Need log analysis plz

[El loco]

Hello, just noticed you changed the antivirus guide.
Anyways, here are my logs. Could you take a quick look at them. Thx

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:43:16 AM, on 10/22/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1201108691495
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1201111902218
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CS2\Services\Tcpip\..\{0FA321D1-4CEB-4ACA-A79E-90901D650B46}: NameServer = 167.206.245.130,167.206.245.129
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Unknown owner - C:\Program Files\a-squared Anti-Malware\a2service.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate1c9f7db41a482ee) (gupdate1c9f7db41a482ee) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 8566 bytes

Malwarebytes' Anti-Malware 1.41
Database version: 3011
Windows 5.1.2600 Service Pack 2

10/22/2009 10:36:00 AM
mbam-log-2009-10-22 (10-36-00).txt

Scan type: Quick Scan
Objects scanned: 111623
Time elapsed: 3 minute(s), 45 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\PEV.exe (Trojan.PWS) -> Quarantined and deleted successfully.

 

[El loco]

hmm, my combofix log seems to be too big and forum won't let me post it

 

[Osiris]

Post sections of it at a time and you should be fine

 

[El loco]

ComboFix 09-10-20.03 - Mike 10/22/2009 10:13.4.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.958.540 [GMT -4:00]
Running from: c:\documents and settings\Mike\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 091021-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Files Created from 2009-09-22 to 2009-10-22 )))))))))))))))))))))))))))))))
.

2009-10-09 13:17 . 2009-10-09 13:17 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-10-09 13:14 . 2009-10-09 13:14 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-10-07 04:35 . 2009-10-07 04:35 -------- d-----w- c:\program files\iPod
2009-10-07 04:35 . 2009-10-07 04:36 -------- d-----w- c:\program files\iTunes
2009-10-07 04:35 . 2009-10-07 04:36 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-10-06 23:49 . 2009-10-10 00:49 -------- d-----w- c:\documents and settings\Mike\Application Data\gtk-2.0
2009-10-06 23:49 . 2009-10-06 23:49 -------- d-----w- c:\documents and settings\Mike\.thumbnails
2009-10-06 23:48 . 2009-10-19 20:08 -------- d-----w- c:\documents and settings\Mike\.gimp-2.6
2009-10-06 23:47 . 2009-10-06 23:47 -------- d-----w- c:\program files\GIMP-2.0
2009-09-22 18:58 . 2009-09-22 18:59 -------- d-----w- C:\ConverterOutput
2009-09-22 18:57 . 2004-09-10 17:50 34820 ----a-w- c:\windows\system32\ffdshow.reg
2009-09-22 18:57 . 2007-03-25 04:51 404480 ----a-w- c:\windows\system32\libmplayer.dll
2009-09-22 18:57 . 2007-03-25 04:51 3049984 ----a-w- c:\windows\system32\libavcodec.dll
2009-09-22 18:57 . 2007-03-25 04:51 114688 ----a-w- c:\windows\system32\libmpeg2_ff.dll
2009-09-22 18:57 . 2007-01-01 09:30 200704 ----a-w- c:\windows\system32\TomsMoComp_ff.dll
2009-09-22 18:57 . 2009-09-22 18:57 -------- d-----w- c:\program files\Cucusoft
2009-09-22 18:05 . 2009-09-22 18:05 -------- d-----w- c:\documents and settings\Mike\Local Settings\Application Data\Broad Intelligence
2009-09-22 18:03 . 2009-09-22 19:36 -------- d-----w- c:\documents and settings\Mike\Application Data\Broad Intelligence

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-19 20:11 . 2008-03-15 15:17 -------- d-----w- c:\documents and settings\Mike\Application Data\Apple Computer
2009-10-16 18:25 . 2008-06-17 18:51 -------- d-----w- c:\program files\Diablo II
2009-10-13 13:24 . 2008-01-23 18:14 -------- d-----w- c:\program files\Microsoft Silverlight
2009-10-12 15:51 . 2009-02-14 04:27 -------- d-----w- c:\program files\Diablo II 2
2009-10-09 13:15 . 2008-02-25 19:32 -------- d-----w- c:\program files\Windows Live
2009-10-09 13:11 . 2009-08-01 05:13 -------- d-----w- c:\program files\Microsoft
2009-10-07 04:35 . 2008-03-15 15:16 -------- d-----w- c:\program files\Common Files\Apple
2009-10-07 04:33 . 2008-12-05 16:42 -------- d-----w- c:\program files\QuickTime
2009-09-30 23:03 . 2008-10-20 17:42 -------- d-----w- c:\program files\MediaCoder
2009-09-26 02:54 . 2009-02-14 01:26 -------- d-----w- c:\documents and settings\Mike\Application Data\mIRC
2009-09-26 02:41 . 2009-02-14 01:26 -------- d-----w- c:\program files\mIRC
2009-09-22 01:41 . 2008-02-12 00:55 -------- d-----w- c:\documents and settings\Mike\Application Data\uTorrent
2009-09-22 01:05 . 2008-01-23 17:01 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-18 16:00 . 2009-09-18 16:00 -------- d-----w- c:\program files\Common Files\Futuremark Shared
2009-09-13 14:51 . 2009-09-12 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2009-09-12 15:49 . 2009-09-12 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee Security Scan
2009-09-12 15:49 . 2009-09-12 15:49 -------- d-----w- c:\program files\NOS
2009-09-01 18:12 . 2009-08-29 00:45 -------- d-----w- c:\program files\Cossacks
2009-08-29 00:44 . 2009-08-29 00:44 53248 ----a-w- c:\windows\system32\unrar.dll
2009-08-28 23:42 . 2009-03-18 23:31 2065696 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-08-28 23:42 . 2008-10-24 22:44 40448 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-08-28 21:32 . 2009-08-29 00:44 4358144 ----a-w- c:\windows\uncsetup.exe
2009-08-17 16:10 . 2009-02-27 16:07 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-02-27 16:07 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-02-27 16:07 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-02-27 16:07 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-02-27 16:07 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-02-27 16:07 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-02-27 16:07 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-02-27 16:07 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-02-27 16:07 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-06 02:48 . 2009-08-01 05:32 54752 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys
2009-08-03 17:36 . 2009-04-08 22:13 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-03 17:36 . 2009-04-08 22:13 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-08-01 15:06 . 2008-01-23 21:06 84368 ----a-w- c:\documents and settings\Mike\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-01 05:33 . 2008-01-23 17:04 84368 ----a-w- c:\documents and settings\Yosley\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-26 20:44 . 2009-07-26 20:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-12_22.33.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-22 13:48 . 2009-10-22 13:48 16384 c:\windows\Temp\Perflib_Perfdata_5bc.dat
+ 2008-06-10 17:40 . 2009-08-14 00:42 59976 c:\windows\system32\Restore\rstrlog.dat
+ 2009-09-22 03:16 . 2009-05-29 17:36 39424 c:\windows\system32\ReinstallBackups\0006\DriverFiles\usbaapl.sys
- 2004-08-07 00:17 . 2009-08-01 15:10 64080 c:\windows\system32\perfc009.dat
+ 2004-08-07 00:17 . 2009-10-09 13:23 64080 c:\windows\system32\perfc009.dat
+ 2009-08-19 03:41 . 2003-04-18 23:29 44544 c:\windows\system32\msxml4a.dll
+ 2008-08-22 16:07 . 2009-09-12 15:49 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
- 2008-08-22 16:07 . 2009-06-08 17:06 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2009-09-18 16:00 . 2008-09-17 19:14 70392 c:\windows\system32\Futuremark\MSC\Direcpll.dll
+ 2009-09-22 03:16 . 2009-08-28 23:42 40448 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaapl.sys
+ 2009-10-07 04:36 . 2009-05-18 18:17 26600 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
+ 2009-10-09 13:15 . 2009-08-06 02:48 54752 c:\windows\system32\DRVSTORE\fssfltr_F64381C38F211E3160A660B196A6A585F80604F9\fssfltr_tdi.sys
+ 2006-09-19 18:44 . 2009-05-18 18:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
+ 2009-09-18 16:00 . 2008-09-17 19:14 27672 c:\windows\system32\drivers\Entech.sys
+ 2009-08-12 22:34 . 2008-10-16 19:09 51224 c:\windows\system32\dllcache\cache\wuauclt.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 13824 c:\windows\system32\dllcache\cache\wscntfy.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 82944 c:\windows\system32\dllcache\cache\ws2_32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 24576 c:\windows\system32\dllcache\cache\userinit.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 14336 c:\windows\system32\dllcache\cache\svchost.exe
+ 2009-08-12 22:34 . 2005-06-10 23:53 57856 c:\windows\system32\dllcache\cache\spoolsv.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 89088 c:\windows\system32\dllcache\cache\rasauto.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 17408 c:\windows\system32\dllcache\cache\powrprof.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 33792 c:\windows\system32\dllcache\cache\msgsvc.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 13312 c:\windows\system32\dllcache\cache\lsass.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 22016 c:\windows\system32\dllcache\cache\lpk.dll
+ 2009-08-12 22:34 . 2004-08-04 02:58 24576 c:\windows\system32\dllcache\cache\kbdclass.sys
+ 2009-08-12 22:34 . 2004-08-04 03:00 29056 c:\windows\system32\dllcache\cache\ip6fw.sys
+ 2009-08-12 22:34 . 2004-08-04 04:56 15360 c:\windows\system32\dllcache\cache\ctfmon.exe
+ 2009-08-12 22:34 . 2004-08-04 03:05 14336 c:\windows\system32\dllcache\cache\asyncmac.sys
+ 2009-08-12 22:34 . 2004-08-07 00:15 11648 c:\windows\system32\dllcache\cache\acpiec.sys
+ 2009-10-09 13:14 . 2009-10-09 13:14 98816 c:\windows\Installer\85408.msi
+ 2009-10-09 13:12 . 2009-10-09 13:12 22016 c:\windows\Installer\8538f.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 27136 c:\windows\Installer\85360.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 80395 c:\windows\Installer\{A85FD55B-891B-4314-97A5-EA96C0BD80B5}\MsblIco.Exe
+ 2009-10-09 13:17 . 2009-10-09 13:17 29316 c:\windows\Installer\{95120000-0122-0409-0000-0000000FF1CE}\olc_setup.exe
+ 2009-10-09 13:13 . 2009-10-09 13:13 58945 c:\windows\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe
+ 2009-10-09 14:02 . 2009-10-09 14:02 49152 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\8c8cfc96309ae94b76ab79765850c5b4\WindowsLiveWriter.ni.exe
- 2009-08-01 15:31 . 2009-08-01 15:31 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Microsoft.VisualC.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Microsoft.VisualC.ni.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 5120 c:\windows\system32\dllcache\cache\sfc.dll
+ 2009-08-12 22:34 . 2004-08-07 00:17 2944 c:\windows\system32\dllcache\cache\null.sys
+ 2009-08-12 22:34 . 2004-08-07 00:15 4224 c:\windows\system32\dllcache\cache\beep.sys
+ 2009-07-10 16:15 . 2009-07-10 16:15 306544 c:\windows\WLXPGSS.SCR
+ 2007-12-04 06:56 . 2007-12-04 06:56 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcr80.dll
+ 2007-12-04 06:56 . 2007-12-04 06:56 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcp80.dll
+ 2007-12-03 22:58 . 2007-12-03 22:58 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcm80.dll
+ 2004-08-07 00:17 . 2009-10-09 13:23 406990 c:\windows\system32\perfh009.dat
- 2004-08-07 00:17 . 2009-08-01 15:10 406990 c:\windows\system32\perfh009.dat
+ 2009-07-18 03:21 . 2009-07-18 03:21 257440 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2006-10-03 23:47 . 2008-04-17 16:12 107368 c:\windows\system32\GEARAspi.dll
+ 2006-10-03 23:47 . 2008-04-17 17:12 107368 c:\windows\system32\GEARAspi.dll
+ 2009-10-07 04:36 . 2008-04-17 17:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 502272 c:\windows\system32\dllcache\cache\winlogon.exe
+ 2009-08-12 22:34 . 2008-03-01 13:06 826368 c:\windows\system32\dllcache\cache\wininet.dll
+ 2009-08-12 22:34 . 2007-03-08 15:36 577536 c:\windows\system32\dllcache\cache\user32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 295424 c:\windows\system32\dllcache\cache\termsrv.dll
+ 2009-08-12 22:34 . 2007-10-30 17:20 360064 c:\windows\system32\dllcache\cache\tcpip.sys
+ 2009-08-12 22:34 . 2004-08-04 04:56 170496 c:\windows\system32\dllcache\cache\srsvc.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 108032 c:\windows\system32\dllcache\cache\services.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 180224 c:\windows\system32\dllcache\cache\scecli.dll
+ 2009-08-12 22:34 . 2005-07-26 04:39 397824 c:\windows\system32\dllcache\cache\rpcss.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 382464 c:\windows\system32\dllcache\cache\qmgr.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 435200 c:\windows\system32\dllcache\cache\ntmssvc.dll
+ 2009-08-12 22:34 . 2007-02-09 11:10 574464 c:\windows\system32\dllcache\cache\ntfs.sys
+ 2009-08-12 22:34 . 2004-08-04 04:56 407040 c:\windows\system32\dllcache\cache\netlogon.dll
+ 2009-08-12 22:34 . 2004-08-04 03:14 182912 c:\windows\system32\dllcache\cache\ndis.sys
+ 2009-08-12 22:34 . 2006-11-01 19:17 927504 c:\windows\system32\dllcache\cache\mfc40u.dll
+ 2009-08-12 22:34 . 2007-04-16 15:52 984576 c:\windows\system32\dllcache\cache\kernel32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 110080 c:\windows\system32\dllcache\cache\imm32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 792064 c:\windows\system32\dllcache\cache\comres.dll
+ 2009-08-12 22:34 . 2006-08-25 15:45 617472 c:\windows\system32\dllcache\cache\comctl32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 167936 c:\windows\system32\dllcache\cache\appmgmts.dll
+ 2009-08-12 22:34 . 2006-02-15 00:22 142464 c:\windows\system32\dllcache\cache\aec.sys
+ 2009-10-09 13:17 . 2009-10-09 13:17 517120 c:\windows\Installer\8546f.msi
+ 2009-10-09 13:16 . 2009-10-09 13:16 969728 c:\windows\Installer\8545a.msi
+ 2009-10-09 13:15 . 2009-10-09 13:15 569344 c:\windows\Installer\85448.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 183296 c:\windows\Installer\85417.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 727040 c:\windows\Installer\85412.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 483328 c:\windows\Installer\8540d.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 778752 c:\windows\Installer\85402.msi
+ 2009-10-09 13:13 . 2009-10-09 13:13 463872 c:\windows\Installer\853c6.msi
+ 2009-10-09 13:13 . 2009-10-09 13:13 735744 c:\windows\Installer\853b7.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 430080 c:\windows\Installer\85388.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 155648 c:\windows\Installer\8536c.msi

 

[El loco]

+ 2009-10-07 04:31 . 2009-10-07 04:31 694272 c:\windows\Installer\32e3c4d.msi
+ 2009-10-07 04:37 . 2009-10-07 04:37 102400 c:\windows\Installer\{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}\iTunesIco.exe
+ 2009-10-09 13:14 . 2009-10-09 13:14 132096 c:\windows\Installer\{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}\WLXPhotoGalleryIcon.exe
+ 2009-09-22 22:50 . 2007-01-09 12:28 110592 c:\windows\Downloaded Program Files\CONFLICT.1\PURes-us.dll
+ 2006-11-20 15:04 . 2006-11-20 15:04 117088 c:\windows\Downloaded Program Files\CONFLICT.1\PURen-us.dll
+ 2009-08-19 15:55 . 2009-08-19 15:55 829288 c:\windows\Downloaded Program Files\CONFLICT.1\MsnPUpld.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 638976 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\0bebc33895e17d9428d5ac5cac640644\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 921600 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f629137cef994e9b3a22154edd28e594\WindowsLive.Writer.BlogClient.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 868352 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f52cbafd1958432efd99b650a1355bc4\WindowsLive.Writer.Controls.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 348160 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e606ee5c083456b61f01863dca1a33ed\WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 348160 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\e606ee5c083456b61f01863dca1a33ed\WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 176128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\dfb25f605ea6567d1a44769d98134421\WindowsLive.Writer.HtmlParser.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 139264 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d2a1fa0ffe9ff28ca73a0e63f75ad640\WindowsLive.Writer.FileDestinations.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 335872 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c41d35c4da33e3d15bbead677fbfda54\WindowsLive.Writer.Interop.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 143360 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\8148998f5aeb4e0d4754e2b177fbc0a5\WindowsLive.Writer.Extensibility.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 335872 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7f1578c07abde4a45112ded90fdf6383\WindowsLive.Writer.Interop.Mshtml.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 376832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\646b34a103a6733721ce80cea776f575\WindowsLive.Writer.SpellChecker.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 475136 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\549e4a473221a09c5a120dd67ea74ef0\WindowsLive.Writer.Localization.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 114688 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3c65077287d519928ee08fc0fbec503a\WindowsLive.Writer.Api.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 282624 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\19b4b3ce7dc15df3e401f0afe53abde6\WindowsLive.Writer.Mshtml.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\18f3afd165465a8411ca4e818b59ea23\WindowsLive.Writer.Instrumentation.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 131072 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\17b43218d5fcc31b5d2b7e23388626ff\WindowsLive.Writer.Passport.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 634880 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\10dee7eef6c7c62ea859b97e5c90a38f\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 200704 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\066c9df7e3de63c556d9cc5359d723f6\WindowsLive.Writer.BrowserControl.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\ccb4a1c2aa0552c5efa887333e9d0594\WindowsLive.Client.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 339968 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 339968 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb\System.Runtime.Serialization.Formatters.Soap.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 815104 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0898f6c1de8cb89413d206e3d6a3ce1d\System.Runtime.Remoting.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 815104 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\0898f6c1de8cb89413d206e3d6a3ce1d\System.Runtime.Remoting.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\c46625ea87db53ccf6194fe17ee05c19\System.Configuration.Install.ni.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2009-09-22 03:16 . 2009-05-29 17:36 2060288 c:\windows\system32\ReinstallBackups\0006\DriverFiles\usbaaplrc.dll
+ 2009-09-22 03:16 . 2009-08-28 23:42 2065696 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaaplrc.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 1580544 c:\windows\system32\dllcache\cache\sfcfiles.dll
+ 2009-08-12 22:34 . 2007-02-28 09:08 2136064 c:\windows\system32\dllcache\cache\ntoskrnl.exe
+ 2009-08-12 22:34 . 2007-02-28 08:38 2015744 c:\windows\system32\dllcache\cache\ntkrnlpa.exe
+ 2009-08-12 22:34 . 2008-03-01 22:36 3591680 c:\windows\system32\dllcache\cache\mshtml.dll
+ 2009-08-12 22:34 . 2007-06-13 10:23 1033216 c:\windows\system32\dllcache\cache\explorer.exe
+ 2009-10-07 04:37 . 2009-10-07 04:37 4405248 c:\windows\Installer\32e426d.msi
+ 2009-10-07 04:33 . 2009-10-07 04:33 1679872 c:\windows\Installer\32e3f25.msi
+ 2009-10-07 04:33 . 2009-10-07 04:33 9013760 c:\windows\Installer\32e3ed8.msi
+ 2009-09-22 03:16 . 2009-09-22 03:16 3310592 c:\windows\Installer\126b38f.msi
+ 2009-10-09 14:02 . 2009-10-09 14:02 1155072 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\b09c9da57c0cba2a2af336f482bcea75\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 6492160 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a79195e39f939213d271bb4ca3cdf2db\WindowsLive.Writer.PostEditor.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 2080768 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\4f64ed4930d655d3c162d5b3dede769c\WindowsLive.Writer.CoreServices.ni.dll
- 2009-08-01 15:30 . 2009-08-01 15:30 2756608 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 2756608 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\e59504af41afab5e04681af951d9b302\System.Data.SqlXml.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 1183744 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249\System.Data.OracleClient.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 1183744 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249\System.Data.OracleClient.ni.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-08-15 12:51 . 2009-08-15 12:51 15705600 c:\windows\Installer\ccee3.msp
+ 2009-10-12 21:46 . 2009-10-12 21:46 15709696 c:\windows\Installer\1d39272.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-01-17 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"TrojanScanner"="c:\program files\Trojan Remover\Trjscan.exe" [2009-07-25 1067912]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\kav\\kav7\\setup.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\Bf2_w32ded.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\BF2.exe"=
"c:\\Program Files\\Strategy First\\Europa Universalis 2\\EU2.exe"=
"c:\\Program Files\\THQ\\Company of Heroes\\RelicCOH.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Documents and Settings\\Mike\\Desktop\\Redvex_3.0.1_11-28-07\\RedVex2.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\Anno4.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\tools\\Anno4Web.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2/27/2009 12:07 PM 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2/27/2009 12:07 PM 20560]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [8/1/2009 1:32 AM 54752]
R2 WUSB54GSv2SVC;WUSB54GSv2SVC;c:\program files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe [1/23/2008 1:01 PM 41025]
R3 SbieDrv;SbieDrv;c:\program files\Sandboxie\SbieDrv.sys [9/2/2008 8:33 AM 100352]
S2 gupdate1c9f7db41a482ee;Google Update Service (gupdate1c9f7db41a482ee);c:\program files\Google\Update\GoogleUpdate.exe [6/28/2009 6:29 AM 133104]
S3 cpuz130;cpuz130;\??\c:\docume~1\Mike\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\Mike\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\Windows Live\Family Safety\fsssvc.exe [8/5/2009 10:48 PM 704864]
S3 getPlusHelper;getPlus(R) Helper;c:\windows\System32\svchost.exe -k getPlusHelper [8/4/2004 12:56 AM 14336]
S3 lgusbsmodem;LGE Mobile USB Modem;c:\windows\system32\DRIVERS\lgusbsmodem.sys --> c:\windows\system32\DRIVERS\lgusbsmodem.sys [?]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - GTNDIS5

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contents of the 'Scheduled Tasks' folder

2009-07-24 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 16:34]

2009-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]

2009-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - plugin: c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npagent.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

 

[El loco]

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2009-10-22 10:22
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(1492)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2009-10-22 10:24
ComboFix-quarantined-files.txt 2009-10-22 14:24
ComboFix2.txt 2009-08-12 22:35
ComboFix3.txt 2009-04-08 23:39
ComboFix4.txt 2009-03-01 02:30

Pre-Run: 37,639,712,768 bytes free
Post-Run: 38,260,576,256 bytes free

Current=8 Default=8 Failed=7 LastKnownGood=9 Sets=1,2,3,4,5,6,7,8,9
- - End Of File - - 97D781B53B455D3DB08B5C714EA3BD90

 

[Osiris]

Is this IP legit?

O17 - HKLM\System\CS2\Services\Tcpip\..\{0FA321D1-4CEB-4ACA-A79E-90901D650B46}: NameServer = 167.206.245.130,167.206.245.129

 

[El loco]

yes it is legit

 

[Osiris]

Everything looks good. Are you having any issues?

 

[El loco]

Everything looks good. Are you having any issues?

Nope, just wanted to make sure comp was clean since yesterday my cousin was playing on places like miniclips, and malwarebytes found a trojan today.

Thank you very much.