Here are results for DDS:
DDS (Ver_09-12-01.01) - NTFSX64
Run by LJM at 12:57:31.10 on Sun 12/20/2009
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3933.2598 [GMT -5:00]
============== Running Processes ===============
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe
C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Program Files (x86)\DDNI\DIBS\DDNIService.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
C:\Windows\Explorer.EXE
C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Lenovo\HOTKEY\tpfnf6r.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\TpShocks.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
C:\Program Files (x86)\DDNI\Lenovo Idea Notes\DDNIMSGUser.exe
C:\Program Files (x86)\Maxtor\OneTouch\Utils\OneTouch.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\SearchIndexer.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10d.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\Program Files (x86)\DDNI\Lenovo Idea Notes\DDNIMSGService.exe
C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Users\LJM\Downloads\dds.scr
C:\Windows\system32\conhost.exe
============== Pseudo HJT Report ===============
uSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*
Yahoo!
uStart Page = hxxp://www.yahoo.com/
uDefault_Page_URL = hxxp://lenovo.msn.com
uSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*
Yahoo! SearchBar Home Page
mDefault_Search_URL = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*
Yahoo!
mDefault_Page_URL = hxxp://www.yahoo.com/
mStart Page = hxxp://www.yahoo.com/
mLocal Page = c:\windows\syswow64\blank.htm
mSearch Page = hxxp://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*
Yahoo!
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*
Yahoo! SearchBar Home Page
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*
Yahoo!
mWinlogon: Userinit=userinit.exe
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files (x86)\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files (x86)\askbardis\bar\bin\askBar.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files (x86)\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files (x86)\windows live\toolbar\wltcore.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files (x86)\windows live\toolbar\wltcore.dll
TB: Foxit Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files (x86)\askbardis\bar\bin\askBar.dll
TB: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File
uRun: [Messenger (Yahoo!)] "c:\progra~2\yahoo!\messen~1\YahooMessenger.exe" -quiet
uRun: [Search Protection] c:\program files (x86)\yahoo!\search protection\SearchProtection.exe
uRun: [msnmsgr] "c:\program files (x86)\windows live\messenger\msnmsgr.exe" /background
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mRun: [PWMTRV] rundll32 c:\progra~2\thinkpad\utilit~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
mRun: [Message Center Plus] c:\program files (x86)\lenovo\message center plus\MCPLaunch.exe /start
mRun: [<NO NAME>]
mRun: [RoxWatchTray] "c:\program files (x86)\common files\roxio shared\10.0\sharedcom\RoxWatchTray10.exe"
mRun: [IdeaNotesUser] c:\program files (x86)\ddni\lenovo idea notes\DDNIMSGUser.exe
mRun: [MaxtorOneTouch] c:\progra~2\maxtor\onetouch\utils\OneTouch.exe
mRun: [QuickTime Task] "c:\program files (x86)\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files (x86)\itunes\iTunesHelper.exe"
mRun: [YSearchProtection] "c:\program files (x86)\yahoo!\search protection\SearchProtection.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files (x86)\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files (x86)\common files\adobe\arm\1.0\AdobeARM.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Evernote - c:\program files (x86)\evernote\evernote3\enbar.dll/2000
IE: E&xport to Microsoft Excel - c:\progra~2\micros~3\office12\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~2\micros~3\office12\REFIEBAR.DLL
IE: {E0B8C461-F8FB-49b4-8373-FE32E9252800} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEE1} - c:\program files (x86)\evernote\evernote3\enbar.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
LSA: Notification Packages = scecli ACGina
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB-X64: Lenovo ThinkVantage Toolbox: {86B9B5DD-FB75-4035-BD52-3C94F7849CAF} - c:\program files\pc-doctor\ATLPcdToolbar544928.dll
TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
TB-X64: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File
mRun-x64: [RtHDVCpl] c:\program files\realtek\audio\hda\RAVCpl64.exe
mRun-x64: [TPHOTKEY] c:\program files\lenovo\hotkey\TPOSDSVC.exe
mRun-x64: [LENOVO.TPFNF6R] c:\program files\lenovo\hotkey\TPFNF6R.exe
mRun-x64: [IAAnotif] c:\program files (x86)\intel\intel matrix storage manager\iaanotif.exe
mRun-x64: [TpShocks] TpShocks.exe
mRun-x64: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun-x64: [Persistence] c:\windows\system32\igfxpers.exe
mRun-x64: [AcWin7Hlpr] c:\program files (x86)\lenovo\access connections\AcWin7Hlpr.exe showdeskband
mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
mRun-x64: [MSSE] "c:\program files\microsoft security essentials\msseces.exe" -hide
================= FIREFOX ===================
FF - ProfilePath - c:\users\ljm\appdata\roaming\mozilla\firefox\profiles\kqjnkzel.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p=
FF - plugin: c:\program files (x86)\mozilla firefox\plugins\NPcol400.dll
FF - plugin: c:\program files (x86)\mozilla firefox\plugins\npCouponPrinter.dll
FF - plugin: c:\program files (x86)\mozilla firefox\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\program files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll
---- FIREFOX POLICIES ----
c:\program files (x86)\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
============= SERVICES / DRIVERS ===============
R?2 RoxWatch10;Roxio Hard Drive Watcher 10;c:\program files (x86)\common files\roxio shared\10.0\sharedcom\RoxWatch10.exe [2009-8-4 166384]
R0 PxHlpa64;PxHlpa64;c:\windows\system32\drivers\PxHlpa64.sys [2009-9-26 55280]
R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM64.sys [2009-6-29 23592]
R1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\drivers\smiifx64.sys [2009-7-16 15400]
R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-6-18 164720]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-13 59904]
R2 DDNIMSGService;DDNIMSGService;c:\program files (x86)\ddni\lenovo idea notes\DDNIMSGService.exe [2009-6-23 172720]
R2 DDNIService;DDNIService;c:\program files (x86)\ddni\dibs\DDNIService.exe [2009-9-26 156336]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\lenovo\hotkey\micmute.exe [2009-9-7 45424]
R2 TPHKSVC;On Screen Display;c:\program files\lenovo\hotkey\TPHKSVC.exe [2009-11-6 62320]
R3 5U877;USB Video Device;c:\windows\system32\drivers\5U877.sys [2009-9-26 161024]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-8-20 138752]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2009-6-7 143320]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2009-6-18 40832]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\drivers\NETw5s64.sys [2009-9-15 6952960]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt64win7.sys [2009-9-26 215040]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-13 17920]
S2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\roxio\digital home 10\RoxioUpnpService10.exe [2009-8-4 362992]
S2 RoxLiveShare10;LiveShare P2P Server 10;c:\program files (x86)\common files\roxio shared\10.0\sharedcom\RoxLiveShare10.exe [2009-8-4 309744]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\drivers\NETw5v64.sys [2009-9-26 5435904]
S3 Power Manager DBC Service;Power Manager DBC Service;c:\program files (x86)\thinkpad\utilities\PWMDBSVC.exe [2009-9-26 75040]
S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\roxio\digital home 10\RoxioUPnPRenderer10.exe [2009-8-4 313840]
S3 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\common files\roxio shared\10.0\sharedcom\RoxMediaDB10.exe [2009-8-4 1124848]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\drivers\VSTAZL6.SYS [2009-7-13 292864]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT6.SYS [2009-7-13 740864]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]
S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\drivers\usbaapl64.sys [2009-8-28 49152]
=============== Created Last 30 ================
2009-12-17 15:29:33 2560 ----a-w- c:\windows\_MSRSTRT.EXE
2009-12-16 04:33:41 0 d-----w- c:\program files (x86)\common files\Symantec Shared
2009-12-15 21:45:49 0 d-----w- c:\program files\Paint.NET
2009-12-15 16:17:42 0 d-----w- c:\programdata\Norton
2009-12-15 15:41:17 0 d-----w- c:\programdata\NortonInstaller
2009-12-14 22:37:37 1732 ----a-w- C:\tvtpktfilter.dat
2009-12-14 21:27:56 65536 --sha-w- c:\users\ljm\NTUSER.DAT{cd5f2ba9-e8f4-11de-8d1b-00269e313fa1}.TM.blf
2009-12-14 21:27:56 524288 --sha-w- c:\users\ljm\NTUSER.DAT{cd5f2ba9-e8f4-11de-8d1b-00269e313fa1}.TMContainer00000000000000000002.regtrans-ms
2009-12-14 21:27:56 524288 --sha-w- c:\users\ljm\NTUSER.DAT{cd5f2ba9-e8f4-11de-8d1b-00269e313fa1}.TMContainer00000000000000000001.regtrans-ms
2009-12-14 21:11:03 0 d-----w- c:\program files (x86)\Microsoft Antimalware
2009-12-14 20:03:16 65536 --sha-w- c:\users\ljm\NTUSER.DAT{457324ab-e8e8-11de-8fec-00269e313fa1}.TM.blf
2009-12-14 20:03:16 524288 --sha-w- c:\users\ljm\NTUSER.DAT{457324ab-e8e8-11de-8fec-00269e313fa1}.TMContainer00000000000000000002.regtrans-ms
2009-12-14 20:03:16 524288 --sha-w- c:\users\ljm\NTUSER.DAT{457324ab-e8e8-11de-8fec-00269e313fa1}.TMContainer00000000000000000001.regtrans-ms
2009-12-14 18:45:50 0 d-----w- c:\program files\Microsoft Security Essentials
2009-12-13 19:27:28 0 d-----w- c:\users\ljm\appdata\roaming\E-centives
2009-12-09 01:38:49 5958656 ----a-w- c:\windows\syswow64\mshtml.dll
2009-12-09 01:38:48 64512 ----a-w- c:\windows\syswow64\msfeedsbs.dll
2009-12-04 21:41:24 0 d-----w- c:\users\ljm\appdata\roaming\EurekaLog
2009-12-04 14:44:00 94 ----a-w- c:\users\ljm\couponmanager.properties
2009-12-02 17:22:28 0 d-----w- c:\users\ljm\appdata\roaming\Foxit Software
2009-11-26 08:01:30 2048 ----a-w- c:\windows\syswow64\tzres.dll
2009-11-26 08:01:30 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-23 20:39:39 0 d-----w- c:\programdata\PC-Doctor for Windows
==================== Find3M ====================
2009-11-12 21:13:32 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2009-11-07 17:31:32 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2009-11-03 01:42:06 226688 ------w- c:\windows\system32\MpSigStub.exe
2009-09-26 08:04:33 72440 ------w- c:\windows\syswow64\pxhpinst.exe
2009-09-26 08:04:33 64760 ------w- c:\windows\syswow64\pxinsa64.exe
2009-09-26 08:04:33 64760 ------w- c:\windows\syswow64\pxcpya64.exe
2009-09-26 08:04:33 510712 ------w- c:\windows\syswow64\pxdrv.dll
2009-09-26 08:04:33 379640 ------w- c:\windows\syswow64\pxwave.dll
2009-09-26 08:04:33 187128 ------w- c:\windows\syswow64\pxmas.dll
2009-09-26 08:04:33 129784 ------w- c:\windows\syswow64\pxafs.dll
2009-09-26 08:04:33 118520 ------w- c:\windows\syswow64\pxinsi64.exe
2009-09-26 08:04:33 116472 ------w- c:\windows\syswow64\pxcpyi64.exe
2009-09-26 08:04:32 547576 ------w- c:\windows\syswow64\px.dll
2009-09-26 08:04:32 1628920 ------w- c:\windows\syswow64\pxsfs.dll
2009-09-26 08:04:31 39672 ------w- c:\windows\syswow64\vxblock.dll
2009-09-26 07:59:12 55072 ----a-w- c:\windows\syswow64\jureg.exe
2009-09-26 07:59:12 411368 ----a-w- c:\windows\syswow64\deploytk.dll
2009-09-26 07:59:12 386872 ----a-w- c:\windows\syswow64\jucheck.exe
2009-09-26 07:59:12 149280 ----a-w- c:\windows\syswow64\jusched.exe
2009-09-26 07:59:12 149280 ----a-w- c:\windows\syswow64\javaws.exe
2009-09-26 07:59:12 145184 ----a-w- c:\windows\syswow64\javaw.exe
2009-09-26 07:59:12 145184 ----a-w- c:\windows\syswow64\java.exe
2009-09-26 07:58:32 455680 ----a-w- c:\windows\system32\deploytk.dll
2009-09-26 07:58:32 432128 ----a-w- c:\windows\system32\jucheck.exe
2009-09-26 07:58:32 41984 ----a-w- c:\windows\system32\jureg.exe
2009-09-26 07:58:32 171520 ----a-w- c:\windows\system32\jusched.exe
2009-09-21 21:22:52 1304576 ----a-w- c:\windows\system32\wlihvui.dll
2009-09-21 21:16:48 1729536 ----a-w- c:\windows\system32\iwmssvc.dll
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 05:37:38 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 05:37:38 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:54:24 174 --sha-w- c:\program files\desktop.ini
2009-07-14 04:54:24 174 --sha-w- c:\program files (x86)\desktop.ini
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 01:00:34 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 01:00:32 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-06-10 20:44:08 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2009-07-14 01:39:53 398848 --sha-w- c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
============= FINISH: 12:59:02.48 ===============