date/time : 2011-11-14, 09:45:01, 888ms computer name : COMPAQ-PC user name : Compaq <admin> registered owner : Compaq operating

system : Windows 7 Service Pack 1 build 7601 system language : Indonesian system up time : 19 minutes 47 seconds program up time : 6 minutes 20 seconds processors : 2x Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz physical memory : 161/952 MB (free/total) free disk space : (C:) 4,94 GB display mode : 1366x768, 32 bit process id : $1064 allocated memory : 97,34 MB executable : ASC.exe current module : madExcept_.bpl exec. date/time : 2011-06-16 14:29 version : 4.0.1.204 compiled with : Delphi 2009 madExcept version : 3.0i callstack crc : $201550fc, $f805f1eb, $0f9881e9 count : 4 exception number : 1 exception class : EFOpenError exception message : Cannot open file "C:\Program Files\IObit\Advanced SystemCare 4\ZLB1BCD.tmp". The process cannot access the file because it is being used by another process. main thread ($1600): 5004bcc7 +123 rtl120.bpl 5004bb80 +020 rtl120.bpl 0041bc43 +1c3 ASC.exe 0041bfd8 +198 ASC.exe me 0042ace2 +39a ASC.exe ase 0042b5a7 +037 ASC.exe t 0054e6d5 +821 ASC.exe 00553660 +000 ASC.exe ck 501d1177 +06f vcl120.bpl 501d15ea +066 vcl120.bpl 501d0c0e +2d2 vcl120.bpl 5012b476 +00e vcl120.bpl 5016278d +059 vcl120.bpl 501d0c0e +2d2 vcl120.bpl 501d0834 +024 vcl120.bpl 501d4c2b +097 vcl120.bpl Msg 501d5146 +3be vcl120.bpl 501d49b4 +02c vcl120.bpl 775fcc6b +00a USER32.dll 501f9ec7 +0f3 vcl120.bpl e 501f9f0a +00a vcl120.bpl 501fa235 +0c9 vcl120.bpl 765eed6a +010 kernel32.dll thread $15e0: Classes Classes ZLIBArchive2 ZLIBArchive2 TFileStream.Create TFileStream.Create TZLBArc2.Extract TZLBArc2.ExtractStreamByNa

pSysOptimization 733 +78 TSysOptimization.InitDatab pSysOptimization 830 Unit1 Unit1 Controls Controls Controls Graphics Extctrls Controls Controls Controls Controls Controls Forms Forms Forms +1 TSysOptimization.ScanSysOp

3673 +175 TForm_Main.PerformDeepScan 5235 +0 TForm_Main.Deep_ImgScanCli TControl.Click TControl.WMLButtonUp TControl.WndProc TPicture.GetHeight TImage.CanAutoSize TControl.WndProc TControl.Perform TWinControl.IsControlMouse TWinControl.WndProc TWinControl.MainWndProc DispatchMessageW TApplication.ProcessMessag TApplication.HandleMessage TApplication.Run BaseThreadInitThunk

77ae5a12 75ee3c66 77afce11 765eed6a

+0a +54 +63 +10

ntdll.dll KERNELBASE.dll ntdll.dll kernel32.dll

NtFsControlFile ConnectNamedPipe bsearch BaseThreadInitThunk

thread $b5c: 77ae6a02 +0a ntdll.dll NtWaitForMultipleObjects 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $1778: 77ae6a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $11e4: 77ae57d2 +0a ntdll.dll NtDelayExecution 75ec1870 +4f KERNELBASE.dll SleepEx 75ec1813 +0a KERNELBASE.dll Sleep 0051d066 +42 ASC.exe Unit_PrivacyThread 397 +18 TPrivacyThread.Execute 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $1440: 77ae57d2 +0a ntdll.dll NtDelayExecution 75ec1870 +4f KERNELBASE.dll SleepEx 75ec1813 +0a KERNELBASE.dll Sleep 0050abd2 +2e ASC.exe Unit_JunkfilesThread 204 +13 TJunkfilesThread.Execut e 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $2a0: 77ae6a22 +0a 75ec1796 +66 765ec2ee +3e 765ec29d +0d 765eed6a +10 ntdll.dll KERNELBASE.dll kernel32.dll kernel32.dll kernel32.dll NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForMultipleObjects WaitForMultipleObjectsEx WaitForMultipleObjectsEx WaitForMultipleObjects _endthreadex BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObjectEx WaitForSingleObject _endthreadex BaseThreadInitThunk NtWaitForSingleObject WaitForSingleObjectEx WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk NtWaitForSingleObject

thread $10f4: <priority:-1> 77ae6a02 +0a ntdll.dll 75ec6a30 +00 KERNELBASE.dll 765ebd19 +89 kernel32.dll 765ebd87 +13 kernel32.dll 77c31323 +67 msvcrt.dll 765eed6a +10 kernel32.dll thread $17c4: 77ae6a22 +0a ntdll.dll 75ec1796 +66 KERNELBASE.dll 765ec2ee +3e kernel32.dll 765ec29d +0d kernel32.dll 77c31323 +67 msvcrt.dll 765eed6a +10 kernel32.dll thread $1550: 77ae6a22 +0a ntdll.dll 75ec1796 +66 KERNELBASE.dll 765ec2ee +3e kernel32.dll 765ec29d +0d kernel32.dll 765eed6a +10 kernel32.dll thread $1790: 77ae6a22 +0a ntdll.dll

75ec1796 765ec2ee 765ec29d 765eed6a

+66 +3e +0d +10

KERNELBASE.dll kernel32.dll kernel32.dll kernel32.dll

WaitForSingleObjectEx WaitForSingleObjectEx WaitForSingleObject BaseThreadInitThunk

thread $1784: 77ae63a2 +0a ntdll.dll NtRemoveIoCompletion 75ee2277 +23 KERNELBASE.dll GetQueuedCompletionStatus 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $fb4: 77ae63a2 +0a ntdll.dll NtRemoveIoCompletion 75ee2277 +23 KERNELBASE.dll GetQueuedCompletionStatus 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $17b4: 77ae63a2 +0a ntdll.dll NtRemoveIoCompletion 75ee2277 +23 KERNELBASE.dll GetQueuedCompletionStatus 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $5e0: 77ae63a2 +0a ntdll.dll NtRemoveIoCompletion 75ee2277 +23 KERNELBASE.dll GetQueuedCompletionStatus 765eed6a +10 kernel32.dll BaseThreadInitThunk thread $9d8: 77ae6a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 765eed6a +10 kernel32.dll BaseThreadInitThunk modules: 001d0000 stemCare 002c0000 stemCare 00400000 stemCare 00740000 stemCare 10000000 stemCare 50000000 stemCare 50120000 stemCare 50310000 stemCare 57000000 stemCare 57800000 stemCare 59800000 stemCare 5d300000 stemCare 60900000 stemCare 62870000 636b0000 64c40000 64ca0000 Scan.dll 4 datastate.dll 4 ASC.exe 4 DiskMap.dll 4 NtfsData.dll 4 rtl120.bpl 4 vcl120.bpl 4 vclx120.bpl 4 madBasic_.bpl 4 madDisAsm_.bpl 4 madExcept_.bpl 4 taskMgr.dll 4 sqlite3.dll 4 wbemdisp.dll cabinet.dll Dxtmsft.dll Dxtrans.dll 1.0.0.585 1.0.0.2 4.0.1.204 1.0.0.0 C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy 12.0.3210.17555 12.0.3210.17555 12.0.3210.17555 C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy 1.1.0.215 C:\Program Files\IObit\Advanced Sy C:\Program Files\IObit\Advanced Sy 6.1.7600.16385 6.1.7601.17514 9.0.8112.16421 9.0.8112.16421 C:\Windows\system32\wbem C:\Windows\system32 C:\Windows\System32 C:\Windows\System32

65590000 d3d10.dll 6.1.7600.16385 C:\Windows\system32 65f90000 D3D10Warp.dll 6.1.7601.17514 C:\Windows\system32 67b10000 DWrite.dll 6.1.7601.17563 C:\Windows\system32 67c20000 d2d1.dll 6.1.7601.17563 C:\Windows\system32 67ce0000 jscript9.dll 9.0.8112.16437 C:\Windows\System32 67f20000 d3d10core.dll 6.1.7600.16385 C:\Windows\system32 682c0000 msimtf.dll 6.1.7600.16385 C:\Windows\system32 690c0000 MLANG.dll 6.1.7600.16385 C:\Windows\system32 6a890000 mshtml.dll 9.0.8112.16437 C:\Windows\System32 6bfb0000 DDRAW.dll 6.1.7600.16385 C:\Windows\system32 6c820000 ieframe.dll 9.0.8112.16437 C:\Windows\System32 6d710000 msls31.dll 3.10.349.0 C:\Windows\system32 711e0000 winmm.dll 6.1.7601.17514 C:\Windows\system32 71a60000 oledlg.dll 6.1.7600.16385 C:\Windows\system32 71a80000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 71d10000 dxgi.dll 6.1.7601.17514 C:\Windows\system32 71da0000 d3d10_1core.dll 6.1.7601.17514 C:\Windows\system32 71de0000 d3d10_1.dll 6.1.7601.17544 C:\Windows\system32 71fe0000 mpr.dll 6.1.7600.16385 C:\Windows\system32 727d0000 ddrawex.dll 6.1.7600.16385 C:\Windows\system32 72ca0000 wmiutils.dll 6.1.7600.16385 C:\Windows\system32\wbem 72d80000 wbemsvc.dll 6.1.7600.16385 C:\Windows\system32\wbem 72ec0000 wbemprox.dll 6.1.7600.16385 C:\Windows\system32\wbem 72ed0000 NTDSAPI.dll 6.1.7600.16385 C:\Windows\system32 72ef0000 fastprox.dll 6.1.7601.17514 C:\Windows\system32\wbem 73000000 wbemcomn.dll 6.1.7601.17514 C:\Windows\system32 734a0000 DCIMAN32.dll 6.1.7600.16385 C:\Windows\system32 73da0000 ATL.DLL 3.5.2284.0 C:\Windows\System32 73eb0000 ntmarta.dll 6.1.7600.16385 C:\Windows\system32 73f70000 oleacc.dll 7.0.0.0 C:\Windows\system32 74300000 winspool.drv 6.1.7601.17514 C:\Windows\system32 74360000 msimg32.dll 6.1.7600.16385 C:\Windows\system32 74370000 windowscodecs.dll 6.1.7601.17514 C:\Windows\system32 744e0000 olepro32.dll 6.1.7601.17514 C:\Windows\system32 74540000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32 748d0000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 74910000 PROPSYS.dll 7.0.7601.17514 C:\Windows\system32 74a30000 comctl32.dll 6.10.7601.17514 C:\Windows\WinSxS\x86_microsoft.wi ndows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 75160000 WINNSI.DLL 6.1.7600.16385 C:\Windows\system32 75170000 iphlpapi.DLL 6.1.7601.17514 C:\Windows\system32 75200000 version.dll 6.1.7600.16385 C:\Windows\system32 75460000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32 75540000 dnsapi.DLL 6.1.7601.17570 C:\Windows\system32 757b0000 CRYPTSP.dll 6.1.7600.16385 C:\Windows\system32 75af0000 Secur32.dll 6.1.7601.17514 C:\Windows\system32 75b20000 SspiCli.dll 6.1.7601.17514 C:\Windows\system32 75b40000 apphelp.dll 6.1.7601.17514 C:\Windows\system32 75b90000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\system32 75ba0000 SXS.DLL 6.1.7601.17514 C:\Windows\system32 75c00000 RpcRtRemote.dll 6.1.7601.17514 C:\Windows\system32 75c40000 profapi.dll 6.1.7600.16385 C:\Windows\system32 75cb0000 MSASN1.dll 6.1.7601.17514 C:\Windows\system32 75cc0000 CFGMGR32.dll 6.1.7601.17514 C:\Windows\system32 75cf0000 crypt32.dll 6.1.7601.17514 C:\Windows\system32 75ea0000 DEVOBJ.dll 6.1.7600.16385 C:\Windows\system32 75ec0000 KERNELBASE.dll 6.1.7601.17651 C:\Windows\system32 75f10000 wintrust.dll 6.1.7601.17514 C:\Windows\system32 75f40000 sechost.dll 6.1.7600.16385 C:\Windows\SYSTEM32 75f60000 IMM32.DLL 6.1.7601.17514 C:\Windows\system32

75f80000 75fd0000 75fe0000 75ff0000 76080000 76090000 76140000 761c0000 76210000 76330000 76400000 765a0000 76680000 766c0000 767d0000 77420000 775e0000 776b0000 77710000 77870000 77970000 77a00000 77aa0000 77be0000 77c10000 77c20000

GDI32.dll PSAPI.DLL NSI.dll oleaut32.dll Normaliz.dll RPCRT4.dll comdlg32.dll WLDAP32.dll WININET.dll MSCTF.dll SETUPAPI.dll kernel32.dll WS2_32.dll URLMON.DLL shell32.dll iertutil.dll USER32.dll SHLWAPI.dll ole32.dll advapi32.dll CLBCatQ.DLL USP10.dll ntdll.dll IMAGEHLP.DLL LPK.dll msvcrt.dll

6.1.7601.17514 6.1.7600.16385 6.1.7600.16385 6.1.7601.17676 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 9.0.8112.16437 6.1.7600.16385 6.1.7601.17514 6.1.7601.17651 6.1.7601.17514 9.0.8112.16437 6.1.7601.17678 9.0.8112.16437 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 2001.12.8530.16385 1.626.7601.17514 6.1.7601.17514 6.1.7601.17514 6.1.7600.16385 7.0.7600.16385 0 0 0 0 0 1 1 0 0 0 0 0 0 0 0 0 0 0 0 1 0 1 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 21 0 877 0 0 26 0 0 0 0 0 0 0

C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\SYSTEM32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32

processes: 0000 Idle 0004 System 00fc smss.exe 0160 csrss.exe 019c wininit.exe 01a8 csrss.exe 01c8 winlogon.exe 0208 services.exe 0210 lsass.exe 0218 lsm.exe 0278 svchost.exe 02c4 USBSRService.exe 02f4 svchost.exe 0338 svchost.exe 037c svchost.exe 03a0 svchost.exe 042c svchost.exe 04b4 svchost.exe 0510 svchost.exe 05a4 Dwm.exe 05cc spoolsv.exe 05e8 Explorer.EXE 05f8 sched.exe 062c IMFsrv.exe 0644 taskhost.exe 06e0 ASCService.exe 0710 avfwsvc.exe 0728 avguard.exe 074c AppleMobileDeviceService.exe 0788 mDNSResponder.exe 07a8 btwdins.exe 07d8 PresentationFontCache.exe

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 3 high 0 392 normal 0 0 22 normal 0 0 0 0 0 0 0

C:\Windows\system32 C:\Windows C:\Windows\system32

010c HWDeviceService.exe 0 0 0 01ac DCSHelper.exe 1 14 15 dService 04d8 ijplmsvc.exe 0 0 0 06cc LSSrvc.exe 0 0 0 083c ouc.exe 0 0 0 0848 RichVideo.exe 0 0 0 0864 SynTPEnh.exe 1 76 38 tics\SynTP 0870 PDVDServ.exe 1 9 8 Link\PowerDVD 0880 GrooveMonitor.exe 1 9 4 soft Office\Office12 0888 SeaPort.EXE 0 0 0 08b8 LaunchApplication.exe 1 111 28 \Nokia PC Suite 6 08cc winampa.exe 1 12 4 p 08d4 ipoint.exe 1 15 43 soft IntelliPoint 0900 svchost.exe 0 0 0 0934 TuneUpUtilitiesService32.exe 0 0 0 0940 FSStarter.exe 1 15 13 erve Manager 0948 igfxtray.exe 1 12 6 096c hkcmd.exe 1 10 17 09ac WLIDSVC.EXE 0 0 0 09d0 igfxpers.exe 1 9 4 0a40 ZuneLauncher.exe 1 9 3 0a60 avgnt.exe 1 94 30 \AntiVir Desktop 0a7c WLIDSVCM.EXE 0 0 0 0b08 FileManager.exe 1 429 227 erve Manager 0b14 dpupdchk.exe 1 9 1 soft IntelliPoint 0b34 BJMYPRT.EXE 1 18 13 \MyPrinter 0b9c CNSEMAIN.EXE 1 124 32 \Solution Menu EX 0bd8 TuneUpUtilitiesApp32.exe 1 215 98 p Utilities 2011 0c1c sidebar.exe 1 40 39 ws Sidebar 0c28 NMBgMonitor.exe 1 9 5 n Files\Ahead\Lib 0cbc USBSafelyRemove.exe 1 356 82 afely Remove 0d50 avshadow.exe 0 0 0 0d64 conhost.exe 0 0 0 0da8 LightScribeControlPanel.exe 1 51 22 n Files\LightScribe 0db8 IDMan.exe 1 173 127 net Download Manager 0de4 SnowWallpaper.exe 1 60 39 cks Software\Animated Snow Desktop Wallpaper 0dec avmailc.exe 0 0 0 0e50 CursorFX.exe 1 103 21 ock\CursorFX 0e70 ASCTray.exe 1 59 38

normal

C:\ProgramData\Datacar

above normal C:\Program Files\Synap normal normal normal normal normal C:\Program Files\Cyber C:\Program Files\Micro C:\Program Files\Nokia C:\Program Files\Winam C:\Program Files\Micro

normal normal normal normal normal normal normal normal normal normal normal normal normal normal

C:\Program Files\FileS C:\Windows\System32 C:\Windows\System32 C:\Windows\System32 C:\Program Files\Zune C:\Program Files\Avira C:\Program Files\FileS C:\Program Files\Micro C:\Program Files\Canon C:\Program Files\Canon C:\Program Files\TuneU C:\Program Files\Windo C:\Program Files\Commo C:\Program Files\USB S

normal normal normal high normal

C:\Program Files\Commo C:\Program Files\Inter C:\Program Files\Artdo C:\Program Files\Stard C:\Program Files\IObit

\Advanced SystemCare 4 0ec8 avwebgrd.exe 0f28 BTTray.exe MM\Bluetooth Software 0ff0 HalReader.exe are\HalReader 0494 ONENOTEM.EXE soft Office\Office12 0bac ServiceLayer.exe 0400 svchost.exe 0e24 svchost.exe 1034 NMIndexingService.exe 107c svchost.exe 1134 NMIndexStoreSvr.exe n Files\Ahead\Lib 1190 BtStackServer.exe MM\Bluetooth Software 1298 SynTPHelper.exe tics\SynTP 13b0 IEMonitor.exe net Download Manager 15a0 ymsgr_tray.exe !\Messenger 1660 svchost.exe 0988 DCSHelper.exe dService 1458 Mobile Partner.exe e Partner 09e8 WUDFHost.exe 0f54 wmpnetwk.exe 1064 ASC.exe \Advanced SystemCare 4 1668 taskeng.exe 0d14 audiodg.exe 147c CCleaner.exe ner 0480 AcroRd32.exe \Reader 9.0\Reader

0 0 1 16 1 83 1 18 0 0 0 0 0 1 0 0 0 0 0 9

0 22 normal 65 normal 6 0 0 0 0 0 3 9 3 normal

C:\Program Files\WIDCO C:\Program Files\Zabaw C:\Program Files\Micro

normal normal

C:\Program Files\Commo C:\Program Files\WIDCO

1 9 1 9 1 18 1 93 0 0 1 9 1 74

above normal C:\Program Files\Synap C:\Program Files\Inter C:\Program Files\Yahoo C:\ProgramData\Datacar C:\Program Files\Mobil

16 normal 10 normal 0 2 normal

59 normal

0 0 0 0 0 0 1 1067 293 normal 1 9 3 normal 0 0 0 1 133 37 normal 1 140 131 normal

C:\Program Files\IObit C:\Windows\system32 C:\Program Files\CClea C:\Program Files\Adobe

hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery - Microsoft Composite Battery + Bluetooth Radios - HP Integrated Module with Bluetooth 2.1 Wireless Technology (driver 6.2.0.94 07) - Microsoft Bluetooth Enumerator + Bluetooth Virtual Devices - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200)

+ + + +

- Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Imaging Reference Objects (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth L2CAP Interface (driver 6.2.0.9500) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) Computer - ACPI x86-based PC Disk drives - Hitachi HTS725032A9A364 ATA Device - HUAWEI MMC Storage USB Device Display adapters - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) DVD/CD-ROM drives - hp DVDRAM GT30L ATA Device - HUAWEI Mass Storage USB Device

+ Human Interface Devices - Bluetooth HID Device - Bluetooth Remote Control (driver 6.2.1.200) + IDE ATA/ATAPI controllers - ATA Channel 0 - ATA Channel 1 - ATA Channel 5 - Standard AHCI 1.0 Serial ATA Controller + Imaging devices - HP Webcam [2 MP Fixed] + Keyboards - Standard PS/2 Keyboard + Mice and other pointing devices - Synaptics PS/2 Port TouchPad (driver 15.0.24.0) + Modems - HUAWEI Mobile Connect - 3G Modem #2 (driver 2.0.6.704) - Nokia Phone Bluetooth Modem (driver 6.82.0.1) - Standard Modem over Bluetooth link #2 - Standard Modem over Bluetooth link #3 - Standard Modem over Bluetooth link #4 - Standard Modem over Bluetooth link #5 - Standard Modem over Bluetooth link #6 - Standard Modem over Bluetooth link #7 - Standard Modem over Bluetooth link #8 + Monitors - Generic PnP Monitor + Network adapters - Bluetooth Device (Personal Area Network) - HUAWEI Mobile Connect - 3G Network Card #2 (driver 6,0,1,271) - Microsoft Virtual WiFi Miniport Adapter - Realtek PCIe FE Family Controller (driver 7.46.610.2011) - Realtek RTL8191SE 802.11b/g/n WiFi Adapter (driver 2020.7.907.2011) + Portable Devices - G:\ - JN..n.JLL (driver 6.83.31.1) + Ports (COM & LPT) - HUAWEI Mobile Connect - 3G Application Interface (COM28) (driver 2.0.6.704) - HUAWEI Mobile Connect - 3G PC UI Interface (COM27) (driver 2.0.6.704) - Standard Serial over Bluetooth link (COM11) - Standard Serial over Bluetooth link (COM13) - Standard Serial over Bluetooth link (COM14) - Standard Serial over Bluetooth link (COM16) - Standard Serial over Bluetooth link (COM17) - Standard Serial over Bluetooth link (COM18) - Standard Serial over Bluetooth link (COM20) - Standard Serial over Bluetooth link (COM34) - Standard Serial over Bluetooth link (COM35) - Standard Serial over Bluetooth link (COM39) - Standard Serial over Bluetooth link (COM40) - Standard Serial over Bluetooth link (COM41) - Standard Serial over Bluetooth link (COM42) - Standard Serial over Bluetooth link (COM8) + Processors - Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz - Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz + Sound, video and game controllers - Bluetooth Hands-free Audio (driver 6.2.1.800) - High Definition Audio Device - High Definition Audio Device + System devices

ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fan ACPI Fixed Feature Button ACPI Lid ACPI Sleep Button ACPI Thermal Zone ACPI Thermal Zone ACPI Thermal Zone ACPI Thermal Zone ACPI Thermal Zone ACPI Thermal Zone Composite Bus Enumerator Direct Application Launch Button Direct memory access controller Extended IO Bus Extended IO Bus File as Volume Driver High Definition Audio Controller High precision event timer Intel(R) 82801 PCI Bridge - 2448 Intel(R) 82802 Firmware Hub Device Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 Intel(R) ICH9 Family PCI Express Root Port 3 - 2944 Intel(R) ICH9 Family PCI Express Root Port 5 - 2948 Intel(R) ICH9 Family PCI Express Root Port 6 - 294A Intel(R) ICH9M LPC Interface Controller - 2919 Microsoft ACPI-Compliant Embedded Controller Microsoft ACPI-Compliant System Microsoft System Management BIOS Driver Microsoft Virtual Drive Enumerator Driver Microsoft Windows Management Interface for ACPI Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40 Motherboard resources Motherboard resources Motherboard resources Numeric data processor PCI bus Plug and Play Software Device Enumerator Programmable interrupt controller Remote Desktop Device Redirector Bus System CMOS/real time clock System timer Terminal Server Keyboard Driver Terminal Server Mouse Driver UMBus Enumerator UMBus Enumerator UMBus Root Bus Enumerator Volume Manager

+ Universal Serial Bus controllers - HUAWEI Mobile Connect - Bus Enumerate Device (driver - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - USB Composite Device - USB Composite Device - USB Mass Storage Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub disassembling: [...] 0042acd4 mov 0042acd7 mov 0042acda mov 0042acdd mov 0042ace0 mov 0042ace2 > call reamByName (ASC.exe) 0042ace7 0734 push 0042ace9 push 0042aceb mov 0042aced call l120.bpl) 0042acf2 0735 mov [...] date/time computer name user name registered owner operating system system language system up time program up time processors physical memory free disk space display mode process id allocated memory executable current module exec. date/time version compiled with madExcept version : : : : : : : : : : : : : : : : : : : :

2.6.2.1207) 2934 2935 2936 2937 2938 2939 293A 293C

edx, [ebp-$14] ecx, [edx+eax*4] eax, [ebp-$18] eax, [eax+$14] edx, esi -$eea7 ($41be40) 0 0 eax, esi -$287da ($402518) edx, esi

; ZLIBArchive2.TZLBArc2.ExtractSt

; Classes.TStream.SetPosition (rt

2011-11-20, 20:30:06, 892ms COMPAQ-PC Compaq <admin> Compaq Windows 7 Service Pack 1 build 7601 Indonesian 1 hour 39 minutes 6 seconds 2x Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz 319/952 MB (free/total) (C:) 5,04 GB 1366x768, 32 bit $ec0 39,97 MB ASC.exe madExcept_.bpl 2011-06-16 14:29 4.0.1.204 Delphi 2009 3.0i

callstack crc : $201550fc, $0699aa0b, $0699aa0b count : 2 exception number : 1 exception class : EFOpenError exception message : Cannot open file "C:\Program Files\IObit\Advanced SystemCare 4\ZLBD8E3.tmp". The process cannot access the file because it is being used by another process. main thread ($334): 5004bcc7 +123 rtl120.bpl 5004bb80 +020 rtl120.bpl 0041bc43 +1c3 ASC.exe 0041bfd8 +198 ASC.exe 005435d1 +421 ASC.exe 0054b20b +013 ASC.exe 501efda1 +031 vcl120.bpl 501ef9e9 +011 vcl120.bpl 500071dd +01d rtl120.bpl 501fa092 +076 vcl120.bpl 0056a3ba +042 ASC.exe 768eed6a +010 kernel32.dll thread $1408: 77095a12 +0a ntdll.dll 754a3c66 +54 KERNELBASE.dll 770ace11 +63 ntdll.dll 768eed6a +10 kernel32.dll Classes TFileStream.Create Classes TFileStream.Create ZLIBArchive2 TZLBArc2.Extract ZLIBArchive2 TZLBArc2.ExtractStreamByName Unit1 1191 +71 TForm_Main.InitApp Unit1 2531 +7 TForm_Main.FormCreate Forms TCustomForm.DoCreate Forms TCustomForm.AfterConstruction System @AfterConstruction Forms TApplication.CreateForm ASC 72 +6 initialization BaseThreadInitThunk NtFsControlFile ConnectNamedPipe bsearch BaseThreadInitThunk

thread $1188: 77096a02 +0a ntdll.dll NtWaitForMultipleObjects 768eed6a +10 kernel32.dll BaseThreadInitThunk thread $130: 77096a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 768eed6a +10 kernel32.dll BaseThreadInitThunk thread $42c: 77096a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 768eed6a +10 kernel32.dll BaseThreadInitThunk thread $157c: 770957d2 +0a ntdll.dll 75481870 +4f KERNELBASE.dll 75481813 +0a KERNELBASE.dll 768eed6a +10 kernel32.dll NtDelayExecution SleepEx Sleep BaseThreadInitThunk

thread $1270: 77096a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 768eed6a +10 kernel32.dll BaseThreadInitThunk thread $524: 77096a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 768eed6a +10 kernel32.dll BaseThreadInitThunk modules: 002f0000 Scan.dll emCare 4 003d0000 datastate.dll emCare 4 00400000 ASC.exe 1.0.0.585 1.0.0.2 4.0.1.204 C:\Program Files\IObit\Advanced Syst C:\Program Files\IObit\Advanced Syst C:\Program Files\IObit\Advanced Syst

emCare 4 00740000 DiskMap.dll 1.0.0.0 C:\Program Files\IObit\Advanced Syst emCare 4 10000000 NtfsData.dll C:\Program Files\IObit\Advanced Syst emCare 4 50000000 rtl120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 50120000 vcl120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 50310000 vclx120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 57000000 madBasic_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 57800000 madDisAsm_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 59800000 madExcept_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 60900000 sqlite3.dll C:\Program Files\IObit\Advanced Syst emCare 4 64b10000 cabinet.dll 6.1.7601.17514 C:\Windows\system32 6bfd0000 olepro32.dll 6.1.7601.17514 C:\Windows\system32 6c120000 wmiutils.dll 6.1.7600.16385 C:\Windows\system32\wbem 6c3a0000 fastprox.dll 6.1.7601.17514 C:\Windows\system32\wbem 6df90000 wbemdisp.dll 6.1.7600.16385 C:\Windows\system32\wbem 6dfd0000 taskMgr.dll 1.1.0.215 C:\Program Files\IObit\Advanced Syst emCare 4 6e060000 NTDSAPI.dll 6.1.7600.16385 C:\Windows\system32 6f430000 wbemsvc.dll 6.1.7600.16385 C:\Windows\system32\wbem 6f460000 wbemcomn.dll 6.1.7601.17514 C:\Windows\system32 706b0000 winmm.dll 6.1.7601.17514 C:\Windows\system32 70c90000 oledlg.dll 6.1.7600.16385 C:\Windows\system32 70cf0000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 71330000 mpr.dll 6.1.7600.16385 C:\Windows\system32 73120000 msimg32.dll 6.1.7600.16385 C:\Windows\system32 731c0000 oleacc.dll 7.0.0.0 C:\Windows\system32 73530000 winspool.drv 6.1.7601.17514 C:\Windows\system32 73700000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32 73ad0000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 74610000 comctl32.dll 6.10.7601.17514 C:\Windows\WinSxS\x86_microsoft.wind ows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 74850000 wbemprox.dll 6.1.7600.16385 C:\Windows\system32\wbem 748b0000 version.dll 6.1.7600.16385 C:\Windows\system32 749f0000 rsaenh.dll 6.1.7600.16385 C:\Windows\system32 74c50000 CRYPTSP.dll 6.1.7600.16385 C:\Windows\system32 750f0000 SspiCli.dll 6.1.7601.17514 C:\Windows\system32 75170000 CRYPTBASE.dll 6.1.7600.16385 C:\Windows\system32 75180000 SXS.DLL 6.1.7601.17514 C:\Windows\system32 751e0000 RpcRtRemote.dll 6.1.7601.17514 C:\Windows\system32 751f0000 profapi.dll 6.1.7600.16385 C:\Windows\system32 75260000 MSASN1.dll 6.1.7601.17514 C:\Windows\system32 75270000 CFGMGR32.dll 6.1.7601.17514 C:\Windows\system32 75330000 wintrust.dll 6.1.7601.17514 C:\Windows\system32 75360000 crypt32.dll 6.1.7601.17514 C:\Windows\system32 75480000 KERNELBASE.dll 6.1.7601.17651 C:\Windows\system32 754d0000 DEVOBJ.dll 6.1.7600.16385 C:\Windows\system32 754f0000 oleaut32.dll 6.1.7601.17676 C:\Windows\system32 755d0000 LPK.dll 6.1.7600.16385 C:\Windows\system32 755e0000 URLMON.DLL 9.0.8112.16437 C:\Windows\system32 756f0000 NSI.dll 6.1.7600.16385 C:\Windows\system32 75700000 SHLWAPI.dll 6.1.7601.17514 C:\Windows\system32

75760000 758c0000 75940000 75ae0000 76730000 767c0000 767f0000 768a0000 769e0000 76ab0000 76b50000 76bf0000 76db0000 76e80000 76f30000 77050000 77190000 771d0000 771f0000 77210000 77230000

ole32.dll comdlg32.dll SETUPAPI.dll shell32.dll CLBCatQ.DLL IMAGEHLP.DLL msvcrt.dll kernel32.dll USER32.dll advapi32.dll USP10.dll iertutil.dll MSCTF.dll RPCRT4.dll WININET.dll ntdll.dll WS2_32.dll Normaliz.dll sechost.dll IMM32.DLL GDI32.dll

6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 6.1.7601.17678 2001.12.8530.16385 6.1.7601.17514 7.0.7600.16385 6.1.7601.17651 6.1.7601.17514 6.1.7601.17514 1.626.7601.17514 9.0.8112.16437 6.1.7600.16385 6.1.7601.17514 9.0.8112.16437 6.1.7601.17514 6.1.7601.17514 6.1.7600.16385 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 0 0 0 0 0 1 0 0 0 1 0 0 0 0 0 0 0 0 1 1 0 0 0 0 1 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 18 585 0 0 0 0 26 0 0 0 0 0 0 0 76 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 2 318 0 0 0 0 25 0 0 0 0 0 0 0 38 8 4

C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\SYSTEM32 C:\Windows\system32 C:\Windows\system32 C:\Windows\SYSTEM32 C:\Windows\system32 C:\Windows\system32

processes: 0000 Idle 0004 System 00fc smss.exe 0168 csrss.exe 019c wininit.exe 01a4 csrss.exe 01d4 services.exe 01ec lsass.exe 01f4 lsm.exe 020c winlogon.exe 029c svchost.exe 02dc USBSRService.exe 0308 svchost.exe 0350 svchost.exe 039c svchost.exe 03b8 svchost.exe 0444 svchost.exe 04a8 svchost.exe 05a4 Dwm.exe 05cc Explorer.EXE 05ec svchost.exe 062c spoolsv.exe 064c sched.exe 066c IMFsrv.exe 06b8 taskhost.exe 06f0 ASCService.exe 0734 avfwsvc.exe 074c avguard.exe 0770 AppleMobileDeviceService.exe 07c0 mDNSResponder.exe 07e0 btwdins.exe 010c PresentationFontCache.exe 0668 SynTPEnh.exe ics\SynTP 05b8 PDVDServ.exe ink\PowerDVD 0838 GrooveMonitor.exe

high normal

C:\Windows\system32 C:\Windows

normal

C:\Windows\system32

above normal C:\Program Files\Synapt normal normal C:\Program Files\CyberL C:\Program Files\Micros

1 9 1 9

oft Office\Office12 08ac HWDeviceService.exe 08d0 DCSHelper.exe Service 08e8 ijplmsvc.exe 0934 LSSrvc.exe 0968 ouc.exe 0974 RichVideo.exe 0990 SeaPort.EXE 09b8 svchost.exe 09ec TuneUpUtilitiesService32.exe 0a18 WLIDSVC.EXE 0a58 LaunchApplication.exe Nokia PC Suite 6 0a68 winampa.exe 0a80 WLIDSVCM.EXE 0ab4 ipoint.exe oft IntelliPoint 0b10 TuneUpUtilitiesApp32.exe Utilities 2011 0b30 FSStarter.exe rve Manager 0b98 igfxtray.exe 0ba8 hkcmd.exe 0bc4 igfxpers.exe 0bdc ZuneLauncher.exe 0c38 avgnt.exe AntiVir Desktop 0c44 dpupdchk.exe oft IntelliPoint 0c68 BJMYPRT.EXE MyPrinter 0c70 FileManager.exe rve Manager 0c78 CNSEMAIN.EXE Solution Menu EX 0c88 sidebar.exe s Sidebar 0c90 NMBgMonitor.exe Files\Ahead\Lib 0c98 USBSafelyRemove.exe fely Remove 0cb0 LightScribeControlPanel.exe Files\LightScribe 0cb8 IDMan.exe et Download Manager 0cc0 SnowWallpaper.exe ks Software\Animated Snow Desktop 0cc8 CursorFX.exe ck\CursorFX 0ce0 ASCTray.exe Advanced SystemCare 4 0ce8 SM?RTP.exe 0cf8 BTTray.exe M\Bluetooth Software 0d30 HalReader.exe re\HalReader 0d38 ONENOTEM.EXE oft Office\Office12 0f78 ymsgr_tray.exe

0 0 0 1 14 15 normal 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 111 0 0 0 0 0 0 0 0 30 normal

C:\ProgramData\Datacard

C:\Program Files\Nokia\ C:\Program Files\Winamp C:\Program Files\Micros C:\Program Files\TuneUp C:\Program Files\FileSe C:\Windows\System32 C:\Windows\System32 C:\Windows\System32 C:\Program Files\Zune C:\Program Files\Avira\ C:\Program Files\Micros C:\Program Files\Canon\ C:\Program Files\FileSe C:\Program Files\Canon\ C:\Program Files\Window C:\Program Files\Common C:\Program Files\USB Sa C:\Program Files\Common C:\Program Files\Intern C:\Program Files\Artdoc C:\Program Files\Stardo C:\Program Files\IObit\ C:\Program Files\Smadav C:\Program Files\WIDCOM C:\Program Files\Zabawa C:\Program Files\Micros C:\Program Files\Yahoo!

1 12 4 normal 0 0 0 1 15 43 normal 1 215 99 normal 1 15 13 normal 1 1 1 1 1 12 10 9 9 98 6 17 4 3 28 1 normal normal normal normal normal normal

1 9

1 18 13 normal 1 429 225 normal 1 124 32 normal 1 40 39 normal 1 9 5 normal

1 444 120 normal 1 51 22 normal 1 89 67 normal 1 62 38 normal Wallpaper 1 103 21 high 1 41 31 normal 1 60 38 normal 1 16 21 normal 1 83 65 normal 1 18 6 normal

1 93 10 normal

\Messenger 0c84 avshadow.exe 0458 conhost.exe 0b1c avmailc.exe 0bc0 avwebgrd.exe 0f3c svchost.exe 0ff8 NMIndexingService.exe 0df8 NMIndexStoreSvr.exe Files\Ahead\Lib 0ddc ServiceLayer.exe 0fc8 svchost.exe 0900 svchost.exe 10f0 BtStackServer.exe M\Bluetooth Software 11a0 SynTPHelper.exe ics\SynTP 11f8 IEMonitor.exe et Download Manager 13f0 svchost.exe 11c8 WUDFHost.exe 0898 DCSHelper.exe Service 0814 Mobile Partner.exe Partner 04d4 wmpnetwk.exe 06d4 chrome.exe \Local\Google\Chrome\Application 168c chrome.exe \Local\Google\Chrome\Application 1288 chrome.exe \Local\Google\Chrome\Application 148c chrome.exe \Local\Google\Chrome\Application 0bcc taskhost.exe 0768 audiodg.exe 17c4 CCleaner.exe er 0ec0 ASC.exe Advanced SystemCare 4 140c WmiPrvSE.exe

0 0 0 0 0 0 1 0 0 0 1

0 0 0 0 0 0 9 0 0 0 9

0 0 0 0 0 0 3 0 0 0 9 3

normal

C:\Program Files\Common

normal

C:\Program Files\WIDCOM

1 9

above normal C:\Program Files\Synapt C:\Program Files\Intern

1 18 16 normal 0 0 0 0 1 9 0 0 2

normal

C:\ProgramData\Datacard C:\Program Files\Mobile C:\Users\Compaq\AppData C:\Users\Compaq\AppData C:\Users\Compaq\AppData C:\Users\Compaq\AppData C:\Windows\system32 C:\Program Files\CClean

1 73 43 normal 0 0 0 1 62 39 normal 1 10 1 1 39 1 normal normal

1 14 18 normal 1 9 4 normal 0 0 0 1 105 44 normal

1 147 61 above normal C:\Program Files\IObit\ 0 0 0

hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery - Microsoft Composite Battery + Bluetooth Radios - HP Integrated Module with Bluetooth 2.1 Wireless Technology (driver 6.2.0.94 07) - Microsoft Bluetooth Enumerator + Bluetooth Virtual Devices - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200)

+ + + +

- Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Imaging Reference Objects (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth L2CAP Interface (driver 6.2.0.9500) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) Computer - ACPI x86-based PC Disk drives - Hitachi HTS725032A9A364 ATA Device - HUAWEI MMC Storage USB Device Display adapters - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) DVD/CD-ROM drives

+ +

+ + + +

+ +

+ +

+ +

- hp DVDRAM GT30L ATA Device - HUAWEI Mass Storage USB Device Human Interface Devices - Bluetooth HID Device - Bluetooth Remote Control (driver 6.2.1.200) IDE ATA/ATAPI controllers - ATA Channel 0 - ATA Channel 1 - ATA Channel 5 - Standard AHCI 1.0 Serial ATA Controller Imaging devices - HP Webcam [2 MP Fixed] Keyboards - Standard PS/2 Keyboard Mice and other pointing devices - Synaptics PS/2 Port TouchPad (driver 15.0.24.0) Modems - HUAWEI Mobile Connect - 3G Modem (driver 2.0.6.704) - Nokia Phone Bluetooth Modem (driver 6.82.0.1) - Standard Modem over Bluetooth link #2 - Standard Modem over Bluetooth link #3 - Standard Modem over Bluetooth link #4 - Standard Modem over Bluetooth link #5 - Standard Modem over Bluetooth link #6 - Standard Modem over Bluetooth link #7 - Standard Modem over Bluetooth link #8 Monitors - Generic PnP Monitor Network adapters - Bluetooth Device (Personal Area Network) - HUAWEI Mobile Connect - 3G Network Card (driver 6,0,1,271) - Microsoft Virtual WiFi Miniport Adapter - Realtek PCIe FE Family Controller (driver 7.46.610.2011) - Realtek RTL8191SE 802.11b/g/n WiFi Adapter (driver 2020.7.907.2011) Portable Devices - H:\ - JN..n.JLL (driver 6.83.31.1) Ports (COM & LPT) - HUAWEI Mobile Connect - 3G Application Interface (COM22) (driver 2.0.6.704) - HUAWEI Mobile Connect - 3G PC UI Interface (COM24) (driver 2.0.6.704) - Standard Serial over Bluetooth link (COM11) - Standard Serial over Bluetooth link (COM13) - Standard Serial over Bluetooth link (COM14) - Standard Serial over Bluetooth link (COM16) - Standard Serial over Bluetooth link (COM17) - Standard Serial over Bluetooth link (COM18) - Standard Serial over Bluetooth link (COM20) - Standard Serial over Bluetooth link (COM34) - Standard Serial over Bluetooth link (COM35) - Standard Serial over Bluetooth link (COM39) - Standard Serial over Bluetooth link (COM40) - Standard Serial over Bluetooth link (COM41) - Standard Serial over Bluetooth link (COM42) - Standard Serial over Bluetooth link (COM8) Processors - Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz - Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz Sound, video and game controllers - Bluetooth Hands-free Audio (driver 6.2.1.800) - High Definition Audio Device

- High Definition Audio Device + System devices - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fixed Feature Button - ACPI Lid - ACPI Sleep Button - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - Composite Bus Enumerator - Direct Application Launch Button - Direct memory access controller - Extended IO Bus - Extended IO Bus - File as Volume Driver - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 2448 - Intel(R) 82802 Firmware Hub Device - Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 - Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 - Intel(R) ICH9 Family PCI Express Root Port 3 - 2944 - Intel(R) ICH9 Family PCI Express Root Port 5 - 2948 - Intel(R) ICH9 Family PCI Express Root Port 6 - 294A - Intel(R) ICH9M LPC Interface Controller - 2919 - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft Virtual Drive Enumerator Driver - Microsoft Windows Management Interface for ACPI - Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40 - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Programmable interrupt controller - Remote Desktop Device Redirector Bus - System CMOS/real time clock - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Enumerator

- UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - HUAWEI Mobile Connect - Bus Enumerate Device (driver - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - USB Composite Device - USB Composite Device - USB Mass Storage Device - USB Mass Storage Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub disassembling: [...] 005435bd call bpl) 005435c2 mov 005435c4 01191 mov 005435c9 mov 005435cb mov 005435d1 > call treamByName (ASC.exe) 005435d6 01192 push 005435d8 push 005435da mov 005435dc call tl120.bpl) 005435e1 01193 mov [...] date/time computer name user name registered owner operating system system language system up time program up time processors physical memory free disk space display mode process id allocated memory executable current module exec. date/time : : : : : : : : : : : : : : : : :

2.6.2.1207) 2934 2935 2936 2937 2938 2939 293A 293C

-$1424da ($4010e8) edi, eax ecx, $543e88 edx, edi eax, [ebx+$3e4] -$127796 ($41be40) 0 0 eax, edi -$1410c9 ($402518) edx, edi

; System.TObject.Create (rtl120.

; ZLIBArchive2.TZLBArc2.ExtractS

; Classes.TStream.SetPosition (r

2011-11-26, 18:02:22, 931ms COMPAQ-PC Compaq <admin> Compaq Windows 7 Service Pack 1 build 7601 Indonesian 6 minutes 54 seconds 2 seconds 2x Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz 109/952 MB (free/total) (C:) 4,11 GB 1366x768, 32 bit $6b4 40,25 MB ASC.exe madExcept_.bpl 2011-06-16 14:29

version : 4.0.1.204 compiled with : Delphi 2009 madExcept version : 3.0i callstack crc : $201550fc, $d19337af, $0a6c5f64 count : 4 exception number : 1 exception class : EFOpenError exception message : Cannot open file "C:\Program Files\IObit\Advanced SystemCare 4\ZLB50E0.tmp". The process cannot access the file because it is being used by another process. main thread ($1088): 5004bcc7 +123 rtl120.bpl 5004bb80 +020 rtl120.bpl 0041bc43 +1c3 ASC.exe 0041bfd8 +198 ASC.exe 005436bd +50d ASC.exe 0054b20b +013 ASC.exe 501efda1 +031 vcl120.bpl 501ef9e9 +011 vcl120.bpl 500071dd +01d rtl120.bpl 501fa092 +076 vcl120.bpl 0056a3ba +042 ASC.exe 7687ed6a +010 kernel32.dll thread $17b4: 770a5a12 +0a ntdll.dll 752d3c66 +54 KERNELBASE.dll 770bce11 +63 ntdll.dll 7687ed6a +10 kernel32.dll Classes TFileStream.Create Classes TFileStream.Create ZLIBArchive2 TZLBArc2.Extract ZLIBArchive2 TZLBArc2.ExtractStreamByName Unit1 1211 +91 TForm_Main.InitApp Unit1 2531 +7 TForm_Main.FormCreate Forms TCustomForm.DoCreate Forms TCustomForm.AfterConstruction System @AfterConstruction Forms TApplication.CreateForm ASC 72 +6 initialization BaseThreadInitThunk NtFsControlFile ConnectNamedPipe bsearch BaseThreadInitThunk

thread $50c: 770a6a02 +0a ntdll.dll NtWaitForMultipleObjects 7687ed6a +10 kernel32.dll BaseThreadInitThunk thread $179c: 770a6a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7687ed6a +10 kernel32.dll BaseThreadInitThunk thread $17c4: 770a6a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7687ed6a +10 kernel32.dll BaseThreadInitThunk thread $1758: 770a57d2 +0a ntdll.dll 752b1870 +4f KERNELBASE.dll 752b1813 +0a KERNELBASE.dll 7687ed6a +10 kernel32.dll NtDelayExecution SleepEx Sleep BaseThreadInitThunk

thread $ac: 770a6a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7687ed6a +10 kernel32.dll BaseThreadInitThunk thread $17f0: 770a6a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 7687ed6a +10 kernel32.dll BaseThreadInitThunk thread $984: 770a57d2 +0a ntdll.dll 752b1870 +4f KERNELBASE.dll NtDelayExecution SleepEx

752b1813 +0a KERNELBASE.dll Sleep 0051d066 +42 ASC.exe Unit_PrivacyThread 397 +18 TPrivacyThread.Execute 7687ed6a +10 kernel32.dll BaseThreadInitThunk thread $a40: 770a57d2 +0a 752b1870 +4f 752b1813 +0a 0050abd2 +2e e 7687ed6a +10 ntdll.dll KERNELBASE.dll KERNELBASE.dll ASC.exe Unit_JunkfilesThread 204 +13 kernel32.dll NtDelayExecution SleepEx Sleep TJunkfilesThread.Execut BaseThreadInitThunk

modules: 00170000 datastate.dll 1.0.0.2 C:\Program Files\IObit\Advanced Syst emCare 4 00320000 Scan.dll 1.0.0.585 C:\Program Files\IObit\Advanced Syst emCare 4 00400000 ASC.exe 4.0.1.204 C:\Program Files\IObit\Advanced Syst emCare 4 00740000 DiskMap.dll 1.0.0.0 C:\Program Files\IObit\Advanced Syst emCare 4 10000000 NtfsData.dll C:\Program Files\IObit\Advanced Syst emCare 4 50000000 rtl120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 50120000 vcl120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 50310000 vclx120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 57000000 madBasic_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 57800000 madDisAsm_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 59800000 madExcept_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 60900000 sqlite3.dll C:\Program Files\IObit\Advanced Syst emCare 4 62dc0000 taskMgr.dll 1.1.0.215 C:\Program Files\IObit\Advanced Syst emCare 4 647a0000 cabinet.dll 6.1.7601.17514 C:\Windows\system32 66e70000 wbemdisp.dll 6.1.7600.16385 C:\Windows\system32\wbem 6a830000 wmiutils.dll 6.1.7600.16385 C:\Windows\system32\wbem 6b060000 fastprox.dll 6.1.7601.17514 C:\Windows\system32\wbem 6b140000 wbemprox.dll 6.1.7600.16385 C:\Windows\system32\wbem 6b150000 NTDSAPI.dll 6.1.7600.16385 C:\Windows\system32 6b1a0000 wbemcomn.dll 6.1.7601.17514 C:\Windows\system32 6b200000 wbemsvc.dll 6.1.7600.16385 C:\Windows\system32\wbem 6b7c0000 olepro32.dll 6.1.7601.17514 C:\Windows\system32 709d0000 winmm.dll 6.1.7601.17514 C:\Windows\system32 71220000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 71270000 mpr.dll 6.1.7600.16385 C:\Windows\system32 71360000 oledlg.dll 6.1.7600.16385 C:\Windows\system32 72a90000 msimg32.dll 6.1.7600.16385 C:\Windows\system32 72ba0000 oleacc.dll 7.0.0.0 C:\Windows\system32 72f10000 winspool.drv 6.1.7601.17514 C:\Windows\system32 730d0000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32 73e70000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 74130000 comctl32.dll 6.10.7601.17514 C:\Windows\WinSxS\x86_microsoft.wind ows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2 747c0000 version.dll 6.1.7600.16385 C:\Windows\system32

74a20000 74c80000 75110000 75180000 75190000 751f0000 75200000 75270000 75280000 752b0000 75300000 754b0000 754d0000 75500000 75580000 755e0000 75640000 75770000 75780000 75820000 76470000 76490000 76650000 766f0000 767a0000 76830000 76910000 76960000 76a10000 76ae0000 76af0000 76c90000 76cd0000 76de0000 76f00000 77060000 771b0000 77240000 77260000

rsaenh.dll CRYPTSP.dll SspiCli.dll CRYPTBASE.dll SXS.DLL RpcRtRemote.dll profapi.dll MSASN1.dll CFGMGR32.dll KERNELBASE.dll crypt32.dll DEVOBJ.dll wintrust.dll comdlg32.dll SHLWAPI.dll Normaliz.dll MSCTF.dll LPK.dll advapi32.dll shell32.dll IMM32.DLL iertutil.dll USP10.dll msvcrt.dll oleaut32.dll kernel32.dll GDI32.dll RPCRT4.dll USER32.dll NSI.dll SETUPAPI.dll WS2_32.dll URLMON.DLL WININET.dll ole32.dll ntdll.dll CLBCatQ.DLL sechost.dll IMAGEHLP.DLL

6.1.7600.16385 6.1.7600.16385 6.1.7601.17514 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 6.1.7601.17651 6.1.7601.17514 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 6.1.7600.16385 6.1.7600.16385 6.1.7600.16385 6.1.7601.17514 6.1.7601.17678 6.1.7601.17514 9.0.8112.16437 1.626.7601.17514 7.0.7600.16385 6.1.7601.17676 6.1.7601.17651 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 9.0.8112.16437 9.0.8112.16437 6.1.7601.17514 6.1.7601.17514 2001.12.8530.16385 6.1.7600.16385 6.1.7601.17514 0 0 0 0 0 1 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\SYSTEM32 C:\Windows\system32 C:\Windows\SYSTEM32 C:\Windows\system32

processes: 0000 Idle 0004 System 00fc smss.exe 0160 csrss.exe 01a0 wininit.exe 01a8 csrss.exe 01d8 services.exe 01e8 lsass.exe 01f0 lsm.exe 0208 winlogon.exe 0274 svchost.exe 02b8 USBSRService.exe 02ec svchost.exe 0338 svchost.exe 0380 svchost.exe 039c svchost.exe 03e4 audiodg.exe 0410 svchost.exe 0470 svchost.exe

04dc svchost.exe 0594 spoolsv.exe 05b0 sched.exe 05cc IMFsrv.exe 063c ASCService.exe 0670 taskhost.exe 069c avfwsvc.exe 06d8 avguard.exe 0704 Dwm.exe 0718 AppleMobileDeviceService.exe 073c Explorer.EXE 0768 mDNSResponder.exe 0794 btwdins.exe 07e4 PresentationFontCache.exe 0108 taskeng.exe 01d0 HWDeviceService.exe 0394 ijplmsvc.exe 0438 taskeng.exe 0748 SynTPEnh.exe ics\SynTP 07c4 PDVDServ.exe ink\PowerDVD 0134 LSSrvc.exe 0828 GrooveMonitor.exe oft Office\Office12 0884 DCSHelper.exe Service 0898 ouc.exe 08a4 RichVideo.exe 08c8 LaunchApplication.exe Nokia PC Suite 6 08ec winampa.exe 090c SeaPort.EXE 0918 ipoint.exe oft IntelliPoint 0950 svchost.exe 0990 TuneUpUtilitiesService32.exe 09c4 FSStarter.exe rve Manager 09e0 WLIDSVC.EXE 09e8 igfxtray.exe 0a54 hkcmd.exe 0a94 FileManager.exe rve Manager 0aa0 igfxpers.exe 0b0c WLIDSVCM.EXE 0b5c ZuneLauncher.exe 0b98 dpupdchk.exe oft IntelliPoint 0be8 TuneUpUtilitiesApp32.exe Utilities 2011 0c48 avgnt.exe AntiVir Desktop 0c54 BJMYPRT.EXE MyPrinter 0c90 CNSEMAIN.EXE Solution Menu EX 0cb4 sidebar.exe s Sidebar 0cbc NMBgMonitor.exe

0 0 0 0 0 1 0 0 1 0 1 0 0 0 1 0 0 1 1

0 0 0 0 0 26 0 0 17 0 814 0 0 0 9 0 0 9 76

0 0 0 0 0 25 0 0 2 0 361 0 0 0 3 0 0 3 37 8 0 4

normal high normal

C:\Windows\system32 C:\Windows\system32 C:\Windows

normal

C:\Windows\system32

normal C:\Windows\system32 above normal C:\Program Files\Synapt normal normal C:\Program Files\CyberL C:\Program Files\Micros C:\ProgramData\Datacard

1 9 0 0 1 9

1 14 15 normal 0 0 0 0 0 0 1 111 28 normal 1 12 4 normal 0 0 0 1 15 44 normal 0 0 0 0 0 0 1 15 13 normal 0 1 1 1 1 0 1 1 0 12 10 429 9 0 9 4 0 6 normal 17 normal 230 normal 5 0 3 1 normal normal normal

C:\Program Files\Nokia\ C:\Program Files\Winamp C:\Program Files\Micros

C:\Program Files\FileSe C:\Windows\System32 C:\Windows\System32 C:\Program Files\FileSe C:\Windows\System32 C:\Program Files\Zune C:\Program Files\Micros C:\Program Files\TuneUp C:\Program Files\Avira\ C:\Program Files\Canon\ C:\Program Files\Canon\ C:\Program Files\Window C:\Program Files\Common

1 215 100 normal 1 88 26 normal 1 18 13 normal 1 102 17 normal 1 31 25 normal 1 9 6 normal

Files\Ahead\Lib 0cc8 USBSafelyRemove.exe fely Remove 0cec LightScribeControlPanel.exe Files\LightScribe 0cf4 IDMan.exe et Download Manager 0d00 SnowWallpaper.exe ks Software\Animated Snow Desktop 0d0c CursorFX.exe ck\CursorFX 0d8c ASCTray.exe Advanced SystemCare 4 0d98 SM?RTP.exe 0e48 IMF.exe 0e90 BTTray.exe M\Bluetooth Software 0eec HalReader.exe re\HalReader 0f2c ONENOTEM.EXE oft Office\Office12 0f40 avshadow.exe 0f58 conhost.exe 08d8 avmailc.exe 0850 avwebgrd.exe 05ec svchost.exe 0f80 ymsgr_tray.exe \Messenger 0edc NMIndexingService.exe 0f98 ServiceLayer.exe 0a44 NMIndexStoreSvr.exe Files\Ahead\Lib 1024 svchost.exe 1074 IEMonitor.exe et Download Manager 10d0 svchost.exe 1190 BtStackServer.exe M\Bluetooth Software 141c sppsvc.exe 1460 svchost.exe 16f4 CCleaner.exe er 173c consent.exe 0a3c WmiPrvSE.exe 17bc TrustedInstaller.exe 151c taskhost.exe 0ad4 AcroRd32Info.exe Reader 9.0\Reader 0778 dllhost.exe 06b4 ASC.exe Advanced SystemCare 4 0f94 igfxsrvc.exe

1 356 82 normal 1 51 22 normal 1 97 70 normal 1 60 39 normal Wallpaper 1 103 21 high 1 41 31 normal 1 60 40 normal 1 0 0 1 16 22 normal 1 84 66 normal 1 18 6 0 0 0 0 0 1 0 0 0 0 0 93 normal

C:\Program Files\USB Sa C:\Program Files\Common C:\Program Files\Intern C:\Program Files\Artdoc C:\Program Files\Stardo C:\Program Files\IObit\ C:\Program Files\Smadav C:\Program Files\WIDCOM C:\Program Files\Zabawa C:\Program Files\Micros

0 0 0 0 0 10 normal 0 0 3

C:\Program Files\Yahoo!

0 0 0 0 1 9

normal

C:\Program Files\Common C:\Program Files\Intern C:\Program Files\WIDCOM

0 0 0 1 18 16 normal 0 0 1 9 0 0 0 0 1 9 1 0 0 0 1 0 0 0 0 76 0 9 0 0 3 normal

normal

C:\Program Files\CClean

0 0 0 0 65 normal

C:\Program Files\Adobe\

0 0 0 1 147 61 above normal C:\Program Files\IObit\ 1 9 3 normal C:\Windows\system32

hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery - Microsoft Composite Battery + Bluetooth Radios - HP Integrated Module with Bluetooth 2.1 Wireless Technology (driver 6.2.0.94

07) - Microsoft Bluetooth Enumerator + Bluetooth Virtual Devices - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Imaging Reference Objects (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth L2CAP Interface (driver 6.2.0.9500) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200)

+ + + + +

+ + + +

+ +

+ +

- Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) Computer - ACPI x86-based PC Disk drives - Hitachi HTS725032A9A364 ATA Device Display adapters - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) DVD/CD-ROM drives - hp DVDRAM GT30L ATA Device Human Interface Devices - Bluetooth HID Device - Bluetooth Remote Control (driver 6.2.1.200) - USB Input Device IDE ATA/ATAPI controllers - ATA Channel 0 - ATA Channel 1 - ATA Channel 5 - Standard AHCI 1.0 Serial ATA Controller Imaging devices - HP Webcam [2 MP Fixed] Keyboards - Standard PS/2 Keyboard Mice and other pointing devices - HID-compliant mouse - Synaptics PS/2 Port TouchPad (driver 15.0.24.0) Modems - Nokia Phone Bluetooth Modem (driver 6.82.0.1) - Standard Modem over Bluetooth link #2 - Standard Modem over Bluetooth link #3 - Standard Modem over Bluetooth link #4 - Standard Modem over Bluetooth link #5 - Standard Modem over Bluetooth link #6 - Standard Modem over Bluetooth link #7 - Standard Modem over Bluetooth link #8 Monitors - Generic PnP Monitor Network adapters - Bluetooth Device (Personal Area Network) - Microsoft Virtual WiFi Miniport Adapter - Realtek PCIe FE Family Controller (driver 7.46.610.2011) - Realtek RTL8191SE 802.11b/g/n WiFi Adapter (driver 2020.7.907.2011) Portable Devices - JN..n.JLL (driver 6.83.31.1) Ports (COM & LPT) - Standard Serial over Bluetooth link (COM11) - Standard Serial over Bluetooth link (COM13) - Standard Serial over Bluetooth link (COM14) - Standard Serial over Bluetooth link (COM16) - Standard Serial over Bluetooth link (COM17) - Standard Serial over Bluetooth link (COM18) - Standard Serial over Bluetooth link (COM20) - Standard Serial over Bluetooth link (COM34) - Standard Serial over Bluetooth link (COM35) - Standard Serial over Bluetooth link (COM39) - Standard Serial over Bluetooth link (COM40) - Standard Serial over Bluetooth link (COM41) - Standard Serial over Bluetooth link (COM42)

- Standard Serial over Bluetooth link (COM8) + Processors - Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz - Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz + Sound, video and game controllers - Bluetooth Hands-free Audio (driver 6.2.1.800) - High Definition Audio Device - High Definition Audio Device + System devices - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fixed Feature Button - ACPI Lid - ACPI Sleep Button - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - Composite Bus Enumerator - Direct Application Launch Button - Direct memory access controller - Extended IO Bus - Extended IO Bus - File as Volume Driver - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 2448 - Intel(R) 82802 Firmware Hub Device - Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 - Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 - Intel(R) ICH9 Family PCI Express Root Port 3 - 2944 - Intel(R) ICH9 Family PCI Express Root Port 5 - 2948 - Intel(R) ICH9 Family PCI Express Root Port 6 - 294A - Intel(R) ICH9M LPC Interface Controller - 2919 - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft Virtual Drive Enumerator Driver - Microsoft Windows Management Interface for ACPI - Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40 - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Programmable interrupt controller

- Remote Desktop Device Redirector Bus - System CMOS/real time clock - System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - HUAWEI Mobile Connect - Bus Enumerate Device (driver - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - USB Composite Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub disassembling: [...] 005436aa mov 005436ac call 005436af 01211 mov 005436b4 mov 005436b7 mov 005436bd > call treamByName (ASC.exe) 005436c2 01212 push 005436c4 push 005436c6 mov 005436c9 call tl120.bpl) 005436ce 01213 mov [...] date/time computer name user name registered owner operating system system language system up time program up time processors physical memory free disk space display mode process id allocated memory executable : : : : : : : : : : : : : : :

2.6.2.1207) 2934 2935 2936 2937 2938 2939 293A 293C

ecx, [eax] dword ptr [ecx+$70] ecx, $543f1c edx, [ebp-$20] eax, [ebx+$3e4] -$127882 ($41be40) 0 0 eax, [ebp-$20] -$1411b6 ($402518) edx, [ebp-$20]

; ZLIBArchive2.TZLBArc2.ExtractS

; Classes.TStream.SetPosition (r

2011-12-03, 12:05:44, 83ms COMPAQ-PC Compaq <admin> Compaq Windows 7 Service Pack 1 build 7601 Indonesian 6 minutes 21 seconds 2 seconds 2x Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz 116/952 MB (free/total) (C:) 3,70 GB 1366x768, 32 bit $115c 39,92 MB ASC.exe

current module : madExcept_.bpl exec. date/time : 2011-06-16 14:29 version : 4.0.1.204 compiled with : Delphi 2009 madExcept version : 3.0i callstack crc : $201550fc, $e42c9548, $d110270d exception number : 1 exception class : EFOpenError exception message : Cannot open file "C:\Program Files\IObit\Advanced SystemCare 4\ZLBD099.tmp". The process cannot access the file because it is being used by another process. main thread ($135c): 5004bcc7 +123 rtl120.bpl 5004bb80 +020 rtl120.bpl 0041bc43 +1c3 ASC.exe 0041bfd8 +198 ASC.exe 00543695 +4e5 ASC.exe 0054b20b +013 ASC.exe 501efda1 +031 vcl120.bpl 501ef9e9 +011 vcl120.bpl 500071dd +01d rtl120.bpl 501fa092 +076 vcl120.bpl 0056a3ba +042 ASC.exe 758ced6a +010 kernel32.dll thread $83c: 77055a12 +0a 75253c66 +54 7706ce11 +63 758ced6a +10 ntdll.dll KERNELBASE.dll ntdll.dll kernel32.dll Classes TFileStream.Create Classes TFileStream.Create ZLIBArchive2 TZLBArc2.Extract ZLIBArchive2 TZLBArc2.ExtractStreamByName Unit1 1207 +87 TForm_Main.InitApp Unit1 2531 +7 TForm_Main.FormCreate Forms TCustomForm.DoCreate Forms TCustomForm.AfterConstruction System @AfterConstruction Forms TApplication.CreateForm ASC 72 +6 initialization BaseThreadInitThunk NtFsControlFile ConnectNamedPipe bsearch BaseThreadInitThunk

thread $c6c: 77056a02 +0a ntdll.dll NtWaitForMultipleObjects 758ced6a +10 kernel32.dll BaseThreadInitThunk thread $c08: 77056a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 758ced6a +10 kernel32.dll BaseThreadInitThunk thread $13a8: 77056a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 758ced6a +10 kernel32.dll BaseThreadInitThunk thread $1258: 770557d2 +0a ntdll.dll 75231870 +4f KERNELBASE.dll 75231813 +0a KERNELBASE.dll 758ced6a +10 kernel32.dll NtDelayExecution SleepEx Sleep BaseThreadInitThunk

thread $13a4: 77056a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 758ced6a +10 kernel32.dll BaseThreadInitThunk thread $8b8: 77056a32 +0a ntdll.dll NtWaitForWorkViaWorkerFactory 758ced6a +10 kernel32.dll BaseThreadInitThunk thread $10a4: 770557d2 +0a ntdll.dll NtDelayExecution

75231870 75231813 0051d066 758ced6a

+4f +0a +42 +10

KERNELBASE.dll SleepEx KERNELBASE.dll Sleep ASC.exe Unit_PrivacyThread 397 +18 TPrivacyThread.Execute kernel32.dll BaseThreadInitThunk ntdll.dll KERNELBASE.dll KERNELBASE.dll ASC.exe Unit_JunkfilesThread 204 +13 kernel32.dll NtDelayExecution SleepEx Sleep TJunkfilesThread.Execut BaseThreadInitThunk

thread $264: 770557d2 +0a 75231870 +4f 75231813 +0a 0050abd2 +2e e 758ced6a +10

modules: 001e0000 DiskMap.dll 1.0.0.0 C:\Program Files\IObit\Advanced Syst emCare 4 00390000 datastate.dll 1.0.0.2 C:\Program Files\IObit\Advanced Syst emCare 4 00400000 ASC.exe 4.0.1.204 C:\Program Files\IObit\Advanced Syst emCare 4 00740000 Scan.dll 1.0.0.585 C:\Program Files\IObit\Advanced Syst emCare 4 10000000 NtfsData.dll C:\Program Files\IObit\Advanced Syst emCare 4 50000000 rtl120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 50120000 vcl120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 50310000 vclx120.bpl 12.0.3210.17555 C:\Program Files\IObit\Advanced Syst emCare 4 57000000 madBasic_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 57800000 madDisAsm_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 59800000 madExcept_.bpl C:\Program Files\IObit\Advanced Syst emCare 4 60900000 sqlite3.dll C:\Program Files\IObit\Advanced Syst emCare 4 665b0000 wbemdisp.dll 6.1.7600.16385 C:\Windows\system32\wbem 67310000 taskMgr.dll 1.1.0.215 C:\Program Files\IObit\Advanced Syst emCare 4 68720000 cabinet.dll 6.1.7601.17514 C:\Windows\system32 6b190000 wmiutils.dll 6.1.7600.16385 C:\Windows\system32\wbem 6b360000 olepro32.dll 6.1.7601.17514 C:\Windows\system32 6b380000 wbemprox.dll 6.1.7600.16385 C:\Windows\system32\wbem 6b390000 NTDSAPI.dll 6.1.7600.16385 C:\Windows\system32 6b3b0000 fastprox.dll 6.1.7601.17514 C:\Windows\system32\wbem 6b450000 wbemsvc.dll 6.1.7600.16385 C:\Windows\system32\wbem 6b4d0000 wbemcomn.dll 6.1.7601.17514 C:\Windows\system32 70c10000 winmm.dll 6.1.7601.17514 C:\Windows\system32 71210000 mpr.dll 6.1.7600.16385 C:\Windows\system32 71300000 oledlg.dll 6.1.7600.16385 C:\Windows\system32 72680000 wsock32.dll 6.1.7600.16385 C:\Windows\system32 72a40000 msimg32.dll 6.1.7600.16385 C:\Windows\system32 72ae0000 oleacc.dll 7.0.0.0 C:\Windows\system32 72ec0000 winspool.drv 6.1.7601.17514 C:\Windows\system32 73df0000 uxtheme.dll 6.1.7600.16385 C:\Windows\system32 73e30000 dwmapi.dll 6.1.7600.16385 C:\Windows\system32 740e0000 comctl32.dll 6.10.7601.17514 C:\Windows\WinSxS\x86_microsoft.wind ows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2

74770000 749d0000 74c30000 750c0000 75130000 75140000 751a0000 751b0000 75220000 75230000 75280000 753a0000 75460000 75490000 754b0000 75500000 75520000 756e0000 75880000 75960000 75980000 75a30000 75a60000 75b00000 75b90000 75c30000 75c70000 768c0000 76990000 76a10000 76a70000 76bd0000 76ce0000 76d70000 76e20000 76ef0000 77010000 77150000 77160000 77170000

version.dll rsaenh.dll CRYPTSP.dll SspiCli.dll CRYPTBASE.dll SXS.DLL RpcRtRemote.dll profapi.dll MSASN1.dll KERNELBASE.dll crypt32.dll CFGMGR32.dll wintrust.dll DEVOBJ.dll GDI32.dll IMM32.DLL iertutil.dll SETUPAPI.dll kernel32.dll sechost.dll RPCRT4.dll IMAGEHLP.DLL advapi32.dll CLBCatQ.DLL USP10.dll WS2_32.dll shell32.dll USER32.dll comdlg32.dll SHLWAPI.dll ole32.dll URLMON.DLL oleaut32.dll msvcrt.dll MSCTF.dll WININET.dll ntdll.dll Normaliz.dll LPK.dll NSI.dll

6.1.7600.16385 6.1.7600.16385 6.1.7600.16385 6.1.7601.17514 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 6.1.7600.16385 6.1.7601.17514 6.1.7601.17651 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 9.0.8112.16437 6.1.7601.17514 6.1.7601.17651 6.1.7600.16385 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 2001.12.8530.16385 1.626.7601.17514 6.1.7601.17514 6.1.7601.17678 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 6.1.7601.17514 9.0.8112.16437 6.1.7601.17676 7.0.7600.16385 6.1.7600.16385 9.0.8112.16437 6.1.7601.17514 6.1.7600.16385 6.1.7600.16385 6.1.7600.16385 0 0 0 0 0 1 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\SYSTEM32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32 C:\Windows\SYSTEM32 C:\Windows\system32 C:\Windows\system32 C:\Windows\system32

processes: 0000 Idle 0004 System 00fc smss.exe 0164 csrss.exe 019c wininit.exe 01a8 csrss.exe 01d8 services.exe 01e8 lsass.exe 01f0 lsm.exe 0208 winlogon.exe 027c svchost.exe 02c0 USBSRService.exe 02e0 svchost.exe 031c svchost.exe 0380 svchost.exe 03a4 svchost.exe 03e8 audiodg.exe 0414 svchost.exe

047c svchost.exe 04e4 svchost.exe 05a0 spoolsv.exe 05bc sched.exe 05d8 IMFsrv.exe 0634 ASCService.exe 0680 taskhost.exe 06bc avfwsvc.exe 06d8 Dwm.exe 0704 avguard.exe 0720 Explorer.EXE 0750 AppleMobileDeviceService.exe 0788 mDNSResponder.exe 07ac btwdins.exe 07e4 PresentationFontCache.exe 0170 HWDeviceService.exe 01d0 ijplmsvc.exe 03e0 LSSrvc.exe 045c DCSHelper.exe Service 0660 ouc.exe 0658 RichVideo.exe 0820 SeaPort.EXE 0828 SynTPEnh.exe ics\SynTP 0830 PDVDServ.exe ink\PowerDVD 0848 GrooveMonitor.exe oft Office\Office12 0874 svchost.exe 08b0 TuneUpUtilitiesService32.exe 08bc LaunchApplication.exe Nokia PC Suite 6 08f8 WLIDSVC.EXE 0950 WLIDSVCM.EXE 09fc TuneUpUtilitiesApp32.exe Utilities 2011 0a3c winampa.exe 0a44 ipoint.exe oft IntelliPoint 0a60 FSStarter.exe rve Manager 0a68 igfxtray.exe 0a70 hkcmd.exe 0a78 igfxpers.exe 0a84 ZuneLauncher.exe 0a94 avgnt.exe AntiVir Desktop 0a9c BJMYPRT.EXE MyPrinter 0abc CNSEMAIN.EXE Solution Menu EX 0ae4 sidebar.exe s Sidebar 0b1c NMBgMonitor.exe Files\Ahead\Lib 0b38 USBSafelyRemove.exe fely Remove 0b4c FileManager.exe rve Manager

0 0 0 0 0 0 1 0 1 0 1 0 0 0 0 0 0 0 1 0 0 0 1

0 0 0 0 0 0 26 0 16 0 791 0 0 0 0 0 0 0 14 0 0 0 76

0 0 0 0 0 0 22 0 2 0 354 0 0 0 0 0 0 0 14

normal high normal

C:\Windows\system32 C:\Windows\system32 C:\Windows

normal

C:\ProgramData\Datacard

0 0 0 38 above normal C:\Program Files\Synapt 7 4 normal normal C:\Program Files\CyberL C:\Program Files\Micros

1 9 1 9

0 0 0 0 0 0 1 111 27 normal 0 0 0 0 0 0 1 218 101 normal 1 12 4 normal 1 15 42 normal 1 15 13 normal 1 1 1 1 1 12 10 9 9 88 5 16 5 3 26 normal normal normal normal normal

C:\Program Files\Nokia\

C:\Program Files\TuneUp C:\Program Files\Winamp C:\Program Files\Micros C:\Program Files\FileSe C:\Windows\System32 C:\Windows\System32 C:\Windows\System32 C:\Program Files\Zune C:\Program Files\Avira\ C:\Program Files\Canon\ C:\Program Files\Canon\ C:\Program Files\Window C:\Program Files\Common C:\Program Files\USB Sa C:\Program Files\FileSe

1 18 13 normal 1 102 16 normal 1 30 25 normal 1 9 6 normal

1 355 82 normal 1 429 226 normal

0bdc LightScribeControlPanel.exe Files\LightScribe 0c10 IDMan.exe et Download Manager 0c48 SnowWallpaper.exe ks Software\Animated Snow Desktop 0cdc dpupdchk.exe oft IntelliPoint 0ce4 CursorFX.exe ck\CursorFX 0d0c ASCTray.exe Advanced SystemCare 4 0d1c SM?RTP.exe 0d6c BTTray.exe M\Bluetooth Software 0db8 IMF.exe 0dcc HalReader.exe re\HalReader 0e14 avshadow.exe 0e44 conhost.exe 0e50 ONENOTEM.EXE oft Office\Office12 0f4c avmailc.exe 0f68 avwebgrd.exe 09f0 ServiceLayer.exe 06d0 svchost.exe 1038 NMIndexingService.exe 106c svchost.exe 10dc svchost.exe 112c NMIndexStoreSvr.exe Files\Ahead\Lib 1188 ymsgr_tray.exe \Messenger 1214 BtStackServer.exe M\Bluetooth Software 12a4 IEMonitor.exe et Download Manager 12dc SynTPHelper.exe ics\SynTP 15b8 sppsvc.exe 15f4 svchost.exe 1300 TrustedInstaller.exe 0578 WMIADAP.exe 0c9c WmiPrvSE.exe 0850 AcroRd32Info.exe Reader 9.0\Reader 077c CCleaner.exe er 115c ASC.exe Advanced SystemCare 4 0ebc WmiPrvSE.exe 0284 taskhost.exe

1 51 22 normal 1 89 67 normal 1 60 39 normal Wallpaper 1 4 1 normal 1 103 21 high 1 41 31 normal 1 63 43 normal 1 16 22 normal 1 0 0 1 83 65 normal 0 0 0 0 0 0 1 18 6 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 9 0 0 0 0 0 0 0 3

C:\Program Files\Common C:\Program Files\Intern C:\Program Files\Artdoc C:\Program Files\Micros C:\Program Files\Stardo C:\Program Files\IObit\ C:\Program Files\Smadav C:\Program Files\WIDCOM C:\Program Files\Zabawa

normal

C:\Program Files\Micros

normal

C:\Program Files\Common C:\Program Files\Yahoo! C:\Program Files\WIDCOM C:\Program Files\Intern

1 93 10 normal 1 9 9 normal

1 18 16 normal 1 9 0 0 0 0 0 1 0 0 0 0 0 77 3

above normal C:\Program Files\Synapt

0 0 0 0 0 66 normal

C:\Program Files\Adobe\

1 102 38 above normal C:\Program Files\CClean 1 146 60 above normal C:\Program Files\IObit\ 0 0 0 0 0 0

hardware: + Batteries - Microsoft AC Adapter - Microsoft ACPI-Compliant Control Method Battery - Microsoft Composite Battery + Bluetooth Radios - HP Integrated Module with Bluetooth 2.1 Wireless Technology (driver 6.2.0.94

07) - Microsoft Bluetooth Enumerator + Bluetooth Virtual Devices - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Remote Control Target (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth AV Source (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth FTP (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Headset AG (driver 6.2.1.200) - Bluetooth Imaging Reference Objects (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth Imaging Responder (driver 6.2.1.200) - Bluetooth L2CAP Interface (driver 6.2.0.9500) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth OPP (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200) - Bluetooth Remote Control (driver 6.2.1.200)

+ + + + + +

+ + + +

+ +

+ +

- Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) - Bluetooth SyncML (driver 6.2.1.200) Computer - ACPI x86-based PC Disk drives - Hitachi HTS725032A9A364 ATA Device Display adapters - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) - Mobile Intel(R) 4 Series Express Chipset Family (driver 8.15.10.2302) DVD/CD-ROM drives - hp DVDRAM GT30L ATA Device Human Interface Devices - Bluetooth HID Device - Bluetooth Remote Control (driver 6.2.1.200) IDE ATA/ATAPI controllers - ATA Channel 0 - ATA Channel 1 - ATA Channel 5 - Standard AHCI 1.0 Serial ATA Controller Imaging devices - HP Webcam [2 MP Fixed] Keyboards - Standard PS/2 Keyboard Mice and other pointing devices - Synaptics PS/2 Port TouchPad (driver 15.0.24.0) Modems - Nokia Phone Bluetooth Modem (driver 6.82.0.1) - Standard Modem over Bluetooth link #2 - Standard Modem over Bluetooth link #3 - Standard Modem over Bluetooth link #4 - Standard Modem over Bluetooth link #5 - Standard Modem over Bluetooth link #6 - Standard Modem over Bluetooth link #7 - Standard Modem over Bluetooth link #8 Monitors - Generic PnP Monitor Network adapters - Bluetooth Device (Personal Area Network) - Microsoft Virtual WiFi Miniport Adapter - Realtek PCIe FE Family Controller (driver 7.46.610.2011) - Realtek RTL8191SE 802.11b/g/n WiFi Adapter (driver 2020.7.907.2011) Portable Devices - JN..n.JLL (driver 6.83.31.1) Ports (COM & LPT) - Standard Serial over Bluetooth link (COM11) - Standard Serial over Bluetooth link (COM13) - Standard Serial over Bluetooth link (COM14) - Standard Serial over Bluetooth link (COM16) - Standard Serial over Bluetooth link (COM17) - Standard Serial over Bluetooth link (COM18) - Standard Serial over Bluetooth link (COM20) - Standard Serial over Bluetooth link (COM34) - Standard Serial over Bluetooth link (COM35) - Standard Serial over Bluetooth link (COM39) - Standard Serial over Bluetooth link (COM40) - Standard Serial over Bluetooth link (COM41) - Standard Serial over Bluetooth link (COM42) - Standard Serial over Bluetooth link (COM8) Processors

- Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz - Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz + Sound, video and game controllers - Bluetooth Hands-free Audio (driver 6.2.1.800) - High Definition Audio Device - High Definition Audio Device + System devices - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fan - ACPI Fixed Feature Button - ACPI Lid - ACPI Sleep Button - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - ACPI Thermal Zone - Composite Bus Enumerator - Direct Application Launch Button - Direct memory access controller - Extended IO Bus - Extended IO Bus - File as Volume Driver - High Definition Audio Controller - High precision event timer - Intel(R) 82801 PCI Bridge - 2448 - Intel(R) 82802 Firmware Hub Device - Intel(R) ICH9 Family PCI Express Root Port 1 - 2940 - Intel(R) ICH9 Family PCI Express Root Port 2 - 2942 - Intel(R) ICH9 Family PCI Express Root Port 3 - 2944 - Intel(R) ICH9 Family PCI Express Root Port 5 - 2948 - Intel(R) ICH9 Family PCI Express Root Port 6 - 294A - Intel(R) ICH9M LPC Interface Controller - 2919 - Microsoft ACPI-Compliant Embedded Controller - Microsoft ACPI-Compliant System - Microsoft System Management BIOS Driver - Microsoft Virtual Drive Enumerator Driver - Microsoft Windows Management Interface for ACPI - Mobile Intel(R) 4 Series Chipset Processor to DRAM Controller - 2A40 - Motherboard resources - Motherboard resources - Motherboard resources - Numeric data processor - PCI bus - Plug and Play Software Device Enumerator - Programmable interrupt controller - Remote Desktop Device Redirector Bus - System CMOS/real time clock

- System timer - Terminal Server Keyboard Driver - Terminal Server Mouse Driver - UMBus Enumerator - UMBus Root Bus Enumerator - Volume Manager + Universal Serial Bus controllers - HUAWEI Mobile Connect - Bus Enumerate Device (driver - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB Universal Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - Intel(R) ICH9 Family USB2 Enhanced Host Controller - USB Composite Device - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub - USB Root Hub disassembling: [...] 00543680 call bpl) 00543685 mov 00543688 01207 mov 0054368d mov 0054368f mov 00543695 > call treamByName (ASC.exe) 0054369a 01208 push 0054369c push 0054369e mov 005436a0 call tl120.bpl) 005436a5 01209 mov [...]

2.6.2.1207) 2934 2935 2936 2937 2938 2939 293A 293C

-$14259d ($4010e8) [ebp-$24], eax ecx, $543f00 edx, edi eax, [ebx+$3e4] -$12785a ($41be40) 0 0 eax, edi -$14118d ($402518) edx, edi

; System.TObject.Create (rtl120.

; ZLIBArchive2.TZLBArc2.ExtractS

; Classes.TStream.SetPosition (r