LandzDown Forum

cbfr,
As a starting point can you please :

• Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
  
• Double click on RSIT.exe to run RSIT.
  
• Click Continue at the disclaimer screen.
  
• Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)
  

GR@PH;<'S   

cbfr,
I see you still are using XP SP2 you will need to download SP3 However you may need to get your PC running cleaner first
I noticed that your PC is a wash with multiple anti-virus / malwere programs I recomend that you only use one program of each type as running more than one can and will conflict with each other.
 After a reboot use microsoft updates to get all the critical updates.
then your Java is also out dated and need updating.
Also you ned to update your Adobe PDF Reader  to version 9 
Now can you please download JavaRa unzipping it and saving it to your desktop
Now
Double-click on JavaRa.exe to start the program.  (Windows Vista users Right-click JavaRa.exe > Select Run as Administrator)
Click on Remove Older Versions to remove older versions of Java.
A logfile will pop up. Please save it to a convenient location.
and post that log file here.
After doing that

 download Malwarebytes' Anti-Malware to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform Full scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When completed, a log will open in Notepad. Please save it to a convenient location.
The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
then please download HijackThis  choose "Save" and navigate to the folder where it´s saved and doubleclick upon it.
This is a complete installer that installs Hijackthis onto your computer to C:\Program Files\HijackThis and makes an entry in the start menu & allows you to have a shortcut on desktop
then Doubleclick the HJT icon on your desktop, hit "Do a system scan and save logfile". Save the logfile and a txt-file will be produced.. Copy that one and paste it here.


GR@PH;<'S   

Hi, cbfr.

Before you do the above, let's do some heavy cleanup.  There's some heavy duty stuff going on there.

Please follow these instructions carefully.

Download ComboFix from one of the following locations:

Link 1
Link 2
Link 3

!!! IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications. If not disabled, these programs will likely interfere with cleanup process. This can usually be accomplished by a right-click on the icon in the System Tray.  This can usually be accomplished by a right-click on the icon in the System Tray. 

Note:  If you use AVG, you must also open the AVG 8 Control Center, by right clicking on the AVG 8 icon on task bar as well as the following:

• Click on Tools.
• Select Advanced Settings.
• In the left hand pane, scroll down to "Resident Shield".
• In the main pane, deselect the option to "Enable Resident Shield."
• To re-enable AVG 8, please select "Enable Resident Shield" again.

Now, please run ComboFix:

• Double-click ComboFix.exe on your desktop and follow the prompts.
• As part of the process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it is strongly recommended to have this pre-installed on your machine before doing any malware removal. The Recovery Console will allow you to start up the computer in a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  Please note: If the Microsoft Windows Recovery Console is already installed on the computer, ComboFix will continue the malware removal procedures.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console.
• When prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
  
  
• After the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
  
  
• Click "Yes" to continue scanning for malware.
• When finished, a log will be produced. Please include the C:\ComboFix.txt in your next reply along with a fresh HijackThis log.

Combo Fix

ComboFix 09-04-04.01 - Christina 2009-04-07 20:51:01.3 - NTFSx86
Running from: c:\documents and settings\Christina\Desktop\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
c:\windows\system32\_003728_.tmp.dll
c:\windows\system32\_003729_.tmp.dll
c:\windows\system32\_003730_.tmp.dll
c:\windows\system32\_003731_.tmp.dll
c:\windows\system32\_003738_.tmp.dll
c:\windows\system32\_003739_.tmp.dll
c:\windows\system32\_003740_.tmp.dll
c:\windows\system32\_003741_.tmp.dll
c:\windows\system32\_003742_.tmp.dll
c:\windows\system32\_003743_.tmp.dll
c:\windows\system32\_003744_.tmp.dll
c:\windows\system32\_003745_.tmp.dll
c:\windows\system32\_003746_.tmp.dll
c:\windows\system32\_003747_.tmp.dll
c:\windows\system32\_003748_.tmp.dll
c:\windows\system32\_003749_.tmp.dll
c:\windows\system32\_003750_.tmp.dll
c:\windows\system32\_003751_.tmp.dll
c:\windows\system32\_003752_.tmp.dll
c:\windows\system32\_003753_.tmp.dll
c:\windows\system32\_003754_.tmp.dll
c:\windows\system32\_003755_.tmp.dll
c:\windows\system32\_003756_.tmp.dll
c:\windows\system32\_003757_.tmp.dll
c:\windows\system32\_003758_.tmp.dll
c:\windows\system32\_003761_.tmp.dll
c:\windows\system32\_003762_.tmp.dll
c:\windows\system32\_003763_.tmp.dll
c:\windows\system32\_003764_.tmp.dll
c:\windows\system32\_003765_.tmp.dll
c:\windows\system32\_003766_.tmp.dll
c:\windows\system32\_003767_.tmp.dll
c:\windows\system32\_003769_.tmp.dll
c:\windows\system32\_003770_.tmp.dll
c:\windows\system32\_003771_.tmp.dll
c:\windows\system32\_003772_.tmp.dll
c:\windows\system32\_003773_.tmp.dll
c:\windows\system32\_003774_.tmp.dll
c:\windows\system32\_003775_.tmp.dll
c:\windows\system32\_003776_.tmp.dll
c:\windows\system32\_003777_.tmp.dll
c:\windows\system32\_003778_.tmp.dll
c:\windows\system32\_003779_.tmp.dll
c:\windows\system32\_003782_.tmp.dll
c:\windows\system32\_003783_.tmp.dll
c:\windows\system32\_003784_.tmp.dll
c:\windows\system32\_003786_.tmp.dll
c:\windows\system32\_003787_.tmp.dll
c:\windows\system32\_003788_.tmp.dll
c:\windows\system32\_003789_.tmp.dll
c:\windows\system32\_003790_.tmp.dll
c:\windows\system32\_003791_.tmp.dll
c:\windows\system32\_003792_.tmp.dll
c:\windows\system32\_003793_.tmp.dll
c:\windows\system32\_003794_.tmp.dll
c:\windows\system32\_003795_.tmp.dll
c:\windows\system32\_003797_.tmp.dll
c:\windows\system32\_003798_.tmp.dll
c:\windows\system32\_003799_.tmp.dll
c:\windows\system32\_003800_.tmp.dll
c:\windows\system32\_003802_.tmp.dll
c:\windows\system32\_003804_.tmp.dll
c:\windows\system32\_003805_.tmp.dll
c:\windows\system32\_003806_.tmp.dll
c:\windows\system32\_003807_.tmp.dll
c:\windows\system32\_003808_.tmp.dll
c:\windows\system32\_003809_.tmp.dll
c:\windows\system32\_003810_.tmp.dll
c:\windows\system32\_003812_.tmp.dll
c:\windows\system32\_003813_.tmp.dll
c:\windows\system32\_003814_.tmp.dll
c:\windows\system32\_003815_.tmp.dll
c:\windows\system32\_003816_.tmp.dll
c:\windows\system32\_003817_.tmp.dll
c:\windows\system32\_003818_.tmp.dll
c:\windows\system32\_003819_.tmp.dll
c:\windows\system32\_003821_.tmp.dll
c:\windows\system32\_003822_.tmp.dll
c:\windows\system32\_003823_.tmp.dll
c:\windows\system32\_003824_.tmp.dll
c:\windows\system32\_003825_.tmp.dll
c:\windows\system32\_003827_.tmp.dll
c:\windows\system32\_003828_.tmp.dll
c:\windows\system32\_003832_.tmp.dll
c:\windows\system32\_003833_.tmp.dll
c:\windows\system32\_003835_.tmp.dll
c:\windows\system32\_003838_.tmp.dll
c:\windows\system32\_003840_.tmp.dll
c:\windows\system32\_003841_.tmp.dll
c:\windows\system32\_003842_.tmp.dll
c:\windows\system32\_003843_.tmp.dll
c:\windows\system32\_003846_.tmp.dll
c:\windows\system32\_003847_.tmp.dll
c:\windows\system32\_003848_.tmp.dll
c:\windows\system32\_003849_.tmp.dll
c:\windows\system32\_003850_.tmp.dll
c:\windows\system32\_003855_.tmp.dll
c:\windows\system32\_003857_.tmp.dll
c:\windows\system32\_003858_.tmp.dll
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe

.
(((((((((((((((((((((((((   Files Created from 2009-03-08 to 2009-04-08  )))))))))))))))))))))))))))))))
.

2009-04-02 06:53 . 2009-04-02 06:53   <DIR>   d--------   c:\program files\Adobe Media Player
2009-04-02 06:52 . 2009-04-02 06:52   <DIR>   d--------   c:\program files\Kodak
2009-04-02 06:52 . 2009-04-02 06:52   <DIR>   d--------   c:\program files\Common Files\Scanner
2009-04-02 06:52 . 2009-04-02 06:52   <DIR>   d--------   c:\program files\Common Files\Authentium
2009-04-02 06:52 . 2009-04-02 06:52   <DIR>   d--------   c:\program files\Bonjour
2009-04-02 06:52 . 2009-04-02 06:52   <DIR>   d--------   c:\program files\Bell
2009-04-01 21:21 . 2001-01-12 16:10   6,550   --a------   c:\windows\jautoexp.dat
2009-03-25 19:41 . 2009-02-09 06:19   1,846,272   --a------   c:\windows\system32\win32k.sys
2009-03-25 19:40 . 2008-08-14 06:00   2,180,352   --a------   c:\windows\system32\ntoskrnl.exe
2009-03-21 20:45 . 2009-04-02 06:50   <DIR>   d--------   c:\documents and settings\Christina\Tracing
2009-03-21 15:39 . 2009-04-02 06:50   <DIR>   d--------   c:\documents and settings\Anita\Tracing
2009-03-21 09:42 . 2009-03-21 09:42   <DIR>   d--------   c:\program files\Common Files\Windows Live
2009-03-11 19:54 . 2009-03-11 19:54   <DIR>   d--------   c:\program files\Alwil Software

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-07 23:22   ---------   d-----w   c:\documents and settings\Christina\Application Data\OnlineArmor
2009-04-07 08:42   ---------   d-----w   c:\documents and settings\Anita\Application Data\OnlineArmor
2009-04-06 01:11   ---------   d-----w   c:\documents and settings\Christina\Application Data\Image Zone Express
2009-04-02 10:53   ---------   d-----w   c:\documents and settings\All Users.WINDOWS\Application Data\avg8
2009-04-02 01:21   155,995   ----a-w   c:\windows\java\Packages\QFDN1BTV.ZIP
2009-03-27 21:08   ---------   d-----w   c:\program files\RealArcade
2009-03-21 13:59   ---------   d-----w   c:\program files\Windows Live
2009-03-12 23:03   ---------   d-----w   c:\program files\Google
2009-02-24 11:24   ---------   d-----w   c:\program files\FrostWire
2009-02-10 15:31   ---------   d---a-w   c:\documents and settings\All Users.WINDOWS\Application Data\TEMP
2009-02-10 14:30   ---------   d-----w   c:\documents and settings\Anita\Application Data\Skip-Bo
2009-02-04 13:40   10,520   ----a-w   c:\windows\system32\avgrsstx.dll
2008-02-29 20:46   0   -c--a-w   c:\program files\temp01
2008-02-25 22:26   32   ----a-w   c:\documents and settings\All Users.WINDOWS\Application Data\ezsid.dat
2007-01-30 15:16   28,952   ----a-w   c:\documents and settings\Anita\Application Data\GDIPFONTCACHEV1.DAT
2007-01-09 00:50   28,952   ----a-w   c:\documents and settings\Christina\Application Data\GDIPFONTCACHEV1.DAT
2006-04-12 09:26   774,144   ----a-w   c:\program files\RngInterstitial.dll
2009-01-06 00:56   122,880   ----a-w   c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

(((((((((((((((((((((((((((((   snapshot@2008-11-16_17.23.03.73   )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-10-03 09:57:49   247,326   ----a-w   c:\windows\$hf_mig$\KB954600\SP2QFE\strmdll.dll
+ 2008-10-03 10:02:42   247,326   ----a-w   c:\windows\$hf_mig$\KB954600\SP3GDR\strmdll.dll
+ 2008-10-03 09:49:31   247,326   ----a-w   c:\windows\$hf_mig$\KB954600\SP3QFE\strmdll.dll
+ 2007-11-30 12:39:22   17,272   ----a-w   c:\windows\$hf_mig$\KB954600\spmsg.dll
+ 2007-11-30 12:39:22   231,288   ----a-w   c:\windows\$hf_mig$\KB954600\spuninst.exe
+ 2007-11-30 12:39:22   26,488   ----a-w   c:\windows\$hf_mig$\KB954600\update\spcustom.dll
+ 2007-11-30 11:18:51   755,576   ----a-w   c:\windows\$hf_mig$\KB954600\update\update.exe
+ 2007-11-30 11:18:51   382,840   ----a-w   c:\windows\$hf_mig$\KB954600\update\updspapi.dll
+ 2008-10-22 09:47:25   62,976   ----a-w   c:\windows\$hf_mig$\KB955839\SP2QFE\tzchange.exe
+ 2008-10-23 10:06:59   62,976   ----a-w   c:\windows\$hf_mig$\KB955839\SP3GDR\tzchange.exe
+ 2008-10-23 10:17:49   62,976   ----a-w   c:\windows\$hf_mig$\KB955839\SP3QFE\tzchange.exe
+ 2007-11-30 12:39:22   17,272   ----a-w   c:\windows\$hf_mig$\KB955839\spmsg.dll
+ 2007-11-30 12:39:22   231,288   ----a-w   c:\windows\$hf_mig$\KB955839\spuninst.exe
+ 2007-11-30 12:39:22   26,488   ----a-w   c:\windows\$hf_mig$\KB955839\update\spcustom.dll
+ 2007-11-30 12:39:22   755,576   ----a-w   c:\windows\$hf_mig$\KB955839\update\update.exe
+ 2007-11-30 12:39:22   382,840   ----a-w   c:\windows\$hf_mig$\KB955839\update\updspapi.dll
+ 2008-10-23 12:51:04   284,160   ----a-w   c:\windows\$hf_mig$\KB956802\SP2QFE\gdi32.dll
+ 2008-10-23 12:36:14   286,720   ----a-w   c:\windows\$hf_mig$\KB956802\SP3GDR\gdi32.dll
+ 2008-10-23 12:43:42   286,720   ----a-w   c:\windows\$hf_mig$\KB956802\SP3QFE\gdi32.dll
+ 2008-07-08 13:02:01   17,272   ----a-w   c:\windows\$hf_mig$\KB956802\spmsg.dll
+ 2008-07-08 13:02:02   231,288   ----a-w   c:\windows\$hf_mig$\KB956802\spuninst.exe
+ 2008-07-08 13:02:01   26,488   ----a-w   c:\windows\$hf_mig$\KB956802\update\spcustom.dll
+ 2008-07-09 07:38:29   755,576   ----a-w   c:\windows\$hf_mig$\KB956802\update\update.exe
+ 2008-07-09 07:38:37   382,840   ----a-w   c:\windows\$hf_mig$\KB956802\update\updspapi.dll
+ 2008-10-16 01:00:11   3,067,904   ----a-w   c:\windows\$hf_mig$\KB958215\SP3GDR\mshtml.dll
+ 2008-10-16 01:00:10   1,499,136   ----a-w   c:\windows\$hf_mig$\KB958215\SP3GDR\shdocvw.dll
+ 2008-10-16 01:00:11   619,520   ----a-w   c:\windows\$hf_mig$\KB958215\SP3GDR\urlmon.dll
+ 2008-10-16 01:00:11   666,112   ----a-w   c:\windows\$hf_mig$\KB958215\SP3GDR\wininet.dll
+ 2008-10-16 11:34:08   3,067,904   ----a-w   c:\windows\$hf_mig$\KB958215\SP3QFE\mshtml.dll
+ 2008-10-16 01:04:06   1,499,136   ----a-w   c:\windows\$hf_mig$\KB958215\SP3QFE\shdocvw.dll
+ 2008-10-16 01:04:06   620,032   ----a-w   c:\windows\$hf_mig$\KB958215\SP3QFE\urlmon.dll
+ 2008-10-16 01:04:06   667,136   ----a-w   c:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll
+ 2007-11-30 12:39:22   17,272   ----a-w   c:\windows\$hf_mig$\KB958215\spmsg.dll
+ 2007-11-30 12:39:22   231,288   ----a-w   c:\windows\$hf_mig$\KB958215\spuninst.exe
+ 2007-11-30 12:39:22   26,488   ----a-w   c:\windows\$hf_mig$\KB958215\update\spcustom.dll
+ 2007-11-30 12:39:22   755,576   ----a-w   c:\windows\$hf_mig$\KB958215\update\update.exe
+ 2008-07-09 07:38:37   382,840   ----a-w   c:\windows\$hf_mig$\KB958215\update\updspapi.dll
+ 2008-12-11 10:24:44   333,184   ----a-w   c:\windows\$hf_mig$\KB958687\SP2QFE\srv.sys
+ 2008-12-11 10:57:09   333,952   ----a-w   c:\windows\$hf_mig$\KB958687\SP3GDR\srv.sys
+ 2008-12-11 12:33:59   333,952   ----a-w   c:\windows\$hf_mig$\KB958687\SP3QFE\srv.sys
+ 2007-11-30 12:39:22   17,272   ----a-w   c:\windows\$hf_mig$\KB958687\spmsg.dll
+ 2007-11-30 12:39:22   231,288   ----a-w   c:\windows\$hf_mig$\KB958687\spuninst.exe
+ 2007-11-30 12:39:22   26,488   ----a-w   c:\windows\$hf_mig$\KB958687\update\spcustom.dll
+ 2007-11-30 11:18:51   755,576   ----a-w   c:\windows\$hf_mig$\KB958687\update\update.exe
+ 2007-11-30 11:18:51   382,840   ----a-w   c:\windows\$hf_mig$\KB958687\update\updspapi.dll
+ 2009-02-09 10:20:05   1,847,424   ----a-w   c:\windows\$hf_mig$\KB958690\SP2QFE\win32k.sys
+ 2009-02-09 11:13:27   1,846,784   ----a-w   c:\windows\$hf_mig$\KB958690\SP3GDR\win32k.sys
+ 2009-02-09 11:08:53   1,847,552   ----a-w   c:\windows\$hf_mig$\KB958690\SP3QFE\win32k.sys
+ 2008-07-09 07:38:24   17,272   ----a-w   c:\windows\$hf_mig$\KB958690\spmsg.dll
+ 2008-07-09 07:38:25   231,288   ----a-w   c:\windows\$hf_mig$\KB958690\spuninst.exe
+ 2008-07-09 07:38:24   26,488   ----a-w   c:\windows\$hf_mig$\KB958690\update\spcustom.dll
+ 2008-07-09 07:38:29   755,576   ----a-w   c:\windows\$hf_mig$\KB958690\update\update.exe
+ 2008-07-09 07:38:37   382,840   ----a-w   c:\windows\$hf_mig$\KB958690\update\updspapi.dll
+ 2008-12-05 06:41:26   144,896   ----a-w   c:\windows\$hf_mig$\KB960225\SP2QFE\schannel.dll
+ 2008-12-05 06:54:55   144,896   ----a-w   c:\windows\$hf_mig$\KB960225\SP3GDR\schannel.dll
+ 2008-12-05 06:58:08   144,896   ----a-w   c:\windows\$hf_mig$\KB960225\SP3QFE\schannel.dll
+ 2007-11-30 11:18:51   17,272   ----a-w   c:\windows\$hf_mig$\KB960225\spmsg.dll
+ 2007-11-30 11:18:51   231,288   ----a-w   c:\windows\$hf_mig$\KB960225\spuninst.exe
+ 2007-11-30 11:18:51   26,488   ----a-w   c:\windows\$hf_mig$\KB960225\update\spcustom.dll
+ 2007-11-30 12:39:22   755,576   ----a-w   c:\windows\$hf_mig$\KB960225\update\update.exe
+ 2007-11-30 12:39:22   382,840   ----a-w   c:\windows\$hf_mig$\KB960225\update\updspapi.dll
+ 2008-12-12 17:01:00   3,067,904   ----a-w   c:\windows\$hf_mig$\KB960714\SP3GDR\mshtml.dll
+ 2008-12-12 17:14:50   3,067,904   ----a-w   c:\windows\$hf_mig$\KB960714\SP3QFE\mshtml.dll
+ 2007-11-30 12:39:22   17,272   ----a-w   c:\windows\$hf_mig$\KB960714\spmsg.dll
+ 2007-11-30 12:39:22   231,288   ----a-w   c:\windows\$hf_mig$\KB960714\spuninst.exe
+ 2007-11-30 12:39:22   26,488   ----a-w   c:\windows\$hf_mig$\KB960714\update\spcustom.dll
+ 2008-07-09 07:38:29   755,576   ----a-w   c:\windows\$hf_mig$\KB960714\update\update.exe
+ 2007-11-30 11:18:51   382,840   ----a-w   c:\windows\$hf_mig$\KB960714\update\updspapi.dll
+ 2008-07-09 07:38:24   17,272   ----a-w   c:\windows\$hf_mig$\KB960715\spmsg.dll
+ 2008-07-09 07:38:25   231,288   ----a-w   c:\windows\$hf_mig$\KB960715\spuninst.exe
+ 2008-07-09 07:38:24   26,488   ----a-w   c:\windows\$hf_mig$\KB960715\update\spcustom.dll
+ 2008-11-15 17:18:04   755,576   ----a-w   c:\windows\$hf_mig$\KB960715\update\update.exe
+ 2008-07-09 07:38:37   382,840   ----a-w   c:\windows\$hf_mig$\KB960715\update\updspapi.dll
+ 2008-06-17 19:02:19   8,461,312   ----a-w   c:\windows\$hf_mig$\KB967715\SP3GDR\shell32.dll
+ 2008-06-17 19:04:34   8,461,824   ----a-w   c:\windows\$hf_mig$\KB967715\SP3QFE\shell32.dll
+ 2008-07-09 07:38:24   17,272   ----a-w   c:\windows\$hf_mig$\KB967715\spmsg.dll
+ 2008-07-09 07:38:25   231,288   ----a-w   c:\windows\$hf_mig$\KB967715\spuninst.exe
+ 2008-07-09 07:38:24   26,488   ----a-w   c:\windows\$hf_mig$\KB967715\update\spcustom.dll
+ 2008-07-09 07:38:29   755,576   ----a-w   c:\windows\$hf_mig$\KB967715\update\update.exe
+ 2008-07-09 07:38:37   382,840   ----a-w   c:\windows\$hf_mig$\KB967715\update\updspapi.dll
+ 2006-10-19 01:03:58   100,864   -c----w   c:\windows\$NtUninstallKB952069_WM9$\logagent.exe
+ 2007-07-27 14:41:48   231,288   -c----w   c:\windows\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe
+ 2007-07-27 14:41:48   382,840   -c----w   c:\windows\$NtUninstallKB952069_WM9$\spuninst\updspapi.dll
+ 2006-10-19 02:47:20   937,984   -c----w   c:\windows\$NtUninstallKB952069_WM9$\wmnetmgr.dll
+ 2006-10-19 02:47:22   2,450,944   -c----w   c:\windows\$NtUninstallKB952069_WM9$\wmvcore.dll
+ 2007-11-30 12:39:22   231,288   -c----w   c:\windows\$NtUninstallKB954600$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51   382,840   -c----w   c:\windows\$NtUninstallKB954600$\spuninst\updspapi.dll
+ 2006-08-21 14:52:08   246,814   -c----w   c:\windows\$NtUninstallKB954600$\strmdll.dll
+ 2007-11-30 12:39:22   231,288   -c----w   c:\windows\$NtUninstallKB955839$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22   382,840   -c----w   c:\windows\$NtUninstallKB955839$\spuninst\updspapi.dll
+ 2008-07-14 11:09:18   62,976   -c----w   c:\windows\$NtUninstallKB955839$\tzchange.exe
+ 2008-02-20 06:51:05   282,624   -c----w   c:\windows\$NtUninstallKB956802$\gdi32.dll
+ 2008-07-08 13:02:02   231,288   -c----w   c:\windows\$NtUninstallKB956802$\spuninst\spuninst.exe
+ 2008-07-09 07:38:37   382,840   -c----w   c:\windows\$NtUninstallKB956802$\spuninst\updspapi.dll
+ 2008-08-20 05:33:19   1,024,000   -c----w   c:\windows\$NtUninstallKB958215$\browseui.dll
+ 2008-08-20 05:33:17   151,040   -c----w   c:\windows\$NtUninstallKB958215$\cdfview.dll
+ 2008-08-20 05:33:18   1,054,208   -c----w   c:\windows\$NtUninstallKB958215$\danim.dll
+ 2008-08-20 05:33:18   357,888   -c----w   c:\windows\$NtUninstallKB958215$\dxtmsft.dll
+ 2008-08-20 05:33:18   205,312   -c----w   c:\windows\$NtUninstallKB958215$\dxtrans.dll
+ 2008-08-20 05:33:18   55,808   -c----w   c:\windows\$NtUninstallKB958215$\extmgr.dll
+ 2008-08-19 09:38:57   18,432   -c----w   c:\windows\$NtUninstallKB958215$\iedw.exe
+ 2008-08-20 05:33:18   251,904   -c----w   c:\windows\$NtUninstallKB958215$\iepeers.dll
+ 2008-08-20 05:33:18   96,256   -c----w   c:\windows\$NtUninstallKB958215$\inseng.dll
+ 2008-08-20 05:33:19   16,384   -c----w   c:\windows\$NtUninstallKB958215$\jsproxy.dll
+ 2008-08-20 05:33:20   3,067,392   -c----w   c:\windows\$NtUninstallKB958215$\mshtml.dll
+ 2008-08-20 05:33:19   449,024   -c----w   c:\windows\$NtUninstallKB958215$\mshtmled.dll
+ 2008-08-20 05:33:18   146,432   -c----w   c:\windows\$NtUninstallKB958215$\msrating.dll
+ 2008-08-20 05:33:18   532,480   -c----w   c:\windows\$NtUninstallKB958215$\mstime.dll
+ 2008-08-20 05:33:18   39,424   -c----w   c:\windows\$NtUninstallKB958215$\pngfilt.dll
+ 2008-08-20 05:33:19   1,499,136   -c----w   c:\windows\$NtUninstallKB958215$\shdocvw.dll
+ 2008-08-20 05:33:19   474,112   -c----w   c:\windows\$NtUninstallKB958215$\shlwapi.dll
+ 2007-11-30 12:39:22   231,288   -c----w   c:\windows\$NtUninstallKB958215$\spuninst\spuninst.exe
+ 2008-07-09 07:38:37   382,840   -c----w   c:\windows\$NtUninstallKB958215$\spuninst\updspapi.dll
+ 2008-08-20 05:33:19   619,008   -c----w   c:\windows\$NtUninstallKB958215$\urlmon.dll
+ 2008-08-20 05:33:19   667,648   -c----w   c:\windows\$NtUninstallKB958215$\wininet.dll
+ 2008-08-19 09:20:32   351,744   -c----w   c:\windows\$NtUninstallKB958215$\xpsp3res.dll
+ 2007-11-30 12:39:22   231,288   -c----w   c:\windows\$NtUninstallKB958687$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51   382,840   -c----w   c:\windows\$NtUninstallKB958687$\spuninst\updspapi.dll
+ 2008-08-28 10:04:17   333,056   -c----w   c:\windows\$NtUninstallKB958687$\srv.sys
+ 2008-07-09 07:38:25   231,288   -c----w   c:\windows\$NtUninstallKB958690$\spuninst\spuninst.exe
+ 2008-07-09 07:38:37   382,840   -c----w   c:\windows\$NtUninstallKB958690$\spuninst\updspapi.dll
+ 2008-09-15 11:57:41   1,846,016   -c----w   c:\windows\$NtUninstallKB958690$\win32k.sys
+ 2007-07-27 13:41:48   231,288   -c----w   c:\windows\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe
+ 2007-07-27 13:41:48   382,840   -c----w   c:\windows\$NtUninstallKB959772_WM11$\spuninst\updspapi.dll
+ 2007-06-12 03:51:12   10,834,944   -c----w   c:\windows\$NtUninstallKB959772_WM11$\wmp.dll
+ 2007-04-25 14:21:15   144,896   -c----w   c:\windows\$NtUninstallKB960225$\schannel.dll
+ 2007-11-30 11:18:51   231,288   -c----w   c:\windows\$NtUninstallKB960225$\spuninst\spuninst.exe
+ 2007-11-30 12:39:22   382,840   -c----w   c:\windows\$NtUninstallKB960225$\spuninst\updspapi.dll
+ 2008-10-16 10:20:56   3,067,392   -c----w   c:\windows\$NtUninstallKB960714$\mshtml.dll
+ 2007-11-30 12:39:22   231,288   -c----w   c:\windows\$NtUninstallKB960714$\spuninst\spuninst.exe
+ 2007-11-30 11:18:51   382,840   -c----w   c:\windows\$NtUninstallKB960714$\spuninst\updspapi.dll
+ 2008-07-09 07:38:25   231,288   -c----w   c:\windows\$NtUninstallKB960715$\spuninst\spuninst.exe
+ 2008-07-09 07:38:37   382,840   -c----w   c:\windows\$NtUninstallKB960715$\spuninst\updspapi.dll
+ 2007-10-26 03:34:01   8,460,288   -c----w   c:\windows\$NtUninstallKB967715$\shell32.dll
+ 2008-07-09 07:38:25   231,288   -c----w   c:\windows\$NtUninstallKB967715$\spuninst\spuninst.exe
+ 2008-07-09 07:38:37   382,840   -c----w   c:\windows\$NtUninstallKB967715$\spuninst\updspapi.dll
+ 2006-10-04 14:05:26   39,424   ----a-w   c:\windows\AppPatch\acadproc(2).dll
+ 2006-10-04 14:05:26   39,424   ----a-w   c:\windows\AppPatch\acadproc(3).dll
+ 2006-10-04 14:05:26   39,424   ----a-w   c:\windows\AppPatch\acadproc(4).dll
+ 2006-10-04 14:05:26   39,424   ----a-w   c:\windows\AppPatch\acadproc(5).dll
+ 2004-08-04 07:56:41   1,852,416   ----a-w   c:\windows\AppPatch\acgenral(3).dll
+ 2004-08-04 07:56:41   1,852,416   ----a-w   c:\windows\AppPatch\acgenral(4).dll
- 2005-10-21 01:02:28   163,328   ----a-w   c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
+ 2005-10-21 00:02:28   163,328   ----a-w   c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
- 2005-10-21 01:02:28   163,328   ----a-w   c:\windows\ERDNT\subs\ERDNT.EXE
+ 2005-10-21 00:02:28   163,328   ----a-w   c:\windows\ERDNT\subs\ERDNT.EXE
+ 2007-06-13 10:23:07   1,033,216   ----a-w   c:\windows\explorer(2).exe
+ 2007-06-13 10:23:07   1,033,216   ----a-w   c:\windows\explorer(3).exe
+ 2007-06-13 10:23:07   1,033,216   ----a-w   c:\windows\explorer(4).exe
- 2000-08-31 13:00:00   89,504   ----a-w   c:\windows\fdsv.exe
+ 2000-08-31 12:00:00   89,504   ----a-w   c:\windows\fdsv.exe
- 2000-08-31 13:00:00   80,412   ----a-w   c:\windows\grep.exe
+ 2000-08-31 12:00:00   80,412   ----a-w   c:\windows\grep.exe
- 2008-11-12 23:01:50   593,920   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-04-03 07:06:58   593,920   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2008-11-12 23:01:50   12,288   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-04-03 07:06:58   12,288   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2008-11-12 23:01:50   86,016   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-04-03 07:06:58   86,016   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2008-11-12 23:01:50   135,168   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-04-03 07:06:58   135,168   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2008-11-12 23:01:50   11,264   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-04-03 07:06:58   11,264   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2008-11-12 23:01:50   27,136   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-04-03 07:06:58   27,136   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2008-11-12 23:01:50   4,096   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-04-03 07:06:58   4,096   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2008-11-12 23:01:50   794,624   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-04-03 07:06:59   794,624   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2008-11-12 23:01:50   249,856   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-04-03 07:06:58   249,856   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2008-11-12 23:01:50   61,440   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-04-03 07:06:58   61,440   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2008-11-12 23:01:50   23,040   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-04-03 07:06:59   23,040   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2008-11-12 23:01:50   286,720   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-04-03 07:06:58   286,720   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2008-11-12 23:01:50   409,600   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-04-03 07:06:57   409,600   ----a-r   c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2008-11-12 23:02:08   35,600   ----a-r   c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2008-12-10 08:15:02   35,600   ----a-r   c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe
+ 2008-11-20 01:48:13   295,606   ----a-r   c:\windows\Installer\{AC76BA86-7AD7-1033-7B44-A81300000003}\SC_Reader.exe
+ 2009-01-05 21:52:55   173,430   ----a-r   c:\windows\Installer\{B7F98125-4955-41E3-8A71-4CE11CE9C198}\KGUSNewShortcut2_B7F98125495541E38A714CE11CE9C198.exe
+ 2009-01-05 21:52:55   173,430   ----a-r   c:\windows\Installer\{B7F98125-4955-41E3-8A71-4CE11CE9C198}\KGUSNewShortcut3_B7F98125495541E38A714CE11CE9C198.exe
+ 2009-04-02 01:21:58   2,232   ----a-w   c:\windows\java\Packages\Data\57FR7JBJ.DAT
+ 2009-04-02 01:21:29   2,678   ----a-w   c:\windows\java\Packages\Data\8KCG9J13.DAT
+ 2009-04-02 01:21:49   2,678   ----a-w   c:\windows\java\Packages\Data\HVB3RNJ1.DAT
+ 2009-04-02 01:21:30   2,678   ----a-w   c:\windows\java\Packages\Data\KCZFN93F.DAT
+ 2009-04-02 01:21:31   2,678   ----a-w   c:\windows\java\Packages\Data\R5R7RHNJ.DAT
+ 2009-04-02 01:21:33   2,678   ----a-w   c:\windows\java\Packages\Data\RZBDF7V7.DAT
- 2000-08-31 13:00:00   28,672   ----a-w   c:\windows\nircmd.exe
+ 2000-08-31 12:00:00   29,696   ----a-w   c:\windows\nircmd.exe
+ 2004-08-04 07:56:44   38,912   ----a-w   c:\windows\PCHealth\HelpCtr\Binaries\pchsvc(2).dll
+ 2004-08-04 07:56:44   38,912   ----a-w   c:\windows\PCHealth\HelpCtr\Binaries\pchsvc(3).dll
+ 2004-08-04 07:56:44   38,912   ----a-w   c:\windows\PCHealth\HelpCtr\Binaries\pchsvc(4).dll
+ 2009-03-31 22:45:07   184,426   ----a-w   c:\windows\PCHealth\HelpCtr\Config\Cache\Personal_32_1033.dat
+ 2009-03-31 22:45:07   184,426   ----a-w   c:\windows\PCHealth\HelpCtr\Config\Cache\Personal_32_1033.dat.bak
- 2000-08-31 13:00:00   98,816   ----a-w   c:\windows\sed.exe
+ 2000-08-31 12:00:00   98,816   ----a-w   c:\windows\sed.exe
- 2004-08-04 08:07:21   1,788   ----a-w   c:\windows\ServicePackFiles\i386\dcache.bin
+ 2008-04-14 00:25:26   1,804   ----a-w   c:\windows\ServicePackFiles\i386\dcache.bin
- 2000-08-31 13:00:00   161,792   ----a-w   c:\windows\SWREG.exe
+ 2000-08-31 12:00:00   161,792   ----a-w   c:\windows\SWREG.exe
- 2000-08-31 13:00:00   136,704   ----a-w   c:\windows\SWSC.exe
+ 2000-08-31 12:00:00   136,704   ----a-w   c:\windows\SWSC.exe
- 2000-08-31 13:00:00   212,480   ----a-w   c:\windows\SWXCACLS.exe
+ 2000-08-31 12:00:00   212,480   ----a-w   c:\windows\SWXCACLS.exe
+ 2004-08-04 07:56:41   194,048   ----a-w   c:\windows\system32\activeds(2).dll
+ 2004-08-04 07:56:41   194,048   ----a-w   c:\windows\system32\activeds(3).dll
+ 2004-08-04 07:56:41   194,048   ----a-w   c:\windows\system32\activeds(4).dll
+ 2004-08-04 07:56:41   101,888   ----a-w   c:\windows\system32\actxprxy(2).dll
+ 2004-08-04 07:56:41   101,888   ----a-w   c:\windows\system32\actxprxy(3).dll
+ 2004-08-04 07:56:41   101,888   ----a-w   c:\windows\system32\actxprxy(4).dll
+ 2004-08-04 07:56:41   143,360   ----a-w   c:\windows\system32\adsldpc(2).dll
+ 2004-08-04 07:56:41   143,360   ----a-w   c:\windows\system32\adsldpc(3).dll
+ 2004-08-04 07:56:41   143,360   ----a-w   c:\windows\system32\adsldpc(4).dll
+ 2004-08-04 07:56:41   99,840   ----a-w   c:\windows\system32\advpack(2).dll
+ 2004-08-04 07:56:41   99,840   ----a-w   c:\windows\system32\advpack(3).dll
+ 2004-08-04 07:56:41   99,840   ----a-w   c:\windows\system32\advpack(4).dll
+ 2004-08-04 07:56:47   44,544   ----a-w   c:\windows\system32\alg(2).exe
+ 2004-08-04 07:56:47   44,544   ----a-w   c:\windows\system32\alg(3).exe
+ 2004-08-04 07:56:47   44,544   ----a-w   c:\windows\system32\alg(4).exe
+ 2004-08-04 07:56:41   65,024   ----a-w   c:\windows\system32\asycfilt(2).dll
+ 2004-08-04 07:56:41   65,024   ----a-w   c:\windows\system32\asycfilt(3).dll
+ 2004-08-04 07:56:41   65,024   ----a-w   c:\windows\system32\asycfilt(4).dll
+ 2004-08-04 07:56:41   58,880   ----a-w   c:\windows\system32\atl(2).dll
+ 2004-08-04 07:56:41   58,880   ----a-w   c:\windows\system32\atl(3).dll
+ 2004-08-04 07:56:41   58,880   ----a-w   c:\windows\system32\atl(4).dll
+ 2004-08-04 07:56:41   42,496   ----a-w   c:\windows\system32\audiosrv(2).dll
+ 2004-08-04 07:56:41   42,496   ----a-w   c:\windows\system32\audiosrv(3).dll
+ 2004-08-04 07:56:41   42,496   ----a-w   c:\windows\system32\audiosrv(4).dll
+ 2005-03-02 18:09:29   56,832   ----a-w   c:\windows\system32\authz(2).dll
+ 2005-03-02 18:09:29   56,832   ----a-w   c:\windows\system32\authz(3).dll
+ 2005-03-02 18:09:29   56,832   ----a-w   c:\windows\system32\authz(4).dll
+ 2004-08-04 07:56:41   28,672   ----a-w   c:\windows\system32\batmeter(2).dll
+ 2004-08-04 07:56:41   28,672   ----a-w   c:\windows\system32\batmeter(3).dll
+ 2004-08-04 07:56:41   28,672   ----a-w   c:\windows\system32\batmeter(4).dll
+ 2004-08-04 07:55:59   63,488   ----a-w   c:\windows\system32\browselc(2).dll
+ 2004-08-04 07:55:59   63,488   ----a-w   c:\windows\system32\browselc(3).dll
+ 2004-08-04 07:55:59   63,488   ----a-w   c:\windows\system32\browselc(4).dll
+ 2004-08-04 07:56:41   77,312   ----a-w   c:\windows\system32\browser(2).dll
+ 2004-08-04 07:56:41   77,312   ----a-w   c:\windows\system32\browser(3).dll
+ 2004-08-04 07:56:41   77,312   ----a-w   c:\windows\system32\browser(4).dll
+ 2008-10-16 10:20:52   1,024,000   ----a-w   c:\windows\system32\browseui(2).dll
+ 2008-10-16 10:20:52   1,024,000   ----a-w   c:\windows\system32\browseui(3).dll
+ 2008-10-16 10:20:52   1,024,000   ----a-w   c:\windows\system32\browseui(4).dll
- 2008-08-20 05:33:19   1,024,000   ----a-w   c:\windows\system32\browseui.dll
+ 2008-10-16 10:20:52   1,024,000   ----a-w   c:\windows\system32\browseui.dll
+ 2004-08-04 07:56:41   59,904   ----a-w   c:\windows\system32\cabinet(2).dll
+ 2004-08-04 07:56:41   59,904   ----a-w   c:\windows\system32\cabinet(3).dll
+ 2004-08-04 07:56:41   59,904   ----a-w   c:\windows\system32\cabinet(4).dll
+ 2005-07-26 04:39:42   225,792   ----a-w   c:\windows\system32\catsrv(2).dll
+ 2005-07-26 04:39:42   225,792   ----a-w   c:\windows\system32\catsrv(3).dll
+ 2005-07-26 04:39:42   225,792   ----a-w   c:\windows\system32\catsrv(4).dll
+ 2005-07-26 04:39:43   625,152   ----a-w   c:\windows\system32\catsrvut(2).dll
+ 2005-07-26 04:39:43   625,152   ----a-w   c:\windows\system32\catsrvut(3).dll
+ 2005-07-26 04:39:43   625,152   ----a-w   c:\windows\system32\catsrvut(4).dll
- 2008-08-20 05:33:17   151,040   ----a-w   c:\windows\system32\cdfview.dll
+ 2008-10-16 10:20:42   151,040   ----a-w   c:\windows\system32\cdfview.dll
- 2008-07-19 02:10:48   94,920   ----a-w   c:\windows\system32\cdm.dll
+ 2008-10-16 19:09:44   92,696   ----a-w   c:\windows\system32\cdm.dll
+ 2004-08-04 07:56:41   194,560   ----a-w   c:\windows\system32\certcli(2).dll
+ 2004-08-04 07:56:41   194,560   ----a-w   c:\windows\system32\certcli(3).dll
+ 2004-08-04 07:56:41   194,560   ----a-w   c:\windows\system32\certcli(4).dll
+ 2004-08-04 07:56:00   16,896   ----a-w   c:\windows\system32\cfgmgr32(2).dll
+ 2004-08-04 07:56:00   16,896   ----a-w   c:\windows\system32\cfgmgr32(3).dll
+ 2004-08-04 07:56:00   16,896   ----a-w   c:\windows\system32\cfgmgr32(4).dll
+ 2005-07-26 04:39:43   498,688   ----a-w   c:\windows\system32\clbcatq(2).dll
+ 2005-07-26 04:39:43   498,688   ----a-w   c:\windows\system32\clbcatq(3).dll
+ 2005-07-26 04:39:43   498,688   ----a-w   c:\windows\system32\clbcatq(4).dll
+ 2004-08-04 07:56:41   57,856   ----a-w   c:\windows\system32\clusapi(2).dll
+ 2004-08-04 07:56:41   57,856   ----a-w   c:\windows\system32\clusapi(3).dll
+ 2004-08-04 07:56:41   57,856   ----a-w   c:\windows\system32\clusapi(4).dll
+ 2004-08-04 07:56:41   47,104   ----a-w   c:\windows\system32\cnbjmon(2).dll
+ 2004-08-04 07:56:41   47,104   ----a-w   c:\windows\system32\cnbjmon(3).dll
+ 2004-08-04 07:56:41   47,104   ----a-w   c:\windows\system32\cnbjmon(4).dll
+ 2005-07-26 04:39:43   60,416   ----a-w   c:\windows\system32\colbact(2).dll
+ 2005-07-26 04:39:43   60,416   ----a-w   c:\windows\system32\colbact(3).dll
+ 2005-07-26 04:39:43   60,416   ----a-w   c:\windows\system32\colbact(4).dll
+ 2004-08-04 07:56:41   792,064   ----a-w   c:\windows\system32\comres(2).dll
+ 2004-08-04 07:56:41   792,064   ----a-w   c:\windows\system32\comres(3).dll
+ 2004-08-04 07:56:41   792,064   ----a-w   c:\windows\system32\comres(4).dll
+ 2005-07-26 04:39:44   1,267,200   ----a-w   c:\windows\system32\comsvcs(2).dll
+ 2005-07-26 04:39:44   1,267,200   ----a-w   c:\windows\system32\comsvcs(3).dll
+ 2005-07-26 04:39:44   1,267,200   ----a-w   c:\windows\system32\comsvcs(4).dll
+ 2004-08-04 07:56:41   163,840   ----a-w   c:\windows\system32\credui(2).dll
+ 2004-08-04 07:56:41   163,840   ----a-w   c:\windows\system32\credui(3).dll
+ 2004-08-04 07:56:41   163,840   ----a-w   c:\windows\system32\credui(4).dll
+ 2004-08-04 07:56:41   597,504   ----a-w   c:\windows\system32\crypt32(2).dll
+ 2004-08-04 07:56:41   597,504   ----a-w   c:\windows\system32\crypt32(3).dll
+ 2004-08-04 07:56:41   597,504   ----a-w   c:\windows\system32\crypt32(4).dll
+ 2004-08-04 07:56:41   33,280   ----a-w   c:\windows\system32\cryptdll(2).dll
+ 2004-08-04 07:56:41   33,280   ----a-w   c:\windows\system32\cryptdll(3).dll
+ 2004-08-04 07:56:41   33,280   ----a-w   c:\windows\system32\cryptdll(4).dll
+ 2004-08-04 07:56:41   63,488   ----a-w   c:\windows\system32\cryptnet(2).dll
+ 2004-08-04 07:56:41   63,488   ----a-w   c:\windows\system32\cryptnet(3).dll
+ 2004-08-04 07:56:41   63,488   ----a-w   c:\windows\system32\cryptnet(4).dll
+ 2004-08-04 07:56:41   60,416   ----a-w   c:\windows\system32\cryptsvc(2).dll
+ 2004-08-04 07:56:41   60,416   ----a-w   c:\windows\system32\cryptsvc(3).dll
+ 2004-08-04 07:56:41   60,416   ----a-w   c:\windows\system32\cryptsvc(4).dll
+ 2004-08-04 07:56:41   512,512   ----a-w   c:\windows\system32\cryptui(2).dll
+ 2004-08-04 07:56:41   512,512   ----a-w   c:\windows\system32\cryptui(3).dll
+ 2004-08-04 07:56:41   512,512   ----a-w   c:\windows\system32\cryptui(4).dll
+ 2004-08-04 07:56:41   101,888   ----a-w   c:\windows\system32\cscdll(2).dll
+ 2004-08-04 07:56:41   101,888   ----a-w   c:\windows\system32\cscdll(3).dll
+ 2004-08-04 07:56:41   101,888   ----a-w   c:\windows\system32\cscdll(4).dll
+ 2004-08-04 07:56:41   326,656   ----a-w   c:\windows\system32\cscui(2).dll
+ 2004-08-04 07:56:41   326,656   ----a-w   c:\windows\system32\cscui(3).dll
+ 2004-08-04 07:56:41   326,656   ----a-w   c:\windows\system32\cscui(4).dll
+ 2004-08-04 07:56:48   6,144   ----a-w   c:\windows\system32\csrss(2).exe
+ 2004-08-04 07:56:48   6,144   ----a-w   c:\windows\system32\csrss(3).exe
+ 2004-08-04 07:56:48   6,144   ----a-w   c:\windows\system32\csrss(4).exe
+ 2004-08-04 07:56:48   15,360   ----a-w   c:\windows\system32\ctfmon(2).exe
+ 2004-08-04 07:56:48   15,360   ----a-w   c:\windows\system32\ctfmon(3).exe
+ 2004-08-04 07:56:48   15,360   ----a-w   c:\windows\system32\ctfmon(4).exe
+ 2008-12-26 18:34:50   4,012   ----a-w   c:\windows\system32\d3d9caps.dat
+ 2004-08-04 07:56:41   825,344   ----a-w   c:\windows\system32\d3dim700(2).dll
+ 2004-08-04 07:56:41   825,344   ----a-w   c:\windows\system32\d3dim700(3).dll
+ 2004-08-04 07:56:41   825,344   ----a-w   c:\windows\system32\d3dim700(4).dll
- 2008-08-20 05:33:18   1,054,208   ----a-w   c:\windows\system32\danim.dll
+ 2008-10-16 10:20:45   1,054,208   ----a-w   c:\windows\system32\danim.dll
+ 2004-08-04 07:56:42   24,576   ----a-w   c:\windows\system32\davclnt(2).dll
+ 2004-08-04 07:56:42   24,576   ----a-w   c:\windows\system32\davclnt(3).dll
+ 2004-08-04 07:56:42   24,576   ----a-w   c:\windows\system32\davclnt(4).dll
+ 2004-08-04 07:56:42   640,000   ----a-w   c:\windows\system32\dbghelp(2).dll
+ 2004-08-04 07:56:42   640,000   ----a-w   c:\windows\system32\dbghelp(3).dll
+ 2004-08-04 07:56:42   640,000   ----a-w   c:\windows\system32\dbghelp(4).dll
- 2004-08-04 08:07:21   1,788   ----a-w   c:\windows\system32\dcache.bin
+ 2008-04-14 00:25:26   1,804   ----a-w   c:\windows\system32\dcache.bin
+ 2004-08-04 07:56:42   8,704   ----a-w   c:\windows\system32\dciman32(2).dll
+ 2004-08-04 07:56:42   8,704   ----a-w   c:\windows\system32\dciman32(3).dll
+ 2004-08-04 07:56:42   8,704   ----a-w   c:\windows\system32\dciman32(4).dll
+ 2004-08-04 07:56:42   266,240   ----a-w   c:\windows\system32\ddraw(2).dll
+ 2004-08-04 07:56:42   266,240   ----a-w   c:\windows\system32\ddraw(3).dll
+ 2004-08-04 07:56:42   266,240   ----a-w   c:\windows\system32\ddraw(4).dll
+ 2004-08-04 07:56:42   27,136   ----a-w   c:\windows\system32\ddrawex(2).dll
+ 2004-08-04 07:56:42   27,136   ----a-w   c:\windows\system32\ddrawex(3).dll
+ 2004-08-04 07:56:42   59,904   ----a-w   c:\windows\system32\devenum(2).dll
+ 2004-08-04 07:56:42   59,904   ----a-w   c:\windows\system32\devenum(3).dll
+ 2004-08-04 07:56:42   59,904   ----a-w   c:\windows\system32\devenum(4).dll
- 2008-08-20 05:33:19   1,024,000   -c--a-w   c:\windows\system32\dllcache\browseui.dll
+ 2008-10-16 10:20:52   1,024,000   -c--a-w   c:\windows\system32\dllcache\browseui.dll
- 2008-08-20 05:33:17   151,040   -c--a-w   c:\windows\system32\dllcache\cdfview.dll
+ 2008-10-16 10:20:42   151,040   -c--a-w   c:\windows\system32\dllcache\cdfview.dll
- 2008-07-19 02:10:48   94,920   -c--a-w   c:\windows\system32\dllcache\cdm.dll
+ 2008-10-16 19:09:44   92,696   -c--a-w   c:\windows\system32\dllcache\cdm.dll
- 2008-08-20 05:33:18   1,054,208   -c--a-w   c:\windows\system32\dllcache\danim.dll
+ 2008-10-16 10:20:45   1,054,208   -c--a-w   c:\windows\system32\dllcache\danim.dll
- 2008-08-20 05:33:18   357,888   -c--a-w   c:\windows\system32\dllcache\dxtmsft.dll
+ 2008-10-16 10:20:45   357,888   -c--a-w   c:\windows\system32\dllcache\dxtmsft.dll
- 2008-08-20 05:33:18   205,312   -c--a-w   c:\windows\system32\dllcache\dxtrans.dll
+ 2008-10-16 10:20:45   205,312   -c--a-w   c:\windows\system32\dllcache\dxtrans.dll
- 2008-08-20 05:33:18   55,808   -c--a-w   c:\windows\system32\dllcache\extmgr.dll
+ 2008-10-16 10:20:46   55,808   -c--a-w   c:\windows\system32\dllcache\extmgr.dll
- 2008-02-20 06:51:05   282,624   ----a-w   c:\windows\system32\dllcache\gdi32.dll
+ 2008-10-23 13:01:36   283,648   -c--a-w   c:\windows\system32\dllcache\gdi32.dll
- 2008-08-19 09:38:57   18,432   -c--a-w   c:\windows\system32\dllcache\iedw.exe
+ 2008-10-15 14:18:21   18,432   -c--a-w   c:\windows\system32\dllcache\iedw.exe
- 2008-08-20 05:33:18   251,904   -c--a-w   c:\windows\system32\dllcache\iepeers.dll
+ 2008-10-16 10:20:46   251,904   -c--a-w   c:\windows\system32\dllcache\iepeers.dll
- 2008-08-20 05:33:18   96,256   -c--a-w   c:\windows\system32\dllcache\inseng.dll
+ 2008-10-16 10:20:46   96,256   -c--a-w   c:\windows\system32\dllcache\inseng.dll
- 2008-08-20 05:33:19   16,384   -c--a-w   c:\windows\system32\dllcache\jsproxy.dll
+ 2008-10-16 10:20:50   16,384   -c--a-w   c:\windows\system32\dllcache\jsproxy.dll
- 2006-10-19 01:03:58   100,864   -c--a-w   c:\windows\system32\dllcache\logagent.exe
+ 2008-06-18 06:09:22   100,864   -c--a-w   c:\windows\system32\dllcache\logagent.exe
- 2008-08-20 05:33:20   3,067,392   -c--a-w   c:\windows\system32\dllcache\mshtml.dll
+ 2008-12-12 17:27:54   3,067,392   -c--a-w   c:\windows\system32\dllcache\mshtml.dll
- 2008-08-20 05:33:19   449,024   -c--a-w   c:\windows\system32\dllcache\mshtmled.dll
+ 2008-10-16 10:20:50   449,024   -c--a-w   c:\windows\system32\dllcache\mshtmled.dll
- 2008-08-20 05:33:18   146,432   -c--a-w   c:\windows\system32\dllcache\msrating.dll
+ 2008-10-16 10:20:46   146,432   -c--a-w   c:\windows\system32\dllcache\msrating.dll
- 2008-08-20 05:33:18   532,480   -c--a-w   c:\windows\system32\dllcache\mstime.dll
+ 2008-10-16 10:20:46   532,480   -c--a-w   c:\windows\system32\dllcache\mstime.dll
- 2008-08-20 05:33:18   39,424   -c--a-w   c:\windows\system32\dllcache\pngfilt.dll
+ 2008-10-16 10:20:46   39,424   -c--a-w   c:\windows\system32\dllcache\pngfilt.dll
- 2007-04-25 14:21:15   144,896   ----a-w   c:\windows\system32\dllcache\schannel.dll
+ 2008-12-05 07:12:45   144,896   -c--a-w   c:\windows\system32\dllcache\schannel.dll
- 2008-08-20 05:33:19   1,499,136   -c--a-w   c:\windows\system32\dllcache\shdocvw.dll
+ 2008-10-16 10:20:48   1,499,136   -c--a-w   c:\windows\system32\dllcache\shdocvw.dll
- 2007-10-26 03:34:01   8,460,288   ----a-w   c:\windows\system32\dllcache\shell32.dll
+ 2008-07-03 13:03:29   8,460,800   -c--a-w   c:\windows\system32\dllcache\shell32.dll
- 2008-08-20 05:33:19   474,112   -c--a-w   c:\windows\system32\dllcache\shlwapi.dll
+ 2008-10-16 10:20:51   474,112   -c--a-w   c:\windows\system32\dllcache\shlwapi.dll
- 2008-08-28 10:04:17   333,056   -c--a-w   c:\windows\system32\dllcache\srv.sys
+ 2008-12-11 11:57:21   333,184   -c--a-w   c:\windows\system32\dllcache\srv.sys
- 2006-08-21 14:52:08   246,814   ----a-w   c:\windows\system32\dllcache\strmdll.dll
+ 2008-10-03 10:15:47   247,326   -c--a-w   c:\windows\system32\dllcache\strmdll.dll
- 2008-08-20 05:33:19   619,008   -c--a-w   c:\windows\system32\dllcache\urlmon.dll
+ 2008-10-16 10:20:53   619,008   -c--a-w   c:\windows\system32\dllcache\urlmon.dll
- 2008-09-15 11:57:41   1,846,016   -c--a-w   c:\windows\system32\dllcache\win32k.sys
+ 2009-02-09 10:19:34   1,846,272   -c--a-w   c:\windows\system32\dllcache\win32k.sys
- 2008-08-20 05:33:19   667,648   -c--a-w   c:\windows\system32\dllcache\wininet.dll
+ 2008-10-16 10:20:49   667,648   -c--a-w   c:\windows\system32\dllcache\wininet.dll
- 2006-10-19 02:47:20   937,984   -c--a-w   c:\windows\system32\dllcache\WMNetMgr.dll
+ 2008-06-18 10:03:08   938,496   -c--a-w   c:\windows\system32\dllcache\WMNetmgr.dll
- 2006-10-19 02:47:22   2,450,944   -c--a-w   c:\windows\system32\dllcache\wmvcore.dll
+ 2008-06-18 10:03:14   2,458,112   -c--a-w   c:\windows\system32\dllcache\WMVCore.dll
- 2008-07-19 02:09:44   563,912   -c--a-w   c:\windows\system32\dllcache\wuapi.dll
+ 2008-10-16 19:12:20   561,688   -c--a-w   c:\windows\system32\dllcache\wuapi.dll
- 2008-07-19 02:10:42   53,448   -c--a-w   c:\windows\system32\dllcache\wuauclt.exe
+ 2008-10-16 19:09:44   51,224   -c--a-w   c:\windows\system32\dllcache\wuauclt.exe
- 2008-07-19 02:09:42   1,811,656   -c--a-w   c:\windows\system32\dllcache\wuaueng.dll
+ 2008-10-16 19:13:40   1,809,944   -c--a-w   c:\windows\system32\dllcache\wuaueng.dll
- 2008-07-19 02:09:46   325,832   -c--a-w   c:\windows\system32\dllcache\wucltui.dll
+ 2008-10-16 19:12:22   323,608   -c--a-w   c:\windows\system32\dllcache\wucltui.dll
- 2008-07-19 02:10:20   36,552   -c--a-w   c:\windows\system32\dllcache\wups.dll
+ 2008-10-16 19:08:58   34,328   -c--a-w   c:\windows\system32\dllcache\wups.dll
- 2008-07-19 02:09:44   205,000   -c--a-w   c:\windows\system32\dllcache\wuweb.dll
+ 2008-10-16 19:13:40   202,776   -c--a-w   c:\windows\system32\dllcache\wuweb.dll
+ 2008-06-20 17:41:10   148,992   ----a-w   c:\windows\system32\dnsapi(2).dll
+ 2008-06-20 17:41:10   148,992   ----a-w   c:\windows\system32\dnsapi(3).dll
+ 2008-06-20 17:41:10   148,992   ----a-w   c:\windows\system32\dnsapi(4).dll
+ 2008-02-20 05:32:43   45,568   ----a-w   c:\windows\system32\dnsrslvr(2).dll
+ 2008-02-20 05:32:43   45,568   ----a-w   c:\windows\system32\dnsrslvr(3).dll
+ 2008-02-20 05:32:43   45,568   ----a-w   c:\windows\system32\dnsrslvr(4).dll
+ 2004-08-04 06:00:54   71,040   ------w   c:\windows\system32\drivers\_003705_.tmp.dll
+ 2004-08-04 06:00:54   71,040   ------w   c:\windows\system32\drivers\_003716_.tmp.dll
+ 2004-08-04 06:00:54   71,040   ------w   c:\windows\system32\drivers\_003725_.tmp.dll
- 2008-09-22 01:10:32   97,928   ----a-w   c:\windows\system32\drivers\avgldx86.sys
+ 2009-02-04 13:40:18   325,128   ----a-w   c:\windows\system32\drivers\avgldx86.sys
- 2008-09-22 01:10:30   26,824   ----a-w   c:\windows\system32\drivers\avgmfx86.sys
+ 2009-02-04 13:40:18   27,656   ----a-w   c:\windows\system32\drivers\avgmfx86.sys
- 2008-09-22 01:10:37   76,040   ----a-w   c:\windows\system32\drivers\avgtdix.sys
+ 2009-02-04 13:40:14   107,272   ----a-w   c:\windows\system32\drivers\avgtdix.sys
+ 2008-10-07 05:09:32   178,376   ----a-w   c:\windows\system32\drivers\OADriver.sys
+ 2008-10-07 05:09:48   30,920   ----a-w   c:\windows\system32\drivers\OAmon.sys
+ 2008-10-07 05:09:36   28,872   ----a-w   c:\windows\system32\drivers\OAnet.sys
- 2008-08-28 10:04:17   333,056   ----a-w   c:\windows\system32\drivers\srv.sys
+ 2008-12-11 11:57:21   333,184   ----a-w   c:\windows\system32\drivers\srv.sys
+ 2004-08-04 07:56:42   14,336   ----a-w   c:\windows\system32\drprov(2).dll
+ 2004-08-04 07:56:42   14,336   ----a-w   c:\windows\system32\drprov(3).dll
+ 2004-08-04 07:56:42   14,336   ----a-w   c:\windows\system32\drprov(4).dll
+ 2004-08-04 07:56:42   367,616   ----a-w   c:\windows\system32\dsound(2).dll
+ 2004-08-04 07:56:42   367,616   ----a-w   c:\windows\system32\dsound(3).dll
+ 2004-08-04 07:56:42   367,616   ----a-w   c:\windows\system32\dsound(4).dll
+ 2004-08-04 05:31:43   137,216   ----a-w   c:\windows\system32\dssenh(2).dll
+ 2004-08-04 05:31:43   137,216   ----a-w   c:\windows\system32\dssenh(3).dll
+ 2004-08-04 05:31:43   137,216   ----a-w   c:\windows\system32\dssenh(4).dll
+ 2004-08-04 07:56:42   304,128   ----a-w   c:\windows\system32\duser(2).dll
+ 2004-08-04 07:56:42   304,128   ----a-w   c:\windows\system32\duser(3).dll
+ 2004-08-04 07:56:42   304,128   ----a-w   c:\windows\system32\duser(4).dll
- 2008-08-20 05:33:18   357,888   ----a-w   c:\windows\system32\dxtmsft.dll
+ 2008-10-16 10:20:45   357,888   ----a-w   c:\windows\system32\dxtmsft.dll
- 2008-08-20 05:33:18   205,312   ----a-w   c:\windows\system32\dxtrans.dll
+ 2008-10-16 10:20:45   205,312   ----a-w   c:\windows\system32\dxtrans.dll
+ 2004-08-04 07:56:42   23,040   ----a-w   c:\windows\system32\ersvc(2).dll
+ 2004-08-04 07:56:42   23,040   ----a-w   c:\windows\system32\ersvc(3).dll
+ 2004-08-04 07:56:42   23,040   ----a-w   c:\windows\system32\ersvc(4).dll
+ 2008-07-07 20:32:22   253,952   ----a-w   c:\windows\system32\es(2).dll
+ 2008-07-07 20:32:22   253,952   ----a-w   c:\windows\system32\es(3).dll
+ 2008-07-07 20:32:22   253,952   ----a-w   c:\windows\system32\es(4).dll
+ 2005-10-20 22:20:03   1,082,368   ----a-w   c:\windows\system32\esent(2).dll
+ 2005-10-20 22:20:03   1,082,368   ----a-w   c:\windows\system32\esent(3).dll
+ 2005-10-20 22:20:03   1,082,368   ----a-w   c:\windows\system32\esent(4).dll
+ 2004-08-04 07:56:42   55,808   ----a-w   c:\windows\system32\eventlog(2).dll
+ 2004-08-04 07:56:42   55,808   ----a-w   c:\windows\system32\eventlog(3).dll
+ 2004-08-04 07:56:42   55,808   ----a-w   c:\windows\system32\eventlog(4).dll
- 2008-08-20 05:33:18   55,808   ----a-w   c:\windows\system32\extmgr.dll
+ 2008-10-16 10:20:46   55,808   ----a-w   c:\windows\system32\extmgr.dll
+ 2004-08-04 07:56:42   80,384   ----a-w   c:\windows\system32\faultrep(2).dll
+ 2004-08-04 07:56:42   80,384   ----a-w   c:\windows\system32\faultrep(3).dll
+ 2004-08-04 07:56:42   80,384   ----a-w   c:\windows\system32\faultrep(4).dll
- 2008-10-16 07:12:49   228,800   ----a-w   c:\windows\system32\FNTCACHE.DAT
+ 2009-04-03 07:08:43   228,800   ----a-w   c:\windows\system32\FNTCACHE.DAT
- 2008-02-20 06:51:05   282,624   ----a-w   c:\windows\system32\gdi32.dll
+ 2008-10-23 13:01:36   283,648   ----a-w   c:\windows\system32\gdi32.dll
+ 2004-08-04 07:56:42   20,992   ----a-w   c:\windows\system32\hid(2).dll
+ 2004-08-04 07:56:42   20,992   ----a-w   c:\windows\system32\hid(3).dll
+ 2004-08-04 07:56:42   20,992   ----a-w   c:\windows\system32\hid(4).dll
+ 2004-08-04 07:56:42   344,064   ----a-w   c:\windows\system32\hnetcfg(2).dll
+ 2004-08-04 07:56:42   344,064   ----a-w   c:\windows\system32\hnetcfg(3).dll
+ 2004-08-04 07:56:42   344,064   ----a-w   c:\windows\system32\hnetcfg(4).dll
+ 2004-08-04 07:56:42   24,576   ----a-w   c:\windows\system32\httpapi(2).dll
+ 2004-08-04 07:56:42   24,576   ----a-w   c:\windows\system32\httpapi(3).dll
+ 2004-08-04 07:56:42   24,576   ----a-w   c:\windows\system32\httpapi(4).dll
+ 2004-08-04 07:56:42   11,264   ----a-w   c:\windows\system32\icaapi(2).dll
+ 2004-08-04 07:56:42   11,264   ----a-w   c:\windows\system32\icaapi(3).dll
+ 2004-08-04 07:56:42   11,264   ----a-w   c:\windows\system32\icaapi(4).dll
+ 2004-08-04 07:56:07   3,584   ----a-w   c:\windows\system32\icmp(2).dll
- 2008-08-20 05:33:18   251,904   ----a-w   c:\windows\system32\iepeers.dll
+ 2008-10-16 10:20:46   251,904   ----a-w   c:\windows\system32\iepeers.dll
+ 2004-08-04 07:56:42   35,840   ----a-w   c:\windows\system32\imgutil(2).dll
+ 2008-04-11 18:50:43   683,520   ----a-w   c:\windows\system32\inetcomm(2).dll
+ 2008-04-11 18:50:43   683,520   ----a-w   c:\windows\system32\inetcomm(3).dll
+ 2008-04-11 18:50:43   683,520   ----a-w   c:\windows\system32\inetcomm(4).dll
+ 2004-08-04 07:56:42   75,264   ----a-w   c:\windows\system32\inetpp(2).dll
+ 2004-08-04 07:56:42   75,264   ----a-w   c:\windows\system32\inetpp(3).dll
+ 2004-08-04 07:56:42   75,264   ----a-w   c:\windows\system32\inetpp(4).dll
+ 2004-08-04 07:56:08   48,128   ----a-w   c:\windows\system32\inetres(2).dll
+ 2004-08-04 07:56:08   48,128   ----a-w   c:\windows\system32\inetres(3).dll
+ 2004-08-04 07:56:08   48,128   ----a-w   c:\windows\system32\inetres(4).dll
- 2008-08-20 05:33:18   96,256   ----a-w   c:\windows\system32\inseng.dll
+ 2008-10-16 10:20:46   96,256   ----a-w   c:\windows\system32\inseng.dll
+ 2006-05-19 12:59:41   94,720   ----a-w   c:\windows\system32\iphlpapi(2).dll
+ 2006-05-19 12:59:41   94,720   ----a-w   c:\windows\system32\iphlpapi(3).dll
+ 2006-05-19 12:59:41   94,720   ----a-w   c:\windows\system32\iphlpapi(4).dll
+ 2004-08-04 07:56:42   331,264   ----a-w   c:\windows\system32\ipnathlp(2).dll
+ 2004-08-04 07:56:42   331,264   ----a-w   c:\windows\system32\ipnathlp(3).dll
+ 2004-08-04 07:56:42   331,264   ----a-w   c:\windows\system32\ipnathlp(4).dll
+ 2004-08-04 07:56:42   182,784   ----a-w   c:\windows\system32\ipsecsvc(2).dll
+ 2004-08-04 07:56:42   182,784   ----a-w   c:\windows\system32\ipsecsvc(3).dll
+ 2004-08-04 07:56:42   182,784   ----a-w   c:\windows\system32\ipsecsvc(4).dll
+ 2007-12-18 14:40:58   450,560   ----a-w   c:\windows\system32\jscript(2).dll
+ 2007-12-18 14:40:58   450,560   ----a-w   c:\windows\system32\jscript(3).dll
- 2008-08-20 05:33:19   16,384   ----a-w   c:\windows\system32\jsproxy.dll
+ 2008-10-16 10:20:50   16,384   ----a-w   c:\windows\system32\jsproxy.dll
+ 2005-06-15 17:49:30   295,936   ----a-w   c:\windows\system32\kerberos(2).dll
+ 2005-06-15 17:49:30   295,936   ----a-w   c:\windows\system32\kerberos(3).dll
+ 2005-06-15 17:49:30   295,936   ----a-w   c:\windows\system32\kerberos(4).dll
- 2008-06-11 00:04:26   1,044,480   ----a-w   c:\windows\system32\libdivx.dll
+ 2008-11-21 21:46:10   1,044,480   ----a-w   c:\windows\system32\libdivx.dll
+ 2005-09-01 01:41:53   19,968   ----a-w   c:\windows\system32\linkinfo(2).dll
+ 2005-09-01 01:41:53   19,968   ----a-w   c:\windows\system32\linkinfo(3).dll
+ 2005-09-01 01:41:53   19,968   ----a-w   c:\windows\system32\linkinfo(4).dll
+ 2007-07-27 19:49:02   196,683   ----a-w   c:\windows\system32\lnod32apiA.dll
+ 2007-07-27 19:49:02   225,355   ----a-w   c:\windows\system32\lnod32apiW.dll
+ 2005-12-06 00:25:22   139,264   ----a-w   c:\windows\system32\lnod32umc.dll
+ 2005-12-05 17:37:10   106,496   ----a-w   c:\windows\system32\lnod32upd.dll
+ 2004-08-04 07:56:42   97,280   ----a-w   c:\windows\system32\loadperf(2).dll
+ 2004-08-04 07:56:42   97,280   ----a-w   c:\windows\system32\loadperf(3).dll
+ 2004-08-04 07:56:42   97,280   ----a-w   c:\windows\system32\loadperf(4).dll
- 2006-10-19 01:03:58   100,864   ----a-w   c:\windows\system32\logagent.exe
+ 2008-06-18 06:09:22   100,864   ----a-w   c:\windows\system32\logagent.exe
+ 2004-08-04 07:56:50   13,312   ----a-w   c:\windows\system32\lsass(2).exe
+ 2004-08-04 07:56:50   13,312   ----a-w   c:\windows\system32\lsass(3).exe
+ 2004-08-04 07:56:50   13,312   ----a-w   c:\windows\system32\lsass(4).exe
- 2008-03-25 03:21:18   2,889,088   ----a-w   c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2008-10-05 03:24:02   3,695,008   ----a-w   c:\windows\system32\Macromed\Flash\NPSWF32.dll
- 2008-03-25 03:21:20   218,496   ----a-w   c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2008-10-05 03:24:04   235,936   ----a-w   c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
- 2008-09-27 16:54:53   70,264   ----a-w   c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2008-11-18 00:22:36   84,661   ----a-w   c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2004-08-04 07:56:42   22,528   ----a-w   c:\windows\system32\mfcsubs(2).dll
+ 2004-08-04 07:56:42   22,528   ----a-w   c:\windows\system32\mfcsubs(3).dll
+ 2004-08-04 07:56:42   22,528   ----a-w   c:\windows\system32\mfcsubs(4).dll
+ 2004-08-04 07:56:42   18,944   ----a-w   c:\windows\system32\midimap(2).dll
+ 2004-08-04 07:56:42   18,944   ----a-w   c:\windows\system32\midimap(3).dll
+ 2004-08-04 07:56:42   18,944   ----a-w   c:\windows\system32\midimap(4).dll
+ 2004-08-04 07:56:42   586,240   ----a-w   c:\windows\system32\mlang(2).dll
+ 2004-08-04 07:56:42   586,240   ----a-w   c:\windows\system32\mlang(3).dll
+ 2004-08-04 07:56:42   586,240   ----a-w   c:\windows\system32\mlang(4).dll
+ 2004-08-04 07:56:42   59,904   ----a-w   c:\windows\system32\mpr(2).dll
+ 2004-08-04 07:56:42   59,904   ----a-w   c:\windows\system32\mpr(3).dll
+ 2004-08-04 07:56:42   59,904   ----a-w   c:\windows\system32\mpr(4).dll
+ 2004-08-04 07:56:42   87,040   ----a-w   c:\windows\system32\mprapi(2).dll
+ 2004-08-04 07:56:42   87,040   ----a-w   c:\windows\system32\mprapi(3).dll
+ 2004-08-04 07:56:42   87,040   ----a-w   c:\windows\system32\mprapi(4).dll
- 2008-11-04 00:10:25   17,318,336   ----a-w   c:\windows\system32\MRT.exe
+ 2009-02-25 16:55:00   24,768,960   ----a-w   c:\windows\system32\MRT.exe
+ 2004-08-04 07:56:42   71,680   ----a-w   c:\windows\system32\msacm32(2).dll
+ 2004-08-04 07:56:42   71,680   ----a-w   c:\windows\system32\msacm32(3).dll
+ 2004-08-04 07:56:42   71,680   ----a-w   c:\windows\system32\msacm32(4).dll
+ 2004-08-04 07:56:42   57,344   ----a-w   c:\windows\system32\msasn1(2).dll
+ 2004-08-04 07:56:42   57,344   ----a-w   c:\windows\system32\msasn1(3).dll
+ 2004-08-04 07:56:42   57,344   ----a-w   c:\windows\system32\msasn1(4).dll
+ 2008-06-24 16:23:05   74,240   ----a-w   c:\windows\system32\mscms(2).dll
+ 2008-06-24 16:23:05   74,240   ----a-w   c:\windows\system32\mscms(3).dll
+ 2008-06-24 16:23:05   74,240   ----a-w   c:\windows\system32\mscms(4).dll
+ 2004-08-04 07:56:42   294,400   ----a-w   c:\windows\system32\msctf(2).dll
+ 2004-08-04 07:56:42   294,400   ----a-w   c:\windows\system32\msctf(3).dll
+ 2004-08-04 07:56:42   294,400   ----a-w   c:\windows\system32\msctf(4).dll
+ 2004-08-04 07:56:43   14,336   ----a-w   c:\windows\system32\msdmo(2).dll
+ 2004-08-04 07:56:43   14,336   ----a-w   c:\windows\system32\msdmo(3).dll
+ 2004-08-04 07:56:43   14,336   ----a-w   c:\windows\system32\msdmo(4).dll
- 2008-08-20 05:33:20   3,067,392   ----a-w   c:\windows\system32\mshtml.dll
+ 2008-12-12 17:27:54   3,067,392   ----a-w   c:\windows\system32\mshtml.dll
+ 2008-10-16 10:20:50   449,024   ----a-w   c:\windows\system32\mshtmled(2).dll
+ 2008-10-16 10:20:50   449,024   ----a-w   c:\windows\system32\mshtmled(3).dll
+ 2008-10-16 10:20:50   449,024   ----a-w   c:\windows\system32\mshtmled(4).dll
- 2008-08-20 05:33:19   449,024   ----a-w   c:\windows\system32\mshtmled.dll
+ 2008-10-16 10:20:50   449,024   ----a-w   c:\windows\system32\mshtmled.dll
+ 2004-08-04 07:56:43   6,656   ----a-w   c:\windows\system32\msidle(2).dll
+ 2004-08-04 07:56:43   6,656   ----a-w   c:\windows\system32\msidle(3).dll
+ 2004-08-04 07:56:43   6,656   ----a-w   c:\windows\system32\msidle(4).dll
+ 2004-08-04 07:56:43   4,608   ----a-w   c:\windows\system32\msimg32(2).dll
+ 2004-08-04 07:56:43   4,608   ----a-w   c:\windows\system32\msimg32(3).dll
+ 2004-08-04 07:56:43   4,608   ----a-w   c:\windows\system32\msimg32(4).dll
+ 2004-08-04 07:56:43   159,232   ----a-w   c:\windows\system32\msimtf(2).dll
+ 2004-08-04 07:56:43   159,232   ----a-w   c:\windows\system32\msimtf(3).dll
+ 2004-08-04 07:56:43   159,232   ----a-w   c:\windows\system32\msimtf(4).dll
+ 2004-08-04 07:56:43   105,984   ----a-w   c:\windows\system32\msoert2(2).dll
+ 2004-08-04 07:56:43   105,984   ----a-w   c:\windows\system32\msoert2(3).dll
+ 2004-08-04 07:56:43   105,984   ----a-w   c:\windows\system32\msoert2(4).dll
+ 2004-08-04 07:56:43   30,208   ----a-w   c:\windows\system32\mspatcha(2).dll
+ 2004-08-04 07:56:43   30,208   ----a-w   c:\windows\system32\mspatcha(3).dll
+ 2004-08-04 07:56:43   30,208   ----a-w   c:\windows\system32\mspatcha(4).dll
+ 2004-08-04 07:56:18   48,128   ----a-w   c:\windows\system32\msprivs(2).dll
+ 2004-08-04 07:56:18   48,128   ----a-w   c:\windows\system32\msprivs(3).dll
+ 2004-08-04 07:56:18   48,128   ----a-w   c:\windows\system32\msprivs(4).dll
- 2008-08-20 05:33:18   146,432   ----a-w   c:\windows\system32\msrating.dll
+ 2008-10-16 10:20:46   146,432   ----a-w   c:\windows\system32\msrating.dll
- 2008-08-20 05:33:18   532,480   ----a-w   c:\windows\system32\mstime.dll
+ 2008-10-16 10:20:46   532,480   ----a-w   c:\windows\system32\mstime.dll
+ 2004-08-04 07:56:43   115,712   ----a-w   c:\windows\system32\mstlsapi(2).dll
+ 2004-08-04 07:56:43   115,712   ----a-w   c:\windows\system32\mstlsapi(3).dll
+ 2004-08-04 07:56:43   115,712   ----a-w   c:\windows\system32\mstlsapi(4).dll
+ 2004-08-04 07:56:43   195,072   ----a-w   c:\windows\system32\msutb(2).dll
+ 2004-08-04 07:56:43   195,072   ----a-w   c:\windows\system32\msutb(3).dll
+ 2004-08-04 07:56:43   195,072   ----a-w   c:\windows\system32\msutb(4).dll
+ 2004-08-04 07:56:43   413,696   ----a-w   c:\windows\system32\msvcp60(2).dll
+ 2004-08-04 07:56:43   413,696   ----a-w   c:\windows\system32\msvcp60(3).dll
+ 2004-08-04 07:56:43   413,696   ----a-w   c:\windows\system32\msvcp60(4).dll
- 2003-03-19 02:14:52   499,712   ----a-r   c:\windows\system32\msvcp71.dll
+ 2008-11-17 23:25:13   499,712   ----a-w   c:\windows\system32\msvcp71.dll
- 2003-02-21 08:42:22   348,160   ------w   c:\windows\system32\msvcr71.dll
+ 2008-11-17 23:25:13   348,160   ----a-w   c:\windows\system32\msvcr71.dll
+ 2004-08-04 07:56:43   343,040   ----a-w   c:\windows\system32\msvcrt(2).dll
+ 2004-08-04 07:56:43   343,040   ----a-w   c:\windows\system32\msvcrt(3).dll
+ 2004-08-04 07:56:43   343,040   ----a-w   c:\windows\system32\msvcrt(4).dll
+ 2004-08-04 07:56:43   120,832   ----a-w   c:\windows\system32\msvfw32(2).dll
+ 2004-08-04 07:56:43   120,832   ----a-w   c:\windows\system32\msvfw32(3).dll
+ 2004-08-04 07:56:43   120,832   ----a-w   c:\windows\system32\msvfw32(4).dll
+ 2008-06-20 17:41:10   245,248   ----a-w   c:\windows\system32\mswsock(2).dll
+ 2008-06-20 17:41:10   245,248   ----a-w   c:\windows\system32\mswsock(3).dll
+ 2008-06-20 17:41:10   245,248   ----a-w   c:\windows\system32\mswsock(4).dll
+ 2006-03-01 19:42:42   66,560   ----a-w   c:\windows\system32\mtxclu(2).dll
+ 2006-03-01 19:42:42   66,560   ----a-w   c:\windows\system32\mtxclu(3).dll
+ 2006-03-01 19:42:42   66,560   ----a-w   c:\windows\system32\mtxclu(4).dll
- 2008-07-19 02:07:34   270,880   ----a-w   c:\windows\system32\mucltui.dll
+ 2008-10-16 19:06:48   268,648   ----a-w   c:\windows\system32\mucltui.dll
- 2008-07-19 02:07:32   210,976   ----a-w   c:\windows\system32\muweb.dll
+ 2008-10-16 19:06:48   208,744   ----a-w   c:\windows\system32\muweb.dll
+ 2004-08-04 07:56:44   90,624   ----a-w   c:\windows\system32\mydocs(2).dll
+ 2004-08-04 07:56:44   90,624   ----a-w   c:\windows\system32\mydocs(3).dll
+ 2004-08-04 07:56:44   90,624   ----a-w   c:\windows\system32\mydocs(4).dll
+ 2004-08-04 07:56:44   17,920   ----a-w   c:\windows\system32\nddeapi(2).dll
+ 2004-08-04 07:56:44   17,920   ----a-w   c:\windows\system32\nddeapi(3).dll
+ 2004-08-04 07:56:44   17,920   ----a-w   c:\windows\system32\nddeapi(4).dll
+ 2008-10-15 16:57:55   332,800   ----a-w   c:\windows\system32\netapi32(2).dll
+ 2008-10-15 16:57:55   332,800   ----a-w   c:\windows\system32\netapi32(3).dll
+ 2008-10-15 16:57:55   332,800   ----a-w   c:\windows\system32\netapi32(4).dll
+ 2004-08-04 07:56:44   622,080   ----a-w   c:\windows\system32\netcfgx(2).dll
+ 2004-08-04 07:56:44   622,080   ----a-w   c:\windows\system32\netcfgx(3).dll
+ 2004-08-04 07:56:44   622,080   ----a-w   c:\windows\system32\netcfgx(4).dll
+ 2004-08-04 07:56:44   407,040   ----a-w   c:\windows\system32\netlogon(2).dll
+ 2004-08-04 07:56:44   407,040   ----a-w   c:\windows\system32\netlogon(3).dll
+ 2004-08-04 07:56:44   407,040   ----a-w   c:\windows\system32\netlogon(4).dll
+ 2005-08-22 18:29:46   197,632   ----a-w   c:\windows\system32\netman(2).dll
+ 2005-08-22 18:29:46   197,632   ----a-w   c:\windows\system32\netman(3).dll
+ 2005-08-22 18:29:46   197,632   ----a-w   c:\windows\system32\netman(4).dll
+ 2004-08-04 07:56:44   12,288   ----a-w   c:\windows\system32\netrap(2).dll
+ 2004-08-04 07:56:44   12,288   ----a-w   c:\windows\system32\netrap(3).dll
+ 2004-08-04 07:56:44   12,288   ----a-w   c:\windows\system32\netrap(4).dll
+ 2004-08-04 07:56:44   1,708,032   ----a-w   c:\windows\system32\netshell(2).dll
+ 2004-08-04 07:56:44   1,708,032   ----a-w   c:\windows\system32\netshell(3).dll
+ 2004-08-04 07:56:44   1,708,032   ----a-w   c:\windows\system32\netshell(4).dll
+ 2004-08-04 07:56:44   80,896   ----a-w   c:\windows\system32\netui0(2).dll
+ 2004-08-04 07:56:44   80,896   ----a-w   c:\windows\system32\netui0(3).dll
+ 2004-08-04 07:56:44   80,896   ----a-w   c:\windows\system32\netui0(4).dll
+ 2004-08-04 07:56:44   245,760   ----a-w   c:\windows\system32\netui1(2).dll
+ 2004-08-04 07:56:44   245,760   ----a-w   c:\windows\system32\netui1(3).dll
+ 2004-08-04 07:56:44   245,760   ----a-w   c:\windows\system32\netui1(4).dll
+ 2004-08-04 07:56:44   248,832   ----a-w   c:\windows\system32\newdev(2).dll
+ 2004-08-04 07:56:44   248,832   ----a-w   c:\windows\system32\newdev(3).dll
+ 2004-08-04 07:56:44   248,832   ----a-w   c:\windows\system32\newdev(4).dll
+ 2004-08-04 07:56:44   67,072   ----a-w   c:\windows\system32\ntdsapi(2).dll
+ 2004-08-04 07:56:44   67,072   ----a-w   c:\windows\system32\ntdsapi(3).dll
+ 2004-08-04 07:56:44   67,072   ----a-w   c:\windows\system32\ntdsapi(4).dll
+ 2004-08-04 07:56:44   43,520   ----a-w   c:\windows\system32\ntlanman(2).dll
+ 2004-08-04 07:56:44   43,520   ----a-w   c:\windows\system32\ntlanman(3).dll
+ 2004-08-04 07:56:44   43,520   ----a-w   c:\windows\system32\ntlanman(4).dll
+ 2004-08-04 07:56:44   118,784   ----a-w   c:\windows\system32\ntmarta(2).dll
+ 2004-08-04 07:56:44   118,784   ----a-w   c:\windows\system32\ntmarta(3).dll
+ 2004-08-04 07:56:44   118,784   ----a-w   c:\windows\system32\ntmarta(4).dll
+ 2004-08-04 07:56:44   143,872   ----a-w   c:\windows\system32\ntshrui(2).dll
+ 2004-08-04 07:56:44   143,872   ----a-w   c:\windows\system32\ntshrui(3).dll
+ 2004-08-04 07:56:44   143,872   ----a-w   c:\windows\system32\ntshrui(4).dll
+ 2004-08-04 07:56:44   266,752   ----a-w   c:\windows\system32\oakley(2).dll
+ 2004-08-04 07:56:44   266,752   ----a-w   c:\windows\system32\oakley(3).dll
+ 2004-08-04 07:56:44   266,752   ----a-w   c:\windows\system32\oakley(4).dll
+ 2003-07-16 20:40:13   60,928   ----a-w   c:\windows\system32\ocmanage(2).dll
+ 2003-07-16 20:40:13   60,928   ----a-w   c:\windows\system32\ocmanage(3).dll
+ 2003-07-16 20:40:13   60,928   ----a-w   c:\windows\system32\ocmanage(4).dll
+ 2004-08-04 07:56:44   120,832   ----a-w   c:\windows\system32\offfilt(2).dll
+ 2004-08-04 07:56:44   120,832   ----a-w   c:\windows\system32\offfilt(3).dll
+ 2005-07-26 04:39:48   1,285,120   ----a-w   c:\windows\system32\ole32(2).dll
+ 2005-07-26 04:39:48   1,285,120   ----a-w   c:\windows\system32\ole32(3).dll
+ 2005-07-26 04:39:48   1,285,120   ----a-w   c:\windows\system32\ole32(4).dll
+ 2005-07-26 04:39:48   74,752   ----a-w   c:\windows\system32\olecli32(2).dll
+ 2005-07-26 04:39:48   74,752   ----a-w   c:\windows\system32\olecli32(3).dll
+ 2005-07-26 04:39:48   74,752   ----a-w   c:\windows\system32\olecli32(4).dll
+ 2004-08-04 07:56:44   83,456   ----a-w   c:\windows\system32\olepro32(2).dll
+ 2004-08-04 07:56:44   83,456   ----a-w   c:\windows\system32\olepro32(3).dll
+ 2004-08-04 07:56:44   83,456   ----a-w   c:\windows\system32\olepro32(4).dll
+ 2008-02-11 14:39:26   253,952   ----a-w   c:\windows\system32\OnlineScannerDLLA.dll
+ 2008-02-11 14:39:18   237,568   ----a-w   c:\windows\system32\OnlineScannerDLLW.dll
+ 2008-02-08 18:53:46   110,592   ----a-w   c:\windows\system32\OnlineScannerLang.dll
+ 2008-02-05 13:48:04   77,824   ----a-w   c:\windows\system32\OnlineScannerUninstaller.exe
- 2008-11-02 09:49:07   53,724   ----a-w   c:\windows\system32\perfc009.dat
+ 2009-04-04 09:17:33   53,724   ----a-w   c:\windows\system32\perfc009.dat
- 2008-11-02 09:49:07   383,562   ----a-w   c:\windows\system32\perfh009.dat
+ 2009-04-04 09:17:33   383,562   ----a-w   c:\windows\system32\perfh009.dat
+ 2004-08-04 07:56:44   25,088   ----a-w   c:\windows\system32\perfos(2).dll
+ 2004-08-04 07:56:44   25,088   ----a-w   c:\windows\system32\perfos(3).dll
+ 2004-08-04 07:56:44   25,088   ----a-w   c:\windows\system32\perfos(4).dll
+ 2004-08-04 07:56:44   15,360   ----a-w   c:\windows\system32\pjlmon(2).dll
+ 2004-08-04 07:56:44   15,360   ----a-w   c:\windows\system32\pjlmon(3).dll
+ 2004-08-04 07:56:44   15,360   ----a-w   c:\wi

Hi, cbfr.

Apologies for not getting back to you sooner.  It appears that lines are being repeated in your log for some reason.  However, there are other sections I would like to see.  Please locate the section that begins with the following and copy paste from there to the end as a reply.  If it takes more than one reply to get it all in, that is fine.


(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

Hi, cbfr.

I'm not sure why your log was repeating items.  I haven't seen that before.  Let's take a different approach to see where things stand.

Please download JavaRa and unzip it to your desktop.

• Double-click on JavaRa.exe to start the program.  (Windows Vista users Right-click JavaRa.exe > Select Run as Administrator)
  
• Click on Remove Older Versions to remove older versions of Java.
  
• A logfile will pop up. Please save it to a convenient location.

Then download and install Java SE Runtime Environment (JRE) 6 Update 13.   

Note:  UNCHECK any pre-checked toolbar and/or software options presented with the update.  They are not part of the software update and are completely optional.   

Please download ATF Cleaner by Atribune from http://www.atribune.org/index.php?option=c...5&Itemid=25 . Save it to your Desktop.

Run ATF Cleaner

• Double-click ATF-Cleaner.exe to run the program.
• Click Select All found at the bottom of the list.
• Click the Empty Selected button.
• Click Exit on the Main menu to close the program.
• Shutdown/restart the computer.

Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
  
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select Perform full scan, then click Scan.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Be sure that everything is checked, and click Remove Selected.
  
• When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
  
• Please post contents of that file in your next reply and a fresh HijackThis log.

Double-click the HijackThis icon on your desktop (or launch from the TrendMicro Folder)

• Select "Do a system scan and save the Logfile"
• When the scan is completed, Notepad will launch with the log. Please UNcheck Word Wrap in Notepad (Click Format > UNcheck Word Wrap)

Please go to Eset website to perform an online scan. Please use Internet Explorer as it uses ActiveX.

• Check (tick) this box: YES, I accept the Terms of Use.
  
• Click on the Start button next to it.
  
• When prompted to run ActiveX. click Yes.
  
• You will be asked to install an ActiveX. Click Install.
  
• Once installed, the scanner will be initialized.
• After the scanner is initialized, click Start.
  
• Uncheck (untick) Remove found threats box.
  
• Check (tick) Scan unwanted applications.
  
• Click on Scan.
  
• It will start scanning. Please be patient.
• Once the scan is done, you will find a log in C:\Program Files\esetonlinescanner\log.txt. Please post this log in your next reply.

Include the MBAM, ESET and HijackThis logs in your reply.

Your malwarebytes is way of of date please update it, do a new scn and post the logfile Please..

Malwarebytes' Anti-Malware 1.30
Database version: 1381