Jump to content

Suspicious popup and possible ping.exe problem

mateoloco

By mateoloco
in Resolved Malware Removal Logs

 Share

Recommended Posts

mateoloco

mateoloco

Posted
Posted

Around 3:30 PM EST on Monday, November 28, a popup came on my system tray telling me that my computer was infected and to download some privacy protection. It looked like a Microsoft Windows (4 color shield), but I was suspicious and did not download anything from them. It wasn't allowing me to run any programs and it created an shortcut called privay protection on my desktop. I restarted the computer in safe mode and deleted (sent to the trash folder) the desktop program as well as the original program (called privacy, which was in C:\Documents and Settings\All Users\Application Data). Since then I have run Malwarebytes several times and found several items that have been quarantined. I am getting random popups, and when I click on a link from a google search, it redirects me. Ping.exe is almost constantly running. I shut it down through task manager, but it comes back up within a few minutes and slows the computer down. I am cutting and pasting the DDS and Attach logs. I am also attaching them, as I am unsure which one is preferred.

Here is the DDS Log:

.

DDS (Ver_11-03-05.01) - NTFSx86 NETWORK

Run by Matt at 11:54:10.03 on Wed 11/30/2011

Internet Explorer: 8.0.6001.18702

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.479.302 [GMT -5:00]

.

AV: Symantec AntiVirus Corporate Edition *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost.exe -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\taskmgr.exe

C:\WINDOWS\System32\ping.exe

C:\Desktop\Desktop\dds.scr

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uDefault_Search_URL = hxxp://www.google.com/ie

uInternet Connection Wizard,ShellNext = iexplore

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll

BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll

BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll

BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll

BHO: MSN Toolbar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn toolbar\platform\4.0.0417.0\npwinext.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll

TB: MSN Toolbar: {8dcb7100-df86-4384-8842-8fa844297b3f} - c:\program files\msn toolbar\platform\4.0.0417.0\npwinext.dll

EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File

uRun: [sansaDispatch] c:\documents and settings\matt\application data\sandisk\sansa updater\SansaDispatch.exe

uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil11c_ActiveX.exe -update activex

mRun: [vptray] c:\progra~1\symant~1\VPTray.exe

mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe

mRun: [VTTimer] VTTimer.exe

mRun: [VTTrayp] VTtrayp.exe

mRun: [soundMan] SOUNDMAN.EXE

mRun: [Microsoft Default Manager] "c:\program files\microsoft\search enhancement pack\default manager\DefMgr.exe" -resume

mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime

mRun: [sunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [Malwarebytes' Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript

StartupFolder: c:\desktop\startm~1\programs\startup\dropbox.lnk - c:\documents and settings\matt\application data\dropbox\bin\Dropbox.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\jp2iexp.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL

LSP: mswsock.dll

Trusted Zone: allrecipes.com

Trusted Zone: netflix.com

Trusted Zone: verizonwireless.com

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab

DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://go.microsoft.com/fwlink/?linkid=58813

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} - hxxp://office.microsoft.com/officeupdate/content/opuc3.cab

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1158164028062

DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos-beta/OnlineScanner.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {96695E54-ECE5-437B-81BF-D45FA9F878A0} - hxxp://www.s3graphics.com/S3DisplayAct/S3DisplayAct.cab

DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} - hxxp://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab

DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab56649.cab

DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} - hxxp://office.microsoft.com/officeupdate/content/opuc4.cab

DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} - hxxp://www.live365.com/players/play365.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL

Notify: NavLogon - c:\windows\system32\NavLogon.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\docume~1\matt\applic~1\mozilla\firefox\profiles\yk952da9.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/

FF - plugin: c:\documents and settings\matt\application data\move networks\plugins\npqmp071500000347.dll

FF - plugin: c:\documents and settings\matt\application data\move networks\plugins\npqmp071503000010.dll

FF - plugin: c:\documents and settings\matt\application data\move networks\plugins\npqmp071701000002.dll

FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\program files\google\picasa3\npPicasa3.dll

FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\program files\microsoft silverlight\4.0.60831.0\npctrlui.dll

FF - plugin: c:\program files\msn toolbar\platform\4.0.0417.0\npwinext.dll

.

============= SERVICES / DRIVERS ===============

.

R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [2011-9-12 1034240]

S1 SAVRT;SAVRT;c:\program files\symantec antivirus\savrt.sys [2005-12-19 337592]

S1 SAVRTPEL;SAVRTPEL;c:\program files\symantec antivirus\Savrtpel.sys [2005-12-19 54968]

S2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccEvtMgr.exe [2006-3-24 192160]

S2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSetMgr.exe [2006-3-24 169632]

S2 SavRoam;SAVRoam;c:\program files\symantec antivirus\SavRoam.exe [2006-5-27 115952]

S2 Symantec AntiVirus;Symantec AntiVirus;c:\program files\symantec antivirus\Rtvscan.exe [2006-5-27 1805040]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2011-11-10 106104]

S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]

S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\drivers\nx6000.sys [2009-12-13 30576]

S3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20111126.007\naveng.sys [2011-11-27 86136]

S3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20111126.007\navex15.sys [2011-11-27 1576312]

S3 USB-100;Linksys EtherFast 10/100 Compact USB Network Adapter;c:\windows\system32\drivers\USB100M.SYS [2006-9-13 27519]

.

=============== Created Last 30 ================

.

2011-11-30 16:16:21 54016 ----a-w- c:\windows\system32\drivers\okpcad.sys

2011-11-28 21:17:11 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-11-24 16:58:15 -------- d-----w- c:\program files\oDesk

2011-11-24 16:57:23 -------- d-----w- c:\docume~1\matt\locals~1\applic~1\oDesk

.

==================== Find3M ====================

.

2011-10-25 17:38:10 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll

2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll

2011-09-26 15:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll

2011-09-26 15:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll

2011-09-26 15:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll

2011-09-06 13:20:51 1858944 ----a-w- c:\windows\system32\win32k.sys

2010-12-16 02:24:43 1046736 ----a-w- c:\program files\Driverwhiz.exe

2010-12-08 20:20:54 14263800 ----a-w- c:\program files\picasa38-setup.exe

2009-02-08 02:35:22 4865408 ----a-w- c:\program files\Silverlight.2.0.exe

2008-04-29 22:30:06 13349352 ----a-w- c:\program files\NapsterSetupNCOM4104.exe

2007-02-03 16:49:55 233139240 ----a-w- c:\program files\Microsoft Office Publisher.exe

2006-10-16 14:49:06 48909288 ----a-w- c:\program files\Microsoft PP Product.exe

2006-10-16 14:14:06 1951432 ----a-w- c:\program files\Microsoft PP B.exe

.

============= FINISH: 11:55:53.81 ===============

Here is the Attach log

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_11-03-05.01)

.

Microsoft Windows XP Professional

Boot Device: \Device\Harddisk0\DP(1)0x7e00-0x12a14b8200+1

Install Date: 9/13/2006 9:27:41 AM

System Uptime: 11/30/2011 8:09:48 AM (3 hours ago)

.

Motherboard: PCCHIPS | | P21G

Processor: Intel® Celeron® CPU 3.06GHz | CPU 1 | 3059/133mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 75 GiB total, 17.826 GiB free.

D: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP97: 8/31/2011 8:11:50 PM - System Checkpoint

RP98: 9/2/2011 3:25:04 PM - System Checkpoint

RP99: 9/6/2011 4:00:39 PM - System Checkpoint

RP100: 9/10/2011 12:24:18 PM - System Checkpoint

RP101: 9/11/2011 7:27:38 PM - System Checkpoint

RP102: 9/12/2011 8:58:48 PM - Installed Microsoft Visual C++ 2005 Redistributable

RP103: 9/13/2011 9:12:58 AM - Software Distribution Service 3.0

RP104: 9/13/2011 9:59:36 AM - Software Distribution Service 3.0

RP105: 9/15/2011 9:09:59 AM - System Checkpoint

RP106: 9/16/2011 9:21:04 AM - System Checkpoint

RP107: 9/16/2011 11:16:53 AM - Software Distribution Service 3.0

RP108: 9/19/2011 9:32:32 AM - System Checkpoint

RP109: 9/22/2011 11:04:44 AM - System Checkpoint

RP110: 9/24/2011 3:04:21 PM - System Checkpoint

RP111: 9/25/2011 3:44:43 PM - System Checkpoint

RP112: 9/27/2011 8:40:27 AM - System Checkpoint

RP113: 9/29/2011 7:23:01 AM - System Checkpoint

RP114: 9/30/2011 9:47:35 AM - System Checkpoint

RP115: 10/1/2011 10:12:10 AM - System Checkpoint

RP116: 10/6/2011 9:52:18 AM - System Checkpoint

RP117: 10/24/2011 10:13:09 PM - System Checkpoint

RP118: 10/27/2011 7:29:06 AM - System Checkpoint

RP119: 10/28/2011 8:37:50 AM - System Checkpoint

RP120: 10/29/2011 10:30:54 AM - System Checkpoint

RP121: 10/31/2011 3:13:00 PM - System Checkpoint

RP122: 11/2/2011 8:04:13 AM - System Checkpoint

RP123: 11/2/2011 6:17:39 PM - Software Distribution Service 3.0

RP124: 11/3/2011 6:21:39 PM - System Checkpoint

RP125: 11/4/2011 6:47:58 PM - System Checkpoint

RP126: 11/6/2011 9:53:50 AM - System Checkpoint

RP127: 11/7/2011 11:16:26 AM - System Checkpoint

RP128: 11/8/2011 4:01:36 PM - System Checkpoint

RP129: 11/9/2011 4:30:47 PM - System Checkpoint

RP130: 11/9/2011 6:28:43 PM - Software Distribution Service 3.0

RP131: 11/11/2011 7:17:08 AM - System Checkpoint

RP132: 11/13/2011 6:22:56 AM - System Checkpoint

RP133: 11/14/2011 7:55:56 AM - System Checkpoint

RP134: 11/15/2011 8:04:10 AM - System Checkpoint

RP135: 11/16/2011 11:15:19 AM - System Checkpoint

RP136: 11/17/2011 7:42:39 PM - System Checkpoint

RP137: 11/19/2011 1:42:42 PM - System Checkpoint

RP138: 11/20/2011 2:51:44 PM - System Checkpoint

RP139: 11/21/2011 3:50:04 PM - System Checkpoint

RP140: 11/22/2011 4:35:25 PM - System Checkpoint

RP141: 11/22/2011 6:30:43 PM - Software Distribution Service 3.0

RP142: 11/23/2011 8:32:34 PM - System Checkpoint

RP143: 11/24/2011 9:20:40 PM - System Checkpoint

RP144: 11/26/2011 9:01:07 AM - System Checkpoint

RP145: 11/27/2011 9:16:15 AM - System Checkpoint

RP146: 11/28/2011 2:15:20 PM - System Checkpoint

.

==== Installed Programs ======================

.

Sansa Media Converter

32 Bit HP CIO Components Installer

Acrobat.com

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Reader X (10.1.1)

AIO_Scan

BufferChm

BUM

CardRd81

CCScore

Compatibility Pack for the 2007 Office system

Copy

Coupon Printer for Windows

CR2

Creative Mass Storage Drivers

Critical Update for Windows Media Player 11 (KB959772)

Destinations

DeviceManagementQFolder

Diner Dash - Flo on the Go

DJ_AIO_ProductContext

DJ_AIO_Software

DJ_AIO_Software_min

Driver Whiz

Dropbox

ESET Online Scanner v3

ESSBrwr

ESSCDBK

ESScore

ESSgui

ESShelp

ESSini

ESSPCD

ESSPDock

ESSSONIC

ESSTOOLS

essvatgt

essvcpt

eSupportQFolder

F4100

F4100_Help

Garmin Training Center v4

GMATPrep

Google Toolbar for Internet Explorer

HLPPDOCK

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows Internet Explorer 7 (KB947864)

Hotfix for Windows Media Format 11 SDK (KB929399)

Hotfix for Windows Media Format SDK (KB902344)

Hotfix for Windows Media Player 11 (KB939683)

Hotfix for Windows XP (KB2158563)

Hotfix for Windows XP (KB2443685)

Hotfix for Windows XP (KB2570791)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB961118)

Hotfix for Windows XP (KB970653-v3)

Hotfix for Windows XP (KB976098-v2)

Hotfix for Windows XP (KB979306)

Hotfix for Windows XP (KB981793)

HP Deskjet All-In-One Software 8.0

HP Deskjet All-In-One Software 9.0

HP Driver Diagnostics

HP Imaging Device Functions 8.0

HP Photosmart Essential

HP Product Assistant

HP Product Detection

HP Solution Center 8.0

HP Update

HPProductAssistant

HPSSupply

HSP56 Modem Drivers

IrfanView (remove only)

ISI ResearchSoft - Export Helper

Java Auto Updater

Java 6 Update 25

kgcbase

KODAK EASYSHARE Gallery Easy Upload, v2.1

Kodak EasyShare software

KSU

LiveUpdate 3.0 (Symantec Corporation)

Malwarebytes' Anti-Malware version 1.51.2.1300

McAfee Security Scan Plus

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB2572067)

Microsoft .NET Framework 1.1 Security Update (KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft Base Smart Card Cryptographic Service Provider Package

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Corporation

Microsoft Default Manager

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft LifeCam

Microsoft National Language Support Downlevel APIs

Microsoft Office File Validation Add-In

Microsoft Office Professional Edition 2003

Microsoft Search Enhancement Pack

Microsoft Silverlight

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2005 Redistributable

Microsoft XML Parser

Move Media Player

Mozilla Firefox 8.0 (x86 en-US)

MSN Toolbar

MSN Toolbar Platform

MSXML 4.0 SP2 (KB925672)

MSXML 4.0 SP2 (KB927978)

MSXML 4.0 SP2 (KB936181)

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Napster

Napster Burn Engine

Napster for Windows Media Player

Norton Security Scan

Norton Security Scan (Symantec Corporation)

Notifier

oDesk Team

OfotoXMI

OGA Notifier 2.0.0048.0

OTtBP

OTtBPSDK

Picasa 3

Platform

PowerDVD

QuickTime

RealPlayer

Realtek AC'97 Audio

Sansa Media Converter

Sansa Updater

Scan

Security Update for CAPICOM (KB931906)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)

Security Update for Microsoft Windows (KB2564958)

Security Update for Windows Internet Explorer 7 (KB928090)

Security Update for Windows Internet Explorer 7 (KB929969)

Security Update for Windows Internet Explorer 7 (KB931768)

Security Update for Windows Internet Explorer 7 (KB933566)

Security Update for Windows Internet Explorer 7 (KB937143)

Security Update for Windows Internet Explorer 7 (KB938127)

Security Update for Windows Internet Explorer 7 (KB939653)

Security Update for Windows Internet Explorer 7 (KB942615)

Security Update for Windows Internet Explorer 7 (KB944533)

Security Update for Windows Internet Explorer 7 (KB950759)

Security Update for Windows Internet Explorer 7 (KB953838)

Security Update for Windows Internet Explorer 7 (KB956390)

Security Update for Windows Internet Explorer 7 (KB958215)

Security Update for Windows Internet Explorer 7 (KB960714)

Security Update for Windows Internet Explorer 7 (KB961260)

Security Update for Windows Internet Explorer 7 (KB963027)

Security Update for Windows Internet Explorer 7 (KB969897)

Security Update for Windows Internet Explorer 8 (KB2183461)

Security Update for Windows Internet Explorer 8 (KB2360131)

Security Update for Windows Internet Explorer 8 (KB2416400)

Security Update for Windows Internet Explorer 8 (KB2482017)

Security Update for Windows Internet Explorer 8 (KB2510531)

Security Update for Windows Internet Explorer 8 (KB2530548)

Security Update for Windows Internet Explorer 8 (KB2544521)

Security Update for Windows Internet Explorer 8 (KB2559049)

Security Update for Windows Internet Explorer 8 (KB2586448)

Security Update for Windows Internet Explorer 8 (KB969897)

Security Update for Windows Internet Explorer 8 (KB971961)

Security Update for Windows Internet Explorer 8 (KB972260)

Security Update for Windows Internet Explorer 8 (KB974455)

Security Update for Windows Internet Explorer 8 (KB976325)

Security Update for Windows Internet Explorer 8 (KB978207)

Security Update for Windows Internet Explorer 8 (KB981332)

Security Update for Windows Internet Explorer 8 (KB982381)

Security Update for Windows Media Player (KB2378111)

Security Update for Windows Media Player (KB911564)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB968816)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB975558)

Security Update for Windows Media Player (KB978695)

Security Update for Windows Media Player 10 (KB917734)

Security Update for Windows Media Player 10 (KB936782)

Security Update for Windows Media Player 11 (KB936782)

Security Update for Windows Media Player 11 (KB954154)

Security Update for Windows Media Player 6.4 (KB925398)

Security Update for Windows Media Player 9 (KB917734)

Security Update for Windows XP (KB2079403)

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2121546)

Security Update for Windows XP (KB2160329)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2259922)

Security Update for Windows XP (KB2279986)

Security Update for Windows XP (KB2286198)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2296199)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2412687)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2436673)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476490)

Security Update for Windows XP (KB2476687)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2479628)

Security Update for Windows XP (KB2479943)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485376)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2503665)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2506223)

Security Update for Windows XP (KB2507618)

Security Update for Windows XP (KB2507938)

Security Update for Windows XP (KB2508272)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2511455)

Security Update for Windows XP (KB2524375)

Security Update for Windows XP (KB2535512)

Security Update for Windows XP (KB2536276-v2)

Security Update for Windows XP (KB2536276)

Security Update for Windows XP (KB2544893-v2)

Security Update for Windows XP (KB2544893)

Security Update for Windows XP (KB2555917)

Security Update for Windows XP (KB2562937)

Security Update for Windows XP (KB2566454)

Security Update for Windows XP (KB2567053)

Security Update for Windows XP (KB2567680)

Security Update for Windows XP (KB2570222)

Security Update for Windows XP (KB2570947)

Security Update for Windows XP (KB2592799)

Security Update for Windows XP (KB913433)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923689)

Security Update for Windows XP (KB938464-v2)

Security Update for Windows XP (KB938464)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950760)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951066)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951376)

Security Update for Windows XP (KB951698)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB953839)

Security Update for Windows XP (KB954211)

Security Update for Windows XP (KB954459)

Security Update for Windows XP (KB954600)

Security Update for Windows XP (KB955069)

Security Update for Windows XP (KB956391)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956841)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB957095)

Security Update for Windows XP (KB957097)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958687)

Security Update for Windows XP (KB958690)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960225)

Security Update for Windows XP (KB960715)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961371)

Security Update for Windows XP (KB961373)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB968537)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB969898)

Security Update for Windows XP (KB969947)

Security Update for Windows XP (KB970238)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB971486)

Security Update for Windows XP (KB971557)

Security Update for Windows XP (KB971633)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973346)

Security Update for Windows XP (KB973354)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973525)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975561)

Security Update for Windows XP (KB975562)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977165)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978251)

Security Update for Windows XP (KB978262)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979559)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB980195)

Security Update for Windows XP (KB980218)

Security Update for Windows XP (KB980232)

Security Update for Windows XP (KB980436)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981852)

Security Update for Windows XP (KB981957)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982214)

Security Update for Windows XP (KB982665)

SFR

SHASTA

SKIN0001

SKINXSDK

Skype™ 5.1

SolutionCenter

staticcr

Status

Symantec AntiVirus 10.1.0.401

Toolbox

TrainingPeaks Device Agent

TrayApp

Uniblue DriverScanner 2009

UnloadSupport

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Windows Internet Explorer 8 (KB971180)

Update for Windows Internet Explorer 8 (KB976662)

Update for Windows Internet Explorer 8 (KB976749)

Update for Windows Internet Explorer 8 (KB980182)

Update for Windows XP (KB2141007)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2467659)

Update for Windows XP (KB2541763)

Update for Windows XP (KB2607712)

Update for Windows XP (KB2616676)

Update for Windows XP (KB2641690)

Update for Windows XP (KB951072-v2)

Update for Windows XP (KB951978)

Update for Windows XP (KB955759)

Update for Windows XP (KB955839)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB971737)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

VIA Platform Device Manager

VIA Rhine-Family Fast Ethernet Adapter

VPRINTOL

WebFldrs XP

WebReg

Windows Driver Package - FTDI CDM Driver Package (06/27/2007 2.02.04)

Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray

Windows Genuine Advantage Notifications (KB905474)

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 7

Windows Internet Explorer 8

Windows Live ID Sign-in Assistant

Windows Media Format 11 runtime

Windows Media Format SDK Hotfix - KB891122

Windows Media Player 11

Windows XP Service Pack 3

WinZip 15.0

WIRELESS

.

==== Event Viewer Messages From Past Week ========

.

11/29/2011 12:58:43 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

11/28/2011 9:49:09 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: eeCtrl Fips intelppm PCIIde SAVRT SAVRTPEL SPBBCDrv SYMTDI

11/28/2011 5:14:21 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: eeCtrl Fips intelppm SAVRT SAVRTPEL SPBBCDrv SYMTDI

11/28/2011 4:33:35 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde

11/28/2011 4:16:17 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service LiveUpdate with arguments "" in order to run the server: {03E0E6C2-363B-11D3-B536-00902771A435}

11/28/2011 3:58:09 PM, error: Service Control Manager [7034] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s).

11/28/2011 3:58:09 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Java Quick Starter service to connect.

11/28/2011 3:58:09 PM, error: Service Control Manager [7000] - The Java Quick Starter service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

11/28/2011 11:40:35 PM, error: Service Control Manager [7023] - The Network Location Awareness (NLA) service terminated with the following error: The specified procedure could not be found.

11/28/2011 10:52:40 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Symantec AntiVirus service to connect.

11/28/2011 10:52:40 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the SavRoam service to connect.

11/28/2011 10:45:47 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

11/28/2011 10:44:31 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MDM with arguments "" in order to run the server: {943B6A75-BB5E-41A7-A6D3-A1A5E892B33B}

11/28/2011 10:39:39 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MDM with arguments "" in order to run the server: {0C0A3666-30C9-11D0-8F20-00805F2CD064}

11/24/2011 9:38:54 AM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)

.

==== End Of File ===========================

Thanks for your help. I will definitely purchase the profession version once this virus/malware issue gets resolved.

Matt

Attach.txt

DDS.txt

Link to post
Share on other sites
LDTate

LDTate

Posted
Posted

:welcome:

Whether you wish to continue with cleaning or not, you should be aware that you may have been infected by a backdoor trojan. This type of program has the ability to steal passwords and other information from your system. If you are using your computer for sensitive purposes such as internet banking then I recommend you take the following steps immediately:

  • Use another, uninfected computer to change all your internet passwords, especially ones with financial implications such as banks, paypal, ebay, etc. You should also change the passwords for any other site you use.
  • Call your bank(s), credit card company or any other institution which may be affected and advise them that your login/password or credit card information may have been stolen and ask what steps to take with regard to your account.
  • Consider what other private information could possibly have been taken from your computer and take appropriate steps

This infection can also disable access to the internet when it's been removed.

It will be impossible to be 100% sure that the machine is clean, if this is unacceptable to you then you should consider reformatting the system partition and reinstalling Windows as this is the only 100% sure answer.

Please post back to let me know how you wish to proceed.

Link to post
Share on other sites
LDTate

LDTate

Posted
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
LDTate

LDTate

Posted
Posted

Reopened by request.

Logs will be closed if you haven't replied within 3 days

Please do not attach the scan results from Combofx. Use copy/paste.

Vista and Windows 7 users:

1. These tools MUST be run from the executable. (.exe) every time you run them

2. With Admin Rights (Right click, choose "Run as Administrator")

Download ComboFix from one of these locations:

Link 1

Link 2 If using this link, Right Click and select Save As.

* IMPORTANT !!! Save ComboFix.exe to your Desktop

  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : Protective Programs
  • Double click on ComboFix.exe & follow the prompts.
    Notes: Combofix will run without the Recovery Console installed. Skip the Recovery Console part if you're running Vista or Windows 7.
    Note: If you have XP SP3, use the XP SP2 package.
    If Vista or Windows 7, skip the Recovery Console part
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

RC1.png

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

RC2-1.png

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt using Copy / Paste in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.

2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.

3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.

4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Give it atleast 20-30 minutes to finish if needed.

Please do not attach the scan results from Combofx. Use copy/paste.

Also please describe how your computer behaves at the moment.

Link to post
Share on other sites
mateoloco

mateoloco

Posted
  • Author
Posted

The computer behaves ok, but I have only been using it in safe mode with networking. I still get popups and google redirects and ping.exe still comes up. Should I run antimalwarebytes first or just do combofix?

How do I know if I have xp sp3 or 2? If I have xp sp3, how do I use the xp sp2 package? WHen I run combofix, does it matter whether it is in safe mode or not?

Thanks,

Matt

Link to post
Share on other sites
mateoloco

mateoloco

Posted
  • Author
Posted

When I try to copy and paste the log, it says that the post is too long, so I will post it in parts. My computer is behaving a bit strangely. Whenever I try to type something into the text box to reply, the CPU Usage spikes and I have to wait for it to go back down. I am typing this into notepad and will cut and paste into the text box. Also, I couldn't get Symantec Antivirus to un-auto-enable prior to running combofix, so I uninstalled it. Other than that, it seems pretty normal. What's next? Thanks for the help.

Matt

Here is the first part of the log:

ComboFix 11-12-09.04 - Matt 12/09/2011 20:04:28.3.1 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.479.223 [GMT -5:00]

Running from: c:\desktop\Desktop\ComboFix.exe

.

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\documents and settings\All Users\Application Data\187IX2cF.exe

c:\documents and settings\All Users\Application Data\187IX2cF.exe_

c:\program files\NapsterSetupNCOM4104.exe

c:\windows\$NtUninstallKB43327$\399621870\@

c:\windows\$NtUninstallKB43327$\399621870\bckfg.tmp

c:\windows\$NtUninstallKB43327$\399621870\cfg.ini

c:\windows\$NtUninstallKB43327$\399621870\Desktop.ini

c:\windows\$NtUninstallKB43327$\399621870\keywords

c:\windows\$NtUninstallKB43327$\399621870\kwrd.dll

c:\windows\$NtUninstallKB43327$\399621870\L\akygdmgo

c:\windows\$NtUninstallKB43327$\399621870\lsflt7.ver

c:\windows\$NtUninstallKB43327$\399621870\U\00000001.@

c:\windows\$NtUninstallKB43327$\399621870\U\00000002.@

c:\windows\$NtUninstallKB43327$\399621870\U\00000004.@

c:\windows\$NtUninstallKB43327$\399621870\U\80000000.@

c:\windows\$NtUninstallKB43327$\399621870\U\80000004.@

c:\windows\$NtUninstallKB43327$\399621870\U\80000032.$

c:\windows\$NtUninstallKB43327$\399621870\U\80000032.@

c:\windows\$NtUninstallKB43327$\801397383

c:\windows\CSC\d6

c:\windows\system32\Packet.dll

c:\windows\system32\pthreadVC.dll

c:\windows\system32\WanPacket.dll

c:\windows\system32\wpcap.dll

c:\windows\$NtUninstallKB43327$ . . . . Failed to delete

.

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_6TO4

-------\Service_6to4

.

.

((((((((((((((((((((((((( Files Created from 2011-11-10 to 2011-12-10 )))))))))))))))))))))))))))))))

.

.

2011-12-10 00:56 . 2011-08-17 13:49 138496 ----a-w- c:\windows\system32\drivers\afd.sys

2011-12-02 03:32 . 2011-12-02 03:32 -------- d-sh--w- c:\documents and settings\NetworkService\PrivacIE

2011-11-30 17:28 . 2011-11-30 17:28 37888 ----a-w- c:\windows\system32\sqlesw32.dll

2011-11-28 21:17 . 2011-08-31 22:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-11-24 16:58 . 2011-11-24 16:58 -------- d-----w- c:\program files\oDesk

2011-11-24 16:57 . 2011-11-24 16:58 -------- d-----w- c:\documents and settings\Matt\Local Settings\Application Data\oDesk

2011-11-20 22:00 . 2011-11-20 22:02 -------- d-----w- c:\documents and settings\My Music\The Backyardigans

.

.

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-25 17:38 . 2011-05-14 11:02 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-10-10 14:22 . 2006-09-13 13:23 692736 ----a-w- c:\windows\system32\inetcomm.dll

2011-09-28 07:06 . 2001-08-23 12:00 599040 ----a-w- c:\windows\system32\crypt32.dll

2011-09-26 15:41 . 2008-07-29 23:59 611328 ----a-w- c:\windows\system32\uiautomationcore.dll

2011-09-26 15:41 . 2001-08-23 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll

2011-09-26 15:41 . 2001-08-23 12:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll

2010-12-16 02:24 . 2010-12-16 02:24 1046736 ----a-w- c:\program files\Driverwhiz.exe

2010-12-08 20:20 . 2010-12-08 20:20 14263800 ----a-w- c:\program files\picasa38-setup.exe

2009-02-08 02:35 . 2009-02-08 02:35 4865408 ----a-w- c:\program files\Silverlight.2.0.exe

2007-02-03 16:49 . 2007-02-03 16:49 233139240 ----a-w- c:\program files\Microsoft Office Publisher.exe

2006-10-16 14:49 . 2006-10-16 14:48 48909288 ----a-w- c:\program files\Microsoft PP Product.exe

2006-10-16 14:14 . 2006-10-16 14:13 1951432 ----a-w- c:\program files\Microsoft PP B.exe

2011-11-05 06:53 . 2011-11-20 01:19 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((( SnapShot@2011-04-24_17.36.30 )))))))))))))))))))))))))))))))))))))))))

.

+ 2011-05-14 00:17 . 2011-05-14 00:17 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_452bf920\vcomp.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80KOR.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80JPN.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ITA.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80FRA.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ESP.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80ENU.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80DEU.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHT.dll

+ 2011-05-13 23:45 . 2011-05-13 23:45 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_6a5bb789\mfc80CHS.dll

+ 2011-05-14 05:06 . 2011-05-14 05:06 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80u.dll

+ 2011-05-14 05:23 . 2011-05-14 05:23 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfcm80.dll

+ 2011-05-13 22:37 . 2011-05-13 22:37 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa\ATL80.dll

+ 2011-12-10 01:26 . 2011-12-10 01:26 16384 c:\windows\Temp\Perflib_Perfdata_730.dat

+ 2007-01-29 08:58 . 2011-07-08 13:49 46080 c:\windows\system32\tzchange.exe

- 2007-01-29 08:58 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe

+ 2001-08-23 12:00 . 2011-11-15 12:32 71700 c:\windows\system32\perfc009.dat

- 2001-08-23 12:00 . 2010-12-20 23:59 66560 c:\windows\system32\mshtmled.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 66560 c:\windows\system32\mshtmled.dll

- 2006-11-08 02:03 . 2010-12-20 23:59 55296 c:\windows\system32\msfeedsbs.dll

+ 2006-11-08 02:03 . 2011-08-22 23:48 55296 c:\windows\system32\msfeedsbs.dll

- 2001-08-23 12:00 . 2010-12-20 23:59 43520 c:\windows\system32\licmgr10.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 43520 c:\windows\system32\licmgr10.dll

- 2001-08-23 12:00 . 2010-12-20 23:59 25600 c:\windows\system32\jsproxy.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 25600 c:\windows\system32\jsproxy.dll

+ 2011-09-13 00:56 . 2007-11-06 04:22 34064 c:\windows\system32\drivers\npf.sys

+ 2001-08-23 12:00 . 2011-07-08 14:02 10496 c:\windows\system32\drivers\ndistapi.sys

- 2001-08-23 12:00 . 2008-04-14 00:11 45568 c:\windows\system32\dnsrslvr.dll

+ 2001-08-23 12:00 . 2009-04-20 17:17 45568 c:\windows\system32\dnsrslvr.dll

+ 2009-06-22 21:45 . 2011-08-22 23:48 12800 c:\windows\system32\dllcache\xpshims.dll

- 2009-06-22 21:45 . 2010-12-20 23:59 12800 c:\windows\system32\dllcache\xpshims.dll

+ 2001-08-23 12:00 . 2011-09-26 15:41 20480 c:\windows\system32\dllcache\oleaccrc.dll

+ 2011-09-13 13:06 . 2011-07-08 14:02 10496 c:\windows\system32\dllcache\ndistapi.sys

- 2006-06-23 11:02 . 2010-12-20 23:59 66560 c:\windows\system32\dllcache\mshtmled.dll

+ 2006-06-23 11:02 . 2011-08-22 23:48 66560 c:\windows\system32\dllcache\mshtmled.dll

- 2007-05-09 13:36 . 2010-12-20 23:59 55296 c:\windows\system32\dllcache\msfeedsbs.dll

+ 2007-05-09 13:36 . 2011-08-22 23:48 55296 c:\windows\system32\dllcache\msfeedsbs.dll

- 2006-10-17 17:05 . 2010-12-20 23:59 43520 c:\windows\system32\dllcache\licmgr10.dll

+ 2006-10-17 17:05 . 2011-08-22 23:48 43520 c:\windows\system32\dllcache\licmgr10.dll

+ 2006-06-23 11:02 . 2011-08-22 23:48 25600 c:\windows\system32\dllcache\jsproxy.dll

- 2006-06-23 11:02 . 2010-12-20 23:59 25600 c:\windows\system32\dllcache\jsproxy.dll

+ 2009-04-20 17:17 . 2009-04-20 17:17 45568 c:\windows\system32\dllcache\dnsrslvr.dll

- 2009-12-14 07:08 . 2010-12-09 14:30 33280 c:\windows\system32\dllcache\csrsrv.dll

+ 2009-12-14 07:08 . 2011-04-26 11:07 33280 c:\windows\system32\dllcache\csrsrv.dll

- 2001-08-23 12:00 . 2010-12-09 14:30 33280 c:\windows\system32\csrsrv.dll

+ 2001-08-23 12:00 . 2011-04-26 11:07 33280 c:\windows\system32\csrsrv.dll

+ 2006-09-13 13:27 . 2011-11-26 14:17 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat

- 2006-09-13 13:27 . 2011-04-12 12:22 32768 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat

- 2006-09-13 13:27 . 2011-04-12 12:22 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat

+ 2006-09-13 13:27 . 2011-11-26 14:17 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat

- 2006-09-13 13:27 . 2011-04-12 12:22 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat

+ 2011-11-26 14:17 . 2011-11-26 14:17 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat

+ 2011-07-08 18:00 . 2011-07-08 18:00 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll

- 2010-09-23 19:55 . 2010-09-23 19:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll

+ 2011-07-07 16:04 . 2011-07-07 16:04 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll

- 2010-09-23 06:26 . 2010-09-23 06:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll

- 2010-09-23 06:26 . 2010-09-23 06:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll

+ 2011-07-07 16:04 . 2011-07-07 16:04 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll

+ 2011-07-07 16:03 . 2011-07-07 16:03 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll

- 2010-09-23 06:26 . 2010-09-23 06:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll

+ 2011-07-07 17:09 . 2011-07-07 17:09 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe

- 2010-09-23 07:17 . 2010-09-23 07:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe

+ 2011-07-07 17:09 . 2011-07-07 17:09 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

- 2010-09-23 07:17 . 2010-09-23 07:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll

+ 2011-08-10 19:04 . 2011-08-10 19:04 38400 c:\windows\Installer\dbb725.msi

+ 2011-07-01 01:17 . 2011-07-01 01:17 19968 c:\windows\Installer\6001e6a.msi

- 2011-04-17 19:15 . 2011-04-17 19:15 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe

+ 2011-09-16 15:33 . 2011-09-16 15:33 38240 c:\windows\Installer\{90120000-0020-0409-0000-0000000FF1CE}\O12ConvIcon.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 23040 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 23040 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 61440 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 61440 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pubs.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 27136 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 27136 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 11264 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 11264 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 86016 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 86016 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\inficon.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 12288 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 12288 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe

+ 2011-08-10 19:04 . 2011-11-02 22:39 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll

- 2011-03-19 21:13 . 2011-03-19 21:13 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 17304 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\ViewerPS.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 35736 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\reader_sl.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 88992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\PDFPrevHndlr.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 94608 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\eula.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 49064 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acrotextextractor.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 17824 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32Info.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 63912 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acroiehelpershim.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 64928 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroIEHelper.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 63384 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\Acrofx32.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 12800 c:\windows\ie8updates\KB2586448-IE8\xpshims.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 66560 c:\windows\ie8updates\KB2586448-IE8\mshtmled.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 55296 c:\windows\ie8updates\KB2586448-IE8\msfeedsbs.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 43520 c:\windows\ie8updates\KB2586448-IE8\licmgr10.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 25600 c:\windows\ie8updates\KB2586448-IE8\jsproxy.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 12800 c:\windows\ie8updates\KB2559049-IE8\xpshims.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 66560 c:\windows\ie8updates\KB2559049-IE8\mshtmled.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 55296 c:\windows\ie8updates\KB2559049-IE8\msfeedsbs.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 43520 c:\windows\ie8updates\KB2559049-IE8\licmgr10.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 25600 c:\windows\ie8updates\KB2559049-IE8\jsproxy.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 12800 c:\windows\ie8updates\KB2530548-IE8\xpshims.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 66560 c:\windows\ie8updates\KB2530548-IE8\mshtmled.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 55296 c:\windows\ie8updates\KB2530548-IE8\msfeedsbs.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 43520 c:\windows\ie8updates\KB2530548-IE8\licmgr10.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 25600 c:\windows\ie8updates\KB2530548-IE8\jsproxy.dll

+ 2011-11-02 22:20 . 2011-11-02 22:20 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_c56514db\System.Drawing.Design.dll

+ 2011-11-02 22:20 . 2011-11-02 22:20 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_0861e5b2\CustomMarshalers.dll

+ 2011-11-03 02:51 . 2011-11-03 02:51 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6c334564da041df8fb75415f2d503224\System.Windows.Presentation.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a54a122f1070ab71931dd9679ddd8e90\System.Web.DynamicData.Design.ni.dll

+ 2011-11-03 11:43 . 2011-11-03 11:43 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ac92806d5bd508eb25f1b4b73a36b101\System.ComponentModel.DataAnnotations.ni.dll

+ 2011-11-03 11:43 . 2011-11-03 11:43 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll

+ 2011-11-03 02:36 . 2011-11-03 02:36 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2\PresentationFontCache.ni.exe

+ 2011-11-02 22:38 . 2011-11-02 22:38 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f\PresentationCFFRasterizer.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\eaa8d72317e5b8047e413939cc71ffba\Microsoft.Vsa.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\a140509b1342934fc5e58ae22ac9696c\Microsoft.VisualC.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e\Microsoft.Build.Framework.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 73728 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\fc4fa0c4d3f4be92d5121090565f9a21\DriversHQ.DriverDetective.ExceptionLogging.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe

+ 2011-11-03 11:26 . 2011-11-03 11:26 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

+ 2011-11-02 22:33 . 2011-11-02 22:33 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

- 2010-10-26 17:34 . 2010-10-26 17:34 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll

+ 2011-11-02 22:19 . 2011-11-02 22:19 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll

+ 2011-09-13 14:07 . 2010-11-03 13:12 46080 c:\windows\$NtUninstallKB2570791$\tzchange.exe

+ 2011-09-13 14:07 . 2011-07-09 00:32 16896 c:\windows\$NtUninstallKB2570791$\spuninst\tzchange.dll

+ 2011-09-13 13:15 . 2008-04-13 18:57 10112 c:\windows\$NtUninstallKB2566454$\ndistapi.sys

+ 2011-11-02 22:37 . 2001-08-23 12:00 16896 c:\windows\$NtUninstallKB2564958$\oleaccrc.dll

+ 2011-06-28 03:18 . 2008-04-14 00:11 45568 c:\windows\$NtUninstallKB2509553$\dnsrslvr.dll

+ 2011-07-15 16:53 . 2010-12-09 14:30 33280 c:\windows\$NtUninstallKB2507938$\csrsrv.dll

+ 2011-06-28 03:18 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971029\update\spcustom.dll

+ 2011-06-28 03:18 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971029\spmsg.dll

+ 2011-09-16 15:32 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2616676\update\spcustom.dll

+ 2011-09-16 15:32 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2616676\spmsg.dll

+ 2011-09-13 14:06 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2607712\update\spcustom.dll

+ 2011-09-13 14:06 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2607712\spmsg.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2592799\update\spcustom.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2592799\spmsg.dll

+ 2011-11-02 22:24 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2586448-IE8\update\spcustom.dll

+ 2011-11-02 22:24 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2586448-IE8\spmsg.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 12800 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\xpshims.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 66560 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtmled.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 55296 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeedsbs.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 43520 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\licmgr10.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 25600 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\jsproxy.dll

+ 2011-09-16 15:21 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570947\update\spcustom.dll

+ 2011-09-16 15:21 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570947\spmsg.dll

+ 2011-09-13 13:26 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2570222\update\spcustom.dll

+ 2011-09-13 13:26 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2570222\spmsg.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567680\update\spcustom.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567680\spmsg.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567053\spmsg.dll

+ 2011-09-13 13:15 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2566454\update\spcustom.dll

+ 2011-09-13 13:15 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2566454\spmsg.dll

+ 2011-09-13 13:06 . 2011-07-08 13:51 10496 c:\windows\$hf_mig$\KB2566454\SP3QFE\ndistapi.sys

+ 2011-09-13 13:14 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2562937\update\spcustom.dll

+ 2011-09-13 13:14 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2562937\spmsg.dll

+ 2011-09-13 13:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2559049-IE8\update\spcustom.dll

+ 2011-09-13 13:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2559049-IE8\spmsg.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 12800 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\xpshims.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 66560 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtmled.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 55296 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeedsbs.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 43520 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\licmgr10.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 25600 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\jsproxy.dll

+ 2011-07-15 16:43 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2555917\update\spcustom.dll

+ 2011-07-15 16:43 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2555917\spmsg.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893\update\spcustom.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893\spmsg.dll

+ 2011-11-09 23:35 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544893-v2\update\spcustom.dll

+ 2011-11-09 23:35 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544893-v2\spmsg.dll

+ 2011-06-28 03:17 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2544521-IE8\update\spcustom.dll

+ 2011-06-28 03:17 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2544521-IE8\spmsg.dll

+ 2011-07-01 01:13 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2541763\update\spcustom.dll

+ 2011-07-01 01:13 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2541763\spmsg.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276\update\spcustom.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276\spmsg.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2536276-v2\update\spcustom.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2536276-v2\spmsg.dll

+ 2011-06-28 03:23 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2535512\update\spcustom.dll

+ 2011-06-28 03:23 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2535512\spmsg.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2530548-IE8\update\spcustom.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2530548-IE8\spmsg.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 12800 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\xpshims.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 66560 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtmled.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 55296 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeedsbs.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 43520 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\licmgr10.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 25600 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\jsproxy.dll

+ 2011-06-28 03:24 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2524375\update\spcustom.dll

+ 2011-06-28 03:24 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2524375\spmsg.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2509553\update\spcustom.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2509553\spmsg.dll

+ 2009-04-20 17:06 . 2009-04-20 17:06 45568 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsrslvr.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2508429\update\spcustom.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2508429\spmsg.dll

+ 2011-07-15 16:53 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507938\update\spcustom.dll

+ 2011-07-15 16:53 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507938\spmsg.dll

+ 2011-04-26 11:02 . 2011-04-26 11:02 33280 c:\windows\$hf_mig$\KB2507938\SP3QFE\csrsrv.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2507618\update\spcustom.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2507618\spmsg.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2503665\update\spcustom.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2503665\spmsg.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2476490\update\spcustom.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2476490\spmsg.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll

- 2009-04-15 12:21 . 2010-08-26 12:52 5120 c:\windows\system32\xpsp4res.dll

+ 2009-04-15 12:21 . 2011-02-17 12:32 5120 c:\windows\system32\xpsp4res.dll

- 2007-02-26 17:28 . 2011-04-17 19:37 4096 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 4096 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe

- 2011-04-17 19:21 . 2011-04-17 19:21 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

- 2011-04-17 19:21 . 2011-04-17 19:21 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll

- 2011-04-17 19:21 . 2011-04-17 19:21 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll

+ 2011-06-28 03:19 . 2010-08-26 12:52 5120 c:\windows\$NtUninstallKB2508429$\xpsp4res.dll

+ 2011-02-17 12:32 . 2011-02-17 12:32 5120 c:\windows\$hf_mig$\KB2508429\SP3QFE\xpsp4res.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll

+ 2011-05-14 05:17 . 2011-05-14 05:17 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll

+ 2011-05-14 05:12 . 2011-05-14 05:12 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll

+ 2011-05-14 05:11 . 2011-05-14 05:11 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\msvcm80.dll

- 2001-08-23 12:00 . 2010-06-18 17:45 293376 c:\windows\system32\winsrv.dll

+ 2001-08-23 12:00 . 2011-06-20 17:44 293376 c:\windows\system32\winsrv.dll

- 2001-08-23 12:00 . 2010-12-20 23:59 916480 c:\windows\system32\wininet.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 916480 c:\windows\system32\wininet.dll

- 2001-08-23 12:00 . 2009-03-08 08:34 105984 c:\windows\system32\url.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 105984 c:\windows\system32\url.dll

- 2001-08-23 12:00 . 2008-04-14 00:12 135168 c:\windows\system32\shsvcs.dll

+ 2001-08-23 12:00 . 2009-07-27 23:17 135168 c:\windows\system32\shsvcs.dll

+ 2001-08-23 12:00 . 2011-04-29 17:25 151552 c:\windows\system32\schannel.dll

+ 2001-08-23 12:00 . 2011-11-15 12:32 441890 c:\windows\system32\perfh009.dat

+ 2001-08-23 12:00 . 2010-12-20 17:32 551936 c:\windows\system32\oleaut32.dll

- 2001-08-23 12:00 . 2008-04-14 00:12 551936 c:\windows\system32\oleaut32.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 206848 c:\windows\system32\occache.dll

- 2001-08-23 12:00 . 2010-12-20 23:59 206848 c:\windows\system32\occache.dll

+ 2001-08-23 12:00 . 2008-06-20 16:02 245248 c:\windows\system32\mswsock.dll

- 2001-08-23 12:00 . 2008-06-20 17:46 245248 c:\windows\system32\mswsock.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 611840 c:\windows\system32\mstime.dll

- 2001-08-23 12:00 . 2010-12-20 23:59 611840 c:\windows\system32\mstime.dll

- 2006-11-08 02:03 . 2010-12-20 23:59 602112 c:\windows\system32\msfeeds.dll

+ 2006-11-08 02:03 . 2011-08-22 23:48 602112 c:\windows\system32\msfeeds.dll

+ 2011-10-25 17:38 . 2011-10-25 17:38 247968 c:\windows\system32\Macromed\Flash\FlashUtil11c_ActiveX.exe

+ 2011-10-25 17:38 . 2011-10-25 17:38 335520 c:\windows\system32\Macromed\Flash\FlashUtil11c_ActiveX.dll

+ 2011-06-06 22:31 . 2011-04-14 09:08 157472 c:\windows\system32\javaws.exe

- 2011-04-24 16:18 . 2011-04-24 16:14 157472 c:\windows\system32\javaws.exe

- 2011-04-24 16:18 . 2011-04-24 16:14 145184 c:\windows\system32\javaw.exe

+ 2011-06-06 22:31 . 2011-04-14 09:08 145184 c:\windows\system32\javaw.exe

+ 2011-06-06 22:31 . 2011-04-14 09:08 145184 c:\windows\system32\java.exe

- 2011-04-24 16:18 . 2011-04-24 16:14 145184 c:\windows\system32\java.exe

+ 2001-08-23 12:00 . 2011-08-22 23:48 184320 c:\windows\system32\iepeers.dll

- 2001-08-23 12:00 . 2010-12-20 23:59 184320 c:\windows\system32\iepeers.dll

+ 2001-08-23 12:00 . 2011-08-22 23:48 387584 c:\windows\system32\iedkcs32.dll

- 2001-08-23 12:00 . 2010-12-20 23:59 387584 c:\windows\system32\iedkcs32.dll

+ 2001-08-23 12:00 . 2011-08-22 11:56 174080 c:\windows\system32\ie4uinit.exe

+ 2006-09-13 08:45 . 2011-11-03 02:32 476352 c:\windows\system32\FNTCACHE.DAT

- 2006-09-13 08:45 . 2011-04-18 12:24 476352 c:\windows\system32\FNTCACHE.DAT

+ 2001-08-23 12:00 . 2011-02-17 13:18 357888 c:\windows\system32\drivers\srv.sys

- 2006-09-13 13:21 . 2008-04-14 00:13 139656 c:\windows\system32\drivers\rdpwd.sys

+ 2006-09-13 13:21 . 2011-06-24 14:10 139656 c:\windows\system32\drivers\rdpwd.sys

+ 2001-08-23 12:00 . 2011-04-21 13:37 105472 c:\windows\system32\drivers\mup.sys

+ 2001-08-23 12:00 . 2011-07-15 13:29 456320 c:\windows\system32\drivers\mrxsmb.sys

+ 2001-08-23 12:00 . 2011-03-03 06:55 149504 c:\windows\system32\dnsapi.dll

- 2010-06-18 17:45 . 2010-06-18 17:45 293376 c:\windows\system32\dllcache\winsrv.dll

+ 2010-06-18 17:45 . 2011-06-20 17:44 293376 c:\windows\system32\dllcache\winsrv.dll

+ 2006-06-23 11:02 . 2011-08-22 23:48 916480 c:\windows\system32\dllcache\wininet.dll

- 2006-06-23 11:02 . 2010-12-20 23:59 916480 c:\windows\system32\dllcache\wininet.dll

+ 2006-09-18 14:15 . 2011-04-30 03:01 758784 c:\windows\system32\dllcache\vgx.dll

+ 2006-10-17 17:05 . 2011-08-22 23:48 105984 c:\windows\system32\dllcache\url.dll

- 2006-10-17 17:05 . 2009-03-08 08:34 105984 c:\windows\system32\dllcache\url.dll

+ 2008-10-18 18:13 . 2011-02-17 13:18 357888 c:\windows\system32\dllcache\srv.sys

+ 2009-07-27 23:17 . 2009-07-27 23:17 135168 c:\windows\system32\dllcache\shsvcs.dll

+ 2008-12-05 06:54 . 2011-04-29 17:25 151552 c:\windows\system32\dllcache\schannel.dll

+ 2011-09-13 13:10 . 2011-06-24 14:10 139656 c:\windows\system32\dllcache\rdpwd.sys

+ 2010-12-20 17:32 . 2010-12-20 17:32 551936 c:\windows\system32\dllcache\oleaut32.dll

+ 2001-08-23 12:00 . 2011-09-26 15:41 220160 c:\windows\system32\dllcache\oleacc.dll

- 2006-10-17 17:04 . 2010-12-20 23:59 206848 c:\windows\system32\dllcache\occache.dll

+ 2006-10-17 17:04 . 2011-08-22 23:48 206848 c:\windows\system32\dllcache\occache.dll

+ 2011-06-27 19:43 . 2011-04-21 13:37 105472 c:\windows\system32\dllcache\mup.sys

+ 2008-06-20 17:46 . 2008-06-20 16:02 245248 c:\windows\system32\dllcache\mswsock.dll

- 2008-06-20 17:46 . 2008-06-20 17:46 245248 c:\windows\system32\dllcache\mswsock.dll

- 2006-06-23 11:02 . 2010-12-20 23:59 611840 c:\windows\system32\dllcache\mstime.dll

+ 2006-06-23 11:02 . 2011-08-22 23:48 611840 c:\windows\system32\dllcache\mstime.dll

+ 2007-05-09 13:36 . 2011-08-22 23:48 602112 c:\windows\system32\dllcache\msfeeds.dll

- 2007-05-09 13:36 . 2010-12-20 23:59 602112 c:\windows\system32\dllcache\msfeeds.dll

+ 2008-11-11 18:44 . 2011-07-15 13:29 456320 c:\windows\system32\dllcache\mrxsmb.sys

+ 2008-08-14 22:38 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll

- 2008-08-14 22:38 . 2010-06-09 07:43 692736 c:\windows\system32\dllcache\inetcomm.dll

+ 2009-06-22 21:45 . 2011-08-22 23:48 247808 c:\windows\system32\dllcache\ieproxy.dll

- 2009-06-22 21:45 . 2010-12-20 23:59 247808 c:\windows\system32\dllcache\ieproxy.dll

+ 2006-06-23 11:02 . 2011-08-22 23:48 184320 c:\windows\system32\dllcache\iepeers.dll

- 2006-06-23 11:02 . 2010-12-20 23:59 184320 c:\windows\system32\dllcache\iepeers.dll

- 2010-06-18 21:37 . 2010-12-20 23:59 743424 c:\windows\system32\dllcache\iedvtool.dll

+ 2010-06-18 21:37 . 2011-08-22 23:48 743424 c:\windows\system32\dllcache\iedvtool.dll

- 2006-11-07 08:27 . 2010-12-20 23:59 387584 c:\windows\system32\dllcache\iedkcs32.dll

+ 2006-11-07 08:27 . 2011-08-22 23:48 387584 c:\windows\system32\dllcache\iedkcs32.dll

+ 2006-11-07 08:26 . 2011-08-22 11:56 174080 c:\windows\system32\dllcache\ie4uinit.exe

+ 2008-06-20 17:46 . 2011-03-03 06:55 149504 c:\windows\system32\dllcache\dnsapi.dll

+ 2011-09-03 10:17 . 2011-09-28 07:06 599040 c:\windows\system32\dllcache\crypt32.dll

+ 2010-04-20 05:30 . 2011-02-15 12:56 290432 c:\windows\system32\dllcache\atmfd.dll

- 2008-06-20 11:40 . 2008-08-14 10:04 138496 c:\windows\system32\dllcache\afd.sys

+ 2008-06-20 11:40 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys

- 2010-07-09 13:27 . 2011-04-24 16:14 472808 c:\windows\system32\deployJava1.dll

+ 2010-07-09 13:27 . 2011-04-14 09:07 472808 c:\windows\system32\deployJava1.dll

- 2009-06-23 15:54 . 2010-08-14 14:39 262144 c:\windows\system32\config\systemprofile\IETldCache\index.dat

+ 2009-06-23 15:54 . 2011-12-10 00:16 262144 c:\windows\system32\config\systemprofile\IETldCache\index.dat

+ 2001-08-23 12:00 . 2011-02-15 12:56 290432 c:\windows\system32\atmfd.dll

+ 2011-07-07 09:18 . 2011-07-07 09:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll

- 2011-01-18 08:39 . 2011-01-18 08:39 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll

- 2011-01-18 08:39 . 2011-01-18 08:39 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

+ 2011-03-25 10:15 . 2011-03-25 10:15 363856 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

+ 2011-07-07 09:18 . 2011-07-07 09:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

- 2011-01-18 08:39 . 2011-01-18 08:39 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll

- 2010-09-23 06:26 . 2010-09-23 06:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll

+ 2011-07-07 16:04 . 2011-07-07 16:04 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll

+ 2011-07-07 16:01 . 2011-07-07 16:01 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll

- 2010-09-23 06:25 . 2010-09-23 06:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll

+ 2011-07-07 17:09 . 2011-07-07 17:09 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

- 2010-09-23 07:17 . 2010-09-23 07:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

+ 2011-06-06 22:32 . 2011-06-06 22:32 180224 c:\windows\Installer\2141836.msi

+ 2011-09-13 14:04 . 2011-09-13 14:04 467456 c:\windows\Installer\101305.msi

- 2007-02-26 17:28 . 2011-04-17 19:37 409600 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 409600 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 286720 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 286720 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 249856 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 249856 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\pptico.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 794624 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 794624 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 135168 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 135168 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\misc.exe

+ 2007-02-26 17:28 . 2011-11-09 23:30 593920 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe

- 2007-02-26 17:28 . 2011-04-17 19:37 593920 c:\windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\accicons.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 249232 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\sqlite.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 394136 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\pdfshell.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 103848 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\PDFPrevHndlrShim.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 183696 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\nppdf32.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 104344 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AiodLite.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 102808 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRdIF.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 755088 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroPDF.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 296344 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\acrobroker.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 205720 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\a3dutils.dll

+ 2011-01-14 11:10 . 2011-01-14 11:10 155520 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD6.DLL

+ 2011-01-14 11:10 . 2011-01-14 11:10 140160 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL2.DLL

+ 2011-11-02 22:24 . 2011-06-23 18:36 916480 c:\windows\ie8updates\KB2586448-IE8\wininet.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 105984 c:\windows\ie8updates\KB2586448-IE8\url.dll

+ 2011-11-02 22:24 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2586448-IE8\spuninst\updspapi.dll

+ 2011-11-02 22:24 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2586448-IE8\spuninst\spuninst.exe

+ 2011-11-02 22:24 . 2011-06-23 18:36 206848 c:\windows\ie8updates\KB2586448-IE8\occache.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 611840 c:\windows\ie8updates\KB2586448-IE8\mstime.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 602112 c:\windows\ie8updates\KB2586448-IE8\msfeeds.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 247808 c:\windows\ie8updates\KB2586448-IE8\ieproxy.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 184320 c:\windows\ie8updates\KB2586448-IE8\iepeers.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 743424 c:\windows\ie8updates\KB2586448-IE8\iedvtool.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 387584 c:\windows\ie8updates\KB2586448-IE8\iedkcs32.dll

+ 2011-11-02 22:24 . 2011-06-23 12:05 173568 c:\windows\ie8updates\KB2586448-IE8\ie4uinit.exe

+ 2011-09-13 13:16 . 2011-04-25 16:11 916480 c:\windows\ie8updates\KB2559049-IE8\wininet.dll

+ 2011-09-13 13:17 . 2009-03-08 08:34 105984 c:\windows\ie8updates\KB2559049-IE8\url.dll

+ 2011-09-13 13:17 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2559049-IE8\spuninst\updspapi.dll

+ 2011-09-13 13:17 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2559049-IE8\spuninst\spuninst.exe

+ 2011-09-13 13:17 . 2011-04-25 16:11 206848 c:\windows\ie8updates\KB2559049-IE8\occache.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 611840 c:\windows\ie8updates\KB2559049-IE8\mstime.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 602112 c:\windows\ie8updates\KB2559049-IE8\msfeeds.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 247808 c:\windows\ie8updates\KB2559049-IE8\ieproxy.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 184320 c:\windows\ie8updates\KB2559049-IE8\iepeers.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 743424 c:\windows\ie8updates\KB2559049-IE8\iedvtool.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 387584 c:\windows\ie8updates\KB2559049-IE8\iedkcs32.dll

+ 2011-09-13 13:17 . 2011-04-25 12:01 173568 c:\windows\ie8updates\KB2559049-IE8\ie4uinit.exe

+ 2011-06-28 03:17 . 2009-03-08 08:33 759296 c:\windows\ie8updates\KB2544521-IE8\vgx.dll

+ 2011-06-28 03:17 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2544521-IE8\spuninst\updspapi.dll

+ 2011-06-28 03:17 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2544521-IE8\spuninst\spuninst.exe

+ 2011-06-28 03:19 . 2010-12-20 23:59 916480 c:\windows\ie8updates\KB2530548-IE8\wininet.dll

+ 2011-06-28 03:19 . 2010-07-05 13:16 382840 c:\windows\ie8updates\KB2530548-IE8\spuninst\updspapi.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 231288 c:\windows\ie8updates\KB2530548-IE8\spuninst\spuninst.exe

+ 2011-06-28 03:19 . 2010-12-20 23:59 206848 c:\windows\ie8updates\KB2530548-IE8\occache.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 611840 c:\windows\ie8updates\KB2530548-IE8\mstime.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 602112 c:\windows\ie8updates\KB2530548-IE8\msfeeds.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 247808 c:\windows\ie8updates\KB2530548-IE8\ieproxy.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 184320 c:\windows\ie8updates\KB2530548-IE8\iepeers.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 743424 c:\windows\ie8updates\KB2530548-IE8\iedvtool.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 387584 c:\windows\ie8updates\KB2530548-IE8\iedkcs32.dll

+ 2011-06-28 03:19 . 2010-12-20 12:55 173568 c:\windows\ie8updates\KB2530548-IE8\ie4uinit.exe

+ 2008-11-11 18:44 . 2011-07-15 13:29 456320 c:\windows\Driver Cache\i386\mrxsmb.sys

+ 2011-11-02 22:20 . 2011-11-02 22:20 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_6e5301f0\System.Drawing.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_752d242b\System.Drawing.Design.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_df10ab25\CustomMarshalers.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\XPBurnComponent\fdb10990f8c6e9a976868f54a3b983fd\XPBurnComponent.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\c8627df7adb416722d8e0f05c57fef6b\WsatConfig.ni.exe

+ 2011-11-03 02:52 . 2011-11-03 02:52 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571\WindowsFormsIntegration.ni.dll

+ 2011-11-03 02:51 . 2011-11-03 02:51 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll

+ 2011-11-03 02:51 . 2011-11-03 02:51 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e\UIAutomationClient.ni.dll

+ 2011-06-29 22:20 . 2011-06-29 22:20 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP71.tmp\System.Web.DynamicData.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\566b2e11e7f3f6d973b17b86cf42f9bc\System.Xml.Linq.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\3533d614ebecd4344efbee619dd11a74\System.Web.Routing.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\018b6e48c32d5b5d78086998e3505f1c\System.Web.RegularExpressions.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d93514a764a83b18f6f3547b59cc8ae9\System.Web.Extensions.Design.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\93b5d1b77a74b76ac73cbf51ec871c01\System.Web.Entity.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\d06a7d5872bbe85795f947f6c75d38c6\System.Web.Entity.Design.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\ad0851438a18bf730d974c9b2f5f776a\System.Web.DynamicData.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\734ab0ea87d7dfd5c583eea535c05878\System.Web.Abstractions.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\8efcd633af87989355382b5039f1b7df\System.Transactions.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\36c12de583ee81e9c99acb72b09d77ac\System.Security.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2\System.Runtime.Serialization.Formatters.Soap.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\36bf3d5f05a40c9e3cadca5789c8a469\System.Runtime.Remoting.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\b2a84980f206431821d85d5155d5916f\System.Net.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\90b90e700e59d73d6d692cf74e1ba16e\System.Management.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\f36eded354122da9555a6c7cdbdb5431\System.Management.Instrumentation.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System.IO.Log.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956\System.IdentityModel.Selectors.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.Wrapper.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.ni.dll

+ 2011-11-03 02:47 . 2011-11-03 02:47 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\896eca06e2d9377b2dc4fad56ce49b07\System.Drawing.Design.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\33e9b0c368c31ef37a2ec7b5a181044b\System.DirectoryServices.Protocols.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c\System.DirectoryServices.AccountManagement.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e5ada332a9bc3c982e6aede6ba354196\System.Data.Services.Client.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\3f179f373f31817a914b639a56cc0497\System.Data.Services.Design.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\fee1a48b769a8c4beb335ee5ce006091\System.Data.Entity.Design.ni.dll

+ 2011-11-03 11:43 . 2011-11-03 11:43 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\b9d9ff5d03e90ede1116794f2c7dd6da\System.Data.DataSetExtensions.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\29d7091f6eab0ec61c4eb625ed221b73\System.Configuration.Install.ni.dll

+ 2011-11-03 11:43 . 2011-11-03 11:43 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc\System.AddIn.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost.ni.exe

+ 2011-11-03 11:42 . 2011-11-03 11:42 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiagnostics.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\f2df1ca28301bfe7e1d52b86c8394217\ServiceModelReg.ni.exe

+ 2011-11-03 02:38 . 2011-11-03 02:38 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f\PresentationFramework.Luna.ni.dll

+ 2011-11-03 02:38 . 2011-11-03 02:38 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5\PresentationFramework.Aero.ni.dll

+ 2011-11-03 02:38 . 2011-11-03 02:38 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1\PresentationFramework.Classic.ni.dll

+ 2011-11-03 02:38 . 2011-11-03 02:38 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0\PresentationFramework.Royale.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.exe

+ 2011-11-03 11:42 . 2011-11-03 11:42 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3\Microsoft.Transactions.Bridge.Dtc.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 303616 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\d32f0a6b32fdb72170c9b05668c671c5\Microsoft.Practices.ObjectBuilder.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 309248 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\d213a40916ecf58076d77e95a73bc60e\Microsoft.Practices.EnterpriseLibrary.Common.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 148992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Practices#\b1bb10800b448f0f0ac79fb0eb138445\Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ff6d4892775fd1f9b137f7c92ea453f2\Microsoft.Build.Utilities.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc\Microsoft.Build.Utilities.v3.5.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\da112c5757e3c68d6369b6aa46cc9682\Microsoft.Build.Engine.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14\Microsoft.Build.Conversion.v3.5.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 230912 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Applicati#\e6fd1e5fb6b4e9d38ae2d87717f521b5\Microsoft.ApplicationBlocks.Updater.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\Interop.WUApiLib\d6c3e51e3033b4da599a73b4782212fe\Interop.WUApiLib.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 330240 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\593e426b546766c7fee82f495b427dda\DriversHQ.DriverDetective.Common.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 378368 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\226fd941d177257fc8d030ae3f4cf4df\DriversHQ.DriverDetective.Client.Communication.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcConfig.ni.exe

+ 2011-11-03 11:39 . 2011-11-03 11:39 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e1bcee92f5af50d560d577c0a99ea3bd\AspNetMMCExt.ni.dll

+ 2011-11-02 22:33 . 2011-11-02 22:34 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll

+ 2011-11-02 22:33 . 2011-11-02 22:33 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll

+ 2011-11-02 22:33 . 2011-11-02 22:33 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll

Link to post
Share on other sites
mateoloco

mateoloco

Posted
  • Author
Posted

+ 2011-06-28 03:18 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB971029$\spuninst\updspapi.dll

+ 2011-06-28 03:18 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971029$\spuninst\spuninst.exe

+ 2011-06-28 03:18 . 2008-04-14 00:12 135168 c:\windows\$NtUninstallKB971029$\shsvcs.dll

+ 2011-09-16 15:32 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2616676$\spuninst\updspapi.dll

+ 2011-09-16 15:32 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2616676$\spuninst\spuninst.exe

+ 2011-09-16 15:32 . 2011-09-03 10:17 599040 c:\windows\$NtUninstallKB2616676$\crypt32.dll

+ 2011-09-13 14:06 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2607712$\spuninst\updspapi.dll

+ 2011-09-13 14:06 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2607712$\spuninst\spuninst.exe

+ 2011-09-13 14:06 . 2008-04-14 00:11 599040 c:\windows\$NtUninstallKB2607712$\crypt32.dll

+ 2011-11-02 22:25 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2592799$\spuninst\updspapi.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2592799$\spuninst\spuninst.exe

+ 2011-11-02 22:25 . 2011-02-16 13:22 138496 c:\windows\$NtUninstallKB2592799$\afd.sys

+ 2011-09-16 15:21 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570947$\spuninst\updspapi.dll

+ 2011-09-16 15:21 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570947$\spuninst\spuninst.exe

+ 2011-09-13 14:07 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570791$\spuninst\updspapi.dll

+ 2011-09-13 14:07 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570791$\spuninst\spuninst.exe

+ 2011-09-13 13:26 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2570222$\spuninst\updspapi.dll

+ 2011-09-13 13:26 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2570222$\spuninst\spuninst.exe

+ 2011-09-13 13:26 . 2008-04-14 00:13 139656 c:\windows\$NtUninstallKB2570222$\rdpwd.sys

+ 2011-09-13 13:27 . 2011-04-26 11:07 293376 c:\windows\$NtUninstallKB2567680$\winsrv.dll

+ 2011-09-13 13:27 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2567680$\spuninst\updspapi.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2567680$\spuninst\spuninst.exe

+ 2011-11-02 22:25 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2567053$\spuninst\updspapi.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2567053$\spuninst\spuninst.exe

+ 2011-09-13 13:15 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2566454$\spuninst\updspapi.dll

+ 2011-09-13 13:15 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2566454$\spuninst\spuninst.exe

+ 2011-11-02 22:37 . 2008-07-29 23:59 161296 c:\windows\$NtUninstallKB2564958$\uiautomationcore.dll

+ 2011-11-02 22:37 . 2011-08-12 17:51 382840 c:\windows\$NtUninstallKB2564958$\spuninst\updspapi.dll

+ 2011-11-02 22:37 . 2011-08-12 17:51 231288 c:\windows\$NtUninstallKB2564958$\spuninst\spuninst.exe

+ 2011-11-02 22:37 . 2001-08-23 12:00 163328 c:\windows\$NtUninstallKB2564958$\oleacc.dll

+ 2011-09-13 13:14 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2562937$\spuninst\updspapi.dll

+ 2011-09-13 13:14 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2562937$\spuninst\spuninst.exe

+ 2011-07-15 16:43 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2555917$\spuninst\updspapi.dll

+ 2011-07-15 16:43 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2555917$\spuninst\spuninst.exe

+ 2011-06-28 03:18 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2544893$\spuninst\updspapi.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2544893$\spuninst\spuninst.exe

+ 2011-06-28 03:18 . 2010-06-09 07:43 692736 c:\windows\$NtUninstallKB2544893$\inetcomm.dll

+ 2011-11-09 23:35 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2544893-v2$\spuninst\updspapi.dll

+ 2011-11-09 23:35 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2544893-v2$\spuninst\spuninst.exe

+ 2011-11-09 23:35 . 2011-05-02 15:31 692736 c:\windows\$NtUninstallKB2544893-v2$\inetcomm.dll

+ 2011-07-01 01:13 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2541763$\spuninst\updspapi.dll

+ 2011-07-01 01:13 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2541763$\spuninst\spuninst.exe

+ 2011-07-01 01:13 . 2010-06-30 12:31 149504 c:\windows\$NtUninstallKB2541763$\schannel.dll

+ 2011-06-28 03:20 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2536276$\spuninst\updspapi.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2536276$\spuninst\spuninst.exe

+ 2011-06-28 03:20 . 2011-02-17 13:18 455936 c:\windows\$NtUninstallKB2536276$\mrxsmb.sys

+ 2011-09-13 13:27 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2536276-v2$\spuninst\updspapi.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2536276-v2$\spuninst\spuninst.exe

+ 2011-09-13 13:27 . 2011-04-29 16:19 456320 c:\windows\$NtUninstallKB2536276-v2$\mrxsmb.sys

+ 2011-06-28 03:23 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2535512$\spuninst\updspapi.dll

+ 2011-06-28 03:23 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2535512$\spuninst\spuninst.exe

+ 2011-06-28 03:23 . 2008-04-13 19:17 105344 c:\windows\$NtUninstallKB2535512$\mup.sys

+ 2011-06-28 03:24 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2524375$\spuninst\updspapi.dll

+ 2011-06-28 03:24 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2524375$\spuninst\spuninst.exe

+ 2011-06-28 03:18 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2509553$\spuninst\updspapi.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2509553$\spuninst\spuninst.exe

+ 2011-06-28 03:18 . 2008-06-20 17:46 245248 c:\windows\$NtUninstallKB2509553$\mswsock.dll

+ 2011-06-28 03:18 . 2008-06-20 17:46 147968 c:\windows\$NtUninstallKB2509553$\dnsapi.dll

+ 2011-06-28 03:18 . 2008-08-14 10:04 138496 c:\windows\$NtUninstallKB2509553$\afd.sys

+ 2011-06-28 03:19 . 2010-08-26 13:39 357248 c:\windows\$NtUninstallKB2508429$\srv.sys

+ 2011-06-28 03:19 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2508429$\spuninst\updspapi.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2508429$\spuninst\spuninst.exe

+ 2011-07-15 16:53 . 2010-06-18 17:45 293376 c:\windows\$NtUninstallKB2507938$\winsrv.dll

+ 2011-07-15 16:53 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2507938$\spuninst\updspapi.dll

+ 2011-07-15 16:53 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2507938$\spuninst\spuninst.exe

+ 2011-06-28 03:20 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2507618$\spuninst\updspapi.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2507618$\spuninst\spuninst.exe

+ 2011-06-28 03:20 . 2011-01-07 14:09 290048 c:\windows\$NtUninstallKB2507618$\atmfd.dll

+ 2011-06-28 03:27 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2503665$\spuninst\updspapi.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2503665$\spuninst\spuninst.exe

+ 2011-06-28 03:27 . 2008-10-16 14:43 138496 c:\windows\$NtUninstallKB2503665$\afd.sys

+ 2011-06-28 03:27 . 2010-07-05 13:16 382840 c:\windows\$NtUninstallKB2476490$\spuninst\updspapi.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 231288 c:\windows\$NtUninstallKB2476490$\spuninst\spuninst.exe

+ 2011-06-28 03:27 . 2008-04-14 00:12 551936 c:\windows\$NtUninstallKB2476490$\oleaut32.dll

+ 2011-06-28 03:18 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971029\update\updspapi.dll

+ 2011-06-28 03:18 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971029\update\update.exe

+ 2011-06-28 03:18 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971029\spuninst.exe

+ 2009-07-27 22:13 . 2009-07-27 22:13 135168 c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll

+ 2011-09-16 15:32 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2616676\update\updspapi.dll

+ 2011-09-16 15:32 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2616676\update\update.exe

+ 2011-09-16 15:32 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2616676\spuninst.exe

+ 2011-09-09 09:11 . 2011-09-09 09:11 599552 c:\windows\$hf_mig$\KB2616676\SP3QFE\crypt32.dll

+ 2011-09-13 14:06 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2607712\update\updspapi.dll

+ 2011-09-13 14:06 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2607712\update\update.exe

+ 2011-09-13 14:06 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2607712\spuninst.exe

+ 2011-09-03 10:16 . 2011-09-03 10:16 599552 c:\windows\$hf_mig$\KB2607712\SP3QFE\crypt32.dll

+ 2011-11-02 22:25 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2592799\update\updspapi.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2592799\update\update.exe

+ 2011-11-02 22:25 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2592799\spuninst.exe

+ 2011-11-02 11:44 . 2011-08-17 13:41 138496 c:\windows\$hf_mig$\KB2592799\SP3QFE\afd.sys

+ 2011-11-02 22:24 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2586448-IE8\update\updspapi.dll

+ 2011-11-02 22:24 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2586448-IE8\update\update.exe

+ 2011-11-02 22:24 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2586448-IE8\spuninst.exe

+ 2011-11-02 11:44 . 2011-08-22 23:47 919552 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\wininet.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 105984 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\url.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 206848 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\occache.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 611840 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mstime.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 602112 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\msfeeds.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 247808 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieproxy.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 184320 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iepeers.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 743424 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedvtool.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 387584 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iedkcs32.dll

+ 2011-11-02 11:44 . 2011-08-22 11:52 174080 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ie4uinit.exe

+ 2011-09-16 15:21 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570947\update\updspapi.dll

+ 2011-09-16 15:21 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570947\update\update.exe

+ 2011-09-16 15:21 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570947\spuninst.exe

+ 2011-09-13 13:26 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2570222\update\updspapi.dll

+ 2011-09-13 13:26 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2570222\update\update.exe

+ 2011-09-13 13:26 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2570222\spuninst.exe

+ 2011-09-13 13:10 . 2011-06-24 14:09 139656 c:\windows\$hf_mig$\KB2570222\SP3QFE\rdpwd.sys

+ 2011-09-13 13:27 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567680\update\updspapi.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567680\update\update.exe

+ 2011-09-13 13:27 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567680\spuninst.exe

+ 2011-06-20 17:43 . 2011-06-20 17:43 293376 c:\windows\$hf_mig$\KB2567680\SP3QFE\winsrv.dll

+ 2011-11-02 22:25 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567053\update\updspapi.dll

+ 2011-11-02 22:25 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567053\update\update.exe

+ 2011-11-02 22:25 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567053\spuninst.exe

+ 2011-09-13 13:15 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2566454\update\updspapi.dll

+ 2011-09-13 13:15 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2566454\update\update.exe

+ 2011-09-13 13:15 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2566454\spuninst.exe

+ 2011-09-13 13:14 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2562937\update\updspapi.dll

+ 2011-09-13 13:14 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2562937\update\update.exe

+ 2011-09-13 13:14 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2562937\spuninst.exe

+ 2011-09-13 13:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2559049-IE8\update\updspapi.dll

+ 2011-09-13 13:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2559049-IE8\update\update.exe

+ 2011-09-13 13:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2559049-IE8\spuninst.exe

+ 2011-09-13 13:12 . 2011-06-23 18:33 919552 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\wininet.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 105984 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\url.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 206848 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\occache.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 611840 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mstime.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 602112 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\msfeeds.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 247808 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieproxy.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 184320 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iepeers.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 743424 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedvtool.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 387584 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iedkcs32.dll

+ 2011-09-13 13:12 . 2011-06-23 12:19 173568 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ie4uinit.exe

+ 2011-07-15 16:43 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2555917\update\updspapi.dll

+ 2011-07-15 16:43 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2555917\update\update.exe

+ 2011-07-15 16:43 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2555917\spuninst.exe

+ 2011-06-28 03:18 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893\update\updspapi.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893\update\update.exe

+ 2011-06-28 03:18 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893\spuninst.exe

+ 2011-06-27 19:38 . 2011-05-02 15:30 692736 c:\windows\$hf_mig$\KB2544893\SP3QFE\inetcomm.dll

+ 2011-11-09 23:35 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544893-v2\update\updspapi.dll

+ 2011-11-09 23:35 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544893-v2\update\update.exe

+ 2011-11-09 23:35 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544893-v2\spuninst.exe

+ 2011-10-10 14:21 . 2011-10-10 14:21 692736 c:\windows\$hf_mig$\KB2544893-v2\SP3QFE\inetcomm.dll

+ 2011-06-28 03:17 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2544521-IE8\update\updspapi.dll

+ 2011-06-28 03:17 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2544521-IE8\update\update.exe

+ 2011-06-28 03:17 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2544521-IE8\spuninst.exe

+ 2011-06-27 19:38 . 2011-04-30 02:59 758784 c:\windows\$hf_mig$\KB2544521-IE8\SP3QFE\vgx.dll

+ 2011-07-01 01:13 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2541763\update\updspapi.dll

+ 2011-07-01 01:13 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2541763\update\update.exe

+ 2011-07-01 01:13 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2541763\spuninst.exe

+ 2011-04-29 17:23 . 2011-04-29 17:23 151552 c:\windows\$hf_mig$\KB2541763\SP3QFE\schannel.dll

+ 2011-06-28 03:20 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276\update\updspapi.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276\update\update.exe

+ 2011-06-28 03:20 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276\spuninst.exe

+ 2011-06-27 19:40 . 2011-04-29 16:47 457856 c:\windows\$hf_mig$\KB2536276\SP3QFE\mrxsmb.sys

+ 2011-09-13 13:27 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2536276-v2\update\updspapi.dll

+ 2011-09-13 13:27 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2536276-v2\update\update.exe

+ 2011-09-13 13:27 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2536276-v2\spuninst.exe

+ 2011-09-13 13:10 . 2011-07-15 13:29 457856 c:\windows\$hf_mig$\KB2536276-v2\SP3QFE\mrxsmb.sys

+ 2011-06-28 03:23 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2535512\update\updspapi.dll

+ 2011-06-28 03:23 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2535512\update\update.exe

+ 2011-06-28 03:23 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2535512\spuninst.exe

+ 2011-06-27 19:43 . 2011-04-21 13:52 105472 c:\windows\$hf_mig$\KB2535512\SP3QFE\mup.sys

+ 2011-06-28 03:19 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2530548-IE8\update\updspapi.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2530548-IE8\update\update.exe

+ 2011-06-28 03:19 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2530548-IE8\spuninst.exe

+ 2011-06-27 19:40 . 2011-04-25 16:09 919552 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\wininet.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 206848 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\occache.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 611840 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mstime.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 602112 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\msfeeds.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 247808 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieproxy.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 184320 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iepeers.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 743424 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedvtool.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 387584 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iedkcs32.dll

+ 2011-06-27 19:40 . 2011-04-25 11:37 173568 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ie4uinit.exe

+ 2011-06-28 03:24 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2524375\update\updspapi.dll

+ 2011-06-28 03:24 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2524375\update\update.exe

+ 2011-06-28 03:24 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2524375\spuninst.exe

+ 2011-06-28 03:18 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2509553\update\updspapi.dll

+ 2011-06-28 03:18 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2509553\update\update.exe

+ 2011-06-28 03:18 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2509553\spuninst.exe

+ 2008-06-20 11:16 . 2008-06-20 11:16 225856 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip6.sys

+ 2008-06-20 11:59 . 2008-06-20 11:59 361600 c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys

+ 2008-06-20 17:43 . 2008-06-20 17:43 245248 c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll

+ 2011-03-03 06:53 . 2011-03-03 06:53 149504 c:\windows\$hf_mig$\KB2509553\SP3QFE\dnsapi.dll

+ 2008-10-16 15:07 . 2008-10-16 15:07 138496 c:\windows\$hf_mig$\KB2509553\SP3QFE\afd.sys

+ 2011-06-28 03:19 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2508429\update\updspapi.dll

+ 2011-06-28 03:19 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2508429\update\update.exe

+ 2011-06-28 03:19 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2508429\spuninst.exe

+ 2011-02-17 13:19 . 2011-02-17 13:19 357888 c:\windows\$hf_mig$\KB2508429\SP3QFE\srv.sys

+ 2011-07-15 16:53 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507938\update\updspapi.dll

+ 2011-07-15 16:53 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507938\update\update.exe

+ 2011-07-15 16:53 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507938\spuninst.exe

+ 2011-04-26 11:02 . 2011-04-26 11:02 293376 c:\windows\$hf_mig$\KB2507938\SP3QFE\winsrv.dll

+ 2011-06-28 03:20 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2507618\update\updspapi.dll

+ 2011-06-28 03:20 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2507618\update\update.exe

+ 2011-06-28 03:20 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2507618\spuninst.exe

+ 2011-02-15 13:05 . 2011-02-15 13:05 290432 c:\windows\$hf_mig$\KB2507618\SP3QFE\atmfd.dll

+ 2011-06-28 03:27 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2503665\update\updspapi.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2503665\update\update.exe

+ 2011-06-28 03:27 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2503665\spuninst.exe

+ 2011-06-27 19:44 . 2011-02-16 13:25 138496 c:\windows\$hf_mig$\KB2503665\SP3QFE\afd.sys

+ 2011-06-28 03:27 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2476490\update\updspapi.dll

+ 2011-06-28 03:27 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2476490\update\update.exe

+ 2011-06-28 03:27 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2476490\spuninst.exe

+ 2010-12-20 17:30 . 2010-12-20 17:30 552448 c:\windows\$hf_mig$\KB2476490\SP3QFE\oleaut32.dll

+ 2011-05-14 00:04 . 2011-05-14 00:04 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80u.dll

+ 2011-05-14 00:04 . 2011-05-14 00:04 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b\mfc80.dll

+ 2001-08-23 12:00 . 2011-09-06 13:20 1858944 c:\windows\system32\win32k.sys

+ 2001-08-23 12:00 . 2011-08-22 23:48 1212416 c:\windows\system32\urlmon.dll

+ 2001-08-23 12:00 . 2011-10-03 08:35 5971456 c:\windows\system32\mshtml.dll

+ 2006-10-17 16:57 . 2011-08-22 23:48 2000384 c:\windows\system32\iertutil.dll

+ 2011-04-13 22:40 . 2011-04-13 22:40 4284416 c:\windows\system32\GPhotos.scr

+ 2011-09-13 01:00 . 2011-03-29 15:22 1034240 c:\windows\system32\drivers\AE1200xp.sys

+ 2008-10-18 18:11 . 2011-09-06 13:20 1858944 c:\windows\system32\dllcache\win32k.sys

+ 2006-07-25 20:33 . 2011-08-22 23:48 1212416 c:\windows\system32\dllcache\urlmon.dll

+ 2006-07-28 11:28 . 2011-10-03 08:35 5971456 c:\windows\system32\dllcache\mshtml.dll

+ 2007-05-09 13:36 . 2011-08-22 23:48 2000384 c:\windows\system32\dllcache\iertutil.dll

- 2008-07-25 15:17 . 2008-07-25 15:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll

+ 2011-03-25 10:15 . 2011-03-25 10:15 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll

+ 2011-04-29 01:50 . 2011-04-29 01:50 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll

- 2010-03-23 09:32 . 2010-03-23 09:32 3182592 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll

+ 2011-07-07 09:18 . 2011-07-07 09:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

- 2011-01-18 08:39 . 2011-01-18 08:39 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

+ 2011-07-07 09:18 . 2011-07-07 09:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll

+ 2011-07-08 17:59 . 2011-07-08 17:59 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll

- 2010-09-23 19:55 . 2010-09-23 19:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll

+ 2011-07-08 17:59 . 2011-07-08 17:59 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll

- 2010-09-23 19:55 . 2010-09-23 19:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll

+ 2011-07-07 16:02 . 2011-07-07 16:02 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

- 2010-09-23 06:26 . 2010-09-23 06:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll

+ 2011-07-07 16:02 . 2011-07-07 16:02 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll

+ 2011-07-08 17:59 . 2011-07-08 17:59 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll

- 2010-09-23 19:55 . 2010-09-23 19:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll

+ 2011-05-04 14:07 . 2011-05-04 14:07 1899008 c:\windows\Installer\d2bde7.msi

+ 2011-01-19 03:36 . 2011-01-19 03:36 2687488 c:\windows\Installer\ac1cdf.msp

+ 2011-08-10 21:43 . 2011-08-10 21:43 3795968 c:\windows\Installer\8fbd97.msp

+ 2011-07-26 12:17 . 2011-07-26 12:17 6824960 c:\windows\Installer\8fbd7a.msp

+ 2011-07-21 16:34 . 2011-07-21 16:34 3456000 c:\windows\Installer\8fbd66.msp

+ 2011-09-07 01:48 . 2011-09-07 01:48 8181248 c:\windows\Installer\8fbd5b.msp

+ 2011-07-27 11:39 . 2011-07-27 11:39 9892352 c:\windows\Installer\8fbd53.msp

+ 2011-05-02 04:06 . 2011-05-02 04:06 2705920 c:\windows\Installer\3349f6.msp

+ 2011-04-29 16:28 . 2011-04-29 16:28 1995264 c:\windows\Installer\2f15338.msp

+ 2011-04-27 23:51 . 2011-04-27 23:51 6825472 c:\windows\Installer\2f15326.msp

+ 2011-05-20 21:31 . 2011-05-20 21:31 5518848 c:\windows\Installer\2f15311.msp

+ 2011-05-17 22:28 . 2011-05-17 22:28 6862848 c:\windows\Installer\2f152fc.msp

+ 2011-04-29 16:33 . 2011-04-29 16:33 8173568 c:\windows\Installer\2f152e7.msp

+ 2011-04-29 17:04 . 2011-04-29 17:04 5053440 c:\windows\Installer\2f152df.msp

+ 2011-04-29 16:30 . 2011-04-29 16:30 1197056 c:\windows\Installer\2f152ca.msp

+ 2011-11-03 18:31 . 2011-11-03 18:31 5525504 c:\windows\Installer\27df882.msp

+ 2011-09-20 19:36 . 2011-09-20 19:36 5521408 c:\windows\Installer\26977e1.msp

+ 2011-05-23 18:15 . 2011-05-23 18:15 3617792 c:\windows\Installer\20e8d1.msp

+ 2011-06-27 19:32 . 2011-06-27 19:32 2295808 c:\windows\Installer\135fc95.msi

+ 2007-04-19 18:09 . 2007-04-19 18:09 1061720 c:\windows\Installer\$PatchCache$\Managed\9040110900063D11C8EF10054038389C\11.0.8173\OMFC.DLL

+ 2011-06-06 16:55 . 2011-06-06 16:55 2215312 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\rt3d.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 6543768 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\authplay.dll

+ 2011-06-06 16:55 . 2011-06-06 16:55 1240992 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AdobeCollabSync.exe

+ 2011-06-06 16:55 . 2011-06-06 16:55 1480600 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32.exe

+ 2011-01-14 11:10 . 2011-01-14 11:10 2395008 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKWORD.DLL

+ 2011-01-14 11:10 . 2011-01-14 11:10 2180992 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKPOWERPOINT.DLL

+ 2011-01-14 11:10 . 2011-01-14 11:10 3443072 c:\windows\Installer\$PatchCache$\Managed\00004109500200000000000000F01FEC\14.0.5130\GKEXCEL.DLL

+ 2009-04-03 22:21 . 2009-04-03 22:21 8543096 c:\windows\Installer\$PatchCache$\Managed\00002109020090400000000000F01FEC\12.0.6425\OARTCONV.DLL

+ 2011-11-02 22:24 . 2011-06-23 18:36 1212416 c:\windows\ie8updates\KB2586448-IE8\urlmon.dll

+ 2011-11-02 22:24 . 2011-07-25 15:17 5969920 c:\windows\ie8updates\KB2586448-IE8\mshtml.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 1991680 c:\windows\ie8updates\KB2586448-IE8\iertutil.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 1211904 c:\windows\ie8updates\KB2559049-IE8\urlmon.dll

+ 2011-09-13 13:17 . 2011-05-30 22:19 5964800 c:\windows\ie8updates\KB2559049-IE8\mshtml.dll

+ 2011-09-13 13:17 . 2011-04-25 16:11 1991680 c:\windows\ie8updates\KB2559049-IE8\iertutil.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 1210880 c:\windows\ie8updates\KB2530548-IE8\urlmon.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 5961216 c:\windows\ie8updates\KB2530548-IE8\mshtml.dll

+ 2011-06-28 03:19 . 2010-12-20 23:59 1991680 c:\windows\ie8updates\KB2530548-IE8\iertutil.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_e568ee59\System.dll

+ 2011-11-02 22:20 . 2011-11-02 22:20 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_a7545385\System.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_b0d1c9b9\System.Xml.dll

+ 2011-11-02 22:20 . 2011-11-02 22:20 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_64642389\System.Xml.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_7b78b5ad\System.Windows.Forms.dll

+ 2011-11-02 22:20 . 2011-11-02 22:20 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_76522a99\System.Windows.Forms.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_e5cf55d2\System.Drawing.dll

+ 2011-11-02 22:20 . 2011-11-02 22:20 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b33b759d\System.Design.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_2004ae9a\System.Design.dll

+ 2011-11-02 22:21 . 2011-11-02 22:21 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_e40668a4\mscorlib.dll

+ 2011-11-02 22:20 . 2011-11-02 22:20 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_268d4542\mscorlib.dll

+ 2011-11-02 22:39 . 2011-11-02 22:39 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsBase.ni.dll

+ 2011-11-03 02:51 . 2011-11-03 02:51 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c\UIAutomationClientsideProviders.ni.dll

+ 2011-11-02 22:38 . 2011-11-02 22:38 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll

+ 2011-11-03 02:51 . 2011-11-03 02:51 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\17902fdb0e0d3bc8b49bce693415fe7e\System.WorkflowServices.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\f72c5f649951b0403e62bfab6c453e6f\System.Workflow.Runtime.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\0aa4f4174204c93cc5181df4a6b2fb09\System.Workflow.ComponentModel.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\921629dc69a5a895101097c88ae67897\System.Workflow.Activities.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\6303e256d2ac0843c3e4c24172c90544\System.Web.Services.ni.dll

+ 2011-11-03 11:45 . 2011-11-03 11:45 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\f5dac0448a1dbe2687a5df92904d6274\System.Web.Mobile.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\ccaf6bdd256a9b5079fedadcc8993327\System.Web.Extensions.ni.dll

+ 2011-11-03 02:49 . 2011-11-03 02:49 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f\System.Speech.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\9ec7da53380a754b4ad97709df0dd7e7\System.ServiceModel.Web.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll

+ 2011-11-03 02:48 . 2011-11-03 02:48 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\System.Printing.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d14065ede44df8e9b5d6b60c5ddccc69\System.IdentityModel.ni.dll

+ 2011-11-03 02:46 . 2011-11-03 02:46 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\91cd88a803768151c6262853d3454ba7\System.DirectoryServices.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\cc5ac99e8af2738e85cda5525fdd944f\System.Deployment.ni.dll

+ 2011-11-03 02:41 . 2011-11-03 02:41 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ec323cf1df697cc0a45f67de685db90c\System.Data.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ef748704f543a8791e23387652d34dfb\System.Data.SqlXml.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\541142d8742e6e88f1e729fafee04e71\System.Data.Services.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\5d5aa4b926ae422607ea833d934665c2\System.Data.OracleClient.ni.dll

+ 2011-11-03 02:42 . 2011-11-03 02:42 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\d96a94076acb8e0c5a96a1b2de4b3a7a\System.Data.Linq.ni.dll

+ 2011-11-03 11:44 . 2011-11-03 11:44 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\a3ce22c2a84fdcb008d72d230ee0b2c0\System.Data.Entity.ni.dll

+ 2011-11-03 02:40 . 2011-11-03 02:40 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485\System.Core.ni.dll

+ 2011-11-03 02:39 . 2011-11-03 02:39 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a\ReachFramework.ni.dll

+ 2011-11-03 02:39 . 2011-11-03 02:39 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990\PresentationUI.ni.dll

+ 2011-11-02 22:38 . 2011-11-02 22:38 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\b42ad515bb20ec1f1250c040371c6730\PresentationBuildTasks.ni.dll

+ 2011-11-03 11:43 . 2011-11-03 11:43 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c\Microsoft.VisualBasic.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449\Microsoft.Transactions.Bridge.ni.dll

+ 2011-11-03 11:41 . 2011-11-03 11:41 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\8ad32b72258899177c07dc5912b5b748\Microsoft.JScript.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\50e7c5eb58c982dba7b21cd10a69b095\Microsoft.Build.Tasks.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289\Microsoft.Build.Tasks.v3.5.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0\Microsoft.Build.Engine.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 4674048 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.DriverDet#\9a9d6f5c7169c00b2fddac83558f69b5\DriversHQ.DriverDetective.Client.ni.exe

+ 2011-11-03 11:41 . 2011-11-03 11:41 1132032 c:\windows\assembly\NativeImages_v2.0.50727_32\DriversHQ.Common\84316e2692fcbcf2c1f44a8238595259\DriversHQ.Common.ni.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

+ 2011-11-02 22:33 . 2011-11-02 22:33 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

+ 2011-11-02 22:33 . 2011-11-02 22:33 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

+ 2011-11-02 22:33 . 2011-11-02 22:33 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll

- 2011-04-17 19:22 . 2011-04-17 19:22 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

+ 2011-11-02 22:34 . 2011-11-02 22:34 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

- 2011-04-17 19:21 . 2011-04-17 19:21 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

- 2010-10-26 17:35 . 2010-10-26 17:35 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll

+ 2011-11-02 22:19 . 2011-11-02 22:19 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll

- 2010-10-26 17:35 . 2010-10-26 17:35 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll

+ 2011-11-02 22:19 . 2011-11-02 22:19 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll

+ 2011-11-02 22:25 . 2011-06-02 14:02 1858944 c:\windows\$NtUninstallKB2567053$\win32k.sys

+ 2011-07-15 16:43 . 2011-03-03 13:21 1857920 c:\windows\$NtUninstallKB2555917$\win32k.sys

+ 2009-07-27 22:13 . 2009-07-27 22:13 8462848 c:\windows\$hf_mig$\KB971029\SP3QFE\shell32.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 1214464 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\urlmon.dll

+ 2011-11-02 11:44 . 2011-10-03 08:34 5972992 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\mshtml.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 2001408 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\iertutil.dll

+ 2011-09-06 13:25 . 2011-09-06 13:25 1867904 c:\windows\$hf_mig$\KB2567053\SP3QFE\win32k.sys

+ 2011-09-13 13:12 . 2011-06-23 18:33 1214464 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\urlmon.dll

+ 2011-09-13 13:12 . 2011-07-25 15:15 5971456 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\mshtml.dll

+ 2011-09-13 13:12 . 2011-06-23 18:33 1992192 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\iertutil.dll

+ 2011-06-02 14:07 . 2011-06-02 14:07 1867904 c:\windows\$hf_mig$\KB2555917\SP3QFE\win32k.sys

+ 2011-06-27 19:40 . 2011-04-25 16:09 1213952 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\urlmon.dll

+ 2011-06-27 19:40 . 2011-05-30 22:17 5967360 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\mshtml.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 1992192 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\iertutil.dll

+ 2006-09-13 16:30 . 2011-11-09 23:30 50295240 c:\windows\system32\MRT.exe

+ 2006-11-08 02:03 . 2011-08-23 21:48 11081728 c:\windows\system32\ieframe.dll

+ 2007-05-09 13:36 . 2011-08-23 21:48 11081728 c:\windows\system32\dllcache\ieframe.dll

+ 2011-07-13 02:49 . 2011-07-13 02:49 11459584 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2572067\M2572067Uninstall.msp

+ 2011-08-10 19:04 . 2011-08-10 19:04 20333056 c:\windows\Installer\dbb72b.msp

+ 2011-09-05 22:01 . 2011-09-05 22:01 13135872 c:\windows\Installer\c31373.msp

+ 2011-03-28 07:27 . 2011-03-28 07:27 15456256 c:\windows\Installer\ac1ceb.msp

+ 2011-07-26 20:33 . 2011-07-26 20:33 10984448 c:\windows\Installer\8fbd8f.msp

+ 2011-11-02 22:37 . 2011-11-02 22:37 20333568 c:\windows\Installer\26977f6.msp

+ 2011-07-12 00:43 . 2011-07-12 00:43 11641344 c:\windows\Installer\26977eb.msp

+ 2011-07-12 19:50 . 2011-07-12 19:50 17555968 c:\windows\Installer\26977cd.msp

+ 2011-06-06 16:55 . 2011-06-06 16:55 24731544 c:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\AcroRd32.dll

+ 2011-11-02 22:24 . 2011-06-23 18:36 11081728 c:\windows\ie8updates\KB2586448-IE8\ieframe.dll

+ 2011-09-13 13:17 . 2011-04-26 14:11 11081728 c:\windows\ie8updates\KB2559049-IE8\ieframe.dll

+ 2011-06-28 03:19 . 2010-12-21 10:29 11080704 c:\windows\ie8updates\KB2530548-IE8\ieframe.dll

+ 2011-11-03 02:50 . 2011-11-03 02:50 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll

+ 2011-11-03 11:40 . 2011-11-03 11:40 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\60df958ca96c9b8945f836759b6abd34\System.Web.ni.dll

+ 2011-11-03 11:42 . 2011-11-03 11:42 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\ceadaf3b3d017c7a1ef10a06f8009f6f\System.ServiceModel.ni.dll

+ 2011-11-03 02:45 . 2011-11-03 02:45 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c6374d32e4af7b7e3e46b32176f76558\System.Design.ni.dll

+ 2011-09-13 13:41 . 2011-09-13 13:41 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\704556e34128441ea9f1a81cc89f8a79\PresentationFramework.ni.dll

+ 2011-11-03 02:37 . 2011-11-03 02:37 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\054488924fcc579cce9fa0209dafe28b\PresentationFramework.ni.dll

+ 2011-11-03 02:35 . 2011-11-03 02:35 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\b2f0318713eca304eaa9d86fc17edb96\PresentationCore.ni.dll

+ 2011-11-02 22:37 . 2011-11-02 22:37 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll

+ 2011-11-02 11:44 . 2011-08-22 23:47 11084288 c:\windows\$hf_mig$\KB2586448-IE8\SP3QFE\ieframe.dll

+ 2011-06-25 05:03 . 2011-06-25 05:03 11083776 c:\windows\$hf_mig$\KB2559049-IE8\SP3QFE\ieframe.dll

+ 2011-06-27 19:40 . 2011-04-25 16:09 11083776 c:\windows\$hf_mig$\KB2530548-IE8\SP3QFE\ieframe.dll

.

-- Snapshot reset to current date --

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

Link to post
Share on other sites
mateoloco

mateoloco

Posted
  • Author
Posted

-- Snapshot reset to current date --

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SansaDispatch"="c:\documents and settings\Matt\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe" [2010-12-17 79872]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-14 68856]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-11 49152]

"VTTimer"="VTTimer.exe" [2006-09-21 53248]

"VTTrayp"="VTtrayp.exe" [2007-08-27 200704]

"SoundMan"="SOUNDMAN.EXE" [2006-01-11 577536]

"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-11-09 282624]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]

.

c:\desktop\Start Menu\Programs\Startup\

Dropbox.lnk - c:\documents and settings\Matt\Application Data\Dropbox\bin\Dropbox.exe [2011-9-1 24183152]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sqlesw32]

2011-11-30 17:28 37888 ----a-w- c:\windows\system32\sqlesw32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sqlseses]

2011-11-30 17:28 37888 ----a-w- c:\windows\system32\sqlesw32.dll

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ WinCinema Manager.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ WinCinema Manager.lnk

backup=c:\windows\pss\ WinCinema Manager.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk

backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk

backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk

backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^KODAK Software Updater.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\KODAK Software Updater.lnk

backup=c:\windows\pss\KODAK Software Updater.lnkCommon Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

2008-04-14 00:12 15360 ----a-w- c:\windows\system32\ctfmon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]

2004-08-04 02:32 208952 ----a-w- c:\windows\ime\IMJP8_1\imjpmig.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]

2010-05-20 19:27 119152 ----a-w- c:\program files\Microsoft LifeCam\LifeExp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

2008-04-14 00:12 1695232 ------w- c:\program files\Messenger\msmsgs.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSN Toolbar]

2010-07-06 17:30 240480 ----a-w- c:\program files\MSN Toolbar\Platform\4.0.0417.0\mswinext.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTVOICE]

2004-01-30 00:33 180224 ----a-r- c:\windows\system32\pctspk.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]

2004-08-04 02:32 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\tintsetp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]

2004-08-04 02:32 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\tintsetp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2006-11-09 20:15 282624 ----a-w- c:\program files\QuickTime\qttask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RaidTool]

2005-06-20 10:53 1056768 ----a-r- c:\program files\VIA\RAID\raid_tool.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

2011-01-26 22:05 15026056 ----a-r- c:\program files\Skype\Phone\Skype.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]

2006-01-11 19:08 577536 ----a-w- c:\windows\soundman.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2007-07-14 02:52 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

2009-08-28 08:52 198160 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]

2006-09-21 20:36 53248 ----a-r- c:\windows\system32\VTTimer.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTrayp]

2007-08-27 23:03 200704 ----a-r- c:\windows\system32\VTTrayp.exe

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\QuickTime\\QuickTimePlayer.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=

"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\Program Files\\att-nap\\McciBrowser.exe"=

"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeEnC2.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeTray.exe"=

"c:\\Program Files\\Napster\\napster.exe"=

"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

"c:\\Documents and Settings\\Matt\\Application Data\\Dropbox\\bin\\Dropbox.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"2967:UDP"= 2967:UDP:AAIT Symantec-UDP 2967

"2967:TCP"= 2967:TCP:AAIT Symantec-TCP 2967

"38293:UDP"= 38293:UDP:AAIT Symantec-UDP 38293

.

R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [9/12/2011 8:00 PM 1034240]

S0 qxlsc;qxlsc;c:\windows\system32\drivers\snfydh.sys --> c:\windows\system32\drivers\snfydh.sys [?]

S2 SqlCSS;SQL Server EXPRESS;c:\windows\System32\svchost.exe -k Sqlses [8/23/2001 7:00 AM 14336]

S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]

S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\drivers\nx6000.sys [12/13/2009 1:32 PM 30576]

S3 USB-100;Linksys EtherFast 10/100 Compact USB Network Adapter;c:\windows\system32\drivers\USB100M.SYS [9/13/2006 9:30 AM 27519]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

Sqlses REG_MULTI_SZ SqlCSS

.

Contents of the 'Scheduled Tasks' folder

.

2011-11-27 c:\windows\Tasks\Norton Security Scan for Matt.job

- c:\program files\Norton Security Scan\Nss.exe [2008-09-19 09:18]

.

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.google.com/

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uDefault_Search_URL = hxxp://www.google.com/ie

uInternet Connection Wizard,ShellNext = iexplore

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

Trusted Zone: allrecipes.com

Trusted Zone: netflix.com

Trusted Zone: verizonwireless.com

TCP: DhcpNameServer = 192.168.0.1 205.152.37.23 192.168.2.1

DPF: {96695E54-ECE5-437B-81BF-D45FA9F878A0} - hxxp://www.s3graphics.com/S3DisplayAct/S3DisplayAct.cab

FF - ProfilePath - c:\documents and settings\Matt\Application Data\Mozilla\Firefox\Profiles\yk952da9.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/

.

- - - - ORPHANS REMOVED - - - -

.

HKLM-Run-SunJavaUpdateSched - c:\program files\Java\jre6\bin\jusched.exe

Notify-NavLogon - (no file)

MSConfigStartUp-ccApp - c:\program files\Common Files\Symantec Shared\ccApp.exe

.

.

.

**************************************************************************

.

disk not found C:\

.

please note that you need administrator rights to perform deep scan

scanning hidden processes ...

.

scanning hidden autostart entries ...

.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

SansaDispatch = c:\documents and settings\Matt\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe?F???????http://mp3support.sandisk.com/sansa/Application/SansaUpdater_1_301.txt??1??????

.

scanning hidden files ...

.

scan completed successfully

hidden files:

.

**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------

.

- - - - - - - > 'winlogon.exe'(656)

c:\windows\system32\sqlesw32.dll

.

- - - - - - - > 'explorer.exe'(2712)

c:\windows\system32\WININET.dll

c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

c:\progra~1\WINDOW~3\wmpband.dll

c:\windows\system32\ieframe.dll

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Other Running Processes ------------------------

.

c:\program files\Java\jre6\bin\jqs.exe

c:\program files\Common Files\Motive\McciCMService.exe

c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

c:\program files\Microsoft LifeCam\MSCamS32.exe

c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\windows\System32\wbem\wmiapsrv.exe

c:\windows\system32\wscntfy.exe

.

**************************************************************************

.

Completion time: 2011-12-09 20:33:06 - machine was rebooted

ComboFix-quarantined-files.txt 2011-12-10 01:32

ComboFix2.txt 2011-04-25 12:58

ComboFix3.txt 2011-04-24 17:40

.

Pre-Run: 21,388,685,312 bytes free

Post-Run: 22,102,405,120 bytes free

.

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

.

- - End Of File - - 62AC8EB51719EC4FE5E6F82B7992B339

Link to post
Share on other sites
LDTate

LDTate

Posted
Posted

Copy/paste the text in the Codebox below into notepad:

Here's how to do that:

Click Start > Run type Notepad click OK.

This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text. 

KillAll::

File::
c:\windows\system32\sqlesw32.dll

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sqlesw32]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sqlseses]

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:

1.Click File;

2.Click Save As... Change the directory to your desktop;

3.Change the Save as type to "All Files";

4.Type in the file name: CFScript

5.Click Save ...

CFScriptB-4.gif

Drag CFScript.txt into ComboFix.exe

Then post the results log using Copy / Paste

Also please describe how your computer behaves at the moment.

Link to post
Share on other sites
mateoloco

mateoloco

Posted
  • Author
Posted

I did what you told me to do. ComboFix rebooted the system twice. After the second time, ComboFix was not on. However, there was no results log. I tried searching for a log but I could not find one. Also, I was no longer connected to the internet, nor could I do so. So, I rebooted the computer. Still not connected to net, but when I unplugged and replugged in the wireless network adapter, I got a connection.

When I open (C:), it shows that the File Folder WINDOWS has been modified today at 12:34 pm (since running ComboFix). I also now have File Folder Qoobox (modified today at 12:25pm) and Folder ComboFix (modified today at 12:33 pm). When I click on the ComboFix folder (C:\ComboFix), I get the same list of items that I get when I click on My Computer. When I click on Local Disk (C:) from within the ComboFix folder, it takes me to C:\.

Any idea where the log might be? Anything else that needs to be done? I hope I am following your instructions and not giving you useless info.

Link to post
Share on other sites
mateoloco

mateoloco

Posted
  • Author
Posted

Here's the log:

ComboFix 11-12-12.02 - Matt 12/12/2011 22:58:47.4.1 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.479.219 [GMT -5:00]

Running from: c:\desktop\Desktop\ComboFix.exe

.

.

((((((((((((((((((((((((( Files Created from 2011-11-13 to 2011-12-13 )))))))))))))))))))))))))))))))

.

.

2011-12-13 03:55 . 2011-12-13 03:55 8782 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\BUTTON.JS

2011-12-13 03:55 . 2011-12-13 03:55 7271 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\CHECKBOX.JS

2011-12-11 23:01 . 2011-12-11 23:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton

2011-12-11 23:01 . 2011-12-11 23:01 -------- d-----w- c:\windows\system32\drivers\NSS

2011-12-11 23:01 . 2011-12-11 23:01 -------- d-----w- c:\program files\NortonInstaller

2011-12-10 00:56 . 2011-08-17 13:49 138496 ----a-w- c:\windows\system32\drivers\afd.sys

2011-12-02 03:32 . 2011-12-02 03:32 -------- d-sh--w- c:\documents and settings\NetworkService\PrivacIE

2011-11-30 17:28 . 2011-11-30 17:28 37888 ----a-w- c:\windows\system32\sqlesw32.dll

2011-11-28 21:17 . 2011-08-31 22:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-11-24 16:58 . 2011-11-24 16:58 -------- d-----w- c:\program files\oDesk

2011-11-24 16:57 . 2011-11-24 16:58 -------- d-----w- c:\documents and settings\Matt\Local Settings\Application Data\oDesk

2011-11-20 22:00 . 2011-11-20 22:02 -------- d-----w- c:\documents and settings\My Music\The Backyardigans

.

.

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-25 17:38 . 2011-05-14 11:02 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-10-10 14:22 . 2006-09-13 13:23 692736 ----a-w- c:\windows\system32\inetcomm.dll

2011-09-28 07:06 . 2001-08-23 12:00 599040 ----a-w- c:\windows\system32\crypt32.dll

2011-09-26 15:41 . 2008-07-29 23:59 611328 ----a-w- c:\windows\system32\uiautomationcore.dll

2011-09-26 15:41 . 2001-08-23 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll

2011-09-26 15:41 . 2001-08-23 12:00 20480 ----a-w- c:\windows\system32\oleaccrc.dll

2010-12-16 02:24 . 2010-12-16 02:24 1046736 ----a-w- c:\program files\Driverwhiz.exe

2010-12-08 20:20 . 2010-12-08 20:20 14263800 ----a-w- c:\program files\picasa38-setup.exe

2009-02-08 02:35 . 2009-02-08 02:35 4865408 ----a-w- c:\program files\Silverlight.2.0.exe

2007-02-03 16:49 . 2007-02-03 16:49 233139240 ----a-w- c:\program files\Microsoft Office Publisher.exe

2006-10-16 14:49 . 2006-10-16 14:48 48909288 ----a-w- c:\program files\Microsoft PP Product.exe

2006-10-16 14:14 . 2006-10-16 14:13 1951432 ----a-w- c:\program files\Microsoft PP B.exe

2011-11-05 06:53 . 2011-11-20 01:19 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((( SnapShot_2011-12-10_01.27.49 )))))))))))))))))))))))))))))))))))))))))

.

+ 2011-12-13 03:56 . 2011-12-13 03:56 16384 c:\windows\Temp\Perflib_Perfdata_73c.dat

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2011-02-18 05:12 94208 ----a-w- c:\documents and settings\Matt\Application Data\Dropbox\bin\DropboxExt.14.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SansaDispatch"="c:\documents and settings\Matt\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe" [2010-12-17 79872]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-14 68856]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-11 49152]

"VTTimer"="VTTimer.exe" [2006-09-21 53248]

"VTTrayp"="VTtrayp.exe" [2007-08-27 200704]

"SoundMan"="SOUNDMAN.EXE" [2006-01-11 577536]

"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-07-17 288080]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-11-09 282624]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]

.

c:\desktop\Start Menu\Programs\Startup\

Dropbox.lnk - c:\documents and settings\Matt\Application Data\Dropbox\bin\Dropbox.exe [2011-9-1 24183152]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sqlesw32]

2011-11-30 17:28 37888 ----a-w- c:\windows\system32\sqlesw32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sqlseses]

2011-11-30 17:28 37888 ----a-w- c:\windows\system32\sqlesw32.dll

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ WinCinema Manager.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\ WinCinema Manager.lnk

backup=c:\windows\pss\ WinCinema Manager.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk

backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk

backup=c:\windows\pss\Adobe Reader Synchronizer.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Kodak EasyShare software.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk

backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^KODAK Software Updater.lnk]

path=c:\documents and settings\All Users\Start Menu\Programs\Startup\KODAK Software Updater.lnk

backup=c:\windows\pss\KODAK Software Updater.lnkCommon Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

2008-04-14 00:12 15360 ----a-w- c:\windows\system32\ctfmon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]

2004-08-04 02:32 208952 ----a-w- c:\windows\ime\IMJP8_1\imjpmig.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]

2010-05-20 19:27 119152 ----a-w- c:\program files\Microsoft LifeCam\LifeExp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]

2008-04-14 00:12 1695232 ------w- c:\program files\Messenger\msmsgs.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSN Toolbar]

2010-07-06 17:30 240480 ----a-w- c:\program files\MSN Toolbar\Platform\4.0.0417.0\mswinext.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCTVOICE]

2004-01-30 00:33 180224 ----a-r- c:\windows\system32\pctspk.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]

2004-08-04 02:32 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\tintsetp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]

2004-08-04 02:32 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\tintsetp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2006-11-09 20:15 282624 ----a-w- c:\program files\QuickTime\qttask.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RaidTool]

2005-06-20 10:53 1056768 ----a-r- c:\program files\VIA\RAID\raid_tool.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

2011-01-26 22:05 15026056 ----a-r- c:\program files\Skype\Phone\Skype.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]

2006-01-11 19:08 577536 ----a-w- c:\windows\soundman.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2007-07-14 02:52 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

2009-08-28 08:52 198160 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]

2006-09-21 20:36 53248 ----a-r- c:\windows\system32\VTTimer.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTrayp]

2007-08-27 23:03 200704 ----a-r- c:\windows\system32\VTTrayp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\QuickTime\\QuickTimePlayer.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=

"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=

"c:\\WINDOWS\\system32\\dpvsetup.exe"=

"c:\\Program Files\\att-nap\\McciBrowser.exe"=

"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeEnC2.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=

"c:\\Program Files\\Microsoft LifeCam\\LifeTray.exe"=

"c:\\Program Files\\Napster\\napster.exe"=

"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

"c:\\Documents and Settings\\Matt\\Application Data\\Dropbox\\bin\\Dropbox.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"2967:UDP"= 2967:UDP:AAIT Symantec-UDP 2967

"2967:TCP"= 2967:TCP:AAIT Symantec-TCP 2967

"38293:UDP"= 38293:UDP:AAIT Symantec-UDP 38293

.

R3 Linksys_adapter_H;Linksys Adapter Network Driver;c:\windows\system32\drivers\AE1200xp.sys [9/12/2011 8:00 PM 1034240]

S0 qxlsc;qxlsc;c:\windows\system32\drivers\snfydh.sys --> c:\windows\system32\drivers\snfydh.sys [?]

S2 SqlCSS;SQL Server EXPRESS;c:\windows\System32\svchost.exe -k Sqlses [8/23/2001 7:00 AM 14336]

S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]

S3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\drivers\nx6000.sys [12/13/2009 1:32 PM 30576]

S3 USB-100;Linksys EtherFast 10/100 Compact USB Network Adapter;c:\windows\system32\drivers\USB100M.SYS [9/13/2006 9:30 AM 27519]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

Sqlses REG_MULTI_SZ SqlCSS

.

Contents of the 'Scheduled Tasks' folder

.

2011-12-11 c:\windows\Tasks\Norton Security Scan for Matt.job

- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.3.0.44\Nss.exe [2011-12-11 23:01]

.

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.google.com/

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uDefault_Search_URL = hxxp://www.google.com/ie

uInternet Connection Wizard,ShellNext = iexplore

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

Trusted Zone: allrecipes.com

Trusted Zone: netflix.com

Trusted Zone: verizonwireless.com

TCP: DhcpNameServer = 192.168.0.1 205.152.37.23 192.168.2.1

DPF: {96695E54-ECE5-437B-81BF-D45FA9F878A0} - hxxp://www.s3graphics.com/S3DisplayAct/S3DisplayAct.cab

FF - ProfilePath - c:\documents and settings\Matt\Application Data\Mozilla\Firefox\Profiles\yk952da9.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/

.

.

**************************************************************************

.

disk not found C:\

.

please note that you need administrator rights to perform deep scan

scanning hidden processes ...

.

scanning hidden autostart entries ...

.

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

SansaDispatch = c:\documents and settings\Matt\Application Data\SanDisk\Sansa Updater\SansaDispatch.exe?F???????http://mp3support.sandisk.com/sansa/Application/SansaUpdater_1_301.txt??1??????

.

scanning hidden files ...

.

scan completed successfully

hidden files:

.

**************************************************************************

.

--------------------- DLLs Loaded Under Running Processes ---------------------

.

- - - - - - - > 'winlogon.exe'(672)

c:\windows\system32\sqlesw32.dll

.

Completion time: 2011-12-12 23:20:27

ComboFix-quarantined-files.txt 2011-12-13 04:20

ComboFix2.txt 2011-12-10 01:33

ComboFix3.txt 2011-04-25 12:58

ComboFix4.txt 2011-04-24 17:40

.

Pre-Run: 22,150,672,384 bytes free

Post-Run: 22,259,466,240 bytes free

.

- - End Of File - - FC17BF8EE723AA0FDC03B8325532CFEF

Link to post
Share on other sites
LDTate

LDTate

Posted
Posted

They're still showing in the results

Copy/paste the text in the Codebox below into notepad:

Here's how to do that:

Click Start > Run type Notepad click OK.

This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text. 

KillAll::

File::
c:\windows\system32\sqlesw32.dll

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sqlesw32]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Sqlseses]

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:

1.Click File;

2.Click Save As... Change the directory to your desktop;

3.Change the Save as type to "All Files";

4.Type in the file name: CFScript

5.Click Save ...

CFScriptB-4.gif

Drag CFScript.txt into ComboFix.exe

Then post the results log using Copy / Paste

Also please describe how your computer behaves at the moment.

Link to post
Share on other sites
LDTate

LDTate

Posted
Posted

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.