System Restore and Search File feature not working

[PartyBoy]

Hi

Having trouble with various things that have occured similtaneously. I'm running XP

Firstly, when I click "Help and Support" from the start menu, nothing is happening so I can't access System Restore? I've also tried accessing through Start\All programs\Accessories\System Tools and all that appears is a blank white window with System Restore in the bar at the top.

Secondly, I've noticed that the Search (files & folders etc) function is not working properly. When I click Start\Search the window opens and the dog appears but no options to search for anything??


Also, I think some IE options have gone haywire as I use a forum daily and log in without issue, though now I cannot log in and I receive a screen stating that my cookie handling or JavaScript is not enabled.

I've done a hijack this log:

Logfile of HijackThis v1.99.1
Scan saved at 17:13:43, on 22/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe
C:\Program Files\PopUp Killer\PopUpKiller.EXE
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NVTray\NVTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
C:\WINDOWS\system32\HPZinw12.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://by110fd.bay110.hotmail.msn.com/c ... 2831ac33aa
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [PopUpKiller] C:\Program Files\PopUp Killer\PopUpKiller.EXE
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [SunServer] C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVTray] C:\Program Files\NVTray\NVTray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.meshcomputers.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {210D0CBC-8B17-48D1-B294-1A338DD2EB3A} (VatCtrl Class) - http://61.66.158.124:1025/VatDec.cab
O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex ... 0-3-30.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/r ... nPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2627826703
O16 - DPF: {DBFECB3F-B78F-442E-AE46-4952E6F17545} (Bonusprint Image Uploader Version 3.5) - http://webalbum.bonusprint.com/ukipc01/ ... oader3.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

[Gecko]

Hi PartyBoy,

Your log is clean
That is not to say that you are not infected with something.

I don't see an active anti virus program running and that is not good.
I see evidence of Kaspersky anti virus having been installed but I don't see it actively running.

Let's see what else is being started on bootup
[b]Start HijackThis and click the "Open the misc tools section" near the top find the "StartupList" section
Put a check next to "List also minor sections (full)" and click the button "Generate StartupList log"
Copy and paste the contents of the startup log into your reply to this thread.

[PartyBoy]

Hi

Thanks for the prompt reply. I did until a few days ago have Kaspersky installed and upto date with DAT's. The licence expired so I uninstalled and am going to install Avast.

Here's the startup list:


StartupList report, 23/12/2006, 11:04:05
StartupList version: 1.52.2
Started from : C:\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v7.00 (7.00.5730.0011)
* Using default options
* Showing rarely important sections
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\PopUp Killer\PopUpKiller.EXE
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NVTray\NVTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
C:\WINDOWS\system32\HPZinw12.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

PopUpKiller = C:\Program Files\PopUp Killer\PopUpKiller.EXE
DiskeeperSystray = "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
SunServer = C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunserver.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
NVTray = C:\Program Files\NVTray\NVTray.exe

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] *
StubPath = C:\WINDOWS\system32\ieudinit.exe

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}] *
StubPath = C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = C:\WINDOWS\system32\ie4uinit.exe -BaseSettings

[{89B4C1CD-B018-4511-B0A1-5476DBF70820}] *
StubPath = C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=C:\WINDOWS\system32\logon.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
C:\WINDOWS\Fonts\Explorer.exe: not present

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

--------------------------------------------------

Enumerating Task Scheduler jobs:

1-Click Maintenance.job
AppleSoftwareUpdate.job
McDefragTask.job
McQcTask.job

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave ActiveX Control]
InProcServer32 = C:\WINDOWS\system32\macromed\Director\SwDir.dll
CODEBASE = http://download.macromedia.com/pub/shoc ... tor/sw.cab

[Windows Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll
CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204

[VatCtrl Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\VATDecoder.dll
CODEBASE = http://61.66.158.124:1025/VatDec.cab

[Microsoft PID Sniffer]
InProcServer32 = C:\WINDOWS\system32\odc.dll
CODEBASE = https://support.microsoft.com/OAS/ActiveX/odc.cab

[EPUImageControl Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\EPUWALcontrol.dll
CODEBASE = http://tools.ebayimg.com/eps/wl/activex ... 0-3-30.cab

[MSN Photo Upload Tool]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll
CODEBASE = http://by110fd.bay110.hotmail.msn.com/r ... nPUpld.cab

[MUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\muweb.dll
CODEBASE = http://update.microsoft.com/microsoftup ... 2627826703

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx
CODEBASE = http://fpdownload.macromedia.com/get/fl ... wflash.cab

[Bonusprint Image Uploader Version 3.5]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\ImageUploader3.ocx
CODEBASE = http://webalbum.bonusprint.com/ukipc01/ ... oader3.cab

--------------------------------------------------

Enumerating Windows NT/2000/XP services

Acronis Scheduler2 Service: "C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe" (autostart)
Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Kaspersky Internet Security 6.0: "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (autostart)
Computer Browser: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
DCOM Server Process Launcher: %SystemRoot%\system32\svchost -k DcomLaunch (autostart)
DHCP Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Diskeeper: "C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe" (autostart)
DNS Client: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart)
Event Log: %SystemRoot%\system32\services.exe (autostart)
Fax: %systemroot%\system32\fxssvc.exe (autostart)
Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
HID Input Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Server: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
TCP/IP NetBIOS Helper: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)
NVIDIA Display Driver Service: %SystemRoot%\system32\nvsvc32.exe (autostart)
Plug and Play: %SystemRoot%\system32\services.exe (autostart)
Pml Driver HPZ12: C:\WINDOWS\system32\HPZipm12.exe (autostart)
IPSEC Services: %SystemRoot%\system32\lsass.exe (autostart)
Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)
Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)
Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)
Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Secdrv: system32\DRIVERS\secdrv.sys (autostart)
Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Windows Firewall/Internet Connection Sharing (ICS): %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)
System Restore Service: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
StarWind iSCSI Service: C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe (autostart)
Windows Image Acquisition (WIA): %SystemRoot%\system32\svchost.exe -k imgsvc (autostart)
Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Acronis True Image FS Filter: system32\DRIVERS\tifsfilt.sys (autostart)
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Ulead Burning Helper: C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (autostart)
Windows User Mode Driver Framework: C:\WINDOWS\system32\wdfmgr.exe (autostart)
Windows Time: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
WebClient: %SystemRoot%\system32\svchost.exe -k LocalService (autostart)
Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Security Center: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Automatic Updates: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)


--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\system32\webcheck.dll
SysTray: C:\WINDOWS\system32\stobject.dll

--------------------------------------------------
End of report, 13,320 bytes
Report generated in 0.125 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

[PartyBoy]

Also, as well as the forum I cannot log into my username (though I can view the site), I've noticed that I cannot log into my hotmail account. The screen just goes white with "done" at the bottom after I enter my addy and pword.

I use a laptop on the same network via a router and I can log into both no problem, so it looks like some IE settings have been messed up on the desktop?

(I can log into this forum fine on the desktop incidentally)

[Gecko]

PartyBoy,

I don't see anything bad being loaded at startup.

You really do need an anti virus program install I would suggest
Install it, update it, and run a full system scan.

Next try to repair IE by going to start > control panel > add remove programs > Microsoft Internet Explorer Change/remove button and select repair.

If doing both of these does not resolve the problems then we will have to scan for a root kit

[PartyBoy]

I've installed AVG and scanned and its clean.

I've reinstalled IE7 but the probs re hotmail/forum still persists

[Gecko]

Please download and extrtact it to a new folder on your desktop.

Double-click on the file Silent Runners.vbs.
It will ask you if you want to skip the supplementary searchs -- click 'No'
Please wait while the script runs (it takes between 2 and 5 minutes).

Once it completes, a textbox will appear and the folder you launched SilentRunners will have a text file in it called,
"Startup Programs (ComputerName)[Date].txt". Please post the information from that file here.

[PartyBoy]

When I double click the silent runners vbs file I get an small error window:

Windows Script Host (in the bar at the top)

A big red X then: "Can't find the script engine "VBScript" for script "C:\Silent Runners\Silent Runners.vbs".

[Gecko]

That an error I've never seen before from Silent Runners, usually its and anti virus warning.

Let's try RootkitRevealer it has a better system for avoiding termination by an outside program.

Please download and extract it to it's own folder in the root like this:
C:/RootkitRevealer/(files)

Close all other open windows
Double click the C:/RootkitRevealer/RootkitRevealer.exe file click accept twice and then click the scan button.
This will take a long time to finish about 5 -20 minutes do not use your computer while it is scanning.

When the scan is complete save the discrepancy list to a text file and post it into this thread.

[PartyBoy]

879 discrepanices found. Doesn't sound too great



HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1003\Filename 30/08/2006 18:41 15 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1003\Description 30/08/2006 18:41 25 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1004\Filename 30/08/2006 18:43 15 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1004\Description 30/08/2006 18:43 25 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1005\Filename 30/08/2006 18:47 15 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1005\Description 30/08/2006 18:47 25 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1006\Filename 30/08/2006 18:48 15 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-163891133-564687316-1147562473-1006\Control Panel\Microsoft Input Devices\Mouse\Exceptions\1006\Description 30/08/2006 18:48 25 bytes Data mismatch between Windows API and raw hive data.
HKLM\SECURITY\Policy\Secrets\SAC* 25/11/2005 09:12 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 25/11/2005 09:12 0 bytes Key name contains embedded nulls (*)
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg 17/06/2006 13:29 0 bytes Access is denied.
C:\Diskeeper\IFaastMon.dat:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Application Data\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Acronis True Image Home 9.0.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Ad-Aware SE Professional.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Ad-Watch SE Professional.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Alcohol 120%.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Battlefield 2142.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Call Of Duty.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\CounterSpy.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\DVD Architect Studio 2.0.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\DVDit Pro 6.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Launch ToCA Race Driver 3..lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Medal of Honor Allied Assault.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Microsoft Keyboard.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Microsoft Mouse.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Oblivion.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Prey.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Tomb Raider - Legend.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Ulead VideoStudio 8.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Vegas Movie Studio 4.0.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Desktop\Winamp.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Documents\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Documents\My Music\Desktop.ini:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Documents\My Pictures\Desktop.ini:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Documents\My Videos\Desktop.ini:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\HP Solution Center.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Microsoft Update.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Accessibility\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Communications\Fax\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Entertainment\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\System Tools\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Encore DVD 1.0.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Encore DVD 2.0.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Help Center.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Photoshop CS2.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Apple Software Update.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Excel.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\RealPlayer.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Programs\SyncToy.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Adobe Encore DVD 2.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Ashampoo PowerUp XP Platinum.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Ashampoo WinOptimizer Platinum 3.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Avi2Dvd.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\BayGenie.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\BitLord.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\BPS Spyware Remover.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Cars.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\dBpowerAMP Music Converter.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\dMC Audio CD Input.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\DMW Client 3.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\DVD Decrypter.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\DVD Shrink 3.2.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Excel.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\GameSpy Arcade.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\PConPoint.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\PowerISO.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Search and Recover 3.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Shortcut to HP DeskJet 6980 series.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Spybot - Search & Destroy.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\TMPGEnc DVD Author 1.6.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Track Designer.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\TuneUp Utilities 2006.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\VideoInspector.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Word.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Desktop\Your Uninstaller! 2006.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Favorites\Desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Local Settings\History\desktop.ini:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Local Settings\Temp\Acr2310.tmp 24/12/2006 17:41 1.95 MB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Julian\Local Settings\Temp\Acr2312.tmp 24/12/2006 17:41 414 bytes Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\Julian\My Documents\desktop.ini:KAVICHS 23/12/2006 20:40 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Start Menu\Programs\Accessories\Accessibility\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Start Menu\Programs\Accessories\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Start Menu\Programs\Accessories\Entertainment\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Start Menu\Programs\Administrative Tools\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Start Menu\Programs\desktop.ini:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Start Menu\Programs\Startup\desktop.ini:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Documents and Settings\Julian\Start Menu\Programs\Windows Media Player.lnk:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Adobe\Acrobat 7.0\ActiveX\pdfshell.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Common Files\Kaspersky Lab\key.ico:KAVICHS 18/12/2006 10:55 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\Microsoft Shared\Office10\MSO.DLL:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\ado\msado15.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\directdb.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\msadc\msadce.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\msadc\msadcer.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\msadc\msadco.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\msadc\msdaprst.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\Ole DB\oledb32.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\Ole DB\oledb32r.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Common Files\System\wab32.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\1033\DkRes.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\Diskeep.ctl:KAVICHS 24/12/2006 17:27 36 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe:KAVICHS 24/12/2006 10:35 68 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\DkLib.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\DkTabProvider.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\GetFATExtents.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\msvcr71.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Diskeeper Corporation\Diskeeper\Tab.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpftra08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpocxi08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpoddcomm09.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpodio08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpodvd09.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpotradd.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqcob08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqmfc09.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqsem08.rsc:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqste08.rsc:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqsti08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqstp08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqtap08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:KAVICHS 24/12/2006 10:35 68 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprbutil.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Illustrate\dBpowerAMP\dBShell.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\iPod\bin\iPodService.exe:KAVICHS 24/12/2006 10:30 68 bytes Hidden from Windows API.
C:\Program Files\Microsoft IntelliPoint\point32.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Microsoft IntelliType Pro\Type32.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Microsoft Office\Office10\MCPS.DLL:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\NVTray\NVTray.exe:KAVICHS 24/12/2006 17:27 68 bytes Hidden from Windows API.
C:\Program Files\Outlook Express\msoe.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\Outlook Express\setup50.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Outlook Express\wabimp.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\Program Files\PopUp Killer\fgeo.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\PopUp Killer\PopUpKiller.exe:KAVICHS 24/12/2006 17:27 100 bytes Hidden from Windows API.
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunExecuteHook.dll:KAVICHS 22/12/2006 13:23 36 bytes Hidden from Windows API.
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunProtectionServer.exe:KAVICHS 24/12/2006 10:33 36 bytes Hidden from Windows API.
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SunServer.exe:KAVICHS 24/12/2006 18:20 100 bytes Hidden from Windows API.
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\sunThreatEngine.exe:KAVICHS 24/12/2006 10:33 36 bytes Hidden from Windows API.
C:\Program Files\Sunbelt Software\CounterSpy\Consumer\SWRes.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Windows Media Connect\mswmccds.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Windows Media Connect\mswmcls.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\Program Files\Windows Media Player\npdsplay.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\Program Files\Windows Media Player\setup_wm.exe:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136566.ini:KAVICHS 18/12/2006 10:53 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136568.sys:KAVICHS 18/12/2006 10:57 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136569.sys:KAVICHS 18/12/2006 10:57 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136572.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136573.cfg:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136574.dt:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136576.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136592.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136593.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136594.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136595.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136596.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136605.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136609.exe:KAVICHS 18/12/2006 10:57 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136610.exe:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136612.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136613.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136614.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136615.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136618.dll:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136628.ini:KAVICHS 18/12/2006 10:57 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136630.dll:KAVICHS 18/12/2006 10:58 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP323\A0136635.sdb:KAVICHS 18/12/2006 10:59 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP329\A0143424.ini:KAVICHS 22/12/2006 16:52 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP330\A0143443.exe:KAVICHS 22/12/2006 17:54 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP333\A0143506.exe:KAVICHS 22/12/2006 17:55 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143659.dll:KAVICHS 23/12/2006 10:56 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143661.dll:KAVICHS 23/12/2006 10:56 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143663.exe:KAVICHS 23/12/2006 10:56 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143668.dll:KAVICHS 23/12/2006 10:56 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143677.dll:KAVICHS 23/12/2006 10:56 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143679.dll:KAVICHS 23/12/2006 10:56 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143681.dll:KAVICHS 23/12/2006 10:56 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143683.dll:KAVICHS 23/12/2006 10:56 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143684.dll:KAVICHS 23/12/2006 10:56 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143820.dll:KAVICHS 23/12/2006 20:32 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143826.exe:KAVICHS 23/12/2006 20:32 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143830.dll:KAVICHS 23/12/2006 20:32 68 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143848.dll:KAVICHS 23/12/2006 20:32 36 bytes Hidden from Windows API.
C:\System Volume Information\_restore{54C7A4C0-672A-400F-89D3-264781F4E928}\RP334\A0143861.dll:KAVICHS 23/12/2006 20:32 68 bytes Hidden from Windows API.
C:\WINDOWS\AppPatch\AcGenral.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\AppPatch\drvmain.sdb:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\AppPatch\sysmain.sdb:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\4c84c9a240acd64e87258478a4b2e588\mscorlib.ni.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\3f3b095dd33f3d45b91d823c40a2b1dc\System.Drawing.ni.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\100ad0859a44cc41b4dfffe0bff62e03\System.Windows.Forms.ni.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\3b753699fc92be42919dd1d555304732\System.ni.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\explorer.exe:KAVICHS 24/12/2006 18:19 100 bytes Hidden from Windows API.
C:\WINDOWS\Help\SBSI\Training\orun32.exe:KAVICHS 24/12/2006 17:57 36 bytes Hidden from Windows API.
C:\WINDOWS\hh.exe:KAVICHS 24/12/2006 18:19 36 bytes Hidden from Windows API.
C:\WINDOWS\inf\unregmp2.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\Installer\28f9f6.msi:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Media\Windows XP Balloon.wav:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\System.Web.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\System.Web.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\msagent\agentdp2.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\msagent\agentdpv.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\msagent\agentsvr.exe:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\Registration\R000000000010.clb:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb:KAVICHS 24/12/2006 17:33 36 bytes Hidden from Windows API.
C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk:KAVICHS 24/12/2006 17:33 36 bytes Hidden from Windows API.
C:\WINDOWS\SoftwareDistribution\EventCache\{7C3FD057-3592-46EE-A0AC-5ADD71A87778}.bin:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log:KAVICHS 24/12/2006 17:29 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\6to4svc.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\aasc32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\AC3ACM.acm:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\activeds.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\actxprxy.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\adsldpc.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\advapi32.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\alg.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\apphelp.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\asycfilt.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\atl.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\Audiodev.dll:KAVICHS 24/12/2006 17:52 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\audiosrv.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\authz.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\autochk.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\basesrv.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\batmeter.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\bootvid.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\browser.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_1254.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_1255.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_1256.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_874.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_932.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_936.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_949.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\c_950.nls:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\cabinet.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\catsrv.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\catsrvut.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\cdosys.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\certcli.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\cfgmgr32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\ciodm.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\cisvc.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\clbcatex.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\clbcatq.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\clipsrv.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\clusapi.dll:KAVICHS 18/12/2006 10:50 100 bytes Hidden from Windows API.
C:\WINDOWS\system32\cnbjmon.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\colbact.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\Com\comadmin.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\comctl32.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\comdlg32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\COMDLG32.OCX:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\comm.drv:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\comrepl.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\comres.dll:KAVICHS 24/12/2006 17:52 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\comsvcs.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\comuid.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\desktop.ini:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\credui.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\crypt32.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\cryptdll.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\cryptsvc.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\cryptui.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\cscdll.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\cscui.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\csrsrv.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\csrss.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\ctfmon.exe:KAVICHS 24/12/2006 10:35 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\ctype.nls:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\davclnt.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\dhcpcsvc.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\DivX.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\DivXa32.acm:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\DivXc32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\DivXc32f.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\dllhost.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\dmadmin.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\dnsapi.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\dnsrslvr.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ABP480N5.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\acpi.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\adpu160m.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\aec.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\afd.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\AGP440.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\AGPCPQ.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\aha154x.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\aic78u2.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\aic78xx.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\aliide.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ALIM1541.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\AMDAGP.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\amsint.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\arp1394.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ASACPI.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\asc.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\asc3350p.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\asc3550.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\asyncmac.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\atapi.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\atmarpc.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\audstub.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\cbidf2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\cd20xrnt.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\cdrom.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\cmdide.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\cpqarray.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ctac32k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ctaud2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ctdvda2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ctoss2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ctprxy2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ctsfm2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\dac2w2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\dac960nt.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\disk.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\dmboot.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\dmio.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\dmload.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\DMusic.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\dpti2o.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\drmkaud.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\dtscsi.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\emupia2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\enum1394.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\etc\services:KAVICHS 18/12/2006 10:52 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\Fasttx2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\fdc.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\fltmgr.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ftdisk.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\gameenum.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ha20x2k.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\hidusb.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\hpn.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\http.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\i2omp.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\i8042prt.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\iaStor.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\imapi.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ini910u.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\intelide.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ip6fw.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ipfltdrv.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ipinip.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ipnat.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ipsec.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\irenum.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\isapnp.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\kbdclass.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\kbdhid.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\klif.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\Klpf.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\Klpid.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\kmixer.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\m5287.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\m5289.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\mouclass.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\mouhid.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\mraid35x.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\mrxdav.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\mrxsmb.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\msgpc.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\MSKSSRV.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\msmpu401.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\MSPCLOCK.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\MSPQM.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\mssmbios.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ndistapi.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ndisuio.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ndiswan.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\netbios.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\netbt.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\nic1394.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\nv4_mini.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\nwlnkflt.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\nwlnkfwd.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ohci1394.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\parport.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\pci.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\pciide.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\perc2.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\perc2hib.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\pfc.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\point32.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\processr.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\psched.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ptilink.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\pxhelp20.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ql1080.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ql10wnt.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ql12160.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ql1240.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ql1280.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\rasacd.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\rasl2tp.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\raspppoe.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\raspptp.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\raspti.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\rdbss.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\rdpcdd.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\rdpdr.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\rdpwd.sys:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\redbook.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\rmcast.sys:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sbp2port.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\secdrv.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\serenum.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\serial.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sfcure01.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sfdrv01.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sfhlp02.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sfloppy.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sfsync02.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sfsync03.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\Si3132r5.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\SISAGP.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\SiWinAcc.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\snapman.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sparrow.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\splitter.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sptd.sys:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sr.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\srv.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\swenum.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\swmidi.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sym_hi.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sym_u3.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\symc810.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\symc8xx.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\sysaudio.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\tcpip.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\tcpip6.sys:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\termdd.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\tifsfilt.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\timntr.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\toside.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ultra.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\update.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\USBAUDIO.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\usbccgp.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\usbehci.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\usbhub.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\usbohci.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\usbprint.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\usbscan.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\USBSTOR.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\vaxscsi.sys:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\vga.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\VIAAGP.SYS:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\viaide.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\viamraid.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\wanarp.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\wdmaud.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\WmBEnum.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\WmFilter.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\WmVirHid.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\WmXlCore.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\ws2ifsl.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drivers\yk51x86.sys:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\drprov.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\drwtsn32.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\dssenh.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\dxmasf.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\es.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\esent.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\eventlog.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\ff_vfw.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\flccodec32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\fltlib.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\fltmc.exe:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\fontsub.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\fxsapi.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\fxsevent.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\fxsmon.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\fxsst.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\fxssvc.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\gdi32.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\geo.nls:KAVICHS 18/12/2006 10:51 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\h323.tsp:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hal.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\hhctrl.ocx:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hhsetup.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hid.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\hidphone.tsp:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hidserv.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hlink.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hnetcfg.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPTcpMib.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPTcpMon.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPTcpMUI.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hpz3l43a.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPZidr12.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPZinw12.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPZipm12.exe:KAVICHS 22/12/2006 13:22 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPZipr12.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPZipt12.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\HPZisn12.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hpzjrd01.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hRef.ocx:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\httpapi.dll:KAVICHS 18/12/2006 10:50 100 bytes Hidden from Windows API.
C:\WINDOWS\system32\HUFFYUV.DLL:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\hypertrm.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\iac25_32.ax:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\icaapi.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\iccvid.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\icm32.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\imaadp32.acm:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\imagehlp.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\imapi.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\imm32.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\inetcomm.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\inetpp.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\ipconf.tsp:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\iphlpapi.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\ipnathlp.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\ipsecsvc.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\ir32_32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\ir41_32.ax:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\ir50_32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\itircl.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\itss.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\iuengine.dll:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\iyuv_32.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\jgdw400.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\jgpl400.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\kerberos.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\kernel32.dll:KAVICHS 18/12/2006 10:49 100 bytes Hidden from Windows API.
C:\WINDOWS\system32\keyboard.drv:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\kmddsp.tsp:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\l3codeca.acm:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\LegitCheckControl.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\Line3D.ocx:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\linkinfo.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\lmhsvc.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\locale.nls:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\localspl.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\locator.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\lsasrv.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\lsass.exe:KAVICHS 24/12/2006 10:33 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\Macromed\Flash\Flash.ocx:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\Macromed\Flash\swflash.ocx:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\MD5.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\mfc42.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\mgmtapi.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\midimap.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mlang.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mmdrv.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mmsystem.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mnmsrvc.exe:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mouse.drv:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mpr.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mprapi.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\MRT.exe:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\msacm32.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\msacm32.drv:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\msadp32.acm:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\msasn1.dll:KAVICHS 18/12/2006 10:49 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\msaud32.acm:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mscms.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\MSCOMCTL.OCX:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\mscoree.dll:KAVICHS 18/12/2006 10:50 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\MSCTF.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Windows API.
C:\WINDOWS\system32\MSCTFIME.IME:KAVICHS 18/12/2006 10:49 36 bytes Hidden from Windows API.
C:\WINDOWS\system32\msdart.dll:KAVICHS 18/12/2006 10:50 68 bytes Hidden from Wind

[Gecko]

Download the utility
Unzip the archive to the root of the your C: drive like this C:\ KLstreamremover.exe
Now click Start > run and type;
cmd and press enter

next type:
cd c:\ (note the space between cd and c:\) and press enter

now type:
KLStreamRemover.exe -r (note the space between .exe and –r) and press enter

Wait for the process to complete, you will know when the command box returns to C:\
Reboot your system and see if it's fixed

[PartyBoy]

That completed ok but all of the faults are still present after the re-boot.

(Merry Christmas!)

[Gecko]

PartyBoy,

By chance did you install a Multilingual User Interface Pack (MUI)?

[PartyBoy]

I don't think so. Not sure what that is tbh.

Do you think I might need a complete windows re-install?

oh, I've decided to buy another licence key from Kaspersky for their Internet Secuity suite. I downloaded the program from their site (kis6.0.1.411en.exe) but it fails the install?!

An error message greets me before it finishes installing:

Installer Information (in the top bar)

Error 1316. A network error occured while attempting to read from the file
C:\KAV\KasperskyIS6.0.411update\english\kis6.0.0.303en.msi

[Gecko]