Gå til innhold

Legger ut HiJackThis-logg, bare en liten skjekk.


Anbefalte innlegg

Hei. Føler at pc-en går litt tregere enn vanlig, så jeg kjørte Hijackthis og legger ut logg. Kan vel ikke skade. :)

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:50:04, on 10.07.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

Z:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\WINDOWS\system32\Ati2evxx.exe

Z:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\RTHDCPL.EXE

Z:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\AGEIA Technologies\TrayIcon.exe

Z:\Program Files\Steam\Steam.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

Z:\FRAPS\FRAPS.EXE

Z:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\Program Files\RALINK\Common\RaUI.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PnkBstrB.exe

Z:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

Z:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Skype\Plugin Manager\skypePM.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\WINDOWS\system32\wuauclt.exe

Z:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Påloggingshjelp for Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [skyTel] SkyTel.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [avast!] Z:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [AGEIA PhysX SysTray] C:\Program Files\AGEIA Technologies\TrayIcon.exe

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKCU\..\Run: [steam] Z:\Program Files\Steam\Steam.exe -silent

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Fraps] Z:\FRAPS\FRAPS.EXE

O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1211728897786

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - Z:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: avast! Antivirus - ALWIL Software - Z:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - Z:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - Z:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: NMSAccessU - Unknown owner - Z:\Program Files\CDBurnerXP\NMSAccessU.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

 

--

End of file - 4810 bytes

 

 

Lenke til kommentar
Videoannonse
Annonse

Loggen din ser ut til å være ren.

 

Du kan legge ut en combofix-logg for å være sikker:

 

Last ned Combofix, og legg det på Skrivebordet.

 

Kjør combofix.exe, og følg veiledningen.

Du må ikke klikke på vinduet mens programmet kjører. Dette kan føre til at programmet fryser.

 

Post loggfilen fra Combofix (c:\combofix.txt)

Lenke til kommentar

Skal poste logg, men etter jeg har kjørt Combofix piper det et par ganger, så kommer det en melding om en "proper guide" og jeg trykker I agree. Så kommer denne meldingen, som skremmer meg litt. wh1pgy.jpg

Bare så det er sagt, så trykker jeg ikke på noe før noen har svart..

Endret av Redneck
Lenke til kommentar

Ok, fikk litt noja. :p

Da fikk jeg endelig Combofix ferdig og poster logg.

 

ComboFix 08-07-09.5 - Zander`s 2008-07-10 16:48:06.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1410 [GMT 2:00]

Running from: Z:\Nedlastet\ComboFix.exe

* Created a new restore point

 

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

.

 

((((((((((((((((((((((((( Files Created from 2008-06-10 to 2008-07-10 )))))))))))))))))))))))))))))))

.

 

2008-07-07 17:59 . 2008-07-07 17:59 268 --ah----- C:\sqmdata00.sqm

2008-07-07 17:59 . 2008-07-07 17:59 244 --ah----- C:\sqmnoopt00.sqm

2008-07-05 16:27 . 2008-07-05 16:27 <DIR> d-------- C:\Program Files\Screaming Bee

2008-07-05 16:25 . 2008-07-05 16:25 <DIR> d-------- C:\Documents and Settings\Zander`s\Application Data\Screaming Bee

2008-07-05 16:24 . 2008-07-05 16:25 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Screaming Bee

2008-07-02 14:42 . 2008-07-10 16:07 <DIR> d-a------ C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP

2008-07-01 15:15 . 2008-07-01 15:15 <DIR> d-------- C:\Program Files\Marvell

2008-06-23 22:19 . 2008-06-23 22:19 <DIR> d--hs---- C:\WINDOWS\ftpcache

2008-06-22 02:31 . 2008-06-22 02:31 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\ATI

2008-06-22 02:31 . 2008-06-22 02:31 0 --a------ C:\WINDOWS\ativpsrm.bin

2008-06-22 02:26 . 2008-06-22 02:26 <DIR> d-------- C:\ATI

2008-06-13 17:53 . 2008-06-13 17:53 <DIR> d-------- C:\Program Files\AGEIA Technologies

2008-06-12 14:16 . 2008-06-29 19:01 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\TrackMania

2008-06-11 12:25 . 2008-06-13 15:10 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys

2008-06-11 12:25 . 2008-06-13 15:10 272,128 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys

 

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-07-10 14:54 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\Skype

2008-07-10 14:01 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\skypePM

2008-07-08 17:37 --------- d-----w C:\Program Files\Windows Live Safety Center

2008-06-26 00:37 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\uTorrent

2008-06-22 00:29 --------- d-----w C:\Program Files\ATI Technologies

2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys

2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys

2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys

2008-06-13 16:03 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll

2008-06-13 15:50 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-06-03 06:20 3,100,160 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys

2008-06-03 03:46 10,276,864 ----a-w C:\WINDOWS\system32\atioglx2.dll

2008-06-03 03:22 413,696 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll

2008-06-03 03:21 306,688 ----a-w C:\WINDOWS\system32\ati2dvag.dll

2008-06-03 03:11 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll

2008-06-03 03:11 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe

2008-06-03 03:11 180,224 ----a-w C:\WINDOWS\system32\atipdlxx.dll

2008-06-03 03:11 139,264 ----a-w C:\WINDOWS\system32\ati2evxx.dll

2008-06-03 03:09 552,960 ----a-w C:\WINDOWS\system32\ati2evxx.exe

2008-06-03 03:08 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL

2008-06-03 03:04 245,760 ----a-w C:\WINDOWS\system32\atiok3x2.dll

2008-06-03 03:02 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll

2008-06-03 02:59 3,500,352 ----a-w C:\WINDOWS\system32\ati3duag.dll

2008-06-03 02:48 2,120,832 ----a-w C:\WINDOWS\system32\ativvaxx.dll

2008-06-03 02:33 48,128 ----a-w C:\WINDOWS\system32\amdpcom32.dll

2008-06-03 02:29 348,160 ----a-w C:\WINDOWS\system32\atikvmag.dll

2008-06-03 02:28 23,040 ----a-w C:\WINDOWS\system32\atiadlxx.dll

2008-06-03 02:28 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll

2008-06-03 02:27 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll

2008-06-03 02:21 557,056 ----a-w C:\WINDOWS\system32\ati2cqag.dll

2008-06-02 19:05 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe

2008-06-02 12:52 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\vlc

2008-06-01 22:35 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy

2008-06-01 01:37 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys

2008-05-31 21:31 --------- d-----w C:\Program Files\Everest Poker.net

2008-05-31 21:06 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\Bersirc

2008-05-31 21:01 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\Ventrilo

2008-05-31 21:00 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard

2008-05-31 20:43 --------- d-----w C:\Program Files\uTorrent

2008-05-31 16:54 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\MailFrontier

2008-05-30 11:00 --------- d-----w C:\Program Files\Windows Installer Clean Up

2008-05-30 10:59 --------- d-----w C:\Program Files\MSECACHE

2008-05-27 16:50 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\teamspeak2

2008-05-26 13:13 --------- d-----w C:\Program Files\Skype

2008-05-25 20:51 --------- d-----w C:\Program Files\Windows Live Toolbar

2008-05-25 20:51 --------- d-----w C:\Program Files\Windows Live

2008-05-25 20:50 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller

2008-05-25 20:46 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller

2008-05-25 18:37 --------- d-----w C:\Program Files\Common Files\Skype

2008-05-25 18:37 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Skype

2008-05-25 14:19 21,275 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys

2008-05-25 14:19 --------- d-----w C:\Program Files\RALINK

2008-05-25 11:51 315,392 ----a-w C:\WINDOWS\HideWin.exe

2008-05-25 11:51 --------- d-----w C:\Program Files\Realtek

2008-05-25 11:49 --------- d-----w C:\Program Files\Intel

2008-05-25 11:47 --------- d-----w C:\Documents and Settings\Zander`s\Application Data\ATI

2008-05-25 11:44 --------- d-----w C:\Program Files\Common Files\InstallShield

2008-05-25 11:43 --------- d-----w C:\Program Files\Common Files\ATI Technologies

2008-05-25 10:51 --------- d-----w C:\Program Files\microsoft frontpage

2008-05-15 12:47 21,920 ----a-w C:\WINDOWS\system32\drivers\ScreamingBAudio.sys

.

 

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="Z:\Program Files\Steam\Steam.exe" [2008-07-02 20:18 1271032]

"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-04-23 17:45 22058792]

"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 11:34 5724184]

"Fraps"="Z:\FRAPS\FRAPS.EXE" [2008-01-14 14:53 913064]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avast!"="Z:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224]

"AGEIA PhysX SysTray"="C:\Program Files\AGEIA Technologies\TrayIcon.exe" [2006-03-20 21:43 331776]

"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440]

"RTHDCPL"="RTHDCPL.EXE" [2007-01-30 12:54 16116224 C:\WINDOWS\RTHDCPL.exe]

"SkyTel"="SkyTel.EXE" [2006-05-16 12:04 2879488 C:\WINDOWS\SkyTel.exe]

 

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\

Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe [2008-05-25 16:19:35 618496]

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"Z:\\Program Files\\Steam\\steamapps\\zednek\\counter-strike source\\hl2.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

"Z:\\Program Files\\Steam\\steamapps\\zednek\\team fortress 2\\hl2.exe"=

"Z:\\Program Files\\Steam\\steamapps\\zednek\\garrysmod\\hl2.exe"=

"Z:\\Program Files\\BF2.exe"=

"Z:\\Program Files\\Steam\\Steam.exe"=

"C:\\Program Files\\uTorrent\\uTorrent.exe"=

"Z:\\Program Files\\TmNationsForever\\TmForever.exe"=

"Z:\\Program Files\\Ubisoft\\Ghost Recon Advanced Warfighter\\GRAW.exe"=

"Z:\\Program Files\\Steam\\steamapps\\zednek\\source sdk base\\hl2.exe"=

"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=

"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

 

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]

R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]

R2 NMSAccessU;NMSAccessU;Z:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-03-09 11:20]

R3 SCREAMINGBDRIVER;Screaming Bee Audio;C:\WINDOWS\system32\drivers\ScreamingBAudio.sys [2008-05-15 14:47]

 

*Newly Created Service* - CATCHME

.

Contents of the 'Scheduled Tasks' folder

"2008-07-10 15:11:15 C:\WINDOWS\Tasks\Se etter oppdateringer for Windows Live Toolbar.job"

- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE

.

**************************************************************************

 

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-07-10 17:12:39

Windows 5.1.2600 Service Pack 2 NTFS

 

scanning hidden processes ...

 

scanning hidden autostart entries ...

 

scanning hidden files ...

 

 

C:\WINDOWS\system32\lzexpand.dll 9936 bytes

C:\WINDOWS\system32\rasdial.exe 11264 bytes executable

C:\WINDOWS\system32\icwdial.dll 73728 bytes executable

C:\WINDOWS\system32\icwphbk.dll 65536 bytes executable

C:\WINDOWS\system32\ideograf.uce 60458 bytes

C:\WINDOWS\system32\idq.dll 120832 bytes executable

C:\WINDOWS\system32\ie4uinit.exe 34304 bytes executable

C:\WINDOWS\system32\ieakeng.dll 139264 bytes executable

C:\WINDOWS\system32\ieaksie.dll 216576 bytes executable

C:\WINDOWS\system32\ieakui.dll 221184 bytes executable

C:\WINDOWS\system32\iedkcs32.dll 323584 bytes executable

C:\WINDOWS\system32\ieencode.dll 81920 bytes executable

C:\WINDOWS\system32\iepeers.dll 251392 bytes executable

C:\WINDOWS\system32\iernonce.dll 48640 bytes executable

C:\WINDOWS\system32\iesetup.dll 62976 bytes executable

C:\WINDOWS\system32\ieuinit.inf 23006 bytes

C:\WINDOWS\system32\iexpress.exe 114688 bytes executable

C:\WINDOWS\system32\ifmon.dll 135680 bytes executable

C:\WINDOWS\system32\ifsutil.dll 70656 bytes executable

C:\WINDOWS\system32\igmpagnt.dll 8192 bytes executable

C:\WINDOWS\system32\ils.dll 81920 bytes executable

C:\WINDOWS\system32\imaadp32.acm 16384 bytes executable

C:\WINDOWS\system32\imagehlp.dll 144384 bytes executable

C:\WINDOWS\system32\imapi.exe 150016 bytes executable

C:\WINDOWS\system32\IME

C:\WINDOWS\system32\imeshare.dll 36921 bytes executable

C:\WINDOWS\system32\imgutil.dll 35840 bytes executable

C:\WINDOWS\system32\imm32.dll 110080 bytes executable

C:\WINDOWS\system32\inetcfg.dll 274432 bytes executable

C:\WINDOWS\system32\inetcomm.dll 683520 bytes executable

C:\WINDOWS\system32\inetcpl.cpl 358400 bytes executable

C:\WINDOWS\system32\inetcplc.dll 110592 bytes executable

C:\WINDOWS\system32\inetmib1.dll 33280 bytes executable

C:\WINDOWS\system32\olethk32.dll 69120 bytes executable

C:\WINDOWS\system32\oobe

C:\WINDOWS\system32\opengl32.dll 713728 bytes executable

C:\WINDOWS\system32\osk.exe 215552 bytes executable

C:\WINDOWS\system32\osuninst.dll 67584 bytes executable

C:\WINDOWS\system32\osuninst.exe 40448 bytes executable

C:\WINDOWS\system32\p2p.dll 116224 bytes executable

C:\WINDOWS\system32\p2pgasvc.dll 86016 bytes executable

C:\WINDOWS\system32\p2pgraph.dll 312320 bytes executable

C:\WINDOWS\system32\p2pnetsh.dll 88064 bytes executable

C:\WINDOWS\system32\p2psvc.dll 526848 bytes executable

C:\WINDOWS\system32\packager.exe 58368 bytes executable

C:\WINDOWS\system32\panmap.dll 10240 bytes executable

C:\WINDOWS\system32\paqsp.dll 157696 bytes executable

C:\WINDOWS\system32\pathping.exe 21504 bytes executable

C:\WINDOWS\system32\pautoenr.dll 62976 bytes executable

C:\WINDOWS\system32\pcl.sep 114 bytes

C:\WINDOWS\system32\pdh.dll 283648 bytes executable

C:\WINDOWS\system32\pentnt.exe 15360 bytes executable

C:\WINDOWS\system32\html.iec 423936 bytes executable

C:\WINDOWS\system32\icsxml

C:\WINDOWS\system32\inetpp.dll 75264 bytes executable

C:\WINDOWS\system32\ir32_32.dll 199168 bytes executable

C:\WINDOWS\system32\jgmd400.dll 35840 bytes executable

C:\WINDOWS\system32\kbdfo.dll 6144 bytes executable

C:\WINDOWS\system32\kbdmlt48.dll 6144 bytes executable

C:\WINDOWS\system32\kbdus.dll 5632 bytes executable

C:\WINDOWS\system32\lights.exe 29696 bytes executable

C:\WINDOWS\system32\ir41_32.ax 848384 bytes executable

C:\WINDOWS\system32\ir41_qc.dll 120320 bytes executable

C:\WINDOWS\system32\ir41_qcx.dll 338432 bytes executable

C:\WINDOWS\system32\ir50_32.dll 755200 bytes executable

C:\WINDOWS\system32\ir50_qc.dll 200192 bytes executable

C:\WINDOWS\system32\ir50_qcx.dll 183808 bytes executable

C:\WINDOWS\system32\irclass.dll 13312 bytes executable

C:\WINDOWS\system32\irprops.cpl 380416 bytes executable

C:\WINDOWS\system32\isign32.dll 81920 bytes executable

C:\WINDOWS\system32\isrdbg32.dll 32768 bytes executable

C:\WINDOWS\system32\itircl.dll 155136 bytes executable

C:\WINDOWS\system32\itss.dll 137216 bytes executable

C:\WINDOWS\system3catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

C:\WINDOWS\system32\ivfsrc.ax 154624 bytes executable

C:\WINDOWS\system32\ixsso.dll 54272 bytes executable

C:\WINDOWS\system32\iyuv_32.dll 47616 bytes executable

C:\WINDOWS\system32\jet500.dll 362496 bytes executable

C:\WINDOWS\system32\jgaw400.dll 44544 bytes executable

C:\WINDOWS\system32\jgdw400.dll 163840 bytes executable

C:\WINDOWS\system32\kbdfr.dll 6144 bytes executable

C:\WINDOWS\system32\kbdgae.dll 5632 bytes executable

C:\WINDOWS\system32\kbdgkl.dll 6144 bytes executable

C:\WINDOWS\system32\kbdgr.dll 6144 bytes executable

C:\WINDOWS\system32\kbdgr1.dll 6144 bytes executable

C:\WINDOWS\system32\kbdhe.dll 5632 bytes executable

C:\WINDOWS\system32\kbdhe220.dll 5632 bytes executable

C:\WINDOWS\system32\kbdhe319.dll 5632 bytes executable

C:\WINDOWS\system32\kbdhela2.dll 6144 bytes executable

C:\WINDOWS\system32\kbdhela3.dll 6656 bytes executable

C:\WINDOWS\system32\kbdhept.dll 8192 bytes executable

C:\WINDOWS\system32\kbdhu.dll 6656 bytes executable

C:\WINDOWS\system32\kbdhu1.dll 5632 bytes executable

C:\WINDOWS\system32\kbdic.dll 6144 bytes executable

C:\WINDOWS\system32\kbdinbe1.dll 6144 bytes executable

C:\WINDOWS\system32\kbdinben.dll 6656 bytes executable

C:\WINDOWS\system32\kbdinmal.dll 6656 bytes executable

C:\WINDOWS\system32\kbdir.dll 5632 bytes executable

C:\WINDOWS\system32\kbdit.dll 5632 bytes executable

C:\WINDOWS\system32\kbdit142.dll 5632 bytes executable

C:\WINDOWS\system32\kbdkaz.dll 5632 bytes executable

C:\WINDOWS\system32\kbdkyr.dll 5632 bytes executable

C:\WINDOWS\system32\kbdla.dll 6656 bytes executable

C:\WINDOWS\system32\kbdlt.dll 5632 bytes executable

C:\WINDOWS\system32\kbdlt1.dll 5632 bytes executable

C:\WINDOWS\system32\kbdlv.dll 6144 bytes executable

C:\WINDOWS\system32\kbdlv1.dll 6144 bytes executable

C:\WINDOWS\system32\kbdmac.dll 6144 bytes executable

C:\WINDOWS\system32\kbdmaori.dll 5632 bytes executable

C:\WINDOWS\system32\kbdmlt47.dll 6144 bytes executable

C:\WINDOWS\system32\kbdusl.dll 6144 bytes executable

C:\WINDOWS\system32\kbdusr.dll 6144 bytes executable

C:\WINDOWS\system32\kbdusx.dll 6144 bytes executable

C:\WINDOWS\system32\kbduzb.dll 5632 bytes executable

C:\WINDOWS\system32\kbdycc.dll 5632 bytes executable

C:\WINDOWS\system32\kbdycl.dll 6656 bytes executable

C:\WINDOWS\system32\kd1394.dll 7424 bytes executable

C:\WINDOWS\system32\kdcom.dll 7040 bytes executable

C:\WINDOWS\system32\kerberos.dll 295936 bytes executable

C:\WINDOWS\system32\kernel32.dll 984576 bytes executable

C:\WINDOWS\system32\key01.sys 42809 bytes

C:\WINDOWS\system32\keyboard.drv 2000 bytes

C:\WINDOWS\system32\keyboard.sys 42537 bytes

C:\WINDOWS\system32\keymgr.dll 150528 bytes executable

C:\WINDOWS\system32\kmddsp.tsp 33280 bytes executable

C:\WINDOWS\system32\korean.uce 12876 bytes

C:\WINDOWS\system32\krnl386.exe 92224 bytes

C:\WINDOWS\system32\ksproxy.ax 130048 bytes executable

C:\WINDOWS\system32\ksuser.dll 4096 bytes executable

C:\WINDOWS\system32\l3codeca.acm 290816 bytes executable

C:\WINDOWS\system32\l3codecx.ax 83456 bytes executable

C:\WINDOWS\system32\label.exe 9728 bytes executable

C:\WINDOWS\system32\Lang

C:\WINDOWS\system32\langwrbk.dll 89600 bytes executable

C:\WINDOWS\system32\lanman.drv 221600 bytes

C:\WINDOWS\system32\laprxy.dll 6656 bytes executable

C:\WINDOWS\system32\LegitCheckControl.dll 1480232 bytes executable

C:\WINDOWS\system32\lhacm.acm 34064 bytes executable

C:\WINDOWS\system32\licdll.dll 423936 bytes executable

C:\WINDOWS\system32\licmgr10.dll 22016 bytes executable

C:\WINDOWS\system32\licwmi.dll 58880 bytes executable

C:\WINDOWS\system32\l_except.nls 168 bytes

C:\WINDOWS\system32\l_intl.nls 7046 bytes

C:\WINDOWS\system32\Macromed

C:\WINDOWS\system32\magnify.exe 72704 bytes executable

C:\WINDOWS\system32\mag_hook.dll 8192 bytes executable

C:\WINDOWS\system32\main.cpl 187904 bytes executable

C:\WINDOWS\system32\makecab.exe 85504 bytes executable

C:\WINDOWS\system32\mapi32.dll 112128 bytes executable

C:\WINDOWS\system32\mapistub.dll 112128 bytes executable

C:\WINDOWS\system32\mcastmib.dll 14848 bytes executable

C:\WINDOWS\system32\mcd32.dllcatchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

C:\WINDOWS\system32\mcdsrv32.dll 10496 bytes executable

C:\WINDOWS\system32\mchgrcoi.dll 4608 bytes executable

C:\WINDOWS\system32\mciavi.drv 73376 bytes

C:\WINDOWS\system32\mciavi32.dll 84480 bytes executable

C:\WINDOWS\system32\mcicda.dll 17408 bytes executable

C:\WINDOWS\system32\mciole16.dll 8192 bytes

C:\WINDOWS\system32\mciole32.dll 7680 bytes executable

C:\WINDOWS\system32\mciqtz32.dll 35328 bytes executable

C:\WINDOWS\system32\mciseq.dll 23040 bytes executable

C:\WINDOWS\system32\mciseq.drv 25264 bytes

C:\WINDOWS\system32\mciwave.dll 23552 bytes executable

C:\WINDOWS\system32\mciwave.drv 28160 bytes

C:\WINDOWS\system32\mdhcp.dll 50176 bytes executable

C:\WINDOWS\system32\mdminst.dll 118272 bytes executable

C:\WINDOWS\system32\mdwmdmsp.dll 147968 bytes executable

C:\WINDOWS\system32\mem.exe 39274 bytes

C:\WINDOWS\system32\mf3216.dll 40960 bytes executable

C:\WINDOWS\system32\mfc40u.dll 927504 bytes executable

C:\WINDOWS\system32\mfc42.dll 1028096 bytes executable

C:\WINDOWS\system32\mfc42u.dll 981760 bytes executable

C:\WINDOWS\system32\MFC71.dll 1060864 bytes executable

C:\WINDOWS\system32\mfcsubs.dll 22528 bytes executable

C:\WINDOWS\system32\mgmtapi.dll 14848 bytes executable

C:\WINDOWS\system32\mib.bin 46258 bytes

C:\WINDOWS\system32\Microsoft

C:\WINDOWS\system32\midimap.dll 18944 bytes executable

C:\WINDOWS\system32\miglibnt.dll 60928 bytes executable

C:\WINDOWS\system32\migpwd.exe 51712 bytes executable

C:\WINDOWS\system32\mimefilt.dll 18944 bytes executable

C:\WINDOWS\system32\mlang.dat 673088 bytes

C:\WINDOWS\system32\mlang.dll 586240 bytes executable

C:\WINDOWS\system32\mll_hp.dll 3584 bytes executable

C:\WINDOWS\system32\mll_mtf.dll 7680 bytes executable

C:\WINDOWS\system32\mll_qic.dll 5632 bytes executable

C:\WINDOWS\system32\mmc.exe 815104 bytes executable

C:\WINDOWS\system32\mmcbase.dll 70656 bytes executable

C:\WINDOWS\system32\mmcndmgr.dll 1192960 bytes executable

C:\WINDOWS\system32\mmcshext.dll 50688 bytes executable

C:\WINDOWS\system32\mprui.dll 47104 bytes executable

C:\WINDOWS\system32\mrinfo.exe 12800 bytes executable

C:\WINDOWS\system32\MRT.exe 17486968 bytes executable

C:\WINDOWS\system32\msaatext.dll 102912 bytes executable

C:\WINDOWS\system32\msacm.dll 61168 bytes

C:\WINDOWS\system32\msacm32.dll 71680 bytes executable

C:\WINDOWS\system32\msacm32.drv 20480 bytes executable

C:\WINDOWS\system32\msadds32.ax 221184 bytes executable

C:\WINDOWS\system32\msadp32.acm 14848 bytes executable

C:\WINDOWS\system32\msafd.dll 3584 bytes executable

C:\WINDOWS\system32\msapsspc.dll 86016 bytes executable

C:\WINDOWS\system32\msasn1.dll 57344 bytes executable

C:\WINDOWS\system32\msaud32.acm 294912 bytes executable

C:\WINDOWS\system32\msaudite.dll 65024 bytes executable

C:\WINDOWS\system32\mscat32.dll 7168 bytes executable

C:\WINDOWS\system32\mscdexnt.exe 817 bytes

C:\WINDOWS\system32\mscms.dll 74240 bytes executable

C:\WINDOWS\system32\msconf.dll 69632 bytes executable

C:\WINDOWS\system32\mscoree.dll 282112 bytes executable

C:\WINDOWS\system32\mscorier.dll 158720 bytes executable

C:\WINDOWS\system32\mscories.dll 84480 bytes executable

C:\WINDOWS\system32\mscpx32r.dLL 12288 bytes executable

C:\WINDOWS\system32\mscpxl32.dLL 36864 bytes executable

C:\WINDOWS\system32\msswchx.exe 6656 bytes executable

C:\WINDOWS\system32\mstask.dll 274944 bytes executable

C:\WINDOWS\system32\mstext40.dll 264992 bytes executable

C:\WINDOWS\system32\mstime.dll 532480 bytes executable

C:\WINDOWS\system32\mstinit.exe 12288 bytes executable

C:\WINDOWS\system32\mstlsapi.dll 115712 bytes executable

C:\WINDOWS\system32\mstsc.exe 407552 bytes executable

C:\WINDOWS\system32\mstscax.dll 655360 bytes executable

C:\WINDOWS\system32\msutb.dll 195072 bytes executable

C:\WINDOWS\system32\msv1_0.dll 129536 bytes executable

C:\WINDOWS\system32\msvbvm50.dll 1355776 bytes executable

C:\WINDOWS\system32\msvbvm60.dll 1386496 bytes executable

C:\WINDOWS\system32\msvcirt.dll 54784 bytes executable

C:\WINDOWS\system32\msvcp50.dll 565760 bytes executable

C:\WINDOWS\system32\msvcp60.dll 413696 bytes executable

C:\WINDOWS\system32\MScatchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

C:\WINDOWS\system32\MSVCR71.dll 348160 bytes executable

C:\WINDOWS\system32\msvcrt.dll 343040 bytes executable

C:\WINDOWS\system32\msvcrt20.dll 253952 bytes executable

C:\WINDOWS\system32\msvcrt40.dll 61440 bytes executable

C:\WINDOWS\system32\msvfw32.dll 120832 bytes executable

C:\WINDOWS\system32\msvidc32.dll 25600 bytes executable

C:\WINDOWS\system32\msvidctl.dll 1428480 bytes executable

C:\WINDOWS\system32\msvideo.dll 126912 bytes

C:\WINDOWS\system32\msw3prt.dll 72704 bytes executable

C:\WINDOWS\system32\mswdat10.dll 838432 bytes executable

C:\WINDOWS\system32\mswebdvd.dll 204288 bytes executable

C:\WINDOWS\system32\mswmdm.dll 245760 bytes executable

C:\WINDOWS\system32\mswsock.dll 245248 bytes executable

C:\WINDOWS\system32\mswstr10.dll 621344 bytes executable

C:\WINDOWS\system32\msxbde40.dll 355104 bytes executable

C:\WINDOWS\system32\msxml.dll 506368 bytes executable

C:\WINDOWS\system32\msxml2.dll 701440 bytes executable

C:\WINDOWS\system32\netid.dll 139264 bytes executable

C:\WINDOWS\system32\netlogon.dll 407040 bytes executable

C:\WINDOWS\system32\netman.dll 197632 bytes executable

C:\WINDOWS\system32\netmsg.dll 171008 bytes executable

C:\WINDOWS\system32\netplwiz.dll 875008 bytes executable

C:\WINDOWS\system32\netrap.dll 12288 bytes executable

C:\WINDOWS\system32\netsetup.cpl 25600 bytes executable

C:\WINDOWS\system32\netsetup.exe 329728 bytes executable

C:\WINDOWS\system32\netsh.exe 86016 bytes executable

C:\WINDOWS\system32\netshell.dll 1708032 bytes executable

C:\WINDOWS\system32\netstat.exe 36864 bytes executable

C:\WINDOWS\system32\netui0.dll 80896 bytes executable

C:\WINDOWS\system32\netui1.dll 245760 bytes executable

C:\WINDOWS\system32\netui2.dll 308224 bytes executable

C:\WINDOWS\system32\newdev.dll 248832 bytes executable

C:\WINDOWS\system32\nlhtml.dll 103936 bytes executable

C:\WINDOWS\system32\nlsfunc.exe 7052 bytes

C:\WINDOWS\system32\nmevtmsg.dll 12288 bytes executable

C:\WINDOWS\system32\nmmkcert.dll 28672 bytes executable

C:\WINDOWS\system32\noise.chs 1696 bytes

C:\WINDOWS\system32\noise.cht 1696 bytes

C:\WINDOWS\system32\noise.dat 741 bytes

C:\WINDOWS\system32\ntlanui2.dll 14336 bytes executable

C:\WINDOWS\system32\ntlsapi.dll 8192 bytes executable

C:\WINDOWS\system32\ntmarta.dll 118784 bytes executable

C:\WINDOWS\system32\ntmsapi.dll 40960 bytes executable

C:\WINDOWS\system32\ntmsdba.dll 179712 bytes executable

C:\WINDOWS\system32\ntmsevt.dll 36864 bytes executable

C:\WINDOWS\system32\ntmsmgr.dll 488448 bytes executable

C:\WINDOWS\system32\ntmsmgr.msc 26209 bytes

C:\WINDOWS\system32\ntmsoprq.msc 32968 bytes

C:\WINDOWS\system32\ntmssvc.dll 435200 bytes executable

C:\WINDOWS\system32\ntoskrnl.exe 2136064 bytes executable

C:\WINDOWS\system32\ntprint.dll 91136 bytes executable

C:\WINDOWS\system32\ntsd.exe 31744 bytes executable

C:\WINDOWS\system32\ntsdexts.dll 36864 bytes executable

C:\WINDOWS\system32\ntshrui.dll 143872 bytes executable

C:\WINDOWS\system32\ntvdm.exe 419840 bytes executable

C:\WINDOWS\system32\ntvdmd.dll 13312 bytes executable

C:\WINDOWS\system32\nusrmgr.cpl 257024 bytes executable

C:\WINDOWS\system32\nwc.cpl.manifest 749 bytes

C:\WINDOWS\system32\nwprovau.dll 142336 bytes executable

C:\WINDOWS\system32\ping.exe 17920 bytes executable

C:\WINDOWS\system32\ping6.exe 33280 bytes executable

C:\WINDOWS\system32\pjlmon.dll 15360 bytes executable

C:\WINDOWS\system32\plustab.dll 30720 bytes executable

C:\WINDOWS\system32\pmspl.dll 46592 bytes

C:\WINDOWS\system32\pngfilt.dll 39424 bytes executable

C:\WINDOWS\system32\PnkBstrA.exe 66872 bytes executable

C:\WINDOWS\system32\PnkBstrB.exe 107832 bytes executable

C:\WINDOWS\system32\pnrpnsp.dll 48640 bytes executable

C:\WINDOWS\system32\polstore.dll 105472 bytes executable

C:\WINDOWS\system32\powercfg.cpl 114688 bytes executable

C:\WINDOWS\system32\powercfg.exe 49152 bytes executable

C:\WINDOWS\system32\powrprof.dll 17408 bytes executable

C:\WINDOWS\system32\PreInstall

C:\WINDOWS\system32\prflbmsg.dll 16384 bytes executable

C:\WINDOWS\system32\print.exe 9216 bytes executable

C:\WINDOWS\system32\printui.dll 560640 bytes executable

C:\WINDOWS\system32\proctexe.ocx 81920 bytes executable

C:\WINDOWS\system32\prodspec.ini 343 bytes

C:\WINDOWS\system32\profmap.dll 27648 bytes executable

C:\WINDOWS\system32\progman.exe 109568 bytes executable

C:\WINDOWS\system32\proquota.exe 50176 bytes executable

C:\WINDOWS\system32\proxycfg.exe 9216 bytes executable

C:\WINDOWS\system32\psapi.dll 23040 bytes executable

C:\WINDOWS\system32\rasdlg.dll 657920 bytes executable

C:\WINDOWS\system32\rasman.dll 61440 bytes executable

C:\WINDOWS\system32\rasmans.dll 181248 bytes executable

C:\WINDOWS\system32\rasmontr.dll 143360 bytes executable

C:\WINDOWS\system32\rasmxs.dll 22528 bytes executable

C:\WINDOWS\system32\rasphone.exe 56832 bytes executable

C:\WINDOWS\system32\rasppp.dll 206336 bytes executable

C:\WINDOWS\system32\rasrad.dll 23552 bytes executable

C:\WINDOWS\system32\rassapi.dll 16896 bytes executable

C:\WINDOWS\system32\rasser.dll 12800 bytes executable

C:\WINDOWS\system32\rastapi.dll 58880 bytes executable

C:\WINDOWS\system32\rastls.dll 112128 bytes executable

C:\WINDOWS\system32\rcbdyctl.dll 102400 bytes executable

C:\WINDOWS\system32\rcimlby.exe 35840 bytes executable

C:\WINDOWS\system32\rcp.exe 21504 bytes executable

C:\WINDOWS\system32\rdchost.dll 147968 bytes executable

C:\WINDOWS\system32\rdpcfgex.dll 4096 bytes executable

C:\WINDOWS\system32\rdpclip.exe 62464 bytes executable

C:\WINDOWS\system32\rdpdd.dll 92168 bytes executable

C:\WINDOWS\system32\rdpsnd.dll 19968 bytes executable

C:\WINDOWS\system32\rdpwsx.dll 87176 bytes executable

C:\WINDOWS\system32\rdsaddin.exe 13824 bytes executable

C:\WINDOWS\system32\rdshost.exe 67072 bytes executable

C:\WINDOWS\system32\recover.exe 7168 bytes executable

C:\WINDOWS\system32\redir.exe 3338 bytes

C:\WINDOWS\system32\reg.exe 50176 bytes executable

C:\WINDOWS\system32\regapi.dll 49664 bytes executable

C:\WINDOWS\system32\rsvp.exe 132608 bytes executable

C:\WINDOWS\system32\rsvp.ini 12082 bytes

C:\WINDOWS\system32\rsvpcnts.h 3178 bytes

C:\WINDOWS\system32\rsvpmsg.dll 23552 bytes executable

C:\WINDOWS\system32\rsvpperf.dll 9728 bytes executable

C:\WINDOWS\system32\rsvpsp.dll 90112 bytes executable

C:\WINDOWS\system32\RTCOM

C:\WINDOWS\system32\rtcshare.exe 77312 bytes executable

C:\WINDOWS\system32\rtipxmib.dll 31744 bytes executable

C:\WINDOWS\system32\rtm.dll 98304 bytes executable

C:\WINDOWS\system32\RTSndMgr.cpl 282624 bytes executable

C:\WINDOWS\system32\rtutils.dll 44032 bytes executable

C:\WINDOWS\system32\runas.exe 16384 bytes executable

C:\WINDOWS\system32\rundll32.exe 33280 bytes executable

C:\WINDOWS\system32\runonce.exe 14336 bytes executable

C:\WINDOWS\system32\rwinsta.exe 15872 bytes executable

C:\WINDOWS\system32\safrcdlg.dll 43520 bytes executable

C:\WINDOWS\system32\safrdm.dll 29696 bytes executable

C:\WINDOWS\system32\safrslv.dll 45568 bytes executable

C:\WINDOWS\system32\samlib.dll 64000 bytes executable

C:\WINDOWS\system32\samsrv.dll 415744 bytes executable

C:\WINDOWS\system32\sapi.cpl.manifest 749 bytes

C:\WINDOWS\system32\savedump.exe 13312 bytes executable

C:\WINDOWS\system32\sbe.dll 270848 bytes executable

C:\WINDOWS\system32\sbeio.dll 159232 bytes executable

C:\WINDOWS\system32\sc.exe 31232 bytes executable

C:\WINDOWS\system32\scarddlg.dll 69632 bytes executable

C:\WINDOWS\system32\setver.exe 11753 bytes

C:\WINDOWS\system32\sfc.dll 5120 bytes executable

C:\WINDOWS\system32\sfc.exe 9728 bytes executable

C:\WINDOWS\system32\sfcfiles.dll 1580544 bytes executable

C:\WINDOWS\system32\sfc_os.dll 140288 bytes executable

C:\WINDOWS\system32\sfmapi.dll 23552 bytes executable

C:\WINDOWS\system32\shadow.exe 14848 bytes executable

C:\WINDOWS\system32\share.exe 882 bytes

C:\WINDOWS\system32\shdoclc.dll 549376 bytes executable

C:\WINDOWS\system32\shdocvw.dll 1494528 bytes executable

C:\WINDOWS\system32\shell.dll 5120 bytes

C:\WINDOWS\system32\shell32.dll 8454656 bytes executable

C:\WINDOWS\system32\ShellExt

C:\WINDOWS\system32\shellstyle.dll 435712 bytes executable

C:\WINDOWS\system32\shfolder.dll 25088 bytes executable

C:\WINDOWS\system32\shgina.dll 68096 bytes executable

C:\WINDOWS\system32\shiftjis.uce 16740 bytes

C:\WINDOWS\system32\shimeng.dll 65536 bytes executable

C:\WINDOWS\system32\shimgvw.dll 438272 bytes executable

C:\WINDOWS\system32\shlwapi.dll 474112 bytes executable

C:\WINDOWS\system32\shmedia.dll 151552 bytes executable

C:\WINDOWS\system32\spupdsvc.exe 22752 bytes executable

C:\WINDOWS\system32\spxcoins.dll 24661 bytes executable

C:\WINDOWS\system32\sqlsodbc.chm 46133 bytes

C:\WINDOWS\system32\sqlsrv32.dll 442368 bytes executable

C:\WINDOWS\system32\sqlsrv32.rll 90112 bytes executable

C:\WINDOWS\system32\sqlunirl.dll 180800 bytes executable

C:\WINDOWS\system32\sqlwid.dll 24603 bytes executable

C:\WINDOWS\system32\sqlwoa.dll 49179 bytes executable

C:\WINDOWS\system32\srclient.dll 67584 bytes executable

C:\WINDOWS\system32\srrstr.dll 239104 bytes executable

C:\WINDOWS\system32\srsvc.dll 170496 bytes executable

C:\WINDOWS\system32\srvsvc.dll 96768 bytes executable

C:\WINDOWS\system32\ss3dfo.scr 704512 bytes executable

C:\WINDOWS\system32\ssbezier.scr 19968 bytes executable

C:\WINDOWS\system32\ssdpapi.dll 34816 bytes executable

C:\WINDOWS\system32\ssdpsrv.dll 71680 bytes executable

C:\WINDOWS\system32\ssflwbox.scr 393216 bytes executable

C:\WINDOWS\system32\ssmarque.scr 20992 bytes executable

C:\WINDOWS\system32\ssmypics.scr 47104 bytes executable

C:\WINDOWS\system32\ssmyst.scr 18944 bytes executable

C:\WINDOWS\system32\sspipes.scr 610304 bytes executable

C:\WINDOWS\system32\ssstars.scr 14336 bytes executable

C:\WINDOWS\system32\sstext3d.scr 679936 bytes executable

C:\WINDOWS\system32\stclient.dll 54272 bytes executable

C:\WINDOWS\system32\tapi3.dll 858624 bytes executable

C:\WINDOWS\system32\tapi32.dll 181760 bytes executable

C:\WINDOWS\system32\tapiperf.dll 5632 bytes executable

C:\WINDOWS\system32\tapisrv.dll 249344 bytes executable

C:\WINDOWS\system32\tapiui.dll 78848 bytes executable

C:\WINDOWS\system32\taskman.exe 15360 bytes executable

C:\WINDOWS\system32\taskmgr.exe 135680 bytes executable

C:\WINDOWS\system32\tcmsetup.exe 12288 bytes executable

C:\WINDOWS\system32\tcpmib.dll 14848 bytes executable

C:\WINDOWS\system32\tcpmon.dll 45568 bytes executable

C:\WINDOWS\system32\tcpmon.ini 53478 bytes

C:\WINDOWS\system32\tcpmonui.dll 45568 bytes executable

C:\WINDOWS\system32\tcpsvcs.exe 19456 bytes executable

C:\WINDOWS\system32\tdc.ocx 61440 bytes executable

C:\WINDOWS\system32\telephon.cpl 28160 bytes executable

C:\WINDOWS\system32\telnet.exe 75776 bytes executable

C:\WINDOWS\system32\termmgr.dll 358400 bytes executable

C:\WINDOWS\system32\termsrv.dll 295424 bytes executable

C:\WINDOWS\system32\tftp.exe 16896 bytes executable

C:\WINDOWS\system32\umpnpmgr.dll 123392 bytes executable

C:\WINDOWS\system32\unicode.nls 89588 bytes

C:\WINDOWS\system32\unimdm.tsp 206848 bytes executable

C:\WINDOWS\system32\unimdmat.dll 74240 bytes executable

C:\WINDOWS\system32\uniplat.dll 13824 bytes executable

C:\WINDOWS\system32\unlodctr.exe 4096 bytes executable

C:\WINDOWS\system32\untfs.dll 316416 bytes executable

C:\WINDOWS\system32\upnp.dll 132608 bytes executable

C:\WINDOWS\system32\upnpcont.exe 16896 bytes executable

C:\WINDOWS\system32\upnphost.dll 185344 bytes executable

C:\WINDOWS\system32\upnpui.dll 239616 bytes executable

C:\WINDOWS\system32\ups.exe 18432 bytes executable

C:\WINDOWS\system32\ureg.dll 17920 bytes executable

C:\WINDOWS\system32\url.dll 37888 bytes executable

C:\WINDOWS\system32\urlmon.dll 615936 bytes executable

C:\WINDOWS\system32\w32time.dll 174592 bytes executable

C:\WINDOWS\system32\w32tm.exe 49664 bytes executable

C:\WINDOWS\system32\w32topl.dll 22016 bytes executable

C:\WINDOWS\system32\w3ssl.dll 15872 bytes executable

C:\WINDOWS\system32\watchdog.sys 17664 bytes executable

C:\WINDOWS\system32\wavemsp.dll 208896 bytes executable

C:\WINDOWS\system32\wbcache.deu 65489 bytes

C:\WINDOWS\system32\wbcache.enu 65489 bytes

C:\WINDOWS\system32\wbcache.esn 65489 bytes

C:\WINDOWS\system32\wbcache.fra 65489 bytes

C:\WINDOWS\system32\wbcache.ita 65489 bytes

C:\WINDOWS\system32\wbcache.nld 65489 bytes

C:\WINDOWS\system32\wbcache.sve 65489 bytes

C:\WINDOWS\system32\wbdbase.deu 1309184 bytes

C:\WINDcatchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

C:\WINDOWS\system32\wbdbase.esn 750080 bytes

C:\WINDOWS\system32\wbdbase.fra 786944 bytes

C:\WINDOWS\system32\wbdbase.ita 867840 bytes

C:\WINDOWS\system32\wbdbase.nld 1095680 bytes

C:\WINDOWS\system32\wbdbase.sve 937984 bytes

C:\WINDOWS\system32\wbem

C:\WINDOWS\system32\wdigest.dll 49152 bytes executable

C:\WINDOWS\system32\wdl.trm 4096 bytes

C:\WINDOWS\system32\wdmaud.drv 23552 bytes executable

C:\WINDOWS\system32\webcheck.dll 276480 bytes executable

C:\WINDOWS\system32\webclnt.dll 68096 bytes executable

C:\WINDOWS\system32\webfldrs.msi 1326080 bytes

C:\WINDOWS\system32\webvw.dll 135680 bytes executable

C:\WINDOWS\system32\wextract.exe 65536 bytes executable

C:\WINDOWS\system32\wfwnet.drv 13600 bytes

C:\WINDOWS\system32\wiaacmgr.exe 433664 bytes executable

C:\WINDOWS\system32\wiadefui.dll 463360 bytes executable

C:\WINDOWS\system32\wiadss.dll 124416 bytes executable

C:\WINDOWS\system32\wiascr.dll 75776 bytes executable

C:\WINDOWS\system32\wiaservc.dll 333824 bytes executable

C:\WINDOWS\system32\wiasf.ax 40448 bytes executable

C:\WINDOWS\system32\wiashext.dll 589312 bytes executable

C:\WINDOWS\system32\wiavideo.dll 111104 bytes executable

C:\WINDOWS\system32\wiavusd.dll 145408 bytes executable

C:\WINDOWS\system32\wifeman.dll 9216 bytes

C:\WINDOWS\system32\win.com 18432 bytes executable

C:\WINDOWS\system32\win32k.sys 1845248 bytes executable

C:\WINDOWS\system32\win32spl.dll 101888 bytes executable

C:\WINDOWS\system32\win87em.dll 13312 bytes

C:\WINDOWS\system32\winbrand.dll 937984 bytes executable

C:\WINDOWS\system32\winchat.exe 35328 bytes executable

C:\WINDOWS\system32\WindowsLogon.manifest 488 bytes

C:\WINDOWS\system32\usrv80a.dll 49209 bytes executable

C:\WINDOWS\system32\usrvoica.dll 45116 bytes executable

C:\WINDOWS\system32\usrvpa.dll 49211 bytes executable

C:\WINDOWS\system32\utildll.dll 25600 bytes executable

C:\WINDOWS\system32\utilman.exe 50176 bytes executable

C:\WINDOWS\system32\uxtheme.dll 218624 bytes executable

C:\WINDOWS\system32\v7vga.rom 18832 bytes

C:\WINDOWS\system32\vbajet32.dll 30749 bytes executable

C:\WINDOWS\system32\vbisurf.ax 30720 bytes executable

C:\WINDOWS\system32\vbscript.dll 417792 bytes executable

C:\WINDOWS\system32\vcdex.dll 7680 bytes executable

C:\WINDOWS\system32\vdmdbg.dll 26112 bytes executable

C:\WINDOWS\system32\vdmredir.dll 51712 bytes executable

C:\WINDOWS\system32\ver.dll 9008 bytes

C:\WINDOWS\system32\verclsid.exe 28672 bytes executable

C:\WINDOWS\system32\verifier.dll 13312 bytes executable

C:\WINDOWS\system32\verifier.exe 98304 bytes executable

C:\WINDOWS\system32\version.dll 18944 bytes executable

C:\WINDOWS\system32\vfpodbc.dll 20535 bytes executable

C:\WINDOWS\system32\vga.dll 9344 bytes executable

C:\WINDOWS\system32\vga.drv 2176 bytes

C:\WINDOWS\system32\vga256.dll 51456 bytes executable

C:\WINDOWS\system32\vga64k.dll 18176 bytes executable

C:\WINDOWS\system32\View Channels.scf 75 bytes

C:\WINDOWS\system32\vjoy.dll 4608 bytes executable

C:\WINDOWS\system32\vssadmin.exe 33792 bytes executable

C:\WINDOWS\system32\vssapi.dll 430592 bytes executable

C:\WINDOWS\system32\vssvc.exe 289792 bytes executable

C:\WINDOWS\system32\winsrv.dll 292864 bytes executable

C:\WINDOWS\system32\winsta.dll 53760 bytes executable

C:\WINDOWS\system32\winstrm.dll 18944 bytes executable

C:\WINDOWS\system32\wintrust.dll 176640 bytes executable

C:\WINDOWS\system32\winver.exe 5632 bytes executable

C:\WINDOWS\system32\wkssvc.dll 132096 bytes executable

C:\WINDOWS\system32\wldap32.dll 172032 bytes executable

C:\WINDOWS\system32\wlnotify.dll 92672 bytes executable

C:\WINDOWS\system32\wmadmod.dll 408064 bytes executable

C:\WINDOWS\system32\wmadmoe.dll 670720 bytes executable

C:\WINDOWS\system32\wmasf.dll 230912 bytes executable

C:\WINDOWS\system32\wmdmlog.dll 27136 bytes executable

C:\WINDOWS\system32\wmdmps.dll 23552 bytes executable

C:\WINDOWS\system32\wmerrenu.dll 51200 bytes executable

C:\WINDOWS\system32\wmerror.dll 168448 bytes executable

C:\WINDOWS\system32\wmi.dll 5632 bytes executable

C:\WINDOWS\system32\wmidx.dll 151552 bytes executable

C:\WINDOWS\system32\wmimgmt.msc 63488 bytes

C:\WINDOWS\system32\wmiprop.dll 18944 bytes executable

C:\WINDOWS\system32\hal.dll 134400 bytes executable

C:\WINDOWS\system32\hccoin.dll 7168 bytes executable

C:\WINDOWS\system32\HdAProp.dll 25088 bytes executable

C:\WINDOWS\system32\HdAShCut.exe 61952 bytes executable

C:\WINDOWS\system32\HdAudRes.dll 5120 bytes executable

C:\WINDOWS\system32\hdwwiz.cpl 155136 bytes executable

C:\WINDOWS\system32\help.exe 14848 bytes executable

C:\WINDOWS\system32\hhctrl.ocx 546304 bytes executable

C:\WINDOWS\system32\hhsetup.dll 41472 bytes executable

C:\WINDOWS\system32\hid.dll 20992 bytes executable

C:\WINDOWS\system32\hidphone.tsp 29696 bytes executable

C:\WINDOWS\system32\hidserv.dll 21504 bytes executable

C:\WINDOWS\system32\himem.sys 4768 bytes

C:\WINDOWS\system32\hlink.dll 72704 bytes executable

C:\WINDOWS\system32\hnetcfg.dll 344064 bytes executable

C:\WINDOWS\system32\hnetmon.dll 14848 bytes executable

C:\WINDOWS\system32\hnetwiz.dll 330752 bytes executable

C:\WINDOWS\system32\homepage.inf 929 bytes

C:\WINDOWS\system32\hostname.exe 7680 bytes executable

C:\WINDOWS\system32\hotplug.dll 144896 bytes executable

C:\WINDOWS\system32\hticons.dll 44544 bytes executable

C:\WINDOWS\system32\mfc40.dll 924432 bytes executable

C:\WINDOWS\system32\mmdriver.inf 1490 bytes

C:\WINDOWS\system32\mprmsg.dll 99840 bytes executable

C:\WINDOWS\system32\MSCTF.dll 294400 bytes executable

C:\WINDOWS\system32\mshta.exe 29184 bytes executable

C:\WINDOWS\system32\msisip.dll 15360 bytes executable

C:\WINDOWS\system32\msports.dll 41984 bytes executable

C:\WINDOWS\system32\msswch.dll 13312 bytes executable

C:\WINDOWS\system32\msxml2r.dll 37916 bytes executable

C:\WINDOWS\system32\ncobjapi.dll 36352 bytes executable

C:\WINDOWS\system32\neth.dll 253952 bytes executable

C:\WINDOWS\system32\noise.deu 149848 bytes

C:\WINDOWS\system32\ntlanui.dll 57856 bytes executable

C:\WINDOWS\system32\oakley.dll 266752 bytes executable

C:\WINDOWS\system32\odbcp32r.dll 12288 bytes executable

C:\WINDOWS\system32\olesvr32.dll 22016 bytes executable

C:\WINDOWS\system32\perfc009.dat 59984 bytes

C:\WINDOWS\system32\pifmgr.dll 35328 bytes executable

C:\WINDOWS\system32\psbase.dll 96768 bytes executable

C:\WINDOWS\system32\inetppui.dll 15872 bytes executable

C:\WINDOWS\system32\inetres.dll 48128 bytes executable

C:\WINDOWS\system32\inetsrv

C:\WINDOWS\system32\infosoft.dll 450560 bytes executable

C:\WINDOWS\system32\initdebug.nfo 45 bytes

C:\WINDOWS\system32\initpki.dll 147456 bytes executable

C:\WINDOWS\system32\input.dll 123392 bytes executable

C:\WINDOWS\system32\inseng.dll 96256 bytes executable

C:\WINDOWS\system32\Install6x.dll 295028 bytes executable

C:\WINDOWS\system32\instcat.sql 956990 bytes

C:\WINDOWS\system32\intl.cpl 129536 bytes executable

C:\WINDOWS\system32\iologmsg.dll 30720 bytes executable

C:\WINDOWS\system32\ipconf.tsp 17408 bytes executable

C:\WINDOWS\system32\ipconfig.exe 55808 bytes executable

C:\WINDOWS\system32\iphlpapi.dll 94720 bytes executable

C:\WINDOWS\system32\ipmontr.dll 154112 bytes executable

C:\WINDOWS\system32\ipnathlp.dll 331264 bytes executable

C:\WINDOWS\system32\ippromon.dll 330752 bytes executable

C:\WINDOWS\system32\iprop.dll 3584 bytes executable

C:\WINDOWS\system32\iprtprio.dll 4096 bytes executable

C:\WINDOWS\system32\iprtrmgr.dll 169984 bytes executable

C:\WINDOWS\system32\ipsec6.exe 44032 bytes executable

C:\WINDOWS\system32\ipsecsnp.dll 349696 bytes executable

C:\WINDOWS\system32\ipsecsvc.dll 182784 bytes executable

C:\WINDOWS\system32\ipsmsnap.dll 384000 bytes executable

C:\WINDOWS\system32\ipv6.exe 53248 bytes executable

C:\WINDOWS\system32\ipv6mon.dll 59904 bytes executable

C:\WINDOWS\system32\ipxmontr.dll 83968 bytes executable

C:\WINDOWS\system32\ipxpromn.dll 69120 bytes executable

C:\WINDOWS\system32\ipxrip.dll 21504 bytes executable

C:\WINDOWS\system32\ipxroute.exe 23552 bytes executable

C:\WINDOWS\system32\ipxrtmgr.dll 39936 bytes executable

C:\WINDOWS\system32\ipxsap.dll 66560 bytes executable

C:\WINDOWS\system32\ipxwan.dll 20992 bytes executable

C:\WINDOWS\system32\linkinfo.dll 19968 bytes executable

C:\WINDOWS\system32\lmhsvc.dll 13824 bytes executable

C:\WINDOWS\system32\lmrt.dll 399872 bytes executable

C:\WINDOWS\system32\lnkstub.exe 25088 bytes executable

C:\WINDOWS\system32\loadfix.com 1131 bytes

C:\WINDOWS\system32\loadperf.dll 97280 bytes executable

C:\WINDOWS\system32\locale.nls 249270 bytes

C:\WINDOWS\system32\localsec.dll 221696 bytes executable

C:\WINDOWS\system32\localspl.dll 341504 bytes executable

C:\WINDOWS\system32\localui.dll 11776 bytes executable

C:\WINDOWS\system32\locator.exe 75264 bytes executable

C:\WINDOWS\system32\lodctr.exe 5120 bytes executable

C:\WINDOWS\system32\logagent.exe 103936 bytes executable

C:\WINDOWS\system32\LogFiles

C:\WINDOWS\system32\loghours.dll 50176 bytes executable

C:\WINDOWS\system32\logman.exe 59392 bytes executable

C:\WINDOWS\system32\logoff.exe 15360 bytes executable

C:\WINDOWS\system32\logon.scr 220672 bytes executable

C:\WINDOWS\system32\logonui.exe 514560 bytes executable

C:\WINDOWS\system32\logonui.exe.manifest 488 bytes

C:\WINDOWS\system32\LoopyMusic.wav 940794 bytes

C:\WINDOWS\system32\lpk.dll 22016 bytes executable

C:\WINDOWS\system32\lpq.exe 6144 bytes executable

C:\WINDOWS\system32\lpr.exe 8192 bytes executable

C:\WINDOWS\system32\lprhelp.dll 10240 bytes executable

C:\WINDOWS\system32\lprmonui.dll 9216 bytes executable

C:\WINDOWS\system32\lsasrv.dll 721920 bytes executable

C:\WINDOWS\system32\lsass.exe 13312 bytes executable

C:\WINDOWS\system32\lusrmgr.msc 42166 bytes

C:\WINDOWS\system32\lz32.dll 2560 bytes executable

C:\WINDOWS\system32\mmdrv.dll 12288 bytes executable

C:\WINDOWS\system32\mmfutil.dll 17408 bytes executable

C:\WINDOWS\system32\mmsys.cpl 618496 bytes executable

C:\WINDOWS\system32\mmsystem.dll 68768 bytes

C:\WINDOWS\system32\mmtask.tsk 1152 bytes

C:\WINDOWS\system32\mmutilse.dll 119808 bytes executable

C:\WINDOWS\system32\mnmdd.dll 34560 bytes executable

C:\WINDOWS\system32\mnmsrvc.exe 32768 bytes executable

C:\WINDOWS\system32\mobsync.dll 207360 bytes executable

C:\WINDOWS\system32\mobsync.exe 143360 bytes executable

C:\WINDOWS\system32\mode.com 19456 bytes executable

C:\WINDOWS\system32\modemui.dll 153600 bytes executable

C:\WINDOWS\system32\modex.dll 10112 bytes executable

C:\WINDOWS\system32\more.com 15872 bytes executable

C:\WINDOWS\system32\moricons.dll 216064 bytes executable

C:\WINDOWS\system32\mountvol.exe 8192 bytes executable

C:\WINDOWS\system32\mouse.drv 2032 bytes

C:\WINDOWS\system32\mp43dmod.dll 310272 bytes executable

C:\WINDOWS\system32\mp4sdmod.dll 384512 bytes executable

C:\WINDOWS\system32\mpeg2data.ax 118272 bytes executable

C:\WINDOWS\system32\mpg2splt.ax 148992 bytes executable

C:\WINDOWS\system32\mpg4dmod.dll 240640 bytes executable

C:\WINDOWS\system32\mpg4ds32.ax 262144 bytes executable

C:\WINDOWS\system32\mplay32.exe 123392 bytes executable

C:\WINDOWS\system32\mpnotify.exe 22016 bytes executable

C:\WINDOWS\system32\mpr.dll 59904 bytes executable

C:\WINDOWS\system32\mprapi.dll 87040 bytes executable

C:\WINDOWS\system32\mprddm.dll 69120 bytes executable

C:\WINDOWS\system32\mprdim.dll 49152 bytes executable

C:\WINDOWS\system32\mshtml.dll 3059712 bytes executable

C:\WINDOWS\system32\mshtml.tlb 1351168 bytes executable

C:\WINDOWS\system32\mshtmled.dll 449024 bytes executable

C:\WINDOWS\system32\mshtmler.dll 56832 bytes executable

C:\WINDOWS\system32\msi.dll 2854400 bytes executable

C:\WINDOWS\system32\msident.dll 51712 bytes executable

C:\WINDOWS\system32\msidle.dll 6656 bytes executable

C:\WINDOWS\system32\msidntld.dll 14848 bytes executable

C:\WINDOWS\system32\msieftp.dll 248832 bytes executable

C:\WINDOWS\system32\msiexec.exe 78848 bytes executable

C:\WINDOWS\system32\msihnd.dll 271360 bytes executable

C:\WINDOWS\system32\msimg32.dll 4608 bytes executable

C:\WINDOWS\system32\msimsg.dll 884736 bytes executable

C:\WINDOWS\system32\MSIMTF.dll 159232 bytes executable

C:\WINDOWS\system32\msjet40.dll 1516568 bytes executable

C:\WINDOWS\system32\msjetoledb40.dll 355112 bytes executable

C:\WINDOWS\system32\msjint40.dll 151583 bytes executable

C:\WINDOWS\system32\msjter40.dll 60192 bytes executable

C:\WINDOWS\system32\msjtes40.dll 248608 bytes executable

C:\WINDOWS\system32\mslbui.dll 25088 bytes executable

C:\WINDOWS\system32\msls31.dll 146432 bytes executable

C:\WINDOWS\system32\msltus40.dll 219936 bytes executable

C:\WINDOWS\system32\msnetobj.dll 259072 bytes executable

C:\WINDOWS\system32\msnsspc.dll 290816 bytes executable

C:\WINDOWS\system32\msobjs.dll 33280 bytes executable

C:\WINDOWS\system32\msoeacct.dll 252928 bytes executable

C:\WINDOWS\system32\msoert2.dll 105984 bytes executable

C:\WINDOWS\system32\msorc32r.dll 20480 bytes executable

C:\WINDOWS\system32\msorcl32.dll 143360 bytes executable

C:\WINDOWS\system32\mspaint.exe 343040 bytes executable

C:\WINDOWS\system32\mspatcha.dll 30208 bytes executable

C:\WINDOWS\system32\mspbde40.dll 355104 bytes executable

C:\WINDOWS\system32\mspmsnsv.dll 52224 bytes executable

C:\WINDOWS\system32\mspmsp.dll 201728 bytes executable

C:\WINDOWS\system32\msxml3.dll 1104896 bytes executable

C:\WINDOWS\system32\msxml3r.dll 44032 bytes executable

C:\WINDOWS\system32\msxmlr.dll 26624 bytes executable

C:\WINDOWS\system32\msyuv.dll 17408 bytes executable

C:\WINDOWS\system32\mtxclu.dll 66560 bytes executable

C:\WINDOWS\system32\mtxdm.dll 20480 bytes executable

C:\WINDOWS\system32\mtxex.dll 4096 bytes executable

C:\WINDOWS\system32\mtxlegih.dll 25088 bytes executable

C:\WINDOWS\system32\mtxoci.dll 91136 bytes executable

C:\WINDOWS\system32\mucltui.dll 271224 bytes executable

C:\WINDOWS\system32\mucltui.dll.mui 30072 bytes executable

C:\WINDOWS\system32\mui

C:\WINDOWS\system32\muweb.dll 207736 bytes executable

C:\WINDOWS\system32\mycomput.dll 90112 bytes executable

C:\WINDOWS\system32\mydocs.dll 90624 bytes executable

C:\WINDOWS\system32\narrator.exe 53760 bytes executable

C:\WINDOWS\system32\narrhook.dll 35840 bytes executable

C:\WINDOWS\system32\nbtstat.exe 20480 bytes executable

C:\WINDOWS\system32\noise.eng 751 bytes

C:\WINDOWS\system32\noise.enu 751 bytes

C:\WINDOWS\system32\noise.esn 19684 bytes

C:\WINDOWS\system32\noise.fra 49196 bytes

C:\WINDOWS\system32\noise.ita 19618 bytes

C:\WINDOWS\system32\noise.nld 13256 bytes

C:\WINDOWS\system32\noise.sve 13730 bytes

C:\WINDOWS\system32\noise.tha 697 bytes

C:\WINDOWS\system32\notepad.exe 69120 bytes executable

C:\WINDOWS\system32\npp

C:\WINDOWS\system32\npptools.dll 54784 bytes executable

C:\WINDOWS\system32\nscompat.tlb 23392 bytes

C:\WINDOWS\system32\nslookup.exe 76800 bytes executable

C:\WINDOWS\system32\ntdll.dll 708096 bytes executable

C:\WINDOWS\system32\ntdos.sys 27866 bytes

C:\WINDOWS\system32\ntdos404.sys 29146 bytes

C:\WINDOWS\system32\ntdos411.sys 29370 bytes

C:\WINDOWS\system32\ntdos412.sys 29274 bytes

C:\WINDOWS\system32\ntdos804.sys 29146 bytes

C:\WINDOWS\system32\ntdsapi.dll 67072 bytes executable

C:\WINDOWS\system32\ntimage.gif 48794 bytes

C:\WINDOWS\system32\ntio.sys 33840 bytes

C:\WINDOWS\system32\ntio404.sys 34560 bytes

C:\WINDOWS\system32\ntio411.sys 35648 bytes

C:\WINDOWS\system32\ntio412.sys 35424 bytes

C:\WINDOWS\system32\ntio804.sys 34560 bytes

C:\WINDOWS\system32\ntkrnlpa.exe 2015744 bytes executable

C:\WINDOWS\system32\ntlanman.dll 43520 bytes executable

C:\WINDOWS\system32\objsel.dll 285696 bytes executable

C:\WINDOWS\system32\occache.dll 96256 bytes executable

C:\WINDOWS\system32\ocmanage.dll 60928 bytes executable

C:\WINDOWS\system32\odbc16gt.dll 26224 bytes

C:\WINDOWS\system32\odbc32.dll 249856 bytes executable

C:\WINDOWS\system32\odbc32gt.dll 16384 bytes executable

C:\WINDOWS\system32\odbcad32.exe 32768 bytes executable

C:\WINDOWS\system32\odbcbcp.dll 24576 bytes executable

C:\WINDOWS\system32\odbcconf.dll 135168 bytes executable

C:\WINDOWS\system32\odbcconf.exe 69632 bytes executable

C:\WINDOWS\system32\odbcconf.rsp 4310 bytes

C:\WINDOWS\system32\odbccp32.cpl 32768 bytes executable

C:\WINDOWS\system32\odbccp32.dll 106496 bytes executable

C:\WINDOWS\system32\odbccr32.dll 65536 bytes executable

C:\WINDOWS\system32\odbccu32.dll 65536 bytes executable

C:\WINDOWS\system32\odbcint.dll 94208 bytes executable

C:\WINDOWS\system32\odbcji32.dll 53279 bytes executable

C:\WINDOWS\system32\odbcjt32.dll 278559 bytes executable

C:\WINDOWS\system32\odbctrac.dll 147456 bytes executable

C:\WINDOWS\system32\oddbse32.dll 20511 bytes executable

C:\WINDOWS\system32\odexl32.dll 20510 bytes executable

C:\WINDOWS\system32\odfox32.dll 20510 bytes executable

C:\WINDOWS\system32\odpdx32.dll 20510 bytes executable

C:\WINDOWS\system32\odtext32.dll 20511 bytes executable

C:\WINDOWS\system32\oembios.bin 13107200 bytes

C:\WINDOWS\system32\oembios.dat 4461 bytes

C:\WINDOWS\system32\oembios.sig 6761 bytes

C:\WINDOWS\system32\Oemdspif.dll 139264 bytes executable

C:\WINDOWS\system32\offfilt.dll 120832 bytes executable

C:\WINDOWS\system32\ole2.dll 39744 bytes

C:\WINDOWS\system32\ole2disp.dll 169520 bytes

C:\WINDOWS\system32\ole2nls.dll 153008 bytes

C:\WINDOWS\system32\ole32.dll 1285120 bytes executable

C:\WINDOWS\system32\oleacc.dll 163328 bytes executable

C:\WINDOWS\system32\oleaccrc.dll 16896 bytes executable

C:\WINDOWS\system32\oleaut32.dll 550912 bytes executable

C:\WINDOWS\system32\olecli.dll 82944 bytes

C:\WINDOWS\system32\olecli32.dll 74752 bytes executable

C:\WINDOWS\system32\olecnv32.dll 37888 bytes executable

C:\WINDOWS\system32\oledlg.dll 122880 bytes executable

C:\WINDOWS\system32\oleprn.dll 107008 bytes executable

C:\WINDOWS\system32\olepro32.dll 83456 bytes executable

C:\WINDOWS\system32\olesvr.dll 24064 bytes

C:\WINDOWS\system32\perfci.h 427 bytes

C:\WINDOWS\system32\perfci.ini 2891 bytes

C:\WINDOWS\system32\perfctrs.dll 39936 bytes executable

C:\WINDOWS\system32\perfd009.dat 28626 bytes

C:\WINDOWS\system32\perfdisk.dll 26624 bytes executable

C:\WINDOWS\system32\perffilt.h 140 bytes

C:\WINDOWS\system32\perffilt.ini 1152 bytes

C:\WINDOWS\system32\perfh009.dat 397890 bytes

C:\WINDOWS\system32\perfi009.dat 272128 bytes

C:\WINDOWS\system32\perfmon.exe 15872 bytes executable

C:\WINDOWS\system32\perfmon.msc 58273 bytes

C:\WINDOWS\system32\perfnet.dll 16896 bytes executable

C:\WINDOWS\system32\perfos.dll 25088 bytes executable

C:\WINDOWS\system32\perfproc.dll 34816 bytes executable

C:\WINDOWS\system32\PerfStringBackup.INI 464860 bytes

C:\WINDOWS\system32\perfts.dll 12288 bytes executable

C:\WINDOWS\system32\perfwci.h 435 bytes

C:\WINDOWS\system32\perfwci.ini 2732 bytes

C:\WINDOWS\system32\photowiz.dll 176128 bytes executable

C:\WINDOWS\system32\PhysX.cpl 372736 bytes executable

C:\WINDOWS\system32\PhysX.cpl.manifest 580 bytes

C:\WINDOWS\system32\pid.dll 35328 bytes executable

C:\WINDOWS\system32\pidgen.dll 24064 bytes executable

C:\WINDOWS\system32\pschdcnt.h 3010 bytes

C:\WINDOWS\system32\pschdprf.dll 10752 bytes executable

C:\WINDOWS\system32\pschdprf.ini 6877 bytes

C:\WINDOWS\system32\pscript.sep 51 bytes

C:\WINDOWS\system32\psnppagn.dll 8192 bytes executable

C:\WINDOWS\system32\pstorec.dll 43520 bytes executable

C:\WINDOWS\system32\pstorsvc.dll 34304 bytes executable

C:\WINDOWS\system32\pubprn.vbs 3708 bytes

C:\WINDOWS\system32\qappsrv.exe 16896 bytes executable

C:\WINDOWS\system32\qasf.dll 237568 bytes executable

C:\WINDOWS\system32\qcap.dll 192512 bytes executable

C:\WINDOWS\system32\qdv.dll 279040 bytes executable

C:\WINDOWS\system32\qdvd.dll 385024 bytes executable

C:\WINDOWS\system32\qedit.dll 562176 bytes executable

C:\WINDOWS\system32\qedwipes.dll 733696 bytes executable

C:\WINDOWS\system32\qmgr.dll 382464 bytes executable

C:\WINDOWS\system32\qmgrprxy.dll 18944 bytes executable

C:\WINDOWS\system32\qosname.dll 8192 bytes executable

C:\WINDOWS\system32\qprocess.exe 20480 bytes executable

C:\WINDOWS\system32\quartz.dll 1287680 bytes executable

C:\WINDOWS\system32\query.dll 1435648 bytes executable

C:\WINDOWS\system32\qwinsta.exe 22016 bytes executable

C:\WINDOWS\system32\racpldlg.dll 43520 bytes executable

C:\WINDOWS\system32\ras

C:\WINDOWS\system32\rasadhlp.dll 8192 bytes executable

C:\WINDOWS\system32\rasapi32.dll 236544 bytes executable

C:\WINDOWS\system32\rasauto.dll 89088 bytes executable

C:\WINDOWS\system32\rasautou.exe 11776 bytes executable

C:\WINDOWS\system32\raschap.dll 69632 bytes executable

C:\WINDOWS\system32\rasctrnm.h 1818 bytes

C:\WINDOWS\system32\rasctrs.dll 11776 bytes executable

C:\WINDOWS\system32\rasctrs.ini 3458 bytes

C:\WINDOWS\system32\regini.exe 33792 bytes executable

C:\WINDOWS\system32\regsvc.dll 59904 bytes executable

C:\WINDOWS\system32\regsvr32.exe 11776 bytes executable

C:\WINDOWS\system32\regwiz.exe 4608 bytes executable

C:\WINDOWS\system32\regwizc.dll 397824 bytes executable

C:\WINDOWS\system32\ReinstallBackups

C:\WINDOWS\system32\remotepg.dll 60416 bytes executable

C:\WINDOWS\system32\remotesp.tsp 76800 bytes executable

C:\WINDOWS\system32\rend.dll 107520 bytes executable

C:\WINDOWS\system32\replace.exe 12800 bytes executable

C:\WINDOWS\system32\reset.exe 9728 bytes executable

C:\WINDOWS\system32\Restore

C:\WINDOWS\system32\resutils.dll 58880 bytes executable

C:\WINDOWS\system32\rexec.exe 13824 bytes executable

C:\WINDOWS\system32\riched20.dll 433152 bytes executable

C:\WINDOWS\system32\riched32.dll 3584 bytes executable

C:\WINDOWS\system32\rnr20.dll 3072 bytes executable

C:\WINDOWS\system32\route.exe 19968 bytes executable

C:\WINDOWS\system32\routemon.exe 25600 bytes executable

C:\WINDOWS\system32\routetab.dll 6656 bytes executable

C:\WINDOWS\system32\rpcns4.dll 22016 bytes executable

C:\WINDOWS\system32\rpcrt4.dll 584192 bytes executable

C:\WINDOWS\system32\rpcss.dll 397824 bytes executable

C:\WINDOWS\system32\rsaci.rat 3167 bytes

C:\WINDOWS\system32\rsaenh.dll 152576 bytes executable

C:\WINDOWS\system32\rsh.exe 14848 bytes executable

C:\WINDOWS\system32\rshx32.dll 39936 bytes executable

C:\WINDOWS\system32\rsm.exe 49152 bytes executable

C:\WINDOWS\system32\rsmps.dll 18944 bytes executable

C:\WINDOWS\system32\rsmsink.exe 24576 bytes executable

C:\WINDOWS\system32\scardsvr.exe 95744 bytes executable

C:\WINDOWS\system32\sccbase.dll 169984 bytes executable

C:\WINDOWS\system32\sccsccp.dll 171008 bytes executable

C:\WINDOWS\system32\scecli.dll 180224 bytes executable

C:\WINDOWS\system32\scesrv.dll 313856 bytes executable

C:\WINDOWS\system32\schannel.dll 144896 bytes executable

C:\WINDOWS\system32\schedsvc.dll 190976 bytes executable

C:\WINDOWS\system32\sclgntfy.dll 20992 bytes executable

C:\WINDOWS\system32\scredir.dll 26624 bytes executable

C:\WINDOWS\system32\scrnsave.scr 9216 bytes executable

C:\WINDOWS\system32\scrobj.dll 159744 bytes executable

C:\WINDOWS\system32\scrrun.dll 151552 bytes executable

C:\WINDOWS\system32\sdbinst.exe 77312 bytes executable

C:\WINDOWS\system32\sdhcinst.dll 29184 bytes executable

C:\WINDOWS\system32\sdpblb.dll 130048 bytes executable

C:\WINDOWS\system32\seclogon.dll 18944 bytes executable

C:\WINDOWS\system32\secupd.dat 4569 bytes

C:\WINDOWS\system32\secupd.sig 7208 bytes

C:\WINDOWS\system32\shrpubw.exe 77824 bytes executable

C:\WINDOWS\system32\shscrap.dll 27648 bytes executable

C:\WINDOWS\system32\shsvcs.dll 134656 bytes executable

C:\WINDOWS\system32\shutdown.exe 19456 bytes executable

C:\WINDOWS\system32\sigtab.dll 13312 bytes executable

C:\WINDOWS\system32\sigverif.exe 70144 bytes executable

C:\WINDOWS\system32\simpdata.tlb 16384 bytes executable

C:\WINDOWS\system32\sirenacm.dll 51224 bytes executable

C:\WINDOWS\system32\sisbkup.dll 13824 bytes executable

C:\WINDOWS\system32\skdll.dll 5632 bytes executable

C:\WINDOWS\system32\skeys.exe 26112 bytes executable

C:\WINDOWS\system32\slayerxp.dll 25088 bytes executable

C:\WINDOWS\system32\slbcsp.dll 306176 bytes executable

C:\WINDOWS\system32\slbiop.dll 98304 bytes executable

C:\WINDOWS\system32\slbrccsp.dll 14848 bytes executable

C:\WINDOWS\system32\sl_anet.acm 86016 bytes executable

C:\WINDOWS\system32\smbinst.exe 8192 bytes executable

C:\WINDOWS\system32\smlogcfg.dll 363008 bytes executable

C:\WINDOWS\system32\smlogsvc.exe 89600 bytes executable

C:\WINDOWS\system32\stdole32.tlb 7168 bytes executable

C:\WINDOWS\system32\sti.dll 67584 bytes executable

C:\WINDOWS\system32\stimon.exe 14848 bytes executable

C:\WINDOWS\system32\sti_ci.dll 136704 bytes executable

C:\WINDOWS\system32\stobject.dll 121856 bytes executable

C:\WINDOWS\system32\storage.dll 4208 bytes

C:\WINDOWS\system32\storprop.dll 74752 bytes executable

C:\WINDOWS\system32\streamci.dll 8192 bytes executable

C:\WINDOWS\system32\strmdll.dll 246814 bytes executable

C:\WINDOWS\system32\strmfilt.dll 75776 bytes executable

C:\WINDOWS\system32\subrange.uce 93702 bytes

C:\WINDOWS\system32\subst.exe 9216 bytes executable

C:\WINDOWS\system32\svchost.exe 14336 bytes executable

C:\WINDOWS\system32\svcpack.dll 6144 bytes executable

C:\WINDOWS\system32\swprv.dll 138752 bytes executable

C:\WINDOWS\system32\sxs.dll 713216 bytes executable

C:\WINDOWS\system32\syncapp.exe 51200 bytes executable

C:\WINDOWS\system32\synceng.dll 57856 bytes executable

C:\WINDOWS\system32\syncui.dll 191488 bytes executable

C:\WINDOWS\system32\sysdm.cpl 298496 bytes executable

C:\WINDOWS\system32\sysedit.exe 18896 bytes

C:\WINDOWS\system32\sysinv.dll 15872 bytes executable

C:\WINDOWS\system32\syskey.exe 36864 bytes executable

C:\WINDOWS\system32\sysmon.ocx 218624 bytes executable

C:\WINDOWS\system32\sysocmgr.exe 105984 bytes executable

C:\WINDOWS\system32\sysprint.sep 3214 bytes

C:\WINDOWS\system32\sysprtj.sep 3577 bytes

C:\WINDOWS\system32\syssetup.dll 984576 bytes executable

C:\WINDOWS\system32\system.drv 3360 bytes

C:\WINDOWS\system32\systray.exe 3072 bytes executable

C:\WINDOWS\system32\t2embed.dll 118272 bytes executable

C:\WINDOWS\system32\timedate.cpl 94208 bytes executable

C:\WINDOWS\system32\timer.drv 4048 bytes

C:\WINDOWS\system32\toolhelp.dll 13888 bytes

C:\WINDOWS\system32\tourstart.exe 347136 bytes executable

C:\WINDOWS\system32\tracert.exe 12288 bytes executable

C:\WINDOWS\system32\tracert6.exe 31744 bytes executable

C:\WINDOWS\system32\traffic.dll 31232 bytes executable

C:\WINDOWS\system32\tree.com 11264 bytes executable

C:\WINDOWS\system32\trkwks.dll 90624 bytes executable

C:\WINDOWS\system32\tsappcmp.dll 52224 bytes executable

C:\WINDOWS\system32\tsbyuv.dll 8192 bytes executable

C:\WINDOWS\system32\tscfgwmi.dll 93696 bytes executable

C:\WINDOWS\system32\tscon.exe 14848 bytes executable

C:\WINDOWS\system32\tscupgrd.exe 44544 bytes executable

C:\WINDOWS\system32\tsd32.dll 15360 bytes executable

C:\WINDOWS\system32\tsddd.dll 12168 bytes executable

C:\WINDOWS\system32\tsdiscon.exe 14848 bytes executable

C:\WINDOWS\system32\tskill.exe 16384 bytes executable

C:\WINDOWS\system32\tslabels.h 3286 bytes

C:\WINDOWS\system32\tslabels.ini 13223 bytes

C:\WINDOWS\system32\tsshutdn.exe 16896 bytes executable

C:\WINDOWS\system32\tssoft32.acm 8192 bytes executable

C:\WINDOWS\system32\twext.dll 44032 bytes executable

C:\WINDOWS\system32\txflog.dll 101376 bytes executable

C:\WINDOWS\system32\typelib.dll 177856 bytes

C:\WINDOWS\system32\tzchange.exe 60416 bytes executable

C:\WINDOWS\system32\TZLog.log 266376 bytes

C:\WINDOWS\system32\udhisapi.dll 25600 bytes executable

C:\WINDOWS\system32\ufat.dll 82432 bytes executable

C:\WINDOWS\system32\ulib.dll 275456 bytes executable

C:\WINDOWS\system32\umandlg.dll 35840 bytes executable

C:\WINDOWS\system32\write.exe 5632 bytes executable

C:\WINDOWS\system32\ws2help.dll 19968 bytes executable

C:\WINDOWS\system32\ws2_32.dll 82944 bytes executable

C:\WINDOWS\system32\wscntfy.exe 13824 bytes executable

C:\WINDOWS\system32\wscript.exe 114688 bytes executable

C:\WINDOWS\system32\wscsvc.dll 81408 bytes executable

C:\WINDOWS\system32\wscui.cpl 148480 bytes executable

C:\WINDOWS\system32\wshatm.dll 9216 bytes executable

C:\WINDOWS\system32\wshbth.dll 108032 bytes executable

C:\WINDOWS\system32\wshcon.dll 28672 bytes executable

C:\WINDOWS\system32\wshext.dll 65536 bytes executable

C:\WINDOWS\system32\wship6.dll 14336 bytes executable

C:\WINDOWS\system32\wshisn.dll 11776 bytes executable

C:\WINDOWS\system32\wshnetbs.dll 7168 bytes executable

C:\WINDOWS\system32\wshom.ocx 98304 bytes executable

C:\WINDOWS\system32\WshRm.dll 11776 bytes executable

C:\WINDOWS\system32\wshtcpip.dll 19968 bytes executable

C:\WINDOWS\system32\wsnmp32.dll 42496 bytes executable

C:\WINDOWS\system32\wsock32.dll 22528 bytes executable

C:\WINDOWS\system32\wmp.dll 4734976 bytes executable

C:\WINDOWS\system32\wmp.ocx 20480 bytes executable

C:\WINDOWS\system32\wmpasf.dll 114688 bytes executable

C:\WINDOWS\system32\wmpcd.dll 20480 bytes executable

C:\WINDOWS\system32\wmpcore.dll 20480 bytes executable

C:\WINDOWS\system32\wmpdxm.dll 233472 bytes executable

C:\WINDOWS\system32\wmploc.dll 2940928 bytes executable

C:\WINDOWS\system32\wmpshell.dll 102400 bytes executable

C:\WINDOWS\system32\wmpui.dll 20480 bytes executable

C:\WINDOWS\system32\wmsdmod.dll 759296 bytes executable

C:\WINDOWS\system32\wmsdmoe.dll 115200 bytes executable

C:\WINDOWS\system32\wmsdmoe2.dll 1119744 bytes executable

C:\WINDOWS\system32\wmspdmod.dll 484864 bytes executable

C:\WINDOWS\system32\wmspdmoe.dll 896512 bytes executable

C:\WINDOWS\system32\wmstream.dll 303616 bytes executable

C:\WINDOWS\system32\wmv8ds32.ax 278559 bytes executable

C:\WINDOWS\system32\wmvcore.dll 2109440 bytes executable

C:\WINDOWS\system32\wmvdmod.dll 809984 bytes executable

C:\WINDOWS\system32\wmvdmoe2.dll 1001472 bytes executable

C:\WINDOWS\system32\wmvds32.ax 258048 bytes executable

C:\WINDOWS\system32\wow32.dll 264192 bytes executable

C:\WINDOWS\system32\wowdeb.exe 2736 bytes

C:\WINDOWS\system32\wowexec.exe 10368 bytes

C:\WINDOWS\system32\wowfax.dll 3200 bytes executable

C:\WINDOWS\system32\wowfaxui.dll 13824 bytes executable

C:\WINDOWS\system32\wpa.bak 13646 bytes

C:\WINDOWS\system32\wpa.dbl 13646 bytes

C:\WINDOWS\system32\wpabaln.exe 32256 bytes executable

C:\WINDOWS\system32\jgpl400.dll 27648 bytes executable

C:\WINDOWS\system32\jgsd400.dll 45568 bytes executable

C:\WINDOWS\system32\jgsh400.dll 65536 bytes executable

C:\WINDOWS\system32\jobexec.dll 47952 bytes executable

C:\WINDOWS\system32\joy.cpl 68608 bytes executable

C:\WINDOWS\system32\jscript.dll 450560 bytes executable

C:\WINDOWS\system32\jsproxy.dll 16384 bytes executable

C:\WINDOWS\system32\kanji_1.uce 6948 bytes

C:\WINDOWS\system32\kanji_2.uce 8484 bytes

C:\WINDOWS\system32\kb16.com 14710 bytes

C:\WINDOWS\system32\KBDAL.DLL 6656 bytes executable

C:\WINDOWS\system32\kbdaze.dll 5632 bytes executable

C:\WINDOWS\system32\kbdazel.dll 5632 bytes executable

C:\WINDOWS\system32\kbdbe.dll 6144 bytes executable

C:\WINDOWS\system32\kbdbene.dll 6144 bytes executable

C:\WINDOWS\system32\kbdblr.dll 5632 bytes executable

C:\WINDOWS\system32\kbdbr.dll 6144 bytes executable

C:\WINDOWS\system32\kbdbu.dll 5632 bytes executable

C:\WINDOWS\system32\kbdca.dll 6144 bytes executable

C:\WINDOWS\system32\kbdcan.dll 7680 bytes executable

C:\WINDOWS\system32\kbdcr.dll 6656 bytes executable

C:\WINDOWS\system32\kbdcz.dll 7168 bytes executable

C:\WINDOWS\system32\kbdcz1.dll 6656 bytes executable

C:\WINDOWS\system32\kbdcz2.dll 6656 bytes executable

C:\WINDOWS\system32\kbdda.dll 6144 bytes executable

C:\WINDOWS\system32\kbddv.dll 5120 bytes executable

C:\WINDOWS\system32\kbdes.dll 6144 bytes executable

C:\WINDOWS\system32\kbdest.dll 6144 bytes executable

C:\WINDOWS\system32\kbdfc.dll 6144 bytes executable

C:\WINDOWS\system32\kbdfi.dll 6144 bytes executable

C:\WINDOWS\system32\kbdfi1.dll 7168 bytes executable

C:\WINDOWS\system32\kbdmon.dll 5632 bytes executable

C:\WINDOWS\system32\kbdne.dll 6144 bytes executable

C:\WINDOWS\system32\kbdnec.dll 7168 bytes executable

C:\WINDOWS\system32\kbdno.dll 6144 bytes executable

C:\WINDOWS\system32\kbdno1.dll 7168 bytes executable

C:\WINDOWS\system32\kbdpl.dll 6656 bytes executable

C:\WINDOWS\system32\kbdpl1.dll 5632 bytes executable

C:\WINDOWS\system32\kbdpo.dll 6144 bytes executable

C:\WINDOWS\system32\kbdro.dll 5632 bytes executable

C:\WINDOWS\system32\kbdru.dll 5632 bytes executable

C:\WINDOWS\system32\kbdru1.dll 5632 bytes executable

C:\WINDOWS\system32\kbdsf.dll 6144 bytes executable

C:\WINDOWS\system32\kbdsg.dll 6656 bytes executable

C:\WINDOWS\system32\kbdsl.dll 6656 bytes executable

C:\WINDOWS\system32\kbdsl1.dll 6656 bytes executable

C:\WINDOWS\system32\kbdsmsfi.dll 7680 bytes executable

C:\WINDOWS\system32\kbdsmsno.dll 7680 bytes executable

C:\WINDOWS\system32\kbdsp.dll 6144 bytes executable

C:\WINDOWS\system32\kbdsw.dll 6144 bytes executable

C:\WINDOWS\system32\kbdtat.dll 5632 bytes executable

C:\WINDOWS\system32\kbdtuf.dll 6144 bytes executable

C:\WINDOWS\system32\kbdtuq.dll 6144 bytes executable

C:\WINDOWS\system32\kbduk.dll 5632 bytes executable

C:\WINDOWS\system32\kbdukx.dll 7168 bytes executable

C:\WINDOWS\system32\kbdur.dll 5632 bytes executable

 

scan completed successfully

hidden files: 1082

 

**************************************************************************

.

Completion time: 2008-07-10 17:16:56

ComboFix-quarantined-files.txt 2008-07-10 15:16:16

 

Pre-Run: 66,744,274,944 bytes free

Post-Run: 66,861,907,968 bytes free

 

1227 --- E O F --- 2008-07-09 22:18:09

 

Lenke til kommentar

Last ned kjør CCleaner

'Valg'->'Avansert'. Fjern avkryssingen framfor: "bare slett midlertidige filer som er eldere enn 48 t.

 

Trykk på knappen Renser -> Kjør CCleaner

(Gjenta dette til den ikke finner flere temp-filer)

 

Trykk på knappen Register->Søk etter feil->Reparer merkede feil

(Kjør register-renser et par ganger til alle feil er borte.)

 

 

 

 

Defragmering.

Auslogics Disk Defrag + Free Registry Defrag

 

 

Bruk pcen se om cpu forbruk er bedere.

Ctrl+alt+del<prosesser> gi navn på prosesser viss noen bruker mye.

Lenke til kommentar

Har vært syk, ikke fått svart. Men nei, dette funka ikke. Pc-en har begynt å restarte seg selv uten forvarsel og den har begynt å "stoppe" opp. hadde ikke tid til å lage ny tråd, skal gjøre det senere. Helt normale temperaturer rundt 30 grader +/-.

Edit: Ny tråd laget.

Endret av Redneck
Lenke til kommentar

Opprett en konto eller logg inn for å kommentere

Du må være et medlem for å kunne skrive en kommentar

Opprett konto

Det er enkelt å melde seg inn for å starte en ny konto!

Start en konto

Logg inn

Har du allerede en konto? Logg inn her.

Logg inn nå
  • Hvem er aktive   0 medlemmer

    • Ingen innloggede medlemmer aktive
×
×
  • Opprett ny...