1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

AVG found threats it can't repair

Discussion in 'Virus & Other Malware Removal' started by mjpinpgh, Nov 4, 2012.

Thread Status:
Not open for further replies.
  1. mjpinpgh

    mjpinpgh Thread Starter

    Joined:
    Nov 11, 2011
    Messages:
    4
    So I recently upgraded to AVG free 2013. On it's first scan through my computer it found 2 threats. When I tried to "address the issue" it would let me select the files, but not repair them. I'm not 100% sure they are even virus files. I get conflicting results searching online for the names. The threats were listed as follows:

    "";"The file is signed with a broken digital signature, issued by: Microsoft Corporation., D:\I386\Apps\APP03978\src\INSNTMSI.EXE";"Infected"

    and

    "";"The file is signed with a broken digital signature, issued by: Microsoft Corporation., D:\I386\Apps\APP08668\src\3rdPartyApp\HHUPD.EXE";"Infected"


    Any ideas? Are these files dangerous to my system? What can I do to get a clean scan from AVG? Below are the requested logs. Thanks in advanced.

    MJ

    ____________________
    HijackThis Log

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 3:56:16 PM, on 11/4/2012
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\PROGRA~1\AVG\AVG2013\avgrsx.exe
    C:\Program Files\AVG\AVG2013\avgcsrvx.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\arservice.exe
    C:\Program Files\AVG\AVG2013\avgidsagent.exe
    C:\Program Files\AVG\AVG2013\avgwdsvc.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
    C:\Program Files\Java\jre7\bin\jqs.exe
    C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\AVG\AVG2013\avgnsx.exe
    C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
    C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
    C:\Program Files\AVG Secure Search\vprot.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Belkin\F5D8053v4\BelkinWCUI.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\AVG\AVG2013\avgui.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\HP_Administrator\My Documents\Downloads\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
    R3 - URLSearchHook: YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
    O2 - BHO: (no name) - rsion - (no file)
    O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
    O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
    O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
    O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [EKIJ5000StatusMonitor] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
    O4 - HKLM\..\Run: [ROC_ROC_JULY_P1] "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
    O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.ancientegypt.co.uk/gods/activity/act_main.html"
    O4 - HKUS\S-1-5-18\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'Default user')
    O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
    O4 - Global Startup: Belkin Wireless Networking Utility.lnk = ?
    O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
    O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
    O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O15 - Trusted Zone: http://global.fb.gamehouse.com
    O15 - Trusted Zone: http://sp.mypoints.com
    O15 - Trusted Zone: http://*.trymedia.com (HKLM)
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
    O16 - DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} (PogoWebLauncher Control) - http://www.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
    O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} (FBootloaderAX) - http://www.facebook.com/fbplugin/win32/axfbootloader.cab?1265478227796
    O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - http://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
    O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - https://www.microsoft.com/resources/virtuallabs/ActiveX/VMRCActiveXClient1.cab
    O16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) - http://www.worldwinner.com/games/v47/blockwerx/blockwerx.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1247663275687
    O16 - DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} (SpinTop Games Launcher) - http://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient_japan/SpinTopGamesLauncher.cab
    O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://clubgames.pogo.com/online2/pogop/chainz_2/mjolauncher.cab
    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://picture.vzw.com/activex/VerizonWirelessUploadControl.cab
    O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
    O16 - DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} (WorldWinner ActiveX Launcher Control) - http://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
    O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://www.worldwinner.com/games/v64/swapit/swapit.cab
    O16 - DPF: {B12213CD-4189-415D-A054-7999528459F7} (pixelStormLauncher Class) - http://aolsvc.aol.com/onlinegames/tryrumblecube/pixelstormlauncher.cab
    O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://aolsvc.aol.com/onlinegames/free-trial-lotus-deluxe/zylomplayer.cab
    O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} (Java Plug-in 1.6.0_26) -
    O16 - DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} (FamilyFeud Control) - http://www.worldwinner.com/games/v47/familyfeud/familyfeud.cab
    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://bestbuy.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
    O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://www.iwin.com/global/premium/sprout/feedingfrenzy/SproutLauncher.cab
    O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://download.games.yahoo.com/games/web_games/tikgames/cinematycoon/cinematycoon.cab
    O16 - DPF: {DBA8E419-0D5F-439B-A3CC-D01C768D9B51} (DVCDownloaderControl Object) - http://aolsvc.aol.com/onlinegames/sonydavincicode/DVCDownloaderControl.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://clubgames.pogo.com/online2/pogop/peggle/popcaploader_v10_en.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O16 - DPF: {E7DA7F8D-27AB-4EE9-8FC0-3FEC9ECFE758} (DynamicWebTwain Class) - https://www.humanservices.state.pa.us/COMPASS.RiaClient/ASDScan/DynamicWebTWAIN.cab
    O16 - DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} (Playtime Games Launcher) - http://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient/PTGameLauncher.cab
    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll
    O18 - Filter hijack: text/html - {673efdc8-3b7c-442e-8be6-2c990883abd8} - (no file)
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iolo System Service (ioloSystemService) - iolo technologies, LLC - C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
    O23 - Service: Kodak AiO Status Monitor Service - Eastman Kodak Company - C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
    O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
    O23 - Service: Seagate Dashboard Service (SeagateDashboardService) - Memeo - C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
    O23 - Service: vToolbarUpdater12.2.6 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe

    --
    End of file - 15685 bytes

    __________________________________________________________

    dds.scr Log:


    DDS (Ver_2012-10-19.01) - NTFS_x86
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.9.2
    Run by HP_Administrator at 15:57:14 on 2012-11-04
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.958.173 [GMT -5:00]
    .
    AV: AVG Anti-Virus Free Edition 2013 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
    AV: Norton Internet Security *Enabled/Outdated* {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *Enabled*
    .
    ============== Running Processes ================
    .
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\arservice.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
    C:\Program Files\Java\jre7\bin\jqs.exe
    C:\Program Files\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE
    C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
    C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe
    C:\WINDOWS\ehome\mcrdsvc.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
    C:\Program Files\AVG Secure Search\vprot.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Belkin\F5D8053v4\BelkinWCUI.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k NetworkService
    C:\WINDOWS\system32\svchost.exe -k LocalService
    C:\WINDOWS\system32\svchost.exe -k LocalService
    C:\WINDOWS\system32\svchost.exe -k LocalService
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://my.yahoo.com
    uSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    uSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    uProxyServer = :0
    mSearchAssistant = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q106&bd=pavilion&pf=desktop
    uURLSearchHooks: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\program files\yahoo!\companion\installs\cpn6\yt.dll
    uURLSearchHooks: YTNavAssistPlugin Class: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - c:\program files\yahoo!\companion\installs\cpn6\yt.dll
    dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
    BHO: rsion - <orphaned>
    BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - <orphaned>
    BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
    BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\12.2.5.32\AVG Secure Search_toolbar.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
    TB: &Google: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    TB: Norton AntiVirus: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\program files\norton internet security\norton antivirus\NAVSHEXT.DLL
    TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>
    TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\12.2.5.32\AVG Secure Search_toolbar.dll
    EB: &Yahoo! Messenger: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\common\yhexbmesus.dll
    EB: &Yahoo! Messenger: {4528BBE0-4E08-11D5-AD55-00010333D0AD} - c:\program files\yahoo!\common\yhexbmesus.dll
    uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
    uRun: [Google Update] "c:\documents and settings\hp_administrator\local settings\application data\google\update\GoogleUpdate.exe" /c
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)" -"http://www.ancientegypt.co.uk/gods/activity/act_main.html"
    mRun: [WinPatrol] c:\program files\billp studios\winpatrol\WinPatrol.exe
    mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
    mRun: [EKIJ5000StatusMonitor] c:\windows\system32\spool\drivers\w32x86\3\EKIJ5000MUI.exe
    mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
    mRun: [ROC_ROC_JULY_P1] "c:\program files\avg secure search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
    mRun: [AVG_UI] "c:\program files\avg\avg2013\avgui.exe" /TRAYONLY
    mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
    mRun: [Conime] c:\windows\system32\conime.exe
    dRunOnce: [KodakHomeCenter] "c:\program files\kodak\aio\center\AiOHomeCenter.exe"
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\belkin~1.lnk - c:\program files\belkin\f5d8053v4\BelkinWCUI.exe
    uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:149
    mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
    mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
    IE: &Yahoo! Search - /c:\program files\yahoo!\Common/ycsrch.htm
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office11\EXCEL.EXE/3000
    IE: Yahoo! &Dictionary - /c:\program files\yahoo!\Common/ycdict.htm
    IE: Yahoo! &Maps - /c:\program files\yahoo!\Common/ycmap.htm
    IE: Yahoo! &SMS - /c:\program files\yahoo!\Common/ycsms.htm
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
    IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    .
    INFO: HKCU has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    .
    INFO: HKLM has more than 50 listed domains.
    If you wish to scan all of them, select the 'Force scan all domains' option.
    .
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
    DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper200711281.dll
    DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} - hxxp://www.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
    DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://www.facebook.com/fbplugin/win32/axfbootloader.cab?1265478227796
    DPF: {49232000-16E4-426C-A231-62846947304B} - hxxp://ipgweb.cce.hp.com/rdqna/downloads/sysinfo.cab
    DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} - hxxps://www.microsoft.com/resources/virtuallabs/ActiveX/VMRCActiveXClient1.cab
    DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} - hxxp://www.worldwinner.com/games/v47/blockwerx/blockwerx.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1247663275687
    DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} - hxxp://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient_japan/SpinTopGamesLauncher.cab
    DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} - hxxp://clubgames.pogo.com/online2/pogop/chainz_2/mjolauncher.cab
    DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} - hxxp://picture.vzw.com/activex/VerizonWirelessUploadControl.cab
    DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} - hxxp://www.worldwinner.com/games/launcher/ie/v2.22.01.0/iewwload.cab
    DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} - hxxp://www.worldwinner.com/games/v64/swapit/swapit.cab
    DPF: {B12213CD-4189-415D-A054-7999528459F7} - hxxp://aolsvc.aol.com/onlinegames/tryrumblecube/pixelstormlauncher.cab
    DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://aolsvc.aol.com/onlinegames/free-trial-lotus-deluxe/zylomplayer.cab
    DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
    DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} - hxxp://www.worldwinner.com/games/v47/familyfeud/familyfeud.cab
    DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} - hxxp://bestbuy.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
    DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} - hxxp://www.iwin.com/global/premium/sprout/feedingfrenzy/SproutLauncher.cab
    DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} - hxxp://download.games.yahoo.com/games/web_games/tikgames/cinematycoon/cinematycoon.cab
    DPF: {DBA8E419-0D5F-439B-A3CC-D01C768D9B51} - hxxp://aolsvc.aol.com/onlinegames/sonydavincicode/DVCDownloaderControl.cab
    DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - hxxp://clubgames.pogo.com/online2/pogop/peggle/popcaploader_v10_en.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    DPF: {E7DA7F8D-27AB-4EE9-8FC0-3FEC9ECFE758} - hxxps://www.humanservices.state.pa.us/COMPASS.RiaClient/ASDScan/DynamicWebTWAIN.cab
    DPF: {EF148DBB-5B6D-4130-B2A1-661571E86260} - hxxp://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient/PTGameLauncher.cab
    TCP: NameServer = 192.168.2.1
    TCP: Interfaces\{892900FC-9814-4488-99C0-81491C1EE93D} : DHCPNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243
    TCP: Interfaces\{D137D82B-62A8-473B-B292-5AFA2D350702} : DHCPNameServer = 192.168.2.1
    Filter: text/html - {673efdc8-3b7c-442e-8be6-2c990883abd8} - <orphaned>
    Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\12.2.6\ViProtocol.dll
    Notify: AtiExtEvent - Ati2evxx.dll
    Hosts: 127.0.0.1 www.spywareinfo.com
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\documents and settings\hp_administrator\application data\mozilla\firefox\profiles\cfbmbl48.default\
    FF - prefs.js: browser.search.selectedEngine - Search the web (Babylon)
    FF - prefs.js: browser.startup.homepage - hxxp://search.babylon.com/?affID=44444&tt=120912_cpc_3712_6&babsrc=HP_ss&mntrId=c83fcb77000000000000001cdf6a6416
    FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?affID=44444&tt=120912_cpc_3712_6&babsrc=KW_ss&mntrId=c83fcb77000000000000001cdf6a6416&q=
    FF - component: c:\program files\mozilla firefox\extensions\[email protected]\components\qfaservices.dll
    FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
    .
    ---- FIREFOX POLICIES ----
    FF - user.js: extensions.BabylonToolbar.autoRvrt - false
    FF - user.js: extensions.BabylonToolbar_i.newTab - false
    FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://search.babylon.com/?babsrc=TB_def&mntrId=c83fcb77000000000000001cdf6a6416&q=
    FF - user.js: extensions.BabylonToolbar.id - c83fcb77000000000000001cdf6a6416
    FF - user.js: extensions.BabylonToolbar.appId - {BDB69379-802F-4eaf-B541-F8DE92DD98DB}
    FF - user.js: extensions.BabylonToolbar.instlDay - 15596
    FF - user.js: extensions.BabylonToolbar.vrsn - 1.6.9.12
    FF - user.js: extensions.BabylonToolbar.vrsni - 1.6.9.12
    FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.6.9.1219:56:39
    FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
    FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
    FF - user.js: extensions.BabylonToolbar.aflt - babsst
    FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
    FF - user.js: extensions.BabylonToolbar.tlbrId - tb9
    FF - user.js: extensions.BabylonToolbar.instlRef - sst
    FF - user.js: extensions.BabylonToolbar.dfltLng - en
    FF - user.js: extensions.BabylonToolbar.excTlbr - false
    FF - user.js: extensions.BabylonToolbar.admin - false
    FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=44444&tt=120912_cpc_3712_6
    FF - user.js: extensions.BabylonToolbar_i.babExt -
    FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2012-9-21 55008]
    R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2012-9-21 177376]
    R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2011-3-1 93536]
    R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2011-3-16 35552]
    R0 MrFilter;EasyWrite Driver;c:\windows\system32\drivers\MRFilter.sys [2006-2-26 12384]
    R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2012-9-13 177504]
    R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2012-9-21 19936]
    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2011-1-7 159712]
    R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2011-4-4 164832]
    R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-9-3 27496]
    R1 SAVRTPEL;SAVRTPEL;c:\program files\norton internet security\norton antivirus\SAVRTPEL.SYS [2005-2-4 53896]
    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2013\avgidsagent.exe [2012-10-2 5783672]
    R2 avgwd;AVG WatchDog;c:\program files\avg\avg2013\avgwdsvc.exe [2012-10-2 193568]
    R2 ioloSystemService;iolo System Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2012-10-29 1028464]
    R2 Kodak AiO Status Monitor Service;Kodak AiO Status Monitor Service;c:\program files\kodak\aio\statusmonitor\EKPrinterSDK.exe [2012-6-19 777728]
    R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
    R2 MemeoBackgroundService;MemeoBackgroundService;c:\program files\memeo\autobackup\MemeoBackgroundService.exe [2010-4-22 25824]
    R2 PDFsFilter;PDFsFilter;c:\windows\system32\drivers\PDFsFilter.sys [2012-10-29 68464]
    R2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\seagate\seagate dashboard\SeagateDashboardService.exe [2010-4-30 14088]
    R2 vToolbarUpdater12.2.6;vToolbarUpdater12.2.6;c:\program files\common files\avg secure search\vtoolbarupdater\12.2.6\ToolbarUpdater.exe [2012-9-3 722528]
    R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver;c:\windows\system32\drivers\rt2870.sys [2009-7-11 517632]
    S0 bfpoxrco;bfpoxrco;c:\windows\system32\drivers\dqcgqe.sys --> c:\windows\system32\drivers\dqcgqe.sys [?]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
    S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-10-23 136176]
    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-9-10 250808]
    S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-10-23 136176]
    S3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20060426.019\NAVENG.Sys [2006-4-26 77864]
    S3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20060426.019\NavEx15.Sys [2006-4-26 799208]
    S3 P1130VID;Creative WebCam NX Pro;c:\windows\system32\drivers\P1130Vid.sys [2006-2-27 90357]
    S3 SAVRT;SAVRT;c:\program files\norton internet security\norton antivirus\SAVRT.SYS [2005-2-4 334984]
    S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\iobit\game booster 3\driver\WinRing0.sys [2012-10-29 14416]
    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
    S4 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\CCEVTMGR.EXE [2005-3-4 186016]
    S4 ccProxy;Symantec Network Proxy;c:\program files\common files\symantec shared\CCPROXY.EXE [2005-3-4 239216]
    S4 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\CCSETMGR.EXE [2005-3-4 177824]
    S4 CSHelper;CopySafe Helper Service;c:\windows\system32\CSHelper.exe [2010-1-20 266240]
    S4 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\kodak\aio\center\EKAiOHostService.exe [2012-6-18 394712]
    S4 navapsvc;Norton AntiVirus Auto-Protect Service;c:\program files\norton internet security\norton antivirus\NAVAPSVC.EXE [2005-3-24 128112]
    S4 SAVScan;SAVScan;c:\program files\norton internet security\norton antivirus\SAVSCAN.EXE [2005-2-17 198368]
    .
    =============== File Associations ===============
    .
    FileExt: .txt: Applications\WINWORD.EXE="c:\program files\microsoft office\office11\WINWORD.EXE" /n /dde [UserChoice] [default=edit - 'Open' doesn't exist]
    ShellExec: MediaConverter.exe: open="c:\program files\sandisk\sansa media converter\uMediaConverter.exe" "%1"
    .
    =============== Created Last 30 ================
    .
    2012-10-30 22:13:01 516096 ------w- c:\windows\system32\ati2sgag.exe
    2012-10-29 21:27:43 511328 ----a-w- c:\program files\common files\microsoft shared\capicom\CAPICOM.DLL
    2012-10-29 21:27:40 2097032 ----a-w- c:\windows\system32\Incinerator32.dll
    2012-10-29 21:27:38 68464 ----a-w- c:\windows\system32\drivers\PDFsFilter.sys
    2012-10-29 21:27:38 56200 ----a-w- c:\windows\system32\offreg.dll
    2012-10-29 21:27:38 41176 ----a-w- c:\windows\system32\iolobtdfg.exe
    2012-10-29 21:27:38 23128 ----a-w- c:\windows\system32\smrgdf.exe
    2012-10-29 21:27:36 -------- d-----w- c:\program files\iolo
    2012-10-29 21:23:48 74703 ----a-w- c:\windows\system32\mfc45.dat
    2012-10-29 21:23:46 -------- d-----w- c:\documents and settings\hp_administrator\application data\iolo
    2012-10-29 21:23:46 -------- d-----w- c:\documents and settings\all users\application data\iolo
    2012-10-29 21:16:19 -------- d-----w- c:\program files\IObit
    2012-10-29 21:16:19 -------- d-----w- c:\documents and settings\all users\application data\IObit
    2012-10-29 20:11:14 -------- d-----w- c:\documents and settings\hp_administrator\application data\AVG2013
    2012-10-29 20:07:55 -------- d-----w- c:\documents and settings\hp_administrator\application data\TuneUp Software
    2012-10-29 20:03:28 -------- d-----w- c:\documents and settings\all users\application data\AVG2013
    2012-10-29 20:00:43 -------- d-----w- c:\documents and settings\hp_administrator\local settings\application data\MFAData
    2012-10-29 20:00:43 -------- d-----w- c:\documents and settings\hp_administrator\local settings\application data\Avg2013
    2012-10-29 02:10:12 -------- d-----w- c:\program files\Northern Tale
    2012-10-25 02:41:56 -------- d-----w- c:\documents and settings\hp_administrator\application data\northern_tale_bfg_en
    2012-10-20 21:52:11 -------- d-----w- c:\documents and settings\hp_administrator\application data\Islands
    2012-10-20 20:41:16 -------- d-----w- c:\documents and settings\hp_administrator\application data\Boolat Games
    2012-10-20 13:18:48 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
    .
    ==================== Find3M ====================
    .
    2012-10-20 13:18:27 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
    2012-10-20 13:18:27 746984 ----a-w- c:\windows\system32\deployJava1.dll
    2012-10-20 13:18:27 143872 ----a-w- c:\windows\system32\javacpl.cpl
    2012-10-09 00:08:54 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2012-10-09 00:08:53 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2012-10-02 07:30:38 159712 ----a-w- c:\windows\system32\drivers\avgldx86.sys
    2012-09-29 23:54:26 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
    2012-09-21 07:46:06 164832 ----a-w- c:\windows\system32\drivers\avgtdix.sys
    2012-09-21 07:46:00 177376 ----a-w- c:\windows\system32\drivers\avglogx.sys
    2012-09-21 07:45:54 19936 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
    2012-09-21 07:45:52 55008 ----a-w- c:\windows\system32\drivers\avgidshx.sys
    2012-09-14 07:05:20 35552 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
    2012-09-13 07:11:20 177504 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
    2012-09-04 02:59:21 27496 ----a-w- c:\windows\system32\drivers\avgtpx86.sys
    2012-08-28 15:14:53 916992 ----a-w- c:\windows\system32\wininet.dll
    2012-08-28 15:14:53 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2012-08-28 15:14:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
    2012-08-28 12:07:15 385024 ----a-w- c:\windows\system32\html.iec
    2012-08-24 13:53:22 177664 ----a-w- c:\windows\system32\wintrust.dll
    2012-08-21 13:33:26 2148864 ----a-w- c:\windows\system32\ntoskrnl.exe
    2012-08-21 12:58:09 2027520 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2010-07-13 01:10:45 774144 ----a-w- c:\program files\RngInterstitial.dll
    .
    ============= FINISH: 15:58:49.50 =
    _____________________________________________________________________

    Attach txt log

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-10-19.01)
    .
    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume2
    Install Date: 2/26/2006 4:37:27 PM
    System Uptime: 11/3/2012 3:15:18 PM (24 hours ago)
    .
    Motherboard: ASUSTek Computer INC. | | Amberine M
    Processor: AMD Athlon(tm) 64 Processor 3700+ | Socket 939 | 2188/200mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 178 GiB total, 76.153 GiB free.
    D: is FIXED (FAT32) - 9 GiB total, 1.218 GiB free.
    E: is CDROM ()
    F: is Removable
    G: is Removable
    H: is Removable
    I: is Removable
    J: is FIXED (NTFS) - 932 GiB total, 880.054 GiB free.
    K: is Removable
    L: is Removable
    .
    ==== Disabled Device Manager Items =============
    .
    Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    Description: 1394 Net Adapter
    Device ID: V1394\NIC1394\8E746F11D800
    Manufacturer: Microsoft
    Name: 1394 Net Adapter
    PNP Device ID: V1394\NIC1394\8E746F11D800
    Service: NIC1394
    .
    ==== System Restore Points ===================
    .
    RP2160: 8/7/2012 1:24:12 PM - System Checkpoint
    RP2161: 8/8/2012 2:24:20 PM - System Checkpoint
    RP2162: 8/9/2012 3:23:59 PM - System Checkpoint
    RP2163: 8/10/2012 4:25:00 PM - System Checkpoint
    RP2164: 8/11/2012 5:24:04 PM - System Checkpoint
    RP2165: 8/12/2012 11:47:58 PM - System Checkpoint
    RP2166: 8/14/2012 12:23:58 AM - System Checkpoint
    RP2167: 8/15/2012 12:00:22 AM - Software Distribution Service 3.0
    RP2168: 8/16/2012 12:35:13 AM - System Checkpoint
    RP2169: 8/17/2012 1:35:10 AM - System Checkpoint
    RP2170: 8/18/2012 2:47:06 AM - System Checkpoint
    RP2171: 8/19/2012 3:35:08 AM - System Checkpoint
    RP2172: 8/20/2012 4:55:39 PM - System Checkpoint
    RP2173: 8/21/2012 7:00:32 PM - System Checkpoint
    RP2174: 8/22/2012 10:20:59 PM - System Checkpoint
    RP2175: 8/23/2012 11:25:16 PM - System Checkpoint
    RP2176: 8/25/2012 1:19:31 AM - System Checkpoint
    RP2177: 8/26/2012 1:58:47 AM - System Checkpoint
    RP2178: 8/27/2012 1:58:57 AM - System Checkpoint
    RP2179: 8/28/2012 3:11:03 AM - System Checkpoint
    RP2180: 8/29/2012 3:58:58 AM - System Checkpoint
    RP2181: 8/30/2012 4:59:00 AM - System Checkpoint
    RP2182: 8/31/2012 5:58:32 AM - System Checkpoint
    RP2183: 9/1/2012 5:58:41 AM - System Checkpoint
    RP2184: 9/2/2012 6:58:29 AM - System Checkpoint
    RP2185: 9/3/2012 7:58:32 AM - System Checkpoint
    RP2186: 9/4/2012 8:58:15 AM - System Checkpoint
    RP2187: 9/5/2012 9:58:19 AM - System Checkpoint
    RP2188: 9/6/2012 10:58:27 AM - System Checkpoint
    RP2189: 9/8/2012 1:06:55 AM - System Checkpoint
    RP2190: 9/9/2012 1:38:28 AM - System Checkpoint
    RP2191: 9/10/2012 1:54:33 AM - System Checkpoint
    RP2192: 9/11/2012 4:04:27 AM - System Checkpoint
    RP2193: 9/12/2012 4:08:24 AM - System Checkpoint
    RP2194: 9/13/2012 12:00:17 AM - Software Distribution Service 3.0
    RP2195: 9/13/2012 8:10:35 PM - Removed BabylonObjectInstaller
    RP2196: 9/14/2012 10:55:53 PM - System Checkpoint
    RP2197: 9/15/2012 11:22:33 PM - System Checkpoint
    RP2198: 9/17/2012 12:27:24 AM - System Checkpoint
    RP2199: 9/18/2012 1:22:27 AM - System Checkpoint
    RP2200: 9/19/2012 2:58:52 AM - System Checkpoint
    RP2201: 9/20/2012 4:22:29 AM - System Checkpoint
    RP2202: 9/21/2012 4:30:56 AM - System Checkpoint
    RP2203: 9/22/2012 4:35:15 AM - System Checkpoint
    RP2204: 9/23/2012 12:00:25 AM - Software Distribution Service 3.0
    RP2205: 9/24/2012 12:24:49 AM - System Checkpoint
    RP2206: 9/25/2012 1:24:46 AM - System Checkpoint
    RP2207: 9/26/2012 1:37:39 AM - System Checkpoint
    RP2208: 9/27/2012 2:48:45 AM - System Checkpoint
    RP2209: 9/28/2012 3:37:18 AM - System Checkpoint
    RP2210: 9/29/2012 4:24:50 AM - System Checkpoint
    RP2211: 9/30/2012 4:39:22 AM - System Checkpoint
    RP2212: 10/1/2012 5:50:26 AM - System Checkpoint
    RP2213: 10/2/2012 6:24:58 AM - System Checkpoint
    RP2214: 10/3/2012 7:25:01 AM - System Checkpoint
    RP2215: 10/4/2012 8:25:10 AM - System Checkpoint
    RP2216: 10/5/2012 9:25:08 AM - System Checkpoint
    RP2217: 10/6/2012 10:25:10 AM - System Checkpoint
    RP2218: 10/7/2012 10:52:42 AM - System Checkpoint
    RP2219: 10/8/2012 4:23:16 PM - System Checkpoint
    RP2220: 10/9/2012 4:23:50 PM - System Checkpoint
    RP2221: 10/10/2012 11:37:15 PM - System Checkpoint
    RP2222: 10/11/2012 12:00:26 AM - Software Distribution Service 3.0
    RP2223: 10/12/2012 12:36:37 AM - System Checkpoint
    RP2224: 10/13/2012 1:34:34 AM - System Checkpoint
    RP2225: 10/14/2012 1:36:06 AM - System Checkpoint
    RP2226: 10/15/2012 4:36:02 AM - System Checkpoint
    RP2227: 10/16/2012 5:36:09 AM - System Checkpoint
    RP2228: 10/17/2012 6:35:14 AM - System Checkpoint
    RP2229: 10/18/2012 6:36:11 AM - System Checkpoint
    RP2230: 10/19/2012 7:36:00 AM - System Checkpoint
    RP2231: 10/20/2012 7:48:33 AM - System Checkpoint
    RP2232: 10/20/2012 9:17:30 AM - Removed Java(TM) 7 Update 4
    RP2233: 10/20/2012 9:18:18 AM - Installed Java 7 Update 9
    RP2234: 10/21/2012 11:52:45 PM - System Checkpoint
    RP2235: 10/23/2012 12:36:24 AM - System Checkpoint
    RP2236: 10/24/2012 12:37:04 AM - System Checkpoint
    RP2237: 10/25/2012 12:50:43 AM - System Checkpoint
    RP2238: 10/26/2012 1:37:10 AM - System Checkpoint
    RP2239: 10/27/2012 2:49:10 AM - System Checkpoint
    RP2240: 10/28/2012 4:31:42 AM - System Checkpoint
    RP2241: 10/29/2012 5:28:29 AM - System Checkpoint
    RP2242: 10/29/2012 4:02:58 PM - Installed AVG 2013
    RP2243: 10/29/2012 4:03:12 PM - Removed AVG 2011
    RP2244: 10/29/2012 4:04:09 PM - Installed AVG 2013
    RP2245: 10/29/2012 4:10:04 PM - Removed AVG 2011
    RP2246: 11/3/2012 1:03:41 AM - System Checkpoint
    RP2247: 11/4/2012 12:44:06 AM - System Checkpoint
    .
    ==== Installed Programs ======================
    .
    Acrobat.com
    Adobe Acrobat 5.0
    Adobe AIR
    Adobe Flash Player 11 ActiveX
    Adobe Reader 9.4.5
    Adobe Shockwave Player 11.5
    AiO_Scan
    AiO_Scan_CDA
    aioprnt
    aioscnnr
    AiOSoftware
    AiOSoftwareNPI
    Amazon MP3 Uploader
    AQUAZONE "Jellies, Turtles, & More... Collection"
    ArcSoft Panorama Maker 4
    ArcSoft Software Suite
    ArtistScope Plugin IE
    ATI Control Panel
    ATI Display Driver
    Audacity 2.0
    AVG 2013
    Azada&reg; : In Libro Collector's Edition
    Belkin N Wireless USB Adapter Setup
    Big Fish Games: Game Manager
    Bonjour
    BufferChm
    C4USelfUpdater
    CameraDrivers
    CC_ccProxyExt
    ccCommon
    CCleaner (remove only)
    ccPxyCore
    center
    Changes
    Chasys Draw IES 3.66.02
    Collapse! Crunch
    Comcast High-Speed Internet Install Wizard
    CP_AtenaShokunin1Config
    CP_CalendarTemplates1
    cp_LightScribeConfig
    cp_LightScribePlugin
    CP_Package_Basic1
    CP_Package_Variety1
    CP_Package_Variety2
    CP_Package_Variety3
    CP_Panorama1Config
    Create™
    Creative PC-CAM Center
    Creative WebCam Monitor
    Creative WebCam NX Pro Driver (1.00.06.0512)
    Creative WebCam NX Pro User's Guide (English)
    CueTour
    Customer Experience Enhancement
    Dark Parables: Curse of Briar Rose Collector's Edition
    Dark Parables: Rise of the Snow Queen Collector's Edition
    Dark Parables: The Exiled Prince
    Dark Parables: The Exiled Prince Collector's Edition
    Data Fax SoftModem with SmartCP
    Destinations
    DeviceManagementQFolder
    Diner Dash Family Style
    Diner Dash Hometown Hero - Gourmet
    Discord Times
    DISCover
    DocProc
    DocumentViewer
    DocumentViewerQFolder
    Drawn &reg;: Dark Flight Collector's Edition
    Drawn&reg;: The Painted Tower ™
    Drawn™: Trail of Shadows Collector's Edition
    Enchanted Cavern
    essentials
    Express Burn
    Facebook Plug-In
    FATE
    FATE - The Traitor Soul
    FATE from HP Media Center (remove only)
    Fax
    Fax_CDA
    FaxTools
    Fiction Fixers - Adventures in Wonderland
    File Uploader
    Fishdom
    Floating Kingdoms ™
    FotoMix version 8.5.6
    Funny Faces
    Game Booster 3
    getPlus(R)_ocx
    GIMP 2.8.0
    Google Chrome
    Google Earth Plug-in
    Google Toolbar for Internet Explorer
    Google Update Helper
    greenstreet Picture Browser
    Hallmark Smilebox
    Hamlet
    Haunted Manor: Lord of Mirrors
    High Definition Audio Driver Package - KB888111
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Internet Explorer 7 (KB947864)
    Hotfix for Windows Media Player 10 (KB903157)
    Hotfix for Windows XP (KB2158563)
    Hotfix for Windows XP (KB2443685)
    Hotfix for Windows XP (KB2570791)
    Hotfix for Windows XP (KB2633952)
    Hotfix for Windows XP (KB2756822)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB961118)
    Hotfix for Windows XP (KB970653-v3)
    Hotfix for Windows XP (KB976098-v2)
    Hotfix for Windows XP (KB979306)
    Hotfix for Windows XP (KB981793)
    HP Boot Optimizer
    HP Deskjet Printer Preload
    HP DigitalMedia Archive
    HP Document Viewer 5.3
    HP Game Console and games
    HP Image Zone 5.3
    HP Imaging Device Functions 5.3
    HP Multimedia Keyboard Software
    HP Photosmart 330,380,420,470,7800,8000,8200 Series
    HP Photosmart Cameras 5.0
    HP PSC & OfficeJet 5.3.A
    HP PSC & OfficeJet 5.3.B
    HP Software Update
    HP Solution Center & Imaging Support Tools 5.3
    HPProductAssistant
    HpSdpAppCoreApp
    InstantShareDevices
    InterActual Player
    InterVideo WinDVD Player
    iolo technologies' System Mechanic
    Island Tribe
    J2SE Runtime Environment 5.0 Update 5
    Java 7 Update 9
    Java Auto Updater
    Java(TM) 6 Update 30
    JavaFX 2.1.1
    Jigsaw World
    Kingdom Chronicles Collector's Edition
    Kodak AIO Printer
    KODAK AiO Software
    Kuros
    LightScribe 1.4.52.1
    Logitech SetPoint
    Lottso! Deluxe
    LUMIX Simple Viewer
    Magic Life
    Mahjong Garden Deluxe
    Malwarebytes Anti-Malware version 1.65.1.1000
    Memeo Instant Backup
    Microsoft .NET Framework 1.0 Hotfix (KB2572066)
    Microsoft .NET Framework 1.0 Hotfix (KB2604042)
    Microsoft .NET Framework 1.0 Hotfix (KB2656378)
    Microsoft .NET Framework 1.0 Hotfix (KB953295)
    Microsoft .NET Framework 1.0 Hotfix (KB979904)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Security Update (KB2656353)
    Microsoft .NET Framework 1.1 Security Update (KB2656370)
    Microsoft .NET Framework 1.1 Security Update (KB979906)
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft .NET Framework 4 Client Profile
    Microsoft .NET Framework 4 Extended
    Microsoft Away Mode
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft Money 2005
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Basic Edition 2003
    Microsoft Office PowerPoint Viewer 2007 (English)
    Microsoft Office Standard Edition 2003
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
    Microsoft Works
    Move Media Player
    Mozilla Firefox (2.0.0.1)
    MSRedist
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    MSXML 6.0 Parser
    muvee autoProducer 4.5
    muvee autoProducer unPlugged 1.2
    My Kingdom for the Princess II
    My Kingdom for the Princess III
    MyDSC2
    Mystery Case Files - Huntsville (remove only)
    Mystery Case Files - Prime Suspects (remove only)
    Mystery Case Files - Ravenhearst (remove only)
    Mystery Case Files &reg;: 13th Skull ™
    Mystery Case Files&reg;: Dire Grove™
    Mystery Case Files: Madame Fate (remove only)
    Mystery Case Files: Return to Ravenhearst ™
    Nancy Drew Dossier: Lights, Camera, Curses!
    Nancy Drew Dossier: Resorting to Danger
    Nancy Drew Phantom of Venice
    Nancy Drew: Danger by Design
    Nancy Drew: Danger on Deception Island
    Nancy Drew: Ghost Dogs of Moon Lake
    Nancy Drew: Last Train to Blue Moon Canyon
    Nancy Drew: Legend of the Crystal Skull
    Nancy Drew: Ransom of the Seven Ships
    Nancy Drew: Secret of Shadow Ranch
    Nancy Drew: Secret of the Old Clock
    Nancy Drew: Secret of the Scarlet Hand
    Nancy Drew: Secrets Can Kill REMASTERED
    Nancy Drew: The Captive Curse
    Nancy Drew: The Creature of Kapu Cave
    Nancy Drew: The Curse of Blackmoor Manor
    Nancy Drew: The Final Scene
    Nancy Drew: The Haunted Carousel
    Nancy Drew: The Haunting of Castle Malloy
    Nancy Drew: Trail of the Twister
    Nancy Drew: Treasure in the Royal Tower
    Nancy Drew: Warnings at Waverly Academy
    Netscape Browser (remove only)
    New Yankee in King Arthur's Court
    NewCopy
    NewCopy_CDA
    Nikon Message Center
    Nikon Transfer
    Northern Tale
    Norton AntiSpam
    Norton AntiVirus 2005
    Norton Internet Security
    Norton WMI Update
    ocr
    OpenAL
    Operation Mania
    Otto
    PanoStandAlone
    PC-Doctor 5 for Windows
    Photo Pos Pro
    PhotoGallery
    PhotoPad Image Editor
    PhotoStage Slideshow Producer
    Picture Control Utility
    Pixia
    Plants vs. Zombies
    PreReq
    PS2
    PSPrinters08
    PSTAPlugin
    Puzzle Park
    Quicken 2006
    QuickTime
    RandMap
    Readme
    RealArcade
    RealPlayer
    Recordpad
    Remove IntelliMover Demo
    Roads of Rome
    Roads of Rome II
    Roads of Rome III
    Roblox for HP_Administrator
    Roxio EasyWrite Reader
    Royal Envoy 2 Collector's Edition
    Royal Envoy Collector's Edition
    Sandlot Games Client Services
    Sansa Media Converter
    Sansa Updater
    Savings Bond Wizard
    Scan
    ScannerCopy
    Seagate Dashboard
    Security Task Manager 1.7
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
    Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
    Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
    Security Update for Microsoft Windows (KB2564958)
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB929969)
    Security Update for Windows Internet Explorer 7 (KB931768)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB942615)
    Security Update for Windows Internet Explorer 7 (KB944533)
    Security Update for Windows Internet Explorer 7 (KB950759)
    Security Update for Windows Internet Explorer 7 (KB969897)
    Security Update for Windows Internet Explorer 8 (KB2183461)
    Security Update for Windows Internet Explorer 8 (KB2360131)
    Security Update for Windows Internet Explorer 8 (KB2416400)
    Security Update for Windows Internet Explorer 8 (KB2482017)
    Security Update for Windows Internet Explorer 8 (KB2497640)
    Security Update for Windows Internet Explorer 8 (KB2510531)
    Security Update for Windows Internet Explorer 8 (KB2530548)
    Security Update for Windows Internet Explorer 8 (KB2544521)
    Security Update for Windows Internet Explorer 8 (KB2559049)
    Security Update for Windows Internet Explorer 8 (KB2586448)
    Security Update for Windows Internet Explorer 8 (KB2618444)
    Security Update for Windows Internet Explorer 8 (KB2647516)
    Security Update for Windows Internet Explorer 8 (KB2675157)
    Security Update for Windows Internet Explorer 8 (KB2699988)
    Security Update for Windows Internet Explorer 8 (KB2722913)
    Security Update for Windows Internet Explorer 8 (KB2744842)
    Security Update for Windows Internet Explorer 8 (KB969897)
    Security Update for Windows Internet Explorer 8 (KB971961)
    Security Update for Windows Internet Explorer 8 (KB972260)
    Security Update for Windows Internet Explorer 8 (KB974455)
    Security Update for Windows Internet Explorer 8 (KB976325)
    Security Update for Windows Internet Explorer 8 (KB978207)
    Security Update for Windows Internet Explorer 8 (KB981332)
    Security Update for Windows Internet Explorer 8 (KB982381)
    Security Update for Windows Media Player (KB2378111)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player (KB954155)
    Security Update for Windows Media Player (KB968816)
    Security Update for Windows Media Player (KB973540)
    Security Update for Windows Media Player (KB975558)
    Security Update for Windows Media Player (KB978695)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 10 (KB936782)
    Security Update for Windows XP (KB2079403)
    Security Update for Windows XP (KB2115168)
    Security Update for Windows XP (KB2121546)
    Security Update for Windows XP (KB2160329)
    Security Update for Windows XP (KB2229593)
    Security Update for Windows XP (KB2259922)
    Security Update for Windows XP (KB2279986)
    Security Update for Windows XP (KB2286198)
    Security Update for Windows XP (KB2296011)
    Security Update for Windows XP (KB2296199)
    Security Update for Windows XP (KB2347290)
    Security Update for Windows XP (KB2360937)
    Security Update for Windows XP (KB2387149)
    Security Update for Windows XP (KB2393802)
    Security Update for Windows XP (KB2412687)
    Security Update for Windows XP (KB2419632)
    Security Update for Windows XP (KB2423089)
    Security Update for Windows XP (KB2436673)
    Security Update for Windows XP (KB2440591)
    Security Update for Windows XP (KB2443105)
    Security Update for Windows XP (KB2476490)
    Security Update for Windows XP (KB2476687)
    Security Update for Windows XP (KB2478960)
    Security Update for Windows XP (KB2478971)
    Security Update for Windows XP (KB2479628)
    Security Update for Windows XP (KB2481109)
    Security Update for Windows XP (KB2483185)
    Security Update for Windows XP (KB2485376)
    Security Update for Windows XP (KB2485663)
    Security Update for Windows XP (KB2491683)
    Security Update for Windows XP (KB2503658)
    Security Update for Windows XP (KB2503665)
    Security Update for Windows XP (KB2506212)
    Security Update for Windows XP (KB2506223)
    Security Update for Windows XP (KB2507618)
    Security Update for Windows XP (KB2507938)
    Security Update for Windows XP (KB2508272)
    Security Update for Windows XP (KB2508429)
    Security Update for Windows XP (KB2509553)
    Security Update for Windows XP (KB2511455)
    Security Update for Windows XP (KB2524375)
    Security Update for Windows XP (KB2535512)
    Security Update for Windows XP (KB2536276-v2)
    Security Update for Windows XP (KB2536276)
    Security Update for Windows XP (KB2544893-v2)
    Security Update for Windows XP (KB2544893)
    Security Update for Windows XP (KB2555917)
    Security Update for Windows XP (KB2562937)
    Security Update for Windows XP (KB2566454)
    Security Update for Windows XP (KB2567053)
    Security Update for Windows XP (KB2567680)
    Security Update for Windows XP (KB2570222)
    Security Update for Windows XP (KB2570947)
    Security Update for Windows XP (KB2584146)
    Security Update for Windows XP (KB2592799)
    Security Update for Windows XP (KB2598479)
    Security Update for Windows XP (KB2603381)
    Security Update for Windows XP (KB2618451)
    Security Update for Windows XP (KB2620712)
    Security Update for Windows XP (KB2621440)
    Security Update for Windows XP (KB2624667)
    Security Update for Windows XP (KB2631813)
    Security Update for Windows XP (KB2633171)
    Security Update for Windows XP (KB2639417)
    Security Update for Windows XP (KB2641653)
    Security Update for Windows XP (KB2646524)
    Security Update for Windows XP (KB2647518)
    Security Update for Windows XP (KB2653956)
    Security Update for Windows XP (KB2655992)
    Security Update for Windows XP (KB2659262)
    Security Update for Windows XP (KB2660465)
    Security Update for Windows XP (KB2661637)
    Security Update for Windows XP (KB2676562)
    Security Update for Windows XP (KB2685939)
    Security Update for Windows XP (KB2686509)
    Security Update for Windows XP (KB2691442)
    Security Update for Windows XP (KB2695962)
    Security Update for Windows XP (KB2698365)
    Security Update for Windows XP (KB2705219)
    Security Update for Windows XP (KB2707511)
    Security Update for Windows XP (KB2709162)
    Security Update for Windows XP (KB2712808)
    Security Update for Windows XP (KB2718523)
    Security Update for Windows XP (KB2719985)
    Security Update for Windows XP (KB2723135)
    Security Update for Windows XP (KB2724197)
    Security Update for Windows XP (KB2731847)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB938464-v2)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956744)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956844)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958869)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB960859)
    Security Update for Windows XP (KB961371)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB969059)
    Security Update for Windows XP (KB969947)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB970430)
    Security Update for Windows XP (KB971468)
    Security Update for Windows XP (KB971486)
    Security Update for Windows XP (KB971557)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB971657)
    Security Update for Windows XP (KB972270)
    Security Update for Windows XP (KB973346)
    Security Update for Windows XP (KB973354)
    Security Update for Windows XP (KB973507)
    Security Update for Windows XP (KB973525)
    Security Update for Windows XP (KB973869)
    Security Update for Windows XP (KB973904)
    Security Update for Windows XP (KB974112)
    Security Update for Windows XP (KB974318)
    Security Update for Windows XP (KB974392)
    Security Update for Windows XP (KB974571)
    Security Update for Windows XP (KB975025)
    Security Update for Windows XP (KB975467)
    Security Update for Windows XP (KB975560)
    Security Update for Windows XP (KB975561)
    Security Update for Windows XP (KB975562)
    Security Update for Windows XP (KB975713)
    Security Update for Windows XP (KB977165)
    Security Update for Windows XP (KB977816)
    Security Update for Windows XP (KB977914)
    Security Update for Windows XP (KB978037)
    Security Update for Windows XP (KB978251)
    Security Update for Windows XP (KB978262)
    Security Update for Windows XP (KB978338)
    Security Update for Windows XP (KB978542)
    Security Update for Windows XP (KB978601)
    Security Update for Windows XP (KB978706)
    Security Update for Windows XP (KB979309)
    Security Update for Windows XP (KB979482)
    Security Update for Windows XP (KB979559)
    Security Update for Windows XP (KB979683)
    Security Update for Windows XP (KB979687)
    Security Update for Windows XP (KB980195)
    Security Update for Windows XP (KB980218)
    Security Update for Windows XP (KB980232)
    Security Update for Windows XP (KB980436)
    Security Update for Windows XP (KB981322)
    Security Update for Windows XP (KB981852)
    Security Update for Windows XP (KB981957)
    Security Update for Windows XP (KB981997)
    Security Update for Windows XP (KB982132)
    Security Update for Windows XP (KB982214)
    Security Update for Windows XP (KB982665)
    Security Update for Windows XP (KB982802)
    Sibelius Scorch
    Sibelius Student
    Simply Kids
    Simply Recreation
    Simply School Days
    Simply Vacations
    Simply Vintage
    SkinsHP1
    SolutionCenter
    Sonic Express Labeler
    Sonic MyDVD Plus
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sonic Update Manager
    Sonic_PrimoSDK
    SPBBC
    Spybot - Search & Destroy
    Spybot - Search & Destroy 1.4
    Status
    Stellarium UMI
    Symantec Network Drivers Update
    SymNet
    Synthesia (remove only)
    TES Construction Set
    The Poppit! Show
    The Promised Land
    The Treasures Of Mystery Island
    The Treasures of Mystery Island: The Gates of Fate
    The Treasures of Mystery Island: The Ghost Ship
    The White Wolf of Icicle Creek
    TrayApp
    Tri Peaks 2 Quest For The Ruby Ring
    Type to Learn 3 Home
    Ultimate Paint 2.88 Freeware Edition
    Unity Web Player
    Unlikely Suspects
    Unload
    UNO - Undercover
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
    Update for Windows Internet Explorer 8 (KB971930)
    Update for Windows Internet Explorer 8 (KB976662)
    Update for Windows Internet Explorer 8 (KB976749)
    Update for Windows Internet Explorer 8 (KB980182)
    Update for Windows Media Player 10 (KB910393)
    Update for Windows Media Player 10 (KB913800)
    Update for Windows Media Player 10 (KB926251)
    Update for Windows XP (KB2141007)
    Update for Windows XP (KB2345886)
    Update for Windows XP (KB2467659)
    Update for Windows XP (KB2541763)
    Update for Windows XP (KB2607712)
    Update for Windows XP (KB2616676)
    Update for Windows XP (KB2641690)
    Update for Windows XP (KB2661254-v2)
    Update for Windows XP (KB2718704)
    Update for Windows XP (KB2736233)
    Update for Windows XP (KB2749655)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB953356)
    Update for Windows XP (KB955759)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB967715)
    Update for Windows XP (KB968389)
    Update for Windows XP (KB971029)
    Update for Windows XP (KB971737)
    Update for Windows XP (KB973687)
    Update for Windows XP (KB973815)
    Update Rollup 2 for Windows XP Media Center Edition 2005
    Updates from HP (remove only)
    VideoPad Video Editor
    ViewNX
    VIVA MEDIA GAME CENTER
    WavePad Uninstall
    WebFldrs XP
    WebReg
    WildTangent Games
    Windows Genuine Advantage Notifications (KB905474)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Internet Explorer 7
    Windows Internet Explorer 8
    Windows Media Format Runtime
    Windows XP Media Center Edition 2005 KB2502898
    Windows XP Media Center Edition 2005 KB2619340
    Windows XP Media Center Edition 2005 KB2628259
    Windows XP Media Center Edition 2005 KB908250
    Windows XP Media Center Edition 2005 KB973768
    Windows XP Service Pack 3
    WinPatrol
    Word Riot Deluxe
    World Mosaics
    Yahoo! extras
    Yahoo! Messenger
    Yahoo! Photos Easy Upload Tool
    Yahoo! Photos Print-at-Home Tool
    Yahoo! Software Update
    Yahoo! Toolbar
    Yontoo Layers Client 1.10.01
    Zoner Photo Studio 7
    .
    ==== Event Viewer Messages From Past Week ========
    .
    11/3/2012 3:16:44 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor IntelIde ViaIde
    11/2/2012 2:08:49 PM, error: Dhcp [1001] - Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 001CDF6A6416. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
    10/29/2012 6:11:10 PM, error: Service Control Manager [7034] - The iolo System Service service terminated unexpectedly. It has done this 1 time(s).
    10/29/2012 4:13:41 PM, error: Service Control Manager [7006] - The ScRegSetValueExW call failed for FailureActions with the following error: Access is denied.
    10/29/2012 4:08:17 PM, error: Service Control Manager [7009] - Timeout (120000 milliseconds) waiting for the AVGIDSAgent service to connect.
    10/29/2012 4:08:17 PM, error: Service Control Manager [7000] - The AVGIDSAgent service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
    10/28/2012 9:31:48 PM, error: Service Control Manager [7034] - The Windows User Mode Driver Framework service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:31:40 PM, error: Service Control Manager [7034] - The Media Center Scheduler Service service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:31:23 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:25:44 AM, error: Service Control Manager [7000] - The Bonjour Service service failed to start due to the following error: The system cannot find the file specified.
    10/28/2012 9:22:33 PM, error: Service Control Manager [7031] - The Remote Procedure Call (RPC) service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
    10/28/2012 9:21:51 AM, error: Service Control Manager [7034] - The DNS Client service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:48 AM, error: Service Control Manager [7034] - The TCP/IP NetBIOS Helper service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:48 AM, error: Service Control Manager [7031] - The Universal Plug and Play Device Host service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
    10/28/2012 9:21:48 AM, error: Service Control Manager [7031] - The Remote Registry service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1000 milliseconds: Restart the service.
    10/28/2012 9:21:44 AM, error: Service Control Manager [7034] - The WebClient service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:42 AM, error: Service Control Manager [7034] - The HTTP SSL service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:34 AM, error: Service Control Manager [7034] - The vToolbarUpdater12.2.6 service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:27 AM, error: Service Control Manager [7034] - The Yahoo! Updater service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:16 AM, error: Service Control Manager [7034] - The Kodak AiO Status Monitor Service service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:05 AM, error: Service Control Manager [7034] - The Pml Driver HPZ12 service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:21:00 AM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
    10/28/2012 9:20:15 AM, error: Service Control Manager [7034] - The Kodak AiO Network Discovery Service service terminated unexpectedly. It has done this 1 time(s).
    .
    ==== End Of File ====
    _________________________________________________________


    GMER log:

    GMER 1.0.15.15641 - http://www.gmer.net
    Rootkit scan 2012-11-04 19:07:02
    Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST3200826AS rev.3.03
    Running: obgucttg.exe; Driver: C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kwxdafob.sys


    ---- System - GMER 1.0.15 ----

    SSDT 85D700B0 ZwConnectPort
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeKey [0xF5C1A14A]
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwNotifyChangeMultipleKeys [0xF5C1A21A]
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwOpenProcess [0xF5C19D7C]
    SSDT \??\C:\WINDOWS\system32\drivers\avgtpx86.sys (AVG Technologies) ZwQueryValueKey [0xF7761258]
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwSuspendProcess [0xF5C19F6A]
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwSuspendThread [0xF5C1A000]
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateProcess [0xF5C19E32]
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwTerminateThread [0xF5C19ECE]
    SSDT \SystemRoot\system32\DRIVERS\avgidsshimx.sys (IDS Application Activity Monitor Loader Driver./AVG Technologies CZ, s.r.o. ) ZwWriteVirtualMemory [0xF5C1A09C]

    ---- Kernel code sections - GMER 1.0.15 ----

    ? gsujx.sys The system cannot find the file specified. !
    ? C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

    ---- Devices - GMER 1.0.15 ----

    AttachedDevice \FileSystem\Ntfs \Ntfs bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)
    AttachedDevice \FileSystem\Ntfs \Ntfs SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Ip SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 arkbcfltr.sys (Microsoft AR PS/2 Keyboard Filter Driver (Beta 2 Release 2)/Microsoft Corporation)
    AttachedDevice \Driver\Tcpip \Device\Tcp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\Udp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
    AttachedDevice \Driver\Tcpip \Device\RawIp SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation)
    AttachedDevice \FileSystem\Fastfat \Fat bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)
    AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
    AttachedDevice \FileSystem\Fastfat \Fat SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)

    ---- Files - GMER 1.0.15 ----

    File C:\Program Files\Microsoft Office\OFFICE11\1033\112 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\112\SKU112.XML 473931 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\113 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\113\SKU113.XML 473931 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\ADDRPRSR.DLL 35392 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\ADO.XML 328956 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\ADO210.AW 238012 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41206.FMT 1451 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41256.FMT 1542 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41307.FMT 1366 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\AV41357.FMT 1469 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\AVL7901.FMT 1559 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\AVL7902.FMT 1488 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\2COLCMA.GIF 1470 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\2COLFRM.GIF 1975 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BARS.GIF 1273 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BRACKETS.GIF 1334 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\BULTITL.GIF 1315 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\COMMAS.GIF 1415 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\COMPNT.GIF 1547 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\DOTS.GIF 1246 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\DRPDWN.GIF 1566 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\HISTORY.GIF 1470 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\HORZTITL.GIF 1318 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\LSTVIEWS.INI 9540 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\MOREDOTS.GIF 1266 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\NAVBARS.INI 2204 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\NUMTITL.GIF 1325 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\PLNTITL.GIF 1291 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM1.GIF 1517 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM2.GIF 1421 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\REPFORM3.GIF 1761 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\SLASHES.GIF 1261 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\TABLE.GIF 1482 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\TABULAR.GIF 1239 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\BOTSTYLE\UNDRLINE.GIF 1246 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\CATOC.XML 4522 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\CERTINTL.DLL 13376 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\CSDEBUG.CHM 118701 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\CSENVIR.CHM 311722 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DAO.XML 58396 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DAO360.AW 102702 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\+Connect to New Data Source.odc 190 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\+New SQL Server Connection.odc 196 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\DATACONN.HTC 28734 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\DESKTOP.INI 70 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DataServices\FOLDER.ICO 4710 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DAY1.PRT 2288 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DAY2.PRT 3151 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\DYNO106.FMT 1585 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\EMAIL.DOT 13312 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\ENVELOPR.DLL 20032 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\EXPTOOWS.DLL 13376 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\EXPTOOWS.XLA 78336 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\FILTERS.TXT 2086 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\FM20.AW 126150 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\FM20.XML 86032 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\GR8GALRY.GRA 186880 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\GRAPH10.AW 281435 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\GRAPH10.CHM 511975 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\GRINTL32.DLL 145984 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMLREF.CHM 2827646 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMLREF.XML 8594 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMMINTL.DLL 31352 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\HTMQINTL.DLL 27256 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\ID_112.DPC 653 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\ID_113.DPC 627 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\JETSQL.XML 15416 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\JSCRIPT.XML 13082 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MCE.CHM 28369 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_CATOC.XML 145 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_OITOC.XML 146 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_OLTOC.XML 391 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_PPTOC.XML 325 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_WDTOC.XML 325 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_XGTOC.XML 145 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MF_XLTOC.XML 325 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MODHLPUI.DLL 12864 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MONTH1.PRT 1891 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MONTH2.PRT 1441 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSCAL32.DLL 219520 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.AW 185891 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.CHM 309756 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSE10.XML 31652 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSEINTL.DLL 60472 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSETOC.XML 4835 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSO.ACL 37814 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOHELP.EXE 88632 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOHLP11.CHM 252772 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOWCWI.DLL 110592 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSPHELP.CHM 398443 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSQRY32.AW 77269 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSQRY32.CHM 513666 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSSCD32.DLL 189312 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSSPC32.DLL 1750904 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTINTL.DLL 143416 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTORE10.AW 116511 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTORE10.CHM 58182 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSTRE32.DLL 44952 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSUSPINT.DLL 229444 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSWBCLNG.DLL 10816 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\NORMAL.FMT 1347 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OBALLOON.DLL 109120 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OCLTINT.DLL 121400 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OFFTEXT.TXT 2837 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OFREADME.HTM 9771 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OISINTL.DLL 130616 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OISMAIN.AW 195640 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OISMAIN.CHM 126432 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OISTOC.XML 11326 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OLFM10.CHM 617456 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OLFTOC.XML 70615 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OLMAIN10.AW 1121096 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OLMAIN11.CHM 1039207 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OLREADME.HTM 13021 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OLTOC.XML 168903 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OMFCSAT.DLL 64088 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTFORM.DAT 84480 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLBAR.INF 2412 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLLIBR.DLL 2979904 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLOOK.HOL 288826 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OUTLWVW.DLL 274488 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OWHTOC.XML 8768 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PPINTL.DLL 485944 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PPMAIN10.AW 1060126 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PPMAIN10.CHM 851716 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PPREADME.HTM 2943 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PPTOC.XML 163239 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PPVWINTL.DLL 159808 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.DOC 25088 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.PPT 14336 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLN.XLS 15872 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.DOC 27136 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.PPT 14848 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PROTTPLV.XLS 15872 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PSS10O.CHM 11142 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PSS10R.CHM 11378 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\PVREADME.HTM 4189 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\QRYINT32.DLL 96832 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\QUIKANIM.PPT 282112 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\SCHDPL32.EXE 190848 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\EEFINTL.DLL 39544 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\JSCRIPT5.CHM 507729 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\MSOAUTUI.DLL 31296 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OFMAIN11.CHM 714555 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\OWSHLP10.CHM 273580 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\SETUP.CHM 272824 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAWD10.AW 2149167 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VEEN3.AW 243688 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\SLINTL.DLL 134712 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\SPLTOC.XML 37981 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\SRINTL.DLL 1178272 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\STSLIST.CHM 614107 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\STSLISTI.DLL 133696 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\STSUCRES.DLL 15424 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\TRIFOLD3.PRT 6399 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\UNBIND10.DLL 13376 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\USPANNTN.XML 177284 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\USPMETA.XML 19383 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAGR10.CHM 493272 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOF10.AW 454371 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOF11.CHM 714142 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOL10.AW 654379 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOL11.CHM 865598 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAOWS10.CHM 266741 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAPP10.AW 895858 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAPP10.CHM 1169163 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAWD10.CHM 2760613 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAXL10.AW 1651132 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBAXL10.CHM 1966342 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBCN.XML 12308 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBETOC.XML 350 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBHW.XML 7038 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBLR.XML 345750 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOB.XML 33106 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOFTOC.XML 104172 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBOWSTOC.XML 9634 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSCRIP.XML 12362 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSCRIP5.CHM 495987 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VBSETOC.XML 426 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_GRTOC.XML 95740 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_OLTOC.XML 193794 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_PPTOC.XML 248994 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_WDTOC.XML 637834 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VB_XLTOC.XML 528846 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.MHT 2716 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.SWF 1964739 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WDMAIN10.AW 1524248 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WDMAIN11.CHM 1736028 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WDREADME.HTM 2775 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WDTOC.XML 240825 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WDWPH10.CHM 165735 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK1.PRT 9785 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK2.PRT 7269 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WEEK3.PRT 9839 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WORKFUNC.AW 549031 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WWASUM.DLL 61440 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\WWINTL.DLL 771640 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XGTOC.XML 41115 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XL8GALRY.XLS 151552 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLADDIN.CHM 65425 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLATOC.XML 828 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLINTL32.DLL 707648 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMACRO.CHM 11264 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMAIN10.AW 1443704 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLMAIN11.CHM 2536247 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLQTOC.XML 25912 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLREADME.HTM 18467 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLSLICER.DLL 154176 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XLTOC.XML 262965 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1033\XMLSDK.XML 516752 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1036\MSO.ACL 44744 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\1036\WWASUM.DLL 147456 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\3082\MSO.ACL 45832 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\3082\WWASUM.DLL 548920 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\DLGSETP.ECF 623 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\DUMPSTER.ECF 808 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\FAXEXT.ECF 830 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSOSEC.DLL 7168 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSOSEC.XML 179 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSSPC.ECF 778 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\MSVCR71.DLL 344064 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OTKLOADR.DLL 77824 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTEX.ECF 1936 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTEX2.ECF 862 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\OUTLVBA.DLL 45112 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\PMAILEXT.ECF 626 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\Redemption.ECF 475 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\ADDINS\SCRPTXTN.ECF 693 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART1.BDR 32246 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART10.BDR 9292 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART11.BDR 30920 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART12.BDR 58756 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART13.BDR 28368 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART14.BDR 51388 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART15.BDR 27412 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART2.BDR 47188 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART3.BDR 57646 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART4.BDR 14594 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART5.BDR 15788 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART6.BDR 55222 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART7.BDR 3876 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART8.BDR 49098 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\BORDERS\MSART9.BDR 50838 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ACT3R.SAM 14392 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\DELIMR.FAE 11320 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\LOCALDV.DLL 33848 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ODBCR.SAM 12856 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLADDR.FAE 14904 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLAPPTR.FAE 12856 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLJRNLR.FAE 11320 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLMAILR.FAE 11320 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLNOTER.FAE 10808 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLR.SAM 12848 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\OLTASKR.FAE 11832 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\ORG97R.SAM 13880 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\PABR.SAM 12344 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\SC2R.SAM 12344 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\SCHPLUSR.SAM 14400 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\1033\TRANSMRR.DLL 14912 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ACT3.SAM 140856 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DELIMDOS.FAE 23616 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DELIMWIN.FAE 23616 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\DESKSAM.SAM 17464 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ODBC.SAM 46136 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OL.SAM 88624 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLADD.FAE 157752 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLAPPT.FAE 151608 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLJRNL.FAE 117304 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLMAIL.FAE 112696 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLNOTE.FAE 103992 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\OLTASK.FAE 145976 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\ORG97.SAM 37432 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\PAB.SAM 114224 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\RM.DLL 74288 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\SC2.SAM 111152 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\SCHPLUS.SAM 142392 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\CONVERT\TRANSMGR.DLL 99904 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOCL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RCLRPT.CFG 808 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESNS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\ACTIVITY.CFG 968 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPT.CFG 789 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPTL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\APPTS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFNOT.CFG 320 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFNOT.ICO 766 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CNFRES.CFG 338 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONFLICT.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACT.CFG 783 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACTL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\CONTACTS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLIST.CFG 805 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLSTL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DISTLSTS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOC.CFG 765 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\DOCS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEM.CFG 838 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEML.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\EXITEMS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPM.CFG 795 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPML.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\IPMS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTE.CFG 781 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTEL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\NOTES.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\OOFTMPL.CFG 830 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POST.CFG 777 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTIT.CFG 777 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTITL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTITS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\POSTS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REC.CFG 1617 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RECL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RECS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTE.CFG 779 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTEL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REMOTES.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPLTMPL.CFG 826 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORT.CFG 781 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORTL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\REPORTS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESEND.CFG 779 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESENDL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\RESENDS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDCNCLL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDCNCLS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDREQL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDREQS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESNL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESPL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESPS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESTL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCDRESTS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDCNCL.CFG 821 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDREQ.CFG 1199 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDRESN.CFG 835 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDRESP.CFG 833 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SCHDREST.CFG 840 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECREC.CFG 664 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECRECL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECRECS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURE.CFG 647 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SECURS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGN.CFG 664 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGNL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SIGNS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SMIMEE.CFG 640 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\SMIMES.CFG 668 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASK.CFG 768 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACC.CFG 804 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACCL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKACCS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDEC.CFG 807 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDECL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKDECS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQ.CFG 797 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQL.ICO 1078 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKREQS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKS.ICO 2998 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\FORMS\1033\TASKUPD.CFG 806 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\context.html 1483 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxhelp_cls.gif 128 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxhelp_opn.gif 133 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxmsc_cls.gif 99 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxmsc_opn.gif 99 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxtrain_cls.gif 915 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxtrain_opn.gif 915 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxwiz_cls.gif 127 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\ctxwiz_opn.gif 127 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\HTMLMARQ.OCX 81920 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\HTMLMM.OCX 110592 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CONTEXT.XML 615 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CSDEBUG.XML 166212 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\CSENVIR.XML 231732 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\MSDNTRN.XML 180 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\1033\OFFICE.XML 274823 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\HTML\XMLLINKS\DEF_CTX.XML 182 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\ANALYS32.XLL 186944 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\ATPVBAEN.XLA 376832 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\FUNCRES.XLA 77824 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\Analysis\PROCDB.XLA 117248 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\EUROTOOL.XLA 638976 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\HTML.XLA 36352 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\LOOKUP.XLA 380416 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER\SOLVER.XLA 485888 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Library\SOLVER\SOLVER32.DLL 84544 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\Library\SUMIF.XLA 366592 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MACROS\SUPPORT.DOT 243118 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\APPLAUSE.WAV 28074 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\ARROW.WAV 23030 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\BOMB.WAV 194166 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\BREEZE.WAV 4290 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CAMERA.WAV 5524 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CASHREG.WAV 7551 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CHIMES.WAV 37310 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\CLICK.WAV 616 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\COIN.WAV 5564 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\DRUMROLL.WAV 19426 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\EXPLODE.WAV 23584 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\HAMMER.WAV 4028 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\LASER.WAV 1837 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\PUSH.WAV 15748 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\SUCTION.WAV 5732 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\TYPE.WAV 4636 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\VOLTAGE.WAV 13766 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\WHOOSH.WAV 1758 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\MEDIA\WIND.WAV 11140 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\Migration\MIGRATE.DLL 15928 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Currency Rates.iqy 205 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Major Indicies.iqy 321 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\QUERIES\MSN MoneyCentral Investor Stock Quotes.iqy 307 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\SAMPLES\SOLVSAMP.XLS 118784 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CMDDEFUI.DLL 192512 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\compsvcspkgui.dll 8704 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CSSMetaData.xml 14571 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\CSSPKGUI.DLL 40960 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\DISCO.XSL 4679 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\EMPTY.HTM 500 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\HelpWatermark.htm 1643 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\htmdlgsUI.dll 22528 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\HTMEDUI.DLL 143360 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\MSDBGUI.DLL 16384 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\MSENVUI.DLL 204800 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\VisualStudioTeamCoreUI.dll 12800 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\vsbrowseUI.dll 32768 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\1033\vsdebugui.dll 86016 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\ATL70.DLL 64512 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CMDDEF.DLL 36864 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\Compsvcspkg.dll 106496 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CSSMetaDataSchema.xml 2181 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\CSSPKG.DLL 200704 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\DISCO.GIF 234 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\HTMDLGS.DLL 126976 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\HTMED.DLL 909312 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSENV.DLL 3035136 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSVCP70.DLL 487424 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\MSVCR70.DLL 344064 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMA.GIF 232 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTM32DOM.TLB 17828 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTM40DOM.TLB 731688 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTML32.XSD 79259 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\HTML40.XSD 177943 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\NSC40DOM.TLB 23244 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\HTML\NSCP40.XSD 108380 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML 0 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\adrotator.xsd 1465 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\ASP.XSD 70215 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\WSHMETA.XSD 2481 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SCHEMAS\XML\xsdschema.xsd 15876 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\scriptle2.dll 122880 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SDM2.DLL 143360 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\SERVICE.GIF 256 bytes
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\TRIDSN.DLL 311296 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VisualStudioTeamCore.dll 356352 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSBROWSE.DLL 212992 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSDEBUG.DLL 589824 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\VS Runtime\VSTLBINF.DLL 224256 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\XLATORS\PP4X322.DLL 430136 bytes executable
    File C:\Program Files\Microsoft Office\OFFICE11\XLATORS\PP7X32.DLL 93752 bytes executable
    File C:\Program Files\Microsoft Office\Office12\1033 0 bytes
    File C:\Program Files\Microsoft Office\Office12\1033\PPINTL.DLL 925488 bytes executable
    File C:\Program Files\Microsoft Office\Office12\1033\PPVWINTL.DLL 337728 bytes executable
    File C:\Program Files\Microsoft Office\Office12\1033\PROTTPLN.PPT 12288 bytes
    File C:\Program Files\Microsoft Office\Office12\1033\PROTTPLV.PPT 12288 bytes
    File C:\Program Files\Microsoft Office\Office12\1033\PVREADME.HTM 4444 bytes
    File C:\Program Files\Microsoft Office\Office12\INTLDATE.DLL 78648 bytes executable
    File C:\Program Files\Microsoft Office\Office12\OART.DLL 14151456 bytes executable
    File C:\Program Files\Microsoft Office\Office12\OARTCONV.DLL 8423224 bytes executable
    File C:\Program Files\Microsoft Office\Office12\PPCNV.DLL 1764112 bytes executable
    File C:\Program Files\Microsoft Office\Office12\PPCNVCOM.EXE 67920 bytes
    File C:\Program Files\Microsoft Office\Office12\PPCNVPXY.DLL 17680 bytes executable
    File C:\Program Files\Microsoft Office\Office12\PPCPRTID.XML 79772 bytes
    File C:\Program Files\Microsoft Office\Office12\PPTVIEW.EXE 2012480 bytes executable
    File C:\Program Files\Microsoft Office\Office12\pptview.exe.manifest 804 bytes
    File C:\Program Files\Microsoft Office\Office12\SAEXT.DLL 291128 bytes
    File C:\Program Files\Microsoft Office\PowerPoint Viewer\GDIPLUS.DLL 1773568 bytes executable
    File C:\Program Files\Microsoft Office\PowerPoint Viewer\INTLDATE.DLL 64064 bytes executable
    File C:\Program Files\Microsoft Office\PowerPoint Viewer\PPTVIEW.EXE 1782840 bytes executable
    File C:\Program Files\Microsoft Office\PowerPoint Viewer\PPVWINTL.DLL 159808 bytes executable
    File C:\Program Files\Microsoft Office\PowerPoint Viewer\PVREADME.HTM 4189 bytes
    File C:\Program Files\Microsoft Office\PowerPoint Viewer\SAEXT.DLL 211512 bytes
    File C:\Program Files\Microsoft Office\PowerPoint Viewer\UNICOWS.DLL 246424 bytes executable
    File C:\Program Files\Microsoft Office\Stationery\1033 0 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.GIF 5999 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.HTM 548 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.GIF 46 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.HTM 483 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.GIF 3382 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM 507 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.GIF 4039 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.HTM 513 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM 493 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.JPG 2950 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.GIF 4610 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.HTM 469 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.GIF 1115 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM 476 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.HTM 489 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.JPG 3981 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.HTM 509 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.JPG 6281 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.GIF 2074 bytes
    File C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.HTM 474 bytes
    File C:\Program Files\Microsoft Office\Templates\1033 0 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Agenda Wizard.Wiz 409681 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Balance Sheet.xlt 22016 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Batch Conversion Wizard.Wiz 264251 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Brainstorming Session.pot 63488 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Brochure.dot 104319 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Business Plan.pot 72192 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Calendar Wizard.Wiz 402695 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Certificate.pot 54784 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Company Handbook.pot 72192 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Company Meeting.pot 166400 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Fax.dot 98765 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Letter.dot 81166 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Memo.dot 74725 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Report.dot 138954 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Contemporary Resume.dot 87969 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\CONTMADR.DOT 70380 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\CONTMFAX.DOT 85827 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Directory.dot 65778 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Elegant Fax.dot 91545 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Elegant Letter.dot 66986 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Elegant Memo.dot 58432 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Elegant Report.dot 95027 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Elegant Resume.dot 98202 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\ELEGMADR.DOT 68148 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\ELEGMFAX.DOT 82073 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\ELEGMLTR.DOT 63126 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Employee Orientation.pot 169472 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\ExpenseStatement.xlt 28672 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\FAX 0 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\FAX\Business Fax.dot 40960 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\FAX\Personal Fax.dot 69120 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\FAX\Standard Fax.dot 38400 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Fax Wizard.wiz 595049 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Financial Overview.pot 118784 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Generic.pot 41472 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Group Home Page.pot 87552 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\LABEL.WIZ 97088 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Letter Wizard.wiz 103029 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Loan Amortization.xlt 140800 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\MAIL.OFT 12288 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Manual.dot 107210 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Memo Wizard.wiz 438872 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\MERGELTR.DOT 58708 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Pleading Wizard.wiz 732950 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\PLEADSUB.WIZ 308624 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Products And Services Overview.pot 69632 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Professional Fax.dot 94231 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Professional Letter.dot 76670 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Professional Memo.dot 75821 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Professional Report.dot 116992 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Professional Resume.dot 77519 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\PROFMADR.DOT 69759 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\PROFMFAX.DOT 86389 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\PROFMLTR.DOT 62437 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Project Overview.pot 69632 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Project Post-Mortem.pot 61440 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Recommending A Strategy.pot 41984 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Reporting Progress or Status.pot 88064 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Resume Wizard.wiz 456741 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Sales Invoice.xlt 27648 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Selling a Product or Service.pot 87040 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Thesis.dot 85337 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Timecard.xlt 24576 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Training.pot 74240 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Communicating Bad News.pot 68608 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\CONTMLTR.DOT 72710 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Envelope Wizard.wiz 89380 bytes
    File C:\Program Files\Microsoft Office\Templates\1033\Marketing Plan.pot 81920 bytes
    File C:\Program Files\Microsoft Office\Templates\MseNewFileItems 0 bytes
    File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\HTMLPAGE.HTM 227 bytes
    File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\NewFileItems.vsdir 166 bytes
    File C:\Program Files\Microsoft Office\Templates\MseNewFileItems\TEXTFILE.TXT 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Echo.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Axis.pot 25600 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Balance.pot 65536 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Balloons.pot 49152 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Beam.pot 107008 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Blends.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Capsules.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Cascade.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Cliff.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Clouds.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Compass.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Competition.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Crayons.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Curtain Call.pot 0 bytes
    File C:\Program Files\Microsoft Office\Templates\Presentation Designs\Digital Dots.pot 0 bytes

    ---- EOF - GMER 1.0.15 ----
     
  2. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,192
    First Name:
    Derek
    ignore those error messages
    Some time during the next 6 months or so Microsoft update will replace those files with versions with the correct digital signatures
    It was all down to a digitally signed certificate being withdrawn by Microsoft recently, so a lot of files that were signed using that certificate, flag as invalid by some antiviruses & scanning tools
    They are fine so don't do anything
     
  3. mjpinpgh

    mjpinpgh Thread Starter

    Joined:
    Nov 11, 2011
    Messages:
    4
    Ok, thanks for the quick response. I appreciated it.

    MJ
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1075454

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice