[El loco]

Hello, just noticed you changed the antivirus guide.
Anyways, here are my logs. Could you take a quick look at them. Thx

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:43:16 AM, on 10/22/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.e xe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/ca..._2.3.7.109.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1201108691495
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/Driver...sysreqlab2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1201111902218
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/de...e/HPDEXAXO.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01...l/MSNPUpld.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CS2\Services\Tcpip\..\{0FA321D1-4CEB-4ACA-A79E-90901D650B46}: NameServer = 167.206.245.130,167.206.245.129
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Unknown owner - C:\Program Files\a-squared Anti-Malware\a2service.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate1c9f7db41a482ee) (gupdate1c9f7db41a482ee) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 8566 bytes

Malwarebytes' Anti-Malware 1.41
Database version: 3011
Windows 5.1.2600 Service Pack 2

10/22/2009 10:36:00 AM
mbam-log-2009-10-22 (10-36-00).txt

Scan type: Quick Scan
Objects scanned: 111623
Time elapsed: 3 minute(s), 45 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\PEV.exe (Trojan.PWS) -> Quarantined and deleted successfully.

[El loco]

hmm, my combofix log seems to be too big and forum won't let me post it

[Osiris]

Post sections of it at a time and you should be fine

[El loco]

ComboFix 09-10-20.03 - Mike 10/22/2009 10:13.4.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.958.540 [GMT -4:00]
Running from: c:\documents and settings\Mike\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 091021-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Files Created from 2009-09-22 to 2009-10-22 )))))))))))))))))))))))))))))))
.

2009-10-09 13:17 . 2009-10-09 13:17 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-10-09 13:14 . 2009-10-09 13:14 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-10-07 04:35 . 2009-10-07 04:35 -------- d-----w- c:\program files\iPod
2009-10-07 04:35 . 2009-10-07 04:36 -------- d-----w- c:\program files\iTunes
2009-10-07 04:35 . 2009-10-07 04:36 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-10-06 23:49 . 2009-10-10 00:49 -------- d-----w- c:\documents and settings\Mike\Application Data\gtk-2.0
2009-10-06 23:49 . 2009-10-06 23:49 -------- d-----w- c:\documents and settings\Mike\.thumbnails
2009-10-06 23:48 . 2009-10-19 20:08 -------- d-----w- c:\documents and settings\Mike\.gimp-2.6
2009-10-06 23:47 . 2009-10-06 23:47 -------- d-----w- c:\program files\GIMP-2.0
2009-09-22 18:58 . 2009-09-22 18:59 -------- d-----w- C:\ConverterOutput
2009-09-22 18:57 . 2004-09-10 17:50 34820 ----a-w- c:\windows\system32\ffdshow.reg
2009-09-22 18:57 . 2007-03-25 04:51 404480 ----a-w- c:\windows\system32\libmplayer.dll
2009-09-22 18:57 . 2007-03-25 04:51 3049984 ----a-w- c:\windows\system32\libavcodec.dll
2009-09-22 18:57 . 2007-03-25 04:51 114688 ----a-w- c:\windows\system32\libmpeg2_ff.dll
2009-09-22 18:57 . 2007-01-01 09:30 200704 ----a-w- c:\windows\system32\TomsMoComp_ff.dll
2009-09-22 18:57 . 2009-09-22 18:57 -------- d-----w- c:\program files\Cucusoft
2009-09-22 18:05 . 2009-09-22 18:05 -------- d-----w- c:\documents and settings\Mike\Local Settings\Application Data\Broad Intelligence
2009-09-22 18:03 . 2009-09-22 19:36 -------- d-----w- c:\documents and settings\Mike\Application Data\Broad Intelligence

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-10-19 20:11 . 2008-03-15 15:17 -------- d-----w- c:\documents and settings\Mike\Application Data\Apple Computer
2009-10-16 18:25 . 2008-06-17 18:51 -------- d-----w- c:\program files\Diablo II
2009-10-13 13:24 . 2008-01-23 18:14 -------- d-----w- c:\program files\Microsoft Silverlight
2009-10-12 15:51 . 2009-02-14 04:27 -------- d-----w- c:\program files\Diablo II 2
2009-10-09 13:15 . 2008-02-25 19:32 -------- d-----w- c:\program files\Windows Live
2009-10-09 13:11 . 2009-08-01 05:13 -------- d-----w- c:\program files\Microsoft
2009-10-07 04:35 . 2008-03-15 15:16 -------- d-----w- c:\program files\Common Files\Apple
2009-10-07 04:33 . 2008-12-05 16:42 -------- d-----w- c:\program files\QuickTime
2009-09-30 23:03 . 2008-10-20 17:42 -------- d-----w- c:\program files\MediaCoder
2009-09-26 02:54 . 2009-02-14 01:26 -------- d-----w- c:\documents and settings\Mike\Application Data\mIRC
2009-09-26 02:41 . 2009-02-14 01:26 -------- d-----w- c:\program files\mIRC
2009-09-22 01:41 . 2008-02-12 00:55 -------- d-----w- c:\documents and settings\Mike\Application Data\uTorrent
2009-09-22 01:05 . 2008-01-23 17:01 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-18 16:00 . 2009-09-18 16:00 -------- d-----w- c:\program files\Common Files\Futuremark Shared
2009-09-13 14:51 . 2009-09-12 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2009-09-12 15:49 . 2009-09-12 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee Security Scan
2009-09-12 15:49 . 2009-09-12 15:49 -------- d-----w- c:\program files\NOS
2009-09-01 18:12 . 2009-08-29 00:45 -------- d-----w- c:\program files\Cossacks
2009-08-29 00:44 . 2009-08-29 00:44 53248 ----a-w- c:\windows\system32\unrar.dll
2009-08-28 23:42 . 2009-03-18 23:31 2065696 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-08-28 23:42 . 2008-10-24 22:44 40448 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-08-28 21:32 . 2009-08-29 00:44 4358144 ----a-w- c:\windows\uncsetup.exe
2009-08-17 16:10 . 2009-02-27 16:07 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2009-02-27 16:07 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2009-02-27 16:07 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2009-02-27 16:07 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2009-02-27 16:07 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2009-02-27 16:07 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2009-02-27 16:07 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2009-02-27 16:07 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2009-02-27 16:07 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-06 02:48 . 2009-08-01 05:32 54752 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys
2009-08-03 17:36 . 2009-04-08 22:13 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-08-03 17:36 . 2009-04-08 22:13 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-08-01 15:06 . 2008-01-23 21:06 84368 ----a-w- c:\documents and settings\Mike\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-01 05:33 . 2008-01-23 17:04 84368 ----a-w- c:\documents and settings\Yosley\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-26 20:44 . 2009-07-26 20:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-12_22.33.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-10-22 13:48 . 2009-10-22 13:48 16384 c:\windows\Temp\Perflib_Perfdata_5bc.dat
+ 2008-06-10 17:40 . 2009-08-14 00:42 59976 c:\windows\system32\Restore\rstrlog.dat
+ 2009-09-22 03:16 . 2009-05-29 17:36 39424 c:\windows\system32\ReinstallBackups\0006\DriverFi les\usbaapl.sys
- 2004-08-07 00:17 . 2009-08-01 15:10 64080 c:\windows\system32\perfc009.dat
+ 2004-08-07 00:17 . 2009-10-09 13:23 64080 c:\windows\system32\perfc009.dat
+ 2009-08-19 03:41 . 2003-04-18 23:29 44544 c:\windows\system32\msxml4a.dll
+ 2008-08-22 16:07 . 2009-09-12 15:49 84661 c:\windows\system32\Macromed\Flash\uninstall_plugi n.exe
- 2008-08-22 16:07 . 2009-06-08 17:06 84661 c:\windows\system32\Macromed\Flash\uninstall_plugi n.exe
+ 2009-09-18 16:00 . 2008-09-17 19:14 70392 c:\windows\system32\Futuremark\MSC\Direcpll.dll
+ 2009-09-22 03:16 . 2009-08-28 23:42 40448 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C 57089E4D2436654AFA4ECAD0622\usbaapl.sys
+ 2009-10-07 04:36 . 2009-05-18 18:17 26600 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF063 6A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys
+ 2009-10-09 13:15 . 2009-08-06 02:48 54752 c:\windows\system32\DRVSTORE\fssfltr_F64381C38F211 E3160A660B196A6A585F80604F9\fssfltr_tdi.sys
+ 2006-09-19 18:44 . 2009-05-18 18:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys
+ 2009-09-18 16:00 . 2008-09-17 19:14 27672 c:\windows\system32\drivers\Entech.sys
+ 2009-08-12 22:34 . 2008-10-16 19:09 51224 c:\windows\system32\dllcache\cache\wuauclt.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 13824 c:\windows\system32\dllcache\cache\wscntfy.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 82944 c:\windows\system32\dllcache\cache\ws2_32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 24576 c:\windows\system32\dllcache\cache\userinit.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 14336 c:\windows\system32\dllcache\cache\svchost.exe
+ 2009-08-12 22:34 . 2005-06-10 23:53 57856 c:\windows\system32\dllcache\cache\spoolsv.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 89088 c:\windows\system32\dllcache\cache\rasauto.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 17408 c:\windows\system32\dllcache\cache\powrprof.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 33792 c:\windows\system32\dllcache\cache\msgsvc.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 13312 c:\windows\system32\dllcache\cache\lsass.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 22016 c:\windows\system32\dllcache\cache\lpk.dll
+ 2009-08-12 22:34 . 2004-08-04 02:58 24576 c:\windows\system32\dllcache\cache\kbdclass.sys
+ 2009-08-12 22:34 . 2004-08-04 03:00 29056 c:\windows\system32\dllcache\cache\ip6fw.sys
+ 2009-08-12 22:34 . 2004-08-04 04:56 15360 c:\windows\system32\dllcache\cache\ctfmon.exe
+ 2009-08-12 22:34 . 2004-08-04 03:05 14336 c:\windows\system32\dllcache\cache\asyncmac.sys
+ 2009-08-12 22:34 . 2004-08-07 00:15 11648 c:\windows\system32\dllcache\cache\acpiec.sys
+ 2009-10-09 13:14 . 2009-10-09 13:14 98816 c:\windows\Installer\85408.msi
+ 2009-10-09 13:12 . 2009-10-09 13:12 22016 c:\windows\Installer\8538f.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 27136 c:\windows\Installer\85360.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 80395 c:\windows\Installer\{A85FD55B-891B-4314-97A5-EA96C0BD80B5}\MsblIco.Exe
+ 2009-10-09 13:17 . 2009-10-09 13:17 29316 c:\windows\Installer\{95120000-0122-0409-0000-0000000FF1CE}\olc_setup.exe
+ 2009-10-09 13:13 . 2009-10-09 13:13 58945 c:\windows\Installer\{6412CECE-8172-4BE5-935B-6CECACD2CA87}\wlmail.exe
+ 2009-10-09 14:02 . 2009-10-09 14:02 49152 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveWriter\8c8cfc96309ae94b76ab79765850c5b4\Wi ndowsLiveWriter.ni.exe
- 2009-08-01 15:31 . 2009-08-01 15:31 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Mi crosoft.VisualC.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 17920 c:\windows\assembly\NativeImages_v2.0.50727_32\Mic rosoft.VisualC\cd0730694ba5927a6efd32129783e1b4\Mi crosoft.VisualC.ni.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnost ics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .Diagnostics.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnost ics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .Diagnostics.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVid eoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft. DirectX.AudioVideoPlayback.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVid eoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft. DirectX.AudioVideoPlayback.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 5120 c:\windows\system32\dllcache\cache\sfc.dll
+ 2009-08-12 22:34 . 2004-08-07 00:17 2944 c:\windows\system32\dllcache\cache\null.sys
+ 2009-08-12 22:34 . 2004-08-07 00:15 4224 c:\windows\system32\dllcache\cache\beep.sys
+ 2009-07-10 16:15 . 2009-07-10 16:15 306544 c:\windows\WLXPGSS.SCR
+ 2007-12-04 06:56 . 2007-12-04 06:56 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcr80.dll
+ 2007-12-04 06:56 . 2007-12-04 06:56 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcp80.dll
+ 2007-12-03 22:58 . 2007-12-03 22:58 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a 1e18e3b_8.0.50727.1801_x-ww_5eed8217\msvcm80.dll
+ 2004-08-07 00:17 . 2009-10-09 13:23 406990 c:\windows\system32\perfh009.dat
- 2004-08-07 00:17 . 2009-08-01 15:10 406990 c:\windows\system32\perfh009.dat
+ 2009-07-18 03:21 . 2009-07-18 03:21 257440 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUt il.exe
- 2006-10-03 23:47 . 2008-04-17 16:12 107368 c:\windows\system32\GEARAspi.dll
+ 2006-10-03 23:47 . 2008-04-17 17:12 107368 c:\windows\system32\GEARAspi.dll
+ 2009-10-07 04:36 . 2008-04-17 17:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF063 6A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 502272 c:\windows\system32\dllcache\cache\winlogon.exe
+ 2009-08-12 22:34 . 2008-03-01 13:06 826368 c:\windows\system32\dllcache\cache\wininet.dll
+ 2009-08-12 22:34 . 2007-03-08 15:36 577536 c:\windows\system32\dllcache\cache\user32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 295424 c:\windows\system32\dllcache\cache\termsrv.dll
+ 2009-08-12 22:34 . 2007-10-30 17:20 360064 c:\windows\system32\dllcache\cache\tcpip.sys
+ 2009-08-12 22:34 . 2004-08-04 04:56 170496 c:\windows\system32\dllcache\cache\srsvc.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 108032 c:\windows\system32\dllcache\cache\services.exe
+ 2009-08-12 22:34 . 2004-08-04 04:56 180224 c:\windows\system32\dllcache\cache\scecli.dll
+ 2009-08-12 22:34 . 2005-07-26 04:39 397824 c:\windows\system32\dllcache\cache\rpcss.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 382464 c:\windows\system32\dllcache\cache\qmgr.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 435200 c:\windows\system32\dllcache\cache\ntmssvc.dll
+ 2009-08-12 22:34 . 2007-02-09 11:10 574464 c:\windows\system32\dllcache\cache\ntfs.sys
+ 2009-08-12 22:34 . 2004-08-04 04:56 407040 c:\windows\system32\dllcache\cache\netlogon.dll
+ 2009-08-12 22:34 . 2004-08-04 03:14 182912 c:\windows\system32\dllcache\cache\ndis.sys
+ 2009-08-12 22:34 . 2006-11-01 19:17 927504 c:\windows\system32\dllcache\cache\mfc40u.dll
+ 2009-08-12 22:34 . 2007-04-16 15:52 984576 c:\windows\system32\dllcache\cache\kernel32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 110080 c:\windows\system32\dllcache\cache\imm32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 792064 c:\windows\system32\dllcache\cache\comres.dll
+ 2009-08-12 22:34 . 2006-08-25 15:45 617472 c:\windows\system32\dllcache\cache\comctl32.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 167936 c:\windows\system32\dllcache\cache\appmgmts.dll
+ 2009-08-12 22:34 . 2006-02-15 00:22 142464 c:\windows\system32\dllcache\cache\aec.sys
+ 2009-10-09 13:17 . 2009-10-09 13:17 517120 c:\windows\Installer\8546f.msi
+ 2009-10-09 13:16 . 2009-10-09 13:16 969728 c:\windows\Installer\8545a.msi
+ 2009-10-09 13:15 . 2009-10-09 13:15 569344 c:\windows\Installer\85448.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 183296 c:\windows\Installer\85417.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 727040 c:\windows\Installer\85412.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 483328 c:\windows\Installer\8540d.msi
+ 2009-10-09 13:14 . 2009-10-09 13:14 778752 c:\windows\Installer\85402.msi
+ 2009-10-09 13:13 . 2009-10-09 13:13 463872 c:\windows\Installer\853c6.msi
+ 2009-10-09 13:13 . 2009-10-09 13:13 735744 c:\windows\Installer\853b7.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 430080 c:\windows\Installer\85388.msi
+ 2009-10-09 13:11 . 2009-10-09 13:11 155648 c:\windows\Installer\8536c.msi

[El loco]

+ 2009-10-07 04:31 . 2009-10-07 04:31 694272 c:\windows\Installer\32e3c4d.msi
+ 2009-10-07 04:37 . 2009-10-07 04:37 102400 c:\windows\Installer\{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}\iTunesIco.exe
+ 2009-10-09 13:14 . 2009-10-09 13:14 132096 c:\windows\Installer\{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}\WLXPhotoGalleryIcon.exe
+ 2009-09-22 22:50 . 2007-01-09 12:28 110592 c:\windows\Downloaded Program Files\CONFLICT.1\PURes-us.dll
+ 2006-11-20 15:04 . 2006-11-20 15:04 117088 c:\windows\Downloaded Program Files\CONFLICT.1\PURen-us.dll
+ 2009-08-19 15:55 . 2009-08-19 15:55 829288 c:\windows\Downloaded Program Files\CONFLICT.1\MsnPUpld.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 638976 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLiveLocal.Wr#\0bebc33895e17d9428d5ac5cac640644 \WindowsLiveLocal.WriterPlugin.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 921600 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\f629137cef994e9b3a22154edd28e594 \WindowsLive.Writer.BlogClient.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 868352 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\f52cbafd1958432efd99b650a1355bc4 \WindowsLive.Writer.Controls.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 348160 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\e606ee5c083456b61f01863dca1a33ed \WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 348160 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\e606ee5c083456b61f01863dca1a33ed \WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 176128 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\dfb25f605ea6567d1a44769d98134421 \WindowsLive.Writer.HtmlParser.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 139264 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\d2a1fa0ffe9ff28ca73a0e63f75ad640 \WindowsLive.Writer.FileDestinations.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 335872 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\c41d35c4da33e3d15bbead677fbfda54 \WindowsLive.Writer.Interop.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 143360 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\8148998f5aeb4e0d4754e2b177fbc0a5 \WindowsLive.Writer.Extensibility.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 335872 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\7f1578c07abde4a45112ded90fdf6383 \WindowsLive.Writer.Interop.Mshtml.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 376832 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\646b34a103a6733721ce80cea776f575 \WindowsLive.Writer.SpellChecker.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 475136 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\549e4a473221a09c5a120dd67ea74ef0 \WindowsLive.Writer.Localization.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 114688 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\3c65077287d519928ee08fc0fbec503a \WindowsLive.Writer.Api.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 282624 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\19b4b3ce7dc15df3e401f0afe53abde6 \WindowsLive.Writer.Mshtml.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\18f3afd165465a8411ca4e818b59ea23 \WindowsLive.Writer.Instrumentation.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 131072 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\17b43218d5fcc31b5d2b7e23388626ff \WindowsLive.Writer.Passport.ni.dll
+ 2009-10-09 14:03 . 2009-10-09 14:03 634880 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\10dee7eef6c7c62ea859b97e5c90a38f \WindowsLive.Writer.HtmlEditor.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 200704 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\066c9df7e3de63c556d9cc5359d723f6 \WindowsLive.Writer.BrowserControl.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Client\ccb4a1c2aa0552c5efa887333e9d0594\W indowsLive.Client.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 339968 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb \System.Runtime.Serialization.Formatters.Soap.ni.d ll
+ 2009-10-09 14:02 . 2009-10-09 14:02 339968 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Seri#\1f5cf8178029f5b959a9af75cb8cfedb \System.Runtime.Serialization.Formatters.Soap.ni.d ll
- 2009-08-01 15:31 . 2009-08-01 15:31 815104 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Remo#\0898f6c1de8cb89413d206e3d6a3ce1d \System.Runtime.Remoting.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 815104 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Runtime.Remo#\0898f6c1de8cb89413d206e3d6a3ce1d \System.Runtime.Remoting.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuratio#\c46625ea87db53ccf6194fe17ee05c19 \System.Configuration.Install.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Configuratio#\c46625ea87db53ccf6194fe17ee05c19 \System.Configuration.Install.ni.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902 .0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902 .0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSo und\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .DirectSound.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSo und\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .DirectSound.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPl ay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX. DirectPlay.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPl ay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX. DirectPlay.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectIn put\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .DirectInput.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectIn put\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX .DirectInput.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDr aw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX. DirectDraw.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDr aw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX. DirectDraw.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D \1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Di rect3D.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D \1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Di rect3D.dll
+ 2009-09-22 03:16 . 2009-05-29 17:36 2060288 c:\windows\system32\ReinstallBackups\0006\DriverFi les\usbaaplrc.dll
+ 2009-09-22 03:16 . 2009-08-28 23:42 2065696 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C 57089E4D2436654AFA4ECAD0622\usbaaplrc.dll
+ 2009-08-12 22:34 . 2004-08-04 04:56 1580544 c:\windows\system32\dllcache\cache\sfcfiles.dll
+ 2009-08-12 22:34 . 2007-02-28 09:08 2136064 c:\windows\system32\dllcache\cache\ntoskrnl.exe
+ 2009-08-12 22:34 . 2007-02-28 08:38 2015744 c:\windows\system32\dllcache\cache\ntkrnlpa.exe
+ 2009-08-12 22:34 . 2008-03-01 22:36 3591680 c:\windows\system32\dllcache\cache\mshtml.dll
+ 2009-08-12 22:34 . 2007-06-13 10:23 1033216 c:\windows\system32\dllcache\cache\explorer.exe
+ 2009-10-07 04:37 . 2009-10-07 04:37 4405248 c:\windows\Installer\32e426d.msi
+ 2009-10-07 04:33 . 2009-10-07 04:33 1679872 c:\windows\Installer\32e3f25.msi
+ 2009-10-07 04:33 . 2009-10-07 04:33 9013760 c:\windows\Installer\32e3ed8.msi
+ 2009-09-22 03:16 . 2009-09-22 03:16 3310592 c:\windows\Installer\126b38f.msi
+ 2009-10-09 14:02 . 2009-10-09 14:02 1155072 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\b09c9da57c0cba2a2af336f482bcea75 \WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 6492160 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\a79195e39f939213d271bb4ca3cdf2db \WindowsLive.Writer.PostEditor.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 2080768 c:\windows\assembly\NativeImages_v2.0.50727_32\Win dowsLive.Writer.#\4f64ed4930d655d3c162d5b3dede769c \WindowsLive.Writer.CoreServices.ni.dll
- 2009-08-01 15:30 . 2009-08-01 15:30 2756608 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.SqlXml\e59504af41afab5e04681af951d9b302\S ystem.Data.SqlXml.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 2756608 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.SqlXml\e59504af41afab5e04681af951d9b302\S ystem.Data.SqlXml.ni.dll
+ 2009-10-09 14:02 . 2009-10-09 14:02 1183744 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249 \System.Data.OracleClient.ni.dll
- 2009-08-01 15:31 . 2009-08-01 15:31 1183744 c:\windows\assembly\NativeImages_v2.0.50727_32\Sys tem.Data.OracleC#\1abdb47765d0696a2fc0a1095bac0249 \System.Data.OracleClient.ni.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
- 2009-07-16 18:03 . 2009-07-16 18:03 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 16:39 . 2009-08-15 16:39 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D X\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.D irect3DX.dll
+ 2009-08-15 12:51 . 2009-08-15 12:51 15705600 c:\windows\Installer\ccee3.msp
+ 2009-10-12 21:46 . 2009-10-12 21:46 15709696 c:\windows\Installer\1d39272.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-01-17 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp. exe" [2009-08-17 81000]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"TrojanScanner"="c:\program files\Trojan Remover\Trjscan.exe" [2009-07-25 1067912]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\kav\\kav7\\setup.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\Bf2_w32ded.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\EA GAMES\\Battlefield 2 Demo\\BF2.exe"=
"c:\\Program Files\\Strategy First\\Europa Universalis 2\\EU2.exe"=
"c:\\Program Files\\THQ\\Company of Heroes\\RelicCOH.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Documents and Settings\\Mike\\Desktop\\Redvex_3.0.1_11-28-07\\RedVex2.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\Anno4.exe"=
"c:\\Program Files\\Ubisoft\\Related Designs\\ANNO 1404\\tools\\Anno4Web.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2/27/2009 12:07 PM 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswF sBlk.sys [2/27/2009 12:07 PM 20560]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssflt r_tdi.sys [8/1/2009 1:32 AM 54752]
R2 WUSB54GSv2SVC;WUSB54GSv2SVC;c:\program files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe [1/23/2008 1:01 PM 41025]
R3 SbieDrv;SbieDrv;c:\program files\Sandboxie\SbieDrv.sys [9/2/2008 8:33 AM 100352]
S2 gupdate1c9f7db41a482ee;Google Update Service (gupdate1c9f7db41a482ee);c:\program files\Google\Update\GoogleUpdate.exe [6/28/2009 6:29 AM 133104]
S3 cpuz130;cpuz130;\??\c:\docume~1\Mike\LOCALS~1\Temp \cpuz130\cpuz_x32.sys --> c:\docume~1\Mike\LOCALS~1\Temp\cpuz130\cpuz_x32.sy s [?]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\Windows Live\Family Safety\fsssvc.exe [8/5/2009 10:48 PM 704864]
S3 getPlusHelper;getPlus(R) Helper;c:\windows\System32\svchost.exe -k getPlusHelper [8/4/2004 12:56 AM 14336]
S3 lgusbsmodem;LGE Mobile USB Modem;c:\windows\system32\DRIVERS\lgusbsmodem.sys --> c:\windows\system32\DRIVERS\lgusbsmodem.sys [?]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - GTNDIS5

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contents of the 'Scheduled Tasks' folder

2009-07-24 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 16:34]

2009-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]

2009-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-28 10:28]
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.com/
FF - plugin: c:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\en8u1vpy.default\ext ensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dl l
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npagent.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

[El loco]

************************************************** ************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2009-10-22 10:22
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(1492)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2009-10-22 10:24
ComboFix-quarantined-files.txt 2009-10-22 14:24
ComboFix2.txt 2009-08-12 22:35
ComboFix3.txt 2009-04-08 23:39
ComboFix4.txt 2009-03-01 02:30

Pre-Run: 37,639,712,768 bytes free
Post-Run: 38,260,576,256 bytes free

Current=8 Default=8 Failed=7 LastKnownGood=9 Sets=1,2,3,4,5,6,7,8,9
- - End Of File - - 97D781B53B455D3DB08B5C714EA3BD90

[Osiris]

Is this IP legit?

O17 - HKLM\System\CS2\Services\Tcpip\..\{0FA321D1-4CEB-4ACA-A79E-90901D650B46}: NameServer = 167.206.245.130,167.206.245.129

[El loco]

yes it is legit

[Osiris]

Everything looks good. Are you having any issues?

[El loco]

Originally Posted by Osiris

Everything looks good. Are you having any issues?

Nope, just wanted to make sure comp was clean since yesterday my cousin was playing on places like miniclips, and malwarebytes found a trojan today.

Thank you very much.