SA'DIAH

File Anti-Virus
---------------
Scanned: 1741
Detected: 1
Untreated: 1
Start time: 11/20/2010 2:48:19 PM
Duration: 00:10:28
Detected
--------
Status Object User Computer
------ ------ ---- --------
detected: riskware not-a-virus:WebToolbar.Win32.Zango.hs file: C:\Documen
ts and Settings\Administrator\My Documents\setup.exe//UPX
Events
------
Time Name Status Reason User Computer
---- ---- ------ ------ ---- --------
11/20/2010 2:49:21 PM C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0
for Windows Workstations MP4\avp.exe ok scanned avp.exe localhost
11/20/2010 2:49:22 PM C:\WINDOWS\system32\wbem\wmipcima.dll ok unchange
d
11/20/2010 2:49:22 PM C:\Program Files\Microsoft Office\Office12\GrooveShellEx
tensions.dll ok unchanged
11/20/2010 2:49:22 PM C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Wind
ows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\6.0.2600.6028.Policy ok
unchanged HP12661107772\Administrator localhost
11/20/2010 2:49:22 PM C:\WINDOWS\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80
.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\8.0.50727.3053.policy ok unchange
d HP12661107772\Administrator localhost
.ATL_1fc8b3b9a1e18e3b_x-ww_5f0bbcff\8.0.50727.42.policy ok unchanged
HP12661107772\Administrator localhost
11/20/2010 2:49:22 PM C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.Windows.Common
-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202.Manifest ok unchange
11/20/2010 2:49:22 PM C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b
3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca.manifest ok unchanged
11/20/2010 2:49:22 PM C:\WINDOWS\system32\es.dll ok iChecker
11/20/2010 2:49:22 PM C:\WINDOWS\WinSxS\Manifests\x86_Microsoft.VC80.ATL_1fc8b
3b9a1e18e3b_8.0.50727.42_x-ww_6e805841.manifest ok unchanged HP126611
07772\Administrator localhost
11/20/2010 2:49:22 PM C:\Program Files\Microsoft Office\Office12\GrooveUtil.dl
l ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:49:22 PM C:\WINDOWS\system32\wmi.dll ok unchanged
K17\HP12661107772$ localhost
11/20/2010 2:49:22 PM C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3
b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll ok unchanged HP126611
11/20/2010 2:49:22 PM C:\Program Files\Microsoft Office\Office12\GrooveNew.dll
ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:49:22 PM C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3
b_8.0.50727.42_x-ww_6e805841\ATL80.dll ok unchanged HP12661107772\Ad
ministrator localhost
11/20/2010 2:49:22 PM C:\WINDOWS\system32\rsaenh.dll ok unchanged
11/20/2010 2:49:22 PM C:\WINDOWS\system32\srsvc.dll ok iChecker
11/20/2010 2:49:22 PM C:\WINDOWS\system32\wtsapi32.dll ok unchange
d K17\HP12661107772$ localhost
11/20/2010 2:49:22 PM C:\WINDOWS\system32\winsta.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\msimg32.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\w32time.dll ok iChecker
11/20/2010 2:49:23 PM C:\WINDOWS\system32\cfgmgr32.dll ok unchange
11/20/2010 2:49:23 PM C:\WINDOWS\system32\cscui.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\cscdll.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\desk.cpl ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\oeminfo.ini ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\qmgr.dll ok iChecker
11/20/2010 2:49:23 PM C:\WINDOWS\system32\wuauserv.dll ok iChecker
11/20/2010 2:49:23 PM C:\WINDOWS\system32\oemlogo.bmp ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\mspmsnsv.dll ok iChecker
11/20/2010 2:49:23 PM C:\boot.ini ok unchanged K17\HP1266110777
2$ localhost
11/20/2010 2:49:23 PM C:\WINDOWS\system32\wuapi.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\themeui.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\wuauclt.exe ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\wuaucpl.cpl ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\wuaueng.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\system32\wuauserv.dll ok unchange
11/20/2010 2:49:23 PM C:\WINDOWS\system32\wucltui.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\Resources\Themes\Luna\luna.msstyles ok
11/20/2010 2:49:23 PM C:\WINDOWS\system32\winlogon.exe ok unchange
11/20/2010 2:49:23 PM C:\WINDOWS\system32\xpsp2res.dll ok unchange
11/20/2010 2:49:23 PM C:\WINDOWS\system32\MSIMTF.dll ok unchanged
11/20/2010 2:49:23 PM C:\WINDOWS\Fonts\framdit.ttf ok unchanged
11/20/2010 2:49:24 PM C:\WINDOWS\system32\actxprxy.dll ok unchange
11/20/2010 2:49:24 PM D:\Desktop.ini ok unchanged HP12661107772\Ad
11/20/2010 2:49:24 PM C:\WINDOWS\system32\MSCTF.dll ok unchanged
11/20/2010 2:49:24 PM C:\WINDOWS\system32\samlib.dll ok unchanged
11/20/2010 2:49:24 PM C:\Documents and Settings\Administrator\Start Menu\deskt
op.ini ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:49:24 PM C:\Documents and Settings\All Users\Application Data\Mic
rosoft\User Account Pictures\Administrator.bmp ok unchanged HP126611
11/20/2010 2:49:24 PM C:\WINDOWS\system32\ieframe.dll ok unchanged
11/20/2010 2:49:25 PM C:\WINDOWS\system32\psapi.dll ok unchanged
11/20/2010 2:49:25 PM C:\Documents and Settings\All Users\Start Menu\desktop.i
ni ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:49:25 PM C:\WINDOWS\Media\Windows XP Critical Stop.wav ok
unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:26 PM C:\Documents and Settings\Administrator\Start Menu\Progr
ams\Accessories\desktop.ini ok scanned HP12661107772\Administrator
localhost
ams\Startup\desktop.ini ok unchanged HP12661107772\Administrator
localhost
ams\Accessories\Accessibility\desktop.ini ok unchanged HP126611
ams\Accessories\Entertainment\desktop.ini ok unchanged HP126611
11/20/2010 2:49:26 PM C:\Documents and Settings\All Users\Start Menu\Programs\
Accessories\desktop.ini ok unchanged HP12661107772\Administrator
localhost
Administrative Tools\desktop.ini ok unchanged HP12661107772\Ad
Games\desktop.ini ok unchanged HP12661107772\Administrator
localhost
Startup\desktop.ini ok unchanged HP12661107772\Administrator
localhost
Accessories\Accessibility\desktop.ini ok unchanged HP12661107772\Ad
Accessories\Communications\desktop.ini ok unchanged HP12661107772\Ad
Accessories\Entertainment\desktop.ini ok unchanged HP12661107772\Ad
Accessories\System Tools\desktop.ini ok unchanged HP12661107772\Ad
11/20/2010 2:49:26 PM C:\WINDOWS\system32\setupapi.dll ok unchange
11/20/2010 2:49:26 PM C:\WINDOWS\system32\verclsid.exe ok unchange
11/20/2010 2:49:26 PM C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf not proc
essed by type HP12661107772\Administrator localhost
11/20/2010 2:49:27 PM C:\WINDOWS\system32\ntdll.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\kernel32.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\unicode.nls ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\locale.nls ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\sorttbls.nls ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\ole32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\advapi32.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\rpcrt4.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\secur32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\gdi32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\user32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\msvcrt.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\imm32.dll ok unchanged
for Windows Workstations MP4\kloehk.dll ok unchanged HP12661107772\Ad
11/20/2010 2:49:27 PM C:\WINDOWS\system32\sortkey.nls ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\ctype.nls ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\rpcss.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\uxtheme.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\clbcatq.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\comres.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\oleaut32.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\version.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\Registration\R000000000010.clb ok
11/20/2010 2:49:27 PM C:\WINDOWS\system32\shdocvw.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\crypt32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\msasn1.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\cryptui.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\netapi32.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\shlwapi.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\wininet.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\normaliz.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\iertutil.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\wintrust.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\imagehlp.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\wldap32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_
6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\WindowsShell.Manifest ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\riched20.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\apphelp.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\shell32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\comctl32.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\wbem\wbemprox.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\wbem\wbemcomn.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\ws2_32.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\ws2help.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\wbem\wbemsvc.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\wbem\fastprox.dll ok unchange
11/20/2010 2:49:27 PM C:\WINDOWS\system32\msvcp60.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\ntdsapi.dll ok unchanged
11/20/2010 2:49:27 PM C:\WINDOWS\system32\dnsapi.dll ok unchanged
11/20/2010 2:49:27 PM C:\Program Files\Common Files\PC Tools\sMonitor\PCTProce
ss.txt not processed by type K17\HP12661107772$ localhost
11/20/2010 2:49:28 PM C:\Program Files\Internet Explorer\iexplore.exe ok
11/20/2010 2:49:28 PM C:\WINDOWS\system32\mydocs.dll ok unchanged
11/20/2010 2:49:28 PM C:\Documents and Settings\Administrator\My Documents\des
ktop.ini ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:28 PM C:\Documents and Settings\All Users\Documents\desktop.in
i ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:49:28 PM C:\Documents and Settings\Administrator\NetHood\Document
s on saadiah (Hp12661107772)\Desktop.ini ok unchanged HP126611
11/20/2010 2:49:28 PM C:\WINDOWS\system32\netshell.dll ok unchange
11/20/2010 2:49:28 PM C:\WINDOWS\system32\atl.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\credui.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\dot3api.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\rtutils.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\dot3dlg.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\onex.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\eappcfg.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\eappprxy.dll ok unchange
11/20/2010 2:49:28 PM C:\WINDOWS\system32\iphlpapi.dll ok unchange
11/20/2010 2:49:28 PM C:\Documents and Settings\Administrator\Recent\Desktop.i
11/20/2010 2:49:28 PM C:\Program Files\Microsoft Office\Office12\GrooveSystemS
ervices.dll ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:28 PM C:\WINDOWS\system32\upnp.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\msxml3.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\msxml3r.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\igfxtray.exe ok unchange
11/20/2010 2:49:28 PM C:\Documents and Settings\All Users\Desktop\InstaTrader.
lnk ok scanned HP12661107772\Administrator localhost
11/20/2010 2:49:28 PM C:\WINDOWS\system32\linkinfo.dll ok unchange
11/20/2010 2:49:28 PM C:\Documents and Settings\Administrator\My Documents\My
Pictures\Desktop.ini ok unchanged HP12661107772\Administrator
localhost
11/20/2010 2:49:28 PM C:\WINDOWS\system32\ntshrui.dll ok unchanged
11/20/2010 2:49:28 PM C:\WINDOWS\system32\ssdpapi.dll ok unchanged
rosoft\Network\Connections\Pbk\rasphone.pbk ok unchanged HP126611
11/20/2010 2:49:29 PM C:\WINDOWS\system32\drivers\http.sys ok unchange
Music\Desktop.ini ok unchanged HP12661107772\Administrator
localhost
ams\MetaTrader - FXOpen\MetaTrader - FXOpen.lnk ok scanned HP12661107772\Ad
11/20/2010 2:49:29 PM C:\WINDOWS\system32\hkcmd.exe ok unchanged
11/20/2010 2:49:29 PM C:\WINDOWS\system32\webcheck.dll ok unchange
11/20/2010 2:49:29 PM C:\WINDOWS\Prefetch\IGFXTRAY.EXE-3391579A.pf ok
11/20/2010 2:49:29 PM C:\Documents and Settings\Administrator\Favorites\Deskto
p.ini ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:49:29 PM C:\WINDOWS\system32\webcheck.dll ok unchange
11/20/2010 2:49:29 PM C:\WINDOWS\system32\hkcmd.exe ok unchanged
11/20/2010 2:49:29 PM C:\WINDOWS\AppPatch\drvmain.sdb ok unchanged
ams\InstaTrader\MetaEditor.lnk ok scanned HP12661107772\Administrator
localhost
11/20/2010 2:49:29 PM C:\WINDOWS\explorer.exe ok unchanged HP126611
11/20/2010 2:49:29 PM C:\WINDOWS\system32\imapi.exe ok unchanged
11/20/2010 2:49:29 PM C:\WINDOWS\system32\ssdpsrv.dll ok unchanged
NT AUTHORITY\LOCAL SERVICE localhost
11/20/2010 2:49:29 PM C:\WINDOWS\system32\igfxtray.exe ok unchange
11/20/2010 2:49:29 PM C:\WINDOWS\AppPatch\sysmain.sdb ok unchanged
11/20/2010 2:49:29 PM C:\WINDOWS\system32\hccutils.dll ok unchange
11/20/2010 2:49:29 PM C:\WINDOWS\system32\stobject.dll ok unchange
11/20/2010 2:49:29 PM C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\Preferred
ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:29 PM C:\WINDOWS\system32\MSCTFIME.IME ok unchange
11/20/2010 2:49:29 PM C:\WINDOWS\system32\igfxsrvc.dll ok unchange
11/20/2010 2:49:30 PM C:\WINDOWS\Prefetch\HKCMD.EXE-1D05234B.pf ok
11/20/2010 2:49:30 PM C:\WINDOWS\system32\batmeter.dll ok unchange
11/20/2010 2:49:30 PM C:\WINDOWS\system32\moricons.dll ok unchange
11/20/2010 2:49:30 PM C:\WINDOWS\system32\hnetcfg.dll ok unchanged
11/20/2010 2:49:30 PM C:\WINDOWS\system32\mswsock.dll ok unchanged
11/20/2010 2:49:30 PM C:\WINDOWS\system32\wshtcpip.dll ok unchange
d NT AUTHORITY\LOCAL SERVICE localhost
11/20/2010 2:49:30 PM C:\WINDOWS\system32\svchost.exe ok unchanged
11/20/2010 2:49:30 PM C:\WINDOWS\system32\upnp.dll ok unchanged
11/20/2010 2:49:30 PM C:\WINDOWS\system32\powrprof.dll ok unchange
11/20/2010 2:49:30 PM C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf ok
11/20/2010 2:49:30 PM C:\WINDOWS\system32\igfxrenu.lrc ok unchange
11/20/2010 2:49:30 PM C:\WINDOWS\system32\netshell.dll ok unchange
11/20/2010 2:49:30 PM C:\WINDOWS\system32\igfxsrvc.exe ok unchange
11/20/2010 2:49:30 PM C:\WINDOWS\system32\msi.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\Prefetch\IGFXSRVC.EXE-2FB63FE8.pf ok
11/20/2010 2:49:31 PM C:\WINDOWS\system32\wdmaud.drv ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\msacm32.drv ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\midimap.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\shimeng.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\AppPatch\AcGenral.dll ok unchange
11/20/2010 2:49:31 PM C:\WINDOWS\system32\winmm.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\msacm32.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\userenv.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\igfxdev.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\ntmarta.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\vga.dll ok unchanged
11/20/2010 2:49:31 PM C:\WINDOWS\system32\rasdlg.dll ok unchanged
ams\Internet Explorer.lnk ok scanned HP12661107772\Administrator
localhost
ams\Outlook Express.lnk ok scanned HP12661107772\Administrator localhos
t
ams\Accessories\System Tools\Internet Explorer (No Add-ons).lnk ok scanned
ams\InstaTrader\DDE Sample.lnk ok scanned HP12661107772\Administrator
localhost
ams\InstaTrader\InstaTrader.lnk ok scanned HP12661107772\Administrator
localhost
ams\InstaTrader\Journals.lnk ok scanned HP12661107772\Administrator
localhost
ams\InstaTrader\Uninstall.lnk ok scanned HP12661107772\Administrator
localhost
ams\MetaTrader - FXOpen\DDE Sample.lnk ok scanned HP12661107772\Administra
tor localhost
ams\MetaTrader - FXOpen\Journals.lnk ok scanned HP12661107772\Administra
tor localhost
ams\MetaTrader - FXOpen\MetaEditor.lnk ok scanned HP12661107772\Administra
tor localhost
11/20/2010 2:49:32 PM C:\WINDOWS\system32\msv1_0.dll ok unchanged
NT AUTHORITY\NETWORK SERVICE localhost
11/20/2010 2:49:32 PM C:\WINDOWS\system32\cryptdll.dll ok unchange
d NT AUTHORITY\NETWORK SERVICE localhost
ams\MetaTrader - FXOpen\Uninstall.lnk ok scanned HP12661107772\Administra
tor localhost
11/20/2010 2:49:32 PM C:\WINDOWS\system32\msapsspc.dll ok unchange
Windows Messenger.lnk ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:49:32 PM C:\WINDOWS\system32\msvcrt40.dll ok unchange
Administrative Tools\Services.lnk ok scanned HP12661107772\Administra
tor localhost
InstaTrader\Home Page.lnk ok scanned HP12661107772\Administrator
localhost
11/20/2010 2:49:32 PM C:\Program Files\InstaTrader\links\homepage.url ok
11/20/2010 2:49:32 PM C:\WINDOWS\system32\mlang.dll ok unchanged
11/20/2010 2:49:32 PM C:\WINDOWS\system32\wuauclt.exe ok unchanged
11/20/2010 2:49:33 PM C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf ok
11/20/2010 2:49:33 PM C:\WINDOWS\system32\cabinet.dll ok unchanged
11/20/2010 2:49:33 PM C:\WINDOWS\system32\wups2.dll ok unchanged
11/20/2010 2:49:33 PM C:\Documents and Settings\Administrator\Local Settings\T
emporary Internet Files\Content.IE5\index.dat not processed by type HP126611
11/20/2010 2:49:33 PM C:\WINDOWS\WindowsUpdate.log not processed by type
11/20/2010 2:49:33 PM C:\WINDOWS\system32\wucltui.dll ok unchanged
11/20/2010 2:49:33 PM C:\WINDOWS\WindowsUpdate.log not processed by type
11/20/2010 2:49:33 PM C:\WINDOWS\system32\wucltui.dll.mui ok unchange
11/20/2010 2:49:33 PM C:\Documents and Settings\Administrator\Cookies\index.da
t not processed by type HP12661107772\Administrator localhost
11/20/2010 2:49:33 PM C:\Documents and Settings\Administrator\Local Settings\H
istory\History.IE5\index.dat not processed by type HP12661107772\Administra
tor localhost
11/20/2010 2:49:33 PM C:\WINDOWS\Media\Windows XP Balloon.wav ok unchange
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\End User License Agreement
.lnk ok scanned HP12661107772\Administrator localhost
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Kaspersky Anti-Virus 6.0 f
or Windows Workstations.lnk ok scanned HP12661107772\Administrator
localhost
for Windows Workstations MP4\avp.exe ok unchanged HP12661107772\Ad
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Kaspersky Anti-Virus Help.
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Modify, Repair or Remove.l
nk ok scanned HP12661107772\Administrator localhost
11/20/2010 2:49:34 PM C:\WINDOWS\system32\msiexec.exe ok unchanged
11/20/2010 2:49:34 PM C:\WINDOWS\RTHDCPL.EXE//data0000.res ok iChecker
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Visit Kaspersky Lab on the
Web.lnk ok scanned HP12661107772\Administrator localhost
11/20/2010 2:49:34 PM C:\WINDOWS\Installer\{8F023021-A7EB-45D3-9269-D65264C817
29}\url.ico ok scanned HP12661107772\Administrator localhost
MetaTrader - FXOpen\Home Page.lnk ok scanned HP12661107772\Administra
tor localhost
11/20/2010 2:49:34 PM C:\Program Files\MetaTrader - FXOpen\links\homepage.url
11/20/2010 2:49:34 PM C:\Documents and Settings\Administrator\Desktop\IE8-Wind
owsXP-x86-ENU.exe packed file PE_Patch HP12661107772\Administra
tor localhost
owsXP-x86-ENU.exe//PE_Patch ok scanned HP12661107772\Administrator
localhost
owsXP-x86-ENU.exe ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:49:34 PM C:\WINDOWS\RTHDCPL.EXE ok scanned HP12661107772\Ad
11/20/2010 2:49:34 PM C:\Documents and Settings\Administrator\Desktop\RegClean
er.lnk ok scanned HP12661107772\Administrator localhost
11/20/2010 2:49:34 PM C:\WINDOWS\Prefetch\RTHDCPL.EXE-06918CFA.pf ok
11/20/2010 2:49:34 PM C:\WINDOWS\ALCMTR.EXE ok iChecker HP126611
11/20/2010 2:49:34 PM C:\WINDOWS\Prefetch\ALCMTR.EXE-235F9538.pf ok
11/20/2010 2:49:34 PM C:\Program Files\RegCleaner\RegCleanr.exe ok
iChecker HP12661107772\Administrator localhost
11/20/2010 2:49:34 PM C:\WINDOWS\system32\dsound.dll ok unchanged
11/20/2010 2:49:34 PM C:\Program Files\PDF Complete\pdfsty.exe ok
11/20/2010 2:49:35 PM C:\WINDOWS\Prefetch\PDFSTY.EXE-2D4ED2C8.pf ok
11/20/2010 2:49:35 PM C:\WINDOWS\system32\qmgrprxy.dll ok unchange
11/20/2010 2:49:35 PM C:\WINDOWS\system32\shfolder.dll ok unchange
11/20/2010 2:49:35 PM C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
ok iChecker HP12661107772\Administrator localhost
11/20/2010 2:49:35 PM C:\WINDOWS\system32\hhctrl.ocx ok unchanged
11/20/2010 2:49:35 PM C:\WINDOWS\Prefetch\SETREFRESH.EXE-0C1D851C.pf ok
11/20/2010 2:49:35 PM C:\WINDOWS\system32\mpr.dll ok unchanged
11/20/2010 2:49:35 PM C:\WINDOWS\system32\winspool.drv ok unchange
11/20/2010 2:49:35 PM C:\WINDOWS\system32\comdlg32.dll ok unchange
11/20/2010 2:49:35 PM C:\WINDOWS\system32\win32k.sys ok unchanged
11/20/2010 2:49:35 PM C:\WINDOWS\system32\drivers\RtkHDAud.sys packed f
ile PE_Patch HP12661107772\Administrator localhost
11/20/2010 2:49:35 PM C:\WINDOWS\system32\drivers\RtkHDAud.sys//PE_Patch
ok scanned HP12661107772\Administrator localhost
11/20/2010 2:49:35 PM C:\WINDOWS\system32\drivers\RtkHDAud.sys ok
scanned HP12661107772\Administrator localhost
11/20/2010 2:49:35 PM C:\WINDOWS\system32\ksuser.dll ok unchanged
emp\English.bin ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:35 PM C:\WINDOWS\system32\c_932.nls ok unchanged
11/20/2010 2:49:35 PM C:\WINDOWS\Fonts\sserife.fon ok unchanged
11/20/2010 2:49:35 PM C:\WINDOWS\SMINST\Recguard.exe ok scanned HP126611
11/20/2010 2:49:36 PM C:\WINDOWS\Prefetch\RECGUARD.EXE-3990548D.pf ok
11/20/2010 2:49:36 PM C:\WINDOWS\Fonts\ARIALUNI.TTF ok unchanged
11/20/2010 2:49:36 PM C:\WINDOWS\system32\oledlg.dll ok unchanged
11/20/2010 2:49:36 PM C:\WINDOWS\system32\olepro32.dll ok unchange
11/20/2010 2:49:36 PM C:\WINDOWS\SMINST\Skin_HP.smf not processed by type
11/20/2010 2:49:36 PM C:\WINDOWS\CREATOR\Remind_XP.exe ok iChecker
11/20/2010 2:49:36 PM C:\WINDOWS\SMINST\RECGUARD.INI ok scanned HP126611
11/20/2010 2:49:36 PM C:\WINDOWS\Prefetch\REMIND_XP.EXE-0DBED868.pf ok
11/20/2010 2:49:36 PM C:\Program Files\Microsoft Office\Office12\GrooveMonitor
.exe ok scanned HP12661107772\Administrator localhost
emp\English.bin ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:36 PM C:\WINDOWS\system32\oledlg.dll ok unchanged
11/20/2010 2:49:36 PM C:\WINDOWS\system32\olepro32.dll ok unchange
11/20/2010 2:49:36 PM C:\WINDOWS\RTHDCPL.EXE ok unchanged HP126611
11/20/2010 2:49:36 PM C:\WINDOWS\SMINST\Recguard.exe ok unchanged
11/20/2010 2:49:36 PM C:\WINDOWS\system32\drivers\RtkHDAud.sys ok
11/20/2010 2:49:36 PM C:\WINDOWS\SMINST\Skin_HP.smf ok unchanged
11/20/2010 2:49:36 PM C:\WINDOWS\SMINST\RECGUARD.INI ok unchanged
11/20/2010 2:49:37 PM C:\WINDOWS\Prefetch\GROOVEMONITOR.EXE-2606717A.pf
11/20/2010 2:49:37 PM C:\WINDOWS\system32\NeroCheck.exe ok unchange
11/20/2010 2:49:37 PM C:\WINDOWS\CREATOR\Remind_XP.exe ok unchange
11/20/2010 2:49:37 PM C:\WINDOWS\CREATOR\BaseImg.dll ok iChecker
11/20/2010 2:49:37 PM C:\WINDOWS\Prefetch\NEROCHECK.EXE-092C6DFA.pf ok
11/20/2010 2:49:37 PM C:\WINDOWS\system32\mfc42u.dll ok unchanged
11/20/2010 2:49:37 PM C:\WINDOWS\CREATOR\BaseImg.lgg not processed by type
11/20/2010 2:49:37 PM C:\WINDOWS\CREATOR\Remind.LGG not processed by type
11/20/2010 2:49:37 PM C:\WINDOWS\CREATOR\Remind_HP.smf not processed
by type HP12661107772\Administrator localhost
11/20/2010 2:49:37 PM C:\Program Files\Common Files\Java\Java Update\jusched.e
xe//# ok scanned HP12661107772\Administrator localhost
Acrobat Reader 5.0.lnk ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:49:37 PM C:\WINDOWS\system32\linkinfo.dll ok unchange
tensions.dll ok unchanged HP12661107772\Administrator localhos
t
xe ok scanned HP12661107772\Administrator localhost
t
Acrobat.com.lnk ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:37 PM C:\WINDOWS\system32\urlmon.dll ok unchanged
JInitiator Control Panel 1.1.8.14.lnk ok scanned HP12661107772\Administra
tor localhost
Windows Messenger.lnk ok unchanged HP12661107772\Administrator
localhost
Windows Movie Maker.lnk ok unchanged HP12661107772\Administrator
localhost
11/20/2010 2:49:37 PM C:\Documents and Settings\All Users\Start Menu\HP User M
anuals.lnk ok scanned HP12661107772\Administrator localhost
11/20/2010 2:49:37 PM C:\Documents and Settings\All Users\Start Menu\Set Progr
am Access and Defaults.lnk ok unchanged HP12661107772\Administra
tor localhost
11/20/2010 2:49:37 PM C:\Documents and Settings\All Users\Start Menu\Windows C
atalog.lnk ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:37 PM C:\WINDOWS\Prefetch\JUSCHED.EXE-0F4A509D.pf ok
11/20/2010 2:49:37 PM C:\Documents and Settings\All Users\Start Menu\Windows U
pdate.lnk ok unchanged HP12661107772\Administrator localhos
t
Accessories\Calculator.lnk ok scanned HP12661107772\Administrator
localhost
Accessories\Paint.lnk ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:49:37 PM C:\Program Files\Common Files\Real\Update_OB\realsched.e
Accessories\Remote Desktop Connection.lnk ok unchanged HP126611
Accessories\WordPad.lnk ok unchanged HP12661107772\Administrator
localhost
Administrative Tools\Component Services.lnk ok unchanged HP126611
Administrative Tools\Computer Management.lnk ok unchanged HP126611
Administrative Tools\Data Sources (ODBC).lnk ok unchanged HP126611
Administrative Tools\Event Viewer.lnk ok unchanged HP12661107772\Ad
Administrative Tools\Local Security Policy.lnk ok unchanged HP126611
11/20/2010 2:49:37 PM C:\Program Files\Common Files\Real\Update_OB\realsched.e
Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk ok
for Windows Workstations MP4\avp.exe ok unchanged HP12661107772\Ad
Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk ok scanned
Administrative Tools\Performance.lnk ok unchanged HP12661107772\Ad
Administrative Tools\Services.lnk ok unchanged HP12661107772\Ad
11/20/2010 2:49:37 PM C:\WINDOWS\system32\ctfmon.exe ok unchanged
Adobe Acrobat 4.0\Acrobat Reader 4.0.lnk ok unchanged HP126611
Adobe Acrobat 4.0\Uninstall Adobe Acrobat 4.0.lnk ok unchanged
11/20/2010 2:49:38 PM C:\WINDOWS\Prefetch\REALSCHED.EXE-3282FD31.pf ok
Games\Freecell.lnk ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:49:38 PM C:\WINDOWS\Prefetch\AVP.EXE-032C8F59.pf not processed
Games\Hearts.lnk ok scanned HP12661107772\Administrator localhos
t
Games\Internet Backgammon.lnk ok unchanged HP12661107772\Administra
tor localhost
Games\Internet Checkers.lnk ok unchanged HP12661107772\Administra
tor localhost
Games\Internet Hearts.lnk ok unchanged HP12661107772\Administra
tor localhost
Games\Internet Reversi.lnk ok unchanged HP12661107772\Administra
tor localhost
Games\Internet Spades.lnk ok unchanged HP12661107772\Administra
tor localhost
Games\Minesweeper.lnk ok scanned HP12661107772\Administrator localhos
t
Games\Pinball.lnk ok unchanged HP12661107772\Administrator
localhost
Games\Solitaire.lnk ok unchanged HP12661107772\Administrator
localhost
11/20/2010 2:49:38 PM C:\Documents and Settings\Administrator\Application Data
\desktop.ini ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:38 PM C:\WINDOWS\system32\shsvcs.dll ok unchanged
\Real\rnadmin\rnsystem.dat ok unchanged HP12661107772\Administra
tor localhost
11/20/2010 2:49:38 PM C:\WINDOWS\system32\wtsapi32.dll ok unchange
11/20/2010 2:49:38 PM C:\WINDOWS\system32\winsta.dll ok unchanged
11/20/2010 2:49:38 PM C:\Program Files\Common Files\Real\Update_OB\setu3270.dl
Games\Spider Solitaire.lnk ok scanned HP12661107772\Administrator
localhost
11/20/2010 2:49:38 PM C:\WINDOWS\system32\msvcr71.dll ok unchanged
HP Backup & Recovery\HP Backup and Recovery Manager Manual.lnk ok scanned
HP Backup & Recovery\HP Backup and Recovery Manager.lnk ok scanned HP126611
11/20/2010 2:49:38 PM C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf ok
\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe ok scanned
HP Backup & Recovery\HP Backup Scheduler.lnk ok scanned HP12661107772\Ad
11/20/2010 2:49:38 PM C:\WINDOWS\system32\msutb.dll ok unchanged
11/20/2010 2:49:38 PM C:\WINDOWS\ime\SPTIP.dll ok unchanged
11/20/2010 2:49:38 PM C:\WINDOWS\system32\oleacc.dll ok unchanged
11/20/2010 2:49:38 PM C:\WINDOWS\system32\oleaccrc.dll ok unchange
HP Backup & Recovery\Remove HP Recovery Partition.lnk ok scanned HP126611
InstaTrader\Home Page.lnk ok unchanged HP12661107772\Administra
tor localhost
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\End User License Agreement
.lnk ok unchanged HP12661107772\Administrator localhost
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Kaspersky Anti-Virus 6.0 f
or Windows Workstations.lnk ok unchanged HP12661107772\Administra
tor localhost
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Kaspersky Anti-Virus Help.
lnk ok unchanged HP12661107772\Administrator localhost
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Modify, Repair or Remove.l
nk ok unchanged HP12661107772\Administrator localhost
Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\Visit Kaspersky Lab on the
Web.lnk ok unchanged HP12661107772\Administrator localhos
t
Media Player Classic - Home Cinema\Media Player Classic - Home Cinema.lnk
11/20/2010 2:49:38 PM C:\WINDOWS\Prefetch\OCTOSHAPECLIENT.EXE-16114C11.pf
\Real\rnadmin\rnsystem.dat not processed by type HP12661107772\Administra
tor localhost
Media Player Classic - Home Cinema\Uninstall Media Player Classic - Home Cinema.
MetaTrader - FXOpen\Home Page.lnk ok unchanged HP12661107772\Ad
Microsoft Office\Activation Assistant for Microsoft Office.lnk ok scanned
Microsoft Office\Microsoft Office Access 2007.lnk ok scanned HP126611
t
11/20/2010 2:49:39 PM C:\Program Files\Google\GoogleToolbarNotifier\GoogleTool
barNotifier.exe ok unchanged HP12661107772\Administrator localhos
t
Microsoft Office\Microsoft Office Excel 2007.lnk ok scanned HP126611
Microsoft Office\Microsoft Office Groove 2007.lnk ok scanned HP126611
\Octoshape\Octoshape Streaming Services\sua-1010120-0-libOctoshapeClient.sig
not processed by type HP12661107772\Administrator localhost
11/20/2010 2:49:39 PM C:\WINDOWS\system32\dssenh.dll ok unchanged
11/20/2010 2:49:39 PM C:\Program Files\Messenger\msmsgs.exe ok unchange
11/20/2010 2:49:39 PM C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-3629C61D.p
f ok unchanged HP12661107772\Administrator localhost
Microsoft Office\Microsoft Office InfoPath 2007.lnk ok scanned HP126611
Microsoft Office\Microsoft Office OneNote 2007.lnk ok scanned HP126611
Microsoft Office\Microsoft Office Outlook 2007.lnk ok scanned HP126611
Microsoft Office\Microsoft Office PowerPoint 2007.lnk ok scanned HP126611
Microsoft Office\Microsoft Office Publisher 2007.lnk ok scanned HP126611
11/20/2010 2:49:39 PM C:\WINDOWS\Prefetch\MSMSGS.EXE-2B6052DE.pf ok
11/20/2010 2:49:39 PM C:\Program Files\Real\RealPlayer\realjbox.exe ok
Startup\desktop.ini ok unchanged HP12661107772\Administrator
localhost
\Octoshape\Octoshape Streaming Services\sua-1010120-0-libOctoshapeClient.dll
ok iChecker HP12661107772\Administrator localhost
11/20/2010 2:49:39 PM C:\WINDOWS\system32\winhttp.dll ok unchanged
ams\Startup\desktop.ini ok unchanged HP12661107772\Administrator
localhost
11/20/2010 2:49:39 PM C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1
910\gtn.dll ok iChecker HP12661107772\Administrator localhos
t
11/20/2010 2:49:39 PM C:\WINDOWS\system32\rasapi32.dll ok unchange
11/20/2010 2:49:39 PM C:\WINDOWS\system32\rasman.dll ok unchanged
11/20/2010 2:49:39 PM C:\WINDOWS\system32\tapi32.dll ok unchanged
11/20/2010 2:49:39 PM C:\WINDOWS\system32\schannel.dll ok unchange
11/20/2010 2:49:39 PM C:\WINDOWS\system32\digest.dll ok unchanged
11/20/2010 2:49:39 PM C:\WINDOWS\system32\msnsspc.dll ok unchanged
910\swg.dll ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:49:39 PM C:\WINDOWS\system32\sxs.dll ok unchanged
Nero\Nero Online Upgrade.lnk ok scanned HP12661107772\Administrator
localhost
\Octoshape\Octoshape Streaming Services\sua-1010120-0-dynfiles.zip not proc
\Octoshape\Octoshape Streaming Services\sua-1010120-0-npoctoshape.dll ok
Nero\Nero StartSmart.lnk ok scanned HP12661107772\Administrator
localhost
\Mozilla\Plugins\npoctoshape.dll ok iChecker HP12661107772\Ad
11/20/2010 2:49:40 PM C:\WINDOWS\system32\winrnr.dll ok unchanged
11/20/2010 2:49:40 PM C:\WINDOWS\system32\rasadhlp.dll ok unchange
Norton Security Scan\Norton Security Scan.lnk ok scanned HP12661107772\Ad
Norton Security Scan\Uninstall Norton Security Scan.lnk ok scanned HP126611
PDF Complete\PDF Complete.lnk ok scanned HP12661107772\Administrator
localhost
PhotoScape\PhotoScape.lnk ok scanned HP12661107772\Administrator
localhost
PhotoScape\Uninstall PhotoScape.lnk ok scanned HP12661107772\Administra
tor localhost
Picasa 3\Configure Picasa Photo Viewer.lnk ok scanned HP12661107772\Ad
Picasa 3\Picasa 3.lnk ok scanned HP12661107772\Administrator localhos
t
Picasa 3\Uninstall.lnk ok scanned HP12661107772\Administrator localhos
t
Real\RealPlayer Converter.lnk ok scanned HP12661107772\Administrator
localhost
Real\RealPlayer SP.lnk ok scanned HP12661107772\Administrator localhos
t
Real\RealPlayer Trimmer.lnk ok scanned HP12661107772\Administrator
localhost
Registry Mechanic\Home Page.lnk ok scanned HP12661107772\Administrator
localhost
11/20/2010 2:49:41 PM C:\WINDOWS\system32\wsock32.dll ok unchanged
11/20/2010 2:49:41 PM C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b641
44ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll ok unchanged
11/20/2010 2:49:42 PM C:\WINDOWS\system32\xpob2res.dll ok unchange
for Windows Workstations MP4\prremote.dll ok unchanged HP126611
11/20/2010 2:49:42 PM C:\WINDOWS\system32\es.dll ok unchanged
11/20/2010 2:49:42 PM C:\WINDOWS\system32\credui.dll ok unchanged
b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll ok unchanged HP126611
for Windows Workstations MP4\fssync.dll ok unchanged HP12661107772\Ad
11/20/2010 2:49:42 PM C:\WINDOWS\system32\fltlib.dll ok unchanged
for Windows Workstations MP4\ushata.dll ok unchanged HP12661107772\Ad
tor localhost
for Windows Workstations MP4\clldr.dll ok unchanged HP12661107772\Ad
for Windows Workstations MP4\prloader.dll ok unchanged HP126611
for Windows Workstations MP4\plugins.cfg ok unchanged HP126611
for Windows Workstations MP4\pxstub.ppl ok unchanged HP12661107772\Ad
for Windows Workstations MP4\params.ppl ok unchanged HP12661107772\Ad
for Windows Workstations MP4\winreg.ppl ok unchanged HP12661107772\Ad
for Windows Workstations MP4\mkavio.ppl ok unchanged HP12661107772\Ad
for Windows Workstations MP4\tm.ppl ok unchanged HP12661107772\Ad
for Windows Workstations MP4\nfio.ppl ok unchanged HP12661107772\Ad
11/20/2010 2:49:42 PM C:\WINDOWS\CREATOR\STRCDC.ini ok scanned HP126611
for Windows Workstations MP4\fsdrvplg.ppl ok unchanged HP126611
for Windows Workstations MP4\prupdate.ppl ok unchanged HP126611
for Windows Workstations MP4\updater.dll ok unchanged HP126611
for Windows Workstations MP4\thpimpl.ppl ok unchanged HP126611
11/20/2010 2:49:42 PM C:\WINDOWS\system32\jsproxy.dll ok unchanged
11/20/2010 2:49:42 PM C:\Documents and Settings\Administrator\Local Settings\A
pplication Data\Octoshape\Octoshape Streaming Services\Temp\tmp-index.cache
11/20/2010 2:49:42 PM C:\Documents and Settings\All Users\Application Data\Kas
persky Lab\AVP60MP4\Data\rollback.ini ok scanned HP12661107772\Administra
tor localhost
for Windows Workstations MP4\hashmd5.PPL ok unchanged HP126611
11/20/2010 2:49:42 PM C:\WINDOWS\system32\geo.nls ok unchanged
11/20/2010 2:49:42 PM C:\Documents and Settings\All Users\Application Data\des
t
persky Lab\AVP60MP4\Data\u0607g.xml not processed by type HP12661107772\Ad
persky Lab\AVP60MP4\Bases\kdb-i386-0607g.xml not processed by type HP126611
Registry Mechanic\Registry Mechanic Quick Start Guide.lnk ok scanned
Registry Mechanic\Registry Mechanic.lnk ok scanned HP12661107772\Administra
tor localhost
Registry Mechanic\Uninstall Registry Mechanic.lnk ok scanned HP126611
Winamp\Uninstall Winamp.lnk ok unchanged HP12661107772\Administra
tor localhost
Winamp\What's New.lnk ok scanned HP12661107772\Administrator localhos
t
Winamp\Winamp.lnk ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:49:43 PM C:\WINDOWS\CREATOR\remind_xp.dll ok iChecker
11/20/2010 2:49:43 PM C:\WINDOWS\Prefetch\REMIND_XP.DLL-1176AC07.pf ok
11/20/2010 2:49:44 PM C:\WINDOWS\system32\wbem\Logs\wbemcore.log not proc
essed by type K17\HP12661107772$ localhost
11/20/2010 2:49:44 PM C:\WINDOWS\system32\mprapi.dll ok unchanged
11/20/2010 2:49:44 PM C:\WINDOWS\system32\activeds.dll ok unchange
11/20/2010 2:49:44 PM C:\WINDOWS\system32\adsldpc.dll ok unchanged
11/20/2010 2:49:45 PM C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\Pref
erred ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:45 PM C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\3478
3366-69ee-4875-bd21-59411a7d6a5f ok scanned K17\HP12661107772$
localhost
11/20/2010 2:49:46 PM C:\Program Files\Java\jre6\bin\client\classes.jsa
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\content-types.properties
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\deploy.jar ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\ext\dnsns.jar ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\ext\localedata.jar
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fontconfig.bfc ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightDemiBol
d.ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightDemiIta
lic.ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightItalic.
ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightRegular
.ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaSansDemiBold.
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaSansRegular.t
tf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaTypewriterBol
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\fonts\LucidaTypewriterReg
ular.ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\javaws.jar ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\jsse.jar ok unchange
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\logging.properties
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\meta-index ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\net.properties ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\plugin.jar ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\resources.jar ok
11/20/2010 2:49:47 PM C:\Program Files\Java\jre6\lib\rt.jar ok unchange
11/20/2010 2:49:49 PM C:\WINDOWS\Debug\UserMode\userenv.log not processed
11/20/2010 2:49:49 PM C:\WINDOWS\system32\wbem\Logs\wbemess.log not proc
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\lib\security\blacklist
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\lib\security\java.policy
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\lib\security\java.security
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\lib\security\javaws.policy
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\lib\tzmappings ok
owsXP-x86-ENU.exe ok unchanged HP12661107772\Administrator
localhost
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\lib\zi\GMT ok unchange
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\bin\awt.dll ok unchange
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\bin\client\jvm.dll ok
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\bin\dcpr.dll ok unchange
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\bin\deploy.dll ok
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\bin\fontmanager.dll ok
11/20/2010 2:49:49 PM C:\Program Files\Java\jre6\bin\hpi.dll ok unchange
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\java.dll ok unchange
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\javaw.exe ok
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\jp2native.dll ok
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\jpeg.dll ok unchange
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\msvcr71.dll ok
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\net.dll ok unchange
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\nio.dll ok unchange
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\regutils.dll ok
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\verify.dll ok
11/20/2010 2:49:50 PM C:\Program Files\Java\jre6\bin\zip.dll ok unchange
11/20/2010 2:49:54 PM \DEVICE\HARDDISK0\DR0 ok scanned
11/20/2010 2:49:59 PM C:\WINDOWS\CREATOR\STRCDC.ini ok scanned HP126611
11/20/2010 2:49:59 PM C:\WINDOWS\system32\wbem\Logs\wbemcore.log not proc
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\VERCLSID.EXE-3667BD89.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\IGFXTRAY.EXE-3391579A.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\ALCMTR.EXE-235F9538.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\SETREFRESH.EXE-0C1D851C.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\PDFSTY.EXE-2D4ED2C8.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\RECGUARD.EXE-3990548D.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\NEROCHECK.EXE-092C6DFA.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\IGFXSRVC.EXE-2FB63FE8.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\HKCMD.EXE-1D05234B.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\REMIND_XP.EXE-0DBED868.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\RTHDCPL.EXE-06918CFA.pf ok
11/20/2010 2:50:06 PM C:\WINDOWS\Prefetch\JUSCHED.EXE-0F4A509D.pf ok
11/20/2010 2:50:07 PM C:\WINDOWS\Prefetch\REALSCHED.EXE-3282FD31.pf ok
11/20/2010 2:50:07 PM C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf ok
f ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:50:07 PM C:\WINDOWS\Prefetch\AVP.EXE-032C8F59.pf ok unchange
11/20/2010 2:50:12 PM C:\WINDOWS\system32\rasadhlp.dll ok unchange
d NT AUTHORITY\LOCAL SERVICE localhost
11/20/2010 2:50:14 PM \DEVICE\HARDDISK0\DR0 ok scanned
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\client\classes.jsa
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\content-types.properties
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\deploy.jar ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\ext\dnsns.jar ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\ext\localedata.jar
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fontconfig.bfc ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightDemiBol
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightDemiIta
lic.ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightItalic.
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaBrightRegular
.ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaSansDemiBold.
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaSansRegular.t
tf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaTypewriterBol
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\fonts\LucidaTypewriterReg
ular.ttf ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\javaws.jar ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\jsse.jar ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\logging.properties
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\meta-index ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\net.properties ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\plugin.jar ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\resources.jar ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\rt.jar ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\security\blacklist
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\security\java.policy
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\security\java.security
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\security\javaws.policy
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\tzmappings ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\lib\zi\GMT ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\awt.dll ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\client\jvm.dll ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\dcpr.dll ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\deploy.dll ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\fontmanager.dll ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\hpi.dll ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\java.dll ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\javaw.exe ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\jp2native.dll ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\jpeg.dll ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\msvcr71.dll ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\net.dll ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\nio.dll ok unchange
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\regutils.dll ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\verify.dll ok
11/20/2010 2:50:21 PM C:\Program Files\Java\jre6\bin\zip.dll ok unchange
11/20/2010 2:50:24 PM C:\WINDOWS\system32\drprov.dll ok unchanged
11/20/2010 2:50:24 PM C:\WINDOWS\system32\ntlanman.dll ok unchange
11/20/2010 2:50:24 PM C:\WINDOWS\system32\netui0.dll ok unchanged
11/20/2010 2:50:24 PM C:\WINDOWS\system32\netui1.dll ok unchanged
11/20/2010 2:50:24 PM C:\WINDOWS\system32\netrap.dll ok unchanged
11/20/2010 2:50:24 PM C:\WINDOWS\system32\davclnt.dll ok unchanged
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\IGFXTRAY.EXE-3391579A.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\ALCMTR.EXE-235F9538.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\SETREFRESH.EXE-0C1D851C.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\PDFSTY.EXE-2D4ED2C8.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\RECGUARD.EXE-3990548D.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\NEROCHECK.EXE-092C6DFA.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\IGFXSRVC.EXE-2FB63FE8.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\HKCMD.EXE-1D05234B.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\WUAUCLT.EXE-399A8E72.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\REMIND_XP.EXE-0DBED868.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\RTHDCPL.EXE-06918CFA.pf not proc
not processed by type K17\HP12661107772$ localhost
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\JUSCHED.EXE-0F4A509D.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\REALSCHED.EXE-3282FD31.pf not proc
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf not proc
f not processed by type K17\HP12661107772$ localhost
11/20/2010 2:50:24 PM C:\WINDOWS\Prefetch\AVP.EXE-032C8F59.pf not processed
by type K17\HP12661107772$ localhost
pplication Data\Octoshape\Octoshape Streaming Services\Temp\tmp-index.cache
11/20/2010 2:52:16 PM C:\WINDOWS\system32\drivers\acpi.sys ok unchange
11/20/2010 2:52:16 PM C:\WINDOWS\system32\drivers\mssmbios.sys ok
11/20/2010 2:52:16 PM C:\WINDOWS\system32\drivers\intelppm.sys ok
11/20/2010 2:52:16 PM C:\WINDOWS\system32\drivers\hdaudbus.sys ok
11/20/2010 2:52:16 PM C:\WINDOWS\system32\drivers\ipnat.sys ok unchange
11/20/2010 2:52:34 PM C:\WINDOWS\system32\wbem\Logs\wmiprov.log not proc
11/20/2010 2:53:06 PM C:\Program Files\Microsoft Office\Office12\GrooveMisc.dl
11/20/2010 2:53:06 PM C:\Documents and Settings\Administrator\Desktop\Internet
.lnk ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:53:06 PM C:\WINDOWS\system32\verclsid.exe ok unchange
11/20/2010 2:53:06 PM C:\WINDOWS\system32\ir50_qcx.dll ok unchange
11/20/2010 2:53:06 PM C:\WINDOWS\system32\ir50_qc.dll ok unchanged
11/20/2010 2:53:06 PM C:\WINDOWS\system32\ir50_32.dll ok unchanged
11/20/2010 2:53:06 PM C:\WINDOWS\system32\ir41_qcx.dll ok unchange
11/20/2010 2:53:06 PM C:\WINDOWS\system32\ir41_qc.dll ok unchanged
11/20/2010 2:53:06 PM C:\WINDOWS\system32\ir41_32.ax ok unchanged
11/20/2010 2:53:06 PM C:\WINDOWS\system32\ir32_32.dll ok unchanged
11/20/2010 2:53:06 PM C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf not proc
11/20/2010 2:53:07 PM C:\WINDOWS\system32\urlmon.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\AppPatch\aclayers.dll ok unchange
11/20/2010 2:53:07 PM C:\Program Files\Internet Explorer\custsat.dll ok
11/20/2010 2:53:07 PM C:\WINDOWS\system32\en-US\ieframe.dll.mui ok
11/20/2010 2:53:07 PM C:\WINDOWS\system32\ieui.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b641
44ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\system32\xmllite.dll ok unchanged
tensions.dll ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:53:07 PM C:\WINDOWS\system32\cscui.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\system32\cscdll.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\system32\mshtml.dll ok unchanged
11/20/2010 2:53:07 PM C:\Program Files\Microsoft Office\Office12\MSOHEVI.DLL
11/20/2010 2:53:07 PM C:\Program Files\Internet Explorer\ieproxy.dll ok
11/20/2010 2:53:07 PM C:\WINDOWS\system32\sxs.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\system32\stdole2.tlb ok unchanged
tor localhost
11/20/2010 2:53:07 PM C:\WINDOWS\system32\mlang.dll ok unchanged
11/20/2010 2:53:07 PM C:\Program Files\Facicons\tbcore3.dll ok unchange
11/20/2010 2:53:07 PM C:\WINDOWS\system32\dbghelp.dll ok unchanged
11/20/2010 2:53:07 PM C:\Program Files\Facicons\arrow_refresh.png ok
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\arrow_refresh.png ok
11/20/2010 2:53:07 PM C:\Program Files\Facicons\basis.xml ok unchange
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\basis.xml ok scanned
11/20/2010 2:53:07 PM C:\Program Files\Facicons\cog.png ok unchange
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\cog.png ok scanned
11/20/2010 2:53:07 PM C:\Program Files\Facicons\computer_delete.png ok
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\computer_delete.png ok
11/20/2010 2:53:07 PM C:\Program Files\Facicons\icons.bmp ok unchange
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\icons.bmp ok iSwift
11/20/2010 2:53:07 PM C:\Program Files\Facicons\info.txt ok unchange
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\info.txt not processed
11/20/2010 2:53:07 PM C:\Program Files\Facicons\tbs_include_script_008200.js
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\tbs_include_script_008200.js
ok iSwift HP12661107772\Administrator localhost
11/20/2010 2:53:07 PM C:\Program Files\Facicons\uninstaller.exe ok
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\uninstaller.exe ok
iChecker HP12661107772\Administrator localhost
11/20/2010 2:53:07 PM C:\Program Files\Facicons\update.exe ok unchange
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\update.exe ok iChecker
11/20/2010 2:53:07 PM C:\Program Files\Facicons\version.txt ok unchange
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\version.txt not processed
11/20/2010 2:53:07 PM C:\Program Files\Facicons\your_logo.png ok unchange
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\your_logo.png ok scanned
11/20/2010 2:53:07 PM C:\Program Files\Facicons\tbhelper.dll ok unchange
11/20/2010 2:53:07 PM C:\Program Files\Facicons\facicons.dll ok unchange
11/20/2010 2:53:07 PM C:\Program Files\Facicons\faciconsIE.dll ok
11/20/2010 2:53:07 PM C:\Program Files\Facicons\TbCommonUtils.dll ok
11/20/2010 2:53:07 PM C:\WINDOWS\system32\msxml3.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\system32\msxml3r.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\system32\jscript.dll ok unchanged
11/20/2010 2:53:07 PM C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIE
Helper.ocx ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:53:07 PM C:\Documents and Settings\All Users\Application Data\Rea
l\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll ok unchange
11/20/2010 2:53:07 PM C:\WINDOWS\system32\msvcr71.dll ok unchanged
11/20/2010 2:53:07 PM C:\WINDOWS\system32\rundll32.exe ok unchange
11/20/2010 2:53:07 PM C:\System Volume Information\_restore{DD0CF2F7-77D2-4945
-B346-6B5613DA5B5D}\RP143\change.log not processed by type HP12661107772\Ad
11/20/2010 2:53:07 PM C:\Program Files\Microsoft Office\Office12\1033\GrooveIn
tlResource.dll ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:53:07 PM C:\WINDOWS\system32\msftedit.dll ok unchange
t
11/20/2010 2:53:07 PM C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.
dll ok unchanged HP12661107772\Administrator localhost
910\swg.dll ok unchanged HP12661107772\Administrator localhos
t
11/20/2010 2:53:08 PM C:\WINDOWS\Fonts\SEGOEUI.TTF ok unchanged
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\icons.bmp not processed
\Toolbar4\{7124C800-B6B8-4A2E-BEC0-8B9ECCEA2149}\tbs_include_script_008200.js
11/20/2010 2:53:08 PM C:\Program Files\Common Files\Microsoft Shared\OFFICE12\
MSO.DLL ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:53:08 PM C:\WINDOWS\system32\msi.dll ok unchanged
Cultures\OFFICE.ODF ok unchanged HP12661107772\Administrator
localhost
MSORES.DLL ok unchanged HP12661107772\Administrator localhos
t
1033\MSOINTL.DLL ok unchanged HP12661107772\Administrator
localhost
msxml5.dll ok unchanged HP12661107772\Administrator localhos
t
\Microsoft\Office\Groove12.pip ok unchanged HP12661107772\Administra
tor localhost
11/20/2010 2:53:09 PM C:\Program Files\Common Files\System\ado\msadox.dll
11/20/2010 2:53:09 PM C:\WINDOWS\system32\oleacc.dll ok unchanged
11/20/2010 2:53:09 PM C:\Program Files\Java\jre6\bin\jp2ssv.dll ok
11/20/2010 2:53:09 PM C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.
dll ok unchanged HP12661107772\Administrator localhost
pplication Data\Microsoft\Feeds Cache\index.dat ok unchanged HP126611
11/20/2010 2:53:10 PM C:\WINDOWS\system32\en-US\urlmon.dll.mui ok
11/20/2010 2:53:10 PM C:\WINDOWS\system32\rasapi32.dll ok unchange
11/20/2010 2:53:10 PM C:\WINDOWS\system32\rasman.dll ok unchanged
11/20/2010 2:53:10 PM C:\WINDOWS\system32\tapi32.dll ok unchanged
11/20/2010 2:53:10 PM C:\WINDOWS\system32\schannel.dll ok unchange
11/20/2010 2:53:10 PM C:\WINDOWS\system32\digest.dll ok unchanged
11/20/2010 2:53:10 PM C:\WINDOWS\system32\msnsspc.dll ok unchanged
11/20/2010 2:53:10 PM C:\WINDOWS\system32\sensapi.dll ok unchanged
11/20/2010 2:53:10 PM C:\WINDOWS\system32\sens.dll ok unchanged
11/20/2010 2:53:10 PM C:\Program Files\Google\Google Toolbar\Component\GoogleT
oolbar.6.6.1015.36.manifest.xml ok unchanged HP12661107772\Administra
tor localhost
11/20/2010 2:53:10 PM C:\Documents and Settings\Administrator\Cookies\administ
rator@google[3].txt ok unchanged HP12661107772\Administrator
localhost
oolbarDynamic_32_731E36624B820BA7.dll ok unchanged HP12661107772\Ad
rator@google.com[1].txt not processed by type HP12661107772\Administrator
localhost
11/20/2010 2:53:10 PM C:\WINDOWS\system32\query.dll ok unchanged
11/20/2010 2:53:10 PM C:\WINDOWS\system32\oleaccrc.dll ok unchange
oolbarDynamic_mui_en_950DF09FAB501E03.dll ok unchanged HP126611
11/20/2010 2:53:11 PM C:\WINDOWS\system32\msls31.dll ok unchanged
11/20/2010 2:53:11 PM C:\WINDOWS\system32\ieapfltr.dll ok unchange
emporary Internet Files\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat
\Microsoft\Protect\S-1-5-21-1032152753-576341234-3010021626-500\Preferred
\Microsoft\Protect\S-1-5-21-1032152753-576341234-3010021626-500\e71b40e9-9737-48
d5-8256-6be140867247 ok scanned HP12661107772\Administrator localhos
t
\Microsoft\Protect\CREDHIST ok unchanged HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\C8M3MIOM\google_com_my[1].htm ok
for Windows Workstations MP4\scieplgn.dll ok unchanged HP126611
11/20/2010 2:53:11 PM C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll
11/20/2010 2:53:11 PM C:\Program Files\Microsoft Office\Office12\REFBAR.ICO
11/20/2010 2:53:11 PM C:\Program Files\Messenger\msmsgs.exe ok unchange
11/20/2010 2:53:11 PM C:\Documents and Settings\Administrator\Favorites\Deskto
p.ini ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:53:11 PM C:\WINDOWS\system32\ieapfltr.dat ok unchange
\Microsoft\Protect\S-1-5-21-1032152753-576341234-3010021626-500\0b0f5b81-ee4d-43
05-b44a-14d04be37881 ok unchanged HP12661107772\Administrator
localhost
11/20/2010 2:53:12 PM C:\WINDOWS\system32\url.dll ok unchanged
emporary Internet Files\Content.IE5\C8M3MIOM\close_sm[1].gif ok unchange
emporary Internet Files\Content.IE5\N3K9QKXY\chrome_48[1].gif ok unchange
11/20/2010 2:53:12 PM C:\WINDOWS\system32\iepeers.dll ok unchanged
emporary Internet Files\Content.IE5\3UUZUUCD\favicon[4].ico ok scanned
\Microsoft\Internet Explorer\UserData\index.dat not processed by type HP126611
\Microsoft\Internet Explorer\UserData\S6MXV6NI\pmocntr2[2].xml ok unchange
emporary Internet Files\Content.IE5\E6VDTDEM\g-button-chocobo-basic-1[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\g-button-chocobo-basic-2[1].gif
11/20/2010 2:53:12 PM C:\WINDOWS\Fonts\arialbd.ttf ok unchanged
emporary Internet Files\Content.IE5\B8GK6JLF\nav_logo27[1].png ok iSwift
11/20/2010 2:53:13 PM C:\WINDOWS\system32\imgutil.dll ok unchanged
11/20/2010 2:53:13 PM C:\WINDOWS\system32\pngfilt.dll ok unchanged
pplication Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT ok unchange
emporary Internet Files\Content.IE5\N3K9QKXY\logo1w[1].png ok unchange
istory\desktop.ini ok unchanged HP12661107772\Administrator
localhost
istory\History.IE5\MSHist012010112020101121\index.dat not processed by type
11/20/2010 2:53:13 PM C:\WINDOWS\system32\mshtmled.dll ok unchange
11/20/2010 2:53:13 PM C:\WINDOWS\system32\en-US\mshtmled.dll.mui ok
11/20/2010 2:53:13 PM C:\WINDOWS\system32\mshtml.tlb ok unchanged
emporary Internet Files\Content.IE5\B8GK6JLF\c2HBA3dkZ4o[1].js ok iSwift
emporary Internet Files\Content.IE5\E6VDTDEM\search[5] ok scanned HP126611
emporary Internet Files\Content.IE5\N3K9QKXY\search[4] ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\search[7] ok scanned HP126611
emporary Internet Files\Content.IE5\J259EF9Z\search[6] ok scanned HP126611
11/20/2010 2:53:24 PM C:\WINDOWS\Prefetch\RUNDLL32.EXE-2DA8F370.pf not proc
11/20/2010 2:53:24 PM C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf not proc
emporary Internet Files\Content.IE5\B8GK6JLF\search[2] ok scanned HP126611
emporary Internet Files\Content.IE5\O13EJ9R1\search[1] ok scanned HP126611
11/20/2010 2:53:27 PM C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb
11/20/2010 2:53:27 PM C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk
emporary Internet Files\Content.IE5\D9CJP4LM\search[2] ok scanned HP126611
emporary Internet Files\Content.IE5\C8M3MIOM\search[3] ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\search[6] ok scanned HP126611
emporary Internet Files\Content.IE5\N3K9QKXY\search[5] ok scanned HP126611
emporary Internet Files\Content.IE5\C8M3MIOM\google_com_my[1].htm ok
11/20/2010 2:53:32 PM C:\WINDOWS\system32\wdmaud.drv ok unchanged
11/20/2010 2:53:32 PM C:\WINDOWS\system32\msacm32.drv ok unchanged
11/20/2010 2:53:32 PM C:\WINDOWS\system32\midimap.dll ok unchanged
11/20/2010 2:53:32 PM C:\WINDOWS\Media\windows navigation start.wav ok
11/20/2010 2:53:32 PM C:\WINDOWS\system32\drivers\kmixer.sys ok unchange
11/20/2010 2:53:32 PM C:\WINDOWS\AppPatch\drvmain.sdb ok unchanged
emporary Internet Files\Content.IE5\3UUZUUCD\search[3].htm ok scanned
11/20/2010 2:53:33 PM C:\WINDOWS\Fonts\wingding.ttf ok unchanged
11/20/2010 2:53:33 PM C:\WINDOWS\Fonts\timesbd.ttf ok unchanged
11/20/2010 2:53:33 PM C:\WINDOWS\Fonts\times.ttf ok unchanged
rator@google.com[2].txt ok iSwift HP12661107772\Administrator localhos
t
11/20/2010 2:53:42 PM C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb
11/20/2010 2:53:42 PM C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk
11/20/2010 2:53:43 PM C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log
rator@agame[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\J259EF9Z\zuma[1].htm ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\all[1].css not processed by type
emporary Internet Files\Content.IE5\B8GK6JLF\subcategory[1].css not processed
t
11/20/2010 2:54:38 PM C:\Program Files\Common Files\Java\Java Update\jucheck.e
xe ok unchanged HP12661107772\Administrator localhost
11/20/2010 2:54:38 PM C:\WINDOWS\Prefetch\JUCHECK.EXE-1B0E4D0A.pf ok
11/20/2010 2:54:39 PM C:\Program Files\Java\jre6\bin\java.exe ok unchange
11/20/2010 2:54:39 PM C:\WINDOWS\Prefetch\JAVA.EXE-0C263507.pf ok
emporary Internet Files\Content.IE5\N3K9QKXY\map-1.6.0[1].xml ok unchange
emp\jusched.log not processed by type HP12661107772\Administrator localhos
t
emp\au-descriptor-1.6.0_22-b04.xml ok unchanged HP12661107772\Ad
11/20/2010 2:54:40 PM C:\Program Files\Java\jre6\lib\i386\jvm.cfg ok
emporary Internet Files\Content.IE5\3UUZUUCD\au-descriptor-1.6.0_22-b04[2].xml
emp\au-descriptor-1.6.0_22-b04.xml ok scanned HP12661107772\Administra
tor localhost
11/20/2010 2:54:40 PM C:\WINDOWS\Fonts\framdit.ttf ok unchanged
11/20/2010 2:54:40 PM C:\WINDOWS\Media\Windows XP Balloon.wav ok unchange
11/20/2010 2:54:40 PM C:\WINDOWS\Fonts\tahomabd.ttf ok unchanged
emp\jusched.log not processed by type HP12661107772\Administrator localhos
t
emporary Internet Files\Content.IE5\B8GK6JLF\all[1].js ok scanned HP126611
11/20/2010 2:54:55 PM C:\WINDOWS\Prefetch\JAVA.EXE-0C263507.pf not proc
emporary Internet Files\Content.IE5\O13EJ9R1\config[1].js ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\subcategory[1].js ok scanned
11/20/2010 2:54:59 PM C:\WINDOWS\Fonts\verdana.ttf ok unchanged
11/20/2010 2:54:59 PM C:\WINDOWS\Fonts\micross.ttf ok unchanged
11/20/2010 2:55:00 PM C:\WINDOWS\Fonts\verdanab.ttf ok unchanged
rator@www2.boago[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\C8M3MIOM\afr[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\show_ads[1].js ok iSwift
emporary Internet Files\Content.IE5\E6VDTDEM\show_ads_impl[1].js ok
iSwift HP12661107772\Administrator localhost
11/20/2010 2:55:01 PM C:\WINDOWS\system32\Macromed\Flash\Flash10e.ocx ok
11/20/2010 2:55:01 PM C:\WINDOWS\system32\mscms.dll ok unchanged
emporary Internet Files\Content.IE5\E6VDTDEM\test_domain[1].js ok unchange
emporary Internet Files\Content.IE5\N3K9QKXY\render_ads[1].js ok unchange
rator@doubleclick[2].txt ok unchanged HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\E6VDTDEM\ads[2].htm ok scanned HP126611
emporary Internet Files\Content.IE5\C8M3MIOM\inject_object_div[1].js ok
11/20/2010 2:55:01 PM C:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust\rpco
nverter.cfg ok unchanged HP12661107772\Administrator localhos
t
\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
11/20/2010 2:55:02 PM C:\WINDOWS\system32\dxtrans.dll ok unchanged
emporary Internet Files\Content.IE5\J259EF9Z\i[1].png ok scanned HP126611
11/20/2010 2:55:02 PM C:\WINDOWS\system32\ddrawex.dll ok unchanged
11/20/2010 2:55:02 PM C:\WINDOWS\system32\ddraw.dll ok unchanged
emporary Internet Files\Content.IE5\O13EJ9R1\abg-en-100c-ffffff[1].png ok
11/20/2010 2:55:02 PM C:\WINDOWS\system32\dciman32.dll ok unchange
11/20/2010 2:55:02 PM C:\WINDOWS\win.ini ok unchanged HP126611
11/20/2010 2:55:02 PM C:\WINDOWS\system32\dxtmsft.dll ok unchanged
emporary Internet Files\Content.IE5\N3K9QKXY\imgad[1].swf packed file Swf2
Swc HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\N3K9QKXY\imgad[1].swf//Swf2Swc ok
emporary Internet Files\Content.IE5\N3K9QKXY\imgad[1].swf ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\graphics[1].js ok scanned
11/20/2010 2:55:02 PM C:\WINDOWS\system32\rmoc3260.dll ok unchange
11/20/2010 2:55:02 PM C:\WINDOWS\system32\wmp.dll ok unchanged
11/20/2010 2:55:02 PM C:\WINDOWS\system32\wmpdxm.dll ok unchanged
emporary Internet Files\Content.IE5\B8GK6JLF\abg[1].js ok unchanged
11/20/2010 2:55:04 PM C:\WINDOWS\Prefetch\JUCHECK.EXE-1B0E4D0A.pf not proc
emporary Internet Files\Content.IE5\3UUZUUCD\ag[1].php ok scanned HP126611
11/20/2010 2:55:07 PM C:\WINDOWS\system32\usp10.dll ok unchanged
emporary Internet Files\Content.IE5\B8GK6JLF\all[2].js ok scanned HP126611
rator@spelar[2].txt ok unchanged HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\N3K9QKXY\ga[1].js ok unchanged
rator@scribd[2].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\C8M3MIOM\79,1259239515,logo[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\header_bg[1].jpg ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\body_bg[1].jpg ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\dummy_small[1].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\usernav2_bg_eleft[1].gif not proc
emporary Internet Files\Content.IE5\3UUZUUCD\usernav2_bg_emid[1].gif not proc
emporary Internet Files\Content.IE5\O13EJ9R1\searchbtnbg[1].gif not processed
emporary Internet Files\Content.IE5\D9CJP4LM\topmenu_btn_left[1].gif not proc
emporary Internet Files\Content.IE5\E6VDTDEM\usernav2_bg_eright[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\topmenu_btn_right[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\usernav3_avatar_border[1].gif
emporary Internet Files\Content.IE5\B8GK6JLF\registerorange[1].gif not proc
emporary Internet Files\Content.IE5\O13EJ9R1\usernav_pointsbar[1].gif not proc
emporary Internet Files\Content.IE5\D9CJP4LM\79,728x90_advert[1].gif not proc
localhost
11/20/2010 2:55:20 PM C:\WINDOWS\Fonts\trebucbd.ttf ok unchanged
rator@www.facebook[1].txt ok unchanged HP12661107772\Administra
tor localhost
rator@facebook[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\3UUZUUCD\like[1].htm ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\-l61QNelcDZ[1].js ok iSwift
emporary Internet Files\Content.IE5\3UUZUUCD\eZnJSNmPLGZ[1].css not processed
emporary Internet Files\Content.IE5\D9CJP4LM\vJRBjt5XzbL[1].gif ok unchange
emporary Internet Files\Content.IE5\3UUZUUCD\Ch71Zv858xU[1].png ok unchange
emporary Internet Files\Content.IE5\D9CJP4LM\gW7YKfpWRml[1].js ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\vvD5uYudhAG[1].js ok scanned
rator@atdmt[1].txt ok unchanged HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\C8M3MIOM\xd_proxy[1].htm ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\DmvbpGB-fMy[1].swf packed file Swf2
emporary Internet Files\Content.IE5\E6VDTDEM\DmvbpGB-fMy[1].swf//Swf2Swc
emporary Internet Files\Content.IE5\E6VDTDEM\DmvbpGB-fMy[1].swf ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\20090130110105_Zuma[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\ratingface[1].gif not processed
localhost
emporary Internet Files\Content.IE5\O13EJ9R1\__utm[2].gif not processed
emporary Internet Files\Content.IE5\D9CJP4LM\__utm[1].gif not processed
rator@spelar[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\C8M3MIOM\co[1].gif not processed by type
emporary Internet Files\Content.IE5\E6VDTDEM\00000000000000_Luxor[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\honey_trouble[1].gif not proc
emporary Internet Files\Content.IE5\3UUZUUCD\country[1].htm ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\marine-balls[1].htm ok
emporary Internet Files\Content.IE5\B8GK6JLF\marine_balls[1].gif not proc
emporary Internet Files\Content.IE5\D9CJP4LM\bongo_balls[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\00000000000000_Sparkle-Zylom[1].gif
emporary Internet Files\Content.IE5\E6VDTDEM\fruit_twirls[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\20100715025632_The-Light-Work[1].jp
g ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\3UUZUUCD\Screwball[1].gif not processed
emporary Internet Files\Content.IE5\D9CJP4LM\00000000000000_Pirate-Poppers[1].gi
f not processed by type HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\J259EF9Z\beadz[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\00000000000000_Ribiba[1].gif
emporary Internet Files\Content.IE5\B8GK6JLF\00000000000000_Tropix-Puffer-Popper
[1].gif not processed by type HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\O13EJ9R1\20091223112836_Bru[1].jpg ok
emporary Internet Files\Content.IE5\C8M3MIOM\pinballada[1].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\__utm[3].gif not processed
emporary Internet Files\Content.IE5\N3K9QKXY\__utm[6].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\r5WTv9md8xH[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\qDH1xoDhFBF[1].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\like[1].htm ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\__utm[7].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\game[1].css not processed
emporary Internet Files\Content.IE5\O13EJ9R1\game[1].js ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\ajs[6].php ok scanned HP126611
rator@admaxserver[2].txt not processed by type HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\N3K9QKXY\ag[1].php ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\afr[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\J259EF9Z\hostedbadge[1].htm ok scanned
rator@reddit[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\D9CJP4LM\1[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\C8M3MIOM\badges_su[1].css not processed
emporary Internet Files\Content.IE5\C8M3MIOM\badge_su[1].js ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\button1[1].js ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\co[1].gif not processed by type
emporary Internet Files\Content.IE5\E6VDTDEM\vh[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\button1[1].htm ok scanned
rator@ads.admaxasia[1].txt not processed by type HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\N3K9QKXY\jquery[1].js ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\like[1].htm ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\vh[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\1Be-brvKO2y[1].png ok unchange
emporary Internet Files\Content.IE5\B8GK6JLF\jquery.reddit[1].js ok
emporary Internet Files\Content.IE5\C8M3MIOM\blogbutton[1].js ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\reddit[1].css not processed
emporary Internet Files\Content.IE5\B8GK6JLF\reddit-ie7-hax[1].css not proc
emporary Internet Files\Content.IE5\J259EF9Z\vj[1] ok scanned HP126611
rator@bs.serving-sys[1].txt ok unchanged HP12661107772\Administra
tor localhost
rator@serving-sys[2].txt not processed by type HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\J259EF9Z\emn[1].js ok scanned HP126611
emporary Internet Files\Content.IE5\D9CJP4LM\vj[2] ok scanned HP126611
emporary Internet Files\Content.IE5\C8M3MIOM\emn[1].swf packed file Swf2Swc
emporary Internet Files\Content.IE5\C8M3MIOM\emn[1].swf//Swf2Swc ok
emporary Internet Files\Content.IE5\C8M3MIOM\emn[1].swf ok scanned HP126611
rator@effectivemeasure[2].txt not processed by type HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\C8M3MIOM\1289450704291_729c0731-8c39-4b8e-be
f4-ef480f749bee[1].swf packed file Swf2Swc HP12661107772\Administra
tor localhost
f4-ef480f749bee[1].swf//Swf2Swc ok scanned HP12661107772\Administrator
localhost
f4-ef480f749bee[1].swf ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:55:57 PM C:\WINDOWS\system32\mscoree.dll ok unchanged
11/20/2010 2:55:57 PM C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dl
\Macromedia\Flash Player\#SharedObjects\8ER6QE8J\effectivemeasure.net\EM_APP.sol
\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#effectivemeasur
e.net\settings.sol ok unchanged HP12661107772\Administrator
localhost
MSOXMLMF.DLL ok unchanged HP12661107772\Administrator localhos
t
emporary Internet Files\Content.IE5\N3K9QKXY\emn[1].txt not processed by type
emporary Internet Files\Content.IE5\3UUZUUCD\adServer[1].htm ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\StdBanner[1].js ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\298d47ce-ca39-455f-a397-f05416f8f9e
0[1].swf packed file Swf2Swc HP12661107772\Administrator
localhost
0[1].swf//Swf2Swc ok scanned HP12661107772\Administrator localhos
t
0[1].swf ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\D9CJP4LM\emn[2].txt not processed by type
emporary Internet Files\Content.IE5\J259EF9Z\favicon[1].ico ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\puzzle[1].htm ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\puzzle[1].htm ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\breadcrumb_middle_o[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\breadcrumb_left_o[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\breadcrumb_middle_bg_o[1].png
emporary Internet Files\Content.IE5\N3K9QKXY\breadcrumb_left_bg_o[1].png
emporary Internet Files\Content.IE5\3UUZUUCD\breadcrumb_right_o[1].png ok
emporary Internet Files\Content.IE5\3UUZUUCD\top[1].png ok scanned HP126611
emporary Internet Files\Content.IE5\J259EF9Z\top_left[1].png ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\anchor_arrow[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\left[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\right[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\top_right[1].png ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\rightside_bg[1].gif not proc
emporary Internet Files\Content.IE5\D9CJP4LM\leftzone_bg[1].gif not processed
emporary Internet Files\Content.IE5\D9CJP4LM\selector[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\rightzone_bg[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\leftside_bg[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\zoom_out[1].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\zoom_in[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\btn_orange_right[1].gif not proc
emporary Internet Files\Content.IE5\B8GK6JLF\usernav_pointsbar_full[1].gif
emporary Internet Files\Content.IE5\B8GK6JLF\btn_orange_left[1].gif not proc
localhost
emporary Internet Files\Content.IE5\3UUZUUCD\bottom_left[1].png ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\bottom[1].png ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\bottom_right[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\double[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\doubleborder_t2l[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\middle_top_left[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\1[1].gif not processed by type
emporary Internet Files\Content.IE5\E6VDTDEM\badgeRect74x18[1].png ok
emporary Internet Files\Content.IE5\3UUZUUCD\details_gray_top[1].gif not proc
emporary Internet Files\Content.IE5\3UUZUUCD\details_gray_middle[1].gif not proc
emporary Internet Files\Content.IE5\3UUZUUCD\buttons_blue_left[1].gif not proc
localhost
emporary Internet Files\Content.IE5\B8GK6JLF\__utm[2].gif not processed
tor localhost
emporary Internet Files\Content.IE5\O13EJ9R1\SwkXD-dmc2M[1].png ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\qDH1xoDhFBF[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\blog_head[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\adowngray[1].gif not processed
emporary Internet Files\Content.IE5\O13EJ9R1\aupgray[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\button_info[1].json not proc
emporary Internet Files\Content.IE5\E6VDTDEM\bongo_balls[1].gif not processed
emporary Internet Files\Content.IE5\N3K9QKXY\139944[1] ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\00000000000000_Luxor[1].gif
emporary Internet Files\Content.IE5\D9CJP4LM\category[1].css not processed
emporary Internet Files\Content.IE5\C8M3MIOM\category[1].js ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\79,1259239515,logo[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\dummy_small[1].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\usernav2_bg_eleft[1].gif not proc
emporary Internet Files\Content.IE5\3UUZUUCD\usernav2_bg_emid[1].gif not proc
emporary Internet Files\Content.IE5\E6VDTDEM\usernav2_bg_eright[1].gif not proc
emporary Internet Files\Content.IE5\B8GK6JLF\registerorange[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\usernav3_avatar_border[1].gif
emporary Internet Files\Content.IE5\O13EJ9R1\usernav_pointsbar[1].gif not proc
emporary Internet Files\Content.IE5\O13EJ9R1\searchbtnbg[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\ag[1].php ok scanned HP126611
emporary Internet Files\Content.IE5\B8GK6JLF\usernav_pointsbar_full[1].gif
emporary Internet Files\Content.IE5\O13EJ9R1\afr[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\D9CJP4LM\iframes_api_loader[1].htm ok
emporary Internet Files\Content.IE5\J259EF9Z\ratingface[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\ag[1].php ok scanned HP126611
11/20/2010 2:56:15 PM C:\WINDOWS\system32\dssenh.dll ok unchanged
emporary Internet Files\Content.IE5\D9CJP4LM\gcm_392279366d8656daff9da175563f505
a[1].js ok scanned HP12661107772\Administrator localhost
11/20/2010 2:56:15 PM C:\WINDOWS\system32\vbscript.dll ok unchange
emporary Internet Files\Content.IE5\E6VDTDEM\honey_trouble[1].gif not proc
tor localhost
emporary Internet Files\Content.IE5\C8M3MIOM\orangetextcloud[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\test_benefit3[1].png ok
emporary Internet Files\Content.IE5\3UUZUUCD\top_blue_orange[1].png ok
emporary Internet Files\Content.IE5\J259EF9Z\middle_top_left2[1].png ok
emporary Internet Files\Content.IE5\J259EF9Z\orange_topleft[1].png ok
emporary Internet Files\Content.IE5\C8M3MIOM\ads[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\B8GK6JLF\double-blue-left[1].png ok
emporary Internet Files\Content.IE5\B8GK6JLF\buttons[1].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\imgad[3].swf packed file Swf2
emporary Internet Files\Content.IE5\O13EJ9R1\doubleborder_b2l[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\imgad[3].swf//Swf2Swc ok
emporary Internet Files\Content.IE5\E6VDTDEM\imgad[3].swf ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\top_left_notransp[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\orange_topright_backgrblue[1].png
emporary Internet Files\Content.IE5\E6VDTDEM\gamepage_blue_arrow[1].gif not proc
tor localhost
emporary Internet Files\Content.IE5\3UUZUUCD\details_gray_bottom[1].gif not proc
emporary Internet Files\Content.IE5\O13EJ9R1\middle_bottom_left[1].png ok
emporary Internet Files\Content.IE5\D9CJP4LM\20101117112537_Sushi-Quiz[1].jpg
emporary Internet Files\Content.IE5\C8M3MIOM\20101101052057_Pony-Adventure[1].jp
emporary Internet Files\Content.IE5\N3K9QKXY\20101112102334_My-Pony-Park[1].jpg
emporary Internet Files\Content.IE5\3UUZUUCD\20101110160142_Bomb-It-3[1].jpg
emporary Internet Files\Content.IE5\J259EF9Z\double-orange-right[1].png ok
emporary Internet Files\Content.IE5\B8GK6JLF\bottom_right_white[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\bottom_blue_white[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\bottom_left-notransparent[1].png
emporary Internet Files\Content.IE5\D9CJP4LM\bottom_left_backgrblue[1].png
emporary Internet Files\Content.IE5\C8M3MIOM\orange-bottom-right[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\extrafooter_dot[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\loginboxStars[1].png ok
emporary Internet Files\Content.IE5\3UUZUUCD\bg[1].jpg ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\no_btn[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\yes_btn[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\logintop[1].png ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\close[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\ratingface[1].png ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\rating_items[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\preloader_bg[1].gif not proc
emporary Internet Files\Content.IE5\E6VDTDEM\avatar_border_small_white[1].gif
emporary Internet Files\Content.IE5\E6VDTDEM\avatar_border_small_blue[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\redflag[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\gamatar_preview_7282473[1].jpg
emporary Internet Files\Content.IE5\B8GK6JLF\gamatar_preview_3909336[1].jpg
emporary Internet Files\Content.IE5\O13EJ9R1\gamatar_preview_992783[1].jpg
emporary Internet Files\Content.IE5\D9CJP4LM\fruit_twirls[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\gamatar_preview_5826782[1].jpg
tor localhost
emporary Internet Files\Content.IE5\B8GK6JLF\00000000000000_Sparkle-Zylom[1].gif
emporary Internet Files\Content.IE5\E6VDTDEM\shadow_top_new[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\shadow_center_new[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\top_left[1].png ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\shadow_bottom_new[1].png ok
emporary Internet Files\Content.IE5\3UUZUUCD\loginboxClose[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\top_right_new[1].png ok
emporary Internet Files\Content.IE5\B8GK6JLF\indicator[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\errorDot[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\bottom_right[1].png ok
emporary Internet Files\Content.IE5\B8GK6JLF\bottom_left[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\shadow_mid[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\loginboxBottom[1].png ok
emporary Internet Files\Content.IE5\D9CJP4LM\shadow_top[1].png ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\shadow_bottom[1].png ok
emporary Internet Files\Content.IE5\J259EF9Z\anchor_arrow[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\zoom_out[1].gif ok iSwift
emporary Internet Files\Content.IE5\E6VDTDEM\zoom_in[1].gif ok iSwift
emporary Internet Files\Content.IE5\B8GK6JLF\btn_orange_left[1].gif not proc
emporary Internet Files\Content.IE5\B8GK6JLF\btn_orange_right[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\ajs[10].php ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\network[1].js ok iSwift
rator@innity[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\3UUZUUCD\1290236177953[1] ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\global[1].js ok iSwift
emporary Internet Files\Content.IE5\O13EJ9R1\innity[1].js ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\proxy_23656[1].js ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\1[1].gif not processed by type
emporary Internet Files\Content.IE5\D9CJP4LM\79,728x90_advert[1].gif not proc
emporary Internet Files\Content.IE5\B8GK6JLF\ag[1].php ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\bottom_left[1].png ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\bottom[1].png ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\bottom_right[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\middle_top_left[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\doubleborder_t2l[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\double[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\C23656_1[1].swf packed file Swf2
emporary Internet Files\Content.IE5\O13EJ9R1\C23656_1[1].swf//Swf2Swc ok
emporary Internet Files\Content.IE5\O13EJ9R1\C23656_1[1].swf ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\details_gray_middle[1].gif not proc
emporary Internet Files\Content.IE5\3UUZUUCD\details_gray_top[1].gif not proc
emporary Internet Files\Content.IE5\3UUZUUCD\buttons_blue_left[1].gif not proc
emporary Internet Files\Content.IE5\B8GK6JLF\blog_head[1].png ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\00000000000000_Luxor[1].gif
emporary Internet Files\Content.IE5\E6VDTDEM\honey_trouble[1].gif not proc
emporary Internet Files\Content.IE5\E6VDTDEM\bongo_balls[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\00000000000000_Sparkle-Zylom[1].gif
emporary Internet Files\Content.IE5\3UUZUUCD\20100715025629_The-Light-Work[1].jp
emporary Internet Files\Content.IE5\D9CJP4LM\fruit_twirls[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\orangetextcloud[1].gif not proc
emporary Internet Files\Content.IE5\O13EJ9R1\aupgray[1].gif not processed
emporary Internet Files\Content.IE5\O13EJ9R1\adowngray[1].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\top_blue_orange[1].png ok
emporary Internet Files\Content.IE5\J259EF9Z\middle_top_left2[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\doubleborder_b2l[1].png ok
emporary Internet Files\Content.IE5\D9CJP4LM\top_left_notransp[1].png ok
emporary Internet Files\Content.IE5\3UUZUUCD\details_gray_bottom[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\button_info[1].json not proc
emporary Internet Files\Content.IE5\D9CJP4LM\1[2].htm ok scanned HP126611
emporary Internet Files\Content.IE5\D9CJP4LM\afr[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\badgeRect74x18[1].png ok
emporary Internet Files\Content.IE5\C8M3MIOM\preloader_bg[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\ratingface[1].png ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\rating_items[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\139944[1] ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\country[2].htm ok iSwift
emporary Internet Files\Content.IE5\E6VDTDEM\like[1].htm ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\SwkXD-dmc2M[1].png ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\qDH1xoDhFBF[1].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\vh[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\J259EF9Z\gamatar_preview_7282473[1].jpg
emporary Internet Files\Content.IE5\N3K9QKXY\gamatar_preview_5826782[1].jpg
emporary Internet Files\Content.IE5\B8GK6JLF\gamatar_preview_3909336[1].jpg
emporary Internet Files\Content.IE5\O13EJ9R1\gamatar_preview_992783[1].jpg
emporary Internet Files\Content.IE5\J259EF9Z\vj[2] ok scanned HP126611
emporary Internet Files\Content.IE5\J259EF9Z\adServer[2].htm ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\like[2].htm ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\qDH1xoDhFBF[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\r5WTv9md8xH[1].png ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\emn[2].txt not processed by type
emporary Internet Files\Content.IE5\J259EF9Z\ag[1].php ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\00000000000000_Luxor[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\honey_trouble[1].gif not proc
emporary Internet Files\Content.IE5\B8GK6JLF\marine_balls[1].gif ok
iSwift HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\D9CJP4LM\bongo_balls[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\00000000000000_Sparkle-Zylom[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\20100715025632_The-Light-Work[1].jp
emporary Internet Files\Content.IE5\E6VDTDEM\fruit_twirls[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\beadz[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\00000000000000_Ribiba[1].gif
emporary Internet Files\Content.IE5\3UUZUUCD\Screwball[1].gif not processed
emporary Internet Files\Content.IE5\O13EJ9R1\20091223112836_Bru[1].jpg ok
emporary Internet Files\Content.IE5\B8GK6JLF\00000000000000_Tropix-Puffer-Popper
[1].gif not processed by type HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\C8M3MIOM\pinballada[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\ag[1].php ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\shadow_top_new[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\shadow_center_new[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\shadow_bottom_new[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\top_left[1].png ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\loginboxClose[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\top_right_new[1].png ok
emporary Internet Files\Content.IE5\B8GK6JLF\errorDot[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\indicator[1].gif not processed
emporary Internet Files\Content.IE5\D9CJP4LM\shadow_top[1].png ok iSwift
emporary Internet Files\Content.IE5\O13EJ9R1\shadow_mid[1].png ok iSwift
emporary Internet Files\Content.IE5\C8M3MIOM\shadow_bottom[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\country[1].htm ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\afr[2].htm ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\MahJongcon[1].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\20101112091450_Elementals-The-Magic
-Key[1].jpg ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\E6VDTDEM\20090724034117_Mini-Train[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\20100813080352_Build-the-Bridge[1].
jpg ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\3UUZUUCD\middle_middle_left[1].jpg ok
emporary Internet Files\Content.IE5\3UUZUUCD\left[1].jpg ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\middle_middle_right[1].png ok
emporary Internet Files\Content.IE5\J259EF9Z\top_left[2].png ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\right[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\top[1].png ok scanned HP126611
emporary Internet Files\Content.IE5\O13EJ9R1\bottom_left[1].png ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\middle_top_left[1].png ok
emporary Internet Files\Content.IE5\D9CJP4LM\bottom[1].jpg ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\middle_bottom_left[1].jpg ok
emporary Internet Files\Content.IE5\C8M3MIOM\middle_top_right[1].png ok
emporary Internet Files\Content.IE5\C8M3MIOM\fire_hotgames[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\bottom_right[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\top_right[1].png ok scanned
emporary Internet Files\Content.IE5\N3K9QKXY\middle_bottom_right[1].png ok
emporary Internet Files\Content.IE5\J259EF9Z\promo_bg[1].png ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\79,105x15_adv[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\20101112091450_Elementals-The-Magic
-Key[2].jpg ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\N3K9QKXY\noimage[1].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\79,hot_label[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\more_arrow[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\bottom_left[1].png ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\bottom[1].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\bottom_right[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\vh[2].htm ok scanned HP126611
emporary Internet Files\Content.IE5\N3K9QKXY\vj[3] ok scanned HP126611
11/20/2010 2:56:36 PM C:\WINDOWS\Fonts\vgasys.fon ok unchanged
localhost
rator@innity[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\J259EF9Z\1290236179078[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\adServer[3].htm ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\StdBanner[2].js ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\68d26431-493c-4dd6-9618-3c955d959aa
0[1].swf packed file Swf2Swc HP12661107772\Administrator
localhost
0[1].swf//Swf2Swc ok scanned HP12661107772\Administrator localhos
t
0[1].swf ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\C8M3MIOM\emn[1].txt not processed by type
emporary Internet Files\Content.IE5\D9CJP4LM\like[1].htm ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\Entry[1].htm ok scanned
localhost
emporary Internet Files\Content.IE5\C8M3MIOM\__utm[1].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\like[1].htm ok scanned
tor localhost
emporary Internet Files\Content.IE5\E6VDTDEM\bannercode[1].htm ok scanned
rator@adnxs[2].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\E6VDTDEM\mtj[1].js ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\mtj[1].htm ok scanned HP126611
tor localhost
tor localhost
emporary Internet Files\Content.IE5\N3K9QKXY\like[2].htm ok scanned
tor localhost
rator@google.com[3].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\B8GK6JLF\EAAAAOTUh53rcQKOtQoGrT4fmhM[1].gif
emporary Internet Files\Content.IE5\J259EF9Z\__utm[7].gif not processed
emporary Internet Files\Content.IE5\O13EJ9R1\__utm[3].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\petz_rescue[1].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\country[2].htm ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\00000000000000_Beetle-Bomp[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\top[1].png ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\left[1].png ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\right[2].png ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\sorting_active_left[1].gif not proc
emporary Internet Files\Content.IE5\O13EJ9R1\sorting_active_right[1].gif
emporary Internet Files\Content.IE5\D9CJP4LM\top_left[1].png ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\top_right[1].png ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\circleorange[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\circlewhite[1].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\paginate_right[1].gif not proc
emporary Internet Files\Content.IE5\J259EF9Z\middle_bottom_left[1].png ok
emporary Internet Files\Content.IE5\B8GK6JLF\bottom[2].png ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\middle_bottom_right[1].png ok
emporary Internet Files\Content.IE5\D9CJP4LM\bottom_left[1].png ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\atlantisadventure[1].gif not proc
emporary Internet Files\Content.IE5\C8M3MIOM\bottom_right[1].png ok
emporary Internet Files\Content.IE5\E6VDTDEM\entry[1].txt not processed
emporary Internet Files\Content.IE5\O13EJ9R1\logotags[1].htm ok scanned
emporary Internet Files\Content.IE5\3UUZUUCD\sushi_zuma[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\00000000000000_Lotus[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\tt-top-notail[1].png ok
emporary Internet Files\Content.IE5\N3K9QKXY\tt-bottom-notail[1].png ok
emporary Internet Files\Content.IE5\O13EJ9R1\tt-middle-all[1].png ok
emporary Internet Files\Content.IE5\C8M3MIOM\__utm[2].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\__utm[4].gif not processed
emporary Internet Files\Content.IE5\3UUZUUCD\1[1].gif not processed by type
rator@zylom[2].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\O13EJ9R1\adcode[1].htm ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\adcode[1].htm ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\default[1].css not processed
emporary Internet Files\Content.IE5\E6VDTDEM\345[1].css not processed by type
emporary Internet Files\Content.IE5\E6VDTDEM\gamesplayer[1].jsp ok scanned
rator@ad.yieldmanager[1].txt not processed by type HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\O13EJ9R1\zylomgamesplayer[1].cab not proc
emporary Internet Files\Content.IE5\O13EJ9R1\swfobject[1].js ok scanned
emporary Internet Files\Content.IE5\J259EF9Z\default[1].css not processed
emporary Internet Files\Content.IE5\C8M3MIOM\ab[1] ok scanned HP126611
emporary Internet Files\Content.IE5\J259EF9Z\if[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\B8GK6JLF\st[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\O13EJ9R1\default[1].css not processed
emporary Internet Files\Content.IE5\D9CJP4LM\ptj[1] ok scanned HP126611
emporary Internet Files\Content.IE5\C8M3MIOM\st[1] ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\q[1].gif not processed by type
emporary Internet Files\Content.IE5\E6VDTDEM\imp[1] ok scanned HP126611
emporary Internet Files\Content.IE5\J259EF9Z\345[1].css not processed by type
emporary Internet Files\Content.IE5\B8GK6JLF\e5777f2fe014d72073415d5073eb9064[1]
.swf packed file Swf2Swc HP12661107772\Administrator localhos
t
.swf//Swf2Swc ok scanned HP12661107772\Administrator localhost
.swf ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\O13EJ9R1\google-settings[1].js ok
rator@adbrite[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\E6VDTDEM\ab[1] ok scanned HP126611
emporary Internet Files\Content.IE5\B8GK6JLF\if[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\O13EJ9R1\st[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\D9CJP4LM\ptj[2] ok scanned HP126611
emporary Internet Files\Content.IE5\D9CJP4LM\like[1].htm ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\loader_grey[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\st[2] ok scanned HP126611
emporary Internet Files\Content.IE5\E6VDTDEM\imp[2] ok scanned HP126611
emporary Internet Files\Content.IE5\N3K9QKXY\2c82aca58ca0970c66ca157994f0c94d[1]
.swf packed file Swf2Swc HP12661107772\Administrator localhos
t
.swf//Swf2Swc ok scanned HP12661107772\Administrator localhost
.swf ok scanned HP12661107772\Administrator localhost
emporary Internet Files\Content.IE5\O13EJ9R1\checkcookie[1].htm ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\layout[1].htm ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\rendercomponent[1].htm ok
emporary Internet Files\Content.IE5\C8M3MIOM\3018[1].gif not processed
emporary Internet Files\Content.IE5\E6VDTDEM\rendercomponent[2].htm ok
emporary Internet Files\Content.IE5\J259EF9Z\rendercomponent[1].htm ok
emporary Internet Files\Content.IE5\D9CJP4LM\rendercomponent[1].htm ok
emporary Internet Files\Content.IE5\C8M3MIOM\rendercomponent[1].htm ok
emporary Internet Files\Content.IE5\O13EJ9R1\rendercomponent[1].htm ok
rator@ad.yieldmanager[2].txt not processed by type HP12661107772\Administra
tor localhost
emporary Internet Files\Content.IE5\D9CJP4LM\bg_logo[1].gif not processed
emporary Internet Files\Content.IE5\D9CJP4LM\bg_content[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\bg_side[1].gif not processed
emporary Internet Files\Content.IE5\C8M3MIOM\loader[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\bg_navigation[1].gif not proc
emporary Internet Files\Content.IE5\O13EJ9R1\bg_banner[1].gif not processed
localhost
rator@zylom[1].txt not processed by type HP12661107772\Administrator
localhost
emporary Internet Files\Content.IE5\O13EJ9R1\zylomgamesplayer[1].cab not proc
11/20/2010 2:57:13 PM C:\WINDOWS\system32\corpol.dll ok unchanged
11/20/2010 2:57:13 PM C:\WINDOWS\system32\cryptnet.dll ok unchange
11/20/2010 2:57:13 PM C:\WINDOWS\system32\winhttp.dll ok unchanged
\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 ok
\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 ok
\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 ok
\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 ok
11/20/2010 2:57:14 PM C:\WINDOWS\system32\netmsg.dll ok unchanged
11/20/2010 2:57:14 PM C:\WINDOWS\Media\Windows XP Information Bar.wav ok
emporary Internet Files\Content.IE5\J259EF9Z\mapuid[1].gif not processed
emporary Internet Files\Content.IE5\J259EF9Z\pixels_pgc[1].htm ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\adcode[1].htm ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\gamecode[1].htm ok scanned
emporary Internet Files\Content.IE5\E6VDTDEM\ab[2] ok scanned HP126611
emporary Internet Files\Content.IE5\N3K9QKXY\ads[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\sma8[1].js ok scanned HP126611
emporary Internet Files\Content.IE5\B8GK6JLF\default[1].css not processed
emporary Internet Files\Content.IE5\B8GK6JLF\345[1].css not processed by type
emporary Internet Files\Content.IE5\J259EF9Z\gamesplayer[1].jsp ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\writetags[1].js ok scanned
\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 ok
\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 ok
emporary Internet Files\Content.IE5\B8GK6JLF\CA8MXZX0.HTM ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\timeoutpgc[1].xml ok scanned
emporary Internet Files\Content.IE5\D9CJP4LM\swfobject[2].js ok scanned
emporary Internet Files\Content.IE5\C8M3MIOM\zylomgamesplayer[1].cab not proc
emporary Internet Files\Content.IE5\C8M3MIOM\rendercomponent[2].htm ok
emporary Internet Files\Content.IE5\E6VDTDEM\side_button_highscore[1].gif
emporary Internet Files\Content.IE5\N3K9QKXY\5010[1].jpg ok scanned
emporary Internet Files\Content.IE5\B8GK6JLF\2723[1].jpg ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\side_deluxe[1].gif not processed
emporary Internet Files\Content.IE5\D9CJP4LM\rendercomponent[2].htm ok
emporary Internet Files\Content.IE5\C8M3MIOM\side_button_left[1].gif not proc
emporary Internet Files\Content.IE5\E6VDTDEM\side_button_right[1].gif not proc
emporary Internet Files\Content.IE5\N3K9QKXY\2482[1].gif not processed
emporary Internet Files\Content.IE5\B8GK6JLF\2637[1].jpg ok scanned
emporary Internet Files\Content.IE5\O13EJ9R1\2727[1].jpg ok scanned
localhost
emporary Internet Files\Content.IE5\N3K9QKXY\ads[1].htm ok scanned HP126611
emporary Internet Files\Content.IE5\3UUZUUCD\abg-nl-100c-000000[1].png ok
emporary Internet Files\Content.IE5\D9CJP4LM\gamesplayerinstall[1].exe ok
11/20/2010 2:57:50 PM C:\WINDOWS\system32\en-US\inetcpl.cpl.mui ok
11/20/2010 2:57:50 PM C:\WINDOWS\system32\en-US\iepeers.dll.mui ok
rosoft\Crypto\RSA\S-1-5-18\d42cc0c3858a58db2db37658219e6400_e9806091-03b0-4181-8
d75-fd9f9c2a9cad ok unchanged K17\HP12661107772$ localhos
t
11/20/2010 2:57:52 PM C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\Pref
erred ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:57:52 PM C:\WINDOWS\Tasks\At1.job ok unchanged
11/20/2010 2:57:52 PM C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
11/20/2010 2:57:52 PM C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job ok
11/20/2010 2:57:52 PM C:\WINDOWS\Tasks\Norton Security Scan for Administrator.
job ok unchanged K17\HP12661107772$ localhost
11/20/2010 2:57:52 PM C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-1032152753
-576341234-3010021626-500.job not processed by type K17\HP12661107772$
localhost
11/20/2010 2:57:52 PM C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-103215
2753-576341234-3010021626-500.job ok unchanged K17\HP1266110777
2$ localhost
11/20/2010 2:57:52 PM C:\WINDOWS\Tasks\RMSchedule_219.job ok unchange
emporary Internet Files\Content.IE5\E6VDTDEM\CA0UYX2I.HTM ok scanned
11/20/2010 2:57:54 PM C:\WINDOWS\system32\browseui.dll ok unchange
11/20/2010 2:57:54 PM C:\WINDOWS\system32\mydocs.dll ok unchanged
11/20/2010 2:57:54 PM C:\WINDOWS\explorer.exe ok unchanged HP126611
Music\Desktop.ini ok unchanged HP12661107772\Administrator
localhost
Pictures\Desktop.ini ok unchanged HP12661107772\Administrator
localhost
Videos\Desktop.ini ok scanned HP12661107772\Administrator localhos
t
11/20/2010 2:57:54 PM C:\Documents and Settings\Administrator\My Documents\for
ex-robot-free-collection.exe ok iChecker HP12661107772\Administra
tor localhost
11/20/2010 2:57:54 PM C:\Documents and Settings\Administrator\My Documents\For
exStrategyTrader.exe ok iChecker HP12661107772\Administrator
localhost
11/20/2010 2:57:54 PM C:\Documents and Settings\Administrator\My Documents\fx4
setup.exe ok iChecker HP12661107772\Administrator localhos
t
11/20/2010 2:57:54 PM C:\Documents and Settings\Administrator\My Documents\itc
4setup.exe ok iChecker HP12661107772\Administrator localhos
t
11/20/2010 2:57:54 PM C:\Documents and Settings\Administrator\My Documents\set
up.exe packed file UPX HP12661107772\Administrator localhost
11/20/2010 2:57:54 PM C:\Documents and Settings\Administrator\My Documents\Tea
mViewer_Setup.exe packed file UPX HP12661107772\Administrator
localhost
mViewer_Setup.exe//UPX not processed file size exceeded HP12661107772\Ad
up.exe packed file UPX HP12661107772\Administrator localhost
up.exe//UPX detected: riskware 'not-a-virus:WebToolbar.Win32.Zango.hs'
up.exe//UPX not disinfected: riskware 'not-a-virus:WebToolbar.Win32.Zango.hs
' cannot be disinfected HP12661107772\Administrator localhost
mViewer_Setup.exe packed file UPX HP12661107772\Administrator
localhost
mViewer_Setup.exe//UPX not processed file size exceeded HP12661107772\Ad
emporary Internet Files\Content.IE5\N3K9QKXY\nogamesplayer[1].xml ok
emporary Internet Files\Content.IE5\O13EJ9R1\rendercomponent[2].htm ok
Statistics
----------
Object Scanned Detected Untreated Disinfected Deleted Moved to
Quarantine Archives Packed files Password protected Corrupte
d
------ ------- -------- --------- ----------- ------- --------
----------- -------- ------------ ------------------ --------
-
All objects 1740 1 1 0 0 0 0 19
0 0
Local Disk (C:) 1723 1 1 0 0 0 0 19
0 0
HP_RECOVERY (D:) 3 0 0 0 0 0 0
0 0 0
Settings
--------
Parameter Value
--------- -----
Security Level Custom
Action Disinfect, delete if disinfection fails
File types Scan programs and documents (by format)
Scan only new and changed files Yes
Scan archives No
Scan installation packages No
Scan embedded OLE objects new
Postpone by size 0 MB
Skip compound files larger than 8 MB
Enable iChecker technology Yes
Enable iSwift technology Yes

SA'DIAH

Diunggah oleh

Informasi Dokumen

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

SA'DIAH

Diunggah oleh

Hak Cipta:

Format Tersedia

File Anti-Virus

Anda mungkin juga menyukai

SA&#39;DIAH

Diunggah oleh

Informasi Dokumen

Hak Cipta

Format Tersedia

Bagikan dokumen Ini

Bagikan atau Tanam Dokumen

Opsi Berbagi

Apakah menurut Anda dokumen ini bermanfaat?

Apakah konten ini tidak pantas?

Hak Cipta:

Format Tersedia

SA&#39;DIAH

Diunggah oleh

Hak Cipta:

Format Tersedia

File Anti-Virus

Anda mungkin juga menyukai

SA'DIAH

SA'DIAH