Anonymous User gained access to my computer 5-12-07

Question

patikq1 0 Newbie Poster

18 Years Ago

:'( Im trying to do my final paper for college...I cant get rid of this mess!! I also have winlog Notify cryptnet dll names anonymous REG_DWORD value data 0x00000000 (0)
and Impersonate REG_DWORD value data 0x00000000 (0) 6BB45534C867516E6B1D181C9C18AC30
here's my locate.com compare...* DLLCompare Log version()Files Found that Windows does not See or cannot Access
*Not everything listed here means you are infected!
________________________________________________

C:\WINDOWS\SYSTEM32\cdplay~1.man Sat May 12 2007 12:13:14p A..HR 749 0.73 K
C:\WINDOWS\SYSTEM32\ncpacp~1.man Sat May 12 2007 12:13:14p A..HR 749 0.73 K
C:\WINDOWS\SYSTEM32\nwccpl~1.man Sat May 12 2007 12:13:14p A..HR 749 0.73 K
C:\WINDOWS\SYSTEM32\sapicp~1.man Sat May 12 2007 12:13:14p A..HR 749 0.73 K
C:\WINDOWS\SYSTEM32\wuaucp~1.man Sat May 12 2007 12:13:14p A..HR 749 0.73 K
C:\WINDOWS\SYSTEM32\CONFIG\tempkey.log Sat May 12 2007 5:51:50a A..H. 1,024 1.00 K
C:\WINDOWS\SYSTEM32\RESTORE\filelist.xml Sat Jul 17 2004 5:40:22a ..SHR 19,528 19.07 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\1.cat Thu May 26 2005 4:31:36a ..S.. 7,265 7.09 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\2.cat Thu Mar 6 2008 9:32:10p ..S.. 10,537 10.29 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\3.cat Thu Mar 6 2008 9:32:10p ..S.. 10,537 10.29 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\basecsp.cat Fri Oct 28 2005 11:49:32p ..S.. 13,402 13.09 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\codecs10.cat Fri Jan 28 2005 1:44:28p ..S.. 8,520 8.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\drm10.cat Fri Jan 28 2005 1:44:28p ..S.. 8,818 8.61 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\drmclien.cat Wed May 9 2001 5:46:14p ..S.. 7,160 6.99 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\fp4.cat Tue Aug 3 2004 7:58:46p ..S.. 31,281 30.55 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\hpcrdp.cat Thu Aug 23 2001 7:00:00a ..S.. 13,472 13.16 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\iasnt4.cat Thu Aug 23 2001 7:00:00a ..S.. 8,574 8.37 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\idnmit~1.cat Thu Jun 29 2006 8:11:06a ..S.. 10,181 9.94 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\ie7.cat Tue Nov 7 2006 9:04:24p ..S.. 42,340 41.35 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\ims.cat Tue Aug 3 2004 7:58:46p ..S.. 13,753 13.43 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb873339.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb884020.cat Fri Aug 13 2004 7:02:48p ..S.. 9,782 9.55 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb885835.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb885836.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb886185.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb887472.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb888302.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb890046.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb890859.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb891122.cat Mon Jan 31 2005 11:35:58a ..S.. 7,748 7.57 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb891781.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb892130.cat Thu Mar 20 2008 6:06:52p ..S.. 9,452 9.23 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb893756.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb8938~1.cat Wed May 4 2005 2:45:46p ..S.. 29,493 28.80 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb894391.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb896344.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb896358.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb896423.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb896428.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb898461.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb899587.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb899591.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb900485.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb900725.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb901017.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb901214.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb902400.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb904706.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb904942.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb905414.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb905749.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb908519.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb908531.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb910437.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb911280.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb911562.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb911564.cat Tue Jan 3 2006 1:17:06p ..S.. 8,792 8.59 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb911927.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb913580.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb914388.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb914389.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb914440.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb915865.cat Fri Jul 14 2006 10:55:54a ..S.. 10,337 10.09 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb916595.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb917344.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb917422.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb917734.cat Thu May 4 2006 7:07:40p ..S.. 8,792 8.59 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb917953.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb918118.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb918439.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb919007.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb920213.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb920342.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb920670.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb920683.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb920685.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb920872.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb921503.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb922582.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb922819.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb923191.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb923414.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb923689.cat Thu Dec 7 2006 8:30:20p ..S.. 9,057 8.84 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb923694.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb923980.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb924191.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb924270.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb924496.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb924667.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb925398.cat Wed Sep 13 2006 5:32:26p ..S.. 9,090 8.88 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb925720.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb925876.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb925902.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb926239.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb926255.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb926436.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb927779.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb927802.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb927891.cat Mon Apr 23 2007 10:31:14a ..S.. 11,284 11.02 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb928255.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb928843.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb929123.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb929399.cat Thu Mar 22 2007 2:10:04p ..S.. 10,335 10.09 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb929969.cat Fri Dec 22 2006 11:53:02a ..S.. 7,894 7.71 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb930178.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb930916.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb931261.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb931768.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb931784.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9317~1.cat Fri Apr 20 2007 1:41:50p ..S.. 30,145 29.44 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb931836.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb932168.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9328~1.cat Tue Feb 26 2008 7:14:24a ..S.. 11,284 11.02 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb933360.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9335~1.cat Tue May 8 2007 12:21:34p ..S.. 29,530 28.84 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb933729.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb935839.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb935840.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb936021.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb936357.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb936782.cat Tue Jun 12 2007 11:13:14a ..S.. 10,335 10.09 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9371~1.cat Thu Jul 19 2007 3:20:16a ..S.. 29,530 28.84 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb937894.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9381~1.cat Thu Jul 12 2007 6:44:36p ..S.. 11,284 11.02 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb938828.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb938829.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb939683.cat Tue Jul 17 2007 5:11:36p ..S.. 10,335 10.09 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9396~1.cat Tue Aug 21 2007 12:41:30a ..S.. 30,942 30.21 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb941202.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb941568.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb941569.cat Sat Oct 27 2007 5:16:40p ..S.. 12,090 11.80 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb941644.cat Tue Oct 30 2007 4:48:40p ..S.. 11,284 11.02 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb941693.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb942763.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb943055.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb943460.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb943485.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9445~1.cat Fri Jan 11 2008 7:11:14a ..S.. 32,354 31.59 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb944653.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb945553.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb946026.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb9478~1.cat Sat Mar 1 2008 8:54:54a ..S.. 32,354 31.59 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb948590.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb948881.cat Mon Apr 14 2008 7:34:36a ..S.. 9,550 9.32 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\kb950749.cat Thu Mar 27 2008 11:33:22p ..S.. 15,505 15.14 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\mapimig.cat Thu Aug 23 2001 7:00:00a ..S.. 399,645 390.28 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\mediactr.cat Tue Aug 3 2004 7:57:02p ..S.. 31,965 31.21 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\mppre10.cat Fri Jan 28 2005 1:44:28p ..S.. 7,030 6.86 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\mscomp~1.cat Mon Oct 2 2006 3:29:12p ..S.. 8,143 7.95 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\msmsgs.cat Tue Aug 3 2004 7:58:42p ..S.. 9,581 9.36 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\msn7.cat Tue Aug 3 2004 7:58:16p ..S.. 24,209 23.64 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\msn9.cat Tue Aug 3 2004 7:57:00p ..S.. 11,651 11.38 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\mstsweb.cat Tue Aug 3 2004 7:58:10p ..S.. 7,245 7.07 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\mw770.cat Thu Aug 23 2001 7:00:00a ..S.. 37,484 36.61 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\netfx.cat Tue Aug 3 2004 7:58:22p ..S.. 141,702 138.38 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\nlsdow~1.cat Wed Jun 28 2006 6:00:54p ..S.. 8,420 8.22 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\nt5.cat Tue Aug 3 2004 7:58:34p ..S.. 2,012,670 1.92 M
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\nt5iis.cat Thu Aug 23 2001 7:00:00a ..S.. 797,189 778.50 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\nt5inf.cat Tue Aug 3 2004 7:58:58p ..S.. 502,724 490.94 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\ntprint.cat Tue Aug 3 2004 7:57:10p ..S.. 1,086,058 1.04 M
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem0.cat Thu May 26 2005 4:27:36a ..S.. 13,511 13.19 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem1.cat Thu Aug 24 2006 8:49:36a ..S.. 8,433 8.23 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem10.cat Tue Nov 8 2005 2:13:14a ..S.. 72,497 70.80 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem11.cat Tue Nov 8 2005 2:13:16a ..S.. 72,497 70.80 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem12.cat Tue Nov 8 2005 2:13:18a ..S.. 73,379 71.66 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem13.cat Tue Nov 8 2005 2:13:14a ..S.. 72,497 70.80 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem15.cat Mon Apr 16 2007 10:58:18p ..S.. 41,586 40.61 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem16.cat Thu May 26 2005 4:27:36a ..S.. 7,277 7.11 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem17.cat Mon Apr 16 2007 10:56:46p ..S.. 17,648 17.23 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem19.cat Thu Jun 28 2007 4:06:50a ..S.. 11,192 10.93 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem2.cat Wed Apr 11 2007 8:29:42a ..S.. 10,744 10.49 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem20.cat Mon Jul 30 2007 7:36:28p ..S.. 48,256 47.13 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem21.cat Mon Jul 30 2007 7:35:04p ..S.. 17,648 17.23 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem22.cat Fri Jan 10 2003 4:13:04p ..S.. 7,592 7.41 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem23.cat Wed Apr 10 2002 9:36:14a ..S.. 10,055 9.82 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem5.cat Tue Nov 8 2005 2:13:20a ..S.. 135,342 132.17 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem6.cat Tue Nov 8 2005 2:13:18a ..S.. 74,261 72.52 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem7.cat Tue Nov 8 2005 2:13:12a ..S.. 72,053 70.36 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem8.cat Tue Nov 8 2005 2:13:14a ..S.. 72,497 70.80 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oem9.cat Tue Nov 8 2005 2:13:12a ..S.. 72,497 70.80 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\oembios.cat Thu Aug 23 2001 7:00:00a ..S.. 7,382 7.21 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\presen~1.cat Fri Oct 20 2006 9:33:38p ..S.. 7,214 7.04 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\sp2.cat Tue Aug 3 2004 8:03:44p ..S.. 1,042,903 1018.46 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\sp3_uber.cat Mon Apr 14 2008 7:34:48a ..S.. 6,259,467 5.97 M
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\tabletpc.cat Tue Aug 3 2004 8:02:58p ..S.. 110,116 107.54 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wga.cat Wed May 17 2006 11:24:42a ..S.. 7,160 6.99 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wganot~1.cat Tue Apr 10 2007 2:03:12p ..S.. 9,798 9.57 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wic.cat Tue Oct 24 2006 12:37:00p ..S.. 9,601 9.38 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wmdm10.cat Fri Jan 28 2005 1:44:28p ..S.. 9,116 8.90 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wmerrenu.cat Sat Jul 17 2004 5:45:42a ..S.. 7,334 7.16 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wmfdis~1.cat Thu Nov 2 2006 11:54:58a ..S.. 34,696 33.88 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wmfsdk10.cat Fri Jan 28 2005 1:44:28p ..S.. 11,202 10.94 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wmp11.cat Thu Nov 2 2006 12:13:58p ..S.. 27,554 26.91 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wpd10.cat Fri Jan 28 2005 1:44:28p ..S.. 10,598 10.35 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\wudf01~1.cat Thu Sep 28 2006 8:18:04p ..S.. 10,791 10.54 K
C:\WINDOWS\SYSTEM32\CATROOT\{F750E~1\xpsepsc.cat Fri Mar 23 2007 3:31:04a ..S.. 9,863 9.63 K
C:\WINDOWS\SYSTEM32\DRIVERS\UMDF\msftwd~1.wdf Mon May 14 2007 6:49:14a A..H. 0 0.00 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\desktop.ini Sat May 12 2007 5:53:42a A.SH. 62 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\desktop.ini Sat May 12 2007 5:53:42a A.SH. 62 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\SENDTO\desktop.ini Sat May 12 2007 12:13:30p A.SH. 181 0.18 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\STARTM~1\desktop.ini Sat May 12 2007 5:53:42a A.SH. 62 0.06 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\39b1db~1 Mon Dec 10 2007 9:48:36a A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\4eb788~1 Mon May 14 2007 6:47:58a A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\ddb7b5~1 Wed Mar 19 2008 11:34:58a A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\ec7147~1 Tue Sep 4 2007 2:54:42p A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\prefer~1 Wed Mar 19 2008 11:34:58a A.SH. 24 0.02 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\HISTORY\desktop.ini Sat May 12 2007 12:22:20p ..SH. 113 0.11 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\TEMPOR~1\desktop.ini Sat May 12 2007 12:22:20p ..SH. 67 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\STARTM~1\PROGRAMS\desktop.ini Sat May 12 2007 12:16:02p A.SH. 148 0.14 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\USER\13d4f7~1 Wed Mar 19 2008 9:23:06p A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\USER\24e46d~1 Sat May 12 2007 12:22:28p A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\USER\66145a~1 Sun Aug 26 2007 1:06:28p A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\USER\ab1de6~1 Thu Nov 29 2007 4:12:52p A.SH. 388 0.38 K
C:\WINDOWS\SYSTEM32\MICROS~1\PROTECT\S-1-5-18\USER\prefer~1 Wed Mar 19 2008 9:23:08p A.SH. 24 0.02 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\HISTORY\HISTORY.IE5\desktop.ini Sat May 12 2007 12:22:20p ..SH. 113 0.11 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\TEMPOR~1\CONTENT.IE5\desktop.ini Sat May 12 2007 12:22:20p ..SH. 67 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\STARTM~1\PROGRAMS\ACCESS~1\desktop.ini Sat May 12 2007 12:16:00p A.SH. 482 0.47 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\STARTM~1\PROGRAMS\STARTUP\desktop.ini Sat May 12 2007 12:16:00p A.SH. 84 0.08 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\087486~1 Sat Oct 27 2007 3:38:34p A.S.. 605 0.59 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\2bf68f~1 Mon Jun 9 2008 1:19:08p A.S.. 18 0.02 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\3130b1~1 Mon Jul 9 2007 6:33:48a A.S.. 552 0.54 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\33ef5d~1 Tue Oct 2 2007 3:50:26p A.S.. 471 0.46 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\56bdea~1 Tue Jun 3 2008 2:09:16p A.S.. 778,038 759.80 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\60e316~1 Tue Jun 3 2008 2:02:48p A.S.. 828 0.81 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\904590~1 Mon Jul 9 2007 6:33:46a A.S.. 616 0.60 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\943080~1 Sat Mar 29 2008 8:07:48p A.S.. 26,441 25.82 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\a44f4e~1 Thu Jul 12 2007 1:00:18p A.S.. 558 0.54 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\a8faba~1 Sun Jun 8 2008 8:45:26p A.S.. 74,566 72.82 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\e6024e~1 Sun May 13 2007 12:27:16p A.S.. 558 0.54 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\CONTENT\fb788e~1 Sat Oct 27 2007 3:38:32p A.S.. 451 0.44 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\087486~1 Sat Oct 27 2007 3:38:34p A.S.. 202 0.20 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\2bf68f~1 Mon Jun 9 2008 1:19:08p A.S.. 216 0.21 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\3130b1~1 Mon Jul 9 2007 6:33:48a A.S.. 132 0.13 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\33ef5d~1 Tue Oct 2 2007 3:50:26p A.S.. 134 0.13 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\56bdea~1 Tue Jun 3 2008 2:09:16p A.S.. 136 0.13 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\60e316~1 Tue Jun 3 2008 2:02:48p A.S.. 94 0.09 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\904590~1 Mon Jul 9 2007 6:33:46a A.S.. 136 0.13 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\943080~1 Sat Mar 29 2008 8:07:48p A.S.. 216 0.21 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\a44f4e~1 Thu Jul 12 2007 1:00:18p A.S.. 146 0.14 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\a8faba~1 Sun Jun 8 2008 8:45:26p A.S.. 124 0.12 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\e6024e~1 Sun May 13 2007 12:27:16p A.S.. 144 0.14 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\APPLIC~1\MICROS~1\CRYPTN~1\METADATA\fb788e~1 Sat Oct 27 2007 3:38:32p A.S.. 134 0.13 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\TEMPOR~1\CONTENT.IE5\AQRPW3M2\desktop.ini Sat May 12 2007 12:22:20p ..SH. 67 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\TEMPOR~1\CONTENT.IE5\H3NDJI2V\desktop.ini Sat May 12 2007 12:22:20p ..SH. 67 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\TEMPOR~1\CONTENT.IE5\I17626RV\desktop.ini Sat May 12 2007 12:22:20p ..SH. 67 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\LOCALS~1\TEMPOR~1\CONTENT.IE5\OGQXPW6S\desktop.ini Sat May 12 2007 12:22:20p ..SH. 67 0.06 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\STARTM~1\PROGRAMS\ACCESS~1\ACCESS~1\desktop.ini Sat May 12 2007 12:16:00p A.SH. 348 0.34 K
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM~1\STARTM~1\PROGRAMS\ACCESS~1\ENTERT~1\desktop.ini Sat May 12 2007 12:16:00p A.SH. 84 0.08 K
________________________________________________

6,562 items found: 6,340 files (254 H/S), 222 directories (35 H/S).
Total of file sizes: 1,333,363,885 bytes 1.24 G

Administrator Account = True

--------------------End log---------------------

microsoft:windows-nt-2000-xp virus-malware

2 Contributors
1 Reply
205 Views
3 Days Discussion Span
Latest Post 18 Years Ago Latest Post by Member #119018

Dani AI

Generated 7 Months Ago

A short, practical triage and recovery plan for (and a clarification for ): the DLL-compare output and the mention of cryptography-related registry entries can be benign system artifacts, but they also make it sensible to treat the machine as potentially compromised until proven otherwise. The priority is to protect the urgent document, stop any ongoing access, collect minimal diagnostic data, then clean or reinstall.

Immediate actions (fast and safe)

Isolate the PC: unplug Ethernet and turn off Wi‑Fi to prevent any remote control or data exfiltration.
Rescue the paper first: boot from a clean Live USB (for example a Linux live image), mount the Windows partition read-only if possible, and copy only the document files to external media. Do not copy executables or program folders.
Change any important online passwords from a different, known-clean device after the rescue.

Short diagnostics (run from an administrative command prompt)

netstat -ano | findstr ESTABLISHED
netstat -ano | findstr LISTENING
tasklist /svc
net user
query user

Those commands help spot active remote sessions, listening backdoors, services hosting suspicious processes, and unexpected accounts.

Deeper cleanup and final decision

Use up-to-date anti-malware scanners (on the infected system and from bootable rescue media) plus Sysinternals Autoruns and Process Explorer to inspect autostarts and running processes. Run a reputable rootkit checker if a rootkit is suspected.
If persistence, credential theft, or a rootkit is confirmed (or if confidence in the cleanup is low), a full OS reinstall is the safest option. Restore only scanned documents and data backups.
After cleaning or reinstall: enable the firewall, fully update Windows and all software, reinstall AV, and change all passwords from a clean device.

Cautions: do not delete system files blindly; preserve copies of key logs (Autoruns, Process Explorer) if asking for help; and avoid logging into important accounts from the suspect machine until it is proven clean.

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

Member #119018 · Answer 1 · 2008-06-13T02:52:45+00:00

Member #119018

18 Years Ago

What exactly is the problem?