OTL logfile created on: 2012-07-04 23:53:54 - Run 1
OTL by OldTimer - Version 3.2.53.1     Folder = D:\
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
3,41 Gb Total Physical Memory | 3,11 Gb Available Physical Memory | 91,05% Memory free
5,25 Gb Paging File | 5,14 Gb Available in Paging File | 97,92% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINNT | %ProgramFiles% = C:\Program Files
Drive C: | 298,08 Gb Total Space | 215,34 Gb Free Space | 72,24% Space Free | Partition Type: NTFS
Drive D: | 1,87 Gb Total Space | 1,83 Gb Free Space | 97,50% Space Free | Partition Type: FAT
Drive I: | 298,08 Gb Total Space | 215,34 Gb Free Space | 72,24% Space Free | Partition Type: NTFS
Drive L: | 298,08 Gb Total Space | 215,34 Gb Free Space | 72,24% Space Free | Partition Type: NTFS
 
Computer Name: lenovo | User Name: awis | NOT logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-04 19:57:06 | 000,595,968 | ---- | M] (OldTimer Tools) -- D:\OTL.exe
PRC - [2011-04-26 11:46:18 | 000,487,424 | ---- | M] () -- C:\Program Files\city\Agent\netcheck.exe
PRC - [2008-04-14 11:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINNT\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-05-26 01:39:48 | 000,998,400 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\System.Management\acc5ec6c04f1eff1029f88e339c98e47\System.Management.ni.dll
MOD - [2012-05-26 01:39:19 | 001,712,128 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\2c3009961961efc6793e53bd415cf157\Microsoft.VisualBasic.ni.dll
MOD - [2012-05-26 01:38:52 | 000,771,584 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\facce4c3f0327583278401d360310a99\System.Runtime.Remoting.ni.dll
MOD - [2012-05-26 01:38:47 | 000,971,264 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\System.Configuration\64bf8d2f963138ede81700b9fd525547\System.Configuration.ni.dll
MOD - [2012-05-26 01:37:08 | 005,450,752 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\System.Xml\9cf4a4fdd044bf3f033ae4fa26bdd796\System.Xml.ni.dll
MOD - [2012-05-26 01:37:05 | 012,430,848 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\891e536eaeebb1c3ea4a2b199f3b739b\System.Windows.Forms.ni.dll
MOD - [2012-05-26 01:36:58 | 001,587,200 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\System.Drawing\f3877aa44425b257edad57137c5a2e21\System.Drawing.ni.dll
MOD - [2012-05-26 01:36:13 | 007,953,408 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\System\12637de2619ee65d57c529f6c786dce1\System.ni.dll
MOD - [2012-05-26 01:35:15 | 000,069,120 | ---- | M] () -- C:\WINNT\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
MOD - [2012-01-23 13:01:00 | 000,220,672 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll
MOD - [2012-01-23 10:22:38 | 011,490,816 | ---- | M] () -- C:\WINNT\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
MOD - [2011-04-26 11:46:18 | 000,487,424 | ---- | M] () -- C:\Program Files\city\Agent\netcheck.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Unknown (-1) | Unknown] --  -- (LanmanServer)
SRV - File not found [Disabled | Unknown] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012-07-03 03:09:22 | 000,775,736 | ---- | M] () [Auto | Unknown] -- c:\Program Files\Hewlett-Packard\Discovery Agent\bin32\discagnt.exe -- (prgnDiscAgent)
SRV - [2012-02-25 03:11:24 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Unknown] -- c:\Program Files\Java\jre1.6.0_20\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2011-11-15 02:47:28 | 000,670,792 | ---- | M] (Juniper Networks) [Auto | Unknown] -- C:\Program Files\Juniper Networks\Common Files\dsNcService.exe -- (dsNcService)
SRV - [2011-03-24 07:38:00 | 000,292,200 | ---- | M] (Lenovo.) [Auto | Unknown] -- C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE -- (DozeSvc)
SRV - [2011-03-24 07:38:00 | 000,061,440 | ---- | M] () [Auto | Unknown] -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service)
SRV - [2011-03-08 16:10:36 | 000,658,088 | ---- | M] (Check Point Software Tech Ltd) [Auto | Unknown] -- C:\WINNT\system32\Prot_srv.exe -- (Pointsec)
SRV - [2011-03-08 16:10:36 | 000,232,104 | ---- | M] (Check Point Software Tech Ltd) [Auto | Unknown] -- C:\WINNT\system32\pstartSr.exe -- (Pointsec_start)
SRV - [2011-01-12 16:05:00 | 000,120,128 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\Common Framework\FrameworkService.exe -- (McAfeeFramework)
SRV - [2010-12-03 16:57:38 | 000,099,328 | ---- | M] (Lenovo Group Limited) [Auto | Unknown] -- C:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD)
SRV - [2010-12-02 18:55:54 | 000,064,440 | ---- | M] (Lenovo Group Limited) [Auto | Unknown] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC)
SRV - [2010-12-02 07:16:38 | 000,333,544 | ---- | M] (Hewlett-Packard) [Auto | Unknown] -- c:\Program Files\Hewlett-Packard\HPCA\Agent\Radstgms.exe -- (Radstgms)
SRV - [2010-12-02 07:16:38 | 000,194,280 | ---- | M] (Hewlett-Packard) [Auto | Unknown] -- c:\Program Files\Hewlett-Packard\HPCA\Agent\radsched.exe -- (radsched)
SRV - [2010-12-02 07:16:36 | 000,300,776 | ---- | M] (Hewlett-Packard) [Auto | Unknown] -- c:\Program Files\Hewlett-Packard\HPCA\Agent\radexecd.exe -- (radexecd)
SRV - [2010-11-24 22:34:24 | 000,045,496 | ---- | M] (Lenovo Group Limited) [Auto | Unknown] -- C:\Program Files\Lenovo\HOTKEY\micmute.exe -- (Lenovo.micmute)
SRV - [2010-10-26 10:55:50 | 001,654,784 | ---- | M] (UltraVNC) [Auto | Unknown] -- c:\Program Files\citygroup\city UltraVNC\winvnc.exe -- (uvnc_service)
SRV - [2010-09-21 16:05:20 | 000,032,768 | ---- | M] ( ) [Auto | Unknown] -- c:\Program Files\city\FirewallMonitor\FirewallMonitor.exe -- (FirewallMonitor)
SRV - [2010-09-21 14:55:38 | 000,045,056 | ---- | M] (PFU LIMITED) [Auto | Unknown] -- C:\WINNT\twain_32\Fjscan32\FJTWMKSV.exe -- (FJTWMKSV)
SRV - [2010-07-15 13:07:50 | 000,013,312 | ---- | M] (citygroup) [Auto | Unknown] -- C:\Program Files\city\WirelessDeviceManager\wdm.exe -- (WmdService)
SRV - [2010-04-28 17:45:16 | 000,016,896 | ---- | M] () [On_Demand | Unknown] -- c:\Program Files\city\Connections\connections_svc.exe -- (Connections_svc)
SRV - [2010-03-26 02:07:00 | 000,147,472 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe -- (McShield)
SRV - [2010-03-26 02:07:00 | 000,070,728 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\WINNT\system32\mfevtps.exe -- (mfevtp)
SRV - [2010-03-26 02:07:00 | 000,066,880 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe -- (McTaskManager)
SRV - [2010-03-26 02:07:00 | 000,022,816 | ---- | M] (McAfee, Inc.) [Auto | Unknown] -- C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe -- (McAfeeEngineService)
SRV - [2009-11-13 03:59:02 | 000,132,392 | ---- | M] (Juniper Networks) [Auto | Unknown] -- C:\Program Files\Common Files\Juniper Networks\JUNS\dsAccessService.exe -- (JuniperAccessService)
SRV - [2008-04-14 11:00:00 | 000,088,576 | ---- | M] (Microsoft Corporation) [Unknown (-1) | Unknown] -- C:\WINNT\system32\wbem\wmiaprpl.dll -- (WmiApRpl)
SRV - [2007-09-14 19:50:26 | 000,090,112 | ---- | M] (citygroup) [Auto | Unknown] -- c:\Program Files\city\MIT\MITServ.exe -- (MIT Service)
SRV - [2006-10-11 14:14:28 | 000,053,248 | ---- | M] (Oracle Corporation) [Auto | Unknown] -- c:\oracle\10.2.0.3-VISTA\bin\omtsreco.exe -- (OracleMTSRecoveryService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Unknown] --  -- (PCIDump)
DRV - File not found [Kernel | System | Unknown] --  -- (lbrtfdc)
DRV - File not found [Unknown (-1) | Unknown (-1) | Unknown] --  -- (LanmanServer)
DRV - File not found [Kernel | System | Unknown] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Unknown] --  -- (Changer)
DRV - [2011-11-15 02:14:44 | 000,026,624 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\dsNcAdpt.sys -- (dsNcAdpt)
DRV - [2011-03-24 07:38:00 | 000,025,968 | ---- | M] (Lenovo.) [Kernel | Boot | Unknown] -- C:\WINNT\system32\drivers\DOZEHDD.SYS -- (DozeHDD)
DRV - [2011-03-24 07:38:00 | 000,012,144 | ---- | M] (Lenovo Group Limited) [Kernel | System | Unknown] -- C:\WINNT\system32\drivers\TPPWRIF.SYS -- (TPPWRIF)
DRV - [2011-03-14 13:53:42 | 000,229,928 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2011-03-08 16:09:38 | 000,221,736 | ---- | M] (Check Point Software Tech Ltd) [Kernel | Boot | Unknown] -- C:\WINNT\System32\drivers\prot_2k.sys -- (prot_2k)
DRV - [2011-03-05 00:14:34 | 000,132,096 | ---- | M] (Ricoh co.,Ltd.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\5U877.sys -- (5U877)
DRV - [2011-02-09 20:49:54 | 001,281,152 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2011-01-13 14:04:50 | 000,122,992 | ---- | M] (Lenovo.) [Kernel | Boot | Unknown] -- C:\WINNT\system32\drivers\ApsX86.sys -- (Shockprf)
DRV - [2011-01-13 14:02:56 | 000,020,592 | ---- | M] (Lenovo.) [Kernel | Boot | Unknown] -- C:\WINNT\system32\drivers\ApsHM86.sys -- (TPDIGIMN)
DRV - [2010-12-21 08:27:06 | 000,174,248 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\e1c5132.sys -- (e1cexpress) Intel(R)
DRV - [2010-12-15 01:14:00 | 000,072,704 | ---- | M] (REDC) [Kernel | Auto | Unknown] -- C:\WINNT\system32\drivers\risdxc86.sys -- (risdxc)
DRV - [2010-11-09 10:05:56 | 007,387,264 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\NETwNx32.sys -- (NETwNx32) ___ Intel(R)
DRV - [2010-10-19 16:33:40 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\HECI.sys -- (MEI) Intel(R)
DRV - [2010-10-15 07:29:14 | 000,260,864 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV - [2010-09-07 20:09:06 | 000,013,680 | ---- | M] (Lenovo Group Limited) [Kernel | System | Unknown] -- C:\WINNT\system32\drivers\smiif32.sys -- (lenovo.smi)
DRV - [2010-03-26 02:07:00 | 000,343,920 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Unknown] -- C:\WINNT\system32\drivers\mfehidk.sys -- (mfehidk)
DRV - [2010-03-26 02:07:00 | 000,091,832 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\mfeavfk.sys -- (mfeavfk)
DRV - [2010-03-26 02:07:00 | 000,075,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\mfeapfk.sys -- (mfeapfk)
DRV - [2010-03-26 02:07:00 | 000,066,600 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\mferkdet.sys -- (mferkdet)
DRV - [2010-03-26 02:07:00 | 000,064,208 | ---- | M] (McAfee, Inc.) [Kernel | System | Unknown] -- C:\WINNT\system32\drivers\mfetdik.sys -- (mfetdik)
DRV - [2010-03-26 02:07:00 | 000,043,288 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\mfebopk.sys -- (mfebopk)
DRV - [2009-11-30 15:29:44 | 000,065,584 | ---- | M] (Citrix Systems, Inc.) [Kernel | System | Unknown] -- C:\WINNT\system32\drivers\ctxusbm.sys -- (ctxusbm)
DRV - [2009-09-10 23:20:20 | 000,029,072 | ---- | M] (Hewlett Packard) [File_System | On_Demand | Unknown] -- C:\WINNT\system32\drivers\radiamsi.sys -- (RadiaMsi)
DRV - [2009-08-31 20:55:08 | 000,184,888 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | Disabled | Unknown] -- C:\WINNT\system32\drivers\ahcix86.sys -- (ahcix86)
DRV - [2009-01-19 11:15:06 | 000,174,336 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\nwusbser.sys -- (NWUSBPort)
DRV - [2009-01-19 11:15:06 | 000,174,336 | ---- | M] (Novatel Wireless Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\nwusbmdm.sys -- (NWUSBModem)
DRV - [2008-11-13 05:41:04 | 003,451,904 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008-04-14 11:00:00 | 000,088,576 | ---- | M] (Microsoft Corporation) [Unknown (-1) | Unknown (-1) | Unknown] -- C:\WINNT\system32\wbem\wmiaprpl.dll -- (WmiApRpl)
DRV - [2007-08-29 02:04:04 | 000,116,264 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Unknown] -- C:\WINNT\system32\drivers\SI3112r.sys -- (SI3112r)
DRV - [2007-08-29 02:04:04 | 000,019,240 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Unknown] -- C:\WINNT\system32\drivers\SiWinAcc.sys -- (SiFilter)
DRV - [2007-06-08 15:58:46 | 000,021,504 | ---- | M] (STMicroelectronics, INC) [Kernel | Boot | Unknown] -- C:\WINNT\system32\drivers\stm_tpm.sys -- (stmtpm)
DRV - [2006-07-02 04:39:40 | 000,036,864 | ---- | M] (Advanced Micro Devices) [Kernel | System | Unknown] -- C:\WINNT\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2005-12-01 00:30:14 | 000,010,880 | ---- | M] (VMware, Inc.) [Kernel | Disabled | Unknown] -- C:\WINNT\system32\drivers\vmscsi.sys -- (vmscsi)
DRV - [2005-06-13 22:51:24 | 000,086,528 | ---- | M] (LSI Logic) [Kernel | Disabled | Unknown] -- C:\WINNT\system32\drivers\symmpi.sys -- (Symmpi)
DRV - [2004-11-19 20:15:08 | 000,018,944 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Unknown] -- C:\WINNT\system32\drivers\cpqcissm.sys -- (cpqcissm)
DRV - [2004-09-22 01:53:18 | 002,278,784 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Unknown] -- C:\WINNT\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.citygroup.net/
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.citygroup.net/
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
 
 
 
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = 
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://zrodlo.eur.nsroot.net
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\..\SearchScopes,DefaultScope = {04E03373-3C03-4D6E-A088-130BD1C69099}
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\..\SearchScopes\{04E03373-3C03-4D6E-A088-130BD1C69099}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\..\SearchScopes\{95052B28-087A-45B7-A901-0C2D74A0201A}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-606747145-706699826-682003330-463678\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = http://euwebgate.eu.ssmb.com
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: c:\WINNT\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINNT\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: c:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: c:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jqs@sun.com: c:\Program Files\Java\jre1.6.0_20\lib\deploy\jqs\ff [2012-02-25 03:11:25 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2012-06-30 11:35:32 | 000,000,734 | ---- | M]) - C:\WINNT\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\Program Files\Java\jre1.6.0_20\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - c:\Program Files\Java\jre1.6.0_20\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Check Point Endpoint Tray Application] c:\Program Files\Common Files\Check Point\UIFramework\cptray.exe (Check Point Software Technologies LTD)
O4 - HKLM..\Run: [cityMAC Agent] c:\Program Files\citygroup\cityMAC\cityMAC.exe ()
O4 - HKLM..\Run: [ConnectionCenter] C:\Program Files\Citrix\ICA Client\concentr.exe (Citrix Systems, Inc.)
O4 - HKLM..\Run: [EDFcsn] c:\Program Files\Hewlett-Packard\Discovery Agent\Plugins\usage\discfcsn.exe ()
O4 - HKLM..\Run: [FJTWAIN Setup] C:\WINNT\Twain_32\fjscan32\FjtwMkup.exe (FUJITSU LIMITED)
O4 - HKLM..\Run: [FtLnSOP_setup] C:\WINNT\twain_32\Fjscan32\SOP\FtLnSOP.exe (PFU LIMITED)
O4 - HKLM..\Run: [FTPWRENV] C:\WINNT\twain_32\Fjscan32\FTPWREVT\FTPWREVT.exe (PFU LIMITED)
O4 - HKLM..\Run: [LenovoAutoScrollUtility] C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [McAfeeUpdaterUI] C:\Program Files\McAfee\Common Framework\udaterui.exe (McAfee, Inc.)
O4 - HKLM..\Run: [Pointsec Tray] c:\Program Files\Pointsec\Pointsec for PC\P95tray.exe (Check Point Software Tech Ltd)
O4 - HKLM..\Run: [Polset] C:\program files\polset\polset.cmd ()
O4 - HKLM..\Run: [PWRMGRTR] C:\Program Files\ThinkPad\Utilities\PWRMGRTR.DLL (Lenovo Group Limited)
O4 - HKLM..\Run: [ShStatEXE] C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE (McAfee, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] - File not found
O4 - HKLM..\Run: [wdmuser] C:\WINNT\System32\WDM\runapp.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Error Recovery Guide.lnk = C:\WINNT\twain_32\Fjscan32\ERG\FTErGuid.exe (PFU LIMITED)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: nodrivetypeautorun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disablecad = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: nointernetopenwith = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-606747145-706699826-682003330-463678\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: city.net ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: citycorp.com ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: citycorp.com ([cityweb] * in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: citydirect.com ([securities] * in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: citygroup.com ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: citygroup.net ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: datastream.com ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: egg.net ([portal.uk] * in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: elementk.com ([contentserver] * in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: livemeeting.com ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: nsroot.net ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: reuters.com ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: rservices.com ([session] * in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: ssmb.com ([]* in Trusted Internal)
O15 - HKU\S-1-5-21-606747145-706699826-682003330-463678\..Trusted Domains: ssmb.com ([gcibcentral.ny] * in Trusted Internal)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_16-windows-i586.cab (Java Plug-in 1.5.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} https://juniper.net/dana-cached/setup/JuniperSetupSP1.cab (JuniperSetupControlXP Class)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = eur.nsroot.net
O18 - Protocol\Handler\qrev {9DE24BAC-FC3C-42c4-9FC4-76B3FAFDBD90} - c:\Program Files\Quest Software\Toad-9.5\Toad for Oracle\RNetPin.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINNT\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Program Files\city\Agent\cityLogon.exe) - C:\Program Files\city\Agent\citylogon.exe ()
O20 - HKLM Winlogon: GinaDLL - (pssogina.dll) - C:\WINNT\System32\PssoGina.dll (Check Point Software Tech Ltd)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINNT\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\WINNT\Web\Wallpaper\1366x768-XP.bmp
O24 - Desktop BackupWallPaper: C:\WINNT\Web\Wallpaper\1366x768-XP.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-07-08 16:20:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-04 07:32:58 | 000,000,000 | ---D | C] -- C:\WINNT\SoftwareDistribution
[2012-07-02 16:02:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\awis\Desktop\English
[2012-06-12 13:15:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Citrix
[2012-06-12 13:14:58 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[5 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\Documents and Settings\awis\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\awis\Local Settings\Application Data\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-04 23:52:19 | 000,002,048 | --S- | M] () -- C:\WINNT\bootstat.dat
[2012-07-04 23:51:16 | 006,553,600 | -H-- | M] () -- C:\Documents and Settings\awis\NTUSER.DAT
[2012-07-04 23:51:16 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\awis\ntuser.ini
[2012-07-04 20:02:21 | 000,000,006 | -H-- | M] () -- C:\WINNT\tasks\SA.DAT
[2012-07-04 09:04:27 | 000,266,208 | ---- | M] () -- C:\WINNT\System32\FNTCACHE.DAT
[2012-07-04 00:49:41 | 006,918,990 | -H-- | M] () -- C:\Documents and Settings\awis\Local Settings\Application Data\IconCache.db
[2012-07-02 10:01:20 | 000,004,680 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012-07-02 09:43:02 | 000,002,206 | ---- | M] () -- C:\WINNT\System32\wpa.dbl
[2012-06-12 18:34:37 | 000,595,306 | ---- | M] () -- C:\WINNT\System32\PerfStringBackup.INI
[2012-06-12 18:34:37 | 000,497,120 | ---- | M] () -- C:\WINNT\System32\perfh009.dat
[2012-06-12 18:34:37 | 000,086,410 | ---- | M] () -- C:\WINNT\System32\perfc009.dat
[5 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\Documents and Settings\awis\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\awis\Local Settings\Application Data\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-05-26 01:29:12 | 000,003,072 | ---- | C] () -- C:\WINNT\System32\iacenc.dll
[2012-01-24 15:41:30 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\awis\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-09-28 10:27:01 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi60Fex0C0A.dll
[2011-09-28 10:27:01 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi60fex0419.dll
[2011-09-28 10:27:01 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi60Fex0410.dll
[2011-09-28 10:27:01 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi60Fex040C.dll
[2011-09-28 10:27:01 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi60Fex0407.dll
[2011-09-28 10:27:01 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5110ex0C0A.dll
[2011-09-28 10:27:01 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi60Fex0409.dll
[2011-09-28 10:27:01 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi60Fex0804.dll
[2011-09-28 10:27:01 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi60Fex0411.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6225ex0C0A.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6225ex0419.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6225ex0416.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6225ex0410.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6225ex040C.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6225ex0409.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6225ex0407.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5110ex0419.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5110ex0410.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5110ex040C.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5110ex0409.dll
[2011-09-28 10:27:00 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5110ex0407.dll
[2011-09-28 10:27:00 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6225ex0412.dll
[2011-09-28 10:27:00 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6225ex0411.dll
[2011-09-28 10:27:00 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5110ex0411.dll
[2011-09-28 10:27:00 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6225ex0804.dll
[2011-09-28 10:27:00 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6225ex0404.dll
[2011-09-28 10:27:00 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5110ex0804.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6125ex0C0A.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6125ex0419.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6125ex0416.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6125ex0410.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6125ex040C.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6125ex0409.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6125ex0407.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5750ex0C0A.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5750ex0419.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5750ex0410.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5750ex040C.dll
[2011-09-28 10:26:59 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5750ex0407.dll
[2011-09-28 10:26:59 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6125ex0412.dll
[2011-09-28 10:26:59 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6125ex0411.dll
[2011-09-28 10:26:59 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5750ex0409.dll
[2011-09-28 10:26:59 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6125ex0804.dll
[2011-09-28 10:26:59 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6125ex0404.dll
[2011-09-28 10:26:59 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5750ex0804.dll
[2011-09-28 10:26:59 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5750ex0411.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5900ex0C0A.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5900ex0419.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5900ex0416.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5900ex0410.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5900ex040C.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5900ex0407.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5650ex0C0A.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5650ex0410.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5650ex040C.dll
[2011-09-28 10:26:58 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5650ex0407.dll
[2011-09-28 10:26:58 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5900ex0412.dll
[2011-09-28 10:26:58 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5900ex0411.dll
[2011-09-28 10:26:58 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5900ex0409.dll
[2011-09-28 10:26:58 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5650ex0419.dll
[2011-09-28 10:26:58 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5650ex0409.dll
[2011-09-28 10:26:58 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5900ex0804.dll
[2011-09-28 10:26:58 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5900ex0404.dll
[2011-09-28 10:26:58 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5650ex0804.dll
[2011-09-28 10:26:58 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5650ex0411.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5530ex0C0A.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5530ex0419.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5530ex0410.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5530ex040C.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5530ex0409.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5530ex0407.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5220ex0C0A.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5220ex0419.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5220ex0410.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5220ex040C.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5220ex0409.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5220ex0407.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5120ex0C0A.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5120ex0419.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5120ex0410.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5120ex040C.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5120ex0409.dll
[2011-09-28 10:26:57 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5120ex0407.dll
[2011-09-28 10:26:57 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5530ex0412.dll
[2011-09-28 10:26:57 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5530ex0411.dll
[2011-09-28 10:26:57 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5220ex0412.dll
[2011-09-28 10:26:57 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5220ex0411.dll
[2011-09-28 10:26:57 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5120ex0412.dll
[2011-09-28 10:26:57 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5120ex0411.dll
[2011-09-28 10:26:57 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5530ex0804.dll
[2011-09-28 10:26:57 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5220ex0804.dll
[2011-09-28 10:26:57 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5120ex0804.dll
[2011-09-28 10:26:56 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5950ex0C0A.dll
[2011-09-28 10:26:56 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5950ex0419.dll
[2011-09-28 10:26:56 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5950ex0416.dll
[2011-09-28 10:26:56 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5950ex0410.dll
[2011-09-28 10:26:56 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5950ex040C.dll
[2011-09-28 10:26:56 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi5950ex0407.dll
[2011-09-28 10:26:56 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5950ex0412.dll
[2011-09-28 10:26:56 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5950ex0411.dll
[2011-09-28 10:26:56 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi5950ex0409.dll
[2011-09-28 10:26:56 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5950ex0804.dll
[2011-09-28 10:26:56 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi5950ex0404.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6750ex0C0A.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6750ex0419.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6750ex0416.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi55302ex0C0A.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi55302ex0419.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi55302ex0410.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi55302ex040C.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi55302ex0409.dll
[2011-09-28 10:26:55 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi55302ex0407.dll
[2011-09-28 10:26:55 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi55302ex0412.dll
[2011-09-28 10:26:55 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi55302ex0411.dll
[2011-09-28 10:26:55 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6750ex0804.dll
[2011-09-28 10:26:55 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6750ex0412.dll
[2011-09-28 10:26:55 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6750ex0411.dll
[2011-09-28 10:26:55 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi55302ex0804.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6750ex0410.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6750ex040C.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6750ex0407.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6670ex0C0A.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6670ex0419.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6670ex0416.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6670ex0410.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6670ex040C.dll
[2011-09-28 10:26:54 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6670ex0407.dll
[2011-09-28 10:26:54 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6750ex0409.dll
[2011-09-28 10:26:54 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6670ex0409.dll
[2011-09-28 10:26:54 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6750ex0404.dll
[2011-09-28 10:26:54 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6670ex0804.dll
[2011-09-28 10:26:54 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6670ex0412.dll
[2011-09-28 10:26:54 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6670ex0411.dll
[2011-09-28 10:26:54 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6670ex0404.dll
[2011-09-28 10:26:53 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6770ex0C0A.dll
[2011-09-28 10:26:53 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6770ex0419.dll
[2011-09-28 10:26:53 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6770ex0416.dll
[2011-09-28 10:26:53 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6770ex0410.dll
[2011-09-28 10:26:53 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6770ex040C.dll
[2011-09-28 10:26:53 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6770ex0407.dll
[2011-09-28 10:26:53 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6770ex0409.dll
[2011-09-28 10:26:53 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6770ex0804.dll
[2011-09-28 10:26:53 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6770ex0412.dll
[2011-09-28 10:26:53 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6770ex0411.dll
[2011-09-28 10:26:53 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6770ex0404.dll
[2011-09-28 10:26:52 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0C0A.dll
[2011-09-28 10:26:52 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0419.dll
[2011-09-28 10:26:52 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0410.dll
[2011-09-28 10:26:52 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230Tex040C.dll
[2011-09-28 10:26:52 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0409.dll
[2011-09-28 10:26:52 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0407.dll
[2011-09-28 10:26:52 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0412.dll
[2011-09-28 10:26:52 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0411.dll
[2011-09-28 10:26:52 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0804.dll
[2011-09-28 10:26:52 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6230Tex0404.dll
[2011-09-28 10:26:51 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230ex0C0A.dll
[2011-09-28 10:26:51 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0C0A.dll
[2011-09-28 10:26:51 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0419.dll
[2011-09-28 10:26:51 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0410.dll
[2011-09-28 10:26:51 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130Tex040C.dll
[2011-09-28 10:26:51 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0409.dll
[2011-09-28 10:26:51 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0407.dll
[2011-09-28 10:26:51 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0412.dll
[2011-09-28 10:26:51 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0411.dll
[2011-09-28 10:26:51 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0804.dll
[2011-09-28 10:26:51 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6130Tex0404.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230ex0419.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230ex0416.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230ex0410.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230ex040C.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230ex0409.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6230ex0407.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130ex0C0A.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130ex0419.dll
[2011-09-28 10:26:50 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130ex0416.dll
[2011-09-28 10:26:50 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6230ex0412.dll
[2011-09-28 10:26:50 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6230ex0411.dll
[2011-09-28 10:26:50 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6130ex0412.dll
[2011-09-28 10:26:50 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6130ex0411.dll
[2011-09-28 10:26:50 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6230ex0804.dll
[2011-09-28 10:26:50 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6230ex0404.dll
[2011-09-28 10:26:50 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6130ex0804.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6240ex0C0A.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6240ex0419.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6240ex0416.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6240ex0410.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6240ex040C.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6240ex0409.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6240ex0407.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130ex0410.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130ex040C.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130ex0409.dll
[2011-09-28 10:26:49 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6130ex0407.dll
[2011-09-28 10:26:49 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6240ex0412.dll
[2011-09-28 10:26:49 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6240ex0411.dll
[2011-09-28 10:26:49 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6240ex0804.dll
[2011-09-28 10:26:49 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6240ex0404.dll
[2011-09-28 10:26:49 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6130ex0404.dll
[2011-09-28 10:26:48 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6140ex0C0A.dll
[2011-09-28 10:26:48 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6140ex0419.dll
[2011-09-28 10:26:48 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6140ex0416.dll
[2011-09-28 10:26:48 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6140ex0410.dll
[2011-09-28 10:26:48 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6140ex040C.dll
[2011-09-28 10:26:48 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6140ex0409.dll
[2011-09-28 10:26:48 | 000,040,960 | ---- | C] () -- C:\WINNT\System32\fi6140ex0407.dll
[2011-09-28 10:26:48 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6140ex0412.dll
[2011-09-28 10:26:48 | 000,036,864 | ---- | C] () -- C:\WINNT\System32\fi6140ex0411.dll
[2011-09-28 10:26:48 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6140ex0804.dll
[2011-09-28 10:26:48 | 000,032,768 | ---- | C] () -- C:\WINNT\System32\fi6140ex0404.dll
[2011-09-28 10:26:47 | 000,000,712 | ---- | C] () -- C:\WINNT\FJTWSTI.INI
[2011-09-26 10:13:25 | 006,918,990 | -H-- | C] () -- C:\Documents and Settings\awis\Local Settings\Application Data\IconCache.db
[2011-09-26 10:09:56 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\awis\Local Settings\Application Data\fusioncache.dat
[2011-09-26 10:09:03 | 000,066,976 | ---- | C] () -- C:\Documents and Settings\awis\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2011-09-26 10:09:00 | 000,000,476 | RHS- | C] () -- C:\Documents and Settings\awis\ntuser.pol
[2011-09-26 10:08:58 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\awis\ntuser.ini
[2011-09-26 10:08:56 | 006,553,600 | -H-- | C] () -- C:\Documents and Settings\awis\NTUSER.DAT
[2011-09-07 17:45:27 | 000,004,680 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2011-08-26 20:38:20 | 000,000,145 | ---- | C] () -- C:\WINNT\System32\oeminfo.ini
[2011-08-26 20:12:10 | 000,262,144 | ---- | C] () -- C:\Documents and Settings\All Users\NTUSER.DAT
[2011-07-08 19:05:59 | 000,498,742 | ---- | C] () -- C:\WINNT\System32\dxmasf.dll
[2011-07-08 19:05:59 | 000,004,126 | ---- | C] () -- C:\WINNT\System32\msdxmlc.dll
[2011-07-08 19:05:47 | 000,069,886 | ---- | C] () -- C:\WINNT\System32\edit.com
[2011-07-08 19:05:42 | 000,013,312 | ---- | C] () -- C:\WINNT\System32\win87em.dll
[2011-07-08 19:05:42 | 000,004,261 | ---- | C] () -- C:\WINNT\win.ini
[2011-07-08 19:05:41 | 000,001,129 | ---- | C] () -- C:\WINNT\System32\vwipxspx.exe
[2011-07-08 19:05:40 | 000,015,360 | ---- | C] () -- C:\WINNT\System32\tsd32.dll
[2011-07-08 19:05:39 | 000,053,478 | ---- | C] () -- C:\WINNT\System32\tcpmon.ini
[2011-07-08 19:05:39 | 000,000,231 | ---- | C] () -- C:\WINNT\system.ini
[2011-07-08 19:05:34 | 000,270,848 | ---- | C] () -- C:\WINNT\System32\sbe.dll
[2011-07-08 19:05:34 | 000,011,753 | ---- | C] () -- C:\WINNT\System32\setver.exe
[2011-07-08 19:05:34 | 000,010,240 | ---- | C] () -- C:\WINNT\System32\scriptpw.dll
[2011-07-08 19:05:34 | 000,004,569 | ---- | C] () -- C:\WINNT\System32\secupd.dat
[2011-07-08 19:05:34 | 000,000,882 | ---- | C] () -- C:\WINNT\System32\share.exe
[2011-07-08 19:05:33 | 000,012,082 | ---- | C] () -- C:\WINNT\System32\rsvp.ini
[2011-07-08 19:05:33 | 000,003,458 | ---- | C] () -- C:\WINNT\System32\rasctrs.ini
[2011-07-08 19:05:33 | 000,003,338 | ---- | C] () -- C:\WINNT\System32\redir.exe
[2011-07-08 19:05:32 | 001,291,776 | ---- | C] () -- C:\WINNT\System32\quartz.dll
[2011-07-08 19:05:32 | 000,733,696 | ---- | C] () -- C:\WINNT\System32\qedwipes.dll
[2011-07-08 19:05:32 | 000,562,176 | ---- | C] () -- C:\WINNT\System32\qedit.dll
[2011-07-08 19:05:32 | 000,386,048 | ---- | C] () -- C:\WINNT\System32\qdvd.dll
[2011-07-08 19:05:32 | 000,279,040 | ---- | C] () -- C:\WINNT\System32\qdv.dll
[2011-07-08 19:05:32 | 000,192,512 | ---- | C] () -- C:\WINNT\System32\qcap.dll
[2011-07-08 19:05:32 | 000,006,877 | ---- | C] () -- C:\WINNT\System32\pschdprf.ini
[2011-07-08 19:05:32 | 000,002,732 | ---- | C] () -- C:\WINNT\System32\perfwci.ini
[2011-07-08 19:05:32 | 000,000,343 | ---- | C] () -- C:\WINNT\System32\prodspec.ini
[2011-07-08 19:05:31 | 000,497,120 | ---- | C] () -- C:\WINNT\System32\perfh009.dat
[2011-07-08 19:05:31 | 000,272,128 | ---- | C] () -- C:\WINNT\System32\perfi009.dat
[2011-07-08 19:05:31 | 000,086,410 | ---- | C] () -- C:\WINNT\System32\perfc009.dat
[2011-07-08 19:05:31 | 000,028,626 | ---- | C] () -- C:\WINNT\System32\perfd009.dat
[2011-07-08 19:05:31 | 000,002,891 | ---- | C] () -- C:\WINNT\System32\perfci.ini
[2011-07-08 19:05:31 | 000,001,152 | ---- | C] () -- C:\WINNT\System32\perffilt.ini
[2011-07-08 19:05:28 | 000,004,463 | ---- | C] () -- C:\WINNT\System32\oembios.dat
[2011-07-08 19:05:27 | 013,107,200 | ---- | C] () -- C:\WINNT\System32\oembios.bin
[2011-07-08 19:05:26 | 000,003,252 | ---- | C] () -- C:\WINNT\System32\nw16.exe
[2011-07-08 19:05:25 | 000,035,648 | ---- | C] () -- C:\WINNT\System32\ntio411.sys
[2011-07-08 19:05:25 | 000,035,424 | ---- | C] () -- C:\WINNT\System32\ntio412.sys
[2011-07-08 19:05:25 | 000,034,560 | ---- | C] () -- C:\WINNT\System32\ntio804.sys
[2011-07-08 19:05:25 | 000,034,560 | ---- | C] () -- C:\WINNT\System32\ntio404.sys
[2011-07-08 19:05:25 | 000,033,840 | ---- | C] () -- C:\WINNT\System32\ntio.sys
[2011-07-08 19:05:25 | 000,029,370 | ---- | C] () -- C:\WINNT\System32\ntdos411.sys
[2011-07-08 19:05:25 | 000,029,274 | ---- | C] () -- C:\WINNT\System32\ntdos412.sys
[2011-07-08 19:05:25 | 000,029,146 | ---- | C] () -- C:\WINNT\System32\ntdos804.sys
[2011-07-08 19:05:25 | 000,029,146 | ---- | C] () -- C:\WINNT\System32\ntdos404.sys
[2011-07-08 19:05:25 | 000,027,866 | ---- | C] () -- C:\WINNT\System32\ntdos.sys
[2011-07-08 19:05:25 | 000,000,741 | ---- | C] () -- C:\WINNT\System32\noise.dat
[2011-07-08 19:05:24 | 000,007,052 | ---- | C] () -- C:\WINNT\System32\nlsfunc.exe
[2011-07-08 19:05:24 | 000,002,656 | ---- | C] () -- C:\WINNT\System32\netware.drv
[2011-07-08 19:05:21 | 000,094,282 | ---- | C] () -- C:\WINNT\System32\msencode.dll
[2011-07-08 19:05:21 | 000,014,336 | ---- | C] () -- C:\WINNT\System32\msdmo.dll
[2011-07-08 19:05:21 | 000,001,405 | ---- | C] () -- C:\WINNT\msdfmap.ini
[2011-07-08 19:05:21 | 000,000,817 | ---- | C] () -- C:\WINNT\System32\mscdexnt.exe
[2011-07-08 19:05:20 | 000,673,088 | ---- | C] () -- C:\WINNT\System32\mlang.dat
[2011-07-08 19:05:20 | 000,046,258 | ---- | C] () -- C:\WINNT\System32\mib.bin
[2011-07-08 19:05:20 | 000,010,110 | ---- | C] () -- C:\WINNT\System32\mqperf.ini
[2011-07-08 19:05:19 | 000,039,274 | ---- | C] () -- C:\WINNT\System32\mem.exe
[2011-07-08 19:05:19 | 000,035,328 | ---- | C] () -- C:\WINNT\System32\mciqtz32.dll
[2011-07-08 19:05:19 | 000,001,131 | ---- | C] () -- C:\WINNT\System32\loadfix.com
[2011-07-08 19:05:18 | 000,199,168 | ---- | C] () -- C:\WINNT\System32\ir32_32.dll
[2011-07-08 19:05:18 | 000,042,809 | ---- | C] () -- C:\WINNT\System32\key01.sys
[2011-07-08 19:05:18 | 000,042,537 | ---- | C] () -- C:\WINNT\System32\keyboard.sys
[2011-07-08 19:05:18 | 000,014,710 | ---- | C] () -- C:\WINNT\System32\kb16.com
[2011-07-08 19:05:17 | 000,004,768 | ---- | C] () -- C:\WINNT\System32\himem.sys
[2011-07-08 19:05:16 | 000,019,694 | ---- | C] () -- C:\WINNT\System32\graphics.com
[2011-07-08 19:05:15 | 001,015,477 | ---- | C] () -- C:\WINNT\System32\esentprf.ini
[2011-07-08 19:05:15 | 000,186,880 | ---- | C] () -- C:\WINNT\System32\encdec.dll
[2011-07-08 19:05:15 | 000,012,642 | ---- | C] () -- C:\WINNT\System32\edlin.exe
[2011-07-08 19:05:15 | 000,008,424 | ---- | C] () -- C:\WINNT\System32\exe2bin.exe
[2011-07-08 19:05:15 | 000,000,882 | ---- | C] () -- C:\WINNT\System32\fastopen.exe
[2011-07-08 19:05:14 | 000,218,003 | ---- | C] () -- C:\WINNT\System32\dssec.dat
[2011-07-08 19:05:09 | 000,053,840 | ---- | C] () -- C:\WINNT\System32\dosx.exe
[2011-07-08 19:05:08 | 000,252,928 | ---- | C] () -- C:\WINNT\System32\compatUI.dll
[2011-07-08 19:05:08 | 000,059,904 | ---- | C] () -- C:\WINNT\System32\devenum.dll
[2011-07-08 19:05:08 | 000,050,620 | ---- | C] () -- C:\WINNT\System32\command.com
[2011-07-08 19:05:08 | 000,027,097 | ---- | C] () -- C:\WINNT\System32\country.sys
[2011-07-08 19:05:08 | 000,020,634 | ---- | C] () -- C:\WINNT\System32\debug.exe
[2011-07-08 19:05:08 | 000,001,804 | ---- | C] () -- C:\WINNT\System32\Dcache.bin
[2011-07-08 19:05:07 | 000,355,112 | ---- | C] () -- C:\WINNT\System32\msjetoledb40.dll
[2011-07-08 19:05:06 | 000,070,656 | ---- | C] () -- C:\WINNT\System32\amstream.dll
[2011-07-08 19:05:06 | 000,012,498 | ---- | C] () -- C:\WINNT\System32\append.exe
[2011-07-08 19:05:06 | 000,009,029 | ---- | C] () -- C:\WINNT\System32\ansi.sys
[2011-07-08 19:00:59 | 000,783,644 | ---- | C] () -- C:\WINNT\System32\igkrng600.bin
[2011-07-08 19:00:55 | 000,201,496 | ---- | C] () -- C:\WINNT\System32\igfcg600m.bin
[2011-07-08 19:00:55 | 000,145,804 | ---- | C] () -- C:\WINNT\System32\igcompkrng600.bin
[2011-07-08 19:00:55 | 000,004,096 | ---- | C] ( ) -- C:\WINNT\System32\IGFXDEVLib.dll
[2011-07-08 19:00:54 | 000,000,151 | ---- | C] () -- C:\WINNT\System32\GfxUI.exe.config
[2011-07-08 18:59:05 | 000,001,372 | ---- | C] () -- C:\WINNT\System32\VoipUpdate.ini
[2011-07-08 18:59:04 | 000,030,893 | ---- | C] () -- C:\WINNT\System32\drivers\Mixer.ini
[2011-07-08 18:59:04 | 000,001,816 | ---- | C] () -- C:\WINNT\System32\drivers\Altmixer.ini
[2011-07-08 18:57:49 | 000,156,672 | ---- | C] () -- C:\WINNT\System32\RTLCPAPI.dll
[2011-07-08 18:57:36 | 003,107,788 | ---- | C] () -- C:\WINNT\System32\ativvaxx.dat
[2011-07-08 18:57:36 | 003,107,788 | ---- | C] () -- C:\WINNT\System32\ativva5x.dat
[2011-07-08 18:57:36 | 000,887,724 | ---- | C] () -- C:\WINNT\System32\ativva6x.dat
[2011-07-08 18:57:34 | 000,180,720 | ---- | C] () -- C:\WINNT\System32\atiicdxx.dat
[2011-07-08 17:22:26 | 000,000,061 | ---- | C] () -- C:\WINNT\smscfg.ini
[2011-07-08 16:35:41 | 000,012,288 | ---- | C] () -- C:\WINNT\System32\imgbuild.dll
[2011-07-08 16:34:03 | 000,002,048 | --S- | C] () -- C:\WINNT\bootstat.dat
[2011-07-08 16:20:56 | 000,000,000 | ---- | C] () -- C:\WINNT\control.ini
[2011-07-08 16:19:39 | 000,000,488 | RH-- | C] () -- C:\WINNT\System32\logonui.exe.manifest
[2011-07-08 16:19:33 | 000,000,749 | RH-- | C] () -- C:\WINNT\System32\cdplayer.exe.manifest
[2011-07-08 16:18:28 | 000,021,640 | ---- | C] () -- C:\WINNT\System32\emptyregdb.dat
[2011-07-08 16:18:16 | 000,000,037 | ---- | C] () -- C:\WINNT\vbaddin.ini
[2011-07-08 16:18:16 | 000,000,036 | ---- | C] () -- C:\WINNT\vb.ini
[2011-07-08 16:17:50 | 000,013,223 | ---- | C] () -- C:\WINNT\System32\tslabels.ini
[2011-07-08 16:17:50 | 000,001,931 | ---- | C] () -- C:\WINNT\System32\msdtcprf.ini
[2011-07-08 16:17:50 | 000,001,793 | ---- | C] () -- C:\WINNT\System32\fxsperf.ini
[2011-07-08 12:15:36 | 000,000,000 | ---- | C] () -- C:\WINNT\ativpsrm.bin
[2011-07-08 12:13:04 | 000,595,306 | ---- | C] () -- C:\WINNT\System32\PerfStringBackup.INI
[2011-07-08 12:13:03 | 000,004,073 | ---- | C] () -- C:\WINNT\ODBCINST.INI
[2011-07-08 12:12:12 | 000,266,208 | ---- | C] () -- C:\WINNT\System32\FNTCACHE.DAT
[2011-03-08 16:10:38 | 000,141,992 | ---- | C] () -- C:\WINNT\System32\NovPwd32.dll
[2011-03-08 15:26:38 | 000,135,168 | ---- | C] () -- C:\WINNT\System32\LogonAgentAPI.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-06-12 13:15:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Citrix
[2011-09-07 11:13:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Juniper Networks
[2011-09-28 10:37:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2011-09-26 13:54:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Peregrine
[2011-09-26 18:47:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PKWARE
[2011-09-07 11:20:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Pointsec
[2011-09-26 10:51:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Research In Motion
[2011-09-28 10:38:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SSScanAppDataDir
[2012-06-09 00:33:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Default User\Application Data\ICAClient
[2011-10-21 06:48:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\Documents
[2011-09-28 10:37:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\Fujitsu
[2012-03-13 18:06:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\GHISLER
[2012-02-27 11:39:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\ICAClient
[2012-05-18 15:07:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\Juniper Networks
[2011-10-21 06:48:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\Office
[2011-10-06 12:51:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\PKWARE
[2011-09-26 10:13:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\awis\Application Data\PwrMgr
[2011-10-06 13:33:10 | 000,000,316 | ---- | M] () -- C:\WINNT\Tasks\PMTask.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >