[quote name=\'guestolo\' post=\'466724\' date=\'Dec 8 2009, 01:06 AM\']Not sure what you mean by that, did you click on that file and AVG didn't notice it, or was it laying stagnant and you never scanned that area?
I suggest you do the following
Download
[color=\"#ff0000\"]OTL.exe[/color][/url] by
OldTimer to your Desktop.
- Close all windows and double click on OTL.exe to run it
- Click Run Scan and let the program run uninterrupted.
- It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
- You may need to use two posts to get it all.
NOTE: If you have trouble, or an error message trying to post the logs
Can you upload it to a reply box
In a Reply, select "Browse..." on the bottom right and then navigate to the file and select it
Then click "Upload"[/quote]
http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'
\' /> Thank you Questolo. As regards your 1st question, AVG scanned the area and didn't notice a C:\Internat.exe.
As to the logs, here they go:
OTL logfile created on: 09/12/2009 12:20:58 a.m. - Run 1
OTL by OldTimer - Version 3.1.11.9 Folder = C:\Documents and Settings\jmal\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00002C0A | Country: Argentina | Language: ESS | Date Format: dd/MM/yyyy
1023,53 Mb Total Physical Memory | 516,26 Mb Available Physical Memory | 50,44% Memory free
2,40 Gb Paging File | 1,98 Gb Available in Paging File | 82,59% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 100,59 Gb Total Space | 77,55 Gb Free Space | 77,09% Space Free | Partition Type: NTFS
Drive D: | 76,32 Gb Total Space | 14,03 Gb Free Space | 18,39% Space Free | Partition Type: NTFS
Drive E: | 365,13 Gb Total Space | 291,81 Gb Free Space | 79,92% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: PC-1
Current User Name: jmal
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
[color=\"#E56717\"]========== Processes (SafeList) ==========[/color]
PRC - [2009/12/08 22:40:09 | 00,536,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\jmal\Desktop\OTL.exe
PRC - [2009/11/12 09:44:48 | 02,020,120 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2009/11/12 09:44:47 | 00,600,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe
PRC - [2009/11/11 09:56:28 | 00,038,912 | ---- | M] () -- C:\WINDOWS\wizmo.exe
PRC - [2009/10/24 11:01:02 | 01,055,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2009/10/24 11:01:01 | 00,702,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe
PRC - [2009/10/24 11:01:01 | 00,502,040 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe
PRC - [2009/10/24 11:00:55 | 00,906,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgemc.exe
PRC - [2009/10/24 11:00:54 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe
PRC - [2009/10/11 04:17:36 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009/10/11 04:17:35 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009/06/10 04:02:50 | 00,904,840 | ---- | M] (Acronis) -- C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
PRC - [2009/06/10 03:57:40 | 00,136,472 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
PRC - [2009/06/10 03:57:36 | 00,431,384 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
PRC - [2009/06/10 03:55:30 | 01,326,080 | ---- | M] (Acronis) -- C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
PRC - [2009/05/19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2008/04/13 21:12:19 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/09/20 10:36:26 | 02,044,712 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
PRC - [2007/09/20 10:36:16 | 01,440,552 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
PRC - [2007/09/20 10:35:56 | 01,077,032 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\InCD\InCD.exe
PRC - [2007/09/20 09:51:46 | 00,853,288 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
PRC - [2006/10/22 12:22:00 | 00,159,810 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2006/10/10 14:35:36 | 00,603,664 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files\RAXCO\PerfectDisk\PDEngine.exe
PRC - [2006/10/10 14:35:24 | 00,402,960 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files\RAXCO\PerfectDisk\PDAgent.exe
PRC - [2003/12/15 14:39:16 | 00,221,696 | ---- | M] (O&O Software GmbH) -- C:\WINDOWS\system32\oodag.exe
PRC - [2002/09/20 16:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
PRC - [2002/07/02 17:56:00 | 00,024,576 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTHELPER.EXE
PRC - [2001/08/17 19:36:54 | 00,086,016 | ---- | M] (PCtel, Inc.) -- C:\WINDOWS\system32\pctspk.exe
PRC - [2001/08/01 02:00:00 | 00,191,488 | ---- | M] (Creative Technology Ltd.) -- C:\Program Files\Creative\ShareDLL\CTNotify.exe
PRC - [2001/08/01 02:00:00 | 00,166,912 | ---- | M] (Creative Technology Ltd.) -- C:\Program Files\Creative\ShareDLL\Mediadet.exe
PRC - [2000/06/26 07:44:20 | 00,053,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MsPMSPSv.exe
PRC - [1999/12/13 01:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTSVCCDA.EXE
[color=\"#E56717\"]========== Modules (SafeList) ==========[/color]
MOD - [2009/12/08 22:40:09 | 00,536,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\jmal\Desktop\OTL.exe
MOD - [2009/05/24 22:41:34 | 00,304,128 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll
MOD - [2008/04/13 21:11:56 | 00,019,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\linkinfo.dll
MOD - [2008/04/13 21:11:52 | 00,367,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\dsound.dll
MOD - [2006/10/22 12:22:00 | 01,470,464 | ---- | M] () -- C:\WINDOWS\system32\nview.dll
MOD - [2006/10/22 12:22:00 | 00,081,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvwddi.dll
MOD - [2002/12/14 12:57:38 | 00,118,784 | ---- | M] () -- C:\WINDOWS\system32\DrvTrNTl.dll
MOD - [2002/12/14 12:56:48 | 00,049,152 | ---- | M] (High Criteria inc.) -- C:\WINDOWS\system32\DrvTrNTm.dll
MOD - [2002/11/06 20:00:38 | 00,040,820 | ---- | M] (SoundMAX) -- C:\WINDOWS\system32\Syncor11.dll
MOD - [2002/11/05 11:05:30 | 00,061,440 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTAGENT.DLL
[color=\"#E56717\"]========== Win32 Services (SafeList) ==========[/color]
SRV - [2009/10/24 11:00:55 | 00,906,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgemc.exe -- (avg9emc)
SRV - [2009/10/24 11:00:54 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009/10/11 04:17:35 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009/08/17 13:01:44 | 00,099,176 | ---- | M] (SiSoftware) -- C:\Program Files\SiSoftware\SiSoftware Sandra Professional Business 2009.SP4\RpcAgentSrv.exe -- (SandraAgentSrv)
SRV - [2009/06/10 03:57:36 | 00,431,384 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2009/05/19 11:36:18 | 00,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2008/11/04 01:06:28 | 00,441,712 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2007/09/20 15:35:38 | 00,382,248 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - [2007/09/20 10:36:16 | 01,440,552 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe -- (InCDsrv)
SRV - [2007/09/20 09:51:46 | 00,853,288 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe -- (Nero BackItUp Scheduler 3)
SRV - [2006/10/26 14:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006/10/22 12:22:00 | 00,159,810 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2006/10/10 14:35:36 | 00,603,664 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine)
SRV - [2006/10/10 14:35:24 | 00,402,960 | ---- | M] (Raxco Software, Inc.) -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent)
SRV - [2005/06/13 07:44:18 | 00,155,648 | ---- | M] (Allume Systems, Inc.) -- C:\Program Files\Allume\StuffIt\MXTask.exe -- (StuffIt Task Manager)
SRV - [2003/12/15 14:39:16 | 00,221,696 | ---- | M] (O&O Software GmbH) -- C:\WINDOWS\system32\oodag.exe -- (O&O Defrag)
SRV - [2002/09/20 16:50:10 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))
SRV - [2001/08/17 19:36:54 | 00,086,016 | ---- | M] (PCtel, Inc.) -- C:\WINDOWS\system32\pctspk.exe -- (Pctspk)
SRV - [2000/06/26 07:44:20 | 00,053,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\MsPMSPSv.exe -- (WMDM PMSP Service)
SRV - [1999/12/13 01:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CTSVCCDA.EXE -- (Creative Service for CDROM Access)
[color=\"#E56717\"]========== Driver Services (SafeList) ==========[/color]
DRV - [2009/11/19 19:22:09 | 00,441,760 | ---- | M] (Acronis) -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2009/11/19 19:22:09 | 00,044,384 | ---- | M] (Acronis) -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2009/11/19 19:21:59 | 00,132,480 | ---- | M] (Acronis) -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2009/11/19 19:21:44 | 00,368,480 | ---- | M] (Acronis) -- C:\WINDOWS\system32\DRIVERS\tdrpman.sys -- (tdrpman)
DRV - [2009/11/13 21:49:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2009/11/10 09:51:01 | 00,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2009/10/24 11:01:14 | 00,333,192 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2009/10/24 11:01:14 | 00,028,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2009/08/07 23:46:56 | 00,023,112 | ---- | M] (SiSoftware) -- C:\Program Files\SiSoftware\SiSoftware Sandra Professional Business 2009.SP4\WNt500x86\sandra.sys -- (SANDRA)
DRV - [2009/07/28 21:31:52 | 00,020,616 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\system32\drivers\eufs.sys -- (EUFS)
DRV - [2009/07/28 21:31:50 | 00,014,216 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\system32\drivers\eudskacs.sys -- (EUDSKACS)
DRV - [2009/07/28 21:31:48 | 00,026,120 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\system32\drivers\eubakup.sys -- (EUBAKUP)
DRV - [2009/07/28 21:31:46 | 00,122,504 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\system32\drivers\EuDisk.sys -- (EuDisk)
DRV - [2009/04/22 14:28:08 | 00,008,704 | ---- | M] () -- C:\WINDOWS\system32\epmntdrv.sys -- (epmntdrv)
DRV - [2009/04/22 14:28:06 | 00,003,072 | ---- | M] () -- C:\WINDOWS\system32\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2008/04/13 15:45:30 | 00,010,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008/04/13 13:39:15 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2007/11/16 11:55:00 | 00,165,496 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\drivers\e100b325.sys -- (E100B) Intel®
DRV - [2007/09/20 10:36:16 | 00,040,488 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm)
DRV - [2007/09/20 10:36:06 | 00,125,864 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs)
DRV - [2007/09/20 10:36:06 | 00,038,952 | ---- | M] (Nero AG) -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass)
DRV - [2006/10/22 12:22:00 | 03,994,624 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2006/09/15 12:09:28 | 00,062,992 | ---- | M] (Raxco Software, Inc.) -- C:\WINDOWS\system32\drivers\DefragFs.sys -- (DefragFS)
DRV - [2005/04/29 11:38:52 | 00,393,984 | ---- | M] (Allume Systems) -- C:\WINDOWS\system32\DRIVERS\zmxpzip.sys -- (zmxpzip)
DRV - [2004/12/16 13:36:30 | 00,042,496 | ---- | M] (VIA Technologies, Inc. ) -- C:\WINDOWS\system32\drivers\fetnd5bv.sys -- (FETND5BV)
DRV - [2003/07/15 16:00:00 | 00,578,368 | ---- | M] (Analog Devices, Inc.) -- C:\WINDOWS\system32\drivers\smwdm.sys -- (smwdm)
DRV - [2003/07/02 04:42:00 | 00,027,904 | ---- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys -- (viaagp1)
DRV - [2002/09/16 17:14:32 | 00,004,228 | ---- | M] (PowerQuest Corporation) -- C:\WINDOWS\system32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2002/07/24 13:52:26 | 00,998,004 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2002/07/19 10:48:32 | 00,156,604 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia)
DRV - [2002/07/19 10:48:22 | 00,213,860 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2002/07/19 10:48:08 | 00,011,068 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2002/07/19 10:48:04 | 00,195,432 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2002/07/19 10:47:52 | 00,837,548 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2002/07/19 10:46:28 | 00,127,948 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2002/04/01 14:15:00 | 00,004,816 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (aeaudio)
DRV - [2001/08/31 10:37:58 | 00,036,992 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\sfman.sys -- (sfman) Creative SoundFont Manager Driver (WDM)
DRV - [2001/08/23 09:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2001/08/17 10:28:16 | 00,397,502 | ---- | M] (PCtel, Inc.) -- C:\WINDOWS\system32\DRIVERS\vpctcom.sys -- (Vpctcom)
DRV - [2001/08/17 10:28:16 | 00,064,605 | ---- | M] (PCtel, Inc.) -- C:\WINDOWS\system32\DRIVERS\vvoice.sys -- (Vvoice)
DRV - [2001/08/17 10:28:14 | 00,604,253 | ---- | M] (PCTEL, INC.) -- C:\WINDOWS\system32\DRIVERS\vmodem.sys -- (Vmodem)
DRV - [2001/08/17 10:28:14 | 00,112,574 | ---- | M] (PCTEL, INC.) -- C:\WINDOWS\system32\drivers\ptserlp.sys -- (Ptserlp)
DRV - [2001/08/17 09:19:20 | 00,003,712 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\ctljystk.sys -- (ctljystk)
DRV - [2001/08/17 09:13:08 | 00,027,165 | ---- | M] (VIA Technologies, Inc. ) -- C:\WINDOWS\system32\drivers\fetnd5.sys -- (FETNDIS)
DRV - [2001/08/17 09:11:06 | 00,066,591 | ---- | M] (3Com Corporation) -- C:\WINDOWS\system32\drivers\el90xbc5.sys -- (EL90XBC)
DRV - [2001/08/14 12:17:52 | 00,775,296 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\emu10k1f.sys -- (emu10k) Creative SB Live! series(WDM)
DRV - [2001/07/11 08:34:52 | 00,006,912 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\drivers\ctlface.sys -- (emu10k1) Creative Interface Manager Driver (WDM)
DRV - [1999/12/17 01:00:00 | 00,006,752 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\PFMODNT.SYS -- (PfModNT)
DRV - [1997/04/22 10:16:00 | 00,006,272 | ---- | M] () -- C:\WINDOWS\system32\drivers\ASLM75.SYS -- (aslm75)
[color=\"#E56717\"]========== Standard Registry (SafeList) ==========[/color]
[color=\"#E56717\"]========== Internet Explorer ==========[/color]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://www.msn.com/IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 04 19 8B 4D 4D 5F CA 01 [binary data]
IE - HKCU\..\URLSearchHook: *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=\"#E56717\"]========== FireFox ==========[/color]
FF - prefs.js..extensions.enabledItems:
[email protected]:1.0
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js..extensions.enabledItems:
[email protected]:1.0.10
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/11/06 08:46:28 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/11/28 21:53:19 | 00,000,000 | ---D | M]
[2009/10/24 17:05:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\jmal\Application Data\Mozilla\Extensions
[2009/12/07 23:00:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\jmal\Application Data\Mozilla\Firefox\Profiles\xjhel9yg.default\extensions
[2009/10/24 17:12:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\jmal\Application Data\Mozilla\Firefox\Profiles\xjhel9yg.default\extensions\
[email protected][2009/12/08 22:37:24 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/07/31 13:06:48 | 01,654,784 | ---- | M] (LizardTech) -- C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll
[2009/08/24 16:33:25 | 00,004,080 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\drae.xml
[2009/08/24 16:33:25 | 00,002,480 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mercadolibre-ar.xml
[2009/08/24 16:33:25 | 00,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-es.xml
[2009/08/24 16:33:25 | 00,000,838 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-ar.xml
O1 HOSTS File: (734 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe (Acronis)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AHQInit] C:\Program Files\Creative\SBLive\Program\AHQInit.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CTNotify.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe (HP)
O4 - HKLM..\Run: [InCD] C:\Program Files\Nero\Nero8\InCD\InCD.exe (Nero AG)
O4 - HKLM..\Run: [Jet Detection] C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe ()
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SecurDisc] C:\Program Files\Nero\Nero8\InCD\NBHGui.exe (Nero AG)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [WINDVDPatch] C:\WINDOWS\System32\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKCU..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe (PANTERASoft)
O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = _ [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Agregar entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://update.microsoft.com/microsoftupdat...b?1256388789062 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.microsoft.com/microsoftupdat...b?1256388777328 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/24 09:15:52 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (PDBoot.exe) - C:\WINDOWS\System32\PDBoot.exe (Raxco Software, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (OODBS) - C:\WINDOWS\System32\OODBS.exe (O&O Software GmbH)
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
[color=\"#E56717\"]========== Files/Folders - Created Within 30 Days ==========[/color]
[2009/12/08 22:40:06 | 00,536,576 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\jmal\Desktop\OTL.exe
[2009/12/07 20:21:10 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\DoctorWeb
[2009/12/05 20:26:37 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\My Documents\My Library
[2009/12/05 20:25:36 | 00,057,436 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\DASShp.dll
[2009/12/05 20:25:36 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Reader
[2009/12/03 19:09:20 | 00,000,000 | ---D | C] -- C:\Program Files\WinUHA
[2009/12/01 19:32:26 | 00,000,000 | ---D | C] -- C:\Winstar User
[2009/12/01 19:32:21 | 00,000,000 | ---D | C] -- C:\Winstar Tmp
[2009/12/01 19:32:17 | 00,000,000 | ---D | C] -- C:\Winstar Hits
[2009/12/01 19:32:13 | 00,000,000 | ---D | C] -- C:\Winstar Chartsdb
[2009/12/01 19:10:05 | 00,000,000 | ---D | C] -- C:\KEPWIN95
[2009/11/29 19:50:47 | 00,995,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSAJT200.DLL
[2009/11/29 19:50:47 | 00,710,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSAJT110.DLL
[2009/11/29 19:50:47 | 00,313,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2.DLL
[2009/11/29 19:50:47 | 00,286,720 | ---- | C] (Bits Per Second Ltd) -- C:\WINDOWS\System\GSW.EXE
[2009/11/29 19:50:47 | 00,147,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2NLS.DLL
[2009/11/29 19:50:47 | 00,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMPOBJ.DLL
[2009/11/29 19:50:47 | 00,098,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLE2DISP.DLL
[2009/11/29 19:50:47 | 00,095,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VBDB300.DLL
[2009/11/29 19:50:47 | 00,072,192 | ---- | C] (Bits Per Second Ltd) -- C:\WINDOWS\System\GSWDLL.DLL
[2009/11/29 19:50:47 | 00,070,800 | ---- | C] (Bits Per Second Ltd) -- C:\WINDOWS\System\GRAPH.VBX
[2009/11/29 19:50:47 | 00,045,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\GRID.VBX
[2009/11/29 19:50:47 | 00,033,280 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\System\MSAES110.DLL
[2009/11/29 19:50:47 | 00,017,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSAJT112.DLL
[2009/11/29 19:50:47 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VBOA300.DLL
[2009/11/29 19:49:58 | 00,000,000 | ---D | C] -- C:\WINSTAR
[2009/11/29 19:49:58 | 00,000,000 | ---D | C] -- C:\TMATLAS
[2009/11/29 19:49:50 | 00,398,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VBRUN300.DLL
[2009/11/29 18:51:38 | 00,000,000 | ---D | C] -- C:\KEPDBASE
[2009/11/28 21:53:17 | 00,000,000 | ---D | C] -- C:\Program Files\LizardTech
[2009/11/28 19:28:08 | 00,000,000 | ---D | C] -- C:\Program Files\Q-Dir
[2009/11/26 17:59:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\My Documents\My Burnt CDs
[2009/11/26 17:46:08 | 00,000,000 | ---D | C] -- C:\MyBootCD
[2009/11/26 01:59:00 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\Application Data\DivX
[2009/11/26 01:55:11 | 00,120,056 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpyi64.exe
[2009/11/26 01:55:11 | 00,118,520 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsi64.exe
[2009/11/26 01:55:11 | 00,066,296 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe
[2009/11/26 01:55:11 | 00,064,760 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe
[2009/11/26 01:55:11 | 00,043,528 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\PxHelp20.sys
[2009/11/26 01:55:11 | 00,009,464 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys
[2009/11/26 01:55:11 | 00,009,336 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2009/11/26 01:55:10 | 01,628,920 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll
[2009/11/26 01:55:10 | 00,551,672 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll
[2009/11/26 01:55:10 | 00,518,904 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll
[2009/11/26 01:55:10 | 00,379,640 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll
[2009/11/26 01:55:10 | 00,187,128 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll
[2009/11/26 01:55:10 | 00,129,784 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll
[2009/11/26 01:55:10 | 00,088,824 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll
[2009/11/26 01:55:10 | 00,072,440 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe
[2009/11/26 01:54:39 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2009/11/26 01:54:39 | 00,000,000 | ---D | C] -- C:\Program Files\DivX
[2009/11/26 01:43:28 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SlySoft
[2009/11/26 01:40:31 | 00,000,000 | ---D | C] -- C:\Program Files\SlySoft
[2009/11/24 10:21:50 | 01,885,464 | ---- | C] (Acronis) -- C:\WINDOWS\System32\AutoPartNt.exe
[2009/11/20 21:36:45 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2009/11/20 11:08:36 | 00,000,000 | ---D | C] -- C:\Program Files\Passware
[2009/11/19 19:22:27 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Acronis
[2009/11/19 19:22:09 | 00,441,760 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\timntr.sys
[2009/11/19 19:22:09 | 00,044,384 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\tifsfilt.sys
[2009/11/19 19:21:59 | 00,132,480 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\snapman.sys
[2009/11/19 19:21:44 | 00,368,480 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\tdrpman.sys
[2009/11/19 19:21:17 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Acronis
[2009/11/19 19:21:14 | 00,000,000 | ---D | C] -- C:\Program Files\Acronis
[2009/11/19 14:46:18 | 00,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2009/11/19 00:32:18 | 00,020,616 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\drivers\eufs.sys
[2009/11/19 00:32:05 | 00,014,216 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\drivers\eudskacs.sys
[2009/11/19 00:32:04 | 00,026,120 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\drivers\eubakup.sys
[2009/11/19 00:32:01 | 00,122,504 | ---- | C] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\WINDOWS\System32\drivers\EuDisk.sys
[2009/11/18 15:22:25 | 00,000,000 | ---D | C] -- C:\Program Files\EASEUS
[2009/11/17 23:44:44 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{D2A6A317-7450-472F-8C72-17783BD2E5E3}
[2009/11/17 23:44:43 | 00,000,000 | ---D | C] -- C:\Program Files\Viewer
[2009/11/15 22:18:22 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\Application Data\Media Player Classic
[2009/11/15 22:06:38 | 00,000,000 | ---D | C] -- C:\Program Files\XP Codec Pack
[2009/11/14 18:31:16 | 00,000,000 | ---D | C] -- C:\Program Files\Free Screen Video Capture by Topviewsoft
[2009/11/13 21:47:32 | 00,090,112 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll
[2009/11/13 21:47:28 | 00,856,064 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx0c.dll
[2009/11/13 21:47:28 | 00,856,064 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx07.dll
[2009/11/13 21:47:28 | 00,847,872 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx0a.dll
[2009/11/13 21:47:28 | 00,843,776 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx16.dll
[2009/11/13 21:47:28 | 00,839,680 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx11.dll
[2009/11/13 21:47:28 | 00,696,320 | ---- | C] (DivX, Inc.) -- C:\WINDOWS\System32\DivX.dll
[2009/11/13 16:01:05 | 00,000,000 | ---D | C] -- C:\Program Files\Intel
[2009/11/13 16:00:48 | 00,256,712 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\PROUnstl.exe
[2009/11/13 11:23:41 | 01,285,632 | ---- | C] (Analog Devices) -- C:\WINDOWS\System32\SMMedia.dll
[2009/11/13 11:23:41 | 00,030,208 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\wdmioctl.dll
[2009/11/13 11:23:41 | 00,004,816 | ---- | C] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\drivers\aeaudio.sys
[2009/11/13 11:23:41 | 00,003,744 | ---- | C] (Analog Devices, Inc.) -- C:\WINDOWS\System32\drivers\smsens.sys
[2009/11/13 11:23:40 | 00,978,944 | ---- | C] (Analog Devices, Inc.) -- C:\WINDOWS\SynthCoreA.Dll
[2009/11/13 11:23:40 | 00,380,928 | ---- | C] (Analog Devices, Inc.) -- C:\WINDOWS\SynCor.exe
[2009/11/13 11:23:39 | 00,991,232 | ---- | C] (Sensaura) -- C:\WINDOWS\System32\virtear.dll
[2009/11/13 11:23:39 | 00,765,952 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System\crlds3d.dll
[2009/11/13 11:23:39 | 00,720,896 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System32\Audio3d.dll
[2009/11/13 11:23:39 | 00,578,368 | ---- | C] (Analog Devices, Inc.) -- C:\WINDOWS\System32\drivers\smwdm.sys
[2009/11/13 11:23:39 | 00,049,152 | ---- | C] (SoundMAX) -- C:\WINDOWS\System32\S11thk32.dll
[2009/11/13 11:23:39 | 00,045,056 | ---- | C] (Analog Devices, Inc.) -- C:\WINDOWS\System32\SynthCore11Resources.dll
[2009/11/13 11:23:39 | 00,040,820 | ---- | C] (SoundMAX) -- C:\WINDOWS\System32\Syncor11.dll
[2009/11/13 11:23:39 | 00,000,000 | ---D | C] -- C:\WINDOWS\VirtualEar
[2009/11/13 11:23:38 | 00,049,152 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\DSndUp.exe
[2009/11/13 11:23:38 | 00,045,056 | ---- | C] (adi) -- C:\WINDOWS\System32\CleanUp.exe
[2009/11/13 11:23:38 | 00,000,000 | ---D | C] -- C:\Program Files\Analog Devices
[2009/11/13 10:04:14 | 00,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2009/11/13 10:04:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\Application Data\Uniblue
[2009/11/13 10:04:14 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DriverScanner
[2009/11/13 10:03:21 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}
[2009/11/13 08:52:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\My Documents\Clarinadas_files
[2009/11/12 09:17:55 | 00,184,386 | ---- | C] (HP) -- C:\WINDOWS\System32\hpzsnt07.dll
[2009/11/11 12:37:03 | 00,266,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TweakUI.exe
[2009/11/11 11:59:53 | 00,000,000 | ---D | C] -- C:\Program Files\Gravity
[2009/11/11 11:09:58 | 00,025,600 | R--- | C] (Gibson Research Corp.) -- C:\WINDOWS\LeakTest.exe
[2009/11/10 22:43:02 | 00,000,000 | ---D | C] -- C:\Program Files\IrfanView
[2009/11/10 22:43:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\Application Data\IrfanView
[2009/11/09 13:56:48 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\Application Data\Real
[2009/11/09 11:57:28 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\COWON
[2009/11/09 11:57:26 | 00,000,000 | ---D | C] -- C:\Program Files\JetAudio
[2009/11/09 11:54:54 | 00,000,000 | ---D | C] -- C:\Documents and Settings\jmal\Application Data\InstallShield
[2009/11/09 02:19:02 | 00,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2004/11/24 15:25:52 | 00,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=\"#E56717\"]========== Files - Modified Within 30 Days ==========[/color]
[2009/12/08 22:43:36 | 00,010,217 | ---- | M] () -- C:\WINDOWS\Q-Dir.ini
[2009/12/08 22:40:09 | 00,536,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\jmal\Desktop\OTL.exe
[2009/12/08 22:29:28 | 03,374,149 | ---- | M] () -- C:\WINDOWS\{00000000-00000000-0000000D-00001102-00000002-80611102}.CDF
[2009/12/08 22:29:28 | 03,374,149 | ---- | M] () -- C:\WINDOWS\{00000000-00000000-0000000D-00001102-00000002-80611102}.BAK
[2009/12/08 22:29:21 | 00,088,566 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2009/12/08 22:29:12 | 00,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2009/12/08 22:26:48 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009/12/08 22:26:43 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/12/08 22:26:39 | 10,733,19936 | -HS- | M] () -- C:\hiberfil.sys
[2009/12/08 22:25:55 | 00,024,888 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000000-00000000-0000000D-00001102-00000002-80611102}.rfx
[2009/12/08 22:25:55 | 00,024,888 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000000-00000000-0000000D-00001102-00000002-80611102}.rfx
[2009/12/08 22:25:55 | 00,016,420 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000000-00000000-0000000D-00001102-00000002-80611102}.rfx
[2009/12/08 22:25:55 | 00,016,420 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000000-00000000-0000000D-00001102-00000002-80611102}.rfx
[2009/12/08 22:25:55 | 00,001,080 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2009/12/08 22:25:55 | 00,001,080 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm
[2009/12/08 22:25:55 | 00,000,024 | ---- | M] () -- C:\WINDOWS\System32\DVCStateBkp-{00000000-00000000-0000000D-00001102-00000002-80611102}.dat
[2009/12/08 22:25:55 | 00,000,024 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000000-00000000-0000000D-00001102-00000002-80611102}.dat
[2009/12/08 22:25:32 | 05,242,880 | ---- | M] () -- C:\Documents and Settings\jmal\NTUSER.DAT
[2009/12/08 22:25:32 | 00,000,178 | -HS- | M] () -- C:\Documents and Settings\jmal\ntuser.ini
[2009/12/08 17:14:10 | 00,002,515 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\MS Word 2007.lnk
[2009/12/08 15:51:41 | 46,359,526 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/12/08 15:51:12 | 00,116,698 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/12/07 22:23:57 | 00,002,521 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\MS Outlook 2007.lnk
[2009/12/06 19:27:54 | 00,000,523 | ---- | M] () -- C:\hpfr3320.xml
[2009/12/06 17:29:55 | 00,074,944 | ---- | M] () -- C:\Documents and Settings\jmal\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/12/06 17:22:06 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/12/06 17:21:59 | 00,296,456 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/12/05 20:26:20 | 00,001,564 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Microsoft Reader.lnk
[2009/12/03 19:26:26 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\µTorrent.lnk
[2009/12/03 19:15:15 | 00,000,630 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Passprom.lnk
[2009/12/03 19:09:25 | 00,000,618 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\WinUHA.lnk
[2009/12/02 00:54:00 | 00,000,026 | ---- | M] () -- C:\WINDOWS\passprom.ini
[2009/12/01 18:26:09 | 00,013,030 | ---- | M] () -- C:\PDOXUSRS.NET
[2009/11/29 19:51:45 | 00,000,530 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Win_Star.lnk
[2009/11/29 19:37:11 | 00,000,064 | ---- | M] () -- C:\Documents and Settings\jmal\default.pls
[2009/11/29 19:37:07 | 00,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2009/11/29 12:22:41 | 00,000,040 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2009/11/28 19:28:09 | 00,001,504 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Q-Dir.lnk
[2009/11/27 23:46:43 | 00,001,519 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Notepad.lnk
[2009/11/26 01:55:17 | 00,000,807 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\DivX Player.lnk
[2009/11/26 01:55:09 | 00,000,843 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\DivX Converter.lnk
[2009/11/26 01:54:39 | 00,001,478 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\DivX Movies.lnk
[2009/11/25 14:35:31 | 00,005,120 | ---- | M] () -- C:\Documents and Settings\jmal\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/11/24 23:25:00 | 00,001,322 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Apagar el monitor.lnk
[2009/11/24 20:25:10 | 00,001,487 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Windows Explorer.lnk
[2009/11/24 20:06:07 | 00,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009/11/24 13:06:57 | 00,001,123 | RH-- | M] () -- C:\WINDOWS\EPMBatch.ept
[2009/11/24 10:23:08 | 00,001,024 | ---- | M] () -- C:\WINDOWS\System32\AutoPartNt.let
[2009/11/24 10:21:50 | 01,885,464 | ---- | M] (Acronis) -- C:\WINDOWS\System32\AutoPartNt.exe
[2009/11/20 23:37:32 | 00,002,256 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Nero BackItUp.lnk
[2009/11/20 23:36:56 | 00,002,249 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Nero Burning ROM.lnk
[2009/11/20 17:14:05 | 00,000,109 | ---- | M] () -- C:\WINDOWS\oodcnt.INI
[2009/11/20 11:25:50 | 08,916,992 | ---- | M] () -- C:\Documents and Settings\jmal\My Documents\WindowsKey.iso
[2009/11/19 19:22:09 | 00,441,760 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\timntr.sys
[2009/11/19 19:22:09 | 00,044,384 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\tifsfilt.sys
[2009/11/19 19:21:59 | 00,132,480 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\snapman.sys
[2009/11/19 19:21:44 | 00,368,480 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\tdrpman.sys
[2009/11/19 19:21:44 | 00,000,824 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Acronis True Image WD Edition.lnk
[2009/11/19 01:56:29 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\jmal\Format
[2009/11/19 00:33:20 | 00,456,304 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/11/19 00:33:20 | 00,075,210 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/11/19 00:33:19 | 00,542,182 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/11/19 00:32:03 | 00,000,931 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\EASEUS Todo Backup 1.0.lnk
[2009/11/18 15:22:42 | 00,002,009 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\EASEUS Partition Master 4.0 Server Edition.lnk
[2009/11/17 23:44:43 | 00,000,658 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\File viewer.lnk
[2009/11/16 03:44:20 | 03,294,182 | -H-- | M] () -- C:\Documents and Settings\jmal\Local Settings\Application Data\IconCache.db
[2009/11/15 22:06:53 | 00,000,755 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Media Player Classic.lnk
[2009/11/15 18:48:57 | 00,115,817 | ---- | M] () -- C:\Documents and Settings\jmal\My Documents\Break_thew_News_to_Mother_American_Songs_XIXthCry_2.jpg
[2009/11/15 18:47:54 | 00,117,523 | ---- | M] () -- C:\Documents and Settings\jmal\My Documents\Break_thew_News_to_Mother_American_Songs_XIXthCry.jpg
[2009/11/14 18:31:27 | 00,000,810 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Free Screen Video Capture by Topviewsoft.lnk
[2009/11/14 17:58:13 | 00,010,322 | ---- | M] () -- C:\Documents and Settings\jmal\My Documents\CominThru.jpg
[2009/11/13 21:49:00 | 01,628,920 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll
[2009/11/13 21:49:00 | 00,551,672 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll
[2009/11/13 21:49:00 | 00,518,904 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll
[2009/11/13 21:49:00 | 00,379,640 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll
[2009/11/13 21:49:00 | 00,187,128 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll
[2009/11/13 21:49:00 | 00,129,784 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll
[2009/11/13 21:49:00 | 00,120,056 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpyi64.exe
[2009/11/13 21:49:00 | 00,118,520 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsi64.exe
[2009/11/13 21:49:00 | 00,088,824 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll
[2009/11/13 21:49:00 | 00,072,440 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe
[2009/11/13 21:49:00 | 00,066,296 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe
[2009/11/13 21:49:00 | 00,064,760 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe
[2009/11/13 21:49:00 | 00,043,528 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\PxHelp20.sys
[2009/11/13 21:49:00 | 00,009,464 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys
[2009/11/13 21:49:00 | 00,009,336 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2009/11/13 21:47:32 | 00,090,112 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\dpl100.dll
[2009/11/13 21:47:28 | 00,856,064 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx0c.dll
[2009/11/13 21:47:28 | 00,856,064 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx07.dll
[2009/11/13 21:47:28 | 00,847,872 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx0a.dll
[2009/11/13 21:47:28 | 00,843,776 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx16.dll
[2009/11/13 21:47:28 | 00,839,680 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\divx_xx11.dll
[2009/11/13 21:47:28 | 00,696,320 | ---- | M] (DivX, Inc.) -- C:\WINDOWS\System32\DivX.dll
[2009/11/13 11:23:38 | 00,000,044 | ---- | M] () -- C:\WINDOWS\System32\msssc.dll
[2009/11/13 10:04:18 | 00,000,842 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\DriverScanner.lnk
[2009/11/13 08:52:29 | 00,024,733 | ---- | M] () -- C:\Documents and Settings\jmal\My Documents\Clarinadas.htm
[2009/11/12 23:42:38 | 00,013,720 | ---- | M] () -- C:\Documents and Settings\jmal\My Documents\Mirlo común.docx
[2009/11/12 09:18:18 | 00,000,800 | ---- | M] () -- C:\WINDOWS\hpinfo.lnk
[2009/11/12 08:53:33 | 00,000,000 | ---- | M] () -- C:\temp.html
[2009/11/11 12:37:03 | 00,000,501 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Tweak UI.lnk
[2009/11/11 12:20:28 | 00,000,628 | ---- | M] () -- C:\Documents and Settings\jmal\Desktop\Gravity.lnk
[2009/11/11 11:09:58 | 00,025,600 | R--- | M] (Gibson Research Corp.) -- C:\WINDOWS\LeakTest.exe
[2009/11/11 09:56:28 | 00,038,912 | ---- | M] () -- C:\WINDOWS\wizmo.exe
[2009/11/10 22:43:23 | 00,001,565 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\IrfanView Thumbnails.lnk
[2009/11/10 22:43:23 | 00,000,685 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\IrfanView.lnk
[2009/11/10 09:51:01 | 00,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2009/11/09 11:57:49 | 00,001,496 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\COWON Media Center - jetAudio.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color=\"#E56717\"]========== Files Created - No Company Name ==========[/color]
[2009/12/05 20:26:20 | 00,001,564 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Microsoft Reader.lnk
[2009/12/03 19:26:26 | 00,000,630 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\µTorrent.lnk
[2009/12/03 19:09:25 | 00,000,618 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\WinUHA.lnk
[2009/11/29 19:51:45 | 00,000,530 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\Win_Star.lnk
[2009/11/29 19:51:07 | 00,052,116 | ---- | C] () -- C:\WINDOWS\System\ASTROMTX.TTF
[2009/11/29 19:51:07 | 00,048,887 | ---- | C] () -- C:\WINDOWS\System\WSTARTT.TTF
[2009/11/29 19:51:07 | 00,046,656 | ---- | C] () -- C:\WINDOWS\System\!ASMASTR.TTF
[2009/11/29 19:50:47 | 00,157,184 | ---- | C] () -- C:\WINDOWS\System\STORAGE.DLL
[2009/11/29 19:49:50 | 00,070,978 | ---- | C] () -- C:\WINDOWS\WPLUSCD.EXE
[2009/11/29 19:49:50 | 00,007,008 | ---- | C] () -- C:\WINDOWS\System\SETUPKIT.DLL
[2009/11/29 19:41:59 | 00,013,030 | ---- | C] () -- C:\PDOXUSRS.NET
[2009/11/28 19:28:08 | 00,001,504 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Q-Dir.lnk
[2009/11/26 01:55:17 | 00,000,807 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\DivX Player.lnk
[2009/11/26 01:55:09 | 00,000,843 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\DivX Converter.lnk
[2009/11/26 01:54:39 | 00,001,478 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\DivX Movies.lnk
[2009/11/26 01:43:28 | 00,000,040 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2009/11/25 06:55:33 | 00,005,120 | ---- | C] () -- C:\Documents and Settings\jmal\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/11/24 12:52:49 | 10,733,19936 | -HS- | C] () -- C:\hiberfil.sys
[2009/11/24 10:21:50 | 00,001,024 | ---- | C] () -- C:\WINDOWS\System32\AutoPartNt.let
[2009/11/20 23:37:32 | 00,002,256 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\Nero BackItUp.lnk
[2009/11/20 23:36:56 | 00,002,249 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\Nero Burning ROM.lnk
[2009/11/20 18:20:44 | 00,001,123 | RH-- | C] () -- C:\WINDOWS\EPMBatch.ept
[2009/11/20 11:25:38 | 08,916,992 | ---- | C] () -- C:\Documents and Settings\jmal\My Documents\WindowsKey.iso
[2009/11/19 19:21:44 | 00,000,824 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Acronis True Image WD Edition.lnk
[2009/11/19 01:55:36 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\jmal\Format
[2009/11/19 00:32:03 | 00,000,931 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\EASEUS Todo Backup 1.0.lnk
[2009/11/18 15:22:42 | 00,014,848 | ---- | C] () -- C:\WINDOWS\System32\EuEpmGdi.dll
[2009/11/18 15:22:42 | 00,002,009 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\EASEUS Partition Master 4.0 Server Edition.lnk
[2009/11/18 15:22:41 | 01,663,488 | ---- | C] () -- C:\WINDOWS\System32\BootMan.exe
[2009/11/18 15:22:41 | 00,086,408 | ---- | C] () -- C:\WINDOWS\System32\setupempdrv03.exe
[2009/11/18 15:22:41 | 00,008,704 | ---- | C] () -- C:\WINDOWS\System32\epmntdrv.sys
[2009/11/18 15:22:41 | 00,003,072 | ---- | C] () -- C:\WINDOWS\System32\EuGdiDrv.sys
[2009/11/17 23:44:43 | 00,000,658 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\File viewer.lnk
[2009/11/15 22:06:53 | 00,000,755 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\Media Player Classic.lnk
[2009/11/15 22:06:51 | 00,421,888 | ---- | C] () -- C:\WINDOWS\System32\ac3filter.acm
[2009/11/15 18:48:57 | 00,115,817 | ---- | C] () -- C:\Documents and Settings\jmal\My Documents\Break_thew_News_to_Mother_American_Songs_XIXthCry_2.jpg
[2009/11/15 18:47:54 | 00,117,523 | ---- | C] () -- C:\Documents and Settings\jmal\My Documents\Break_thew_News_to_Mother_American_Songs_XIXthCry.jpg
[2009/11/14 18:31:27 | 00,000,810 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Free Screen Video Capture by Topviewsoft.lnk
[2009/11/14 17:53:09 | 00,010,322 | ---- | C] () -- C:\Documents and Settings\jmal\My Documents\CominThru.jpg
[2009/11/13 16:00:48 | 00,001,904 | ---- | C] () -- C:\WINDOWS\System32\SetupBD.din
[2009/11/13 11:23:38 | 00,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll
[2009/11/13 10:04:18 | 00,000,842 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\DriverScanner.lnk
[2009/11/13 08:52:28 | 00,024,733 | ---- | C] () -- C:\Documents and Settings\jmal\My Documents\Clarinadas.htm
[2009/11/12 23:42:38 | 00,013,720 | ---- | C] () -- C:\Documents and Settings\jmal\My Documents\Mirlo común.docx
[2009/11/12 10:07:09 | 00,000,523 | ---- | C] () -- C:\hpfr3320.xml
[2009/11/12 08:53:33 | 00,000,000 | ---- | C] () -- C:\temp.html
[2009/11/11 12:37:03 | 00,160,217 | ---- | C] () -- C:\WINDOWS\System32\PowerToysLicense.rtf
[2009/11/11 12:37:03 | 00,000,501 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\Tweak UI.lnk
[2009/11/11 12:20:28 | 00,000,628 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\Gravity.lnk
[2009/11/11 10:53:24 | 00,001,322 | ---- | C] () -- C:\Documents and Settings\jmal\Desktop\Apagar el monitor.lnk
[2009/11/11 10:52:17 | 00,038,912 | ---- | C] () -- C:\WINDOWS\wizmo.exe
[2009/11/10 22:43:23 | 00,001,565 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\IrfanView Thumbnails.lnk
[2009/11/10 22:43:23 | 00,000,685 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\IrfanView.lnk
[2009/11/09 11:57:49 | 00,001,496 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\COWON Media Center - jetAudio.lnk
[2009/11/02 22:41:35 | 11,808,768 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\sandra.mda
[2009/11/01 21:27:40 | 00,000,754 | ---- | C] () -- C:\WIND
