So I recently upgraded to AVG free 2013. On it's first scan through my computer it found 2 threats. When I tried to "address the issue" it would let me select the files, but not repair them. I'm not 100% sure they are even virus files. I get conflicting results searching online for the names. The threats were listed as follows:
"";"The file is signed with a broken digital signature, issued by: Microsoft Corporation., D:\I386\Apps\APP03978\src\INSNTMSI.EXE";"Infected"
and
"";"The file is signed with a broken digital signature, issued by: Microsoft Corporation., D:\I386\Apps\APP08668\src\3rdPartyApp\HHUPD.EXE";"Infected"
Any ideas? Are these files dangerous to my system? What can I do to get a clean scan from AVG? Below are the requested logs. Thanks in advanced.
MJ
____________________
HijackThis Log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:56:16 PM, on 11/4/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\AVG\AVG2013\avgidsagent.exe
C:\Program Files\AVG\AVG2013\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\AVG\AVG2013\avgnsx.exe
C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Belkin\F5D8053v4\BelkinWCUI.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
R3 - URLSearchHook: YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [EKIJ5000StatusMonitor] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [ROC_ROC_JULY_P1] "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.ancientegypt.co.uk/gods/activity/act_main.html"
O4 - HKUS\S-1-5-18\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Belkin Wireless Networking Utility.lnk = ?
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://global.fb.gamehouse.com
O15 - Trusted Zone: http://sp.mypoints.com
O15 - Trusted Zone: http://*.trymedia.com (HKLM)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} (PogoWebLauncher Control) - http://www.pogo.com/cdl/launcher/Pog...rInstaller.CAB
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} (FBootloaderAX) - http://www.facebook.com/fbplugin/win...?1265478227796
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - https://www.microsoft.com/resources/...veXClient1.cab
O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://www.worldwinner.com/games/v47.../blockwerx.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1247663275687
O16 - DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} (SpinTop Games Launcher) - http://clubgames.pogo.com/online2/po...esLauncher.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://clubgames.pogo.com/online2/po...jolauncher.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://picture.vzw.com/activex/Veriz...oadControl.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} (WorldWinner ActiveX Launcher Control) - http://www.worldwinner.com/games/lau...0/iewwload.cab
O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://www.worldwinner.com/games/v64/swapit/swapit.cab
O16 - DPF: {B12213CD-4189-415D-A054-7999528459F7} (pixelStormLauncher Class) - http://aolsvc.aol.com/onlinegames/tr...rmlauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/fr...ylomplayer.cab
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} (Java Plug-in 1.6.0_26) -
O16 - DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} (FamilyFeud Control) - http://www.worldwinner.com/games/v47...familyfeud.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://bestbuy.oberon-media.com/Game...onGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...nt/swflash.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://www.iwin.com/global/premium/s...utLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://download.games.yahoo.com/game...nematycoon.cab
O16 - DPF: {DBA8E419-0D5F-439B-A3CC-D01C768D9B51} (DVCDownloaderControl Object) - http://aolsvc.aol.com/onlinegames/so...derControl.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://clubgames.pogo.com/online2/po...der_v10_en.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E7DA7F8D-27AB-4EE9-8FC0-3FEC9ECFE758} (DynamicWebTwain Class) - https://www.humanservices.state.pa.u...icWebTWAIN.cab
O16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) - http://clubgames.pogo.com/online2/po...meLauncher.cab
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll
O18 - Filter hijack: text/html - {673efdc8-3b7c-442e-8be6-2c990883abd8} - (no file)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo System Service (ioloSystemService) - iolo technologies, LLC - C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Kodak AiO Status Monitor Service - Eastman Kodak Company - C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
O23 - Service: Seagate Dashboard Service (SeagateDashboardService) - Memeo - C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
O23 - Service: vToolbarUpdater12.2.6 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
--
End of file - 15685 bytes
__________________________________________________________
dds.scr Log:
DDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.9.2
Run by HP_Administrator at 15:57:14 on 2012-11-04
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.173 [GMT -5:00]
.
AV: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Norton Internet Security *Enabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Belkin\F5D8053v4\BelkinWCUI.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://my.yahoo.com
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uProxyServer = :0
mSearchAssistant = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uURLSearchHooks: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn6\yt.dll
uURLSearchHooks: YTNavAssistPlugin Class: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - c:\program files\yahoo!\companion\installs\cpn6\yt.dll
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: rsion - <orphaned>
BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - <orphaned>
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\12.2.5.32\AVG Secure Search_toolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: &Google: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
TB: Norton AntiVirus: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\program files\norton internet security\norton antivirus\NAVSHEXT.DLL
TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>
TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\12.2.5.32\AVG Secure Search_toolbar.dll
EB: &Yahoo! Messenger: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\common\yhexbmesus.dll
EB: &Yahoo! Messenger: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\common\yhexbmesus.dll
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [Google Update] "c:\documents and settings\hp_administrator\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.ancientegypt.co.uk/gods/activity/act_main.html"
mRun: [WinPatrol] c:\program files\billp studios\winpatrol\WinPatrol.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [EKIJ5000StatusMonitor] c:\windows\system32\spool\drivers\w32x86\3\EKIJ5000MUI.exe
mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
mRun: [ROC_ROC_JULY_P1] "c:\program files\avg secure search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
mRun: [AVG_UI] "c:\program files\avg\avg2013\avgui.exe" /TRAYONLY
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [Conime] c:\windows\system32\conime.exe
dRunOnce: [KodakHomeCenter] "c:\program files\kodak\aio\center\AiOHomeCenter.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\belkin~1.lnk - c:\program files\belkin\f5d8053v4\BelkinWCUI.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:149
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: &Yahoo! Search - /c:\program files\yahoo!\Common/ycsrch.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
IE: Yahoo! &Dictionary - /c:\program files\yahoo!\Common/ycdict.htm
IE: Yahoo! &Maps - /c:\program files\yahoo!\Common/ycmap.htm
IE: Yahoo! &SMS - /c:\program files\yahoo!\Common/ycsms.htm
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper200711281.dll
DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} - hxxp://www.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://www.facebook.com/fbplugin/win32/axfbootloader.cab?1265478227796
DPF: {49232000-16E4-426C-A231-62846947304B} - hxxp://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} - hxxps://www.microsoft.com/resources/virtuallabs/ActiveX/VMRCActiveXClient1.cab
DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} - hxxp://www.worldwinner.com/games/v47/blockwerx/blockwerx.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1247663275687
DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} - hxxp://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient_japan/SpinTopGamesLauncher.cab
DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} - hxxp://clubgames.pogo.com/online2/pogop/chainz_2/mjolauncher.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} - hxxp://picture.vzw.com/activex/VerizonWirelessUploadControl.cab
DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} - hxxp://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} - hxxp://www.worldwinner.com/games/v64/swapit/swapit.cab
DPF: {B12213CD-4189-415D-A054-7999528459F7} - hxxp://aolsvc.aol.com/onlinegames/tryrumblecube/pixelstormlauncher.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://aolsvc.aol.com/onlinegames/free-trial-lotus-deluxe/zylomplayer.cab
DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} - hxxp://www.worldwinner.com/games/v47/familyfeud/familyfeud.cab
DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} - hxxp://bestbuy.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} - hxxp://www.iwin.com/global/premium/sprout/feedingfrenzy/SproutLauncher.cab
DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} - hxxp://download.games.yahoo.com/games/web_games/tikgames/cinematycoon/cinematycoon.cab
DPF: {DBA8E419-0D5F-439B-A3CC-D01C768D9B51} - hxxp://aolsvc.aol.com/onlinegames/sonydavincicode/DVCDownloaderControl.cab
DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://clubgames.pogo.com/online2/pogop/peggle/popcaploader_v10_en.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E7DA7F8D-27AB-4EE9-8FC0-3FEC9ECFE758} - hxxps://www.humanservices.state.pa.us/COMPASS.RiaClient/ASDScan/DynamicWebTWAIN.cab
DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} - hxxp://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient/PTGameLauncher.cab
TCP: NameServer = 192.168.2.1
TCP: Interfaces\{892900FC-9814-4488-99C0-81491C1EE93D} : DHCPNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
TCP: Interfaces\{D137D82B-62A8-473B-B292-5AFA2D350702} : DHCPNameServer = 192.168.2.1
Filter: text/html - {673efdc8-3b7c-442e-8be6-2c990883abd8} - <orphaned>
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\12.2.6\ViProtocol.dll
Notify: AtiExtEvent - Ati2evxx.dll
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\hp_administrator\application data\mozilla\firefox\profiles\cfbmbl48.default\
FF - prefs.js: browser.search.selectedEngine - Search the web (Babylon)
FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/?affID=44444&tt=120912_cpc_3712_6&babsrc=HP_ss&mntrId=c83fcb770000000000000 01cdf6a6416
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=44444&tt=120912_cpc_3712_6&babsrc=KW_ss&mntrId=c83fcb770000000000000 01cdf6a6416&q=
FF - component: c:\program files\mozilla firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.BabylonToolbar.autoRvrt - false
FF - user.js: extensions.BabylonToolbar_i.newTab - false
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=c83fcb77000000000000001cdf6a6416&q=
FF - user.js: extensions.BabylonToolbar.id - c83fcb77000000000000001cdf6a6416
FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}
FF - user.js: extensions.BabylonToolbar.instlDay - 15596
FF - user.js: extensions.BabylonToolbar.vrsn - 1.6.9.12
FF - user.js: extensions.BabylonToolbar.vrsni - 1.6.9.12
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.6.9.1219:56:39
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.admin - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=44444&tt=120912_cpc_3712_6
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-9-21 55008]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2012-9-21 177376]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-3-1 93536]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-3-16 35552]
R0 MrFilter;EasyWrite Driver;c:\windows\system32\drivers\MRFilter.sys [2006-2-26 12384]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2012-9-13 177504]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2012-9-21 19936]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-1-7 159712]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-4-4 164832]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-9-3 27496]
R1 SAVRTPEL;SAVRTPEL;c:\program files\norton internet security\norton antivirus\SAVRTPEL.SYS [2005-2-4 53896]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2013\avgidsagent.exe [2012-10-2 5783672]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2013\avgwdsvc.exe [2012-10-2 193568]
R2 ioloSystemService;iolo System Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2012-10-29 1028464]
R2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files\kodak\aio\statusmonitor\EKPrinterSDK.exe [2012-6-19 777728]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\memeo\autobackup\MemeoBackgroundService.exe [2010-4-22 25824]
R2 PDFsFilter;PDFsFilter;c:\windows\system32\drivers\PDFsFilter.sys [2012-10-29 68464]
R2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\seagate\seagate dashboard\SeagateDashboardService.exe [2010-4-30 14088]
R2 vToolbarUpdater12.2.6;vToolbarUpdater12.2.6;c:\program files\common files\avg secure search\vtoolbarupdater\12.2.6\ToolbarUpdater.exe [2012-9-3 722528]
R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [2009-7-11 517632]
S0 bfpoxrco;bfpoxrco;c:\windows\system32\drivers\dqcgqe.sys --> c:\windows\system32\drivers\dqcgqe.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-10-23 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-9-10 250808]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-10-23 136176]
S3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20060426.019\NAVENG.Sy s [2006-4-26 77864]
S3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20060426.019\NavEx15 .Sys [2006-4-26 799208]
S3 P1130VID;Creative WebCam NX Pro;c:\windows\system32\drivers\P1130Vid.sys [2006-2-27 90357]
S3 SAVRT;SAVRT;c:\program files\norton internet security\norton antivirus\SAVRT.SYS [2005-2-4 334984]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\iobit\game booster 3\driver\WinRing0.sys [2012-10-29 14416]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v040 0.exe [2010-3-18 753504]
S4 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\CCEVTMGR.EXE [2005-3-4 186016]
S4 ccProxy;Symantec Network Proxy;c:\program files\common files\symantec shared\CCPROXY.EXE [2005-3-4 239216]
S4 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\CCSETMGR.EXE [2005-3-4 177824]
S4 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2010-1-20 266240]
S4 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\kodak\aio\center\EKAiOHostService.exe [2012-6-18 394712]
S4 navapsvc;Norton AntiVirus Auto-Protect Service;c:\program files\norton internet security\norton antivirus\NAVAPSVC.EXE [2005-3-24 128112]
S4 SAVScan;SAVScan;c:\program files\norton internet security\norton antivirus\SAVSCAN.EXE [2005-2-17 198368]
.
=============== File Associations ===============
.
FileExt: .txt: Applications\WINWORD.EXE="c:\program files\microsoft office\office11\WINWORD.EXE" /n /dde [UserChoice] [default=edit - 'Open' doesn't exist]
ShellExec: MediaConverter.exe: open="c:\program files\sandisk\sansa media converter\uMediaConverter.exe" "%1"
.
=============== Created Last 30 ================
.
2012-10-30 22:13:01 516096 ------w- c:\windows\system32\ati2sgag.exe
2012-10-29 21:27:43 511328 ----a-w- c:\program files\common files\microsoft shared\capicom\CAPICOM.DLL
2012-10-29 21:27:40 2097032 ----a-w- c:\windows\system32\Incinerator32.dll
2012-10-29 21:27:38 68464 ----a-w- c:\windows\system32\drivers\PDFsFilter.sys
2012-10-29 21:27:38 56200 ----a-w- c:\windows\system32\offreg.dll
2012-10-29 21:27:38 41176 ----a-w- c:\windows\system32\iolobtdfg.exe
2012-10-29 21:27:38 23128 ----a-w- c:\windows\system32\smrgdf.exe
2012-10-29 21:27:36 -------- d-----w- c:\program files\iolo
2012-10-29 21:23:48 74703 ----a-w- c:\windows\system32\mfc45.dat
2012-10-29 21:23:46 -------- d-----w- c:\documents and settings\hp_administrator\application data\iolo
2012-10-29 21:23:46 -------- d-----w- c:\documents and settings\all users\application data\iolo
2012-10-29 21:16:19 -------- d-----w- c:\program files\IObit
2012-10-29 21:16:19 -------- d-----w- c:\documents and settings\all users\application data\IObit
2012-10-29 20:11:14 -------- d-----w- c:\documents and settings\hp_administrator\application data\AVG2013
2012-10-29 20:07:55 -------- d-----w- c:\documents and settings\hp_administrator\application data\TuneUp Software
2012-10-29 20:03:28 -------- d-----w- c:\documents and settings\all users\application data\AVG2013
2012-10-29 20:00:43 -------- d-----w- c:\documents and settings\hp_administrator\local settings\application data\MFAData
2012-10-29 20:00:43 -------- d-----w- c:\documents and settings\hp_administrator\local settings\application data\Avg2013
2012-10-29 02:10:12 -------- d-----w- c:\program files\Northern Tale
2012-10-25 02:41:56 -------- d-----w- c:\documents and settings\hp_administrator\application data\northern_tale_bfg_en
2012-10-20 21:52:11 -------- d-----w- c:\documents and settings\hp_administrator\application data\Islands
2012-10-20 20:41:16 -------- d-----w- c:\documents and settings\hp_administrator\application data\Boolat Games
2012-10-20 13:18:48 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
.
==================== Find3M ====================
.
2012-10-20 13:18:27 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-20 13:18:27 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-20 13:18:27 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-10-09 00:08:54 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 00:08:53 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-02 07:30:38 159712 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2012-09-29 23:54:26 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-21 07:46:06 164832 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2012-09-21 07:46:00 177376 ----a-w- c:\windows\system32\drivers\avglogx.sys
2012-09-21 07:45:54 19936 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
2012-09-21 07:45:52 55008 ----a-w- c:\windows\system32\drivers\avgidshx.sys
2012-09-14 07:05:20 35552 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2012-09-13 07:11:20 177504 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
2012-09-04 02:59:21 27496 ----a-w- c:\windows\system32\drivers\avgtpx86.sys
2012-08-28 15:14:53 916992 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:14:53 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:14:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07:15 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:53:22 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-21 13:33:26 2148864 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-21 12:58:09 2027520 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-07-13 01:10:45 774144 ----a-w- c:\program files\RngInterstitial.dll
.
============= FINISH: 15:58:49.50 =
_____________________________________________________________________
Attach txt log
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-10-19.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 2/26/2006 4:37:27 PM
System Uptime: 11/3/2012 3:15:18 PM (24 hours ago)
.
Motherboard: ASUSTek Computer INC. | | Amberine M
Processor: AMD Athlon(tm) 64 Processor 3700+ | Socket 939 | 2188/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 178 GiB total, 76.153 GiB free.
D: is FIXED (FAT32) - 9 GiB total, 1.218 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is FIXED (NTFS) - 932 GiB total, 880.054 GiB free.
K: is Removable
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\8E746F11D800
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\8E746F11D800
Service: NIC1394
.
==== System Restore Points ===================
.
RP2160: 8/7/2012 1:24:12 PM - System Checkpoint
RP2161: 8/8/2012 2:24:20 PM - System Checkpoint
RP2162: 8/9/2012 3:23:59 PM - System Checkpoint
RP2163: 8/10/2012 4:25:00 PM - System Checkpoint
RP2164: 8/11/2012 5:24:04 PM - System Checkpoint
RP2165: 8/12/2012 11:47:58 PM - System Checkpoint
RP2166: 8/14/2012 12:23:58 AM - System Checkpoint
RP2167: 8/15/2012 12:00:22 AM - Software Distribution Service 3.0
RP2168: 8/16/2012 12:35:13 AM - System Checkpoint
RP2169: 8/17/2012 1:35:10 AM - System Checkpoint
RP2170: 8/18/2012 2:47:06 AM - System Checkpoint
RP2171: 8/19/2012 3:35:08 AM - System Checkpoint
RP2172: 8/20/2012 4:55:39 PM - System Checkpoint
RP2173: 8/21/2012 7:00:32 PM - System Checkpoint
RP2174: 8/22/2012 10:20:59 PM - System Checkpoint
RP2175: 8/23/2012 11:25:16 PM - System Checkpoint
RP2176: 8/25/2012 1:19:31 AM - System Checkpoint
RP2177: 8/26/2012 1:58:47 AM - System Checkpoint
RP2178: 8/27/2012 1:58:57 AM - System Checkpoint
RP2179: 8/28/2012 3:11:03 AM - System Checkpoint
RP2180: 8/29/2012 3:58:58 AM - System Checkpoint
RP2181: 8/30/2012 4:59:00 AM - System Checkpoint
RP2182: 8/31/2012 5:58:32 AM - System Checkpoint
RP2183: 9/1/2012 5:58:41 AM - System Checkpoint
RP2184: 9/2/2012 6:58:29 AM - System Checkpoint
RP2185: 9/3/2012 7:58:32 AM - System Checkpoint
RP2186: 9/4/2012 8:58:15 AM - System Checkpoint
RP2187: 9/5/2012 9:58:19 AM - System Checkpoint
RP2188: 9/6/2012 10:58:27 AM - System Checkpoint
RP2189: 9/8/2012 1:06:55 AM - System Checkpoint
RP2190: 9/9/2012 1:38:28 AM - System Checkpoint
RP2191: 9/10/2012 1:54:33 AM - System Checkpoint
RP2192: 9/11/2012 4:04:27 AM - System Checkpoint
RP2193: 9/12/2012 4:08:24 AM - System Checkpoint
RP2194: 9/13/2012 12:00:17 AM - Software Distribution Service 3.0
RP2195: 9/13/2012 8:10:35 PM - Removed BabylonObjectInstaller
RP2196: 9/14/2012 10:55:53 PM - System Checkpoint
RP2197: 9/15/2012 11:22:33 PM - System Checkpoint
RP2198: 9/17/2012 12:27:24 AM - System Checkpoint
RP2199: 9/18/2012 1:22:27 AM - System Checkpoint
RP2200: 9/19/2012 2:58:52 AM - System Checkpoint
RP2201: 9/20/2012 4:22:29 AM - System Checkpoint
RP2202: 9/21/2012 4:30:56 AM - System Checkpoint
RP2203: 9/22/2012 4:35:15 AM - System Checkpoint
RP2204: 9/23/2012 12:00:25 AM - Software Distribution Service 3.0
RP2205: 9/24/2012 12:24:49 AM - System Checkpoint
RP2206: 9/25/2012 1:24:46 AM - System Checkpoint
RP2207: 9/26/2012 1:37:39 AM - System Checkpoint
RP2208: 9/27/2012 2:48:45 AM - System Checkpoint
RP2209: 9/28/2012 3:37:18 AM - System Checkpoint
RP2210: 9/29/2012 4:24:50 AM - System Checkpoint
RP2211: 9/30/2012 4:39:22 AM - System Checkpoint
RP2212: 10/1/2012 5:50:26 AM - System Checkpoint
RP2213: 10/2/2012 6:24:58 AM - System Checkpoint
RP2214: 10/3/2012 7:25:01 AM - System Checkpoint
RP2215: 10/4/2012 8:25:10 AM - System Checkpoint
RP2216: 10/5/2012 9:25:08 AM - System Checkpoint
RP2217: 10/6/2012 10:25:10 AM - System Checkpoint
RP2218: 10/7/2012 10:52:42 AM - System Checkpoint
RP2219: 10/8/2012 4:23:16 PM - System Checkpoint
RP2220: 10/9/2012 4:23:50 PM - System Checkpoint
RP2221: 10/10/2012 11:37:15 PM - System Checkpoint
RP2222: 10/11/2012 12:00:26 AM - Software Distribution Service 3.0
RP2223: 10/12/2012 12:36:37 AM - System Checkpoint
RP2224: 10/13/2012 1:34:34 AM - System Checkpoint
RP2225: 10/14/2012 1:36:06 AM - System Checkpoint
RP2226: 10/15/2012 4:36:02 AM - System Checkpoint
RP2227: 10/16/2012 5:36:09 AM - System Checkpoint
RP2228: 10/17/2012 6:35:14 AM - System Checkpoint
RP2229: 10/18/2012 6:36:11 AM - System Checkpoint
RP2230: 10/19/2012 7:36:00 AM - System Checkpoint
RP2231: 10/20/2012 7:48:33 AM - System Checkpoint
RP2232: 10/20/2012 9:17:30 AM - Removed Java(TM) 7 Update 4
RP2233: 10/20/2012 9:18:18 AM - Installed Java 7 Update 9
RP2234: 10/21/2012 11:52:45 PM - System Checkpoint
RP2235: 10/23/2012 12:36:24 AM - System Checkpoint
RP2236: 10/24/2012 12:37:04 AM - System Checkpoint
RP2237: 10/25/2012 12:50:43 AM - System Checkpoint
RP2238: 10/26/2012 1:37:10 AM - System Checkpoint
RP2239: 10/27/2012 2:49:10 AM - System Checkpoint
RP2240: 10/28/2012 4:31:42 AM - System Checkpoint
RP2241: 10/29/2012 5:28:29 AM - System Checkpoint
RP2242: 10/29/2012 4:02:58 PM - Installed AVG 2013
RP2243: 10/29/2012 4:03:12 PM - Removed AVG 2011
RP2244: 10/29/2012 4:04:09 PM - Installed AVG 2013
RP2245: 10/29/2012 4:10:04 PM - Removed AVG 2011
RP2246: 11/3/2012 1:03:41 AM - System Checkpoint
RP2247: 11/4/2012 12:44:06 AM - System Checkpoint
.
==== Installed Programs ======================
.
Acrobat.com
Adobe Acrobat 5.0
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Reader 9.4.5
Adobe Shockwave Player 11.5
AiO_Scan
AiO_Scan_CDA
aioprnt
aioscnnr
AiOSoftware
AiOSoftwareNPI
Amazon MP3 Uploader
AQUAZONE "Jellies, Turtles, & More... Collection"
ArcSoft Panorama Maker 4
ArcSoft Software Suite
ArtistScope Plugin IE
ATI Control Panel
ATI Display Driver
Audacity 2.0
AVG 2013
Azada® : In Libro Collector's Edition
Belkin N Wireless USB Adapter Setup
Big Fish Games: Game Manager
Bonjour
BufferChm
C4USelfUpdater
CameraDrivers
CC_ccProxyExt
ccCommon
CCleaner (remove only)
ccPxyCore
center
Changes
Chasys Draw IES 3.66.02
Collapse! Crunch
Comcast High-Speed Internet Install Wizard
CP_AtenaShokunin1Config
CP_CalendarTemplates1
cp_LightScribeConfig
cp_LightScribePlugin
CP_Package_Basic1
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CP_Panorama1Config
Create
Creative PC-CAM Center
Creative WebCam Monitor
Creative WebCam NX Pro Driver (1.00.06.0512)
Creative WebCam NX Pro User's Guide (English)
CueTour
Customer Experience Enhancement
Dark Parables: Curse of Briar Rose Collector's Edition
Dark Parables: Rise of the Snow Queen Collector's Edition
Dark Parables: The Exiled Prince
Dark Parables: The Exiled Prince Collector's Edition
Data Fax SoftModem with SmartCP
Destinations
DeviceManagementQFolder
Diner Dash Family Style
Diner Dash Hometown Hero - Gourmet
Discord Times
DISCover
DocProc
DocumentViewer
DocumentViewerQFolder
Drawn ®: Dark Flight Collector's Edition
Drawn®: The Painted Tower
Drawn: Trail of Shadows Collector's Edition
Enchanted Cavern
essentials
Express Burn
Facebook Plug-In
FATE
FATE - The Traitor Soul
FATE from HP Media Center (remove only)
Fax
Fax_CDA
FaxTools
Fiction Fixers - Adventures in Wonderland
File Uploader
Fishdom
Floating Kingdoms
FotoMix version 8.5.6
Funny Faces
Game Booster 3
getPlus(R)_ocx
GIMP 2.8.0
Google Chrome
Google Earth Plug-in
Google Toolbar for Internet Explorer
Google Update Helper
greenstreet Picture Browser
Hallmark Smilebox
Hamlet
Haunted Manor: Lord of Mirrors
High Definition Audio Driver Package - KB888111
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB2756822)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Boot Optimizer
HP Deskjet Printer Preload
HP DigitalMedia Archive
HP Document Viewer 5.3
HP Game Console and games
HP Image Zone 5.3
HP Imaging Device Functions 5.3
HP Multimedia Keyboard Software
HP Photosmart 330,380,420,470,7800,8000,8200 Series
HP Photosmart Cameras 5.0
HP PSC & OfficeJet 5.3.A
HP PSC & OfficeJet 5.3.B
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
HPProductAssistant
HpSdpAppCoreApp
InstantShareDevices
InterActual Player
InterVideo WinDVD Player
iolo technologies' System Mechanic
Island Tribe
J2SE Runtime Environment 5.0 Update 5
Java 7 Update 9
Java Auto Updater
Java(TM) 6 Update 30
JavaFX 2.1.1
Jigsaw World
Kingdom Chronicles Collector's Edition
Kodak AIO Printer
KODAK AiO Software
Kuros
LightScribe 1.4.52.1
Logitech SetPoint
Lottso! Deluxe
LUMIX Simple Viewer
Magic Life
Mahjong Garden Deluxe
Malwarebytes Anti-Malware version 1.65.1.1000
Memeo Instant Backup
Microsoft .NET Framework 1.0 Hotfix (KB2572066)
Microsoft .NET Framework 1.0 Hotfix (KB2604042)
Microsoft .NET Framework 1.0 Hotfix (KB2656378)
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2656353)
Microsoft .NET Framework 1.1 Security Update (KB2656370)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Away Mode
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2005
Microsoft National Language Support Downlevel APIs
Microsoft Office Basic Edition 2003
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Standard Edition 2003
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Works
Move Media Player
Mozilla Firefox (2.0.0.1)
MSRedist
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser
muvee autoProducer 4.5
muvee autoProducer unPlugged 1.2
My Kingdom for the Princess II
My Kingdom for the Princess III
MyDSC2
Mystery Case Files - Huntsville (remove only)
Mystery Case Files - Prime Suspects (remove only)
Mystery Case Files - Ravenhearst (remove only)
Mystery Case Files ®: 13th Skull
Mystery Case Files®: Dire Grove
Mystery Case Files: Madame Fate (remove only)
Mystery Case Files: Return to Ravenhearst
Nancy Drew Dossier: Lights, Camera, Curses!
Nancy Drew Dossier: Resorting to Danger
Nancy Drew Phantom of Venice
Nancy Drew: Danger by Design
Nancy Drew: Danger on Deception Island
Nancy Drew: Ghost Dogs of Moon Lake
Nancy Drew: Last Train to Blue Moon Canyon
Nancy Drew: Legend of the Crystal Skull
Nancy Drew: Ransom of the Seven Ships
Nancy Drew: Secret of Shadow Ranch
Nancy Drew: Secret of the Old Clock
Nancy Drew: Secret of the Scarlet Hand
Nancy Drew: Secrets Can Kill REMASTERED
Nancy Drew: The Captive Curse
Nancy Drew: The Creature of Kapu Cave
Nancy Drew: The Curse of Blackmoor Manor
Nancy Drew: The Final Scene
Nancy Drew: The Haunted Carousel
Nancy Drew: The Haunting of Castle Malloy
Nancy Drew: Trail of the Twister
Nancy Drew: Treasure in the Royal Tower
Nancy Drew: Warnings at Waverly Academy
Netscape Browser (remove only)
New Yankee in King Arthur's Court
NewCopy
NewCopy_CDA
Nikon Message Center
Nikon Transfer
Northern Tale
Norton AntiSpam
Norton AntiVirus 2005
Norton Internet Security
Norton WMI Update
ocr
OpenAL
Operation Mania
Otto
PanoStandAlone
PC-Doctor 5 for Windows
Photo Pos Pro
PhotoGallery
PhotoPad Image Editor
PhotoStage Slideshow Producer
Picture Control Utility
Pixia
Plants vs. Zombies
PreReq
PS2
PSPrinters08
PSTAPlugin
Puzzle Park
Quicken 2006
QuickTime
RandMap
Readme
RealArcade
RealPlayer
Recordpad
Remove IntelliMover Demo
Roads of Rome
Roads of Rome II
Roads of Rome III
Roblox for HP_Administrator
Roxio EasyWrite Reader
Royal Envoy 2 Collector's Edition
Royal Envoy Collector's Edition
Sandlot Games Client Services
Sansa Media Converter
Sansa Updater
Savings Bond Wizard
Scan
ScannerCopy
Seagate Dashboard
Security Task Manager 1.7
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Windows (KB2564958)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2530548)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2559049)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2647516)
Security Update for Windows Internet Explorer 8 (KB2675157)
Security Update for Windows Internet Explorer 8 (KB2699988)
Security Update for Windows Internet Explorer 8 (KB2722913)
Security Update for Windows Internet Explorer 8 (KB2744842)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2491683)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2621440)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2633171)
Security Update for Windows XP (KB2639417)
Security Update for Windows XP (KB2641653)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2647518)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2660465)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2685939)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2695962)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219)
Security Update for Windows XP (KB2707511)
Security Update for Windows XP (KB2709162)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2718523)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135)
Security Update for Windows XP (KB2724197)
Security Update for Windows XP (KB2731847)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Sibelius Scorch
Sibelius Student
Simply Kids
Simply Recreation
Simply School Days
Simply Vacations
Simply Vintage
SkinsHP1
SolutionCenter
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sonic_PrimoSDK
SPBBC
Spybot - Search & Destroy
Spybot - Search & Destroy 1.4
Status
Stellarium UMI
Symantec Network Drivers Update
SymNet
Synthesia (remove only)
TES Construction Set
The Poppit! Show
The Promised Land
The Treasures Of Mystery Island
The Treasures of Mystery Island: The Gates of Fate
The Treasures of Mystery Island: The Ghost Ship
The White Wolf of Icicle Creek
TrayApp
Tri Peaks 2 Quest For The Ruby Ring
Type to Learn 3 Home
Ultimate Paint 2.88 Freeware Edition
Unity Web Player
Unlikely Suspects
Unload
UNO - Undercover
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Windows Internet Explorer 8 (KB971930)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows Media Player 10 (KB910393)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2607712)
Update for Windows XP (KB2616676)
Update for Windows XP (KB2641690)
Update for Windows XP (KB2661254-v2)
Update for Windows XP (KB2718704)
Update for Windows XP (KB2736233)
Update for Windows XP (KB2749655)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
Updates from HP (remove only)
VideoPad Video Editor
ViewNX
VIVA MEDIA GAME CENTER
WavePad Uninstall
WebFldrs XP
WebReg
WildTangent Games
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format Runtime
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB2619340
Windows XP Media Center Edition 2005 KB2628259
Windows XP Media Center Edition 2005 KB908250
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
WinPatrol
Word Riot Deluxe
World Mosaics
Yahoo! extras
Yahoo! Messenger
Yahoo! Photos Easy Upload Tool
Yahoo! Photos Print-at-Home Tool
Yahoo! Software Update
Yahoo! Toolbar
Yontoo Layers Client 1.10.01
Zoner Photo Studio 7
.
==== Event Viewer Messages From Past Week ========
.
11/3/2012 3:16:44 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor IntelIde ViaIde
11/2/2012 2:08:49 PM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 001CDF6A6416. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
10/29/2012 6:11:10 PM, error: Service Control Manager [7034] - The iolo System Service service terminated unexpectedly. It has done this 1 time(s).
10/29/2012 4:13:41 PM, error: Service Control Manager [7006] - The ScRegSetValueExW call failed for FailureActions with the following error: Access is denied.
10/29/2012 4:08:17 PM, error: Service Control Manager [7009] - Timeout (120000 milliseconds) waiting for the AVGIDSAgent service to connect.
10/29/2012 4:08:17 PM, error: Service Control Manager [7000] - The AVGIDSAgent service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
10/28/2012 9:31:48 PM, error: Service Control Manager [7034] - The Windows User Mode Driver Framework service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:31:40 PM, error: Service Control Manager [7034] - The Media Center Scheduler Service service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:31:23 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:25:44 AM, error: Service Control Manager [7000] - The Bonjour Service service failed to start due to the following error: The system cannot find the file specified.
10/28/2012 9:22:33 PM, error: Service Control Manager [7031] - The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
10/28/2012 9:21:51 AM, error: Service Control Manager [7034] - The DNS Client service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:48 AM, error: Service Control Manager [7034] - The TCP/IP NetBIOS Helper service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:48 AM, error: Service Control Manager [7031] - The Universal Plug and Play Device Host service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
10/28/2012 9:21:48 AM, error: Service Control Manager [7031] - The Remote Registry service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.
10/28/2012 9:21:44 AM, error: Service Control Manager [7034] - The WebClient service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:42 AM, error: Service Control Manager [7034] - The HTTP SSL service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:34 AM, error: Service Control Manager [7034] - The vToolbarUpdater12.2.6 service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:27 AM, error: Service Control Manager [7034] - The Yahoo! Updater service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:16 AM, error: Service Control Manager [7034] - The Kodak AiO Status Monitor Service service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:05 AM, error: Service Control Manager [7034] - The Pml Driver HPZ12 service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:00 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:20:15 AM, error: Service Control Manager [7034] - The Kodak AiO Network Discovery Service service terminated unexpectedly. It has done this 1 time(s).
.
==== End Of File ====
_________________________________________________________
GMER log:
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-11-04 19:07:02
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST3200826AS rev.3.03
Running: obgucttg.exe; Driver: C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kwxdafob.sys
---- System - GMER 1.0.15 ----
SSDT 85D700B0 ZwConnectPort
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeKey [0xF5C1A14A]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeMultipleKeys [0xF5C1A21A]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0xF5C19D7C]
SSDT \??\C:\WINDOWS\system32\drivers\avgtpx86.sys (AVG Technologies) ZwQueryValueKey [0xF7761258]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwSuspendProcess [0xF5C19F6A]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwSuspendThread [0xF5C1A000]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateProcess [0xF5C19E32]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0xF5C19ECE]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0xF5C1A09C]
---- Kernel code sections - GMER 1.0.15 ----
? gsujx.sys The system cannot find the file specified. !
? C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !
---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\Ntfs \Ntfs bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)
AttachedDevice \FileSystem\Ntfs \Ntfs SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 arkbcfltr.sys (Microsoft AR PS/2 Keyboard Filter Driver (Beta 2 Release 2)/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \FileSystem\Fastfat \Fat bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)
---- Files - GMER 1.0.15 ----
File C:\Program Files\Microsoft Office\OFFICE11\1033\112 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\112\SKU112.XML 473931 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\113 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\113\SKU113.XML 473931 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ADDRPRSR.DLL 35392 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\ADO.XML 328956 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ADO210.AW 238012 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41206.FMT 1451 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41256.FMT 1542 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41307.FMT 1366 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41357.FMT 1469 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AVL7901.FMT 1559 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AVL7902.FMT 1488 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\2COLCMA.GIF 1470 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\2COLFRM.GIF 1975 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BARS.GIF 1273 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BRACKETS.GIF 1334 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BULTITL.GIF 1315 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\COMMAS.GIF 1415 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\COMPNT.GIF 1547 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\DOTS.GIF 1246 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\DRPDWN.GIF 1566 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\HISTORY.GIF 1470 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\HORZTITL.GIF 1318 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\LSTVIEWS.INI 9540 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\MOREDOTS.GIF 1266 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\NAVBARS.INI 2204 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\NUMTITL.GIF 1325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\PLNTITL.GIF 1291 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM1.GIF 1517 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM2.GIF 1421 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM3.GIF 1761 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\SLASHES.GIF 1261 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\TABLE.GIF 1482 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\TABULAR.GIF 1239 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\UNDRLINE.GIF 1246 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\CATOC.XML 4522 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\CERTINTL.DLL 13376 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\CSDEBUG.CHM 118701 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\CSENVIR.CHM 311722 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAO.XML 58396 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAO360.AW 102702 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\+Connect to New Data Source.odc 190 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\+New SQL Server Connection.odc 196 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\DATACONN.HTC 28734 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\DESKTOP.INI 70 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\FOLDER.ICO 4710 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAY1.PRT 2288 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAY2.PRT 3151 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DYNO106.FMT 1585 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\EMAIL.DOT 13312 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ENVELOPR.DLL 20032 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\EXPTOOWS.DLL 13376 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\EXPTOOWS.XLA 78336 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\FILTERS.TXT 2086 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\FM20.AW 126150 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\FM20.XML 86032 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GR8GALRY.GRA 186880 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GRAPH10.AW 281435 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GRAPH10.CHM 511975 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GRINTL32.DLL 145984 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMLREF.CHM 2827646 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMLREF.XML 8594 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMMINTL.DLL 31352 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMQINTL.DLL 27256 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\ID_112.DPC 653 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ID_113.DPC 627 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\JETSQL.XML 15416 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\JSCRIPT.XML 13082 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MCE.CHM 28369 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_CATOC.XML 145 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_OITOC.XML 146 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_OLTOC.XML 391 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_PPTOC.XML 325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_WDTOC.XML 325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_XGTOC.XML 145 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_XLTOC.XML 325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MODHLPUI.DLL 12864 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MONTH1.PRT 1891 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MONTH2.PRT 1441 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSCAL32.DLL 219520 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.AW 185891 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.CHM 309756 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.XML 31652 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSEINTL.DLL 60472 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSETOC.XML 4835 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSO.ACL 37814 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOHELP.EXE 88632 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOHLP11.CHM 252772 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOWCWI.DLL 110592 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSPHELP.CHM 398443 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSQRY32.AW 77269 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSQRY32.CHM 513666 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSSCD32.DLL 189312 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSSPC32.DLL 1750904 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTINTL.DLL 143416 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTORE10.AW 116511 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTORE10.CHM 58182 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTRE32.DLL 44952 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSUSPINT.DLL 229444 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSWBCLNG.DLL 10816 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\NORMAL.FMT 1347 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OBALLOON.DLL 109120 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OCLTINT.DLL 121400 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OFFTEXT.TXT 2837 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OFREADME.HTM 9771 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISINTL.DLL 130616 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISMAIN.AW 195640 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISMAIN.CHM 126432 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISTOC.XML 11326 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLFM10.CHM 617456 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLFTOC.XML 70615 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLMAIN10.AW 1121096 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLMAIN11.CHM 1039207 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLREADME.HTM 13021 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLTOC.XML 168903 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OMFCSAT.DLL 64088 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTFORM.DAT 84480 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLBAR.INF 2412 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLLIBR.DLL 2979904 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLOOK.HOL 288826 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLWVW.DLL 274488 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OWHTOC.XML 8768 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPINTL.DLL 485944 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPMAIN10.AW 1060126 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPMAIN10.CHM 851716 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPREADME.HTM 2943 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPTOC.XML 163239 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPVWINTL.DLL 159808 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.DOC 25088 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.PPT 14336 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.XLS 15872 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.DOC 27136 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.PPT 14848 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.XLS 15872 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PSS10O.CHM 11142 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PSS10R.CHM 11378 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PVREADME.HTM 4189 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\QRYINT32.DLL 96832 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\QUIKANIM.PPT 282112 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SCHDPL32.EXE 190848 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\EEFINTL.DLL 39544 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\JSCRIPT5.CHM 507729 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOAUTUI.DLL 31296 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OFMAIN11.CHM 714555 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OWSHLP10.CHM 273580 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SETUP.CHM 272824 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAWD10.AW 2149167 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VEEN3.AW 243688 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SLINTL.DLL 134712 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\SPLTOC.XML 37981 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SRINTL.DLL 1178272 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\STSLIST.CHM 614107 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\STSLISTI.DLL 133696 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\STSUCRES.DLL 15424 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\TRIFOLD3.PRT 6399 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\UNBIND10.DLL 13376 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\USPANNTN.XML 177284 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\USPMETA.XML 19383 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAGR10.CHM 493272 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOF10.AW 454371 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOF11.CHM 714142 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOL10.AW 654379 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOL11.CHM 865598 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOWS10.CHM 266741 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAPP10.AW 895858 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAPP10.CHM 1169163 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAWD10.CHM 2760613 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAXL10.AW 1651132 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAXL10.CHM 1966342 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBCN.XML 12308 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBETOC.XML 350 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBHW.XML 7038 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBLR.XML 345750 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOB.XML 33106 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOFTOC.XML 104172 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOWSTOC.XML 9634 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSCRIP.XML 12362 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSCRIP5.CHM 495987 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSETOC.XML 426 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_GRTOC.XML 95740 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_OLTOC.XML 193794 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_PPTOC.XML 248994 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_WDTOC.XML 637834 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_XLTOC.XML 528846 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.MHT 2716 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.SWF 1964739 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDMAIN10.AW 1524248 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDMAIN11.CHM 1736028 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDREADME.HTM 2775 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDTOC.XML 240825 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDWPH10.CHM 165735 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK1.PRT 9785 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK2.PRT 7269 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK3.PRT 9839 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WORKFUNC.AW 549031 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WWASUM.DLL 61440 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\WWINTL.DLL 771640 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\XGTOC.XML 41115 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XL8GALRY.XLS 151552 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLADDIN.CHM 65425 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLATOC.XML 828 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLINTL32.DLL 707648 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMACRO.CHM 11264 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMAIN10.AW 1443704 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMAIN11.CHM 2536247 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLQTOC.XML 25912 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLREADME.HTM 18467 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLSLICER.DLL 154176 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLTOC.XML 262965 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XMLSDK.XML 516752 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1036\MSO.ACL 44744 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1036\WWASUM.DLL 147456 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\3082\MSO.ACL 45832 bytes
File C:\Program Files\Microsoft Office\OFFICE11\3082\WWASUM.DLL 548920 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\DLGSETP.ECF 623 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\DUMPSTER.ECF 808 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\FAXEXT.ECF 830 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSOSEC.DLL 7168 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSOSEC.XML 179 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSSPC.ECF 778 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSVCR71.DLL 344064 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OTKLOADR.DLL 77824 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTEX.ECF 1936 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTEX2.ECF 862 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTLVBA.DLL 45112 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\PMAILEXT.ECF 626 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\Redemption.ECF 475 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\SCRPTXTN.ECF 693 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART1.BDR 32246 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART10.BDR 9292 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART11.BDR 30920 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART12.BDR 58756 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART13.BDR 28368 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART14.BDR 51388 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART15.BDR 27412 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART2.BDR 47188 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART3.BDR 57646 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART4.BDR 14594 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART5.BDR 15788 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART6.BDR 55222 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART7.BDR 3876 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART8.BDR 49098 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART9.BDR 50838 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ACT3R.SAM 14392 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\DELIMR.FAE 11320 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\LOCALDV.DLL 33848 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ODBCR.SAM 12856 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLADDR.FAE 14904 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLAPPTR.FAE 12856 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLJRNLR.FAE 11320 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLMAILR.FAE 11320 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLNOTER.FAE 10808 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLR.SAM 12848 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLTASKR.FAE 11832 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ORG97R.SAM 13880 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\PABR.SAM 12344 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\SC2R.SAM 12344 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\SCHPLUSR.SAM 14400 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\TRANSMRR.DLL 14912 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ACT3.SAM 140856 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DELIMDOS.FAE 23616 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DELIMWIN.FAE 23616 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DESKSAM.SAM 17464 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ODBC.SAM 46136 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OL.SAM 88624 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLADD.FAE 157752 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLAPPT.FAE 151608 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLJRNL.FAE 117304 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLMAIL.FAE 112696 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLNOTE.FAE 103992 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLTASK.FAE 145976 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ORG97.SAM 37432 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\PAB.SAM 114224 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\RM.DLL 74288 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\SC2.SAM 111152 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\SCHPLUS.SAM 142392 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\TRANSMGR.DLL 99904 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOCL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RCLRPT.CFG 808 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESNS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITY.CFG 968 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPT.CFG 789 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFNOT.CFG 320 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFNOT.ICO 766 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFRES.CFG 338 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONFLICT.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACT.CFG 783 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLIST.CFG 805 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLSTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLSTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOC.CFG 765 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOCS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEM.CFG 838 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEML.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEMS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPM.CFG 795 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPML.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPMS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTE.CFG 781 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTEL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTES.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFTMPL.CFG 830 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POST.CFG 777 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTIT.CFG 777 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTITL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTITS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REC.CFG 1617 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RECL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RECS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTE.CFG 779 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTEL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTES.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPLTMPL.CFG 826 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORT.CFG 781 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESEND.CFG 779 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESENDL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESENDS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDCNCLL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDCNCLS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDREQL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDREQS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESNL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESPL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESPS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDCNCL.CFG 821 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDREQ.CFG 1199 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDRESN.CFG 835 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDRESP.CFG 833 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDREST.CFG 840 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECREC.CFG 664 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECRECL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECRECS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURE.CFG 647 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGN.CFG 664 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGNL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGNS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SMIMEE.CFG 640 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SMIMES.CFG 668 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASK.CFG 768 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACC.CFG 804 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACCL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACCS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDEC.CFG 807 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDECL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDECS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQ.CFG 797 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKUPD.CFG 806 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\context.html 1483 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxhelp_cls.gif 128 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxhelp_opn.gif 133 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxmsc_cls.gif 99 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxmsc_opn.gif 99 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxtrain_cls.gif 915 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxtrain_opn.gif 915 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxwiz_cls.gif 127 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxwiz_opn.gif 127 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\HTMLMARQ.OCX 81920 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\HTMLMM.OCX 110592 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CONTEXT.XML 615 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CSDEBUG.XML 166212 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CSENVIR.XML 231732 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\MSDNTRN.XML 180 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\OFFICE.XML 274823 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\DEF_CTX.XML 182 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\ANALYS32.XLL 186944 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\ATPVBAEN.XLA 376832 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\FUNCRES.XLA 77824 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\PROCDB.XLA 117248 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\EUROTOOL.XLA 638976 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\HTML.XLA 36352 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\LOOKUP.XLA 380416 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER\SOLVER.XLA 485888 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER\SOLVER32.DLL 84544 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\Library\SUMIF.XLA 366592 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MACROS\SUPPORT.DOT 243118 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\APPLAUSE.WAV 28074 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\ARROW.WAV 23030 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\BOMB.WAV 194166 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\BREEZE.WAV 4290 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CAMERA.WAV 5524 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CASHREG.WAV 7551 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CHIMES.WAV 37310 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CLICK.WAV 616 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\COIN.WAV 5564 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\DRUMROLL.WAV 19426 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\EXPLODE.WAV 23584 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\HAMMER.WAV 4028 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\LASER.WAV 1837 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\PUSH.WAV 15748 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\SUCTION.WAV 5732 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\TYPE.WAV 4636 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\VOLTAGE.WAV 13766 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\WHOOSH.WAV 1758 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\WIND.WAV 11140 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Migration\MIGRATE.DLL 15928 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Currency Rates.iqy 205 bytes
File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Major Indicies.iqy 321 bytes
File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Stock Quotes.iqy 307 bytes
File C:\Program Files\Microsoft Office\OFFICE11\SAMPLES\SOLVSAMP.XLS 118784 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CMDDEFUI.DLL 192512 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\compsvcspkgui.dll 8704 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CSSMetaData.xml 14571 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CSSPKGUI.DLL 40960 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\DISCO.XSL 4679 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\EMPTY.HTM 500 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\HelpWatermark.htm 1643 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\htmdlgsUI.dll 22528 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\HTMEDUI.DLL 143360 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\MSDBGUI.DLL 16384 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\MSENVUI.DLL 204800 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\VisualStudioTeamCoreUI.dll 12800 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\vsbrowseUI.dll 32768 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\vsdebugui.dll 86016 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\ATL70.DLL 64512 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CMDDEF.DLL 36864 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\Compsvcspkg.dll 106496 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CSSMetaDataSchema.xml 2181 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CSSPKG.DLL 200704 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\DISCO.GIF 234 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\HTMDLGS.DLL 126976 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\HTMED.DLL 909312 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSENV.DLL 3035136 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSVCP70.DLL 487424 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSVCR70.DLL 344064 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMA.GIF 232 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTM32DOM.TLB 17828 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTM40DOM.TLB 731688 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTML32.XSD 79259 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTML40.XSD 177943 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\NSC40DOM.TLB 23244 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\NSCP40.XSD 108380 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\adrotator.xsd 1465 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\ASP.XSD 70215 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\WSHMETA.XSD 2481 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\xsdschema.xsd 15876 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\scriptle2.dll 122880 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SDM2.DLL 143360 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SERVICE.GIF 256 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\TRIDSN.DLL 311296 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VisualStudioTeamCore.dll 356352 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSBROWSE.DLL 212992 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSDEBUG.DLL 589824 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSTLBINF.DLL 224256 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\XLATORS\PP4X322.DLL 430136 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\XLATORS\PP7X32.DLL 93752 bytes executable
File C:\Program Files\Microsoft Office\Office12\1033 0 bytes
File C:\Program Files\Microsoft Office\Office12\1033\PPINTL.DLL 925488 bytes executable
File C:\Program Files\Microsoft Office\Office12\1033\PPVWINTL.DLL 337728 bytes executable
File C:\Program Files\Microsoft Office\Office12\1033\PROTTPLN.PPT 12288 bytes
File C:\Program Files\Microsoft Office\Office12\1033\PROTTPLV.PPT 12288 bytes
File C:\Program Files\Microsoft Office\Office12\1033\PVREADME.HTM 4444 bytes
File C:\Program Files\Microsoft Office\Office12\INTLDATE.DLL 78648 bytes executable
File C:\Program Files\Microsoft Office\Office12\OART.DLL 14151456 bytes executable
File C:\Program Files\Microsoft Office\Office12\OARTCONV.DLL 8423224 bytes executable
File C:\Program Files\Microsoft Office\Office12\PPCNV.DLL 1764112 bytes executable
File C:\Program Files\Microsoft Office\Office12\PPCNVCOM.EXE 67920 bytes
File C:\Program Files\Microsoft Office\Office12\PPCNVPXY.DLL 17680 bytes executable
File C:\Program Files\Microsoft Office\Office12\PPCPRTID.XML 79772 bytes
File C:\Program Files\Microsoft Office\Office12\PPTVIEW.EXE 2012480 bytes executable
File C:\Program Files\Microsoft Office\Office12\pptview.exe.manifest 804 bytes
File C:\Program Files\Microsoft Office\Office12\SAEXT.DLL 291128 bytes
File C:\Program Files\Microsoft Office\PowerPoint Viewer\GDIPLUS.DLL 1773568 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\INTLDATE.DLL 64064 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE 1782840 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\PPVWINTL.DLL 159808 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\PVREADME.HTM 4189 bytes
File C:\Program Files\Microsoft Office\PowerPoint Viewer\SAEXT.DLL 211512 bytes
File C:\Program Files\Microsoft Office\PowerPoint Viewer\UNICOWS.DLL 246424 bytes executable
File C:\Program Files\Microsoft Office\Stationery\1033 0 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.GIF 5999 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.HTM 548 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.GIF 46 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.HTM 483 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.GIF 3382 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM 507 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.GIF 4039 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.HTM 513 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM 493 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.JPG 2950 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.GIF 4610 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.HTM 469 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.GIF 1115 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM 476 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.HTM 489 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.JPG 3981 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.HTM 509 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.JPG 6281 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.GIF 2074 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.HTM 474 bytes
File C:\Program Files\Microsoft Office\Templates\1033 0 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Agenda Wizard.Wiz 409681 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Balance Sheet.xlt 22016 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Batch Conversion Wizard.Wiz 264251 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Brainstorming Session.pot 63488 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Brochure.dot 104319 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Business Plan.pot 72192 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Calendar Wizard.Wiz 402695 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Certificate.pot 54784 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Company Handbook.pot 72192 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Company Meeting.pot 166400 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Fax.dot 98765 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Letter.dot 81166 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Memo.dot 74725 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Report.dot 138954 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Resume.dot 87969 bytes
File C:\Program Files\Microsoft Office\Templates\1033\CONTMADR.DOT 70380 bytes
File C:\Program Files\Microsoft Office\Templates\1033\CONTMFAX.DOT 85827 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Directory.dot 65778 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Fax.dot 91545 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Letter.dot 66986 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Memo.dot 58432 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Report.dot 95027 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Resume.dot 98202 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ELEGMADR.DOT 68148 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ELEGMFAX.DOT 82073 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ELEGMLTR.DOT 63126 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Employee Orientation.pot 169472 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ExpenseStatement.xlt 28672 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX 0 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX\Business Fax.dot 40960 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX\Personal Fax.dot 69120 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX\Standard Fax.dot 38400 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Fax Wizard.wiz 595049 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Financial Overview.pot 118784 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Generic.pot 41472 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Group Home Page.pot 87552 bytes
File C:\Program Files\Microsoft Office\Templates\1033\LABEL.WIZ 97088 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Letter Wizard.wiz 103029 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Loan Amortization.xlt 140800 bytes
File C:\Program Files\Microsoft Office\Templates\1033\MAIL.OFT 12288 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Manual.dot 107210 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Memo Wizard.wiz 438872 bytes
File C:\Program Files\Microsoft Office\Templates\1033\MERGELTR.DOT 58708 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Pleading Wizard.wiz 732950 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PLEADSUB.WIZ 308624 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Products And Services Overview.pot 69632 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Fax.dot 94231 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Letter.dot 76670 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Memo.dot 75821 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Report.dot 116992 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Resume.dot 77519 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PROFMADR.DOT 69759 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PROFMFAX.DOT 86389 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PROFMLTR.DOT 62437 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Project Overview.pot 69632 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Project Post-Mortem.pot 61440 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Recommending A Strategy.pot 41984 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Reporting Progress or Status.pot 88064 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Resume Wizard.wiz 456741 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Sales Invoice.xlt 27648 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Selling a Product or Service.pot 87040 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Thesis.dot 85337 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Timecard.xlt 24576 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Training.pot 74240 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Communicating Bad News.pot 68608 bytes
File C:\Program Files\Microsoft Office\Templates\1033\CONTMLTR.DOT 72710 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Envelope Wizard.wiz 89380 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Marketing Plan.pot 81920 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems 0 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\HTMLPAGE.HTM 227 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\NewFileItems.vsdir 166 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\TEXTFILE.TXT 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Echo.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Axis.pot 25600 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Balance.pot 65536 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Balloons.pot 49152 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Beam.pot 107008 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Blends.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Capsules.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Cascade.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Cliff.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Clouds.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Compass.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Competition.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Crayons.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Curtain Call.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Digital Dots.pot 0 bytes
---- EOF - GMER 1.0.15 ----
"";"The file is signed with a broken digital signature, issued by: Microsoft Corporation., D:\I386\Apps\APP03978\src\INSNTMSI.EXE";"Infected"
and
"";"The file is signed with a broken digital signature, issued by: Microsoft Corporation., D:\I386\Apps\APP08668\src\3rdPartyApp\HHUPD.EXE";"Infected"
Any ideas? Are these files dangerous to my system? What can I do to get a clean scan from AVG? Below are the requested logs. Thanks in advanced.
MJ
____________________
HijackThis Log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:56:16 PM, on 11/4/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
C:\Program Files\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\AVG\AVG2013\avgidsagent.exe
C:\Program Files\AVG\AVG2013\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\AVG\AVG2013\avgnsx.exe
C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Belkin\F5D8053v4\BelkinWCUI.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\My Documents\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...ion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
R3 - URLSearchHook: YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [EKIJ5000StatusMonitor] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [ROC_ROC_JULY_P1] "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.ancientegypt.co.uk/gods/activity/act_main.html"
O4 - HKUS\S-1-5-18\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Belkin Wireless Networking Utility.lnk = ?
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://global.fb.gamehouse.com
O15 - Trusted Zone: http://sp.mypoints.com
O15 - Trusted Zone: http://*.trymedia.com (HKLM)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} (PogoWebLauncher Control) - http://www.pogo.com/cdl/launcher/Pog...rInstaller.CAB
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} (FBootloaderAX) - http://www.facebook.com/fbplugin/win...?1265478227796
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - https://www.microsoft.com/resources/...veXClient1.cab
O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://www.worldwinner.com/games/v47.../blockwerx.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1247663275687
O16 - DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} (SpinTop Games Launcher) - http://clubgames.pogo.com/online2/po...esLauncher.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://clubgames.pogo.com/online2/po...jolauncher.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://picture.vzw.com/activex/Veriz...oadControl.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} (WorldWinner ActiveX Launcher Control) - http://www.worldwinner.com/games/lau...0/iewwload.cab
O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://www.worldwinner.com/games/v64/swapit/swapit.cab
O16 - DPF: {B12213CD-4189-415D-A054-7999528459F7} (pixelStormLauncher Class) - http://aolsvc.aol.com/onlinegames/tr...rmlauncher.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/fr...ylomplayer.cab
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} (Java Plug-in 1.6.0_26) -
O16 - DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} (FamilyFeud Control) - http://www.worldwinner.com/games/v47...familyfeud.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://bestbuy.oberon-media.com/Game...onGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...nt/swflash.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://www.iwin.com/global/premium/s...utLauncher.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://download.games.yahoo.com/game...nematycoon.cab
O16 - DPF: {DBA8E419-0D5F-439B-A3CC-D01C768D9B51} (DVCDownloaderControl Object) - http://aolsvc.aol.com/onlinegames/so...derControl.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://clubgames.pogo.com/online2/po...der_v10_en.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E7DA7F8D-27AB-4EE9-8FC0-3FEC9ECFE758} (DynamicWebTwain Class) - https://www.humanservices.state.pa.u...icWebTWAIN.cab
O16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) - http://clubgames.pogo.com/online2/po...meLauncher.cab
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll
O18 - Filter hijack: text/html - {673efdc8-3b7c-442e-8be6-2c990883abd8} - (no file)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo System Service (ioloSystemService) - iolo technologies, LLC - C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Kodak AiO Status Monitor Service - Eastman Kodak Company - C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
O23 - Service: Seagate Dashboard Service (SeagateDashboardService) - Memeo - C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
O23 - Service: vToolbarUpdater12.2.6 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
--
End of file - 15685 bytes
__________________________________________________________
dds.scr Log:
DDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.9.2
Run by HP_Administrator at 15:57:14 on 2012-11-04
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.173 [GMT -5:00]
.
AV: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Norton Internet Security *Enabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *Enabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Belkin\F5D8053v4\BelkinWCUI.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://my.yahoo.com
uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uProxyServer = :0
mSearchAssistant = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
uURLSearchHooks: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn6\yt.dll
uURLSearchHooks: YTNavAssistPlugin Class: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - c:\program files\yahoo!\companion\installs\cpn6\yt.dll
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: rsion - <orphaned>
BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - <orphaned>
BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\12.2.5.32\AVG Secure Search_toolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: &Google: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
TB: Norton AntiVirus: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\program files\norton internet security\norton antivirus\NAVSHEXT.DLL
TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>
TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\12.2.5.32\AVG Secure Search_toolbar.dll
EB: &Yahoo! Messenger: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\common\yhexbmesus.dll
EB: &Yahoo! Messenger: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\common\yhexbmesus.dll
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
uRun: [Google Update] "c:\documents and settings\hp_administrator\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.ancientegypt.co.uk/gods/activity/act_main.html"
mRun: [WinPatrol] c:\program files\billp studios\winpatrol\WinPatrol.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [EKIJ5000StatusMonitor] c:\windows\system32\spool\drivers\w32x86\3\EKIJ5000MUI.exe
mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
mRun: [ROC_ROC_JULY_P1] "c:\program files\avg secure search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
mRun: [AVG_UI] "c:\program files\avg\avg2013\avgui.exe" /TRAYONLY
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [Conime] c:\windows\system32\conime.exe
dRunOnce: [KodakHomeCenter] "c:\program files\kodak\aio\center\AiOHomeCenter.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\belkin~1.lnk - c:\program files\belkin\f5d8053v4\BelkinWCUI.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:149
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: &Yahoo! Search - /c:\program files\yahoo!\Common/ycsrch.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
IE: Yahoo! &Dictionary - /c:\program files\yahoo!\Common/ycdict.htm
IE: Yahoo! &Maps - /c:\program files\yahoo!\Common/ycmap.htm
IE: Yahoo! &SMS - /c:\program files\yahoo!\Common/ycsms.htm
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper200711281.dll
DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} - hxxp://www.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://www.facebook.com/fbplugin/win32/axfbootloader.cab?1265478227796
DPF: {49232000-16E4-426C-A231-62846947304B} - hxxp://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} - hxxps://www.microsoft.com/resources/virtuallabs/ActiveX/VMRCActiveXClient1.cab
DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} - hxxp://www.worldwinner.com/games/v47/blockwerx/blockwerx.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1247663275687
DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} - hxxp://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient_japan/SpinTopGamesLauncher.cab
DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} - hxxp://clubgames.pogo.com/online2/pogop/chainz_2/mjolauncher.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} - hxxp://picture.vzw.com/activex/VerizonWirelessUploadControl.cab
DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} - hxxp://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} - hxxp://www.worldwinner.com/games/v64/swapit/swapit.cab
DPF: {B12213CD-4189-415D-A054-7999528459F7} - hxxp://aolsvc.aol.com/onlinegames/tryrumblecube/pixelstormlauncher.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://aolsvc.aol.com/onlinegames/free-trial-lotus-deluxe/zylomplayer.cab
DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} - hxxp://www.worldwinner.com/games/v47/familyfeud/familyfeud.cab
DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} - hxxp://bestbuy.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} - hxxp://www.iwin.com/global/premium/sprout/feedingfrenzy/SproutLauncher.cab
DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} - hxxp://download.games.yahoo.com/games/web_games/tikgames/cinematycoon/cinematycoon.cab
DPF: {DBA8E419-0D5F-439B-A3CC-D01C768D9B51} - hxxp://aolsvc.aol.com/onlinegames/sonydavincicode/DVCDownloaderControl.cab
DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://clubgames.pogo.com/online2/pogop/peggle/popcaploader_v10_en.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E7DA7F8D-27AB-4EE9-8FC0-3FEC9ECFE758} - hxxps://www.humanservices.state.pa.us/COMPASS.RiaClient/ASDScan/DynamicWebTWAIN.cab
DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} - hxxp://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient/PTGameLauncher.cab
TCP: NameServer = 192.168.2.1
TCP: Interfaces\{892900FC-9814-4488-99C0-81491C1EE93D} : DHCPNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
TCP: Interfaces\{D137D82B-62A8-473B-B292-5AFA2D350702} : DHCPNameServer = 192.168.2.1
Filter: text/html - {673efdc8-3b7c-442e-8be6-2c990883abd8} - <orphaned>
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\12.2.6\ViProtocol.dll
Notify: AtiExtEvent - Ati2evxx.dll
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\hp_administrator\application data\mozilla\firefox\profiles\cfbmbl48.default\
FF - prefs.js: browser.search.selectedEngine - Search the web (Babylon)
FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/?affID=44444&tt=120912_cpc_3712_6&babsrc=HP_ss&mntrId=c83fcb770000000000000 01cdf6a6416
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=44444&tt=120912_cpc_3712_6&babsrc=KW_ss&mntrId=c83fcb770000000000000 01cdf6a6416&q=
FF - component: c:\program files\mozilla firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.BabylonToolbar.autoRvrt - false
FF - user.js: extensions.BabylonToolbar_i.newTab - false
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=c83fcb77000000000000001cdf6a6416&q=
FF - user.js: extensions.BabylonToolbar.id - c83fcb77000000000000001cdf6a6416
FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}
FF - user.js: extensions.BabylonToolbar.instlDay - 15596
FF - user.js: extensions.BabylonToolbar.vrsn - 1.6.9.12
FF - user.js: extensions.BabylonToolbar.vrsni - 1.6.9.12
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.6.9.1219:56:39
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.admin - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=44444&tt=120912_cpc_3712_6
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-9-21 55008]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2012-9-21 177376]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-3-1 93536]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-3-16 35552]
R0 MrFilter;EasyWrite Driver;c:\windows\system32\drivers\MRFilter.sys [2006-2-26 12384]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2012-9-13 177504]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2012-9-21 19936]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-1-7 159712]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-4-4 164832]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-9-3 27496]
R1 SAVRTPEL;SAVRTPEL;c:\program files\norton internet security\norton antivirus\SAVRTPEL.SYS [2005-2-4 53896]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2013\avgidsagent.exe [2012-10-2 5783672]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2013\avgwdsvc.exe [2012-10-2 193568]
R2 ioloSystemService;iolo System Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2012-10-29 1028464]
R2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files\kodak\aio\statusmonitor\EKPrinterSDK.exe [2012-6-19 777728]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\memeo\autobackup\MemeoBackgroundService.exe [2010-4-22 25824]
R2 PDFsFilter;PDFsFilter;c:\windows\system32\drivers\PDFsFilter.sys [2012-10-29 68464]
R2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\seagate\seagate dashboard\SeagateDashboardService.exe [2010-4-30 14088]
R2 vToolbarUpdater12.2.6;vToolbarUpdater12.2.6;c:\program files\common files\avg secure search\vtoolbarupdater\12.2.6\ToolbarUpdater.exe [2012-9-3 722528]
R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [2009-7-11 517632]
S0 bfpoxrco;bfpoxrco;c:\windows\system32\drivers\dqcgqe.sys --> c:\windows\system32\drivers\dqcgqe.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-10-23 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-9-10 250808]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-10-23 136176]
S3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20060426.019\NAVENG.Sy s [2006-4-26 77864]
S3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20060426.019\NavEx15 .Sys [2006-4-26 799208]
S3 P1130VID;Creative WebCam NX Pro;c:\windows\system32\drivers\P1130Vid.sys [2006-2-27 90357]
S3 SAVRT;SAVRT;c:\program files\norton internet security\norton antivirus\SAVRT.SYS [2005-2-4 334984]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\iobit\game booster 3\driver\WinRing0.sys [2012-10-29 14416]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v040 0.exe [2010-3-18 753504]
S4 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\CCEVTMGR.EXE [2005-3-4 186016]
S4 ccProxy;Symantec Network Proxy;c:\program files\common files\symantec shared\CCPROXY.EXE [2005-3-4 239216]
S4 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\CCSETMGR.EXE [2005-3-4 177824]
S4 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2010-1-20 266240]
S4 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\kodak\aio\center\EKAiOHostService.exe [2012-6-18 394712]
S4 navapsvc;Norton AntiVirus Auto-Protect Service;c:\program files\norton internet security\norton antivirus\NAVAPSVC.EXE [2005-3-24 128112]
S4 SAVScan;SAVScan;c:\program files\norton internet security\norton antivirus\SAVSCAN.EXE [2005-2-17 198368]
.
=============== File Associations ===============
.
FileExt: .txt: Applications\WINWORD.EXE="c:\program files\microsoft office\office11\WINWORD.EXE" /n /dde [UserChoice] [default=edit - 'Open' doesn't exist]
ShellExec: MediaConverter.exe: open="c:\program files\sandisk\sansa media converter\uMediaConverter.exe" "%1"
.
=============== Created Last 30 ================
.
2012-10-30 22:13:01 516096 ------w- c:\windows\system32\ati2sgag.exe
2012-10-29 21:27:43 511328 ----a-w- c:\program files\common files\microsoft shared\capicom\CAPICOM.DLL
2012-10-29 21:27:40 2097032 ----a-w- c:\windows\system32\Incinerator32.dll
2012-10-29 21:27:38 68464 ----a-w- c:\windows\system32\drivers\PDFsFilter.sys
2012-10-29 21:27:38 56200 ----a-w- c:\windows\system32\offreg.dll
2012-10-29 21:27:38 41176 ----a-w- c:\windows\system32\iolobtdfg.exe
2012-10-29 21:27:38 23128 ----a-w- c:\windows\system32\smrgdf.exe
2012-10-29 21:27:36 -------- d-----w- c:\program files\iolo
2012-10-29 21:23:48 74703 ----a-w- c:\windows\system32\mfc45.dat
2012-10-29 21:23:46 -------- d-----w- c:\documents and settings\hp_administrator\application data\iolo
2012-10-29 21:23:46 -------- d-----w- c:\documents and settings\all users\application data\iolo
2012-10-29 21:16:19 -------- d-----w- c:\program files\IObit
2012-10-29 21:16:19 -------- d-----w- c:\documents and settings\all users\application data\IObit
2012-10-29 20:11:14 -------- d-----w- c:\documents and settings\hp_administrator\application data\AVG2013
2012-10-29 20:07:55 -------- d-----w- c:\documents and settings\hp_administrator\application data\TuneUp Software
2012-10-29 20:03:28 -------- d-----w- c:\documents and settings\all users\application data\AVG2013
2012-10-29 20:00:43 -------- d-----w- c:\documents and settings\hp_administrator\local settings\application data\MFAData
2012-10-29 20:00:43 -------- d-----w- c:\documents and settings\hp_administrator\local settings\application data\Avg2013
2012-10-29 02:10:12 -------- d-----w- c:\program files\Northern Tale
2012-10-25 02:41:56 -------- d-----w- c:\documents and settings\hp_administrator\application data\northern_tale_bfg_en
2012-10-20 21:52:11 -------- d-----w- c:\documents and settings\hp_administrator\application data\Islands
2012-10-20 20:41:16 -------- d-----w- c:\documents and settings\hp_administrator\application data\Boolat Games
2012-10-20 13:18:48 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
.
==================== Find3M ====================
.
2012-10-20 13:18:27 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-20 13:18:27 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-20 13:18:27 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-10-09 00:08:54 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 00:08:53 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-02 07:30:38 159712 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2012-09-29 23:54:26 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-21 07:46:06 164832 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2012-09-21 07:46:00 177376 ----a-w- c:\windows\system32\drivers\avglogx.sys
2012-09-21 07:45:54 19936 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
2012-09-21 07:45:52 55008 ----a-w- c:\windows\system32\drivers\avgidshx.sys
2012-09-14 07:05:20 35552 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2012-09-13 07:11:20 177504 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
2012-09-04 02:59:21 27496 ----a-w- c:\windows\system32\drivers\avgtpx86.sys
2012-08-28 15:14:53 916992 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:14:53 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:14:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07:15 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:53:22 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-21 13:33:26 2148864 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-21 12:58:09 2027520 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-07-13 01:10:45 774144 ----a-w- c:\program files\RngInterstitial.dll
.
============= FINISH: 15:58:49.50 =
_____________________________________________________________________
Attach txt log
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-10-19.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 2/26/2006 4:37:27 PM
System Uptime: 11/3/2012 3:15:18 PM (24 hours ago)
.
Motherboard: ASUSTek Computer INC. | | Amberine M
Processor: AMD Athlon(tm) 64 Processor 3700+ | Socket 939 | 2188/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 178 GiB total, 76.153 GiB free.
D: is FIXED (FAT32) - 9 GiB total, 1.218 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is FIXED (NTFS) - 932 GiB total, 880.054 GiB free.
K: is Removable
L: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\8E746F11D800
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\8E746F11D800
Service: NIC1394
.
==== System Restore Points ===================
.
RP2160: 8/7/2012 1:24:12 PM - System Checkpoint
RP2161: 8/8/2012 2:24:20 PM - System Checkpoint
RP2162: 8/9/2012 3:23:59 PM - System Checkpoint
RP2163: 8/10/2012 4:25:00 PM - System Checkpoint
RP2164: 8/11/2012 5:24:04 PM - System Checkpoint
RP2165: 8/12/2012 11:47:58 PM - System Checkpoint
RP2166: 8/14/2012 12:23:58 AM - System Checkpoint
RP2167: 8/15/2012 12:00:22 AM - Software Distribution Service 3.0
RP2168: 8/16/2012 12:35:13 AM - System Checkpoint
RP2169: 8/17/2012 1:35:10 AM - System Checkpoint
RP2170: 8/18/2012 2:47:06 AM - System Checkpoint
RP2171: 8/19/2012 3:35:08 AM - System Checkpoint
RP2172: 8/20/2012 4:55:39 PM - System Checkpoint
RP2173: 8/21/2012 7:00:32 PM - System Checkpoint
RP2174: 8/22/2012 10:20:59 PM - System Checkpoint
RP2175: 8/23/2012 11:25:16 PM - System Checkpoint
RP2176: 8/25/2012 1:19:31 AM - System Checkpoint
RP2177: 8/26/2012 1:58:47 AM - System Checkpoint
RP2178: 8/27/2012 1:58:57 AM - System Checkpoint
RP2179: 8/28/2012 3:11:03 AM - System Checkpoint
RP2180: 8/29/2012 3:58:58 AM - System Checkpoint
RP2181: 8/30/2012 4:59:00 AM - System Checkpoint
RP2182: 8/31/2012 5:58:32 AM - System Checkpoint
RP2183: 9/1/2012 5:58:41 AM - System Checkpoint
RP2184: 9/2/2012 6:58:29 AM - System Checkpoint
RP2185: 9/3/2012 7:58:32 AM - System Checkpoint
RP2186: 9/4/2012 8:58:15 AM - System Checkpoint
RP2187: 9/5/2012 9:58:19 AM - System Checkpoint
RP2188: 9/6/2012 10:58:27 AM - System Checkpoint
RP2189: 9/8/2012 1:06:55 AM - System Checkpoint
RP2190: 9/9/2012 1:38:28 AM - System Checkpoint
RP2191: 9/10/2012 1:54:33 AM - System Checkpoint
RP2192: 9/11/2012 4:04:27 AM - System Checkpoint
RP2193: 9/12/2012 4:08:24 AM - System Checkpoint
RP2194: 9/13/2012 12:00:17 AM - Software Distribution Service 3.0
RP2195: 9/13/2012 8:10:35 PM - Removed BabylonObjectInstaller
RP2196: 9/14/2012 10:55:53 PM - System Checkpoint
RP2197: 9/15/2012 11:22:33 PM - System Checkpoint
RP2198: 9/17/2012 12:27:24 AM - System Checkpoint
RP2199: 9/18/2012 1:22:27 AM - System Checkpoint
RP2200: 9/19/2012 2:58:52 AM - System Checkpoint
RP2201: 9/20/2012 4:22:29 AM - System Checkpoint
RP2202: 9/21/2012 4:30:56 AM - System Checkpoint
RP2203: 9/22/2012 4:35:15 AM - System Checkpoint
RP2204: 9/23/2012 12:00:25 AM - Software Distribution Service 3.0
RP2205: 9/24/2012 12:24:49 AM - System Checkpoint
RP2206: 9/25/2012 1:24:46 AM - System Checkpoint
RP2207: 9/26/2012 1:37:39 AM - System Checkpoint
RP2208: 9/27/2012 2:48:45 AM - System Checkpoint
RP2209: 9/28/2012 3:37:18 AM - System Checkpoint
RP2210: 9/29/2012 4:24:50 AM - System Checkpoint
RP2211: 9/30/2012 4:39:22 AM - System Checkpoint
RP2212: 10/1/2012 5:50:26 AM - System Checkpoint
RP2213: 10/2/2012 6:24:58 AM - System Checkpoint
RP2214: 10/3/2012 7:25:01 AM - System Checkpoint
RP2215: 10/4/2012 8:25:10 AM - System Checkpoint
RP2216: 10/5/2012 9:25:08 AM - System Checkpoint
RP2217: 10/6/2012 10:25:10 AM - System Checkpoint
RP2218: 10/7/2012 10:52:42 AM - System Checkpoint
RP2219: 10/8/2012 4:23:16 PM - System Checkpoint
RP2220: 10/9/2012 4:23:50 PM - System Checkpoint
RP2221: 10/10/2012 11:37:15 PM - System Checkpoint
RP2222: 10/11/2012 12:00:26 AM - Software Distribution Service 3.0
RP2223: 10/12/2012 12:36:37 AM - System Checkpoint
RP2224: 10/13/2012 1:34:34 AM - System Checkpoint
RP2225: 10/14/2012 1:36:06 AM - System Checkpoint
RP2226: 10/15/2012 4:36:02 AM - System Checkpoint
RP2227: 10/16/2012 5:36:09 AM - System Checkpoint
RP2228: 10/17/2012 6:35:14 AM - System Checkpoint
RP2229: 10/18/2012 6:36:11 AM - System Checkpoint
RP2230: 10/19/2012 7:36:00 AM - System Checkpoint
RP2231: 10/20/2012 7:48:33 AM - System Checkpoint
RP2232: 10/20/2012 9:17:30 AM - Removed Java(TM) 7 Update 4
RP2233: 10/20/2012 9:18:18 AM - Installed Java 7 Update 9
RP2234: 10/21/2012 11:52:45 PM - System Checkpoint
RP2235: 10/23/2012 12:36:24 AM - System Checkpoint
RP2236: 10/24/2012 12:37:04 AM - System Checkpoint
RP2237: 10/25/2012 12:50:43 AM - System Checkpoint
RP2238: 10/26/2012 1:37:10 AM - System Checkpoint
RP2239: 10/27/2012 2:49:10 AM - System Checkpoint
RP2240: 10/28/2012 4:31:42 AM - System Checkpoint
RP2241: 10/29/2012 5:28:29 AM - System Checkpoint
RP2242: 10/29/2012 4:02:58 PM - Installed AVG 2013
RP2243: 10/29/2012 4:03:12 PM - Removed AVG 2011
RP2244: 10/29/2012 4:04:09 PM - Installed AVG 2013
RP2245: 10/29/2012 4:10:04 PM - Removed AVG 2011
RP2246: 11/3/2012 1:03:41 AM - System Checkpoint
RP2247: 11/4/2012 12:44:06 AM - System Checkpoint
.
==== Installed Programs ======================
.
Acrobat.com
Adobe Acrobat 5.0
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Reader 9.4.5
Adobe Shockwave Player 11.5
AiO_Scan
AiO_Scan_CDA
aioprnt
aioscnnr
AiOSoftware
AiOSoftwareNPI
Amazon MP3 Uploader
AQUAZONE "Jellies, Turtles, & More... Collection"
ArcSoft Panorama Maker 4
ArcSoft Software Suite
ArtistScope Plugin IE
ATI Control Panel
ATI Display Driver
Audacity 2.0
AVG 2013
Azada® : In Libro Collector's Edition
Belkin N Wireless USB Adapter Setup
Big Fish Games: Game Manager
Bonjour
BufferChm
C4USelfUpdater
CameraDrivers
CC_ccProxyExt
ccCommon
CCleaner (remove only)
ccPxyCore
center
Changes
Chasys Draw IES 3.66.02
Collapse! Crunch
Comcast High-Speed Internet Install Wizard
CP_AtenaShokunin1Config
CP_CalendarTemplates1
cp_LightScribeConfig
cp_LightScribePlugin
CP_Package_Basic1
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CP_Panorama1Config
Create
Creative PC-CAM Center
Creative WebCam Monitor
Creative WebCam NX Pro Driver (1.00.06.0512)
Creative WebCam NX Pro User's Guide (English)
CueTour
Customer Experience Enhancement
Dark Parables: Curse of Briar Rose Collector's Edition
Dark Parables: Rise of the Snow Queen Collector's Edition
Dark Parables: The Exiled Prince
Dark Parables: The Exiled Prince Collector's Edition
Data Fax SoftModem with SmartCP
Destinations
DeviceManagementQFolder
Diner Dash Family Style
Diner Dash Hometown Hero - Gourmet
Discord Times
DISCover
DocProc
DocumentViewer
DocumentViewerQFolder
Drawn ®: Dark Flight Collector's Edition
Drawn®: The Painted Tower
Drawn: Trail of Shadows Collector's Edition
Enchanted Cavern
essentials
Express Burn
Facebook Plug-In
FATE
FATE - The Traitor Soul
FATE from HP Media Center (remove only)
Fax
Fax_CDA
FaxTools
Fiction Fixers - Adventures in Wonderland
File Uploader
Fishdom
Floating Kingdoms
FotoMix version 8.5.6
Funny Faces
Game Booster 3
getPlus(R)_ocx
GIMP 2.8.0
Google Chrome
Google Earth Plug-in
Google Toolbar for Internet Explorer
Google Update Helper
greenstreet Picture Browser
Hallmark Smilebox
Hamlet
Haunted Manor: Lord of Mirrors
High Definition Audio Driver Package - KB888111
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB2633952)
Hotfix for Windows XP (KB2756822)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Boot Optimizer
HP Deskjet Printer Preload
HP DigitalMedia Archive
HP Document Viewer 5.3
HP Game Console and games
HP Image Zone 5.3
HP Imaging Device Functions 5.3
HP Multimedia Keyboard Software
HP Photosmart 330,380,420,470,7800,8000,8200 Series
HP Photosmart Cameras 5.0
HP PSC & OfficeJet 5.3.A
HP PSC & OfficeJet 5.3.B
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
HPProductAssistant
HpSdpAppCoreApp
InstantShareDevices
InterActual Player
InterVideo WinDVD Player
iolo technologies' System Mechanic
Island Tribe
J2SE Runtime Environment 5.0 Update 5
Java 7 Update 9
Java Auto Updater
Java(TM) 6 Update 30
JavaFX 2.1.1
Jigsaw World
Kingdom Chronicles Collector's Edition
Kodak AIO Printer
KODAK AiO Software
Kuros
LightScribe 1.4.52.1
Logitech SetPoint
Lottso! Deluxe
LUMIX Simple Viewer
Magic Life
Mahjong Garden Deluxe
Malwarebytes Anti-Malware version 1.65.1.1000
Memeo Instant Backup
Microsoft .NET Framework 1.0 Hotfix (KB2572066)
Microsoft .NET Framework 1.0 Hotfix (KB2604042)
Microsoft .NET Framework 1.0 Hotfix (KB2656378)
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2656353)
Microsoft .NET Framework 1.1 Security Update (KB2656370)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Away Mode
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2005
Microsoft National Language Support Downlevel APIs
Microsoft Office Basic Edition 2003
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Standard Edition 2003
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Works
Move Media Player
Mozilla Firefox (2.0.0.1)
MSRedist
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser
muvee autoProducer 4.5
muvee autoProducer unPlugged 1.2
My Kingdom for the Princess II
My Kingdom for the Princess III
MyDSC2
Mystery Case Files - Huntsville (remove only)
Mystery Case Files - Prime Suspects (remove only)
Mystery Case Files - Ravenhearst (remove only)
Mystery Case Files ®: 13th Skull
Mystery Case Files®: Dire Grove
Mystery Case Files: Madame Fate (remove only)
Mystery Case Files: Return to Ravenhearst
Nancy Drew Dossier: Lights, Camera, Curses!
Nancy Drew Dossier: Resorting to Danger
Nancy Drew Phantom of Venice
Nancy Drew: Danger by Design
Nancy Drew: Danger on Deception Island
Nancy Drew: Ghost Dogs of Moon Lake
Nancy Drew: Last Train to Blue Moon Canyon
Nancy Drew: Legend of the Crystal Skull
Nancy Drew: Ransom of the Seven Ships
Nancy Drew: Secret of Shadow Ranch
Nancy Drew: Secret of the Old Clock
Nancy Drew: Secret of the Scarlet Hand
Nancy Drew: Secrets Can Kill REMASTERED
Nancy Drew: The Captive Curse
Nancy Drew: The Creature of Kapu Cave
Nancy Drew: The Curse of Blackmoor Manor
Nancy Drew: The Final Scene
Nancy Drew: The Haunted Carousel
Nancy Drew: The Haunting of Castle Malloy
Nancy Drew: Trail of the Twister
Nancy Drew: Treasure in the Royal Tower
Nancy Drew: Warnings at Waverly Academy
Netscape Browser (remove only)
New Yankee in King Arthur's Court
NewCopy
NewCopy_CDA
Nikon Message Center
Nikon Transfer
Northern Tale
Norton AntiSpam
Norton AntiVirus 2005
Norton Internet Security
Norton WMI Update
ocr
OpenAL
Operation Mania
Otto
PanoStandAlone
PC-Doctor 5 for Windows
Photo Pos Pro
PhotoGallery
PhotoPad Image Editor
PhotoStage Slideshow Producer
Picture Control Utility
Pixia
Plants vs. Zombies
PreReq
PS2
PSPrinters08
PSTAPlugin
Puzzle Park
Quicken 2006
QuickTime
RandMap
Readme
RealArcade
RealPlayer
Recordpad
Remove IntelliMover Demo
Roads of Rome
Roads of Rome II
Roads of Rome III
Roblox for HP_Administrator
Roxio EasyWrite Reader
Royal Envoy 2 Collector's Edition
Royal Envoy Collector's Edition
Sandlot Games Client Services
Sansa Media Converter
Sansa Updater
Savings Bond Wizard
Scan
ScannerCopy
Seagate Dashboard
Security Task Manager 1.7
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Windows (KB2564958)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB2497640)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2530548)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2559049)
Security Update for Windows Internet Explorer 8 (KB2586448)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2647516)
Security Update for Windows Internet Explorer 8 (KB2675157)
Security Update for Windows Internet Explorer 8 (KB2699988)
Security Update for Windows Internet Explorer 8 (KB2722913)
Security Update for Windows Internet Explorer 8 (KB2744842)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2412687)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476490)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2491683)
Security Update for Windows XP (KB2503658)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2506223)
Security Update for Windows XP (KB2507618)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508272)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2511455)
Security Update for Windows XP (KB2524375)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2536276)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2544893)
Security Update for Windows XP (KB2555917)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2567053)
Security Update for Windows XP (KB2567680)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2621440)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2633171)
Security Update for Windows XP (KB2639417)
Security Update for Windows XP (KB2641653)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2647518)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2660465)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2685939)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2695962)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219)
Security Update for Windows XP (KB2707511)
Security Update for Windows XP (KB2709162)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2718523)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135)
Security Update for Windows XP (KB2724197)
Security Update for Windows XP (KB2731847)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Sibelius Scorch
Sibelius Student
Simply Kids
Simply Recreation
Simply School Days
Simply Vacations
Simply Vintage
SkinsHP1
SolutionCenter
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sonic_PrimoSDK
SPBBC
Spybot - Search & Destroy
Spybot - Search & Destroy 1.4
Status
Stellarium UMI
Symantec Network Drivers Update
SymNet
Synthesia (remove only)
TES Construction Set
The Poppit! Show
The Promised Land
The Treasures Of Mystery Island
The Treasures of Mystery Island: The Gates of Fate
The Treasures of Mystery Island: The Ghost Ship
The White Wolf of Icicle Creek
TrayApp
Tri Peaks 2 Quest For The Ruby Ring
Type to Learn 3 Home
Ultimate Paint 2.88 Freeware Edition
Unity Web Player
Unlikely Suspects
Unload
UNO - Undercover
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Windows Internet Explorer 8 (KB971930)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows Media Player 10 (KB910393)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2541763)
Update for Windows XP (KB2607712)
Update for Windows XP (KB2616676)
Update for Windows XP (KB2641690)
Update for Windows XP (KB2661254-v2)
Update for Windows XP (KB2718704)
Update for Windows XP (KB2736233)
Update for Windows XP (KB2749655)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
Updates from HP (remove only)
VideoPad Video Editor
ViewNX
VIVA MEDIA GAME CENTER
WavePad Uninstall
WebFldrs XP
WebReg
WildTangent Games
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format Runtime
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB2619340
Windows XP Media Center Edition 2005 KB2628259
Windows XP Media Center Edition 2005 KB908250
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
WinPatrol
Word Riot Deluxe
World Mosaics
Yahoo! extras
Yahoo! Messenger
Yahoo! Photos Easy Upload Tool
Yahoo! Photos Print-at-Home Tool
Yahoo! Software Update
Yahoo! Toolbar
Yontoo Layers Client 1.10.01
Zoner Photo Studio 7
.
==== Event Viewer Messages From Past Week ========
.
11/3/2012 3:16:44 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor IntelIde ViaIde
11/2/2012 2:08:49 PM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 001CDF6A6416. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
10/29/2012 6:11:10 PM, error: Service Control Manager [7034] - The iolo System Service service terminated unexpectedly. It has done this 1 time(s).
10/29/2012 4:13:41 PM, error: Service Control Manager [7006] - The ScRegSetValueExW call failed for FailureActions with the following error: Access is denied.
10/29/2012 4:08:17 PM, error: Service Control Manager [7009] - Timeout (120000 milliseconds) waiting for the AVGIDSAgent service to connect.
10/29/2012 4:08:17 PM, error: Service Control Manager [7000] - The AVGIDSAgent service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
10/28/2012 9:31:48 PM, error: Service Control Manager [7034] - The Windows User Mode Driver Framework service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:31:40 PM, error: Service Control Manager [7034] - The Media Center Scheduler Service service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:31:23 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:25:44 AM, error: Service Control Manager [7000] - The Bonjour Service service failed to start due to the following error: The system cannot find the file specified.
10/28/2012 9:22:33 PM, error: Service Control Manager [7031] - The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
10/28/2012 9:21:51 AM, error: Service Control Manager [7034] - The DNS Client service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:48 AM, error: Service Control Manager [7034] - The TCP/IP NetBIOS Helper service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:48 AM, error: Service Control Manager [7031] - The Universal Plug and Play Device Host service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
10/28/2012 9:21:48 AM, error: Service Control Manager [7031] - The Remote Registry service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.
10/28/2012 9:21:44 AM, error: Service Control Manager [7034] - The WebClient service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:42 AM, error: Service Control Manager [7034] - The HTTP SSL service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:34 AM, error: Service Control Manager [7034] - The vToolbarUpdater12.2.6 service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:27 AM, error: Service Control Manager [7034] - The Yahoo! Updater service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:16 AM, error: Service Control Manager [7034] - The Kodak AiO Status Monitor Service service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:05 AM, error: Service Control Manager [7034] - The Pml Driver HPZ12 service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:21:00 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
10/28/2012 9:20:15 AM, error: Service Control Manager [7034] - The Kodak AiO Network Discovery Service service terminated unexpectedly. It has done this 1 time(s).
.
==== End Of File ====
_________________________________________________________
GMER log:
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-11-04 19:07:02
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST3200826AS rev.3.03
Running: obgucttg.exe; Driver: C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kwxdafob.sys
---- System - GMER 1.0.15 ----
SSDT 85D700B0 ZwConnectPort
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeKey [0xF5C1A14A]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeMultipleKeys [0xF5C1A21A]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0xF5C19D7C]
SSDT \??\C:\WINDOWS\system32\drivers\avgtpx86.sys (AVG Technologies) ZwQueryValueKey [0xF7761258]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwSuspendProcess [0xF5C19F6A]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwSuspendThread [0xF5C1A000]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateProcess [0xF5C19E32]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0xF5C19ECE]
SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0xF5C1A09C]
---- Kernel code sections - GMER 1.0.15 ----
? gsujx.sys The system cannot find the file specified. !
? C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !
---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\Ntfs \Ntfs bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)
AttachedDevice \FileSystem\Ntfs \Ntfs SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 arkbcfltr.sys (Microsoft AR PS/2 Keyboard Filter Driver (Beta 2 Release 2)/Microsoft Corporation)
AttachedDevice \Driver\Tcpip \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
AttachedDevice \FileSystem\Fastfat \Fat bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)
---- Files - GMER 1.0.15 ----
File C:\Program Files\Microsoft Office\OFFICE11\1033\112 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\112\SKU112.XML 473931 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\113 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\113\SKU113.XML 473931 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ADDRPRSR.DLL 35392 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\ADO.XML 328956 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ADO210.AW 238012 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41206.FMT 1451 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41256.FMT 1542 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41307.FMT 1366 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41357.FMT 1469 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AVL7901.FMT 1559 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\AVL7902.FMT 1488 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\2COLCMA.GIF 1470 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\2COLFRM.GIF 1975 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BARS.GIF 1273 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BRACKETS.GIF 1334 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BULTITL.GIF 1315 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\COMMAS.GIF 1415 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\COMPNT.GIF 1547 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\DOTS.GIF 1246 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\DRPDWN.GIF 1566 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\HISTORY.GIF 1470 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\HORZTITL.GIF 1318 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\LSTVIEWS.INI 9540 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\MOREDOTS.GIF 1266 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\NAVBARS.INI 2204 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\NUMTITL.GIF 1325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\PLNTITL.GIF 1291 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM1.GIF 1517 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM2.GIF 1421 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM3.GIF 1761 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\SLASHES.GIF 1261 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\TABLE.GIF 1482 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\TABULAR.GIF 1239 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\UNDRLINE.GIF 1246 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\CATOC.XML 4522 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\CERTINTL.DLL 13376 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\CSDEBUG.CHM 118701 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\CSENVIR.CHM 311722 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAO.XML 58396 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAO360.AW 102702 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\+Connect to New Data Source.odc 190 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\+New SQL Server Connection.odc 196 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\DATACONN.HTC 28734 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\DESKTOP.INI 70 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\FOLDER.ICO 4710 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAY1.PRT 2288 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DAY2.PRT 3151 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\DYNO106.FMT 1585 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\EMAIL.DOT 13312 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ENVELOPR.DLL 20032 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\EXPTOOWS.DLL 13376 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\EXPTOOWS.XLA 78336 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\FILTERS.TXT 2086 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\FM20.AW 126150 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\FM20.XML 86032 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GR8GALRY.GRA 186880 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GRAPH10.AW 281435 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GRAPH10.CHM 511975 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\GRINTL32.DLL 145984 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMLREF.CHM 2827646 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMLREF.XML 8594 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMMINTL.DLL 31352 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMQINTL.DLL 27256 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\ID_112.DPC 653 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\ID_113.DPC 627 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\JETSQL.XML 15416 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\JSCRIPT.XML 13082 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MCE.CHM 28369 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_CATOC.XML 145 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_OITOC.XML 146 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_OLTOC.XML 391 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_PPTOC.XML 325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_WDTOC.XML 325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_XGTOC.XML 145 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_XLTOC.XML 325 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MODHLPUI.DLL 12864 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MONTH1.PRT 1891 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MONTH2.PRT 1441 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSCAL32.DLL 219520 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.AW 185891 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.CHM 309756 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.XML 31652 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSEINTL.DLL 60472 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSETOC.XML 4835 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSO.ACL 37814 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOHELP.EXE 88632 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOHLP11.CHM 252772 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOWCWI.DLL 110592 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSPHELP.CHM 398443 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSQRY32.AW 77269 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSQRY32.CHM 513666 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSSCD32.DLL 189312 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSSPC32.DLL 1750904 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTINTL.DLL 143416 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTORE10.AW 116511 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTORE10.CHM 58182 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTRE32.DLL 44952 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSUSPINT.DLL 229444 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSWBCLNG.DLL 10816 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\NORMAL.FMT 1347 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OBALLOON.DLL 109120 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OCLTINT.DLL 121400 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OFFTEXT.TXT 2837 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OFREADME.HTM 9771 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISINTL.DLL 130616 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISMAIN.AW 195640 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISMAIN.CHM 126432 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OISTOC.XML 11326 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLFM10.CHM 617456 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLFTOC.XML 70615 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLMAIN10.AW 1121096 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLMAIN11.CHM 1039207 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLREADME.HTM 13021 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OLTOC.XML 168903 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OMFCSAT.DLL 64088 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTFORM.DAT 84480 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLBAR.INF 2412 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLLIBR.DLL 2979904 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLOOK.HOL 288826 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLWVW.DLL 274488 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OWHTOC.XML 8768 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPINTL.DLL 485944 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPMAIN10.AW 1060126 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPMAIN10.CHM 851716 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPREADME.HTM 2943 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPTOC.XML 163239 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PPVWINTL.DLL 159808 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.DOC 25088 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.PPT 14336 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.XLS 15872 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.DOC 27136 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.PPT 14848 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.XLS 15872 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PSS10O.CHM 11142 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PSS10R.CHM 11378 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\PVREADME.HTM 4189 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\QRYINT32.DLL 96832 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\QUIKANIM.PPT 282112 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SCHDPL32.EXE 190848 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\EEFINTL.DLL 39544 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\JSCRIPT5.CHM 507729 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOAUTUI.DLL 31296 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\OFMAIN11.CHM 714555 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\OWSHLP10.CHM 273580 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SETUP.CHM 272824 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAWD10.AW 2149167 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VEEN3.AW 243688 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SLINTL.DLL 134712 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\SPLTOC.XML 37981 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\SRINTL.DLL 1178272 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\STSLIST.CHM 614107 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\STSLISTI.DLL 133696 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\STSUCRES.DLL 15424 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\TRIFOLD3.PRT 6399 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\UNBIND10.DLL 13376 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\USPANNTN.XML 177284 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\USPMETA.XML 19383 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAGR10.CHM 493272 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOF10.AW 454371 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOF11.CHM 714142 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOL10.AW 654379 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOL11.CHM 865598 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOWS10.CHM 266741 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAPP10.AW 895858 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAPP10.CHM 1169163 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAWD10.CHM 2760613 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAXL10.AW 1651132 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAXL10.CHM 1966342 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBCN.XML 12308 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBETOC.XML 350 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBHW.XML 7038 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBLR.XML 345750 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOB.XML 33106 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOFTOC.XML 104172 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOWSTOC.XML 9634 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSCRIP.XML 12362 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSCRIP5.CHM 495987 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSETOC.XML 426 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_GRTOC.XML 95740 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_OLTOC.XML 193794 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_PPTOC.XML 248994 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_WDTOC.XML 637834 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_XLTOC.XML 528846 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.MHT 2716 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.SWF 1964739 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDMAIN10.AW 1524248 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDMAIN11.CHM 1736028 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDREADME.HTM 2775 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDTOC.XML 240825 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WDWPH10.CHM 165735 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK1.PRT 9785 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK2.PRT 7269 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK3.PRT 9839 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WORKFUNC.AW 549031 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\WWASUM.DLL 61440 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\WWINTL.DLL 771640 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\XGTOC.XML 41115 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XL8GALRY.XLS 151552 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLADDIN.CHM 65425 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLATOC.XML 828 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLINTL32.DLL 707648 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMACRO.CHM 11264 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMAIN10.AW 1443704 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMAIN11.CHM 2536247 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLQTOC.XML 25912 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLREADME.HTM 18467 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLSLICER.DLL 154176 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\1033\XLTOC.XML 262965 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1033\XMLSDK.XML 516752 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1036\MSO.ACL 44744 bytes
File C:\Program Files\Microsoft Office\OFFICE11\1036\WWASUM.DLL 147456 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\3082\MSO.ACL 45832 bytes
File C:\Program Files\Microsoft Office\OFFICE11\3082\WWASUM.DLL 548920 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\DLGSETP.ECF 623 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\DUMPSTER.ECF 808 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\FAXEXT.ECF 830 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSOSEC.DLL 7168 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSOSEC.XML 179 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSSPC.ECF 778 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSVCR71.DLL 344064 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OTKLOADR.DLL 77824 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTEX.ECF 1936 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTEX2.ECF 862 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTLVBA.DLL 45112 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\PMAILEXT.ECF 626 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\Redemption.ECF 475 bytes
File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\SCRPTXTN.ECF 693 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART1.BDR 32246 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART10.BDR 9292 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART11.BDR 30920 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART12.BDR 58756 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART13.BDR 28368 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART14.BDR 51388 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART15.BDR 27412 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART2.BDR 47188 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART3.BDR 57646 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART4.BDR 14594 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART5.BDR 15788 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART6.BDR 55222 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART7.BDR 3876 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART8.BDR 49098 bytes
File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART9.BDR 50838 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ACT3R.SAM 14392 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\DELIMR.FAE 11320 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\LOCALDV.DLL 33848 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ODBCR.SAM 12856 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLADDR.FAE 14904 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLAPPTR.FAE 12856 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLJRNLR.FAE 11320 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLMAILR.FAE 11320 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLNOTER.FAE 10808 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLR.SAM 12848 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLTASKR.FAE 11832 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ORG97R.SAM 13880 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\PABR.SAM 12344 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\SC2R.SAM 12344 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\SCHPLUSR.SAM 14400 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\TRANSMRR.DLL 14912 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ACT3.SAM 140856 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DELIMDOS.FAE 23616 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DELIMWIN.FAE 23616 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DESKSAM.SAM 17464 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ODBC.SAM 46136 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OL.SAM 88624 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLADD.FAE 157752 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLAPPT.FAE 151608 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLJRNL.FAE 117304 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLMAIL.FAE 112696 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLNOTE.FAE 103992 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLTASK.FAE 145976 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ORG97.SAM 37432 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\PAB.SAM 114224 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\RM.DLL 74288 bytes
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\SC2.SAM 111152 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\SCHPLUS.SAM 142392 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\TRANSMGR.DLL 99904 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOCL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RCLRPT.CFG 808 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESNS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITY.CFG 968 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPT.CFG 789 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFNOT.CFG 320 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFNOT.ICO 766 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFRES.CFG 338 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONFLICT.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACT.CFG 783 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLIST.CFG 805 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLSTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLSTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOC.CFG 765 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOCS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEM.CFG 838 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEML.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEMS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPM.CFG 795 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPML.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPMS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTE.CFG 781 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTEL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTES.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFTMPL.CFG 830 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POST.CFG 777 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTIT.CFG 777 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTITL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTITS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REC.CFG 1617 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RECL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RECS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTE.CFG 779 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTEL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTES.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPLTMPL.CFG 826 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORT.CFG 781 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESEND.CFG 779 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESENDL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESENDS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDCNCLL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDCNCLS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDREQL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDREQS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESNL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESPL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESPS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESTL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESTS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDCNCL.CFG 821 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDREQ.CFG 1199 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDRESN.CFG 835 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDRESP.CFG 833 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDREST.CFG 840 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECREC.CFG 664 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECRECL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECRECS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURE.CFG 647 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGN.CFG 664 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGNL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGNS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SMIMEE.CFG 640 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SMIMES.CFG 668 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASK.CFG 768 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACC.CFG 804 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACCL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACCS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDEC.CFG 807 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDECL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDECS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQ.CFG 797 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQL.ICO 1078 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKS.ICO 2998 bytes
File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKUPD.CFG 806 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\context.html 1483 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxhelp_cls.gif 128 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxhelp_opn.gif 133 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxmsc_cls.gif 99 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxmsc_opn.gif 99 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxtrain_cls.gif 915 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxtrain_opn.gif 915 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxwiz_cls.gif 127 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxwiz_opn.gif 127 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\HTMLMARQ.OCX 81920 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\HTMLMM.OCX 110592 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CONTEXT.XML 615 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CSDEBUG.XML 166212 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CSENVIR.XML 231732 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\MSDNTRN.XML 180 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\OFFICE.XML 274823 bytes
File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\DEF_CTX.XML 182 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\ANALYS32.XLL 186944 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\ATPVBAEN.XLA 376832 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\FUNCRES.XLA 77824 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\PROCDB.XLA 117248 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\EUROTOOL.XLA 638976 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\HTML.XLA 36352 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\LOOKUP.XLA 380416 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER\SOLVER.XLA 485888 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER\SOLVER32.DLL 84544 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\Library\SUMIF.XLA 366592 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MACROS\SUPPORT.DOT 243118 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\APPLAUSE.WAV 28074 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\ARROW.WAV 23030 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\BOMB.WAV 194166 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\BREEZE.WAV 4290 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CAMERA.WAV 5524 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CASHREG.WAV 7551 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CHIMES.WAV 37310 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CLICK.WAV 616 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\COIN.WAV 5564 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\DRUMROLL.WAV 19426 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\EXPLODE.WAV 23584 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\HAMMER.WAV 4028 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\LASER.WAV 1837 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\PUSH.WAV 15748 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\SUCTION.WAV 5732 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\TYPE.WAV 4636 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\VOLTAGE.WAV 13766 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\WHOOSH.WAV 1758 bytes
File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\WIND.WAV 11140 bytes
File C:\Program Files\Microsoft Office\OFFICE11\Migration\MIGRATE.DLL 15928 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Currency Rates.iqy 205 bytes
File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Major Indicies.iqy 321 bytes
File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Stock Quotes.iqy 307 bytes
File C:\Program Files\Microsoft Office\OFFICE11\SAMPLES\SOLVSAMP.XLS 118784 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CMDDEFUI.DLL 192512 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\compsvcspkgui.dll 8704 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CSSMetaData.xml 14571 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CSSPKGUI.DLL 40960 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\DISCO.XSL 4679 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\EMPTY.HTM 500 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\HelpWatermark.htm 1643 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\htmdlgsUI.dll 22528 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\HTMEDUI.DLL 143360 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\MSDBGUI.DLL 16384 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\MSENVUI.DLL 204800 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\VisualStudioTeamCoreUI.dll 12800 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\vsbrowseUI.dll 32768 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\vsdebugui.dll 86016 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\ATL70.DLL 64512 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CMDDEF.DLL 36864 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\Compsvcspkg.dll 106496 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CSSMetaDataSchema.xml 2181 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CSSPKG.DLL 200704 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\DISCO.GIF 234 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\HTMDLGS.DLL 126976 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\HTMED.DLL 909312 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSENV.DLL 3035136 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSVCP70.DLL 487424 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSVCR70.DLL 344064 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMA.GIF 232 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTM32DOM.TLB 17828 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTM40DOM.TLB 731688 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTML32.XSD 79259 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTML40.XSD 177943 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\NSC40DOM.TLB 23244 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\NSCP40.XSD 108380 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML 0 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\adrotator.xsd 1465 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\ASP.XSD 70215 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\WSHMETA.XSD 2481 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\xsdschema.xsd 15876 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\scriptle2.dll 122880 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SDM2.DLL 143360 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SERVICE.GIF 256 bytes
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\TRIDSN.DLL 311296 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VisualStudioTeamCore.dll 356352 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSBROWSE.DLL 212992 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSDEBUG.DLL 589824 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSTLBINF.DLL 224256 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\XLATORS\PP4X322.DLL 430136 bytes executable
File C:\Program Files\Microsoft Office\OFFICE11\XLATORS\PP7X32.DLL 93752 bytes executable
File C:\Program Files\Microsoft Office\Office12\1033 0 bytes
File C:\Program Files\Microsoft Office\Office12\1033\PPINTL.DLL 925488 bytes executable
File C:\Program Files\Microsoft Office\Office12\1033\PPVWINTL.DLL 337728 bytes executable
File C:\Program Files\Microsoft Office\Office12\1033\PROTTPLN.PPT 12288 bytes
File C:\Program Files\Microsoft Office\Office12\1033\PROTTPLV.PPT 12288 bytes
File C:\Program Files\Microsoft Office\Office12\1033\PVREADME.HTM 4444 bytes
File C:\Program Files\Microsoft Office\Office12\INTLDATE.DLL 78648 bytes executable
File C:\Program Files\Microsoft Office\Office12\OART.DLL 14151456 bytes executable
File C:\Program Files\Microsoft Office\Office12\OARTCONV.DLL 8423224 bytes executable
File C:\Program Files\Microsoft Office\Office12\PPCNV.DLL 1764112 bytes executable
File C:\Program Files\Microsoft Office\Office12\PPCNVCOM.EXE 67920 bytes
File C:\Program Files\Microsoft Office\Office12\PPCNVPXY.DLL 17680 bytes executable
File C:\Program Files\Microsoft Office\Office12\PPCPRTID.XML 79772 bytes
File C:\Program Files\Microsoft Office\Office12\PPTVIEW.EXE 2012480 bytes executable
File C:\Program Files\Microsoft Office\Office12\pptview.exe.manifest 804 bytes
File C:\Program Files\Microsoft Office\Office12\SAEXT.DLL 291128 bytes
File C:\Program Files\Microsoft Office\PowerPoint Viewer\GDIPLUS.DLL 1773568 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\INTLDATE.DLL 64064 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE 1782840 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\PPVWINTL.DLL 159808 bytes executable
File C:\Program Files\Microsoft Office\PowerPoint Viewer\PVREADME.HTM 4189 bytes
File C:\Program Files\Microsoft Office\PowerPoint Viewer\SAEXT.DLL 211512 bytes
File C:\Program Files\Microsoft Office\PowerPoint Viewer\UNICOWS.DLL 246424 bytes executable
File C:\Program Files\Microsoft Office\Stationery\1033 0 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.GIF 5999 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.HTM 548 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.GIF 46 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.HTM 483 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.GIF 3382 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM 507 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.GIF 4039 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.HTM 513 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM 493 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.JPG 2950 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.GIF 4610 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.HTM 469 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.GIF 1115 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM 476 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.HTM 489 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.JPG 3981 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.HTM 509 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.JPG 6281 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.GIF 2074 bytes
File C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.HTM 474 bytes
File C:\Program Files\Microsoft Office\Templates\1033 0 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Agenda Wizard.Wiz 409681 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Balance Sheet.xlt 22016 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Batch Conversion Wizard.Wiz 264251 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Brainstorming Session.pot 63488 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Brochure.dot 104319 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Business Plan.pot 72192 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Calendar Wizard.Wiz 402695 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Certificate.pot 54784 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Company Handbook.pot 72192 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Company Meeting.pot 166400 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Fax.dot 98765 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Letter.dot 81166 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Memo.dot 74725 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Report.dot 138954 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Resume.dot 87969 bytes
File C:\Program Files\Microsoft Office\Templates\1033\CONTMADR.DOT 70380 bytes
File C:\Program Files\Microsoft Office\Templates\1033\CONTMFAX.DOT 85827 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Directory.dot 65778 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Fax.dot 91545 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Letter.dot 66986 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Memo.dot 58432 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Report.dot 95027 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Elegant Resume.dot 98202 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ELEGMADR.DOT 68148 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ELEGMFAX.DOT 82073 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ELEGMLTR.DOT 63126 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Employee Orientation.pot 169472 bytes
File C:\Program Files\Microsoft Office\Templates\1033\ExpenseStatement.xlt 28672 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX 0 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX\Business Fax.dot 40960 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX\Personal Fax.dot 69120 bytes
File C:\Program Files\Microsoft Office\Templates\1033\FAX\Standard Fax.dot 38400 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Fax Wizard.wiz 595049 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Financial Overview.pot 118784 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Generic.pot 41472 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Group Home Page.pot 87552 bytes
File C:\Program Files\Microsoft Office\Templates\1033\LABEL.WIZ 97088 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Letter Wizard.wiz 103029 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Loan Amortization.xlt 140800 bytes
File C:\Program Files\Microsoft Office\Templates\1033\MAIL.OFT 12288 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Manual.dot 107210 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Memo Wizard.wiz 438872 bytes
File C:\Program Files\Microsoft Office\Templates\1033\MERGELTR.DOT 58708 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Pleading Wizard.wiz 732950 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PLEADSUB.WIZ 308624 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Products And Services Overview.pot 69632 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Fax.dot 94231 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Letter.dot 76670 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Memo.dot 75821 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Report.dot 116992 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Professional Resume.dot 77519 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PROFMADR.DOT 69759 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PROFMFAX.DOT 86389 bytes
File C:\Program Files\Microsoft Office\Templates\1033\PROFMLTR.DOT 62437 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Project Overview.pot 69632 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Project Post-Mortem.pot 61440 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Recommending A Strategy.pot 41984 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Reporting Progress or Status.pot 88064 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Resume Wizard.wiz 456741 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Sales Invoice.xlt 27648 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Selling a Product or Service.pot 87040 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Thesis.dot 85337 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Timecard.xlt 24576 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Training.pot 74240 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Communicating Bad News.pot 68608 bytes
File C:\Program Files\Microsoft Office\Templates\1033\CONTMLTR.DOT 72710 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Envelope Wizard.wiz 89380 bytes
File C:\Program Files\Microsoft Office\Templates\1033\Marketing Plan.pot 81920 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems 0 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\HTMLPAGE.HTM 227 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\NewFileItems.vsdir 166 bytes
File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\TEXTFILE.TXT 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Echo.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Axis.pot 25600 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Balance.pot 65536 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Balloons.pot 49152 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Beam.pot 107008 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Blends.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Capsules.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Cascade.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Cliff.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Clouds.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Compass.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Competition.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Crayons.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Curtain Call.pot 0 bytes
File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Digital Dots.pot 0 bytes
---- EOF - GMER 1.0.15 ----