 718 328 A.... "C:\Program Files\Mozilla Firefox\nss3.dll"
    20 Jan 2009 7:34:46 292 344 A.... "C:\Program Files\Mozilla Firefox\nssckbi.dll"
    20 Jan 2009 7:34:46 103 928 A.... "C:\Program Files\Mozilla Firefox\nssdbm3.dll"
    20 Jan 2009 7:34:46 87 544 A.... "C:\Program Files\Mozilla Firefox\nssutil3.dll"
    20 Jan 2009 7:34:46 20 472 A.... "C:\Program Files\Mozilla Firefox\plc4.dll"
    20 Jan 2009 7:34:46 17 400 A.... "C:\Program Files\Mozilla Firefox\plds4.dll"
    20 Jan 2009 7:34:46 103 928 A.... "C:\Program Files\Mozilla Firefox\smime3.dll"
    20 Jan 2009 0:28:04 151 552 A.... "C:\Program Files\Mozilla Firefox\softokn3.dll"
    20 Jan 2009 7:34:46 395 768 A.... "C:\Program Files\Mozilla Firefox\sqlite3.dll"
    20 Jan 2009 7:34:46 136 696 A.... "C:\Program Files\Mozilla Firefox\ssl3.dll"
    20 Jan 2009 7:34:46 242 168 A.... "C:\Program Files\Mozilla Firefox\updater.exe"
    20 Jan 2009 7:34:46 17 912 A.... "C:\Program Files\Mozilla Firefox\xpcom.dll"
    20 Jan 2009 7:34:46 9 744 376 A.... "C:\Program Files\Mozilla Firefox\xul.dll"
    20 Jan 2009 19:57:52 1 198 320 A.... "C:\Program Files\Recuva\Recuva.exe"
    16 Feb 2009 17:14:40 104 586 A.... "C:\Program Files\Recuva\uninst.exe"
    26 Jan 2009 15:30:58 1 287 000 A.... "C:\Program Files\Spybot - Search & Destroy\advcheck.dll"
    26 Jan 2009 15:31:00 428 888 A.... "C:\Program Files\Spybot - Search & Destroy\blindman.exe"
    26 Jan 2009 15:29:26 1 757 696 A.... "C:\Program Files\Spybot - Search & Destroy\SDFiles.exe"
    26 Jan 2009 15:31:02 1 879 896 A.... "C:\Program Files\Spybot - Search & Destroy\SDHelper.dll"
    26 Jan 2009 15:31:06 414 552 A.... "C:\Program Files\Spybot - Search & Destroy\SDMain.exe"
    26 Jan 2009 15:30:34 2 005 504 A.... "C:\Program Files\Spybot - Search & Destroy\SDShred.exe"
    26 Jan 2009 15:31:08 1 740 632 A.SHR "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
    26 Jan 2009 15:31:12 5 365 592 A.SHR "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
    26 Jan 2009 15:31:16 2 144 088 A.SHR "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
    26 Jan 2009 15:31:18 1 303 896 A.... "C:\Program Files\Spybot - Search & Destroy\Tools.dll"
    26 Feb 2009 13:09:16 25 451 A.... "C:\Program Files\Spybot - Search & Destroy\unins000.dat"
    26 Feb 2009 13:08:42 696 200 A.... "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
    16 Jan 2009 14:06:38 204 160 A.... "C:\Program Files\Spybot - Search & Destroy\UninsSrv.dll"
    26 Jan 2009 15:31:20 464 728 A.... "C:\Program Files\Spybot - Search & Destroy\Update.exe"
    16 Feb 2009 19:08:14 10 592 A.... "C:\Program Files\VideoReDoTVSuite\unins000.dat"
    16 Feb 2009 19:08:02 692 569 A.... "C:\Program Files\VideoReDoTVSuite\unins000.exe"
    16 Feb 2009 20:46:38 4 085 A.... "C:\Program Files\ZAR\unins000.dat"
    16 Feb 2009 20:46:22 695 578 A.... "C:\Program Files\ZAR\unins000.exe"
    3 Feb 2009 12:47:56 14 534 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Oyomikudasai.html"
    3 Feb 2009 12:47:56 13 755 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Tu Wo Tang An.html"
    3 Feb 2009 12:47:56 14 418 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Read Me.html"
    3 Feb 2009 12:47:56 17 640 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 L‚ame.html"
    3 Feb 2009 12:47:56 17 790 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Lisez-moi.html"
    3 Feb 2009 12:47:56 15 261 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Viktigt.html"
    3 Feb 2009 12:47:56 14 128 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Zishu.html"
    3 Feb 2009 12:47:56 16 752 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Bitte lesen.html"
    3 Feb 2009 12:47:56 15 745 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Ilgeobogi.html"
    3 Feb 2009 12:47:56 14 882 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Lees mij.html"
    3 Feb 2009 12:47:56 15 833 A.... "C:\Program Files\Adobe\Adobe Device Central CS3\Device Central CS3 Leggimi.html"
    3 Feb 2009 12:59:04 44 814 336 A.... "C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe"
    5 Feb 2009 22:05:08 225 280 A.... "C:\Program Files\Alwil Software\Avast4\Aavm4h.dll"
    5 Feb 2009 22:09:00 188 416 A.... "C:\Program Files\Alwil Software\Avast4\AavmGuih.dll"
    5 Feb 2009 22:05:02 20 992 A.... "C:\Program Files\Alwil Software\Avast4\AavmRpch.dll"
    5 Feb 2009 22:05:20 35 840 A.... "C:\Program Files\Alwil Software\Avast4\AhResMai.dll"
    5 Feb 2009 22:06:54 32 768 A.... "C:\Program Files\Alwil Software\Avast4\ahResMes.dll"
    5 Feb 2009 22:06:32 35 840 A.... "C:\Program Files\Alwil Software\Avast4\AhResNS.dll"
    5 Feb 2009 22:08:34 29 696 A.... "C:\Program Files\Alwil Software\Avast4\AhResOut.dll"
    5 Feb 2009 22:06:48 33 280 A.... "C:\Program Files\Alwil Software\Avast4\ahResP2P.dll"
    5 Feb 2009 22:09:10 43 008 A.... "C:\Program Files\Alwil Software\Avast4\AhResStd.dll"
    5 Feb 2009 22:05:36 53 248 A.... "C:\Program Files\Alwil Software\Avast4\AhResWS.dll"
    5 Feb 2009 22:07:48 94 208 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiMai.dll"
    5 Feb 2009 22:06:52 57 344 A.... "C:\Program Files\Alwil Software\Avast4\ahRuiMes.dll"
    5 Feb 2009 22:06:30 57 344 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiNS.dll"
    5 Feb 2009 22:08:02 118 784 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiOut.dll"
    5 Feb 2009 22:06:46 22 528 A.... "C:\Program Files\Alwil Software\Avast4\ahRuiP2P.dll"
    5 Feb 2009 22:09:08 57 344 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiStd.dll"
    5 Feb 2009 22:05:44 49 152 A.... "C:\Program Files\Alwil Software\Avast4\AhRuiWS.dll"
    5 Feb 2009 22:03:14 274 640 A.... "C:\Program Files\Alwil Software\Avast4\ashAvast.exe"
    5 Feb 2009 22:00:48 225 280 A.... "C:\Program Files\Alwil Software\Avast4\ashBase.dll"
    5 Feb 2009 22:03:34 130 440 A.... "C:\Program Files\Alwil Software\Avast4\ashBug.exe"
    5 Feb 2009 22:03:02 98 304 A.... "C:\Program Files\Alwil Software\Avast4\ashCfgP.dll"
    5 Feb 2009 22:02:50 131 072 A.... "C:\Program Files\Alwil Software\Avast4\ashCfgT.dll"
    5 Feb 2009 22:02:38 151 552 A.... "C:\Program Files\Alwil Software\Avast4\ashChest.dll"
    5 Feb 2009 22:03:48 68 640 A.... "C:\Program Files\Alwil Software\Avast4\ashChest.exe"
    5 Feb 2009 22:04:20 39 872 A.... "C:\Program Files\Alwil Software\Avast4\ashCnsnt.exe"
    5 Feb 2009 22:08:46 81 000 A.... "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
    5 Feb 2009 22:03:20 50 184 A.... "C:\Program Files\Alwil Software\Avast4\ashLogV.exe"
    5 Feb 2009 22:08:26 254 040 A.... "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe"
    5 Feb 2009 22:08:32 204 600 A.... "C:\Program Files\Alwil Software\Avast4\ashOutXt.dll"
    5 Feb 2009 22:08:54 208 720 A.... "C:\Program Files\Alwil Software\Avast4\ashPopWz.exe"
    5 Feb 2009 22:04:32 262 280 A.... "C:\Program Files\Alwil Software\Avast4\ashQuick.exe"
    5 Feb 2009 22:08:40 138 680 A.... "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
    5 Feb 2009 22:13:46 81 072 A.... "C:\Program Files\Alwil Software\Avast4\ashShA64.dll"
    5 Feb 2009 22:04:36 76 880 A.... "C:\Program Files\Alwil Software\Avast4\ashShell.dll"
    5 Feb 2009 22:03:30 126 320 A.... "C:\Program Files\Alwil Software\Avast4\ashSimp2.exe"
    5 Feb 2009 22:04:58 159 280 A.... "C:\Program Files\Alwil Software\Avast4\ashSimpl.exe"
    5 Feb 2009 22:03:22 17 920 A.... "C:\Program Files\Alwil Software\Avast4\ashSkPcc.exe"
    5 Feb 2009 22:04:48 61 440 A.... "C:\Program Files\Alwil Software\Avast4\ashSkPck.exe"
    5 Feb 2009 22:00:54 53 248 A.... "C:\Program Files\Alwil Software\Avast4\ashSODBC.dll"
    5 Feb 2009 22:01:18 233 472 A.... "C:\Program Files\Alwil Software\Avast4\ashSSqlt.dll"
    5 Feb 2009 22:01:34 48 128 A.... "C:\Program Files\Alwil Software\Avast4\ashSXML.dll"
    5 Feb 2009 22:01:00 118 784 A.... "C:\Program Files\Alwil Software\Avast4\ashTask.dll"
    5 Feb 2009 22:02:32 331 776 A.... "C:\Program Files\Alwil Software\Avast4\ashUInt.dll"
    5 Feb 2009 22:01:06 52 160 A.... "C:\Program Files\Alwil Software\Avast4\ashUpd.exe"
    5 Feb 2009 22:06:04 352 920 A.... "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe"
    5 Feb 2009 22:06:08 49 152 A.... "C:\Program Files\Alwil Software\Avast4\ashWsFtr.dll"
    5 Feb 2009 22:00:54 659 456 A.... "C:\Program Files\Alwil Software\Avast4\aswAux.dll"
    2 Feb 2009 23:42:04 31 552 A.... "C:\Program Files\Alwil Software\Avast4\aswChLic.exe"
    5 Feb 2009 21:58:18 131 072 A.... "C:\Program Files\Alwil Software\Avast4\aswCmnB.dll"
    5 Feb 2009 21:58:16 86 016 A.... "C:\Program Files\Alwil Software\Avast4\aswCmnOS.dll"
    5 Feb 2009 21:58:26 192 512 A.... "C:\Program Files\Alwil Software\Avast4\aswCmnS.dll"
    5 Feb 2009 22:00:40 1 302 528 A.... "C:\Program Files\Alwil Software\Avast4\aswEngin.dll"
    5 Feb 2009 22:01:22 11 584 A.... "C:\Program Files\Alwil Software\Avast4\aswIdle.dll"
    5 Feb 2009 22:00:32 23 040 A.... "C:\Program Files\Alwil Software\Avast4\aswInteg.dll"
    5 Feb 2009 21:58:40 327 680 A.... "C:\Program Files\Alwil Software\Avast4\aswRawFS.dll"
    5 Feb 2009 21:58:06 147 456 A.... "C:\Program Files\Alwil Software\Avast4\aswRes.dll"
    5 Feb 2009 21:59:06 86 016 A.... "C:\Program Files\Alwil Software\Avast4\aswScan.dll"
    5 Feb 2009 22:01:26 18 752 A.... "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
    5 Feb 2009 22:06:42 106 496 A.... "C:\Program Files\Alwil Software\Avast4\avCommEx.dll"
    5 Feb 2009 22:02:54 13 656 A.... "C:\Program Files\Alwil Software\Avast4\AVSSHOOK.dll"
    5 Feb 2009 22:11:10 52 160 A.... "C:\Program Files\Alwil Software\Avast4\sched.exe"
    5 Feb 2009 22:03:52 52 160 A.... "C:\Program Files\Alwil Software\Avast4\VisthAux.exe"
    5 Feb 2009 22:03:38 38 848 A.... "C:\Program Files\Alwil Software\Avast4\VisthLic.exe"
    5 Feb 2009 22:03:42 38 848 A.... "C:\Program Files\Alwil Software\Avast4\VisthUpd.exe"
    5 Feb 2009 22:02:12 917 504 A.... "C:\Program Files\Alwil Software\Avast4\XT1922.dll"
    20 Feb 2009 11:52:34 326 966 A.... "C:\Program Files\Astonsoft\DeepBurner\Uninstall.exe"
    30 Dec 2008 21:50:14 38 490 A.... "C:\Program Files\Athan\html\help_arabic.html"
    30 Dec 2008 21:51:50 23 645 A.... "C:\Program Files\Athan\html\help_french.html"
    30 Dec 2008 21:56:12 50 567 A.... "C:\Program Files\Athan\html\help_russian.html"
    30 Dec 2008 21:57:02 27 472 A.... "C:\Program Files\Athan\html\help_spanish.html"
    30 Dec 2008 21:46:50 27 413 A.... "C:\Program Files\Athan\html\help.html"
    26 Dec 2008 16:34:12 2 915 664 A.... "C:\Program Files\AVS4YOU\AVSSoftwareNavigator\AVS4YOUSoftwareNavigator.exe"
    16 Feb 2009 19:43:16 3 698 A.... "C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.dat"
    16 Feb 2009 19:43:16 698 903 A.... "C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe"
    26 Dec 2008 16:34:24 2 627 904 A.... "C:\Program Files\AVS4YOU\AVSUpdateManger\AVSUpdateManager.exe"
    26 Dec 2008 16:34:24 2 099 008 A.... "C:\Program Files\AVS4YOU\AVSUpdateManger\AVSUpdateOptions.exe"
    16 Feb 2009 19:43:18 2 614 A.... "C:\Program Files\AVS4YOU\AVSUpdateManger\unins000.dat"
    16 Feb 2009 19:43:16 698 903 A.... "C:\Program Files\AVS4YOU\AVSUpdateManger\unins000.exe"
    26 Dec 2008 16:34:34 686 384 A.... "C:\Program Files\AVS4YOU\AVSUpdateManger\Updater.exe"
    23 Jan 2009 21:01:28 22 016 A.... "C:\Program Files\CCleaner\Lang\lang-1063.dll"
    23 Jan 2009 21:02:00 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-1071.dll"
    23 Jan 2009 21:02:12 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-1066.dll"
    23 Jan 2009 21:02:08 22 528 A.... "C:\Program Files\CCleaner\Lang\lang-1050.dll"
    23 Jan 2009 21:00:52 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-1030.dll"
    23 Jan 2009 21:01:18 23 552 A.... "C:\Program Files\CCleaner\Lang\lang-1040.dll"
    23 Jan 2009 21:01:48 25 088 A.... "C:\Program Files\CCleaner\Lang\lang-1034.dll"
    23 Jan 2009 21:01:32 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-1044.dll"
    23 Jan 2009 21:01:14 23 040 A.... "C:\Program Files\CCleaner\Lang\lang-1038.dll"
    23 Jan 2009 21:00:46 11 776 A.... "C:\Program Files\CCleaner\Lang\lang-1028.dll"
    23 Jan 2009 21:01:44 22 016 A.... "C:\Program Files\CCleaner\Lang\lang-1048.dll"
    23 Jan 2009 21:01:06 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-1110.dll"
    23 Jan 2009 21:00:26 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-1051.dll"
    23 Jan 2009 21:01:50 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-1055.dll"
    23 Jan 2009 21:00:40 19 456 A.... "C:\Program Files\CCleaner\Lang\lang-1025.dll"
    23 Jan 2009 21:01:00 23 552 A.... "C:\Program Files\CCleaner\Lang\lang-1035.dll"
    23 Jan 2009 21:01:34 22 016 A.... "C:\Program Files\CCleaner\Lang\lang-1045.dll"
    23 Jan 2009 21:00:50 20 480 A.... "C:\Program Files\CCleaner\Lang\lang-1029.dll"
    23 Jan 2009 21:00:28 22 016 A.... "C:\Program Files\CCleaner\Lang\lang-1052.dll"
    23 Jan 2009 21:01:08 26 112 A.... "C:\Program Files\CCleaner\Lang\lang-1032.dll"
    23 Jan 2009 21:01:24 11 776 A.... "C:\Program Files\CCleaner\Lang\lang-1042.dll"
    23 Jan 2009 21:02:02 24 064 A.... "C:\Program Files\CCleaner\Lang\lang-1026.dll"
    23 Jan 2009 21:01:02 24 576 A.... "C:\Program Files\CCleaner\Lang\lang-1036.dll"
    23 Jan 2009 21:01:40 24 576 A.... "C:\Program Files\CCleaner\Lang\lang-1046.dll"
    23 Jan 2009 21:00:56 25 088 A.... "C:\Program Files\CCleaner\Lang\lang-1043.dll"
    23 Jan 2009 21:00:38 23 040 A.... "C:\Program Files\CCleaner\Lang\lang-1027.dll"
    23 Jan 2009 21:01:12 19 456 A.... "C:\Program Files\CCleaner\Lang\lang-1037.dll"
    23 Jan 2009 21:00:34 22 016 A.... "C:\Program Files\CCleaner\Lang\lang-1031.dll"
    23 Jan 2009 21:01:20 14 848 A.... "C:\Program Files\CCleaner\Lang\lang-1041.dll"
    23 Jan 2009 21:01:48 20 992 A.... "C:\Program Files\CCleaner\Lang\lang-1049.dll"
    23 Jan 2009 21:00:32 22 016 A.... "C:\Program Files\CCleaner\Lang\lang-1053.dll"
    23 Jan 2009 21:01:38 25 088 A.... "C:\Program Files\CCleaner\Lang\lang-2070.dll"
    23 Jan 2009 21:00:42 11 776 A.... "C:\Program Files\CCleaner\Lang\lang-2052.dll"
    23 Jan 2009 21:01:56 20 992 A.... "C:\Program Files\CCleaner\Lang\lang-2074.dll"
    23 Jan 2009 21:01:54 20 992 A.... "C:\Program Files\CCleaner\Lang\lang-3098.dll"
    23 Jan 2009 21:02:04 21 504 A.... "C:\Program Files\CCleaner\Lang\lang-5146.dll"
    29 Dec 2008 11:38:52 69 120 A.... "C:\Program Files\DAEMON Tools Lite\Lang\ARA.dll"
    29 Dec 2008 11:38:54 89 600 A.... "C:\Program Files\DAEMON Tools Lite\Lang\BGR.dll"
    29 Dec 2008 11:38:54 4 608 A.... "C:\Program Files\DAEMON Tools Lite\Lang\CAT.dll"
    29 Dec 2008 11:38:50 36 864 A.... "C:\Program Files\DAEMON Tools Lite\Lang\CHS.dll"
    29 Dec 2008 11:38:52 37 376 A.... "C:\Program Files\DAEMON Tools Lite\Lang\CHT.dll"
    29 Dec 2008 11:38:52 81 920 A.... "C:\Program Files\DAEMON Tools Lite\Lang\CSY.dll"
    29 Dec 2008 11:38:54 80 896 A.... "C:\Program Files\DAEMON Tools Lite\Lang\DAN.dll"
    29 Dec 2008 11:38:50 95 744 A.... "C:\Program Files\DAEMON Tools Lite\Lang\DEU.dll"
    29 Dec 2008 11:38:54 19 456 A.... "C:\Program Files\DAEMON Tools Lite\Lang\ELL.dll"
    29 Dec 2008 11:38:50 77 824 A.... "C:\Program Files\DAEMON Tools Lite\Lang\ENU.dll"
    29 Dec 2008 11:38:52 95 232 A.... "C:\Program Files\DAEMON Tools Lite\Lang\ESN.dll"
    29 Dec 2008 11:38:54 85 504 A.... "C:\Program Files\DAEMON Tools Lite\Lang\FIN.dll"
    29 Dec 2008 11:38:50 98 816 A.... "C:\Program Files\DAEMON Tools Lite\Lang\FRA.dll"
    29 Dec 2008 11:38:52 50 176 A.... "C:\Program Files\DAEMON Tools Lite\Lang\HEB.dll"
    29 Dec 2008 11:38:52 87 552 A.... "C:\Program Files\DAEMON Tools Lite\Lang\HRV.dll"
    29 Dec 2008 11:38:52 54 272 A.... "C:\Program Files\DAEMON Tools Lite\Lang\HUN.dll"
    29 Dec 2008 11:38:50 92 160 A.... "C:\Program Files\DAEMON Tools Lite\Lang\ITA.dll"
    29 Dec 2008 11:38:52 51 200 A.... "C:\Program Files\DAEMON Tools Lite\Lang\JPN.dll"
    29 Dec 2008 11:38:54 4 096 A.... "C:\Program Files\DAEMON Tools Lite\Lang\KAT.dll"
    29 Dec 2008 11:38:54 44 032 A.... "C:\Program Files\DAEMON Tools Lite\Lang\KOR.dll"
    29 Dec 2008 11:38:52 91 136 A.... "C:\Program Files\DAEMON Tools Lite\Lang\LTH.dll"
    29 Dec 2008 11:38:54 19 968 A.... "C:\Program Files\DAEMON Tools Lite\Lang\LVI.dll"
    29 Dec 2008 11:38:54 68 608 A.... "C:\Program Files\DAEMON Tools Lite\Lang\NLB.dll"
    29 Dec 2008 11:38:52 89 088 A.... "C:\Program Files\DAEMON Tools Lite\Lang\NOR.dll"
    29 Dec 2008 11:38:52 86 528 A.... "C:\Program Files\DAEMON Tools Lite\Lang\PLK.dll"
    29 Dec 2008 11:38:52 54 272 A.... "C:\Program Files\DAEMON Tools Lite\Lang\PTB.dll"
    29 Dec 2008 11:38:54 88 576 A.... "C:\Program Files\DAEMON Tools Lite\Lang\ROM.dll"
    29 Dec 2008 11:38:50 86 528 A.... "C:\Program Files\DAEMON Tools Lite\Lang\RUS.dll"
    29 Dec 2008 11:38:52 66 048 A.... "C:\Program Files\DAEMON Tools Lite\Lang\SKY.dll"
    29 Dec 2008 11:38:54 80 896 A.... "C:\Program Files\DAEMON Tools Lite\Lang\SLV.dll"
    29 Dec 2008 11:38:54 82 432 A.... "C:\Program Files\DAEMON Tools Lite\Lang\SRL.dll"
    29 Dec 2008 11:38:50 79 872 A.... "C:\Program Files\DAEMON Tools Lite\Lang\SVE.dll"
    29 Dec 2008 11:38:54 24 064 A.... "C:\Program Files\DAEMON Tools Lite\Lang\TRK.dll"
    29 Dec 2008 11:38:52 89 088 A.... "C:\Program Files\DAEMON Tools Lite\Lang\UKR.dll"
    11 Feb 2009 8:16:10 6 083 586 A.... "C:\Program Files\DMV\Radio\radio.exe"
    17 Feb 2009 1:02:46 49 152 A.... "C:\Program Files\DNA\plugins\npbtdna.dll"
    19 Feb 2009 18:17:48 39 408 A.... "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    19 Feb 2009 18:15:12 251 504 A.... "C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll"
    19 Feb 2009 18:15:22 239 216 A.... "C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe"
    5 Jan 2009 23:33:30 345 656 A.... "C:\Program Files\Google\Picasa3\moviethumb.exe"
    5 Jan 2009 23:33:40 50 760 A.... "C:\Program Files\Google\Picasa3\npPicasa3.dll"
    5 Jan 2009 23:33:26 9 033 272 A.... "C:\Program Files\Google\Picasa3\Picasa3.exe"
    5 Jan 2009 23:33:38 18 105 912 A.... "C:\Program Files\Google\Picasa3\Picasa3i18n.dll"
    5 Jan 2009 23:33:30 755 264 A.... "C:\Program Files\Google\Picasa3\PicasaUpdater.exe"
    5 Jan 2009 23:33:28 4 367 936 A.... "C:\Program Files\Google\Picasa3\PicasaPhotoViewer.exe"
    5 Jan 2009 23:31:08 69 693 A.... "C:\Program Files\Google\Picasa3\qtsupport.dll"
    16 Feb 2009 17:09:24 9 934 392 A..H. "C:\Program Files\Google\Picasa3\setup.exe"
    16 Feb 2009 17:09:34 129 894 A.... "C:\Program Files\Google\Picasa3\Uninstall.exe"
    16 Feb 2009 22:35:32 109 800 A.... "C:\Program Files\InstallShield Installation Information\{4FA562A8-3445-4D35-9457-53D13608F14B}\setup.exe"
    16 Feb 2009 22:35:34 155 648 A.... "C:\Program Files\InstallShield Installation Information\{4FA562A8-3445-4D35-9457-53D13608F14B}\_setup.dll"
    16 Feb 2009 22:36:50 109 800 A.... "C:\Program Files\InstallShield Installation Information\{BCD31B70-CA15-479E-B95F-C16EB4CCE1DB}\setup.exe"
    16 Feb 2009 22:36:50 155 648 A.... "C:\Program Files\InstallShield Installation Information\{BCD31B70-CA15-479E-B95F-C16EB4CCE1DB}\_setup.dll"
    16 Feb 2009 15:38:08 368 640 A.... "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\_setup.dll"
    16 Feb 2009 18:59:48 59 782 A.... "C:\Program Files\IVCsoft\Internet Video Converter 1.53 fr\Desinstaller IVC_1.53_fr.exe"
    20 Jan 2009 7:34:46 23 032 A.... "C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll"
    20 Jan 2009 7:34:46 134 648 A.... "C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll"
    16 Feb 2009 16:38:42 143 076 A.... "C:\Program Files\Mozilla Firefox\components\compreg.dat"
    19 Feb 2009 22:16:08 96 790 A.... "C:\Program Files\Mozilla Firefox\components\xpti.dat"
    20 Jan 2009 7:34:48 65 528 A.... "C:\Program Files\Mozilla Firefox\plugins\npnul32.dll"
    16 Feb 2009 17:04:22 144 960 A.... "C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll"
    16 Feb 2009 17:04:24 8 192 A.... "C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll"
    16 Feb 2009 17:04:18 94 208 A.... "C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll"
    20 Jan 2009 0:28:02 117 A.... "C:\Program Files\Mozilla Firefox\res\hiddenWindow.html"
    20 Jan 2009 7:34:44 510 592 A.... "C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
    11 Feb 2009 17:42:26 13 733 888 A.... "C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe"
    26 Jan 2009 18:22:56 61 440 A.... "C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe"
    16 Feb 2009 22:20:16 64 442 A.... "C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\uninst.exe"
    19 Jan 2009 16:59:14 16 384 A.... "C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\Vista Scheduler.exe"
    16 Feb 2009 17:04:18 1 001 A.... "C:\Program Files\Real\RealPlayer\autoplaylist.dat"
    16 Feb 2009 17:04:22 719 360 A.... "C:\Program Files\Real\RealPlayer\dbghelp.dll"
    16 Feb 2009 17:04:26 692 224 A.... "C:\Program Files\Real\RealPlayer\dtdr3260.dll"
    16 Feb 2009 17:04:24 139 264 A.... "C:\Program Files\Real\RealPlayer\DUNZIP32.dll"
    16 Feb 2009 17:04:24 6 656 A.... "C:\Program Files\Real\RealPlayer\fixrjb.exe"
    16 Feb 2009 17:04:18 102 400 A.... "C:\Program Files\Real\RealPlayer\HXAudioDeviceHook.dll"
    16 Feb 2009 17:04:24 36 352 A.... "C:\Program Files\Real\RealPlayer\ierjplug.dll"
    16 Feb 2009 17:04:22 480 A.... "C:\Program Files\Real\RealPlayer\keys.dat"
    16 Feb 2009 17:04:24 41 472 A.... "C:\Program Files\Real\RealPlayer\mmcdda32.dll"
    16 Feb 2009 17:04:22 60 064 A.... "C:\Program Files\Real\RealPlayer\playrlic.html"
    16 Feb 2009 17:04:18 95 784 A.... "C:\Program Files\Real\RealPlayer\rdsf3260.dll"
    16 Feb 2009 17:04:18 7 168 A.... "C:\Program Files\Real\RealPlayer\realjbox.exe"
    16 Feb 2009 17:04:22 60 064 A.... "C:\Program Files\Real\RealPlayer\RealNetworks License.html"
    16 Feb 2009 17:04:18 214 536 A.... "C:\Program Files\Real\RealPlayer\realplay.exe"
    16 Feb 2009 17:04:22 153 152 A.... "C:\Program Files\Real\RealPlayer\RecordingManager.exe"
    16 Feb 2009 17:04:24 659 456 A.... "C:\Program Files\Real\RealPlayer\rjbres.dll"
    16 Feb 2009 17:04:24 339 968 A.... "C:\Program Files\Real\RealPlayer\rjdlg.dll"
    16 Feb 2009 17:04:24 19 456 A.... "C:\Program Files\Real\RealPlayer\rjprog.dll"
    16 Feb 2009 17:04:22 65 536 A.... "C:\Program Files\Real\RealPlayer\rjwmapln.dll"
    16 Feb 2009 17:04:22 53 248 A.... "C:\Program Files\Real\RealPlayer\rpau3260.dll"
    16 Feb 2009 17:04:22 304 736 A.... "C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll"
    16 Feb 2009 17:04:18 9 216 A.... "C:\Program Files\Real\RealPlayer\rphelperapp.exe"
    16 Feb 2009 17:04:18 86 016 A.... "C:\Program Files\Real\RealPlayer\rpplugprot.dll"
    16 Feb 2009 17:04:18 63 016 A.... "C:\Program Files\Real\RealPlayer\rpshell.dll"
    16 Feb 2009 17:04:18 98 304 A.... "C:\Program Files\Real\RealPlayer\rpshellextension.dll"
    16 Feb 2009 17:04:24 43 056 A.... "C:\Program Files\Real\RealPlayer\rpshellsearch.dll"
    16 Feb 2009 17:04:24 32 768 A.... "C:\Program Files\Real\RealPlayer\rpwa3260.dll"
    16 Feb 2009 17:04:18 71 A.... "C:\Program Files\Real\RealPlayer\strs23.dat"
    16 Feb 2009 17:04:18 15 A.... "C:\Program Files\Real\RealPlayer\strs26.dat"
    16 Feb 2009 17:04:24 19 456 A.... "C:\Program Files\Real\RealPlayer\tnetdtct.dll"
    16 Feb 2009 17:04:24 57 344 A.... "C:\Program Files\Real\RealPlayer\tpasdk.dll"
    16 Feb 2009 17:04:24 81 920 A.... "C:\Program Files\Real\RealPlayer\tsasdk.dll"
    16 Feb 2009 17:04:26 14 336 A.... "C:\Program Files\Real\RealPlayer\wmdmhelper.dll"
    21 Jan 2009 0:26:14 13 824 A.... "C:\Program Files\Recuva\Lang\lang-1063.dll"
    21 Jan 2009 0:26:22 13 312 A.... "C:\Program Files\Recuva\Lang\lang-1050.dll"
    21 Jan 2009 0:26:06 12 288 A.... "C:\Program Files\Recuva\Lang\lang-1030.dll"
    21 Jan 2009 0:26:12 14 336 A.... "C:\Program Files\Recuva\Lang\lang-1040.dll"
    21 Jan 2009 0:26:20 15 872 A.... "C:\Program Files\Recuva\Lang\lang-1034.dll"
    21 Jan 2009 0:26:14 6 144 A.... "C:\Program Files\Recuva\Lang\lang-1044.dll"
    21 Jan 2009 0:26:12 14 848 A.... "C:\Program Files\Recuva\Lang\lang-1038.dll"
    21 Jan 2009 0:26:04 7 168 A.... "C:\Program Files\Recuva\Lang\lang-1028.dll"
    21 Jan 2009 0:26:22 12 800 A.... "C:\Program Files\Recuva\Lang\lang-1058.dll"
    21 Jan 2009 0:26:16 13 824 A.... "C:\Program Files\Recuva\Lang\lang-1048.dll"
    21 Jan 2009 0:26:18 8 704 A.... "C:\Program Files\Recuva\Lang\lang-1051.dll"
    21 Jan 2009 0:26:20 12 800 A.... "C:\Program Files\Recuva\Lang\lang-1055.dll"
    21 Jan 2009 0:26:04 12 288 A.... "C:\Program Files\Recuva\Lang\lang-1025.dll"
    21 Jan 2009 0:26:08 14 336 A.... "C:\Program Files\Recuva\Lang\lang-1035.dll"
    21 Jan 2009 0:26:14 6 144 A.... "C:\Program Files\Recuva\Lang\lang-1045.dll"
    21 Jan 2009 0:26:06 11 776 A.... "C:\Program Files\Recuva\Lang\lang-1029.dll"
    21 Jan 2009 0:26:00 14 336 A.... "C:\Program Files\Recuva\Lang\lang-1052.dll"
    21 Jan 2009 0:26:10 15 872 A.... "C:\Program Files\Recuva\Lang\lang-1032.dll"
    21 Jan 2009 0:26:04 13 824 A.... "C:\Program Files\Recuva\Lang\lang-1026.dll"
    21 Jan 2009 0:26:08 15 872 A.... "C:\Program Files\Recuva\Lang\lang-1036.dll"
    21 Jan 2009 0:26:16 15 360 A.... "C:\Program Files\Recuva\Lang\lang-1046.dll"
    21 Jan 2009 0:26:06 14 848 A.... "C:\Program Files\Recuva\Lang\lang-1043.dll"
    21 Jan 2009 0:26:02 11 776 A.... "C:\Program Files\Recuva\Lang\lang-1027.dll"
    21 Jan 2009 0:26:10 11 264 A.... "C:\Program Files\Recuva\Lang\lang-1037.dll"
    21 Jan 2009 0:26:10 13 824 A.... "C:\Program Files\Recuva\Lang\lang-1031.dll"
    21 Jan 2009 0:26:12 8 704 A.... "C:\Program Files\Recuva\Lang\lang-1041.dll"
    21 Jan 2009 0:26:16 13 312 A.... "C:\Program Files\Recuva\Lang\lang-1049.dll"
    21 Jan 2009 0:26:20 13 824 A.... "C:\Program Files\Recuva\Lang\lang-1053.dll"
    21 Jan 2009 0:26:02 4 096 A.... "C:\Program Files\Recuva\Lang\lang-2052.dll"
    21 Jan 2009 0:26:18 9 728 A.... "C:\Program Files\Recuva\Lang\lang-3098.dll"
    21 Jan 2009 0:26:02 13 824 A.... "C:\Program Files\Recuva\Lang\lang-5146.dll"
    10 Jan 2009 15:50:30 1 752 064 A.... "C:\Program Files\Runtime Software\GetDataBack for NTFS\gdbnt.exe"
    16 Feb 2009 20:07:52 414 836 A.... "C:\Program Files\Runtime Software\GetDataBack for NTFS\Uninstall.exe"
    14 Jan 2009 13:11:50 7 878 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\includes.security.zip"
    25 Feb 2009 13:12:00 543 152 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\includes.trojans.zip"
    25 Feb 2009 13:11:52 182 586 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\includes.spybots.zip"
    25 Feb 2009 13:12:10 2 134 504 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\includes.zip"
    7 Jan 2009 13:11:44 123 967 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\includes.dialer.zip"
    11 Feb 2009 13:11:44 167 476 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\includes.hijackers.zip"
    25 Feb 2009 13:11:48 503 407 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\includes.malware.zip"
    25 Feb 2009 13:11:56 619 306 A.... "C:\Program Files\Spybot - Search & Destroy\Updates\supplemental.zip"
    26 Feb 2009 12:26:38 396 288 A.... "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe"
    16 Feb 2009 19:48:40 186 791 A.... "C:\Program Files\VideoLAN\VLC\uninstall.exe"
    6 Feb 2009 17:07:50 532 872 A.... "C:\Program Files\Windows Live\Contacts\abssm.dll"
    6 Feb 2009 17:07:50 59 768 A.... "C:\Program Files\Windows Live\Contacts\conproxy.dll"
    6 Feb 2009 17:07:46 129 400 A.... "C:\Program Files\Windows Live\Contacts\consync.dll"
    6 Feb 2009 17:07:52 647 048 A.... "C:\Program Files\Windows Live\Contacts\contact.dll"
    6 Feb 2009 17:07:48 581 496 A.... "C:\Program Files\Windows Live\Contacts\lmcdata.dll"
    6 Feb 2009 17:07:48 27 512 A.... "C:\Program Files\Windows Live\Contacts\wlcomm.exe"
    6 Feb 2009 17:07:50 32 648 A.... "C:\Program Files\Windows Live\Contacts\wldlog.dll"
    6 Feb 2009 18:04:48 719 720 A.... "C:\Program Files\Windows Live\Installer\wlarp.exe"
    6 Feb 2009 18:04:48 373 608 A.... "C:\Program Files\Windows Live\Installer\wloobe.exe"
    6 Feb 2009 18:06:08 206 184 A.... "C:\Program Files\Windows Live\Installer\wlsres.dll"
    6 Feb 2009 18:53:04 165 208 A.... "C:\Program Files\Windows Live\Mail\ABImport.dll"
    6 Feb 2009 18:52:42 109 408 A.... "C:\Program Files\Windows Live\Mail\actorbas.dll"
    6 Feb 2009 18:52:40 103 776 A.... "C:\Program Files\Windows Live\Mail\adorner.dll"
    6 Feb 2009 18:53:08 192 352 A.... "C:\Program Files\Windows Live\Mail\aimg.dll"
    6 Feb 2009 18:53:08 176 480 A.... "C:\Program Files\Windows Live\Mail\alayout.dll"
    6 Feb 2009 18:52:36 89 432 A.... "C:\Program Files\Windows Live\Mail\canproxy.dll"
    6 Feb 2009 18:53:36 321 888 A.... "C:\Program Files\Windows Live\Mail\canvas.dll"
    6 Feb 2009 18:52:36 107 864 A.... "C:\Program Files\Windows Live\Mail\cnvsshrd.dll"
    6 Feb 2009 18:52:40 93 528 A.... "C:\Program Files\Windows Live\Mail\dgeneral.dll"
    6 Feb 2009 18:53:08 187 744 A.... "C:\Program Files\Windows Live\Mail\mailacct.dll"
    6 Feb 2009 18:53:40 791 392 A.... "C:\Program Files\Windows Live\Mail\mailcomm.dll"
    6 Feb 2009 18:52:38 102 752 A.... "C:\Program Files\Windows Live\Mail\mailimp.dll"
    6 Feb 2009 18:51:24 2 202 464 A.... "C:\Program Files\Windows Live\Mail\maillang.dll"
    6 Feb 2009 18:53:54 11 716 448 A.... "C:\Program Files\Windows Live\Mail\mailres2.dll"
    6 Feb 2009 18:53:04 131 928 A.... "C:\Program Files\Windows Live\Mail\mailrt2.dll"
    6 Feb 2009 18:53:52 2 744 672 A.... "C:\Program Files\Windows Live\Mail\msmail.dll"
    6 Feb 2009 18:52:40 18 784 A.... "C:\Program Files\Windows Live\Mail\piBase.dll"
    6 Feb 2009 18:53:06 121 184 A.... "C:\Program Files\Windows Live\Mail\piOrg.dll"
    6 Feb 2009 18:52:34 71 512 A.... "C:\Program Files\Windows Live\Mail\smapi.dll"
    29 Jan 2009 18:09:20 144 416 A.... "C:\Program Files\Windows Live\Mail\sqmapi.dll"
    6 Feb 2009 18:53:06 131 424 A.... "C:\Program Files\Windows Live\Mail\ucspell.dll"
    6 Feb 2009 18:52:40 104 280 A.... "C:\Program Files\Windows Live\Mail\uxcalendar.dll"
    6 Feb 2009 18:53:38 542 048 A.... "C:\Program Files\Windows Live\Mail\uxcontacts.dll"
    6 Feb 2009 18:53:54 2 392 416 A.... "C:\Program Files\Windows Live\Mail\uxcore.dll"
    6 Feb 2009 18:51:02 302 936 A.... "C:\Program Files\Windows Live\Mail\wab32res.dll"
    6 Feb 2009 18:53:36 315 744 A.... "C:\Program Files\Windows Live\Mail\wabapi.dll"
    6 Feb 2009 18:53:04 169 816 A.... "C:\Program Files\Windows Live\Mail\wcics.dll"
    6 Feb 2009 18:53:04 175 960 A.... "C:\Program Files\Windows Live\Mail\wcstore.dll"
    6 Feb 2009 18:52:42 22 880 A.... "C:\Program Files\Windows Live\Mail\wcstoreproxy.dll"
    6 Feb 2009 18:53:08 169 824 A.... "C:\Program Files\Windows Live\Mail\wcsync.dll"
    6 Feb 2009 18:52:38 50 016 A.... "C:\Program Files\Windows Live\Mail\wldcore.dll"
    6 Feb 2009 18:52:38 32 608 A.... "C:\Program Files\Windows Live\Mail\wldlog.dll"
    6 Feb 2009 18:50:54 115 032 A.... "C:\Program Files\Windows Live\Mail\wlmail.exe"
    29 Jan 2009 18:06:54 3 611 448 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dat"
    29 Jan 2009 18:06:54 454 048 A.... "C:\Program Files\Windows Live\Mail\wlmfilter.dll"
    6 Feb 2009 18:53:08 225 632 A.... "C:\Program Files\Windows Live\Messenger\liveNatTrav.dll"
    6 Feb 2009 18:53:38 554 848 A.... "C:\Program Files\Windows Live\Messenger\livetransport.dll"
    6 Feb 2009 18:52:44 62 304 A.... "C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll"
    6 Feb 2009 18:53:08 222 560 A.... "C:\Program Files\Windows Live\Messenger\msgsc.14.0.8064.0206.dll"
    6 Feb 2009 18:51:12 368 480 A.... "C:\Program Files\Windows Live\Messenger\msgslang.14.0.8064.0206.dll"
    6 Feb 2009 18:53:54 11 410 784 A.... "C:\Program Files\Windows Live\Messenger\msgsres.dll"
    6 Feb 2009 18:53:38 442 208 A.... "C:\Program Files\Windows Live\Messenger\msgswcam.dll"
    6 Feb 2009 18:51:28 3 885 408 A.... "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"
    6 Feb 2009 18:53:34 424 800 A.... "C:\Program Files\Windows Live\Messenger\PresenceIM.dll"
    6 Feb 2009 18:52:42 56 160 A.... "C:\Program Files\Windows Live\Messenger\psmsong.14.0.8064.0206.dll"
    29 Jan 2009 18:08:08 6 153 552 A.... "C:\Program Files\Windows Live\Messenger\rtmpltfm.dll"
    29 Jan 2009 18:09:20 144 416 A.... "C:\Program Files\Windows Live\Mess
    0