WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93121 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

[Resolved] Google Redirects, gmer wont run Scan, random popups, 100% C

Started by brooklynsystems , Jan 14 2010 12:56 PM

This topic is locked

52 replies to this topic

#16 jpshortstuff

Teacher Emeritus

Authentic Member
5,710 posts

Posted 17 January 2010 - 03:47 PM

OK, now we need to see where we stand and prepare the remove the last of the infection. Please run ComboFix again (normally - double-click) and post the log it gives. Then we can assess what remains.

Proud Graduate of the TC/WTT Classroom

At weekends (GMT) I may not be able to reply promptly due to various commitments. Please be patient and I will respond as soon as I can.

My help is free, however, if you wish to make a small donation to show appreciation and to help me continue the fight against Malware, then click here

Need help remembering those important computer maintenance tasks? Let SCars do it for you.

Posted Image

Advertisements

Register to Remove

#17 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 17 January 2010 - 04:45 PM

ComboFix 10-01-16.04 - Admin 01/17/2010 17:37:24.3.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2208 [GMT -5:00]
Running from: c:\documents and settings\Admin\Desktop\Combo-F.exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Admin\rthdcpl.exe

.
((((((((((((((((((((((((( Files Created from 2009-12-17 to 2010-01-17 )))))))))))))))))))))))))))))))
.

2010-01-17 22:37 . 2010-01-17 22:37 4 ----a-w- c:\program files\102586171.dat
2010-01-16 18:03 . 2008-04-14 10:41 21183 ------w- c:\windows\system32\drivers\atv01nt5.dll
2010-01-15 04:04 . 2010-01-15 04:04 4 ----a-w- c:\program files\15688671.dat
2010-01-15 04:02 . 2010-01-15 04:02 4 ----a-w- c:\program files\15571125.dat
2010-01-15 04:02 . 2010-01-15 04:02 4 ----a-w- c:\program files\15571109.dat
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\xircom
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\wbem\snmp
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\program files\microsoft frontpage
2010-01-14 14:32 . 2010-01-14 14:32 -------- d-----w- c:\program files\ERUNT
2010-01-14 14:25 . 2010-01-14 14:25 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-01-13 19:06 . 2009-12-02 13:19 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-01-13 17:41 . 2010-01-13 17:41 6296864 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Resources.dll
2010-01-13 17:41 . 2010-01-13 17:41 933120 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\CEAPI.dll
2010-01-13 17:41 . 2010-01-13 17:41 816272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
2010-01-13 17:41 . 2010-01-13 17:41 822904 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
2010-01-13 17:41 . 2010-01-13 17:41 1643272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
2010-01-13 17:41 . 2010-01-13 17:41 788880 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe
2010-01-13 17:41 . 2010-01-13 17:41 1181328 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe
2010-01-13 17:11 . 2010-01-13 17:11 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-01-13 17:11 . 2009-12-07 14:10 2953352 -c--a-w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
2010-01-13 17:11 . 2010-01-13 17:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-01-13 17:11 . 2010-01-13 17:11 -------- d-----w- c:\program files\Lavasoft
2010-01-13 17:11 . 2010-01-13 18:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-13 17:11 . 2010-01-13 17:14 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-13 17:08 . 2010-01-13 17:08 -------- d-----w- c:\program files\Trend Micro
2010-01-13 16:46 . 2010-01-13 16:46 -------- d-----w- c:\program files\CCleaner
2010-01-13 16:46 . 2010-01-13 16:46 52224 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-01-13 16:46 . 2010-01-13 16:46 117760 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-16 18:09 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-11 17:17 . 2010-01-11 17:17 552 ----a-w- c:\windows\system32\d3d8caps.dat
2010-01-11 17:17 . 2010-01-12 16:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\Admin\Application Data\Malwarebytes
2009-12-19 16:34 . 2009-12-03 21:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-19 16:33 . 2009-12-19 16:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-19 16:33 . 2009-12-03 21:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-17 00:19 . 2008-10-01 08:42 611792 ----a-w- c:\documents and settings\Admin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-16 18:09 . 2009-02-18 01:41 -------- d-----w- c:\program files\AIM Lite
2010-01-16 18:09 . 2008-12-12 16:12 -------- d-----w- c:\program files\AirPort
2010-01-16 18:09 . 2008-10-21 14:02 -------- d-----w- c:\program files\iTunes
2010-01-16 18:09 . 2008-10-21 13:59 -------- d-----w- c:\program files\PowerISO
2010-01-16 18:09 . 2008-10-13 21:42 -------- d-----w- c:\program files\QuickTime
2010-01-14 18:07 . 2009-02-17 00:46 -------- d-----w- c:\program files\PokerTracker 3
2010-01-14 18:06 . 2008-10-01 08:25 -------- d-----w- c:\program files\Styler
2010-01-14 18:05 . 2009-02-09 20:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Rosetta Stone
2010-01-13 22:19 . 2008-10-01 08:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Babylon
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592890.dat
2010-01-13 16:12 . 2008-10-01 08:36 -------- d-----w- c:\program files\AutoPlay Media Studio 7.0
2009-12-26 23:19 . 2009-10-27 19:00 -------- d-----w- c:\documents and settings\Admin\Application Data\vlc
2009-12-25 03:51 . 2009-11-19 13:42 79488 ----a-w- c:\documents and settings\Admin\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-19 18:46 . 2008-04-14 12:00 96512 ------w- c:\windows\system32\drivers\atapi.sys
2009-12-19 14:57 . 2008-10-10 21:01 -------- d-----w- c:\documents and settings\Admin\Application Data\uTorrent
2009-12-02 13:19 . 2010-01-13 17:42 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
.

<pre>
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe
c:\program files\AIM Lite\aimlite .exe
c:\program files\AirPort\apagent .exe
c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt .exe
c:\program files\Babylon\Babylon-Pro\babylon .exe
c:\program files\Brother\ControlCenter2\brctrcen .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm   .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr	.exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr   .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr  .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe
c:\program files\iTunes\ituneshelper .exe
c:\program files\Microsoft Office\Office12\groovemonitor .exe
c:\program files\PowerISO\pwrisovm .exe
c:\program files\QuickTime\qttask		  .exe
c:\program files\QuickTime\qttask		 .exe
c:\program files\QuickTime\qttask		.exe
c:\program files\QuickTime\qttask	   .exe
c:\program files\QuickTime\qttask	  .exe
c:\program files\QuickTime\qttask	 .exe
c:\program files\QuickTime\qttask	.exe
c:\program files\QuickTime\qttask   .exe
c:\program files\QuickTime\qttask  .exe
c:\program files\QuickTime\qttask .exe
c:\program files\SUPERAntiSpyware\superantispyware .exe
</pre>

------- Sigcheck -------

[-] 2008-09-08 . CBEEBEB899E31EF52B962CB31FC8CA5C . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-14 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
.
((((((((((((((((((((((((((((( SnapShot@2010-01-14_23.43.38 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-10-01 01:18 . 2008-04-14 12:00 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 57344 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcirt.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 74802 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\atl.dll
+ 2010-01-16 18:08 . 2010-01-16 18:08 16384 c:\windows\Temp\Perflib_Perfdata_260.dat
+ 2008-04-14 10:42 . 2008-04-14 10:42 20992 c:\windows\system32\spupdwxp.exe
+ 2008-09-08 20:54 . 2007-08-11 01:46 26488 c:\windows\system32\spupdsvc.exe
- 2008-09-08 20:54 . 2008-09-08 20:54 26488 c:\windows\system32\spupdsvc.exe
+ 2008-10-01 08:33 . 2007-08-11 01:46 17272 c:\windows\system32\spmsg.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 10752 c:\windows\system32\smtpapi.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 73796 c:\windows\system32\slserv.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 32866 c:\windows\system32\slrundll.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 73832 c:\windows\system32\slcoinst.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 86016 c:\windows\system32\mdmxsdk.dll
+ 2008-09-08 20:53 . 2008-04-14 10:41 81920 c:\windows\system32\ieencode.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 32285 c:\windows\system32\hsfcisp2.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 20992 c:\windows\system32\faxpatch.exe
+ 2010-01-16 18:03 . 2008-04-14 03:04 25471 c:\windows\system32\drivers\watv10nt.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 22271 c:\windows\system32\drivers\watv06nt.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 11935 c:\windows\system32\drivers\wadv11nt.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 11871 c:\windows\system32\drivers\wadv09nt.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 11295 c:\windows\system32\drivers\wadv08nt.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 11807 c:\windows\system32\drivers\wadv07nt.sys
+ 2010-01-16 18:03 . 2008-04-14 05:13 14208 c:\windows\system32\drivers\wacompen.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 42240 c:\windows\system32\drivers\viaagp.sys
+ 2010-01-16 18:03 . 2008-04-14 10:42 11325 c:\windows\system32\drivers\vchnt5.dll
+ 2010-01-16 18:03 . 2008-04-14 05:26 12800 c:\windows\system32\drivers\usb8023x.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 44672 c:\windows\system32\drivers\uagp35.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 13240 c:\windows\system32\drivers\slwdmsup.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 95424 c:\windows\system32\drivers\slnthal.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 40960 c:\windows\system32\drivers\sisagp.sys
+ 2010-01-16 18:03 . 2008-04-14 05:26 30592 c:\windows\system32\drivers\rndismpx.sys
+ 2010-01-16 18:03 . 2008-04-14 05:16 59136 c:\windows\system32\drivers\rfcomm.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 13776 c:\windows\system32\drivers\recagent.sys
+ 2010-01-16 18:03 . 2008-04-14 05:13 12672 c:\windows\system32\drivers\mutohpen.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 11868 c:\windows\system32\drivers\mdmxsdk.sys
+ 2010-01-16 18:05 . 2008-04-14 05:15 46592 c:\windows\system32\drivers\irbus.sys
+ 2010-01-16 18:03 . 2008-04-14 05:15 19200 c:\windows\system32\drivers\hidir.sys
+ 2010-01-16 18:03 . 2008-04-14 05:16 25600 c:\windows\system32\drivers\hidbth.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 46464 c:\windows\system32\drivers\gagp30kx.sys
+ 2010-01-16 18:03 . 2008-04-14 10:41 15423 c:\windows\system32\drivers\ch7xxnt5.dll
+ 2010-01-16 18:03 . 2008-04-14 05:16 18944 c:\windows\system32\drivers\bthusb.sys
+ 2010-01-16 18:03 . 2008-04-14 05:16 36480 c:\windows\system32\drivers\bthprint.sys
+ 2010-01-16 18:03 . 2008-04-14 05:16 37888 c:\windows\system32\drivers\bthmodem.sys
+ 2010-01-16 18:03 . 2008-04-14 05:16 17024 c:\windows\system32\drivers\bthenum.sys
+ 2010-01-16 18:03 . 2008-04-14 10:41 17279 c:\windows\system32\drivers\atv10nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 14143 c:\windows\system32\drivers\atv06nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 25471 c:\windows\system32\drivers\atv04nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 11359 c:\windows\system32\drivers\atv02nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 03:04 63488 c:\windows\system32\drivers\atinxsxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 31744 c:\windows\system32\drivers\atinxbxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 73216 c:\windows\system32\drivers\atintuxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 13824 c:\windows\system32\drivers\atinttxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 28672 c:\windows\system32\drivers\atinsnxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 52224 c:\windows\system32\drivers\atinraxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 14336 c:\windows\system32\drivers\atinpdxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 13824 c:\windows\system32\drivers\atinmdxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 57856 c:\windows\system32\drivers\atinbtxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 34735 c:\windows\system32\drivers\ati1xsxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 29455 c:\windows\system32\drivers\ati1xbxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 36463 c:\windows\system32\drivers\ati1tuxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 21343 c:\windows\system32\drivers\ati1ttxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 26367 c:\windows\system32\drivers\ati1snxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 63663 c:\windows\system32\drivers\ati1rvxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 30671 c:\windows\system32\drivers\ati1raxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 12047 c:\windows\system32\drivers\ati1pdxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 11615 c:\windows\system32\drivers\ati1mdxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 56623 c:\windows\system32\drivers\ati1btxx.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 43008 c:\windows\system32\drivers\amdagp.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 42752 c:\windows\system32\drivers\alim1541.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 44928 c:\windows\system32\drivers\agpcpq.sys
+ 2010-01-16 18:03 . 2008-04-14 05:06 42368 c:\windows\system32\drivers\agp440.sys
+ 2008-04-14 10:39 . 2008-04-14 10:39 24064 c:\windows\system32\dllcache\pidgen.dll
+ 2010-01-16 18:05 . 2008-04-14 03:57 79872 c:\windows\system32\dllcache\msxml6r.dll
+ 2008-04-14 12:00 . 2008-04-14 10:42 15360 c:\windows\system32\ctfmon.exe
+ 2008-09-08 20:53 . 2008-04-14 10:41 35328 c:\windows\system32\corpol.dll
+ 2010-01-16 18:08 . 2010-01-16 18:08 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012010011620100117\index.dat
- 2008-10-01 08:34 . 2010-01-14 18:34 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-10-01 08:34 . 2010-01-17 01:42 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2010-01-15 01:35 . 2010-01-17 01:42 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2010-01-16 18:05 . 2008-04-14 10:41 32768 c:\windows\system32\ativtmxx.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 32866 c:\windows\slrundll.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 82944 c:\windows\ServicePackFiles\ServicePackCache\i386\msgsc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 33792 c:\windows\ServicePackFiles\ServicePackCache\i386\custsat.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\xrxscnui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 11776 c:\windows\ServicePackFiles\i386\xolehlp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50176 c:\windows\ServicePackFiles\i386\xmlprovi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 30720 c:\windows\ServicePackFiles\i386\xcopy.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 91648 c:\windows\ServicePackFiles\i386\xactsrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 52736 c:\windows\ServicePackFiles\i386\wzcsapi.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 19455 c:\windows\ServicePackFiles\i386\wvchntxx.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 32256 c:\windows\ServicePackFiles\i386\wups.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18432 c:\windows\ServicePackFiles\i386\wtsapi32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50688 c:\windows\ServicePackFiles\i386\wstdecod.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 19200 c:\windows\ServicePackFiles\i386\wstcodec.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 22528 c:\windows\ServicePackFiles\i386\wsock32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 41984 c:\windows\ServicePackFiles\i386\wsnmp32.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 12063 c:\windows\ServicePackFiles\i386\wsiintxx.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 19456 c:\windows\ServicePackFiles\i386\wshtcpip.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 11264 c:\windows\ServicePackFiles\i386\wshrm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 14336 c:\windows\ServicePackFiles\i386\wship6.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 90112 c:\windows\ServicePackFiles\i386\wshext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 36864 c:\windows\ServicePackFiles\i386\wshcon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 80896 c:\windows\ServicePackFiles\i386\wscsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 13824 c:\windows\ServicePackFiles\i386\wscntfy.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 19968 c:\windows\ServicePackFiles\i386\ws2help.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 82432 c:\windows\ServicePackFiles\i386\ws2_32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 11264 c:\windows\ServicePackFiles\i386\wpnpinst.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 32256 c:\windows\ServicePackFiles\i386\wpabaln.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 95232 c:\windows\ServicePackFiles\i386\wmiutils.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 41472 c:\windows\ServicePackFiles\i386\wmipsess.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 62464 c:\windows\ServicePackFiles\i386\wmipjobj.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 61952 c:\windows\ServicePackFiles\i386\wmipiprt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 60928 c:\windows\ServicePackFiles\i386\wmicookr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 88576 c:\windows\ServicePackFiles\i386\wmiaprpl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 92672 c:\windows\ServicePackFiles\i386\wlnotify.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 69120 c:\windows\ServicePackFiles\i386\wlanapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 53760 c:\windows\ServicePackFiles\i386\winsta.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 17408 c:\windows\ServicePackFiles\i386\winshfhc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 99328 c:\windows\ServicePackFiles\i386\winscard.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 16896 c:\windows\ServicePackFiles\i386\winrnr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 32256 c:\windows\ServicePackFiles\i386\winipsec.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 75776 c:\windows\ServicePackFiles\i386\wiascr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 65024 c:\windows\ServicePackFiles\i386\wextract.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 68096 c:\windows\ServicePackFiles\i386\webclnt.dll
+ 2010-01-16 18:04 . 2008-04-14 05:47 83072 c:\windows\ServicePackFiles\i386\wdmaud.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 23552 c:\windows\ServicePackFiles\i386\wdmaud.drv
+ 2010-01-16 18:04 . 2008-04-14 10:42 49152 c:\windows\ServicePackFiles\i386\wdigest.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 23615 c:\windows\ServicePackFiles\i386\wch7xxnt.sys
+ 2010-01-16 18:05 . 2008-04-14 05:15 31744 c:\windows\ServicePackFiles\i386\wceusbsh.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 43520 c:\windows\ServicePackFiles\i386\wbemsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\wbemprox.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 43008 c:\windows\ServicePackFiles\i386\wbemperf.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 71680 c:\windows\ServicePackFiles\i386\wbemcons.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 25471 c:\windows\ServicePackFiles\i386\watv10nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 22271 c:\windows\ServicePackFiles\i386\watv06nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 33599 c:\windows\ServicePackFiles\i386\watv04nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 19551 c:\windows\ServicePackFiles\i386\watv02nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 29311 c:\windows\ServicePackFiles\i386\watv01nt.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 17664 c:\windows\ServicePackFiles\i386\watchdog.sys
+ 2010-01-16 18:04 . 2008-04-14 05:27 34560 c:\windows\ServicePackFiles\i386\wanarp.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 53248 c:\windows\ServicePackFiles\i386\wamreg51.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 76800 c:\windows\ServicePackFiles\i386\wam51.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 11935 c:\windows\ServicePackFiles\i386\wadv11nt.sys
+ 2010-01-16 18:05 . 2008-04-14 03:04 11871 c:\windows\ServicePackFiles\i386\wadv09nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 11295 c:\windows\ServicePackFiles\i386\wadv08nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 11807 c:\windows\ServicePackFiles\i386\wadv07nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 11775 c:\windows\ServicePackFiles\i386\wadv05nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 12127 c:\windows\ServicePackFiles\i386\wadv02nt.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 12415 c:\windows\ServicePackFiles\i386\wadv01nt.sys
+ 2010-01-16 18:04 . 2008-04-14 05:13 14208 c:\windows\ServicePackFiles\i386\wacompen.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 30208 c:\windows\ServicePackFiles\i386\wabmig.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 85504 c:\windows\ServicePackFiles\i386\wabimp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 32768 c:\windows\ServicePackFiles\i386\wabfind.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 46080 c:\windows\ServicePackFiles\i386\wab.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 15872 c:\windows\ServicePackFiles\i386\w3ssl.dll
+ 2010-01-16 18:05 . 2008-04-14 05:11 52352 c:\windows\ServicePackFiles\i386\volsnap.sys
+ 2010-01-16 18:04 . 2008-04-14 05:14 81664 c:\windows\ServicePackFiles\i386\videoprt.sys
+ 2010-01-16 18:05 . 2008-04-14 05:06 42240 c:\windows\ServicePackFiles\i386\viaagp.sys
+ 2010-01-16 18:04 . 2008-04-14 05:14 20992 c:\windows\ServicePackFiles\i386\vga.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 53760 c:\windows\ServicePackFiles\i386\vfwwdm32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\version.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 26624 c:\windows\ServicePackFiles\i386\verifier.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 28672 c:\windows\ServicePackFiles\i386\verclsid.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 51712 c:\windows\ServicePackFiles\i386\vdmredir.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 26112 c:\windows\ServicePackFiles\i386\vdmdbg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 11325 c:\windows\ServicePackFiles\i386\vchnt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 30749 c:\windows\ServicePackFiles\i386\vbajet32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50176 c:\windows\ServicePackFiles\i386\utilman.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 26112 c:\windows\ServicePackFiles\i386\userinit.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 74240 c:\windows\ServicePackFiles\i386\usbui.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 20608 c:\windows\ServicePackFiles\i386\usbuhci.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 26368 c:\windows\ServicePackFiles\i386\usbstor.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 26112 c:\windows\ServicePackFiles\i386\usbser.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 15104 c:\windows\ServicePackFiles\i386\usbscan.sys
+ 2010-01-16 18:04 . 2008-04-14 05:17 25856 c:\windows\ServicePackFiles\i386\usbprint.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 17152 c:\windows\ServicePackFiles\i386\usbohci.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 16896 c:\windows\ServicePackFiles\i386\usbmon.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 15872 c:\windows\ServicePackFiles\i386\usbintel.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 59520 c:\windows\ServicePackFiles\i386\usbhub.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 30208 c:\windows\ServicePackFiles\i386\usbehci.sys
+ 2010-01-16 18:05 . 2008-04-14 05:15 32128 c:\windows\ServicePackFiles\i386\usbccgp.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 25728 c:\windows\ServicePackFiles\i386\usbcamd2.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 25600 c:\windows\ServicePackFiles\i386\usbcamd.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 60032 c:\windows\ServicePackFiles\i386\usbaudio.sys
+ 2010-01-16 18:04 . 2008-04-14 05:26 12800 c:\windows\ServicePackFiles\i386\usb8023x.sys
+ 2010-01-16 18:04 . 2008-04-14 05:26 12800 c:\windows\ServicePackFiles\i386\usb8023.sys
+ 2010-01-16 18:04 . 2008-04-14 03:05 32384 c:\windows\ServicePackFiles\i386\usb101et.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 37888 c:\windows\ServicePackFiles\i386\url.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18432 c:\windows\ServicePackFiles\i386\ups.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 16896 c:\windows\ServicePackFiles\i386\upnpcont.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 13824 c:\windows\ServicePackFiles\i386\uniplat.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 74240 c:\windows\ServicePackFiles\i386\unimdmat.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 35840 c:\windows\ServicePackFiles\i386\umandlg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 26624 c:\windows\ServicePackFiles\i386\udhisapi.dll
+ 2010-01-16 18:04 . 2008-04-14 05:02 66048 c:\windows\ServicePackFiles\i386\udfs.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 44672 c:\windows\ServicePackFiles\i386\uagp35.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 60416 c:\windows\ServicePackFiles\i386\tzchange.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 57856 c:\windows\ServicePackFiles\i386\twext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50688 c:\windows\ServicePackFiles\i386\twain_32.dll
+ 2010-01-16 18:05 . 2008-04-14 05:26 12288 c:\windows\ServicePackFiles\i386\tunmp.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 16384 c:\windows\ServicePackFiles\i386\ttyui.dll
+ 2010-01-16 18:04 . 2007-04-03 02:01 39936 c:\windows\ServicePackFiles\i386\ttyres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50688 c:\windows\ServicePackFiles\i386\tspkg.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 53248 c:\windows\ServicePackFiles\i386\tsgqec.dll
+ 2010-01-16 18:04 . 2008-04-14 10:43 12168 c:\windows\ServicePackFiles\i386\tsddd.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 25600 c:\windows\ServicePackFiles\i386\tscupdc.dll
+ 2010-01-16 18:04 . 2007-10-30 20:36 13801 c:\windows\ServicePackFiles\i386\tscuinst.vbs
+ 2010-01-16 18:04 . 2007-12-12 21:03 18917 c:\windows\ServicePackFiles\i386\tscinst.vbs
+ 2010-01-16 18:05 . 2008-04-14 10:42 93696 c:\windows\ServicePackFiles\i386\tscfgwmi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 90112 c:\windows\ServicePackFiles\i386\trkwks.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 12800 c:\windows\ServicePackFiles\i386\tree.com
+ 2010-01-16 18:04 . 2008-04-14 10:42 12288 c:\windows\ServicePackFiles\i386\tracert.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 82944 c:\windows\ServicePackFiles\i386\tp4mon.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 33792 c:\windows\ServicePackFiles\i386\tools.dll
+ 2007-12-17 22:30 . 2007-12-17 22:30 66592 c:\windows\ServicePackFiles\i386\togac.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 73216 c:\windows\ServicePackFiles\i386\tlntsvr.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 78336 c:\windows\ServicePackFiles\i386\tlntsess.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 61440 c:\windows\ServicePackFiles\i386\tlntadmn.exe
+ 2010-01-16 18:04 . 2008-04-14 10:43 40840 c:\windows\ServicePackFiles\i386\termdd.sys
+ 2008-04-14 10:42 . 2008-04-14 10:42 75776 c:\windows\ServicePackFiles\i386\telnet.exe
+ 2010-01-16 18:04 . 2008-04-14 10:43 21896 c:\windows\ServicePackFiles\i386\tdtcp.sys
+ 2010-01-16 18:04 . 2008-04-14 10:43 12040 c:\windows\ServicePackFiles\i386\tdpipe.sys
+ 2010-01-16 18:04 . 2008-04-14 05:30 19072 c:\windows\ServicePackFiles\i386\tdi.sys
+ 2007-04-03 03:06 . 2007-04-03 03:06 16384 c:\windows\ServicePackFiles\i386\tcptsat.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 32827 c:\windows\ServicePackFiles\i386\tcptest.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 45568 c:\windows\ServicePackFiles\i386\tcpmonui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 45568 c:\windows\ServicePackFiles\i386\tcpmon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 14848 c:\windows\ServicePackFiles\i386\tcpmib.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 77824 c:\windows\ServicePackFiles\i386\tasklist.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 76288 c:\windows\ServicePackFiles\i386\taskkill.exe
+ 2010-01-16 18:04 . 2008-04-14 05:10 14976 c:\windows\ServicePackFiles\i386\tape.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 33792 c:\windows\ServicePackFiles\i386\tabletoc.dll
+ 2007-06-27 23:29 . 2007-06-27 23:29 61440 c:\windows\ServicePackFiles\i386\system.web.regularexpressions.dll
+ 2007-06-27 23:29 . 2007-06-27 23:29 77824 c:\windows\ServicePackFiles\i386\system.security.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 48640 c:\windows\ServicePackFiles\i386\system.enterpriseservices.thunk.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 65536 c:\windows\ServicePackFiles\i386\system.drawing.design.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 86016 c:\windows\ServicePackFiles\i386\system.directoryservices.dll
+ 2007-06-27 23:27 . 2007-06-27 23:27 77824 c:\windows\ServicePackFiles\i386\system.configuration.install.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 71680 c:\windows\ServicePackFiles\i386\sysinfo.exe
+ 2010-01-16 18:04 . 2008-04-14 05:45 60800 c:\windows\ServicePackFiles\i386\sysaudio.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 57856 c:\windows\ServicePackFiles\i386\synceng.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 56576 c:\windows\ServicePackFiles\i386\swmidi.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 14336 c:\windows\ServicePackFiles\i386\svchost.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 46592 c:\windows\ServicePackFiles\i386\svcext51.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 65601 c:\windows\ServicePackFiles\i386\stub_fpsrvwin.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 16449 c:\windows\ServicePackFiles\i386\stub_fpsrvadm.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 75776 c:\windows\ServicePackFiles\i386\strmfilt.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 15232 c:\windows\ServicePackFiles\i386\streamip.sys
+ 2010-01-16 18:05 . 2008-04-14 05:15 49408 c:\windows\ServicePackFiles\i386\stream.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 74752 c:\windows\ServicePackFiles\i386\storprop.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 14848 c:\windows\ServicePackFiles\i386\stimon.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 68096 c:\windows\ServicePackFiles\i386\sti.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 86528 c:\windows\ServicePackFiles\i386\stdprov.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 59392 c:\windows\ServicePackFiles\i386\stclient.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 33280 c:\windows\ServicePackFiles\i386\sstub.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 14336 c:\windows\ServicePackFiles\i386\ssstars.scr
+ 2010-01-16 18:05 . 2008-04-14 10:42 46592 c:\windows\ServicePackFiles\i386\sspifilt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\ssmyst.scr
+ 2010-01-16 18:04 . 2008-04-14 10:42 47104 c:\windows\ServicePackFiles\i386\ssmypics.scr
+ 2010-01-16 18:04 . 2008-04-14 10:42 20992 c:\windows\ServicePackFiles\i386\ssmarque.scr
+ 2010-01-16 18:05 . 2008-04-14 10:42 45056 c:\windows\ServicePackFiles\i386\ssinc51.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 71680 c:\windows\ServicePackFiles\i386\ssdpsrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 34816 c:\windows\ServicePackFiles\i386\ssdpapi.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 19968 c:\windows\ServicePackFiles\i386\ssbezier.scr
+ 2010-01-16 18:04 . 2008-04-14 10:42 96768 c:\windows\ServicePackFiles\i386\srvsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 67584 c:\windows\ServicePackFiles\i386\srclient.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 58434 c:\windows\ServicePackFiles\i386\srchctls.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 73472 c:\windows\ServicePackFiles\i386\sr.sys
+ 2008-04-14 10:42 . 2008-04-14 10:42 20992 c:\windows\ServicePackFiles\i386\spupdwxp.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 57856 c:\windows\ServicePackFiles\i386\spoolsv.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 75264 c:\windows\ServicePackFiles\i386\spoolss.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 11264 c:\windows\ServicePackFiles\i386\spnpinst.exe
+ 2010-01-16 18:05 . 2008-04-14 05:13 12800 c:\windows\ServicePackFiles\i386\spiisupd.exe
+ 2010-01-16 18:04 . 2008-04-14 03:13 62976 c:\windows\ServicePackFiles\i386\spgrmr.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 24576 c:\windows\ServicePackFiles\i386\sort.exe
+ 2010-01-16 18:04 . 2008-04-14 05:16 25344 c:\windows\ServicePackFiles\i386\sonydcam.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 39936 c:\windows\ServicePackFiles\i386\snmpthrd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\snmpapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 33280 c:\windows\ServicePackFiles\i386\snmp.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 34816 c:\windows\ServicePackFiles\i386\sniffpol.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 10752 c:\windows\ServicePackFiles\i386\smtpapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50688 c:\windows\ServicePackFiles\i386\smss.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 89600 c:\windows\ServicePackFiles\i386\smlogsvc.exe
+ 2010-01-16 18:04 . 2008-04-14 05:06 16000 c:\windows\ServicePackFiles\i386\smbbatt.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 13240 c:\windows\ServicePackFiles\i386\slwdmsup.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 73796 c:\windows\ServicePackFiles\i386\slserv.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 32866 c:\windows\ServicePackFiles\i386\slrundll.exe
+ 2010-01-16 18:04 . 2008-04-14 04:53 95424 c:\windows\ServicePackFiles\i386\slnthal.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 11136 c:\windows\ServicePackFiles\i386\slip.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 73832 c:\windows\ServicePackFiles\i386\slcoinst.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 98304 c:\windows\ServicePackFiles\i386\slbiop.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 25088 c:\windows\ServicePackFiles\i386\slayerxp.dll
+ 2010-01-16 18:04 . 2008-04-14 03:05 63547 c:\windows\ServicePackFiles\i386\sla30nd5.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 26112 c:\windows\ServicePackFiles\i386\skeys.exe
+ 2010-01-16 18:04 . 2008-04-14 03:05 32768 c:\windows\ServicePackFiles\i386\sisnic.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 40960 c:\windows\ServicePackFiles\i386\sisagp.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 70144 c:\windows\ServicePackFiles\i386\sigverif.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 13312 c:\windows\ServicePackFiles\i386\sigtab.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 19456 c:\windows\ServicePackFiles\i386\shutdown.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 16437 c:\windows\ServicePackFiles\i386\shtml.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 20536 c:\windows\ServicePackFiles\i386\shtml.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 27648 c:\windows\ServicePackFiles\i386\shscrap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 77824 c:\windows\ServicePackFiles\i386\shrpubw.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 45056 c:\windows\ServicePackFiles\i386\shmgrate.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 65024 c:\windows\ServicePackFiles\i386\shimeng.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 68096 c:\windows\ServicePackFiles\i386\shgina.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 25088 c:\windows\ServicePackFiles\i386\shfolder.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 11392 c:\windows\ServicePackFiles\i386\sfloppy.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 11008 c:\windows\ServicePackFiles\i386\sffp_sd.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 10240 c:\windows\ServicePackFiles\i386\sffp_mmc.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 11904 c:\windows\ServicePackFiles\i386\sffdisk.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 32768 c:\windows\ServicePackFiles\i386\setupn.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 73216 c:\windows\ServicePackFiles\i386\setup50.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 23040 c:\windows\ServicePackFiles\i386\setup.exe
+ 2007-12-17 22:29 . 2007-12-17 22:29 66592 c:\windows\ServicePackFiles\i386\setregni.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 31232 c:\windows\ServicePackFiles\i386\sethc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 56320 c:\windows\ServicePackFiles\i386\servdeps.dll
+ 2010-01-16 18:04 . 2008-04-14 05:45 64512 c:\windows\ServicePackFiles\i386\serial.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 15744 c:\windows\ServicePackFiles\i386\serenum.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 39424 c:\windows\ServicePackFiles\i386\sens.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 54784 c:\windows\ServicePackFiles\i386\sendmail.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29184 c:\windows\ServicePackFiles\i386\sendcmsg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 56320 c:\windows\ServicePackFiles\i386\secur32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\seclogon.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\secedit.exe
+ 2010-01-16 18:04 . 2008-04-14 03:09 20480 c:\windows\ServicePackFiles\i386\secdrv.sys
+ 2010-01-16 18:03 . 2008-04-14 10:42 29184 c:\windows\ServicePackFiles\i386\sdhcinst.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 79232 c:\windows\ServicePackFiles\i386\sdbus.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 77312 c:\windows\ServicePackFiles\i386\sdbinst.exe
+ 2010-01-16 18:04 . 2008-04-14 05:15 11520 c:\windows\ServicePackFiles\i386\scsiscan.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 96384 c:\windows\ServicePackFiles\i386\scsiport.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 36352 c:\windows\ServicePackFiles\i386\scrcons.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 20480 c:\windows\ServicePackFiles\i386\sclgntfy.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 95744 c:\windows\ServicePackFiles\i386\scardsvr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 69632 c:\windows\ServicePackFiles\i386\scarddlg.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 43904 c:\windows\ServicePackFiles\i386\sbp2port.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 13312 c:\windows\ServicePackFiles\i386\savedump.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 64000 c:\windows\ServicePackFiles\i386\samlib.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 45568 c:\windows\ServicePackFiles\i386\safrslv.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 29696 c:\windows\ServicePackFiles\i386\safrdm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 43520 c:\windows\ServicePackFiles\i386\safrcdlg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29696 c:\windows\ServicePackFiles\i386\rw450ext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 27648 c:\windows\ServicePackFiles\i386\rw430ext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29184 c:\windows\ServicePackFiles\i386\rw330ext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 27648 c:\windows\ServicePackFiles\i386\rw001ext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 14336 c:\windows\ServicePackFiles\i386\runonce.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 33280 c:\windows\ServicePackFiles\i386\rundll32.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 44032 c:\windows\ServicePackFiles\i386\rtutils.dll
+ 2010-01-16 18:04 . 2008-04-14 03:05 20992 c:\windows\ServicePackFiles\i386\rtl8139.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 31744 c:\windows\ServicePackFiles\i386\rtipxmib.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 77312 c:\windows\ServicePackFiles\i386\rtcshare.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 92672 c:\windows\ServicePackFiles\i386\rsvpsp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\rsmps.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 39936 c:\windows\ServicePackFiles\i386\rshx32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 14848 c:\windows\ServicePackFiles\i386\rsh.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 61440 c:\windows\ServicePackFiles\i386\rrcm.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 79104 c:\windows\ServicePackFiles\i386\rocket.sys
+ 2010-01-16 18:04 . 2008-04-14 05:26 30592 c:\windows\ServicePackFiles\i386\rndismpx.sys
+ 2010-01-16 18:04 . 2008-04-14 05:26 30592 c:\windows\ServicePackFiles\i386\rndismp.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 11776 c:\windows\ServicePackFiles\i386\riafui2.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 11776 c:\windows\ServicePackFiles\i386\riafui1.dll
+ 2010-01-16 18:03 . 2008-04-14 05:16 59136 c:\windows\ServicePackFiles\i386\rfcomm.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 13824 c:\windows\ServicePackFiles\i386\rexec.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 58880 c:\windows\ServicePackFiles\i386\resutils.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 60416 c:\windows\ServicePackFiles\i386\remotepg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 11776 c:\windows\ServicePackFiles\i386\regsvr32.exe
+ 2007-06-27 23:27 . 2007-06-27 23:27 11264 c:\windows\ServicePackFiles\i386\regsvcs.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 59904 c:\windows\ServicePackFiles\i386\regsvc.dll
+ 2007-06-27 23:27 . 2007-06-27 23:27 32768 c:\windows\ServicePackFiles\i386\regcode.dll
+ 2007-06-27 23:27 . 2007-06-27 23:27 28672 c:\windows\ServicePackFiles\i386\regasm.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 49664 c:\windows\ServicePackFiles\i386\regapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50176 c:\windows\ServicePackFiles\i386\reg.exe
+ 2010-01-16 18:05 . 2008-04-14 05:10 57600 c:\windows\ServicePackFiles\i386\redbook.sys
+ 2010-01-16 18:04 . 2008-04-14 04:53 13776 c:\windows\ServicePackFiles\i386\recagent.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 67072 c:\windows\ServicePackFiles\i386\rdshost.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 13824 c:\windows\ServicePackFiles\i386\rdsaddin.exe
+ 2010-01-16 18:04 . 2008-04-14 10:43 87176 c:\windows\ServicePackFiles\i386\rdpwsx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 19968 c:\windows\ServicePackFiles\i386\rdpsnd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:43 92424 c:\windows\ServicePackFiles\i386\rdpdd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 62976 c:\windows\ServicePackFiles\i386\rdpclip.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 21504 c:\windows\ServicePackFiles\i386\rcp.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 35840 c:\windows\ServicePackFiles\i386\rcimlby.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 58368 c:\windows\ServicePackFiles\i386\rastapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 16384 c:\windows\ServicePackFiles\i386\rassapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 61952 c:\windows\ServicePackFiles\i386\rasqec.dll
+ 2010-01-16 18:04 . 2008-04-14 05:49 48384 c:\windows\ServicePackFiles\i386\raspptp.sys
+ 2010-01-16 18:04 . 2008-04-14 05:27 41472 c:\windows\ServicePackFiles\i386\raspppoe.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 56832 c:\windows\ServicePackFiles\i386\rasphone.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 61440 c:\windows\ServicePackFiles\i386\rasman.dll
+ 2010-01-16 18:04 . 2008-04-14 05:49 51328 c:\windows\ServicePackFiles\i386\rasl2tp.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 79872 c:\windows\ServicePackFiles\i386\raschap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 88576 c:\windows\ServicePackFiles\i386\rasauto.dll
+ 2010-01-16 18:04 . 2008-04-14 05:11 20736 c:\windows\ServicePackFiles\i386\ramdisk.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 43520 c:\windows\ServicePackFiles\i386\racpldlg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 76800 c:\windows\ServicePackFiles\i386\qutil.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 19968 c:\windows\ServicePackFiles\i386\qprocess.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\qmgrprxy.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 62464 c:\windows\ServicePackFiles\i386\qcliprov.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 34304 c:\windows\ServicePackFiles\i386\pstorsvc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 43520 c:\windows\ServicePackFiles\i386\pstorec.dll
+ 2010-01-16 18:03 . 2008-04-14 05:26 69120 c:\windows\ServicePackFiles\i386\psched.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 96768 c:\windows\ServicePackFiles\i386\psbase.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 23040 c:\windows\ServicePackFiles\i386\psapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 50176 c:\windows\ServicePackFiles\i386\proquota.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 27648 c:\windows\ServicePackFiles\i386\profmap.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 35840 c:\windows\ServicePackFiles\i386\processr.sys
+ 2010-01-16 18:05 . 2008-04-14 05:11 17664 c:\windows\ServicePackFiles\i386\ppa3.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 17408 c:\windows\ServicePackFiles\i386\powrprof.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 49152 c:\windows\ServicePackFiles\i386\powercfg.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 92672 c:\windows\ServicePackFiles\i386\policman.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 58880 c:\windows\ServicePackFiles\i386\pnrpnsp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 39424 c:\windows\ServicePackFiles\i386\pngfilt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 52736 c:\windows\ServicePackFiles\i386\plotui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 44544 c:\windows\ServicePackFiles\i386\plotter.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\pjlmon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 17920 c:\windows\ServicePackFiles\i386\ping.exe
+ 2008-04-14 10:41 . 2008-04-14 10:41 24064 c:\windows\ServicePackFiles\i386\pidgen.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 35328 c:\windows\ServicePackFiles\i386\pid.dll
+ 2010-01-16 18:04 . 2008-04-14 05:14 28032 c:\windows\ServicePackFiles\i386\perm3.sys
+ 2010-01-16 18:04 . 2008-04-14 05:14 27904 c:\windows\ServicePackFiles\i386\perm2.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 34816 c:\windows\ServicePackFiles\i386\perfproc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 25088 c:\windows\ServicePackFiles\i386\perfos.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 17920 c:\windows\ServicePackFiles\i386\perfnet.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 15872 c:\windows\ServicePackFiles\i386\perfmon.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 26624 c:\windows\ServicePackFiles\i386\perfdisk.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 39936 c:\windows\ServicePackFiles\i386\perfctrs.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 20480 c:\windows\ServicePackFiles\i386\perfcounter.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 24960 c:\windows\ServicePackFiles\i386\pciidex.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 68224 c:\windows\ServicePackFiles\i386\pci.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 38400 c:\windows\ServicePackFiles\i386\pchsvc.dll
+ 2010-01-16 18:05 . 2008-04-14 03:05 29502 c:\windows\ServicePackFiles\i386\pca200e.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 67584 c:\windows\ServicePackFiles\i386\pautoenr.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 19712 c:\windows\ServicePackFiles\i386\partmgr.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 80128 c:\windows\ServicePackFiles\i386\parport.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 58368 c:\windows\ServicePackFiles\i386\packager.exe
+ 2010-01-16 18:04 . 2008-04-14 05:01 42752 c:\windows\ServicePackFiles\i386\p3.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 67584 c:\windows\ServicePackFiles\i386\osuninst.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 67584 c:\windows\ServicePackFiles\i386\opnfiles.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 51200 c:\windows\ServicePackFiles\i386\oobebaln.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 84992 c:\windows\ServicePackFiles\i386\olepro32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 65536 c:\windows\ServicePackFiles\i386\oledb32r.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 37376 c:\windows\ServicePackFiles\i386\olecnv32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 74752 c:\windows\ServicePackFiles\i386\olecli32.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 61696 c:\windows\ServicePackFiles\i386\ohci1394.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 35328 c:\windows\ServicePackFiles\i386\oemiglib.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 60416 c:\windows\ServicePackFiles\i386\oemig50.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 20511 c:\windows\ServicePackFiles\i386\odtext32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 20510 c:\windows\ServicePackFiles\i386\odpdx32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 20510 c:\windows\ServicePackFiles\i386\odfox32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 20510 c:\windows\ServicePackFiles\i386\odexl32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 20511 c:\windows\ServicePackFiles\i386\oddbse32.dll
+ 2010-01-16 18:04 . 2008-04-14 03:56 12288 c:\windows\ServicePackFiles\i386\odbcp32r.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 53279 c:\windows\ServicePackFiles\i386\odbcji32.dll
+ 2010-01-16 18:04 . 2008-04-14 03:56 94208 c:\windows\ServicePackFiles\i386\odbcint.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 65536 c:\windows\ServicePackFiles\i386\odbccu32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 65536 c:\windows\ServicePackFiles\i386\odbccr32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 69632 c:\windows\ServicePackFiles\i386\odbcconf.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 24576 c:\windows\ServicePackFiles\i386\odbcbcp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 32768 c:\windows\ServicePackFiles\i386\odbcad32.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 16384 c:\windows\ServicePackFiles\i386\odbc32gt.dll
+ 2010-01-16 18:05 . 2007-04-03 00:35 26224 c:\windows\ServicePackFiles\i386\odbc16gt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 17408 c:\windows\ServicePackFiles\i386\ocmsn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 67584 c:\windows\ServicePackFiles\i386\ocmanage.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\ocgen.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 96256 c:\windows\ServicePackFiles\i386\occache.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 86016 c:\windows\ServicePackFiles\i386\obepopc.dll
+ 2010-01-16 18:04 . 2007-04-03 05:14 77824 c:\windows\ServicePackFiles\i386\obemtllc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 65536 c:\windows\ServicePackFiles\i386\nwwks.dll
+ 2010-01-16 18:04 . 2008-04-14 05:26 88320 c:\windows\ServicePackFiles\i386\nwlnkipx.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 64000 c:\windows\ServicePackFiles\i386\nwapi32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\ntvdmd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 91136 c:\windows\ServicePackFiles\i386\ntprint.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 62976 c:\windows\ServicePackFiles\i386\ntoc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 40960 c:\windows\ServicePackFiles\i386\ntmsapi.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 44032 c:\windows\ServicePackFiles\i386\ntlanman.dll
+ 2010-01-16 18:05 . 2008-04-14 03:19 34560 c:\windows\ServicePackFiles\i386\ntio804.sys
+ 2010-01-16 18:04 . 2008-04-14 03:19 35424 c:\windows\ServicePackFiles\i386\ntio412.sys
+ 2010-01-16 18:04 . 2008-04-14 03:19 35648 c:\windows\ServicePackFiles\i386\ntio411.sys
+ 2010-01-16 18:04 . 2008-04-14 03:19 34560 c:\windows\ServicePackFiles\i386\ntio404.sys
+ 2010-01-16 18:04 . 2008-04-14 03:19 33840 c:\windows\ServicePackFiles\i386\ntio.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 67072 c:\windows\ServicePackFiles\i386\ntdsapi.dll
+ 2008-04-14 03:13 . 2008-04-14 03:13 47564 c:\windows\ServicePackFiles\i386\ntdetect.com
+ 2010-01-16 18:04 . 2008-04-14 10:42 76800 c:\windows\ServicePackFiles\i386\nslookup.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 44544 c:\windows\ServicePackFiles\i386\nsepm.dll
+ 2010-01-16 18:04 . 2008-04-14 05:24 28672 c:\windows\ServicePackFiles\i386\nscirda.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 54784 c:\windows\ServicePackFiles\i386\npptools.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\nppagent.exe
+ 2010-01-16 18:05 . 2008-04-14 05:02 30848 c:\windows\ServicePackFiles\i386\npfs.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 69120 c:\windows\ServicePackFiles\i386\notepad.exe
+ 2010-01-16 18:04 . 2008-04-14 05:23 40320 c:\windows\ServicePackFiles\i386\nmnt.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 28672 c:\windows\ServicePackFiles\i386\nmmkcert.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 77824 c:\windows\ServicePackFiles\i386\nmcom.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 81920 c:\windows\ServicePackFiles\i386\nmchat.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 28672 c:\windows\ServicePackFiles\i386\nmasnt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 98304 c:\windows\ServicePackFiles\i386\nlhtml.dll
+ 2010-01-16 18:04 . 2008-04-14 05:21 61824 c:\windows\ServicePackFiles\i386\nic1394.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 80896 c:\windows\ServicePackFiles\i386\netui0.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 36864 c:\windows\ServicePackFiles\i386\netstat.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 86016 c:\windows\ServicePackFiles\i386\netsh.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 11776 c:\windows\ServicePackFiles\i386\netrap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 77312 c:\windows\ServicePackFiles\i386\netoc.dll
+ 2007-12-17 22:29 . 2007-12-17 22:29 82976 c:\windows\ServicePackFiles\i386\netfxupdate.exe
+ 2010-01-16 18:04 . 2008-04-14 05:26 34688 c:\windows\ServicePackFiles\i386\netbios.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 42496 c:\windows\ServicePackFiles\i386\net.exe
+ 2010-01-16 18:04 . 2008-04-14 05:27 40576 c:\windows\ServicePackFiles\i386\ndproxy.sys
+ 2010-01-16 18:04 . 2008-04-14 05:50 91520 c:\windows\ServicePackFiles\i386\ndiswan.sys
+ 2010-01-16 18:04 . 2008-04-14 05:26 14592 c:\windows\ServicePackFiles\i386\ndisuio.sys
+ 2010-01-16 18:04 . 2008-04-14 05:27 10112 c:\windows\ServicePackFiles\i386\ndistapi.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 57344 c:\windows\ServicePackFiles\i386\ndisnpp.dll
+ 2010-01-16 18:05 . 2008-04-14 05:16 10880 c:\windows\ServicePackFiles\i386\ndisip.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 18944 c:\windows\ServicePackFiles\i386\nddenb32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 17920 c:\windows\ServicePackFiles\i386\nddeapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 47104 c:\windows\ServicePackFiles\i386\ncprov.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 36352 c:\windows\ServicePackFiles\i386\ncobjapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 53760 c:\windows\ServicePackFiles\i386\narrator.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 30208 c:\windows\ServicePackFiles\i386\napipsec.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 85248 c:\windows\ServicePackFiles\i386\nabtsfec.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 90624 c:\windows\ServicePackFiles\i386\mydocs.dll
+ 2010-01-16 18:04 . 2008-04-14 05:13 12672 c:\windows\ServicePackFiles\i386\mutohpen.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 90624 c:\windows\ServicePackFiles\i386\muisetup.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 91648 c:\windows\ServicePackFiles\i386\mtxoci.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 34304 c:\windows\ServicePackFiles\i386\mtxlegih.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 30720 c:\windows\ServicePackFiles\i386\mtxdm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 66560 c:\windows\ServicePackFiles\i386\mtxclu.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 16896 c:\windows\ServicePackFiles\i386\msyuv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 24576 c:\windows\ServicePackFiles\i386\msxactps.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 72704 c:\windows\ServicePackFiles\i386\msw3prt.dll
+ 2010-01-16 18:04 . 2008-04-14 05:00 61440 c:\windows\ServicePackFiles\i386\msvcrt40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 57344 c:\windows\ServicePackFiles\i386\msvcirt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 12288 c:\windows\ServicePackFiles\i386\mstinit.exe
+ 2010-01-16 18:04 . 2008-04-14 05:16 49024 c:\windows\ServicePackFiles\i386\mstape.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 57344 c:\windows\ServicePackFiles\i386\mst123.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 15488 c:\windows\ServicePackFiles\i386\mssmbios.sys
+ 2010-01-16 18:04 . 2008-04-14 04:45 76800 c:\windows\ServicePackFiles\i386\msshamsg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 11264 c:\windows\ServicePackFiles\i386\msrle32.dll
+ 2010-01-16 18:04 . 2008-04-14 02:53 48128 c:\windows\ServicePackFiles\i386\msprivs.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29696 c:\windows\ServicePackFiles\i386\mspatcha.dll
+ 2010-01-16 18:04 . 2008-04-14 03:54 20480 c:\windows\ServicePackFiles\i386\msorc32r.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29184 c:\windows\ServicePackFiles\i386\msoobe.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 19456 c:\windows\ServicePackFiles\i386\msobweb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 30720 c:\windows\ServicePackFiles\i386\msobshel.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 16384 c:\windows\ServicePackFiles\i386\msobdl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 39936 c:\windows\ServicePackFiles\i386\mslwvtts.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 25088 c:\windows\ServicePackFiles\i386\mslbui.dll
+ 2010-01-16 18:04 . 2007-04-02 23:19 60192 c:\windows\ServicePackFiles\i386\msjter40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\msisip.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 40960 c:\windows\ServicePackFiles\i386\msiregmv.exe
+ 2010-01-16 18:05 . 2008-04-14 05:24 22016 c:\windows\ServicePackFiles\i386\msircomm.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 60416 c:\windows\ServicePackFiles\i386\msimn.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 78848 c:\windows\ServicePackFiles\i386\msiexec.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 51712 c:\windows\ServicePackFiles\i386\msident.dll
+ 2010-01-16 18:04 . 2008-04-14 02:56 56832 c:\windows\ServicePackFiles\i386\mshtmler.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29184 c:\windows\ServicePackFiles\i386\mshta.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 33792 c:\windows\ServicePackFiles\i386\msgsvc.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 82944 c:\windows\ServicePackFiles\i386\msgsc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\msgrocm.dll
+ 2010-01-16 18:04 . 2008-04-14 05:26 35072 c:\windows\ServicePackFiles\i386\msgpc.sys
+ 2010-01-16 18:04 . 2008-04-14 05:02 19072 c:\windows\ServicePackFiles\i386\msfs.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 51200 c:\windows\ServicePackFiles\i386\msdv.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 90112 c:\windows\ServicePackFiles\i386\msdtcstp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 58880 c:\windows\ServicePackFiles\i386\msdtclog.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 14336 c:\windows\ServicePackFiles\i386\msdmo.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 36864 c:\windows\ServicePackFiles\i386\msdfmap.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 20480 c:\windows\ServicePackFiles\i386\msdatt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 94208 c:\windows\ServicePackFiles\i386\msdatl3.dll
+ 2010-01-16 18:05 . 2008-04-14 03:56 16384 c:\windows\ServicePackFiles\i386\msdasqlr.dll
+ 2010-01-16 18:04 . 2008-04-14 03:56 16384 c:\windows\ServicePackFiles\i386\msdaremr.dll
+ 2010-01-16 18:04 . 2008-04-14 03:56 16384 c:\windows\ServicePackFiles\i386\msdaprsr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 77824 c:\windows\ServicePackFiles\i386\msdaosp.dll
+ 2010-01-16 18:04 . 2008-04-14 03:54 16384 c:\windows\ServicePackFiles\i386\msdaorar.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 68608 c:\windows\ServicePackFiles\i386\msctfp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 36864 c:\windows\ServicePackFiles\i386\mscpxl32.dll
+ 2010-01-16 18:04 . 2008-04-14 03:56 12288 c:\windows\ServicePackFiles\i386\mscpx32r.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 69632 c:\windows\ServicePackFiles\i386\mscorsn.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 46592 c:\windows\ServicePackFiles\i386\mscorsec.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 94208 c:\windows\ServicePackFiles\i386\mscorpe.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 86016 c:\windows\ServicePackFiles\i386\mscorld.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 73728 c:\windows\ServicePackFiles\i386\mscorie.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 69632 c:\windows\ServicePackFiles\i386\mscordbc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 69632 c:\windows\ServicePackFiles\i386\msconf.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 73728 c:\windows\ServicePackFiles\i386\mscms.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 57344 c:\windows\ServicePackFiles\i386\msasn1.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 86016 c:\windows\ServicePackFiles\i386\msapsspc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 57344 c:\windows\ServicePackFiles\i386\msadrh15.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 57344 c:\windows\ServicePackFiles\i386\msador15.dll
+ 2010-01-16 18:04 . 2008-04-14 03:56 24576 c:\windows\ServicePackFiles\i386\msader15.dll
+ 2010-01-16 18:04 . 2008-04-14 03:56 24576 c:\windows\ServicePackFiles\i386\msaddsr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 53248 c:\windows\ServicePackFiles\i386\msadcs.dll
+ 2010-01-16 18:04 . 2008-04-14 03:55 16384 c:\windows\ServicePackFiles\i386\msadcor.dll
+ 2010-01-16 18:05 . 2008-04-14 03:55 16384 c:\windows\ServicePackFiles\i386\msadcfr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 61440 c:\windows\ServicePackFiles\i386\msadcf.dll
+ 2010-01-16 18:04 . 2008-04-14 03:55 20480 c:\windows\ServicePackFiles\i386\msadcer.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 71680 c:\windows\ServicePackFiles\i386\msacm32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 49152 c:\windows\ServicePackFiles\i386\mqupgrd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 95744 c:\windows\ServicePackFiles\i386\mqsec.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 89088 c:\windows\ServicePackFiles\i386\mqlogmgr.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 16896 c:\windows\ServicePackFiles\i386\mqise.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 47616 c:\windows\ServicePackFiles\i386\mqdscli.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 19968 c:\windows\ServicePackFiles\i386\mqbkup.exe
+ 2010-01-16 18:05 . 2008-04-14 05:09 92544 c:\windows\ServicePackFiles\i386\mqac.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 53248 c:\windows\ServicePackFiles\i386\mprdim.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 87040 c:\windows\ServicePackFiles\i386\mprapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 59904 c:\windows\ServicePackFiles\i386\mpr.dll
+ 2010-01-16 18:05 . 2008-04-14 05:16 15232 c:\windows\ServicePackFiles\i386\mpe.sys
+ 2010-01-16 18:04 . 2008-04-14 05:09 42368 c:\windows\ServicePackFiles\i386\mountmgr.sys
+ 2010-01-16 18:04 . 2008-04-14 05:09 23040 c:\windows\ServicePackFiles\i386\mouclass.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 16896 c:\windows\ServicePackFiles\i386\more.com
+ 2010-01-16 18:04 . 2008-04-14 10:42 16384 c:\windows\ServicePackFiles\i386\mofcomp.exe
+ 2010-01-16 18:04 . 2008-04-14 05:30 30080 c:\windows\ServicePackFiles\i386\modem.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 32768 c:\windows\ServicePackFiles\i386\mnmsrvc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 34560 c:\windows\ServicePackFiles\i386\mnmdd.dll
+ 2010-01-16 18:04 . 2008-04-14 03:24 68768 c:\windows\ServicePackFiles\i386\mmsystem.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 17408 c:\windows\ServicePackFiles\i386\mmfutil.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 61440 c:\windows\ServicePackFiles\i386\mmcshext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 33792 c:\windows\ServicePackFiles\i386\mmcperf.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 40960 c:\windows\ServicePackFiles\i386\mmcexr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 28672 c:\windows\ServicePackFiles\i386\mmc30r.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 29696 c:\windows\ServicePackFiles\i386\mimefilt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 60928 c:\windows\ServicePackFiles\i386\miglibnt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 18944 c:\windows\ServicePackFiles\i386\midimap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 14848 c:\windows\ServicePackFiles\i386\mgmtapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 22528 c:\windows\ServicePackFiles\i386\mfcsubs.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 40960 c:\windows\ServicePackFiles\i386\mf3216.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 63744 c:\windows\ServicePackFiles\i386\mf.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 85504 c:\windows\ServicePackFiles\i386\metada51.dll
+ 2010-01-16 18:04 . 2008-04-14 05:11 26112 c:\windows\ServicePackFiles\i386\memstpci.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 16896 c:\windows\ServicePackFiles\i386\medctroc.dll
+ 2010-01-16 18:04 . 2008-04-14 04:53 11868 c:\windows\ServicePackFiles\i386\mdmxsdk.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 86016 c:\windows\ServicePackFiles\i386\mdmxsdk.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 37888 c:\windows\ServicePackFiles\i386\md5filt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 23552 c:\windows\ServicePackFiles\i386\mciwave.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 23040 c:\windows\ServicePackFiles\i386\mciseq.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 35328 c:\windows\ServicePackFiles\i386\mciqtz32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 84480 c:\windows\ServicePackFiles\i386\mciavi32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 14336 c:\windows\ServicePackFiles\i386\mcastmib.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 57344 c:\windows\ServicePackFiles\i386\makecab.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 72704 c:\windows\ServicePackFiles\i386\magnify.exe
+ 2010-01-16 18:04 . 2008-04-14 03:09 20864 c:\windows\ServicePackFiles\i386\lwadihid.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 13312 c:\windows\ServicePackFiles\i386\lsass.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 18944 c:\windows\ServicePackFiles\i386\lprmon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 10240 c:\windows\ServicePackFiles\i386\lprhelp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 22016 c:\windows\ServicePackFiles\i386\lpk.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 22528 c:\windows\ServicePackFiles\i386\lpdsvc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 13312 c:\windows\ServicePackFiles\i386\lonsint.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 59392 c:\windows\ServicePackFiles\i386\logman.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 19968 c:\windows\ServicePackFiles\i386\log.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 75264 c:\windows\ServicePackFiles\i386\locator.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 11776 c:\windows\ServicePackFiles\i386\localui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 97280 c:\windows\ServicePackFiles\i386\loadperf.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 33792 c:\windows\ServicePackFiles\i386\lmmib2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 13824 c:\windows\ServicePackFiles\i386\lmhsvc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 19968 c:\windows\ServicePackFiles\i386\linkinfo.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 58880 c:\windows\ServicePackFiles\i386\licwmi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 22016 c:\windows\ServicePackFiles\i386\licmgr10.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 34688 c:\windows\ServicePackFiles\i386\lbrtfdc.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 86073 c:\windows\ServicePackFiles\i386\lang\voicesub.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 76288 c:\windows\ServicePackFiles\i386\lang\uniime.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 10240 c:\windows\ServicePackFiles\i386\lang\tmigrate.dll
+ 2010-01-16 18:05 . 2008-04-14 03:13 44032 c:\windows\ServicePackFiles\i386\lang\tintlphr.exe
+ 2010-01-16 18:05 . 2008-04-14 10:40 67584 c:\windows\ServicePackFiles\i386\lang\pmigrate.dll
+ 2010-01-16 18:05 . 2008-04-14 03:13 70144 c:\windows\ServicePackFiles\i386\lang\pintlphr.exe
+ 2010-01-16 18:05 . 2008-04-14 10:40 53760 c:\windows\ServicePackFiles\i386\lang\pintlcsd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:40 15360 c:\windows\ServicePackFiles\i386\lang\padrs804.dll
+ 2010-01-16 18:05 . 2008-04-14 10:40 15872 c:\windows\ServicePackFiles\i386\lang\padrs404.dll
+ 2010-01-16 18:05 . 2008-04-14 03:13 59392 c:\windows\ServicePackFiles\i386\lang\imscinst.exe
+ 2010-01-16 18:05 . 2008-04-14 10:39 81976 c:\windows\ServicePackFiles\i386\lang\imjpdct.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 86016 c:\windows\ServicePackFiles\i386\lang\imekrmbx.dll
+ 2010-01-16 18:05 . 2008-04-14 03:13 57399 c:\windows\ServicePackFiles\i386\lang\cplexe.exe
+ 2010-01-16 18:05 . 2008-04-14 10:39 56320 c:\windows\ServicePackFiles\i386\lang\chtskdic.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 97792 c:\windows\ServicePackFiles\i386\lang\chtmbx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 37376 c:\windows\ServicePackFiles\i386\l2store.dll
+ 2008-04-14 05:01 . 2008-04-14 05:01 92288 c:\windows\ServicePackFiles\i386\ksecdd.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 24576 c:\windows\ServicePackFiles\i386\krnlprov.dll
+ 2010-01-16 18:05 . 2008-04-14 03:23 92224 c:\windows\ServicePackFiles\i386\krnl386.exe
+ 2008-04-14 10:39 . 2008-04-14 10:39 24576 c:\windows\ServicePackFiles\i386\kpropid.dll
+ 2008-04-14 10:39 . 2008-04-14 10:39 24064 c:\windows\ServicePackFiles\i386\kperpid.dll
+ 2008-04-14 10:39 . 2008-04-14 10:39 24576 c:\windows\ServicePackFiles\i386\knpropid.dll
+ 2008-04-14 10:39 . 2008-04-14 10:39 24064 c:\windows\ServicePackFiles\i386\knperpid.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 61440 c:\windows\ServicePackFiles\i386\kmsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 03:20 42537 c:\windows\ServicePackFiles\i386\keyboard.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 48640 c:\windows\ServicePackFiles\i386\kdsui.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 14592 c:\windows\ServicePackFiles\i386\kbdhid.sys
+ 2010-01-16 18:04 . 2008-04-14 05:09 24576 c:\windows\ServicePackFiles\i386\kbdclass.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 15872 c:\windows\ServicePackFiles\i386\jsproxy.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 40960 c:\windows\ServicePackFiles\i386\jsc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 27648 c:\windows\ServicePackFiles\i386\jgpl400.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 47616 c:\windows\ServicePackFiles\i386\iyuv_32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 54272 c:\windows\ServicePackFiles\i386\ixsso.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 32768 c:\windows\ServicePackFiles\i386\isrdbg32.dll
+ 2008-04-14 10:40 . 2008-04-14 10:40 24064 c:\windows\ServicePackFiles\i386\ispid.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 81920 c:\windows\ServicePackFiles\i386\isign32.dll
+ 2008-04-14 10:40 . 2008-04-14 10:40 24064 c:\windows\ServicePackFiles\i386\isenpid.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 26624 c:\windows\ServicePackFiles\i386\iscomlog.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 68608 c:\windows\ServicePackFiles\i386\isatq.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 37248 c:\windows\ServicePackFiles\i386\isapnp.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 28160 c:\windows\ServicePackFiles\i386\irmon.dll
+ 2010-01-16 18:04 . 2008-04-14 05:24 11264 c:\windows\ServicePackFiles\i386\irenum.sys
+ 2010-01-16 18:04 . 2008-04-14 05:24 88192 c:\windows\ServicePackFiles\i386\irda.sys
+ 2010-01-16 18:05 . 2008-04-14 05:15 46592 c:\windows\ServicePackFiles\i386\irbus.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 22016 c:\windows\ServicePackFiles\i386\ipxwan.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 23552 c:\windows\ServicePackFiles\i386\ipxroute.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 59904 c:\windows\ServicePackFiles\i386\ipv6mon.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 53248 c:\windows\ServicePackFiles\i386\ipv6.exe
+ 2008-04-14 10:39 . 2008-04-14 10:39 24064 c:\windows\ServicePackFiles\i386\ipselpid.dll
+ 2010-01-16 18:04 . 2008-04-14 05:49 75264 c:\windows\ServicePackFiles\i386\ipsec.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 35328 c:\windows\ServicePackFiles\i386\iprip.dll
+ 2010-01-16 18:04 . 2008-04-14 05:27 20864 c:\windows\ServicePackFiles\i386\ipinip.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 94720 c:\windows\ServicePackFiles\i386\iphlpapi.dll
+ 2008-04-14 10:39 . 2008-04-14 10:39 24064 c:\windows\ServicePackFiles\i386\ipevlpid.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 55808 c:\windows\ServicePackFiles\i386\ipconfig.exe
+ 2010-01-16 18:04 . 2008-04-14 05:23 36608 c:\windows\ServicePackFiles\i386\ip6fw.sys
+ 2010-01-16 18:04 . 2008-04-14 05:01 36352 c:\windows\ServicePackFiles\i386\intelppm.sys
+ 2007-06-27 23:24 . 2007-06-27 23:24 24576 c:\windows\ServicePackFiles\i386\installutil.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 96256 c:\windows\ServicePackFiles\i386\inseng.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 13312 c:\windows\ServicePackFiles\i386\infoadmn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 20480 c:\windows\ServicePackFiles\i386\inetwiz.exe
+ 2010-01-16 18:04 . 2008-04-14 02:52 48128 c:\windows\ServicePackFiles\i386\inetres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 15872 c:\windows\ServicePackFiles\i386\inetppui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 75264 c:\windows\ServicePackFiles\i386\inetpp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 32768 c:\windows\ServicePackFiles\i386\inetmib1.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\inetin51.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 35840 c:\windows\ServicePackFiles\i386\imgutil.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 36921 c:\windows\ServicePackFiles\i386\imeshare.dll
+ 2010-01-16 18:04 . 2008-04-14 05:11 42112 c:\windows\ServicePackFiles\i386\imapi.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 81920 c:\windows\ServicePackFiles\i386\ils.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 30720 c:\windows\ServicePackFiles\i386\iisrstas.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 64512 c:\windows\ServicePackFiles\i386\iismap.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 79872 c:\windows\ServicePackFiles\i386\iislog51.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 68608 c:\windows\ServicePackFiles\i386\iisext51.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 25088 c:\windows\ServicePackFiles\i386\iisadmin.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 93184 c:\windows\ServicePackFiles\i386\iexplore.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 62976 c:\windows\ServicePackFiles\i386\iesetup.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 48640 c:\windows\ServicePackFiles\i386\iernonce.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 32768 c:\windows\ServicePackFiles\i386\iehost.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 81920 c:\windows\ServicePackFiles\i386\ieencode.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 18432 c:\windows\ServicePackFiles\i386\iedw.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 34304 c:\windows\ServicePackFiles\i386\ie4uinit.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 49152 c:\windows\ServicePackFiles\i386\icwutil.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 24576 c:\windows\ServicePackFiles\i386\icwrmind.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 65536 c:\windows\ServicePackFiles\i386\icwphbk.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 32768 c:\windows\ServicePackFiles\i386\icwdl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 73728 c:\windows\ServicePackFiles\i386\icwdial.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 86016 c:\windows\ServicePackFiles\i386\icwconn2.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 61440 c:\windows\ServicePackFiles\i386\icwconn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 80384 c:\windows\ServicePackFiles\i386\iccvid.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 11264 c:\windows\ServicePackFiles\i386\icaapi.dll
+ 2010-01-16 18:04 . 2008-04-14 05:48 52480 c:\windows\ServicePackFiles\i386\i8042prt.sys
+ 2010-01-16 18:04 . 2008-04-14 05:11 18560 c:\windows\ServicePackFiles\i386\i2omp.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 41984 c:\windows\ServicePackFiles\i386\htui.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 61440 c:\windows\ServicePackFiles\i386\httpod51.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 24576 c:\windows\ServicePackFiles\i386\httpapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 32285 c:\windows\ServicePackFiles\i386\hsfcisp2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 18432 c:\windows\ServicePackFiles\i386\hscupd.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 87552 c:\windows\ServicePackFiles\i386\hpfud50.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 10240 c:\windows\ServicePackFiles\i386\hpcjrrps.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 10752 c:\windows\ServicePackFiles\i386\hpcjrr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 39936 c:\windows\ServicePackFiles\i386\hostmib.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 38912 c:\windows\ServicePackFiles\i386\hmmapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 72704 c:\windows\ServicePackFiles\i386\hlink.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 10368 c:\windows\ServicePackFiles\i386\hidusb.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 21504 c:\windows\ServicePackFiles\i386\hidserv.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 24960 c:\windows\ServicePackFiles\i386\hidparse.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 19200 c:\windows\ServicePackFiles\i386\hidir.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 36864 c:\windows\ServicePackFiles\i386\hidclass.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 25600 c:\windows\ServicePackFiles\i386\hidbth.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 20352 c:\windows\ServicePackFiles\i386\hidbatt.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 20992 c:\windows\ServicePackFiles\i386\hid.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 41472 c:\windows\ServicePackFiles\i386\hhsetup.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 10752 c:\windows\ServicePackFiles\i386\hh.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 15872 c:\windows\ServicePackFiles\i386\help.exe
+ 2010-01-16 18:04 . 2008-04-14 05:01 77696 c:\windows\ServicePackFiles\i386\halsp.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 81152 c:\windows\ServicePackFiles\i386\halacpi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 57344 c:\windows\ServicePackFiles\i386\h323cc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 32256 c:\windows\ServicePackFiles\i386\gzip.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 28288 c:\windows\ServicePackFiles\i386\grserial.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 39424 c:\windows\ServicePackFiles\i386\grpconv.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 59904 c:\windows\ServicePackFiles\i386\getmac.exe
+ 2010-01-16 18:05 . 2008-04-14 05:15 59136 c:\windows\ServicePackFiles\i386\gckernel.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 10624 c:\windows\ServicePackFiles\i386\gameenum.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 46464 c:\windows\ServicePackFiles\i386\gagp30kx.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 23552 c:\windows\ServicePackFiles\i386\fxsmon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 23552 c:\windows\ServicePackFiles\i386\fxsext32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 55296 c:\windows\ServicePackFiles\i386\fxsevent.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 26624 c:\windows\ServicePackFiles\i386\fxsdrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 72192 c:\windows\ServicePackFiles\i386\fxscom.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 60416 c:\windows\ServicePackFiles\i386\fwcfg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 42496 c:\windows\ServicePackFiles\i386\ftp.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 28728 c:\windows\ServicePackFiles\i386\fpsrvadm.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 20538 c:\windows\ServicePackFiles\i386\fpremadm.exe
+ 2008-04-14 10:41 . 2008-04-14 10:41 20541 c:\windows\ServicePackFiles\i386\fpexedll.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 94208 c:\windows\ServicePackFiles\i386\fpencode.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 20541 c:\windows\ServicePackFiles\i386\fpadmdll.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 24632 c:\windows\ServicePackFiles\i386\fpadmcgi.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 15120 c:\windows\ServicePackFiles\i386\fp98sadm.exe
+ 2008-04-14 10:41 . 2008-04-14 10:41 49212 c:\windows\ServicePackFiles\i386\fp4awebs.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 32826 c:\windows\ServicePackFiles\i386\fp4avss.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 41020 c:\windows\ServicePackFiles\i386\fp4avnb.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 49210 c:\windows\ServicePackFiles\i386\fp4areg.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 82035 c:\windows\ServicePackFiles\i386\fp4anscp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 32828 c:\windows\ServicePackFiles\i386\fp40ext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29696 c:\windows\ServicePackFiles\i386\format.com
+ 2010-01-16 18:04 . 2008-04-14 03:05 34173 c:\windows\ServicePackFiles\i386\forehe.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 20992 c:\windows\ServicePackFiles\i386\fontview.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 80896 c:\windows\ServicePackFiles\i386\fontsub.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 23040 c:\windows\ServicePackFiles\i386\fltmc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 16896 c:\windows\ServicePackFiles\i386\fltlib.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 20480 c:\windows\ServicePackFiles\i386\flpydisk.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 87552 c:\windows\ServicePackFiles\i386\fldrclnr.dll
+ 2010-01-16 18:04 . 2008-04-14 05:03 44544 c:\windows\ServicePackFiles\i386\fips.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 27136 c:\windows\ServicePackFiles\i386\findstr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 21504 c:\windows\ServicePackFiles\i386\feclient.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 73728 c:\windows\ServicePackFiles\i386\fdeploy.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 27392 c:\windows\ServicePackFiles\i386\fdc.sys
+ 2008-04-14 10:42 . 2008-04-14 10:42 20992 c:\windows\ServicePackFiles\i386\faxpatch.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 80384 c:\windows\ServicePackFiles\i386\faultrep.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 24064 c:\windows\ServicePackFiles\i386\extrac32.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 55808 c:\windows\ServicePackFiles\i386\extmgr.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 14336 c:\windows\ServicePackFiles\i386\exstrace.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 82944 c:\windows\ServicePackFiles\i386\evtrig.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 45056 c:\windows\ServicePackFiles\i386\evtgprov.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 92160 c:\windows\ServicePackFiles\i386\evntwin.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 21504 c:\windows\ServicePackFiles\i386\evntrprv.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 24064 c:\windows\ServicePackFiles\i386\evntcmd.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 56320 c:\windows\ServicePackFiles\i386\eventlog.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 50688 c:\windows\ServicePackFiles\i386\evcreate.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 23040 c:\windows\ServicePackFiles\i386\ersvc.dll
+ 2010-01-16 18:05 . 2008-04-14 02:56 40960 c:\windows\ServicePackFiles\i386\ep9res.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 20480 c:\windows\ServicePackFiles\i386\encapi.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 26624 c:\windows\ServicePackFiles\i386\efsadu.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 33792 c:\windows\ServicePackFiles\i386\eapsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 59392 c:\windows\ServicePackFiles\i386\eapqec.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 40960 c:\windows\ServicePackFiles\i386\eappprxy.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 94208 c:\windows\ServicePackFiles\i386\eappgnui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 30720 c:\windows\ServicePackFiles\i386\eapolqec.dll
+ 2010-01-16 18:04 . 2008-04-14 05:08 71168 c:\windows\ServicePackFiles\i386\dxg.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 17920 c:\windows\ServicePackFiles\i386\dvdupgrd.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 10752 c:\windows\ServicePackFiles\i386\dumprep.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 19456 c:\windows\ServicePackFiles\i386\dswave.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 51200 c:\windows\ServicePackFiles\i386\dssec.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 92672 c:\windows\ServicePackFiles\i386\dskquota.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 71680 c:\windows\ServicePackFiles\i386\dsdmoprp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 16384 c:\windows\ServicePackFiles\i386\ds32gt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 62976 c:\windows\ServicePackFiles\i386\drvqry.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 14336 c:\windows\ServicePackFiles\i386\drprov.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 60160 c:\windows\ServicePackFiles\i386\drmk.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 57344 c:\windows\ServicePackFiles\i386\dpwsockx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 83456 c:\windows\ServicePackFiles\i386\dpvsetup.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 21504 c:\windows\ServicePackFiles\i386\dpvacm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 17920 c:\windows\ServicePackFiles\i386\dpnsvr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 60928 c:\windows\ServicePackFiles\i386\dpnhupnp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 35328 c:\windows\ServicePackFiles\i386\dpnhpast.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 23552 c:\windows\ServicePackFiles\i386\dpmodemx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 29696 c:\windows\ServicePackFiles\i386\dplaysvr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 56320 c:\windows\ServicePackFiles\i386\dot3msm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 39936 c:\windows\ServicePackFiles\i386\dot3clnt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 57856 c:\windows\ServicePackFiles\i386\dot3cfg.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 26112 c:\windows\ServicePackFiles\i386\dot3api.dll
+ 2010-01-16 18:04 . 2008-04-14 03:24 53840 c:\windows\ServicePackFiles\i386\dosx.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 48128 c:\windows\ServicePackFiles\i386\docprop2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 45568 c:\windows\ServicePackFiles\i386\dnsrslvr.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 52224 c:\windows\ServicePackFiles\i386\dmutil.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 52864 c:\windows\ServicePackFiles\i386\dmusic.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 23552 c:\windows\ServicePackFiles\i386\dmserver.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 82432 c:\windows\ServicePackFiles\i386\dmscript.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 15872 c:\windows\ServicePackFiles\i386\dmremote.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 35840 c:\windows\ServicePackFiles\i386\dmloader.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 61440 c:\windows\ServicePackFiles\i386\dmcompos.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 28672 c:\windows\ServicePackFiles\i386\dmband.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 32768 c:\windows\ServicePackFiles\i386\dispex.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 14208 c:\windows\ServicePackFiles\i386\diskdump.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 36352 c:\windows\ServicePackFiles\i386\disk.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 86528 c:\windows\ServicePackFiles\i386\directdb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 39936 c:\windows\ServicePackFiles\i386\dimsroam.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 19456 c:\windows\ServicePackFiles\i386\dimsntfy.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 68608 c:\windows\ServicePackFiles\i386\digest.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 87040 c:\windows\ServicePackFiles\i386\diantz.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 48640 c:\windows\ServicePackFiles\i386\dhcpqec.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 28672 c:\windows\ServicePackFiles\i386\dfsshlex.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 39424 c:\windows\ServicePackFiles\i386\dfrgsnap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 82944 c:\windows\ServicePackFiles\i386\dfrgfat.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 59904 c:\windows\ServicePackFiles\i386\devenum.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 25088 c:\windows\ServicePackFiles\i386\defrag.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 27136 c:\windows\ServicePackFiles\i386\ddrawex.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 30208 c:\windows\ServicePackFiles\i386\ddeshare.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 40960 c:\windows\ServicePackFiles\i386\dcap32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 28672 c:\windows\ServicePackFiles\i386\dbnmpntw.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 24576 c:\windows\ServicePackFiles\i386\dbmsrpcn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 25088 c:\windows\ServicePackFiles\i386\davclnt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 42496 c:\windows\ServicePackFiles\i386\davcdata.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 54272 c:\windows\ServicePackFiles\i386\dataclen.dll
+ 2010-01-16 18:05 . 2008-04-14 03:06 48640 c:\windows\ServicePackFiles\i386\cwrwdm.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 33792 c:\windows\ServicePackFiles\i386\custsat.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 15360 c:\windows\ServicePackFiles\i386\ctfmon.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 32256 c:\windows\ServicePackFiles\i386\csrsrv.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 49152 c:\windows\ServicePackFiles\i386\csc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 62464 c:\windows\ServicePackFiles\i386\cryptsvc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 64512 c:\windows\ServicePackFiles\i386\cryptnet.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 53760 c:\windows\ServicePackFiles\i386\cryptext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 33280 c:\windows\ServicePackFiles\i386\cryptdll.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 74752 c:\windows\ServicePackFiles\i386\cryptdlg.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 36736 c:\windows\ServicePackFiles\i386\crusoe.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 12800 c:\windows\ServicePackFiles\i386\credssp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 35328 c:\windows\ServicePackFiles\i386\corpol.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 69632 c:\windows\ServicePackFiles\i386\corperfmonext.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 27648 c:\windows\ServicePackFiles\i386\conime.exe
+ 2010-01-16 18:03 . 2008-04-14 10:41 45056 c:\windows\ServicePackFiles\i386\confmrsl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 97792 c:\windows\ServicePackFiles\i386\comrepl.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 24064 c:\windows\ServicePackFiles\i386\compfilt.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 10240 c:\windows\ServicePackFiles\i386\compbatt.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 28160 c:\windows\ServicePackFiles\i386\comaddin.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 60416 c:\windows\ServicePackFiles\i386\colbact.dll
+ 2010-01-16 18:04 . 2008-04-14 03:14 17920 c:\windows\ServicePackFiles\i386\cobramsg.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 46592 c:\windows\ServicePackFiles\i386\coadmin.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 79360 c:\windows\ServicePackFiles\i386\cnbjmon2.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 47104 c:\windows\ServicePackFiles\i386\cnbjmon.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 39424 c:\windows\ServicePackFiles\i386\cmutil.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 63488 c:\windows\ServicePackFiles\i386\cmstp.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 13312 c:\windows\ServicePackFiles\i386\cmsetacl.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 39936 c:\windows\ServicePackFiles\i386\cmmon32.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 25600 c:\windows\ServicePackFiles\i386\cmdl32.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 15872 c:\windows\ServicePackFiles\i386\cmcfg32.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 13952 c:\windows\ServicePackFiles\i386\cmbatt.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 58368 c:\windows\ServicePackFiles\i386\clusapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 33280 c:\windows\ServicePackFiles\i386\clipsrv.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 20480 c:\windows\ServicePackFiles\i386\cliconfg.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 77824 c:\windows\ServicePackFiles\i386\cliconfg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 64000 c:\windows\ServicePackFiles\i386\cleanmgr.exe
+ 2010-01-16 18:04 . 2008-04-14 05:46 49536 c:\windows\ServicePackFiles\i386\classpnp.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 56832 c:\windows\ServicePackFiles\i386\cipher.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 69120 c:\windows\ServicePackFiles\i386\ciodm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 15423 c:\windows\ServicePackFiles\i386\ch7xxnt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 16896 c:\windows\ServicePackFiles\i386\cfgmgr32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 38912 c:\windows\ServicePackFiles\i386\cfgbkend.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 62976 c:\windows\ServicePackFiles\i386\cdrom.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 66560 c:\windows\ServicePackFiles\i386\cdm.dll
+ 2010-01-16 18:04 . 2008-04-14 05:44 63744 c:\windows\ServicePackFiles\i386\cdfs.sys
+ 2010-01-16 18:05 . 2008-04-14 05:16 17024 c:\windows\ServicePackFiles\i386\ccdecode.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 85504 c:\windows\ServicePackFiles\i386\catsrvps.dll
+ 2007-06-27 23:23 . 2007-06-27 23:23 94208 c:\windows\ServicePackFiles\i386\caspol.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 50688 c:\windows\ServicePackFiles\i386\camocx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 19968 c:\windows\ServicePackFiles\i386\cacls.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 84480 c:\windows\ServicePackFiles\i386\cabview.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 60416 c:\windows\ServicePackFiles\i386\cabinet.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 50688 c:\windows\ServicePackFiles\i386\btpanui.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 18944 c:\windows\ServicePackFiles\i386\bthusb.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 30208 c:\windows\ServicePackFiles\i386\bthserv.dll
+ 2010-01-16 18:05 . 2008-04-14 05:16 36480 c:\windows\ServicePackFiles\i386\bthprint.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 37888 c:\windows\ServicePackFiles\i386\bthmodem.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 17024 c:\windows\ServicePackFiles\i386\bthenum.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 20992 c:\windows\ServicePackFiles\i386\bthci.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 78336 c:\windows\ServicePackFiles\i386\browsewm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 77824 c:\windows\ServicePackFiles\i386\browser.dll
+ 2010-01-16 18:04 . 2008-04-14 03:33 63488 c:\windows\ServicePackFiles\i386\browselc.dll
+ 2010-01-16 18:04 . 2008-04-14 05:23 71552 c:\windows\ServicePackFiles\i386\bridge.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 71680 c:\windows\ServicePackFiles\i386\blastcln.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 17408 c:\windows\ServicePackFiles\i386\bidispl.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 11776 c:\windows\ServicePackFiles\i386\bdasup.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 14208 c:\windows\ServicePackFiles\i386\battc.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 29184 c:\windows\ServicePackFiles\i386\batmeter.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 52736 c:\windows\ServicePackFiles\i386\basesrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 84992 c:\windows\ServicePackFiles\i386\avifil32.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 13696 c:\windows\ServicePackFiles\i386\avcstrm.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 38912 c:\windows\ServicePackFiles\i386\avc.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 11264 c:\windows\ServicePackFiles\i386\autolfn.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 62464 c:\windows\ServicePackFiles\i386\authz.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 16439 c:\windows\ServicePackFiles\i386\author.exe
+ 2008-04-14 10:41 . 2008-04-14 10:41 20540 c:\windows\ServicePackFiles\i386\author.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 14336 c:\windows\ServicePackFiles\i386\auditusr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 42496 c:\windows\ServicePackFiles\i386\audiosrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 17279 c:\windows\ServicePackFiles\i386\atv10nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 14143 c:\windows\ServicePackFiles\i386\atv06nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 25471 c:\windows\ServicePackFiles\i386\atv04nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 11359 c:\windows\ServicePackFiles\i386\atv02nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 21183 c:\windows\ServicePackFiles\i386\atv01nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 12288 c:\windows\ServicePackFiles\i386\attrib.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 30208 c:\windows\ServicePackFiles\i386\atmlib.dll
+ 2010-01-16 18:04 . 2008-04-14 05:21 55808 c:\windows\ServicePackFiles\i386\atmlane.sys
+ 2010-01-16 18:04 . 2008-04-14 05:21 59904 c:\windows\ServicePackFiles\i386\atmarpc.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 11264 c:\windows\ServicePackFiles\i386\atmadm.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 58880 c:\windows\ServicePackFiles\i386\atl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 32768 c:\windows\ServicePackFiles\i386\ativtmxx.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 63488 c:\windows\ServicePackFiles\i386\atinxsxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 31744 c:\windows\ServicePackFiles\i386\atinxbxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 73216 c:\windows\ServicePackFiles\i386\atintuxx.sys
+ 2010-01-16 18:05 . 2008-04-14 03:04 13824 c:\windows\ServicePackFiles\i386\atinttxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 28672 c:\windows\ServicePackFiles\i386\atinsnxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 52224 c:\windows\ServicePackFiles\i386\atinraxx.sys
+ 2010-01-16 18:05 . 2008-04-14 03:04 14336 c:\windows\ServicePackFiles\i386\atinpdxx.sys
+ 2010-01-16 18:05 . 2008-04-14 03:04 13824 c:\windows\ServicePackFiles\i386\atinmdxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 57856 c:\windows\ServicePackFiles\i386\atinbtxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 34735 c:\windows\ServicePackFiles\i386\ati1xsxx.sys
+ 2010-01-16 18:05 . 2008-04-14 03:04 29455 c:\windows\ServicePackFiles\i386\ati1xbxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 36463 c:\windows\ServicePackFiles\i386\ati1tuxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 21343 c:\windows\ServicePackFiles\i386\ati1ttxx.sys
+ 2010-01-16 18:05 . 2008-04-14 03:04 26367 c:\windows\ServicePackFiles\i386\ati1snxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 63663 c:\windows\ServicePackFiles\i386\ati1rvxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 30671 c:\windows\ServicePackFiles\i386\ati1raxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 12047 c:\windows\ServicePackFiles\i386\ati1pdxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 11615 c:\windows\ServicePackFiles\i386\ati1mdxx.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 56623 c:\windows\ServicePackFiles\i386\ati1btxx.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 96512 c:\windows\ServicePackFiles\i386\atapi.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 25088 c:\windows\ServicePackFiles\i386\at.exe
+ 2010-01-16 18:04 . 2008-04-14 05:27 14336 c:\windows\ServicePackFiles\i386\asyncmac.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 65024 c:\windows\ServicePackFiles\i386\asycfilt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 32768 c:\windows\ServicePackFiles\i386\asr_pfu.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 30208 c:\windows\ServicePackFiles\i386\asr_fmt.exe
+ 2008-04-14 02:40 . 2008-04-14 02:40 32768 c:\windows\ServicePackFiles\i386\aspnet_wp.exe
+ 2008-04-14 02:40 . 2008-04-14 02:40 32768 c:\windows\ServicePackFiles\i386\aspnet_state.exe
+ 2008-04-14 02:40 . 2008-04-14 02:40 24576 c:\windows\ServicePackFiles\i386\aspnet_regiis.exe
+ 2008-04-14 02:40 . 2008-04-14 02:40 20480 c:\windows\ServicePackFiles\i386\aspnet_filter.dll
+ 2010-01-16 18:05 . 2008-04-14 05:21 60800 c:\windows\ServicePackFiles\i386\arp1394.sys
+ 2010-01-16 18:04 . 2008-04-14 03:05 36224 c:\windows\ServicePackFiles\i386\an983.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 70656 c:\windows\ServicePackFiles\i386\amstream.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 37760 c:\windows\ServicePackFiles\i386\amdk7.sys
+ 2010-01-16 18:04 . 2008-04-14 05:01 37376 c:\windows\ServicePackFiles\i386\amdk6.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 43008 c:\windows\ServicePackFiles\i386\amdagp.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 17408 c:\windows\ServicePackFiles\i386\alrsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 42752 c:\windows\ServicePackFiles\i386\alim1541.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 44544 c:\windows\ServicePackFiles\i386\alg.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 98304 c:\windows\ServicePackFiles\i386\ahui.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 24064 c:\windows\ServicePackFiles\i386\agtintl.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 20480 c:\windows\ServicePackFiles\i386\agt0c0a.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 20992 c:\windows\ServicePackFiles\i386\agt0816.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0804.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt041f.dll
+ 2010-01-16 18:05 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt041d.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0419.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 20480 c:\windows\ServicePackFiles\i386\agt0416.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0415.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0414.dll
+ 2010-01-16 18:05 . 2007-04-03 04:56 20992 c:\windows\ServicePackFiles\i386\agt0413.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0412.dll
+ 2010-01-16 18:05 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0411.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 20992 c:\windows\ServicePackFiles\i386\agt0410.dll
+ 2010-01-16 18:05 . 2007-04-03 04:56 19968 c:\windows\ServicePackFiles\i386\agt040e.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt040d.dll
+ 2010-01-16 18:05 . 2007-04-03 04:56 21504 c:\windows\ServicePackFiles\i386\agt040c.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt040b.dll
+ 2010-01-16 18:04 . 2008-04-14 04:02 19968 c:\windows\ServicePackFiles\i386\agt0409.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 22016 c:\windows\ServicePackFiles\i386\agt0408.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 21504 c:\windows\ServicePackFiles\i386\agt0407.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0406.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0405.dll
+ 2010-01-16 18:05 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0404.dll
+ 2010-01-16 18:04 . 2007-04-03 04:56 19456 c:\windows\ServicePackFiles\i386\agt0401.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 44928 c:\windows\ServicePackFiles\i386\agpcpq.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 42368 c:\windows\ServicePackFiles\i386\agp440.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 44032 c:\windows\ServicePackFiles\i386\agentsr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 24064 c:\windows\ServicePackFiles\i386\agentpsh.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 49152 c:\windows\ServicePackFiles\i386\agentmpx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 57344 c:\windows\ServicePackFiles\i386\agentdpv.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 42496 c:\windows\ServicePackFiles\i386\agentdp2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 24064 c:\windows\ServicePackFiles\i386\agentanm.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 99840 c:\windows\ServicePackFiles\i386\advpack.dll
+ 2010-01-16 18:05 . 2007-04-02 23:40 85813 c:\windows\ServicePackFiles\i386\adsutil.vbs
+ 2010-01-16 18:04 . 2008-04-14 10:41 68096 c:\windows\ServicePackFiles\i386\adsmsext.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 43520 c:\windows\ServicePackFiles\i386\admwprox.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 61440 c:\windows\ServicePackFiles\i386\admparse.dll
+ 2010-01-16 18:04 . 2008-04-14 03:06 10880 c:\windows\ServicePackFiles\i386\admjoy.sys
+ 2008-04-14 10:42 . 2008-04-14 10:42 16439 c:\windows\ServicePackFiles\i386\admin.exe
+ 2008-04-14 10:41 . 2008-04-14 10:41 20540 c:\windows\ServicePackFiles\i386\admin.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 29696 c:\windows\ServicePackFiles\i386\admexs.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 98304 c:\windows\ServicePackFiles\i386\actxprxy.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 39424 c:\windows\ServicePackFiles\i386\acadproc.dll
+ 2010-01-16 18:04 . 2008-04-14 03:06 84480 c:\windows\ServicePackFiles\i386\ac97via.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 48128 c:\windows\ServicePackFiles\i386\61883.sys
+ 2010-01-16 18:04 . 2008-04-14 05:10 12288 c:\windows\ServicePackFiles\i386\4mmdat.sys
+ 2010-01-16 18:04 . 2008-04-14 05:16 53376 c:\windows\ServicePackFiles\i386\1394bus.sys
+ 2008-04-14 10:41 . 2008-04-14 10:41 25600 c:\windows\Installer\tsclientmsitrans\tscupdc.dll
+ 2010-01-16 18:05 . 2007-10-30 20:36 13801 c:\windows\Installer\tsclientmsitrans\tscuinst.vbs
+ 2010-01-16 18:05 . 2007-12-12 21:03 18917 c:\windows\Installer\tsclientmsitrans\tscinst.vbs
+ 2008-04-14 10:42 . 2008-04-14 10:42 7680 c:\windows\system32\spdwnwxp.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 9728 c:\windows\system32\rwnh.dll
+ 2010-01-16 18:03 . 2008-04-14 05:06 5888 c:\windows\system32\drivers\smbali.sys
+ 2010-01-16 18:03 . 2008-04-14 10:42 3901 c:\windows\system32\drivers\siint5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 3775 c:\windows\system32\drivers\adv11nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 3711 c:\windows\system32\drivers\adv09nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 3135 c:\windows\system32\drivers\adv08nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 3647 c:\windows\system32\drivers\adv07nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 3615 c:\windows\system32\drivers\adv05nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 3967 c:\windows\system32\drivers\adv02nt5.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 4255 c:\windows\system32\drivers\adv01nt5.dll
+ 2010-01-16 18:05 . 2008-04-14 05:13 9728 c:\windows\system32\comsdupd.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 6656 c:\windows\ServicePackFiles\i386\wuauserv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 8192 c:\windows\ServicePackFiles\i386\wshirda.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 5632 c:\windows\ServicePackFiles\i386\wmm2res2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 7680 c:\windows\ServicePackFiles\i386\wmm2ext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\wmm2eres.dll
+ 2010-01-16 18:04 . 2008-04-14 03:40 6656 c:\windows\ServicePackFiles\i386\wmiapres.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 8832 c:\windows\ServicePackFiles\i386\wmiacpi.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 5632 c:\windows\ServicePackFiles\i386\wmi.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 5632 c:\windows\ServicePackFiles\i386\winver.exe
+ 2010-01-16 18:04 . 2008-04-14 03:24 5120 c:\windows\ServicePackFiles\i386\winnls.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 5376 c:\windows\ServicePackFiles\i386\viaide.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 8704 c:\windows\ServicePackFiles\i386\tty.dll
+ 2010-01-16 18:04 . 2008-01-19 01:43 2247 c:\windows\ServicePackFiles\i386\tscdsbl.bat
+ 2010-01-16 18:05 . 2008-04-14 10:42 7168 c:\windows\ServicePackFiles\i386\tlntsvrp.dll
+ 2010-01-16 18:04 . 2008-04-14 05:09 4352 c:\windows\ServicePackFiles\i386\swenum.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 8192 c:\windows\ServicePackFiles\i386\staxmem.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 6272 c:\windows\ServicePackFiles\i386\splitter.sys
+ 2008-04-14 10:42 . 2008-04-14 10:42 7680 c:\windows\ServicePackFiles\i386\spdwnwxp.exe
+ 2010-01-16 18:04 . 2008-04-14 05:10 7552 c:\windows\ServicePackFiles\i386\sonyait.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 8704 c:\windows\ServicePackFiles\i386\snmptrap.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 6144 c:\windows\ServicePackFiles\i386\snmpmib.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 8192 c:\windows\ServicePackFiles\i386\smbinst.exe
+ 2010-01-16 18:04 . 2008-04-14 05:06 6912 c:\windows\ServicePackFiles\i386\smbclass.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 5888 c:\windows\ServicePackFiles\i386\smbali.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 3901 c:\windows\ServicePackFiles\i386\siint5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 5120 c:\windows\ServicePackFiles\i386\sfc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 7168 c:\windows\ServicePackFiles\i386\sensapi.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 5632 c:\windows\ServicePackFiles\i386\security.dll
+ 2006-12-31 12:57 . 2006-12-31 12:57 4569 c:\windows\ServicePackFiles\i386\secupd.dat
+ 2010-01-16 18:04 . 2008-04-14 10:42 9216 c:\windows\ServicePackFiles\i386\scrnsave.scr
+ 2010-01-16 18:05 . 2008-04-14 10:42 9728 c:\windows\ServicePackFiles\i386\rwnh.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\rpcref.dll
+ 2010-01-16 18:04 . 2008-04-14 03:22 3338 c:\windows\ServicePackFiles\i386\redir.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 7680 c:\windows\ServicePackFiles\i386\rasadhlp.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 6016 c:\windows\ServicePackFiles\i386\qic157.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 7680 c:\windows\ServicePackFiles\i386\pwsdata.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 9216 c:\windows\ServicePackFiles\i386\proxycfg.exe
+ 2010-01-16 18:05 . 2008-04-14 05:10 8832 c:\windows\ServicePackFiles\i386\powerfil.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 8192 c:\windows\ServicePackFiles\i386\ntlsapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\nddeapir.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 9728 c:\windows\ServicePackFiles\i386\ncpsres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\mtxex.dll
+ 2010-01-16 18:04 . 2008-04-14 05:09 5504 c:\windows\ServicePackFiles\i386\mstee.sys
+ 2010-01-16 18:04 . 2008-04-14 05:09 4992 c:\windows\ServicePackFiles\i386\mspqm.sys
+ 2010-01-16 18:04 . 2008-04-14 05:09 5376 c:\windows\ServicePackFiles\i386\mspclock.sys
+ 2010-01-16 18:04 . 2008-04-14 05:09 7552 c:\windows\ServicePackFiles\i386\mskssrv.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 4608 c:\windows\ServicePackFiles\i386\msimg32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 6656 c:\windows\ServicePackFiles\i386\msidle.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 6144 c:\windows\ServicePackFiles\i386\msdtc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\msdaurl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\msdasc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\msdaer.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\msdaenum.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\msdadc.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 8704 c:\windows\ServicePackFiles\i386\mscortim.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 3584 c:\windows\ServicePackFiles\i386\msafd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 4608 c:\windows\ServicePackFiles\i386\mqsvc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 6656 c:\windows\ServicePackFiles\i386\mmcfxcr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 7680 c:\windows\ServicePackFiles\i386\migregdb.exe
+ 2010-01-16 18:04 . 2008-04-14 05:10 7040 c:\windows\ServicePackFiles\i386\ltotape.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 4096 c:\windows\ServicePackFiles\i386\ksuser.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 8192 c:\windows\ServicePackFiles\i386\koc.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 7424 c:\windows\ServicePackFiles\i386\kd1394.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 7168 c:\windows\ServicePackFiles\i386\kbdukx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 7680 c:\windows\ServicePackFiles\i386\kbdsmsno.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 7680 c:\windows\ServicePackFiles\i386\kbdsmsfi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdpash.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 7168 c:\windows\ServicePackFiles\i386\kbdno1.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdnepr.dll
+ 2008-04-14 10:39 . 2008-04-14 10:39 7168 c:\windows\ServicePackFiles\i386\kbdnec.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdmlt48.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdmlt47.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 5632 c:\windows\ServicePackFiles\i386\kbdmaori.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdlk41j.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6656 c:\windows\ServicePackFiles\i386\kbdlk41a.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdiultn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6656 c:\windows\ServicePackFiles\i386\kbdinmal.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdinben.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdinbe1.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 7168 c:\windows\ServicePackFiles\i386\kbdibm02.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 7168 c:\windows\ServicePackFiles\i386\kbdfi1.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdbhc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbdax2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbd106n.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbd106.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6144 c:\windows\ServicePackFiles\i386\kbd101.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 5504 c:\windows\ServicePackFiles\i386\intelide.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 7168 c:\windows\ServicePackFiles\i386\iisfecnv.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 8192 c:\windows\ServicePackFiles\i386\igmpagnt.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 7168 c:\windows\ServicePackFiles\i386\ieexecremote.dll
+ 2007-12-17 22:28 . 2007-12-17 22:28 8192 c:\windows\ServicePackFiles\i386\ieexec.exe
+ 2010-01-16 18:04 . 2008-04-14 03:14 2560 c:\windows\ServicePackFiles\i386\iconlib.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 3584 c:\windows\ServicePackFiles\i386\icmp.dll
+ 2010-01-16 18:04 . 2008-04-14 05:11 8576 c:\windows\ServicePackFiles\i386\i2omgmt.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 8192 c:\windows\ServicePackFiles\i386\httpmb51.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 7168 c:\windows\ServicePackFiles\i386\hccoin.dll
+ 2010-01-16 18:05 . 2006-12-31 11:56 9728 c:\windows\ServicePackFiles\i386\gpkrsrc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 6656 c:\windows\ServicePackFiles\i386\fxsres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 8704 c:\windows\ServicePackFiles\i386\fxsperf.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 6144 c:\windows\ServicePackFiles\i386\ftpmib.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 9344 c:\windows\ServicePackFiles\i386\framebuf.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 7680 c:\windows\ServicePackFiles\i386\forcedos.exe
+ 2010-01-16 18:04 . 2008-04-14 10:39 7168 c:\windows\ServicePackFiles\i386\f3ahvoas.dll
+ 2010-01-16 18:05 . 2008-04-14 03:39 4096 c:\windows\ServicePackFiles\i386\dsprpres.dll
+ 2010-01-16 18:04 . 2007-04-03 00:35 4656 c:\windows\ServicePackFiles\i386\ds16gt.dll
+ 2010-01-16 18:05 . 2008-04-14 05:15 2944 c:\windows\ServicePackFiles\i386\drmkaud.sys
+ 2010-01-16 18:05 . 2008-04-14 10:39 3072 c:\windows\ServicePackFiles\i386\dpnlobby.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 3072 c:\windows\ServicePackFiles\i386\dpnaddr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 9216 c:\windows\ServicePackFiles\i386\dot3dlg.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 8320 c:\windows\ServicePackFiles\i386\dlttape.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 5120 c:\windows\ServicePackFiles\i386\dllhost.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 6144 c:\windows\ServicePackFiles\i386\dcomcnfg.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 8704 c:\windows\ServicePackFiles\i386\dciman32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:55 1804 c:\windows\ServicePackFiles\i386\dcache.bin
+ 2010-01-16 18:04 . 2008-04-14 10:41 8192 c:\windows\ServicePackFiles\i386\d3d8thk.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 6144 c:\windows\ServicePackFiles\i386\csrss.exe
+ 2010-01-16 18:05 . 2008-04-14 05:13 9728 c:\windows\ServicePackFiles\i386\comsdupd.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 6144 c:\windows\ServicePackFiles\i386\comrereg.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 9728 c:\windows\ServicePackFiles\i386\comrepl.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 5632 c:\windows\ServicePackFiles\i386\cisvc.exe
+ 2010-01-16 18:04 . 2008-04-14 05:11 8192 c:\windows\ServicePackFiles\i386\changer.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 7168 c:\windows\ServicePackFiles\i386\bitsprx4.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 7168 c:\windows\ServicePackFiles\i386\bitsprx3.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 8192 c:\windows\ServicePackFiles\i386\bitsprx2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 8704 c:\windows\ServicePackFiles\i386\batt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 3775 c:\windows\ServicePackFiles\i386\adv11nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 3711 c:\windows\ServicePackFiles\i386\adv09nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 3135 c:\windows\ServicePackFiles\i386\adv08nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 3647 c:\windows\ServicePackFiles\i386\adv07nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 3615 c:\windows\ServicePackFiles\i386\adv05nt5.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 3967 c:\windows\ServicePackFiles\i386\adv02nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 4255 c:\windows\ServicePackFiles\i386\adv01nt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4096 c:\windows\ServicePackFiles\i386\actmovie.exe
+ 2010-01-16 18:05 . 2008-01-19 01:43 2247 c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
+ 2008-04-14 04:56 . 2008-04-14 04:56 132096 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
0\rtcres.dll
- 2008-10-01 01:17 . 2008-04-14 12:00 132096 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_en_16a24bc
0\rtcres.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 991232 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
- 2008-10-01 01:17 . 2008-04-14 12:00 991232 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\rtcdll.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 853504 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
- 2008-10-01 01:17 . 2008-04-14 12:00 853504 c:\windows\WinSxS\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 343040 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
- 2008-10-01 01:18 . 2008-04-14 12:00 343040 c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 401462 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\msvcp60.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 995383 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42.dll
+ 2008-09-08 21:04 . 2008-04-14 10:41 756224 c:\windows\system32\winntbbu.dll
+ 2008-09-08 20:56 . 2008-04-14 10:42 218624 c:\windows\system32\uxtheme.dll
- 2008-09-08 20:56 . 2008-09-08 20:56 218624 c:\windows\system32\uxtheme.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 188508 c:\windows\system32\slgen.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 286792 c:\windows\system32\slextspk.dll
- 2008-09-08 20:56 . 2008-09-08 20:56 140288 c:\windows\system32\sfc_os.dll
+ 2008-09-08 20:56 . 2008-04-14 10:42 140288 c:\windows\system32\sfc_os.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 397056 c:\windows\system32\s3gnb.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 189440 c:\windows\system32\inetsrv\smtpadm.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 221696 c:\windows\system32\inetsrv\seo.dll
+ 2010-01-16 18:03 . 2008-04-14 05:16 121984 c:\windows\system32\drivers\usbvideo.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 404990 c:\windows\system32\drivers\slntamr.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 129535 c:\windows\system32\drivers\slnt7554.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 166912 c:\windows\system32\drivers\s3gnbm.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 180360 c:\windows\system32\drivers\ntmtlfax.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 452736 c:\windows\system32\drivers\mtxparhm.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 126686 c:\windows\system32\drivers\mtlmnt5.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 685056 c:\windows\system32\drivers\hsfcxts2.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 220032 c:\windows\system32\drivers\hsfbs2s2.sys
+ 2010-01-16 18:03 . 2008-04-14 05:21 101120 c:\windows\system32\drivers\bthpan.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 104960 c:\windows\system32\drivers\atinrvxx.sys
+ 2010-01-16 18:03 . 2008-04-14 03:04 327040 c:\windows\system32\drivers\ati2mtaa.sys
+ 2010-01-16 18:05 . 2008-04-14 10:40 102912 c:\windows\system32\dllcache\dpcdll.dll
+ 2008-10-01 08:34 . 2010-01-17 01:42 606208 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2008-10-01 08:34 . 2010-01-14 18:34 606208 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2010-01-16 18:05 . 2008-04-14 10:42 409088 c:\windows\system32\bits\qmgr.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 870784 c:\windows\system32\ati3d1ag.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 377984 c:\windows\system32\ati2dvaa.dll
+ 2008-04-14 04:00 . 2008-04-14 04:00 180224 c:\windows\ServicePackFiles\ServicePackCache\i386\msgslang.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 338432 c:\windows\ServicePackFiles\i386\zipfldr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 116224 c:\windows\ServicePackFiles\i386\xrxwiadr.dll
+ 2010-01-16 18:04 . 2008-04-14 04:09 689152 c:\windows\ServicePackFiles\i386\xpsp3res.dll
+ 2010-01-16 18:04 . 2008-04-14 04:09 187392 c:\windows\ServicePackFiles\i386\xpsp1res.dll
+ 2010-01-16 18:04 . 2008-04-14 04:09 438784 c:\windows\ServicePackFiles\i386\xpob2res.dll
+ 2010-01-16 18:04 . 2008-04-14 05:23 558080 c:\windows\ServicePackFiles\i386\xpnetdg.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 129024 c:\windows\ServicePackFiles\i386\xmlprov.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 121856 c:\windows\ServicePackFiles\i386\xmllite.dll
+ 2010-01-16 18:04 . 2006-12-31 12:11 174200 c:\windows\ServicePackFiles\i386\xenroll.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 483840 c:\windows\ServicePackFiles\i386\wzcsvc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 383488 c:\windows\ServicePackFiles\i386\wzcdlg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 120320 c:\windows\ServicePackFiles\i386\wuweb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 112640 c:\windows\ServicePackFiles\i386\wucltui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 183296 c:\windows\ServicePackFiles\i386\wuaueng1.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 165888 c:\windows\ServicePackFiles\i386\wuauclt1.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 111104 c:\windows\ServicePackFiles\i386\wuauclt.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 430592 c:\windows\ServicePackFiles\i386\wuapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 108032 c:\windows\ServicePackFiles\i386\wshbth.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 604160 c:\windows\ServicePackFiles\i386\wsecedit.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 155648 c:\windows\ServicePackFiles\i386\wscript.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 264192 c:\windows\ServicePackFiles\i386\wow32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 214528 c:\windows\ServicePackFiles\i386\wordpad.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 276992 c:\windows\ServicePackFiles\i386\wmphoto.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 325632 c:\windows\ServicePackFiles\i386\wmm2fxb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 502272 c:\windows\ServicePackFiles\i386\wmm2fxa.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 402432 c:\windows\ServicePackFiles\i386\wmm2filt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 167936 c:\windows\ServicePackFiles\i386\wmm2ae.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 144896 c:\windows\ServicePackFiles\i386\wmisvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 218112 c:\windows\ServicePackFiles\i386\wmiprvse.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 437248 c:\windows\ServicePackFiles\i386\wmiprvsd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 144896 c:\windows\ServicePackFiles\i386\wmiprov.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 132096 c:\windows\ServicePackFiles\i386\wmipdskq.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 156672 c:\windows\ServicePackFiles\i386\wmipcima.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 140800 c:\windows\ServicePackFiles\i386\wmidcprv.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 358912 c:\windows\ServicePackFiles\i386\wmic.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 126464 c:\windows\ServicePackFiles\i386\wmiapsrv.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 196608 c:\windows\ServicePackFiles\i386\wmiadap.exe
+ 2010-01-16 18:05 . 2008-04-14 03:05 154624 c:\windows\ServicePackFiles\i386\wlluc48.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 172032 c:\windows\ServicePackFiles\i386\wldap32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 132096 c:\windows\ServicePackFiles\i386\wkssvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 176640 c:\windows\ServicePackFiles\i386\wintrust.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 293376 c:\windows\ServicePackFiles\i386\winsrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 146432 c:\windows\ServicePackFiles\i386\winspool.drv
+ 2008-04-14 10:41 . 2008-04-14 10:41 756224 c:\windows\ServicePackFiles\i386\winntbbu.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 176128 c:\windows\ServicePackFiles\i386\winmm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 507904 c:\windows\ServicePackFiles\i386\winlogon.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 666112 c:\windows\ServicePackFiles\i386\wininet.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 354304 c:\windows\ServicePackFiles\i386\winhttp.dll
+ 2010-01-16 18:03 . 2008-04-14 10:42 283648 c:\windows\ServicePackFiles\i386\winhlp32.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 102400 c:\windows\ServicePackFiles\i386\win32spl.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 346112 c:\windows\ServicePackFiles\i386\wicext.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 712704 c:\windows\ServicePackFiles\i386\wic.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 111104 c:\windows\ServicePackFiles\i386\wiavideo.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 589312 c:\windows\ServicePackFiles\i386\wiashext.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 333824 c:\windows\ServicePackFiles\i386\wiaservc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 124416 c:\windows\ServicePackFiles\i386\wiadss.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 463360 c:\windows\ServicePackFiles\i386\wiadefui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 433664 c:\windows\ServicePackFiles\i386\wiaacmgr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 135680 c:\windows\ServicePackFiles\i386\webvw.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 276480 c:\windows\ServicePackFiles\i386\webcheck.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 197120 c:\windows\ServicePackFiles\i386\wbemupgd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 116224 c:\windows\ServicePackFiles\i386\wbemtest.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 273920 c:\windows\ServicePackFiles\i386\wbemess.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 178176 c:\windows\ServicePackFiles\i386\wbemdisp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 531456 c:\windows\ServicePackFiles\i386\wbemcore.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 214528 c:\windows\ServicePackFiles\i386\wbemcomn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 196608 c:\windows\ServicePackFiles\i386\wbemcntl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 215552 c:\windows\ServicePackFiles\i386\wavemsp.dll
+ 2010-01-16 18:04 . 2008-04-14 02:51 249856 c:\windows\ServicePackFiles\i386\wab32res.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 510976 c:\windows\ServicePackFiles\i386\wab32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 483840 c:\windows\ServicePackFiles\i386\w95upgnt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 364032 c:\windows\ServicePackFiles\i386\w3svc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 175104 c:\windows\ServicePackFiles\i386\w32time.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 289792 c:\windows\ServicePackFiles\i386\vssvc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 430592 c:\windows\ServicePackFiles\i386\vssapi.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 999424 c:\windows\ServicePackFiles\i386\vsavb7rt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 131584 c:\windows\ServicePackFiles\i386\viewprov.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 851968 c:\windows\ServicePackFiles\i386\vgx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 434176 c:\windows\ServicePackFiles\i386\vbscript.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.kor.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.ja.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 147456 c:\windows\ServicePackFiles\i386\vbc7ui.it.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 151552 c:\windows\ServicePackFiles\i386\vbc7ui.ger.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 151552 c:\windows\ServicePackFiles\i386\vbc7ui.fr.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 147456 c:\windows\ServicePackFiles\i386\vbc7ui.es.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.cht.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 126976 c:\windows\ServicePackFiles\i386\vbc7ui.chs.dll
+ 2007-06-27 23:30 . 2007-06-27 23:30 716800 c:\windows\ServicePackFiles\i386\vbc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 218624 c:\windows\ServicePackFiles\i386\uxtheme.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 406016 c:\windows\ServicePackFiles\i386\usp10.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 727040 c:\windows\ServicePackFiles\i386\userenv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 578560 c:\windows\ServicePackFiles\i386\user32.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 121984 c:\windows\ServicePackFiles\i386\usbvideo.sys
+ 2010-01-16 18:04 . 2008-04-14 05:15 143872 c:\windows\ServicePackFiles\i386\usbport.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 619520 c:\windows\ServicePackFiles\i386\urlmon.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 239616 c:\windows\ServicePackFiles\i386\upnpui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 185856 c:\windows\ServicePackFiles\i386\upnphost.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 133632 c:\windows\ServicePackFiles\i386\upnp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 150528 c:\windows\ServicePackFiles\i386\uploadm.exe
+ 2010-01-16 18:04 . 2008-04-14 05:09 384768 c:\windows\ServicePackFiles\i386\update.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 316416 c:\windows\ServicePackFiles\i386\untfs.dll
+ 2010-01-16 18:04 . 2007-05-15 18:38 761344 c:\windows\ServicePackFiles\i386\unires.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 744448 c:\windows\ServicePackFiles\i386\unidrvui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 373248 c:\windows\ServicePackFiles\i386\unidrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 123392 c:\windows\ServicePackFiles\i386\umpnpmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 275456 c:\windows\ServicePackFiles\i386\ulib.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 103424 c:\windows\ServicePackFiles\i386\uihelper.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 101376 c:\windows\ServicePackFiles\i386\txflog.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 130048 c:\windows\ServicePackFiles\i386\tsoc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 279040 c:\windows\ServicePackFiles\i386\tshoot.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 153088 c:\windows\ServicePackFiles\i386\triedit.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 259584 c:\windows\ServicePackFiles\i386\tracerpt.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 347136 c:\windows\ServicePackFiles\i386\tourstrt.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 385536 c:\windows\ServicePackFiles\i386\themeui.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 149376 c:\windows\ServicePackFiles\i386\tffsport.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 295424 c:\windows\ServicePackFiles\i386\termsrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 358400 c:\windows\ServicePackFiles\i386\termmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 05:30 225664 c:\windows\ServicePackFiles\i386\tcpip6.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 135680 c:\windows\ServicePackFiles\i386\taskmgr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 249856 c:\windows\ServicePackFiles\i386\tapisrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 181760 c:\windows\ServicePackFiles\i386\tapi32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 858624 c:\windows\ServicePackFiles\i386\tapi3.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 117760 c:\windows\ServicePackFiles\i386\t2embed.dll
+ 2007-06-27 23:29 . 2007-06-27 23:29 507904 c:\windows\ServicePackFiles\i386\system.web.services.dll
+ 2007-06-27 23:29 . 2007-06-27 23:29 126976 c:\windows\ServicePackFiles\i386\system.serviceprocess.dll
+ 2007-06-27 23:29 . 2007-06-27 23:29 131072 c:\windows\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 311296 c:\windows\ServicePackFiles\i386\system.runtime.remoting.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 241664 c:\windows\ServicePackFiles\i386\system.messaging.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 352256 c:\windows\ServicePackFiles\i386\system.management.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 212992 c:\windows\ServicePackFiles\i386\system.enterpriseservices.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 462848 c:\windows\ServicePackFiles\i386\system.drawing.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 990208 c:\windows\ServicePackFiles\i386\syssetup.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 106496 c:\windows\ServicePackFiles\i386\sysocmgr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 173568 c:\windows\ServicePackFiles\i386\sysmoda.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 193024 c:\windows\ServicePackFiles\i386\sysmod.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 191488 c:\windows\ServicePackFiles\i386\syncui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 713216 c:\windows\ServicePackFiles\i386\sxs.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 121856 c:\windows\ServicePackFiles\i386\stobject.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 136704 c:\windows\ServicePackFiles\i386\sti_ci.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 679936 c:\windows\ServicePackFiles\i386\sstext3d.scr
+ 2010-01-16 18:04 . 2008-04-14 10:42 610304 c:\windows\ServicePackFiles\i386\sspipes.scr
+ 2010-01-16 18:04 . 2008-04-14 10:42 393216 c:\windows\ServicePackFiles\i386\ssflwbox.scr
+ 2010-01-16 18:04 . 2008-04-14 10:42 704512 c:\windows\ServicePackFiles\i386\ss3dfo.scr
+ 2010-01-16 18:05 . 2008-04-14 05:45 334848 c:\windows\ServicePackFiles\i386\srv.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 171008 c:\windows\ServicePackFiles\i386\srsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 239104 c:\windows\ServicePackFiles\i386\srrstr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 726078 c:\windows\ServicePackFiles\i386\srchui.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 217088 c:\windows\ServicePackFiles\i386\sqlxmlx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 180800 c:\windows\ServicePackFiles\i386\sqlunirl.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 442368 c:\windows\ServicePackFiles\i386\sqlsrv32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 110592 c:\windows\ServicePackFiles\i386\sqlse20.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 462848 c:\windows\ServicePackFiles\i386\sqlqp20.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 528384 c:\windows\ServicePackFiles\i386\sqloledb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 151552 c:\windows\ServicePackFiles\i386\sqldb20.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 250368 c:\windows\ServicePackFiles\i386\sptip.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 648704 c:\windows\ServicePackFiles\i386\sprc0c0a.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 639488 c:\windows\ServicePackFiles\i386\sprc0816.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 322560 c:\windows\ServicePackFiles\i386\sprc0804.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 576512 c:\windows\ServicePackFiles\i386\sprc0424.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 592896 c:\windows\ServicePackFiles\i386\sprc041f.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 590848 c:\windows\ServicePackFiles\i386\sprc041d.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 577536 c:\windows\ServicePackFiles\i386\sprc041b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 627200 c:\windows\ServicePackFiles\i386\sprc0419.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 620032 c:\windows\ServicePackFiles\i386\sprc0416.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 641024 c:\windows\ServicePackFiles\i386\sprc0415.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 591872 c:\windows\ServicePackFiles\i386\sprc0414.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 645120 c:\windows\ServicePackFiles\i386\sprc0413.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 392704 c:\windows\ServicePackFiles\i386\sprc0412.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 412672 c:\windows\ServicePackFiles\i386\sprc0411.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 658432 c:\windows\ServicePackFiles\i386\sprc0410.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 645120 c:\windows\ServicePackFiles\i386\sprc040e.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 620544 c:\windows\ServicePackFiles\i386\sprc040d.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 663040 c:\windows\ServicePackFiles\i386\sprc040c.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 604672 c:\windows\ServicePackFiles\i386\sprc040b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 679936 c:\windows\ServicePackFiles\i386\sprc0408.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 663552 c:\windows\ServicePackFiles\i386\sprc0407.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 605696 c:\windows\ServicePackFiles\i386\sprc0406.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 601088 c:\windows\ServicePackFiles\i386\sprc0405.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 327680 c:\windows\ServicePackFiles\i386\sprc0404.dll
+ 2010-01-16 18:05 . 2008-04-14 05:09 656896 c:\windows\ServicePackFiles\i386\sprc0401.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 773632 c:\windows\ServicePackFiles\i386\sprb0c0a.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 751616 c:\windows\ServicePackFiles\i386\sprb0816.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 470016 c:\windows\ServicePackFiles\i386\sprb0804.dll
+ 2010-01-16 18:04 . 2008-04-14 05:08 732160 c:\windows\ServicePackFiles\i386\sprb0424.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 724480 c:\windows\ServicePackFiles\i386\sprb041f.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 724480 c:\windows\ServicePackFiles\i386\sprb041d.dll
+ 2010-01-16 18:04 . 2008-04-14 05:08 757248 c:\windows\ServicePackFiles\i386\sprb041b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 736768 c:\windows\ServicePackFiles\i386\sprb0419.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 752128 c:\windows\ServicePackFiles\i386\sprb0416.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 759808 c:\windows\ServicePackFiles\i386\sprb0415.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 716288 c:\windows\ServicePackFiles\i386\sprb0414.dll
+ 2010-01-16 18:05 . 2008-04-14 05:08 769024 c:\windows\ServicePackFiles\i386\sprb0413.dll
+ 2010-01-16 18:05 . 2008-04-14 05:07 543744 c:\windows\ServicePackFiles\i386\sprb0412.dll
+ 2010-01-16 18:05 . 2008-04-14 05:07 562688 c:\windows\ServicePackFiles\i386\sprb0411.dll
+ 2010-01-16 18:05 . 2008-04-14 05:07 769536 c:\windows\ServicePackFiles\i386\sprb0410.dll
+ 2010-01-16 18:05 . 2008-04-14 05:07 769536 c:\windows\ServicePackFiles\i386\sprb040e.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 793088 c:\windows\ServicePackFiles\i386\sprb040c.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 729088 c:\windows\ServicePackFiles\i386\sprb040b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 801280 c:\windows\ServicePackFiles\i386\sprb0408.dll
+ 2010-01-16 18:05 . 2008-04-14 05:07 788480 c:\windows\ServicePackFiles\i386\sprb0407.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 742912 c:\windows\ServicePackFiles\i386\sprb0406.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 734720 c:\windows\ServicePackFiles\i386\sprb0405.dll
+ 2010-01-16 18:05 . 2008-04-14 05:06 477696 c:\windows\ServicePackFiles\i386\sprb0404.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 196096 c:\windows\ServicePackFiles\i386\spra0c0a.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 194560 c:\windows\ServicePackFiles\i386\spra0816.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 161280 c:\windows\ServicePackFiles\i386\spra0804.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 189952 c:\windows\ServicePackFiles\i386\spra0427.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 188928 c:\windows\ServicePackFiles\i386\spra0426.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 186880 c:\windows\ServicePackFiles\i386\spra0425.dll
+ 2010-01-16 18:04 . 2008-04-14 05:05 192512 c:\windows\ServicePackFiles\i386\spra0424.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 188928 c:\windows\ServicePackFiles\i386\spra041f.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 188416 c:\windows\ServicePackFiles\i386\spra041e.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 188928 c:\windows\ServicePackFiles\i386\spra041d.dll
+ 2010-01-16 18:04 . 2008-04-14 05:05 192512 c:\windows\ServicePackFiles\i386\spra041b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 188928 c:\windows\ServicePackFiles\i386\spra041a.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 192512 c:\windows\ServicePackFiles\i386\spra0419.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 190464 c:\windows\ServicePackFiles\i386\spra0418.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 192512 c:\windows\ServicePackFiles\i386\spra0416.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 194560 c:\windows\ServicePackFiles\i386\spra0415.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 189440 c:\windows\ServicePackFiles\i386\spra0414.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 196096 c:\windows\ServicePackFiles\i386\spra0413.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 167936 c:\windows\ServicePackFiles\i386\spra0412.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 171008 c:\windows\ServicePackFiles\i386\spra0411.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 195072 c:\windows\ServicePackFiles\i386\spra0410.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 195584 c:\windows\ServicePackFiles\i386\spra040e.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 181760 c:\windows\ServicePackFiles\i386\spra040d.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 197632 c:\windows\ServicePackFiles\i386\spra040c.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 186368 c:\windows\ServicePackFiles\i386\spra040b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 197632 c:\windows\ServicePackFiles\i386\spra0408.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 199680 c:\windows\ServicePackFiles\i386\spra0407.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 192000 c:\windows\ServicePackFiles\i386\spra0406.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 188928 c:\windows\ServicePackFiles\i386\spra0405.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 161280 c:\windows\ServicePackFiles\i386\spra0404.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 189440 c:\windows\ServicePackFiles\i386\spra0402.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 186880 c:\windows\ServicePackFiles\i386\spra0401.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 538624 c:\windows\ServicePackFiles\i386\spider.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 130048 c:\windows\ServicePackFiles\i386\softkbd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 182272 c:\windows\ServicePackFiles\i386\snmpsnap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 188416 c:\windows\ServicePackFiles\i386\snmpsmir.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 358400 c:\windows\ServicePackFiles\i386\snmpincl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 259072 c:\windows\ServicePackFiles\i386\snmpcl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 131584 c:\windows\ServicePackFiles\i386\sndrec32.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 456192 c:\windows\ServicePackFiles\i386\smtpsvc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 189440 c:\windows\ServicePackFiles\i386\smtpadm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 362496 c:\windows\ServicePackFiles\i386\smlogcfg.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 236544 c:\windows\ServicePackFiles\i386\smi2smir.exe
+ 2010-01-16 18:04 . 2008-04-14 04:53 404990 c:\windows\ServicePackFiles\i386\slntamr.sys
+ 2010-01-16 18:05 . 2008-04-14 04:53 129535 c:\windows\ServicePackFiles\i386\slnt7554.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 188508 c:\windows\ServicePackFiles\i386\slgen.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 286792 c:\windows\ServicePackFiles\i386\slextspk.dll
+ 2010-01-16 18:04 . 2008-04-14 04:08 306176 c:\windows\ServicePackFiles\i386\slbcsp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 135168 c:\windows\ServicePackFiles\i386\shsvcs.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 474112 c:\windows\ServicePackFiles\i386\shlwapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 438272 c:\windows\ServicePackFiles\i386\shimgvw.dll
+ 2010-01-16 18:05 . 2008-04-14 03:33 549376 c:\windows\ServicePackFiles\i386\shdoclc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 140288 c:\windows\ServicePackFiles\i386\sfc_os.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 101376 c:\windows\ServicePackFiles\i386\setupqry.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 985088 c:\windows\ServicePackFiles\i386\setupapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 141312 c:\windows\ServicePackFiles\i386\sessmgr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 108544 c:\windows\ServicePackFiles\i386\services.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 221696 c:\windows\ServicePackFiles\i386\seo.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 121856 c:\windows\ServicePackFiles\i386\sctasks.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 172032 c:\windows\ServicePackFiles\i386\scrrun.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 180224 c:\windows\ServicePackFiles\i386\scrobj.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 199680 c:\windows\ServicePackFiles\i386\scripta.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 215552 c:\windows\ServicePackFiles\i386\script.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 192512 c:\windows\ServicePackFiles\i386\schedsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 144384 c:\windows\ServicePackFiles\i386\schannel.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 314880 c:\windows\ServicePackFiles\i386\scesrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 181248 c:\windows\ServicePackFiles\i386\scecli.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 171008 c:\windows\ServicePackFiles\i386\sccsccp.dll
+ 2010-01-16 18:04 . 2008-04-14 04:08 169984 c:\windows\ServicePackFiles\i386\sccbase.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 159232 c:\windows\ServicePackFiles\i386\sbeio.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 270848 c:\windows\ServicePackFiles\i386\sbe.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 741376 c:\windows\ServicePackFiles\i386\sapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 415744 c:\windows\ServicePackFiles\i386\samsrv.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 166912 c:\windows\ServicePackFiles\i386\s3gnbm.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 397056 c:\windows\ServicePackFiles\i386\s3gnb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 380416 c:\windows\ServicePackFiles\i386\rstrui.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 107520 c:\windows\ServicePackFiles\i386\rsnotify.exe
+ 2010-01-16 18:05 . 2008-04-14 04:07 208384 c:\windows\ServicePackFiles\i386\rsaenh.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 399360 c:\windows\ServicePackFiles\i386\rpcss.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 584704 c:\windows\ServicePackFiles\i386\rpcrt4.dll
+ 2010-01-16 18:04 . 2008-04-14 05:25 202624 c:\windows\ServicePackFiles\i386\rmcast.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 433664 c:\windows\ServicePackFiles\i386\riched20.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 123392 c:\windows\ServicePackFiles\i386\riafres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 290304 c:\windows\ServicePackFiles\i386\rhttpaa.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 178176 c:\windows\ServicePackFiles\i386\repdrvfs.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 397824 c:\windows\ServicePackFiles\i386\regwizc.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 146432 c:\windows\ServicePackFiles\i386\regedit.exe
+ 2010-01-16 18:04 . 2008-04-14 10:43 139656 c:\windows\ServicePackFiles\i386\rdpwd.sys
+ 2010-01-16 18:04 . 2008-04-14 05:02 196224 c:\windows\ServicePackFiles\i386\rdpdr.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 147968 c:\windows\ServicePackFiles\i386\rdchost.dll
+ 2010-01-16 18:05 . 2008-04-14 05:58 175744 c:\windows\ServicePackFiles\i386\rdbss.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 102400 c:\windows\ServicePackFiles\i386\rcbdyctl.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 150016 c:\windows\ServicePackFiles\i386\rastls.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 210944 c:\windows\ServicePackFiles\i386\rasppp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 186368 c:\windows\ServicePackFiles\i386\rasmans.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 658432 c:\windows\ServicePackFiles\i386\rasdlg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 237056 c:\windows\ServicePackFiles\i386\rasapi32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 409088 c:\windows\ServicePackFiles\i386\qmgr.dll
+ 2010-01-16 18:05 . 2008-04-14 03:51 733696 c:\windows\ServicePackFiles\i386\qedwipes.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 562176 c:\windows\ServicePackFiles\i386\qedit.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 386048 c:\windows\ServicePackFiles\i386\qdvd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 279040 c:\windows\ServicePackFiles\i386\qdv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 192512 c:\windows\ServicePackFiles\i386\qcap.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 237568 c:\windows\ServicePackFiles\i386\qasf.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 291328 c:\windows\ServicePackFiles\i386\qagentrt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 150528 c:\windows\ServicePackFiles\i386\qagent.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 159232 c:\windows\ServicePackFiles\i386\ptpusd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 363520 c:\windows\ServicePackFiles\i386\psisdecd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 543232 c:\windows\ServicePackFiles\i386\pscript5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 728576 c:\windows\ServicePackFiles\i386\ps5ui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 237056 c:\windows\ServicePackFiles\i386\provthrd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 109568 c:\windows\ServicePackFiles\i386\progman.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 560640 c:\windows\ServicePackFiles\i386\printui.dll
+ 2010-01-16 18:04 . 2008-04-14 05:49 146048 c:\windows\ServicePackFiles\i386\portcls.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 105472 c:\windows\ServicePackFiles\i386\polstore.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 412160 c:\windows\ServicePackFiles\i386\pmh.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 281088 c:\windows\ServicePackFiles\i386\pinball.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 176128 c:\windows\ServicePackFiles\i386\photowiz.dll
+ 2010-01-16 18:05 . 2008-04-14 10:40 259328 c:\windows\ServicePackFiles\i386\perm3dd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 211584 c:\windows\ServicePackFiles\i386\perm2dll.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 284160 c:\windows\ServicePackFiles\i386\pdh.dll
+ 2010-01-16 18:04 . 2008-04-14 02:42 169984 c:\windows\ServicePackFiles\i386\pcx500.sys
+ 2010-01-16 18:04 . 2008-04-14 05:06 120192 c:\windows\ServicePackFiles\i386\pcmcia.sys
+ 2010-01-16 18:04 . 2007-05-15 18:38 207872 c:\windows\ServicePackFiles\i386\pclxl.dll
+ 2010-01-16 18:04 . 2007-05-15 18:38 288768 c:\windows\ServicePackFiles\i386\pcl4res.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 102912 c:\windows\ServicePackFiles\i386\pchshell.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 554496 c:\windows\ServicePackFiles\i386\p2psvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 115712 c:\windows\ServicePackFiles\i386\p2pnetsh.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 313856 c:\windows\ServicePackFiles\i386\p2pgraph.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 105472 c:\windows\ServicePackFiles\i386\p2pgasvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 153600 c:\windows\ServicePackFiles\i386\p2p.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 230400 c:\windows\ServicePackFiles\i386\osloader.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 215552 c:\windows\ServicePackFiles\i386\osk.exe
+ 2008-04-14 05:02 . 2008-04-14 05:02 166912 c:\windows\ServicePackFiles\i386\oschoice.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 713728 c:\windows\ServicePackFiles\i386\opengl32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 144384 c:\windows\ServicePackFiles\i386\onex.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 107008 c:\windows\ServicePackFiles\i386\oleprn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 122880 c:\windows\ServicePackFiles\i386\oledlg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 487424 c:\windows\ServicePackFiles\i386\oledb32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 551936 c:\windows\ServicePackFiles\i386\oleaut32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 192000 c:\windows\ServicePackFiles\i386\offfilt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 104448 c:\windows\ServicePackFiles\i386\oeimport.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 147456 c:\windows\ServicePackFiles\i386\odbctrac.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 278559 c:\windows\ServicePackFiles\i386\odbcjt32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 106496 c:\windows\ServicePackFiles\i386\odbccp32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 135168 c:\windows\ServicePackFiles\i386\odbcconf.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 249856 c:\windows\ServicePackFiles\i386\odbc32.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 446464 c:\windows\ServicePackFiles\i386\obrb0c0a.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 435200 c:\windows\ServicePackFiles\i386\obrb0816.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 270336 c:\windows\ServicePackFiles\i386\obrb0804.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 408576 c:\windows\ServicePackFiles\i386\obrb0424.dll
+ 2010-01-16 18:05 . 2008-04-14 05:11 390144 c:\windows\ServicePackFiles\i386\obrb041f.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 363008 c:\windows\ServicePackFiles\i386\obrb041d.dll
+ 2010-01-16 18:04 . 2008-04-14 05:10 405504 c:\windows\ServicePackFiles\i386\obrb041b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 427008 c:\windows\ServicePackFiles\i386\obrb0419.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 409600 c:\windows\ServicePackFiles\i386\obrb0416.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 391680 c:\windows\ServicePackFiles\i386\obrb0415.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 353792 c:\windows\ServicePackFiles\i386\obrb0414.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 401920 c:\windows\ServicePackFiles\i386\obrb0413.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 306688 c:\windows\ServicePackFiles\i386\obrb0412.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 275456 c:\windows\ServicePackFiles\i386\obrb0411.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 413696 c:\windows\ServicePackFiles\i386\obrb0410.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 434176 c:\windows\ServicePackFiles\i386\obrb040e.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 384000 c:\windows\ServicePackFiles\i386\obrb040d.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 410624 c:\windows\ServicePackFiles\i386\obrb040c.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 405504 c:\windows\ServicePackFiles\i386\obrb040b.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 419328 c:\windows\ServicePackFiles\i386\obrb0408.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 403456 c:\windows\ServicePackFiles\i386\obrb0407.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 418816 c:\windows\ServicePackFiles\i386\obrb0406.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 428032 c:\windows\ServicePackFiles\i386\obrb0405.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 212480 c:\windows\ServicePackFiles\i386\obrb0404.dll
+ 2010-01-16 18:05 . 2008-04-14 05:10 393728 c:\windows\ServicePackFiles\i386\obrb0401.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 286208 c:\windows\ServicePackFiles\i386\objsel.dll
+ 2010-01-16 18:05 . 2008-04-14 10:40 966656 c:\windows\ServicePackFiles\i386\obemetal.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 229376 c:\windows\ServicePackFiles\i386\obelog.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 270336 c:\windows\ServicePackFiles\i386\oakley.dll
+ 2010-01-16 18:05 . 2008-04-14 05:04 163584 c:\windows\ServicePackFiles\i386\nwrdr.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 142336 c:\windows\ServicePackFiles\i386\nwprovau.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 420864 c:\windows\ServicePackFiles\i386\ntvdm.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 143360 c:\windows\ServicePackFiles\i386\ntshrui.dll
+ 2010-01-16 18:04 . 2008-04-14 04:53 180360 c:\windows\ServicePackFiles\i386\ntmtlfax.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 435200 c:\windows\ServicePackFiles\i386\ntmssvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 488448 c:\windows\ServicePackFiles\i386\ntmsmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 179200 c:\windows\ServicePackFiles\i386\ntmsdba.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 118784 c:\windows\ServicePackFiles\i386\ntmarta.dll
+ 2008-04-14 05:45 . 2008-04-14 05:45 574976 c:\windows\ServicePackFiles\i386\ntfs.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 212992 c:\windows\ServicePackFiles\i386\ntevt.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 706048 c:\windows\ServicePackFiles\i386\ntdll.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 188416 c:\windows\ServicePackFiles\i386\nmwb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 172032 c:\windows\ServicePackFiles\i386\nmoldwb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 151552 c:\windows\ServicePackFiles\i386\nmft.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 229376 c:\windows\ServicePackFiles\i386\nmas.dll
+ 2008-04-14 02:41 . 2008-04-14 02:41 147456 c:\windows\ServicePackFiles\i386\ngen.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 247808 c:\windows\ServicePackFiles\i386\newdev.dll
+ 2010-01-16 18:04 . 2008-04-14 03:05 132695 c:\windows\ServicePackFiles\i386\netwlan5.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 245760 c:\windows\ServicePackFiles\i386\netui1.dll
+ 2008-04-14 10:46 . 2008-04-14 10:46 329728 c:\windows\ServicePackFiles\i386\netsetup.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 875008 c:\windows\ServicePackFiles\i386\netplwiz.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 198144 c:\windows\ServicePackFiles\i386\netman.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 407040 c:\windows\ServicePackFiles\i386\netlogon.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 139264 c:\windows\ServicePackFiles\i386\netid.dll
+ 2010-01-16 18:05 . 2008-04-14 02:39 126976 c:\windows\ServicePackFiles\i386\netfxocm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 111104 c:\windows\ServicePackFiles\i386\netdde.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 622592 c:\windows\ServicePackFiles\i386\netcfgx.dll
+ 2010-01-16 18:04 . 2008-04-14 05:51 162816 c:\windows\ServicePackFiles\i386\netbt.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 337408 c:\windows\ServicePackFiles\i386\netapi32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 124928 c:\windows\ServicePackFiles\i386\net1.exe
+ 2010-01-16 18:04 . 2008-04-14 05:50 182656 c:\windows\ServicePackFiles\i386\ndis.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 176640 c:\windows\ServicePackFiles\i386\napstat.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 193024 c:\windows\ServicePackFiles\i386\napmontr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 221184 c:\windows\ServicePackFiles\i386\nac.dll
+ 2010-01-16 18:04 . 2008-04-14 05:47 105344 c:\windows\ServicePackFiles\i386\mup.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 452736 c:\windows\ServicePackFiles\i386\mtxparhm.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 119808 c:\windows\ServicePackFiles\i386\mtstocom.exe
+ 2010-01-16 18:04 . 2008-04-14 04:53 126686 c:\windows\ServicePackFiles\i386\mtlmnt5.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 701440 c:\windows\ServicePackFiles\i386\msxml2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 506368 c:\windows\ServicePackFiles\i386\msxml.dll
+ 2010-01-16 18:04 . 2007-04-02 23:22 355104 c:\windows\ServicePackFiles\i386\msxbde40.dll
+ 2010-01-16 18:04 . 2007-04-02 23:21 621344 c:\windows\ServicePackFiles\i386\mswstr10.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 245248 c:\windows\ServicePackFiles\i386\mswsock.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 203776 c:\windows\ServicePackFiles\i386\mswebdvd.dll
+ 2010-01-16 18:04 . 2007-04-02 23:21 838432 c:\windows\ServicePackFiles\i386\mswdat10.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 121344 c:\windows\ServicePackFiles\i386\msvfw32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 343040 c:\windows\ServicePackFiles\i386\msvcrt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 413696 c:\windows\ServicePackFiles\i386\msvcp60.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 132608 c:\windows\ServicePackFiles\i386\msv1_0.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 195072 c:\windows\ServicePackFiles\i386\msutb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 116224 c:\windows\ServicePackFiles\i386\mstlsapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 532480 c:\windows\ServicePackFiles\i386\mstime.dll
+ 2010-01-16 18:05 . 2007-04-02 23:21 264992 c:\windows\ServicePackFiles\i386\mstext40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 274944 c:\windows\ServicePackFiles\i386\mstask.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 274432 c:\windows\ServicePackFiles\i386\mst120.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 155136 c:\windows\ServicePackFiles\i386\mssha.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 134656 c:\windows\ServicePackFiles\i386\mssap.dll
+ 2010-01-16 18:04 . 2007-04-02 23:21 559904 c:\windows\ServicePackFiles\i386\msrepl40.dll
+ 2010-01-16 18:05 . 2007-04-02 23:20 322336 c:\windows\ServicePackFiles\i386\msrd3x40.dll
+ 2010-01-16 18:04 . 2007-04-02 23:20 432928 c:\windows\ServicePackFiles\i386\msrd2x40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 146432 c:\windows\ServicePackFiles\i386\msrating.dll
+ 2010-01-16 18:04 . 2007-04-02 23:20 355104 c:\windows\ServicePackFiles\i386\mspbde40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 343040 c:\windows\ServicePackFiles\i386\mspaint.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 143360 c:\windows\ServicePackFiles\i386\msorcl32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 105984 c:\windows\ServicePackFiles\i386\msoert2.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 252928 c:\windows\ServicePackFiles\i386\msoeacct.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 565248 c:\windows\ServicePackFiles\i386\msobmain.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 122368 c:\windows\ServicePackFiles\i386\msobcomm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 290816 c:\windows\ServicePackFiles\i386\msnsspc.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 170496 c:\windows\ServicePackFiles\i386\msmqocm.dll
+ 2010-01-16 18:04 . 2007-04-02 23:19 219936 c:\windows\ServicePackFiles\i386\msltus40.dll
+ 2010-01-16 18:04 . 2007-04-02 23:19 248608 c:\windows\ServicePackFiles\i386\msjtes40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 102400 c:\windows\ServicePackFiles\i386\msjro.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 151583 c:\windows\ServicePackFiles\i386\msjint40.dll
+ 2010-01-16 18:04 . 2007-04-02 23:19 355112 c:\windows\ServicePackFiles\i386\msjetol1.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 376832 c:\windows\ServicePackFiles\i386\msinfo.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 159232 c:\windows\ServicePackFiles\i386\msimtf.dll
+ 2010-01-16 18:04 . 2008-04-14 02:09 884736 c:\windows\ServicePackFiles\i386\msimsg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 271360 c:\windows\ServicePackFiles\i386\msihnd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 248832 c:\windows\ServicePackFiles\i386\msieftp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 449024 c:\windows\ServicePackFiles\i386\mshtmled.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 294912 c:\windows\ServicePackFiles\i386\msh263.drv
+ 2010-01-16 18:04 . 2008-04-14 10:42 188416 c:\windows\ServicePackFiles\i386\msh261.drv
+ 2008-04-14 04:00 . 2008-04-14 04:00 180224 c:\windows\ServicePackFiles\i386\msgslang.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 997376 c:\windows\ServicePackFiles\i386\msgina.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 539136 c:\windows\ServicePackFiles\i386\msftedit.dll
+ 2010-01-16 18:04 . 2007-04-02 23:18 326432 c:\windows\ServicePackFiles\i386\msexcl40.dll
+ 2010-01-16 18:04 . 2007-04-02 23:17 518944 c:\windows\ServicePackFiles\i386\msexch40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 161792 c:\windows\ServicePackFiles\i386\msdtcuiu.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 956928 c:\windows\ServicePackFiles\i386\msdtctm.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 427008 c:\windows\ServicePackFiles\i386\msdtcprx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 315392 c:\windows\ServicePackFiles\i386\msdasql.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 151552 c:\windows\ServicePackFiles\i386\msdart.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 118784 c:\windows\ServicePackFiles\i386\msdarem.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 204800 c:\windows\ServicePackFiles\i386\msdaps.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 200704 c:\windows\ServicePackFiles\i386\msdaprst.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 233472 c:\windows\ServicePackFiles\i386\msdaora.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 532480 c:\windows\ServicePackFiles\i386\msdaipp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 118784 c:\windows\ServicePackFiles\i386\msdadiag.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 297984 c:\windows\ServicePackFiles\i386\msctf.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.kor.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.ja.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 167936 c:\windows\ServicePackFiles\i386\mscorrc.it.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 167936 c:\windows\ServicePackFiles\i386\mscorrc.ger.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 172032 c:\windows\ServicePackFiles\i386\mscorrc.fr.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 172032 c:\windows\ServicePackFiles\i386\mscorrc.es.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.cht.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 143360 c:\windows\ServicePackFiles\i386\mscorrc.chs.dll
+ 2007-06-27 23:25 . 2007-06-27 23:25 303104 c:\windows\ServicePackFiles\i386\mscorjit.dll
+ 2007-06-27 23:25 . 2007-06-27 23:25 131072 c:\windows\ServicePackFiles\i386\mscoree.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 221184 c:\windows\ServicePackFiles\i386\mscordbi.dll
+ 2010-01-16 18:04 . 2007-04-03 06:31 116288 c:\windows\ServicePackFiles\i386\msconv97.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 169984 c:\windows\ServicePackFiles\i386\msconfig.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 220160 c:\windows\ServicePackFiles\i386\mscandui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 200704 c:\windows\ServicePackFiles\i386\msadox.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 180224 c:\windows\ServicePackFiles\i386\msadomd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 536576 c:\windows\ServicePackFiles\i386\msado15.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 155648 c:\windows\ServicePackFiles\i386\msadds.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 143360 c:\windows\ServicePackFiles\i386\msadco.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 331776 c:\windows\ServicePackFiles\i386\msadce.dll
+ 2010-01-16 18:04 . 2008-04-14 05:47 456576 c:\windows\ServicePackFiles\i386\mrxsmb.sys
+ 2010-01-16 18:04 . 2008-04-14 05:02 180608 c:\windows\ServicePackFiles\i386\mrxdav.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 471552 c:\windows\ServicePackFiles\i386\mqutil.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 187392 c:\windows\ServicePackFiles\i386\mqtrig.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 117248 c:\windows\ServicePackFiles\i386\mqtgsvc.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 517632 c:\windows\ServicePackFiles\i386\mqsnap.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 123904 c:\windows\ServicePackFiles\i386\mqrtdep.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 177152 c:\windows\ServicePackFiles\i386\mqrt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 663040 c:\windows\ServicePackFiles\i386\mqqm.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 225280 c:\windows\ServicePackFiles\i386\mqoa.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 138240 c:\windows\ServicePackFiles\i386\mqad.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 123392 c:\windows\ServicePackFiles\i386\mplay32.exe
+ 2010-01-16 18:04 . 2008-04-14 03:15 216064 c:\windows\ServicePackFiles\i386\moricons.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 123904 c:\windows\ServicePackFiles\i386\mofd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 153600 c:\windows\ServicePackFiles\i386\modemui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 143360 c:\windows\ServicePackFiles\i386\mobsync.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 207360 c:\windows\ServicePackFiles\i386\mobsync.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 106496 c:\windows\ServicePackFiles\i386\mmcfxc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 397312 c:\windows\ServicePackFiles\i386\mmcex.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 163328 c:\windows\ServicePackFiles\i386\mmcbase.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 184320 c:\windows\ServicePackFiles\i386\mmc30.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 586240 c:\windows\ServicePackFiles\i386\mlang.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 241152 c:\windows\ServicePackFiles\i386\migwiza.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 245248 c:\windows\ServicePackFiles\i386\migwiz.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 103936 c:\windows\ServicePackFiles\i386\migload.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 261120 c:\windows\ServicePackFiles\i386\migisma.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 274432 c:\windows\ServicePackFiles\i386\migism.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 286720 c:\windows\ServicePackFiles\i386\microsoft.visualbasic.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 712704 c:\windows\ServicePackFiles\i386\microsoft.jscript.dll
+ 2010-01-16 18:04 . 2007-04-03 13:44 981760 c:\windows\ServicePackFiles\i386\mfc42u.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 927504 c:\windows\ServicePackFiles\i386\mfc40u.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 118272 c:\windows\ServicePackFiles\i386\mdminst.dll
+ 2010-01-16 18:04 . 2008-04-14 04:53 420992 c:\windows\ServicePackFiles\i386\ltmdmntt.sys
+ 2010-01-16 18:05 . 2008-04-14 04:53 606684 c:\windows\ServicePackFiles\i386\ltmdmnt.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 728064 c:\windows\ServicePackFiles\i386\lsasrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 514560 c:\windows\ServicePackFiles\i386\logonui.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 220672 c:\windows\ServicePackFiles\i386\logon.scr
+ 2010-01-16 18:04 . 2008-04-14 10:41 343040 c:\windows\ServicePackFiles\i386\localspl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 221696 c:\windows\ServicePackFiles\i386\localsec.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 399872 c:\windows\ServicePackFiles\i386\lmrt.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 423936 c:\windows\ServicePackFiles\i386\licdll.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 677888 c:\windows\ServicePackFiles\i386\lhmstsc.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 426041 c:\windows\ServicePackFiles\i386\lang\voicepad.dll
+ 2010-01-16 18:05 . 2008-04-14 03:13 455168 c:\windows\ServicePackFiles\i386\lang\tintsetp.exe
+ 2010-01-16 18:05 . 2008-04-14 10:40 175104 c:\windows\ServicePackFiles\i386\lang\pintlcsa.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 315455 c:\windows\ServicePackFiles\i386\lang\imskf.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 102456 c:\windows\ServicePackFiles\i386\lang\imlang.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 274489 c:\windows\ServicePackFiles\i386\lang\imjputyc.dll
+ 2010-01-16 18:05 . 2008-04-14 03:14 262200 c:\windows\ServicePackFiles\i386\lang\imjputy.exe
+ 2010-01-16 18:05 . 2008-04-14 03:14 233527 c:\windows\ServicePackFiles\i386\lang\imjprw.exe
+ 2010-01-16 18:05 . 2008-04-14 03:13 208952 c:\windows\ServicePackFiles\i386\lang\imjpmig.exe
+ 2010-01-16 18:05 . 2008-04-14 03:13 196665 c:\windows\ServicePackFiles\i386\lang\imjpinst.exe
+ 2010-01-16 18:05 . 2008-04-14 03:13 155705 c:\windows\ServicePackFiles\i386\lang\imjpdsvr.exe
+ 2010-01-16 18:05 . 2008-04-14 03:13 307257 c:\windows\ServicePackFiles\i386\lang\imjpdct.exe
+ 2010-01-16 18:05 . 2008-04-14 10:39 716856 c:\windows\ServicePackFiles\i386\lang\imjpcus.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 368696 c:\windows\ServicePackFiles\i386\lang\imjpcic.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 811064 c:\windows\ServicePackFiles\i386\lang\imjp81k.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 106496 c:\windows\ServicePackFiles\i386\lang\imekrcic.dll
+ 2010-01-16 18:05 . 2008-04-14 03:13 480256 c:\windows\ServicePackFiles\i386\lang\cintsetp.exe
+ 2010-01-16 18:05 . 2008-04-14 10:39 198656 c:\windows\ServicePackFiles\i386\lang\cintime.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 173568 c:\windows\ServicePackFiles\i386\lang\chtskf.dll
+ 2010-01-16 18:03 . 2008-04-14 05:46 141056 c:\windows\ServicePackFiles\i386\ks.sys
+ 2010-01-16 18:04 . 2008-04-14 10:39 102912 c:\windows\ServicePackFiles\i386\kprodpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 102912 c:\windows\ServicePackFiles\i386\kperdpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 102912 c:\windows\ServicePackFiles\i386\knprodpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 102912 c:\windows\ServicePackFiles\i386\knperdpc.dll
+ 2010-01-16 18:04 . 2008-04-14 05:15 172416 c:\windows\ServicePackFiles\i386\kmixer.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 150528 c:\windows\ServicePackFiles\i386\keymgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 989696 c:\windows\ServicePackFiles\i386\kernel32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 299520 c:\windows\ServicePackFiles\i386\kerberos.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 253952 c:\windows\ServicePackFiles\i386\kdsusd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 184832 c:\windows\ServicePackFiles\i386\kdcsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 512000 c:\windows\ServicePackFiles\i386\jscript.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 163840 c:\windows\ServicePackFiles\i386\jgdw400.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 191488 c:\windows\ServicePackFiles\i386\iuengine.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 138240 c:\windows\ServicePackFiles\i386\itss.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 155136 c:\windows\ServicePackFiles\i386\itircl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 105984 c:\windows\ServicePackFiles\i386\isendpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 105984 c:\windows\ServicePackFiles\i386\isdpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 151552 c:\windows\ServicePackFiles\i386\irftp.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 183808 c:\windows\ServicePackFiles\i386\ir50_qcx.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 200192 c:\windows\ServicePackFiles\i386\ir50_qc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 755200 c:\windows\ServicePackFiles\i386\ir50_32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 338432 c:\windows\ServicePackFiles\i386\ir41_qcx.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 120320 c:\windows\ServicePackFiles\i386\ir41_qc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 384000 c:\windows\ServicePackFiles\i386\ipsmsnap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:40 102912 c:\windows\ServicePackFiles\i386\ipseldpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 183808 c:\windows\ServicePackFiles\i386\ipsecsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 349696 c:\windows\ServicePackFiles\i386\ipsecsnp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 177152 c:\windows\ServicePackFiles\i386\iprtrmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 330752 c:\windows\ServicePackFiles\i386\ippromon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 331264 c:\windows\ServicePackFiles\i386\ipnathlp.dll
+ 2010-01-16 18:04 . 2008-04-14 05:27 152832 c:\windows\ServicePackFiles\i386\ipnat.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 161280 c:\windows\ServicePackFiles\i386\ipmontr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:39 103424 c:\windows\ServicePackFiles\i386\ipevldpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 123392 c:\windows\ServicePackFiles\i386\input.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 147456 c:\windows\ServicePackFiles\i386\initpki.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 257024 c:\windows\ServicePackFiles\i386\infocomm.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 829440 c:\windows\ServicePackFiles\i386\inetmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 691712 c:\windows\ServicePackFiles\i386\inetcomm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 274432 c:\windows\ServicePackFiles\i386\inetcfg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 123392 c:\windows\ServicePackFiles\i386\imsinsnt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 110080 c:\windows\ServicePackFiles\i386\imm32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 150528 c:\windows\ServicePackFiles\i386\imapi.exe
+ 2008-04-14 10:41 . 2008-04-14 10:41 144384 c:\windows\ServicePackFiles\i386\imagehlp.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 184320 c:\windows\ServicePackFiles\i386\ilasm.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 133632 c:\windows\ServicePackFiles\i386\iisrtl.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 145408 c:\windows\ServicePackFiles\i386\iische51.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 505344 c:\windows\ServicePackFiles\i386\iis.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 135680 c:\windows\ServicePackFiles\i386\ifmon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 114688 c:\windows\ServicePackFiles\i386\iexpress.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 251904 c:\windows\ServicePackFiles\i386\iepeers.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 323584 c:\windows\ServicePackFiles\i386\iedkcs32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 216576 c:\windows\ServicePackFiles\i386\ieaksie.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 143360 c:\windows\ServicePackFiles\i386\ieakeng.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 120832 c:\windows\ServicePackFiles\i386\idq.dll
+ 2010-01-16 18:03 . 2008-04-14 10:41 172032 c:\windows\ServicePackFiles\i386\icwhelp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 214528 c:\windows\ServicePackFiles\i386\icwconn1.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 254976 c:\windows\ServicePackFiles\i386\icm32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 119808 c:\windows\ServicePackFiles\i386\iasrad.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 161020 c:\windows\ServicePackFiles\i386\i81xnt5.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 702845 c:\windows\ServicePackFiles\i386\i81xdnt5.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 347136 c:\windows\ServicePackFiles\i386\hypertrm.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 268288 c:\windows\ServicePackFiles\i386\httpext.dll
+ 2010-01-16 18:04 . 2008-04-14 05:23 264832 c:\windows\ServicePackFiles\i386\http.sys
+ 2010-01-16 18:04 . 2008-04-14 04:53 685056 c:\windows\ServicePackFiles\i386\hsfcxts2.sys
+ 2010-01-16 18:04 . 2008-04-14 04:53 220032 c:\windows\ServicePackFiles\i386\hsfbs2s2.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 144896 c:\windows\ServicePackFiles\i386\hotplug.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 330752 c:\windows\ServicePackFiles\i386\hnetwiz.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 344064 c:\windows\ServicePackFiles\i386\hnetcfg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 744448 c:\windows\ServicePackFiles\i386\helpsvc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 769024 c:\windows\ServicePackFiles\i386\helpctr.exe
+ 2010-01-16 18:04 . 2008-04-14 03:06 144384 c:\windows\ServicePackFiles\i386\hdaudbus.sys
+ 2010-01-16 18:04 . 2008-04-14 05:01 152576 c:\windows\ServicePackFiles\i386\halmps.dll
+ 2010-01-16 18:05 . 2008-04-14 05:01 134400 c:\windows\ServicePackFiles\i386\halmacpi.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 150528 c:\windows\ServicePackFiles\i386\halapic.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 131840 c:\windows\ServicePackFiles\i386\halaacpi.dll
+ 2010-01-16 18:04 . 2008-04-14 05:01 105344 c:\windows\ServicePackFiles\i386\hal.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 614912 c:\windows\ServicePackFiles\i386\h323msp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 115200 c:\windows\ServicePackFiles\i386\guitrna.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 133120 c:\windows\ServicePackFiles\i386\guitrn.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 199680 c:\windows\ServicePackFiles\i386\gptext.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 120832 c:\windows\ServicePackFiles\i386\gprslt.exe
+ 2010-01-16 18:04 . 2008-04-14 04:08 101888 c:\windows\ServicePackFiles\i386\gpkcsp.dll
+ 2010-01-16 18:05 . 2008-04-14 10:39 566784 c:\windows\ServicePackFiles\i386\gpedit.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 122880 c:\windows\ServicePackFiles\i386\glu32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 285184 c:\windows\ServicePackFiles\i386\gdi32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 400384 c:\windows\ServicePackFiles\i386\fxsxp32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 192512 c:\windows\ServicePackFiles\i386\fxswzrd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 154112 c:\windows\ServicePackFiles\i386\fxsui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 397312 c:\windows\ServicePackFiles\i386\fxstiff.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 246272 c:\windows\ServicePackFiles\i386\fxst30.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 267776 c:\windows\ServicePackFiles\i386\fxssvc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 562176 c:\windows\ServicePackFiles\i386\fxsst.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 132608 c:\windows\ServicePackFiles\i386\fxsocm.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 229376 c:\windows\ServicePackFiles\i386\fxscover.exe
+ 2010-01-16 18:05 . 2008-04-14 10:41 285184 c:\windows\ServicePackFiles\i386\fxscomex.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 142848 c:\windows\ServicePackFiles\i386\fxsclnt.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 451584 c:\windows\ServicePackFiles\i386\fxsapi.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 233472 c:\windows\ServicePackFiles\i386\fusion.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 125952 c:\windows\ServicePackFiles\i386\ftpsv251.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 193024 c:\windows\ServicePackFiles\i386\fsquirt.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 185344 c:\windows\ServicePackFiles\i386\framedyn.dll
+ 2007-04-03 03:06 . 2007-04-03 03:06 208896 c:\windows\ServicePackFiles\i386\fpmmcsat.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 598071 c:\windows\ServicePackFiles\i386\fpmmc.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 188494 c:\windows\ServicePackFiles\i386\fpcount.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 109840 c:\windows\ServicePackFiles\i386\fp98swin.exe
+ 2008-04-14 10:41 . 2008-04-14 10:41 876653 c:\windows\ServicePackFiles\i386\fp4awel.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 618605 c:\windows\ServicePackFiles\i386\fp4autl.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 102509 c:\windows\ServicePackFiles\i386\fp4atxt.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 147513 c:\windows\ServicePackFiles\i386\fp4apws.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 184435 c:\windows\ServicePackFiles\i386\fp4amsft.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 382976 c:\windows\ServicePackFiles\i386\fontext.dll
+ 2010-01-16 18:04 . 2008-04-14 05:03 129792 c:\windows\ServicePackFiles\i386\fltmgr.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 337920 c:\windows\ServicePackFiles\i386\filemgmt.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 124928 c:\windows\ServicePackFiles\i386\fde.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 472064 c:\windows\ServicePackFiles\i386\fastprox.dll
+ 2010-01-16 18:04 . 2008-04-14 05:44 143744 c:\windows\ServicePackFiles\i386\fastfat.sys
+ 2008-04-14 10:41 . 2008-04-14 10:41 125952 c:\windows\ServicePackFiles\i386\exts.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 380445 c:\windows\ServicePackFiles\i386\expsrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 101888 c:\windows\ServicePackFiles\i386\evntagnt.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 798720 c:\windows\ServicePackFiles\i386\eventlogmessages.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 193024 c:\windows\ServicePackFiles\i386\eudcedit.exe
+ 2010-01-16 18:05 . 2008-04-14 03:06 137088 c:\windows\ServicePackFiles\i386\essm2e.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 247808 c:\windows\ServicePackFiles\i386\esscli.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 246272 c:\windows\ServicePackFiles\i386\es.dll
+ 2010-01-16 18:04 . 2007-04-03 00:57 120320 c:\windows\ServicePackFiles\i386\epcl5res.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 186880 c:\windows\ServicePackFiles\i386\encdec.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 183296 c:\windows\ServicePackFiles\i386\els.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 180224 c:\windows\ServicePackFiles\i386\eapphost.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 126976 c:\windows\ServicePackFiles\i386\eappcfg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 184832 c:\windows\ServicePackFiles\i386\eapp3hst.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 205312 c:\windows\ServicePackFiles\i386\dxtrans.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 357888 c:\windows\ServicePackFiles\i386\dxtmsft.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 619008 c:\windows\ServicePackFiles\i386\dx7vb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 180224 c:\windows\ServicePackFiles\i386\dwwin.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 304128 c:\windows\ServicePackFiles\i386\duser.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 113152 c:\windows\ServicePackFiles\i386\dsuiext.dll
+ 2010-01-16 18:04 . 2008-04-14 04:07 138752 c:\windows\ServicePackFiles\i386\dssenh.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 239104 c:\windows\ServicePackFiles\i386\dsquery.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 142848 c:\windows\ServicePackFiles\i386\dsprop.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 367616 c:\windows\ServicePackFiles\i386\dsound.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 155648 c:\windows\ServicePackFiles\i386\dskquoui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 181248 c:\windows\ServicePackFiles\i386\dsdmo.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 116736 c:\windows\ServicePackFiles\i386\dpvvox.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 212480 c:\windows\ServicePackFiles\i386\dpvoice.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 375296 c:\windows\ServicePackFiles\i386\dpnet.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 229888 c:\windows\ServicePackFiles\i386\dplayx.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 102912 c:\windows\ServicePackFiles\i386\dpcdll.dll
+ 2010-01-16 18:04 . 2008-04-14 05:09 206976 c:\windows\ServicePackFiles\i386\dot4.sys
+ 2010-01-16 18:05 . 2008-04-14 10:41 650752 c:\windows\ServicePackFiles\i386\dot3ui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 132096 c:\windows\ServicePackFiles\i386\dot3svc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 147968 c:\windows\ServicePackFiles\i386\dnsapi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 104448 c:\windows\ServicePackFiles\i386\dmusic.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 103424 c:\windows\ServicePackFiles\i386\dmsynth.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 105984 c:\windows\ServicePackFiles\i386\dmstyle.dll
+ 2010-01-16 18:04 . 2008-04-14 05:14 153344 c:\windows\ServicePackFiles\i386\dmio.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 181248 c:\windows\ServicePackFiles\i386\dmime.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 200704 c:\windows\ServicePackFiles\i386\dmdskmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 285184 c:\windows\ServicePackFiles\i386\dmdlgs.dll
+ 2010-01-16 18:04 . 2008-04-14 05:14 799744 c:\windows\ServicePackFiles\i386\dmboot.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 224768 c:\windows\ServicePackFiles\i386\dmadmin.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 163840 c:\windows\ServicePackFiles\i386\diskpart.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 181760 c:\windows\ServicePackFiles\i386\dinput8.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 158720 c:\windows\ServicePackFiles\i386\dinput.dll
+ 2010-01-16 18:04 . 2007-04-03 05:04 366080 c:\windows\ServicePackFiles\i386\digreqex.msi
+ 2010-01-16 18:05 . 2007-04-03 05:04 863232 c:\windows\ServicePackFiles\i386\digopt.msi
+ 2010-01-16 18:04 . 2007-04-03 05:04 884712 c:\windows\ServicePackFiles\i386\digcore.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 539136 c:\windows\ServicePackFiles\i386\dialer.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 379904 c:\windows\ServicePackFiles\i386\dhcpmon.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 126976 c:\windows\ServicePackFiles\i386\dhcpcsvc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 111104 c:\windows\ServicePackFiles\i386\dgnet.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 124416 c:\windows\ServicePackFiles\i386\dfrgui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 105472 c:\windows\ServicePackFiles\i386\dfrgntfs.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 282624 c:\windows\ServicePackFiles\i386\devmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 279552 c:\windows\ServicePackFiles\i386\ddraw.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 110592 c:\windows\ServicePackFiles\i386\dbnetlib.dll
+ 2008-04-14 10:41 . 2008-04-14 10:41 640000 c:\windows\ServicePackFiles\i386\dbghelp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 165376 c:\windows\ServicePackFiles\i386\datime.dll
+ 2010-01-16 18:04 . 2008-01-19 21:34 554008 c:\windows\ServicePackFiles\i386\dao360.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 824320 c:\windows\ServicePackFiles\i386\d3dim700.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 249856 c:\windows\ServicePackFiles\i386\ctmasetp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 326656 c:\windows\ServicePackFiles\i386\cscui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 139264 c:\windows\ServicePackFiles\i386\cscript.exe
+ 2007-06-27 23:23 . 2007-06-27 23:23 589824 c:\windows\ServicePackFiles\i386\cscomp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 101888 c:\windows\ServicePackFiles\i386\cscdll.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 512512 c:\windows\ServicePackFiles\i386\cryptui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 599040 c:\windows\ServicePackFiles\i386\crypt32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 163840 c:\windows\ServicePackFiles\i386\credui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 357888 c:\windows\ServicePackFiles\i386\confmsp.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 539648 c:\windows\ServicePackFiles\i386\comuid.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 167424 c:\windows\ServicePackFiles\i386\comsnap.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 274944 c:\windows\ServicePackFiles\i386\comsetup.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 792064 c:\windows\ServicePackFiles\i386\comres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 229376 c:\windows\ServicePackFiles\i386\compstui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 252928 c:\windows\ServicePackFiles\i386\compatui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 276992 c:\windows\ServicePackFiles\i386\comdlg32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 617472 c:\windows\ServicePackFiles\i386\comctl32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 195072 c:\windows\ServicePackFiles\i386\comadmin.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 185344 c:\windows\ServicePackFiles\i386\cmprops.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 344064 c:\windows\ServicePackFiles\i386\cmdial32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 389120 c:\windows\ServicePackFiles\i386\cmd.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 102912 c:\windows\ServicePackFiles\i386\clipbrd.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 498688 c:\windows\ServicePackFiles\i386\clbcatq.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 110592 c:\windows\ServicePackFiles\i386\clbcatex.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 148480 c:\windows\ServicePackFiles\i386\cic.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 188480 c:\windows\ServicePackFiles\i386\cfgwiz.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 457728 c:\windows\ServicePackFiles\i386\certmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 194560 c:\windows\ServicePackFiles\i386\certcli.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 151040 c:\windows\ServicePackFiles\i386\cdfview.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 625664 c:\windows\ServicePackFiles\i386\catsrvut.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 226304 c:\windows\ServicePackFiles\i386\catsrv.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 150016 c:\windows\ServicePackFiles\i386\capesnpn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 121856 c:\windows\ServicePackFiles\i386\camext30.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 385024 c:\windows\ServicePackFiles\i386\callcont.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 218112 c:\windows\ServicePackFiles\i386\c_g18030.dll
+ 2010-01-16 18:04 . 2008-04-14 05:16 273024 c:\windows\ServicePackFiles\i386\bthport.sys
+ 2010-01-16 18:05 . 2008-04-14 05:21 101120 c:\windows\ServicePackFiles\i386\bthpan.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 142848 c:\windows\ServicePackFiles\i386\bootcfg.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 233472 c:\windows\ServicePackFiles\i386\azroles.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 580608 c:\windows\ServicePackFiles\i386\autofmt.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 602624 c:\windows\ServicePackFiles\i386\autoconv.exe
+ 2008-04-14 10:42 . 2008-04-14 10:42 588800 c:\windows\ServicePackFiles\i386\autochk.exe
+ 2010-01-16 18:04 . 2008-04-14 10:39 285696 c:\windows\ServicePackFiles\i386\atmfd.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 516768 c:\windows\ServicePackFiles\i386\ativvaxx.dll
+ 2010-01-16 18:03 . 2008-04-14 03:04 104960 c:\windows\ServicePackFiles\i386\atinrvxx.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 870784 c:\windows\ServicePackFiles\i386\ati3d1ag.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 701440 c:\windows\ServicePackFiles\i386\ati2mtag.sys
+ 2010-01-16 18:04 . 2008-04-14 03:04 327040 c:\windows\ServicePackFiles\i386\ati2mtaa.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 201728 c:\windows\ServicePackFiles\i386\ati2dvag.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 377984 c:\windows\ServicePackFiles\i386\ati2dvaa.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 229376 c:\windows\ServicePackFiles\i386\ati2cqag.dll
+ 2008-04-14 02:40 . 2008-04-14 02:40 200704 c:\windows\ServicePackFiles\i386\aspnet_isapi.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 369664 c:\windows\ServicePackFiles\i386\asp51.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 331264 c:\windows\ServicePackFiles\i386\aqueue.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 295936 c:\windows\ServicePackFiles\i386\appmgr.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 167936 c:\windows\ServicePackFiles\i386\appmgmts.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 125952 c:\windows\ServicePackFiles\i386\apphelp.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 108544 c:\windows\ServicePackFiles\i386\appconf.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 256512 c:\windows\ServicePackFiles\i386\agentsvr.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 214016 c:\windows\ServicePackFiles\i386\agentctl.dll
+ 2010-01-16 18:04 . 2008-04-14 05:49 138112 c:\windows\ServicePackFiles\i386\afd.sys
+ 2010-01-16 18:04 . 2008-04-14 03:09 142592 c:\windows\ServicePackFiles\i386\aec.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 617472 c:\windows\ServicePackFiles\i386\advapi32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 123392 c:\windows\ServicePackFiles\i386\adsnw.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 263680 c:\windows\ServicePackFiles\i386\adsnt.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 143360 c:\windows\ServicePackFiles\i386\adsldpc.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 175616 c:\windows\ServicePackFiles\i386\adsldp.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 290816 c:\windows\ServicePackFiles\i386\adsiis51.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 116224 c:\windows\ServicePackFiles\i386\acxtrnal.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 193536 c:\windows\ServicePackFiles\i386\activeds.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 245248 c:\windows\ServicePackFiles\i386\acspecfc.dll
+ 2010-01-16 18:04 . 2008-04-14 05:06 187776 c:\windows\ServicePackFiles\i386\acpi.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 115712 c:\windows\ServicePackFiles\i386\aclui.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 141312 c:\windows\ServicePackFiles\i386\aclua.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 451072 c:\windows\ServicePackFiles\i386\aclayers.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 184320 c:\windows\ServicePackFiles\i386\accwiz.exe
+ 2010-01-16 18:04 . 2008-04-14 03:06 231552 c:\windows\ServicePackFiles\i386\ac97ali.sys
+ 2010-01-16 18:04 . 2008-04-14 10:41 136192 c:\windows\ServicePackFiles\i386\aaclient.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 100352 c:\windows\ServicePackFiles\i386\6to4svc.dll
- 2008-10-01 01:17 . 2008-04-14 12:00 1724416 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 1724416 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus.dll
- 2008-10-01 01:17 . 2008-04-14 12:00 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 1011774 c:\windows\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\mfc42u.dll
+ 2008-10-01 01:17 . 2008-04-14 12:00 1054208 c:\windows\WinSxS\InstallTemp\32205951\comctl32.dll
+ 2008-10-01 01:17 . 2008-04-14 12:00 1724416 c:\windows\WinSxS\InstallTemp\32199404\GdiPlus.dll
+ 2008-04-11 14:00 . 2008-04-14 10:42 8461312 c:\windows\system32\shell32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 4274816 c:\windows\system32\nv4_disp.dll
+ 2008-09-08 20:56 . 2008-04-14 05:54 2145280 c:\windows\system32\ntoskrnl.exe
+ 2008-04-23 04:12 . 2008-04-14 05:01 2023936 c:\windows\system32\ntkrnlpa.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 1737856 c:\windows\system32\mtxparhd.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 2134528 c:\windows\system32\inetsrv\smtpsnap.dll
- 2008-10-01 01:12 . 2009-02-13 19:35 3828008 c:\windows\system32\FNTCACHE.DAT
+ 2008-10-01 01:12 . 2010-01-16 18:08 3828008 c:\windows\system32\FNTCACHE.DAT
+ 2010-01-16 18:03 . 2008-04-14 03:04 1897408 c:\windows\system32\drivers\nv4_mini.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 1309184 c:\windows\system32\drivers\mtlstrm.sys
+ 2010-01-16 18:03 . 2008-04-14 04:53 1041536 c:\windows\system32\drivers\hsfdpsp2.sys
+ 2010-01-16 18:05 . 2008-04-14 10:42 1306624 c:\windows\system32\dllcache\msxml6.dll
+ 2008-04-14 10:42 . 2008-04-14 10:42 1695232 c:\windows\ServicePackFiles\ServicePackCache\i386\msmsgs.exe
+ 2010-01-16 18:05 . 2008-04-14 04:09 2897920 c:\windows\ServicePackFiles\i386\xpsp2res.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1135616 c:\windows\ServicePackFiles\i386\wuaueng.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 4256768 c:\windows\ServicePackFiles\i386\wmm2res.dll
+ 2010-01-16 18:04 . 2008-04-14 03:18 1647616 c:\windows\ServicePackFiles\i386\winbrand.dll
+ 2010-01-16 18:04 . 2008-04-14 06:00 1845632 c:\windows\ServicePackFiles\i386\win32k.sys
+ 2010-01-16 18:04 . 2007-01-02 01:14 1326080 c:\windows\ServicePackFiles\i386\webfldrs.msi
+ 2007-06-27 23:29 . 2007-06-27 23:29 1302528 c:\windows\ServicePackFiles\i386\system.xml.dll
+ 2007-06-27 23:29 . 2007-06-27 23:29 2002944 c:\windows\ServicePackFiles\i386\system.windows.forms.dll
+ 2007-12-17 22:30 . 2007-12-17 22:30 1200128 c:\windows\ServicePackFiles\i386\system.web.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 1695744 c:\windows\ServicePackFiles\i386\system.design.dll
+ 2007-06-27 23:28 . 2007-06-27 23:28 1179648 c:\windows\ServicePackFiles\i386\system.data.dll
+ 2007-12-17 22:29 . 2007-12-17 22:29 1179648 c:\windows\ServicePackFiles\i386\sy52106.dll
+ 2010-01-16 18:05 . 2008-04-14 05:07 2842112 c:\windows\ServicePackFiles\i386\sprb040d.dll
+ 2010-01-16 18:05 . 2008-04-14 05:05 2869248 c:\windows\ServicePackFiles\i386\sprb0401.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 2134528 c:\windows\ServicePackFiles\i386\smtpsnap.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 8461312 c:\windows\ServicePackFiles\i386\shell32.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 1499136 c:\windows\ServicePackFiles\i386\shdocvw.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1614848 c:\windows\ServicePackFiles\i386\sfcfiles.dll
+ 2010-01-16 18:05 . 2008-04-14 10:42 1435648 c:\windows\ServicePackFiles\i386\query.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1288192 c:\windows\ServicePackFiles\i386\quartz.dll
+ 2010-01-16 18:04 . 2007-05-15 18:38 1057280 c:\windows\ServicePackFiles\i386\pcl5ures.dll
+ 2010-01-16 18:04 . 2007-05-15 18:38 1058816 c:\windows\ServicePackFiles\i386\pcl5eres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1287168 c:\windows\ServicePackFiles\i386\ole32.dll
+ 2010-01-16 18:04 . 2008-04-14 03:04 1897408 c:\windows\ServicePackFiles\i386\nv4_mini.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 4274816 c:\windows\ServicePackFiles\i386\nv4_disp.dll
+ 2010-01-16 18:04 . 2008-04-14 05:57 2188928 c:\windows\ServicePackFiles\i386\ntoskrnl.exe
+ 2010-01-16 18:04 . 2008-04-14 05:01 2023936 c:\windows\ServicePackFiles\i386\ntkrpamp.exe
+ 2010-01-16 18:04 . 2008-04-14 05:01 2065792 c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
+ 2010-01-16 18:04 . 2008-04-14 05:54 2145280 c:\windows\ServicePackFiles\i386\ntkrnlmp.exe
+ 2010-01-16 18:05 . 2008-04-14 10:42 1200640 c:\windows\ServicePackFiles\i386\ntbackup.exe
+ 2010-01-16 18:04 . 2008-04-14 10:42 1703936 c:\windows\ServicePackFiles\i386\netshell.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1737856 c:\windows\ServicePackFiles\i386\mtxparhd.dll
+ 2010-01-16 18:04 . 2008-04-14 04:53 1309184 c:\windows\ServicePackFiles\i386\mtlstrm.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 1104896 c:\windows\ServicePackFiles\i386\msxml3.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1428992 c:\windows\ServicePackFiles\i386\msvidctl.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1384479 c:\windows\ServicePackFiles\i386\msvbvm60.dll
+ 2010-01-16 18:04 . 2008-04-14 02:53 2479616 c:\windows\ServicePackFiles\i386\msoeres.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1314816 c:\windows\ServicePackFiles\i386\msoe.dll
+ 2010-01-16 18:05 . 2007-04-03 05:12 1327320 c:\windows\ServicePackFiles\i386\msnsusii.exe
+ 2010-01-16 18:04 . 2007-04-03 05:12 5080576 c:\windows\ServicePackFiles\i386\msnmsgs.msi
+ 2008-04-14 10:42 . 2008-04-14 10:42 1695232 c:\windows\ServicePackFiles\i386\msmsgs.exe
+ 2010-01-16 18:04 . 2007-10-22 20:00 1516568 c:\windows\ServicePackFiles\i386\msjet40.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 2843136 c:\windows\ServicePackFiles\i386\msi.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 3066880 c:\windows\ServicePackFiles\i386\mshtml.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 3166208 c:\windows\ServicePackFiles\i386\msgr3en.dll
+ 2007-12-17 22:29 . 2007-12-17 22:29 2281472 c:\windows\ServicePackFiles\i386\mscorwks.dll
+ 2007-12-17 22:28 . 2007-12-17 22:28 2273280 c:\windows\ServicePackFiles\i386\mscorsvr.dll
+ 2007-12-17 22:28 . 2007-12-17 22:28 1998848 c:\windows\ServicePackFiles\i386\mscorlib.dll
+ 2007-06-27 23:24 . 2007-06-27 23:24 1564672 c:\windows\ServicePackFiles\i386\mscorcfg.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 3558912 c:\windows\ServicePackFiles\i386\moviemk.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 1872896 c:\windows\ServicePackFiles\i386\mmcndmgr.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1414656 c:\windows\ServicePackFiles\i386\mmc.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 1028096 c:\windows\ServicePackFiles\i386\mfc42.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 2061824 c:\windows\ServicePackFiles\i386\lhmstscx.dll
+ 2010-01-16 18:04 . 2008-04-14 04:53 1041536 c:\windows\ServicePackFiles\i386\hsfdpsp2.sys
+ 2010-01-16 18:04 . 2008-04-14 10:42 1033728 c:\windows\ServicePackFiles\i386\explorer.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 1082368 c:\windows\ServicePackFiles\i386\esent.dll
+ 2010-01-16 18:05 . 2008-04-14 10:41 2113536 c:\windows\ServicePackFiles\i386\dxdiagn.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1298432 c:\windows\ServicePackFiles\i386\dxdiag.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 1227264 c:\windows\ServicePackFiles\i386\dx8vb.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1293824 c:\windows\ServicePackFiles\i386\dsound3d.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1504256 c:\windows\ServicePackFiles\i386\diskcopy.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1054208 c:\windows\ServicePackFiles\i386\danim.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1689088 c:\windows\ServicePackFiles\i386\d3d9.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1179648 c:\windows\ServicePackFiles\i386\d3d8.dll
+ 2010-01-16 18:04 . 2008-04-14 10:42 1032192 c:\windows\ServicePackFiles\i386\conf.exe
+ 2010-01-16 18:04 . 2008-04-14 10:41 1267200 c:\windows\ServicePackFiles\i386\comsvcs.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1358848 c:\windows\ServicePackFiles\i386\cimwin32.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 2091520 c:\windows\ServicePackFiles\i386\cdosys.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1025024 c:\windows\ServicePackFiles\i386\browseui.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1888992 c:\windows\ServicePackFiles\i386\ati3duag.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1057760 c:\windows\ServicePackFiles\i386\ati3d2ag.dll
+ 2010-01-16 18:04 . 2008-04-14 10:41 1852928 c:\windows\ServicePackFiles\i386\acgenral.dll
+ 2008-04-11 14:00 . 2008-04-14 10:42 1033728 c:\windows\explorer.exe
+ 2010-01-16 18:04 . 2007-04-03 05:09 11053008 c:\windows\ServicePackFiles\i386\msncli.exe
+ 2010-01-16 18:05 . 2008-04-14 10:39 13463552 c:\windows\ServicePackFiles\i386\lang\hwxjpn.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe -scheduler" [X]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-01-16 40448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\quicktime\qttask .exe -atboottime" [X]
"RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2010-01-15 40448]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2010-01-16 40448]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2010-01-15 40448]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2010-01-16 40448]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-16 40448]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2010-01-16 40448]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2010-01-16 40448]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2010-01-16 40448]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2010-01-16 40448]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2010-01-16 40448]
"laim"="c:\program files\AIM Lite\aimlite.exe" [2010-01-16 40448]
"ControlCenter2.0"="c:\program files\Brother\ControlCenter2\brctrcen.exe" [2010-01-16 40448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2008-09-08 124928]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-10-23 114688]
nero.exe [2008-9-5 194819]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSetActiveDesktop"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonuiX.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 19:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2005-12-21 05:57 176128 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AirPort\\APAgent.exe"=
"c:\\Program Files\\Adobe\\Adobe Dreamweaver CS3\\Dreamweaver.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9000:TCP"= 9000:TCP:SqueezeCenter 9000 tcp (UI)
"9090:TCP"= 9090:TCP:SqueezeCenter 9090 tcp (CLI)
"3483:UDP"= 3483:UDP:SqueezeCenter 3483 udp
"3483:TCP"= 3483:TCP:SqueezeCenter 3483 tcp

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [1/13/2010 12:42 PM 64288]
R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [9/8/2008 4:08 PM 143360]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [1/5/2010 7:56 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [1/5/2010 7:56 AM 74480]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [1/5/2010 7:56 AM 7408]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [12/2/2009 8:19 AM 1181328]
S2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [9/19/2008 3:03 AM 65536]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\androidusb.sys [2/13/2009 11:00 AM 25728]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [1/25/2007 12:31 PM 42000]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
2008-09-08 20:53 124928 ----a-w- c:\windows\system32\advpack.dll
.
Contents of the 'Scheduled Tasks' folder

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 1).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-16 c:\windows\Tasks\Ad-Aware Update (Daily 2).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 3).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 4).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-16 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]
.
.
------- Supplementary Scan -------
.
uStart Page = https://login.quickb...;serviceid=2004
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Translate with &Babylon - c:\program files\Babylon\babylon-pro\Utils\BabylonIEPI.dll/Translate.htm
FF - ProfilePath - c:\documents and settings\Admin\Application Data\Mozilla\Firefox\Profiles\uogv0ls2.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=
FF - plugin: c:\documents and settings\Admin\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
FF - user.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-17 17:41
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
@DACL=(02 0000)
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
@DACL=(02 0000)
"NoChange"="1"
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
@DACL=(02 0000)
"Installed"="1"
@=""
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(828)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
.
Completion time: 2010-01-17 17:42:40
ComboFix-quarantined-files.txt 2010-01-17 22:42
ComboFix2.txt 2010-01-15 04:06
ComboFix3.txt 2010-01-14 23:48

Pre-Run: 412,451,545,088 bytes free
Post-Run: 412,423,258,112 bytes free

- - End Of File - - 4B007DD5B4428AE89B117B539C4E1E05

#18 jpshortstuff

Teacher Emeritus

Authentic Member
5,710 posts

Posted 17 January 2010 - 06:37 PM

OK, we just need to run a .bat file to find replacements for a few of your programs which have been hijacked. We are making good progress.

Save the following code to a file named "look.bat" as before, and then double-click to run it. A log should popup, please post it.

@echo off
if exist "%userprofile%\Desktop\log.txt" del /Q "%userprofile%\Desktop\log.txt"
echo Deleting files...
for %%g in (
"c:\program files\102586171.dat"
"c:\program files\15688671.dat"
"c:\program files\15571125.dat"
"c:\program files\15571109.dat"
"c:\program files\592890.dat"
) do (
if exist %%g (
del %%g
echo %%g deleted.
) else (
echo %%g not found.
)
)>>"%userprofile%\Desktop\log.txt"
echo Searching for replacements, please wait...
for %%g in (
SUPERAntiSpyware
qttask
NeroCheck
GrooveMonitor
avgnt
PWRISOVM
iTunesHelper
Acrobat_sl
Acrotray
APAgent
RIMAutoUpdate
RoxWatchTray9
aimlite
) do (
echo.
echo Looking for %%g*...
PEV --custom##f #s [#m] #5# %systemdrive%\%%g*
) >> "%userprofile%\Desktop\log.txt"
start notepad "%userprofile%\Desktop\log.txt"
del /Q %0

Proud Graduate of the TC/WTT Classroom

#19 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 17 January 2010 - 06:44 PM

Here it is! "c:\program files\102586171.dat" deleted. "c:\program files\15688671.dat" deleted. "c:\program files\15571125.dat" deleted. "c:\program files\15571109.dat" deleted. "c:\program files\592890.dat" deleted. Looking for SUPERAntiSpyware*... C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com 0 [2010-01-13 16:45:18] !HASH: COULD NOT OPEN FILE !!!!! C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware 0 [2010-01-13 20:22:45] !HASH: COULD NOT OPEN FILE !!!!! C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-13-2010( 11-45-43 ).SDB 331,079 [2010-01-13 17:03:22] C1066A49895E20AED16DD761004F92DE C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-13-2010( 12-10-36 ).SDB 4,168 [2010-01-13 17:42:33] 84D49539C66C8115D367D664680D3481 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-13-2010( 12-7-1 ).SDB 4,353 [2010-01-13 17:09:54] 556FC2E1C8A34474171424BE99662160 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-13-2010( 13-31-52 ).SDB 4,127 [2010-01-13 18:40:20] EDEDCD6C0C5C73E956611B1D979CB9DA C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-13-2010( 14-47-0 ).SDB 264,523 [2010-01-13 20:17:14] BC3790660CEC909011B1626F070803A2 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-13-2010( 15-20-52 ).SDB 192,847 [2010-01-13 22:23:29] D3100499B15CA5DB63FF411E6F4F6BB2 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-13-2010( 17-26-59 ).SDB 190,714 [2010-01-14 14:36:29] 24A934AC6441FACFC8D81EA58BC671C0 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-14-2010( 13-1-4 ).SDB 4,127 [2010-01-14 18:01:04] 4B89624200F681C70C132F5E0C2393EC C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-14-2010( 13-20-50 ).SDB 4,127 [2010-01-14 18:20:50] 36D3E5BBF6B0F4C2D72FA3AA184F9075 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-14-2010( 13-36-26 ).SDB 4,168 [2010-01-14 18:36:44] 5E22D5B8EBDDCBA59574D1ACD02533A3 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-14-2010( 18-45-35 ).SDB 4,168 [2010-01-15 03:59:33] 27DFF8A67B1928CE61A53F38B9E6A637 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-14-2010( 9-40-18 ).SDB 4,127 [2010-01-14 14:40:18] AEC5E344430BD0D430AAFE6CB781D01E C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\AppLogs\SUPERANTISPYWARE-1-16-2010( 13-10-24 ).SDB 4,168 [2010-01-17 22:33:42] 864D0124B434656355F17EFBE25E4049 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs\SUPERAntiSpyware Scan Log - 01-13-2010 - 12-02-53.log 7,300 [2010-01-13 17:02:53] 13FB6BD6C282AB1AEEB7149F792CAD86 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs\SUPERAntiSpyware Scan Log - 01-13-2010 - 15-06-44.log 1,322 [2010-01-13 20:06:44] 5B29FDEC8E64B1770FC12D60DA438DF8 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs\SUPERAntiSpyware Scan Log - 01-13-2010 - 15-40-44.log 465 [2010-01-13 20:40:44] AEE67DC2011F054598685BC9B1FE7553 C:\Documents and Settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\Logs\SUPERAntiSpyware Scan Log - 01-14-2010 - 08-23-40.log 465 [2010-01-14 13:23:40] 244B2B6F4F4D40FB26556B7D1D9ED48B C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 0 [2010-01-13 16:45:43] !HASH: COULD NOT OPEN FILE !!!!! C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware 0 [2010-01-13 16:45:43] !HASH: COULD NOT OPEN FILE !!!!! C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk 780 [2010-01-13 16:45:19] BFBDE169F86F39BBC94F93A94246A70C C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware 0 [2010-01-13 16:45:19] !HASH: COULD NOT OPEN FILE !!!!! C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Alternate Start.lnk 806 [2010-01-13 16:45:19] 8A87A944091EF563708894FD21E6A60D C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Free Edition.lnk 1,736 [2010-01-13 16:45:19] 35500DCE38C8DA0B7AE4436B565C82DD C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Help.lnk 836 [2010-01-13 16:45:19] 6E0D5ADDEA6AA42E5244D5199A38F121 C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Registration-Activation.lnk 1,686 [2010-01-13 16:45:19] 003110FE3D577B23CC71F8BAAE496976 C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Repair.lnk 1,882 [2010-01-13 16:45:19] EBC002B50C9EBCD97573A5D458F5897D C:\Program Files\SUPERAntiSpyware 0 [2010-01-16 18:09:22] !HASH: COULD NOT OPEN FILE !!!!! C:\Program Files\SUPERAntiSpyware\superantispyware .exe 2,002,160 [2010-01-13 17:10:12] D2D23A999F3795DEC7EC439BE1933E95 C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.chm 1,088,725 [2007-11-27 17:12:26] B717B479E425D5D58108F95789370E91 C:\Program Files\SUPERAntiSpyware\superantispyware.exe 40,448 [2010-01-16 18:09:22] 02C200DB57E674F8F73268D48BA7DB22 C:\Qoobox\Quarantine\C\Program Files\SUPERAntiSpyware 0 [2010-01-15 04:05:05] !HASH: COULD NOT OPEN FILE !!!!! C:\Qoobox\Quarantine\C\Program Files\SUPERAntiSpyware\superantispyware .exe.vir 2,002,160 [2010-01-05 12:56:02] 8C197B82337D6102A6A62CF1895DC8C2 Looking for qttask*... C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-15 04:02:28] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-16 18:09:27] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe.delme118 40,448 [2010-01-15 04:02:52] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-14 23:31:47] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-14 18:18:24] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-14 17:59:19] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-14 14:39:17] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-14 14:38:32] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-13 20:19:37] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-13 20:11:43] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask .exe 40,448 [2010-01-13 19:14:07] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\QuickTime\qttask.exe 413,696 [2008-09-06 19:09:14] 6CD5C3276C83F72677D647F27EE14ABD C:\WINDOWS\Prefetch\QTTASK .EXE-10331367.pf 28,346 [2010-01-17 02:33:51] F0CFECF5916247934D766CEDAA55F89F Looking for NeroCheck*... C:\Program Files\Common Files\Nero\Lib\nerocheck.exe 40,448 [2010-01-15 04:02:49] 02C200DB57E674F8F73268D48BA7DB22 C:\WINDOWS\Prefetch\NEROCHECK.EXE-1302EE8C.pf 22,768 [2010-01-17 02:33:50] 6194628165D36A03DB8682BAABF27294 Looking for GrooveMonitor*... C:\Program Files\Microsoft Office\Office12\groovemonitor .exe 33,648 [2007-08-24 14:00:48] 35DCD380D4D579D8B8EA91D5D8AE444C C:\Program Files\Microsoft Office\Office12\groovemonitor.exe 40,448 [2010-01-16 18:09:25] 02C200DB57E674F8F73268D48BA7DB22 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GROOVEMONITOR.EXE 31,016 [2006-10-27 07:47:42] 38D198A2DD54A67120040566A38103BA C:\WINDOWS\Prefetch\GROOVEMONITOR.EXE-2606717A.pf 29,880 [2010-01-17 02:33:50] 43EB69932A81F361C6480EFF6CDE6234 Looking for avgnt*... C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt .exe 266,497 [2008-06-12 18:28:45] 6E812818306D460D62B4ABEA9FDC6679 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe 40,448 [2010-01-15 04:02:51] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys 52,056 [2009-06-18 11:51:31] 906F73C4F6B8BA5DAABC41A1F04CECFE C:\WINDOWS\Prefetch\AVGNT.EXE-11EBE658.pf 28,976 [2010-01-17 02:33:51] 83F0380399D35741D3672CDC4853AC6B C:\WINDOWS\system32\drivers\avgntdd.sys 45,376 [2008-05-09 17:15:51] 7CC15D8DE7838734833AF9A3C2A2AF44 C:\WINDOWS\system32\drivers\avgntmgr.sys 22,336 [2008-01-21 22:11:28] 0E529566454158CEC5A65DE16D9AAB10 Looking for PWRISOVM*... C:\Program Files\PowerISO\pwrisovm .exe 167,936 [2008-07-07 07:34:59] AFC7EB091B9324C451ED12F12BBAB5BB C:\Program Files\PowerISO\pwrisovm.exe 40,448 [2010-01-16 18:09:29] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\PowerISO\pwrisovm.exe.delme119 40,448 [2010-01-15 04:02:53] 02C200DB57E674F8F73268D48BA7DB22 C:\WINDOWS\Prefetch\PWRISOVM.EXE-395F826A.pf 27,810 [2010-01-17 02:33:51] EE811CD5B528C85CD3FE074F454F5D13 Looking for iTunesHelper*... C:\Program Files\iTunes\ituneshelper .exe 289,576 [2008-10-01 22:57:12] 8EFB041989185BED47072353B73D6355 C:\Program Files\iTunes\ituneshelper.exe 40,448 [2010-01-16 18:09:30] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\iTunes\ituneshelper.exe.delme121 40,448 [2010-01-15 04:02:54] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\iTunes\iTunesHelper.Resources 0 [2008-10-21 14:03:04] !HASH: COULD NOT OPEN FILE !!!!! C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll 42,496 [2008-10-01 22:57:12] D723885BC459EEE7DB7A82CDED01C5CD C:\Program Files\iTunes\iTunesHelper.Resources\da.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 4750035615A3505C3F0A0EEECB074F9D C:\Program Files\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] DD750C2D95E642E3D95DF3DD3788886F C:\Program Files\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:12] D5EDAED18929F66E16F59713822C8410 C:\Program Files\iTunes\iTunesHelper.Resources\es.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 960B48930DFBA1E29F76446C82E4FBFB C:\Program Files\iTunes\iTunesHelper.Resources\fi.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] F37AAA7C298BE311BD20B11878C00104 C:\Program Files\iTunes\iTunesHelper.Resources\fr.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 76CAC1641A2303B24C225571B5859A8D C:\Program Files\iTunes\iTunesHelper.Resources\it.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 36AEDE6E05FE2C1DDC6AFB368B2227CA C:\Program Files\iTunes\iTunesHelper.Resources\ja.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 7797DC0596C06DB79AA92C7974E5BB7F C:\Program Files\iTunes\iTunesHelper.Resources\ko.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 687A61F0F0DF39541540DC596E842E69 C:\Program Files\iTunes\iTunesHelper.Resources\nb.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 3FA6682685E3A8CD467212EAC78962AA C:\Program Files\iTunes\iTunesHelper.Resources\nl.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 59F1C5540A4CFFF0C63E40CD11698BB8 C:\Program Files\iTunes\iTunesHelper.Resources\pl.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] F4D9C9FCDE7DE598DAD2D4A28332915F C:\Program Files\iTunes\iTunesHelper.Resources\pt.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] F0ECFBF244E5CA6972C4387F49B7D85F C:\Program Files\iTunes\iTunesHelper.Resources\pt_PT.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 038DD92D85AFB83344A5EA4173C2C64E C:\Program Files\iTunes\iTunesHelper.Resources\ru.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 9E97825906FD2E226A442A7F9EA4D26E C:\Program Files\iTunes\iTunesHelper.Resources\sv.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] B894CD4833BBF119DB6BFC6FBF88E8CA C:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 34A61CD3E1750D364238C7D066B52F97 C:\Program Files\iTunes\iTunesHelper.Resources\zh_TW.lproj\iTunesHelperLocalized.dll 43,520 [2008-10-01 22:57:30] 4A90AD03C6EBD493E83A952B3597FCB8 C:\WINDOWS\Prefetch\ITUNESHELPER.EXE-15823303.pf 29,426 [2010-01-16 18:09:29] BA8A5E515D1C64B9C6418CF0AA9E000B Looking for Acrobat_sl*... C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe 37,232 [2008-06-12 07:25:18] 35FD33EAE23AF69715EE3231A9F15B82 C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe 40,448 [2010-01-16 18:09:31] 02C200DB57E674F8F73268D48BA7DB22 C:\WINDOWS\Prefetch\ACROBAT_SL.EXE-058EE1B0.pf 14,426 [2010-01-16 18:09:26] 9A4E1D51EC2DA0634474F719668A5A05 Looking for Acrotray*... C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe 640,376 [2008-06-12 03:43:26] 0FE0EDF01CEA3BEB2E65A904BB87525E C:\Program Files\Adobe\Acrobat 9.0\Acrobat\AcroTray.DEU 19,968 [2008-06-12 07:19:28] 9818FF792CB0FE3A7C226FB5AA194010 C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe 40,448 [2010-01-16 18:09:32] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe.delme123 40,448 [2010-01-15 04:02:57] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\Adobe\Acrobat 9.0\Acrobat\AcroTray.FRA 19,968 [2008-06-12 07:08:38] 35B000440DF7855DA29CA7DF50D6952D C:\WINDOWS\Prefetch\ACROTRAY .EXE-063D4710.pf 17,194 [2010-01-16 18:09:31] B8A1335D46C501AA14E9E2A4645E6500 Looking for APAgent*... C:\Program Files\AirPort\apagent .exe 737,280 [2008-05-20 20:17:42] D9E930B47AF5B2366B2498A57C95D1A3 C:\Program Files\AirPort\apagent.exe 40,448 [2010-01-16 18:09:33] 02C200DB57E674F8F73268D48BA7DB22 Looking for RIMAutoUpdate*... C:\Program Files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe 615,696 [2008-11-04 17:09:58] 5134D42A5C3EC541663FBACBCB98B689 C:\Program Files\Common Files\Research In Motion\Auto Update\rimautoupdate.exe 40,448 [2010-01-16 18:09:34] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\Common Files\Research In Motion\Auto Update\rimautoupdate.exe.delme125 40,448 [2010-01-15 04:03:00] 02C200DB57E674F8F73268D48BA7DB22 Looking for RoxWatchTray9*... C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe 236,016 [2008-09-19 15:37:50] E512C8C8FB093221BB667250F253EBE9 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9.exe 40,448 [2010-01-16 18:09:35] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9.exe.delme126 40,448 [2010-01-15 04:03:01] 02C200DB57E674F8F73268D48BA7DB22 Looking for aimlite*... C:\Program Files\AIM Lite\aimlite .exe 765,952 [2007-06-07 17:11:08] 8CA1F87A641979FFDFC4ED6DEA266C1F C:\Program Files\AIM Lite\aimlite.exe 40,448 [2010-01-16 18:09:36] 02C200DB57E674F8F73268D48BA7DB22 C:\Program Files\AIM Lite\aimlite.exe.delme127 40,448 [2010-01-15 04:03:02] 02C200DB57E674F8F73268D48BA7DB22

#20 jpshortstuff

Teacher Emeritus

Authentic Member
5,710 posts

Posted 17 January 2010 - 07:00 PM

I'm afraid Nero does not have any valid replacements available, so you will have to re-install it if you wish to continue using it. I will disable the automatic startup of the hijacked .exe and delete it. If you attempt to use Nero before re-installing it you will most likely receive an error. If you decide you don't wish to use it, you can just uninstall it.

OK, let's deal with the replacements of the rest other programs. We will do this with another CFScript, so please use the following code and save to a file to drag onto ComboFix as before. Post the ComboFix log when done.

FCOPY::
c:\windows\ServicePackFiles\i386\tcpip.sys | c:\windows\system32\drivers\tcpip.sys
C:\Program Files\SUPERAntiSpyware\superantispyware .exe | C:\Program Files\SUPERAntiSpyware\superantispyware.exe
C:\Program Files\Microsoft Office\Office12\groovemonitor .exe | C:\Program Files\Microsoft Office\Office12\groovemonitor.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt .exe | C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\PowerISO\pwrisovm .exe | C:\Program Files\PowerISO\pwrisovm.exe
C:\Program Files\iTunes\ituneshelper .exe | C:\Program Files\iTunes\ituneshelper.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe | C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe | C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\AirPort\apagent .exe | C:\Program Files\AirPort\apagent.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe | C:\Program Files\Common Files\Research In Motion\Auto Update\rimautoupdate.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe | C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9.exe
C:\Program Files\AIM Lite\aimlite .exe | C:\Program Files\AIM Lite\aimlite.exe

File::
C:\Program Files\QuickTime\qttask .exe.delme118
C:\Program Files\PowerISO\pwrisovm.exe.delme119
C:\Program Files\iTunes\ituneshelper.exe.delme121
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe.delme123
C:\Program Files\Common Files\Research In Motion\Auto Update\rimautoupdate.exe.delme125
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9.exe.delme12
C:\Program Files\AIM Lite\aimlite.exe.delme127
C:\Program Files\Common Files\Nero\Lib\nerocheck.exe

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe"
"NeroFilterCheck"=-

Proud Graduate of the TC/WTT Classroom

#21 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 17 January 2010 - 07:10 PM

ComboFix 10-01-16.04 - Admin 01/17/2010 20:04:23.4.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2216 [GMT -5:00]
Running from: c:\documents and settings\Admin\Desktop\Combo-F.exe
Command switches used :: c:\documents and settings\Admin\Desktop\CFScript.txt
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe.delme123"
"c:\program files\AIM Lite\aimlite.exe.delme127"
"c:\program files\Common Files\Nero\Lib\nerocheck.exe"
"c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate.exe.delme125"
"c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9.exe.delme12"
"c:\program files\iTunes\ituneshelper.exe.delme121"
"c:\program files\PowerISO\pwrisovm.exe.delme119"
"c:\program files\QuickTime\qttask .exe.delme118"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe.delme123
c:\program files\AIM Lite\aimlite.exe.delme127
c:\program files\Common Files\Nero\Lib\nerocheck.exe
c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate.exe.delme125
c:\program files\iTunes\ituneshelper.exe.delme121
c:\program files\PowerISO\pwrisovm.exe.delme119

.
--------------- FCopy ---------------

c:\windows\ServicePackFiles\i386\tcpip.sys --> c:\windows\system32\drivers\tcpip.sys
c:\program files\SUPERAntiSpyware\superantispyware .exe --> c:\program files\SUPERAntiSpyware\superantispyware.exe
c:\program files\Microsoft Office\Office12\groovemonitor .exe --> c:\program files\Microsoft Office\Office12\groovemonitor.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt .exe --> c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
c:\program files\PowerISO\pwrisovm .exe --> c:\program files\PowerISO\pwrisovm.exe
c:\program files\iTunes\ituneshelper .exe --> c:\program files\iTunes\ituneshelper.exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe --> c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe --> c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
c:\program files\AirPort\apagent .exe --> c:\program files\AirPort\apagent.exe
c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe --> c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate.exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe --> c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9.exe
c:\program files\AIM Lite\aimlite .exe --> c:\program files\AIM Lite\aimlite.exe
.
((((((((((((((((((((((((( Files Created from 2009-12-18 to 2010-01-18 )))))))))))))))))))))))))))))))
.

2010-01-16 18:03 . 2008-04-14 10:41 21183 ------w- c:\windows\system32\drivers\atv01nt5.dll
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\xircom
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\wbem\snmp
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\program files\microsoft frontpage
2010-01-14 14:32 . 2010-01-14 14:32 -------- d-----w- c:\program files\ERUNT
2010-01-14 14:25 . 2010-01-14 14:25 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-01-13 19:06 . 2009-12-02 13:19 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-01-13 17:41 . 2010-01-13 17:41 6296864 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Resources.dll
2010-01-13 17:41 . 2010-01-13 17:41 933120 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\CEAPI.dll
2010-01-13 17:41 . 2010-01-13 17:41 816272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
2010-01-13 17:41 . 2010-01-13 17:41 822904 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
2010-01-13 17:41 . 2010-01-13 17:41 1643272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
2010-01-13 17:41 . 2010-01-13 17:41 788880 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe
2010-01-13 17:41 . 2010-01-13 17:41 1181328 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe
2010-01-13 17:11 . 2010-01-13 17:11 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-01-13 17:11 . 2009-12-07 14:10 2953352 -c--a-w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
2010-01-13 17:11 . 2010-01-13 17:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-01-13 17:11 . 2010-01-13 17:11 -------- d-----w- c:\program files\Lavasoft
2010-01-13 17:11 . 2010-01-13 18:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-13 17:11 . 2010-01-13 17:14 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-13 17:08 . 2010-01-13 17:08 -------- d-----w- c:\program files\Trend Micro
2010-01-13 16:46 . 2010-01-13 16:46 -------- d-----w- c:\program files\CCleaner
2010-01-13 16:46 . 2010-01-13 16:46 52224 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-01-13 16:46 . 2010-01-13 16:46 117760 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-18 01:04 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-11 17:17 . 2010-01-11 17:17 552 ----a-w- c:\windows\system32\d3d8caps.dat
2010-01-11 17:17 . 2010-01-12 16:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\Admin\Application Data\Malwarebytes
2009-12-19 16:34 . 2009-12-03 21:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-19 16:33 . 2009-12-19 16:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-19 16:33 . 2009-12-03 21:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-18 01:06 . 2008-10-21 14:02 -------- d-----w- c:\program files\iTunes
2010-01-18 01:06 . 2008-10-21 13:59 -------- d-----w- c:\program files\PowerISO
2010-01-18 01:05 . 2009-02-18 01:41 -------- d-----w- c:\program files\AIM Lite
2010-01-18 01:04 . 2008-12-12 16:12 -------- d-----w- c:\program files\AirPort
2010-01-17 00:19 . 2008-10-01 08:42 611792 ----a-w- c:\documents and settings\Admin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-16 18:09 . 2008-10-13 21:42 -------- d-----w- c:\program files\QuickTime
2010-01-14 18:07 . 2009-02-17 00:46 -------- d-----w- c:\program files\PokerTracker 3
2010-01-14 18:06 . 2008-10-01 08:25 -------- d-----w- c:\program files\Styler
2010-01-14 18:05 . 2009-02-09 20:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Rosetta Stone
2010-01-13 22:19 . 2008-10-01 08:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Babylon
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592875.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592859.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592843.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592796.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592781.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592765.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592750.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592734.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592718.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592703.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592687.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592671.dat
2010-01-13 16:40 . 2010-01-13 16:40 4 ----a-w- c:\program files\592656.dat
2010-01-13 16:12 . 2008-10-01 08:36 -------- d-----w- c:\program files\AutoPlay Media Studio 7.0
2009-12-26 23:19 . 2009-10-27 19:00 -------- d-----w- c:\documents and settings\Admin\Application Data\vlc
2009-12-25 03:51 . 2009-11-19 13:42 79488 ----a-w- c:\documents and settings\Admin\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-19 18:46 . 2008-04-14 12:00 96512 ------w- c:\windows\system32\drivers\atapi.sys
2009-12-19 14:57 . 2008-10-10 21:01 -------- d-----w- c:\documents and settings\Admin\Application Data\uTorrent
2009-12-02 13:19 . 2010-01-13 17:42 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
.

<pre>
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe
c:\program files\AIM Lite\aimlite .exe
c:\program files\AirPort\apagent .exe
c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt .exe
c:\program files\Babylon\Babylon-Pro\babylon .exe
c:\program files\Brother\ControlCenter2\brctrcen .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm   .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr	.exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr   .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr  .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe
c:\program files\iTunes\ituneshelper .exe
c:\program files\Microsoft Office\Office12\groovemonitor .exe
c:\program files\PowerISO\pwrisovm .exe
c:\program files\QuickTime\qttask		  .exe
c:\program files\QuickTime\qttask		 .exe
c:\program files\QuickTime\qttask		.exe
c:\program files\QuickTime\qttask	   .exe
c:\program files\QuickTime\qttask	  .exe
c:\program files\QuickTime\qttask	 .exe
c:\program files\QuickTime\qttask	.exe
c:\program files\QuickTime\qttask   .exe
c:\program files\QuickTime\qttask  .exe
c:\program files\QuickTime\qttask .exe
c:\program files\SUPERAntiSpyware\superantispyware .exe
</pre>

((((((((((((((((((((((((((((( SnapShot_2010-01-17_22.41.21 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-09-08 20:56 . 2008-04-14 05:50 361344 c:\windows\system32\dllcache\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe -scheduler" [X]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-01-13 2002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\quicktime\qttask .exe -atboottime" [X]
"RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2008-07-07 167936]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-12 640376]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2008-05-20 737280]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-11-04 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"laim"="c:\program files\AIM Lite\aimlite.exe" [2007-06-07 765952]
"ControlCenter2.0"="c:\program files\Brother\ControlCenter2\brctrcen.exe" [2010-01-16 40448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2008-09-08 124928]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-10-23 114688]
nero.exe [2008-9-5 194819]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSetActiveDesktop"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonuiX.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 19:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2005-12-21 05:57 176128 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AirPort\\APAgent.exe"=
"c:\\Program Files\\Adobe\\Adobe Dreamweaver CS3\\Dreamweaver.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9000:TCP"= 9000:TCP:SqueezeCenter 9000 tcp (UI)
"9090:TCP"= 9090:TCP:SqueezeCenter 9090 tcp (CLI)
"3483:UDP"= 3483:UDP:SqueezeCenter 3483 udp
"3483:TCP"= 3483:TCP:SqueezeCenter 3483 tcp

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [1/13/2010 12:42 PM 64288]
R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [9/8/2008 4:08 PM 143360]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [1/5/2010 7:56 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [1/5/2010 7:56 AM 74480]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [1/5/2010 7:56 AM 7408]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [12/2/2009 8:19 AM 1181328]
S2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [9/19/2008 3:03 AM 65536]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\androidusb.sys [2/13/2009 11:00 AM 25728]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [1/25/2007 12:31 PM 42000]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
2008-09-08 20:53 124928 ----a-w- c:\windows\system32\advpack.dll
.
Contents of the 'Scheduled Tasks' folder

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 1).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 2).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 3).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 4).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-16 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]
.
.
------- Supplementary Scan -------
.
uStart Page = https://login.quickb...;serviceid=2004
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Translate with &Babylon - c:\program files\Babylon\babylon-pro\Utils\BabylonIEPI.dll/Translate.htm
FF - ProfilePath - c:\documents and settings\Admin\Application Data\Mozilla\Firefox\Profiles\uogv0ls2.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=
FF - plugin: c:\documents and settings\Admin\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
FF - user.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-17 20:06
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
@DACL=(02 0000)
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
@DACL=(02 0000)
"NoChange"="1"
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
@DACL=(02 0000)
"Installed"="1"
@=""
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(828)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
.
Completion time: 2010-01-17 20:07:14
ComboFix-quarantined-files.txt 2010-01-18 01:07
ComboFix2.txt 2010-01-17 22:42
ComboFix3.txt 2010-01-15 04:06
ComboFix4.txt 2010-01-14 23:48

Pre-Run: 412,427,902,976 bytes free
Post-Run: 412,410,507,264 bytes free

- - End Of File - - 9E2776F961871EDDE30F21754F550D7E

#22 jpshortstuff

Teacher Emeritus

Authentic Member
5,710 posts

Posted 17 January 2010 - 07:32 PM

We're getting there, just a couple more programs to sort out. Please run this CFScript, same as before.

File::
c:\program files\592875.dat
c:\program files\592859.dat
c:\program files\592843.dat
c:\program files\592796.dat
c:\program files\592781.dat
c:\program files\592765.dat
c:\program files\592750.dat
c:\program files\592734.dat
c:\program files\592718.dat
c:\program files\592703.dat
c:\program files\592687.dat
c:\program files\592671.dat
c:\program files\592656.dat

FCOPY::
c:\program files\Common Files\InstallShield\UpdateService\isuspm   .exe | c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe
c:\program files\QuickTime\qttask		  .exe | c:\program files\QuickTime\qttask.exe
c:\program files\Brother\ControlCenter2\brctrcen .exe | c:\program files\Brother\ControlCenter2\brctrcen.exe

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe -scheduler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\quicktime\qttask.exe -atboottime"

Once rebooted, please run MBAM, update it, and run a full system scan. Post the MBAM and ComboFix logs in your ext reply. How are things running?

Proud Graduate of the TC/WTT Classroom

#23 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 17 January 2010 - 07:50 PM

Looks like MBAM is clean. Combofix log below. It didn't prompt for a reboot- but I did reboot after CF finished running.
Everything seems to be running ok. Except google toolbar for firefox search results appear at liveinfopro.com instead of google.com results.
The results look like a google results page, but is actually liveinfopro.com -- any thoughts?

Malwarebytes' Anti-Malware 1.42
Database version: 3393
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

1/17/2010 8:44:40 PM
mbam-log-2010-01-17 (20-44-40).txt

Scan type: Quick Scan
Objects scanned: 126131
Time elapsed: 3 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

ComboFix 10-01-16.04 - Admin 01/17/2010 20:34:36.5.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2143 [GMT -5:00]
Running from: c:\documents and settings\Admin\Desktop\Combo-F.exe
Command switches used :: c:\documents and settings\Admin\Desktop\CFScript.txt
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\program files\592656.dat"
"c:\program files\592671.dat"
"c:\program files\592687.dat"
"c:\program files\592703.dat"
"c:\program files\592718.dat"
"c:\program files\592734.dat"
"c:\program files\592750.dat"
"c:\program files\592765.dat"
"c:\program files\592781.dat"
"c:\program files\592796.dat"
"c:\program files\592843.dat"
"c:\program files\592859.dat"
"c:\program files\592875.dat"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\592656.dat
c:\program files\592671.dat
c:\program files\592687.dat
c:\program files\592703.dat
c:\program files\592718.dat
c:\program files\592734.dat
c:\program files\592750.dat
c:\program files\592765.dat
c:\program files\592781.dat
c:\program files\592796.dat
c:\program files\592843.dat
c:\program files\592859.dat
c:\program files\592875.dat

.
--------------- FCopy ---------------

c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe --> c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe
c:\program files\QuickTime\qttask .exe --> c:\program files\QuickTime\qttask.exe
c:\program files\Brother\ControlCenter2\brctrcen .exe --> c:\program files\Brother\ControlCenter2\brctrcen.exe
.
((((((((((((((((((((((((( Files Created from 2009-12-18 to 2010-01-18 )))))))))))))))))))))))))))))))
.

2010-01-16 18:03 . 2008-04-14 10:41 21183 ------w- c:\windows\system32\drivers\atv01nt5.dll
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\xircom
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\wbem\snmp
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\program files\microsoft frontpage
2010-01-14 14:32 . 2010-01-14 14:32 -------- d-----w- c:\program files\ERUNT
2010-01-14 14:25 . 2010-01-14 14:25 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-01-13 19:06 . 2009-12-02 13:19 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-01-13 17:41 . 2010-01-13 17:41 6296864 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Resources.dll
2010-01-13 17:41 . 2010-01-13 17:41 933120 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\CEAPI.dll
2010-01-13 17:41 . 2010-01-13 17:41 816272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
2010-01-13 17:41 . 2010-01-13 17:41 822904 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
2010-01-13 17:41 . 2010-01-13 17:41 1643272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
2010-01-13 17:41 . 2010-01-13 17:41 788880 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe
2010-01-13 17:41 . 2010-01-13 17:41 1181328 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe
2010-01-13 17:11 . 2010-01-13 17:11 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-01-13 17:11 . 2009-12-07 14:10 2953352 -c--a-w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
2010-01-13 17:11 . 2010-01-13 17:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-01-13 17:11 . 2010-01-13 17:11 -------- d-----w- c:\program files\Lavasoft
2010-01-13 17:11 . 2010-01-13 18:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-13 17:11 . 2010-01-13 17:14 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-13 17:08 . 2010-01-13 17:08 -------- d-----w- c:\program files\Trend Micro
2010-01-13 16:46 . 2010-01-13 16:46 -------- d-----w- c:\program files\CCleaner
2010-01-13 16:46 . 2010-01-13 16:46 52224 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-01-13 16:46 . 2010-01-13 16:46 117760 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-18 01:04 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-11 17:17 . 2010-01-11 17:17 552 ----a-w- c:\windows\system32\d3d8caps.dat
2010-01-11 17:17 . 2010-01-12 16:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\Admin\Application Data\Malwarebytes
2009-12-19 16:34 . 2009-12-03 21:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-19 16:33 . 2009-12-19 16:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-19 16:33 . 2009-12-03 21:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-18 01:34 . 2008-10-13 21:42 -------- d-----w- c:\program files\QuickTime
2010-01-18 01:06 . 2008-10-21 14:02 -------- d-----w- c:\program files\iTunes
2010-01-18 01:06 . 2008-10-21 13:59 -------- d-----w- c:\program files\PowerISO
2010-01-18 01:05 . 2009-02-18 01:41 -------- d-----w- c:\program files\AIM Lite
2010-01-18 01:04 . 2008-12-12 16:12 -------- d-----w- c:\program files\AirPort
2010-01-17 00:19 . 2008-10-01 08:42 611792 ----a-w- c:\documents and settings\Admin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-14 18:07 . 2009-02-17 00:46 -------- d-----w- c:\program files\PokerTracker 3
2010-01-14 18:06 . 2008-10-01 08:25 -------- d-----w- c:\program files\Styler
2010-01-14 18:05 . 2009-02-09 20:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Rosetta Stone
2010-01-13 22:19 . 2008-10-01 08:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Babylon
2010-01-13 16:12 . 2008-10-01 08:36 -------- d-----w- c:\program files\AutoPlay Media Studio 7.0
2009-12-26 23:19 . 2009-10-27 19:00 -------- d-----w- c:\documents and settings\Admin\Application Data\vlc
2009-12-25 03:51 . 2009-11-19 13:42 79488 ----a-w- c:\documents and settings\Admin\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-19 18:46 . 2008-04-14 12:00 96512 ------w- c:\windows\system32\drivers\atapi.sys
2009-12-19 14:57 . 2008-10-10 21:01 -------- d-----w- c:\documents and settings\Admin\Application Data\uTorrent
2009-12-02 13:19 . 2010-01-13 17:42 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
.

<pre>
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe
c:\program files\AIM Lite\aimlite .exe
c:\program files\AirPort\apagent .exe
c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt .exe
c:\program files\Babylon\Babylon-Pro\babylon .exe
c:\program files\Brother\ControlCenter2\brctrcen .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm   .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr	.exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr   .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr  .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe
c:\program files\iTunes\ituneshelper .exe
c:\program files\Microsoft Office\Office12\groovemonitor .exe
c:\program files\PowerISO\pwrisovm .exe
c:\program files\QuickTime\qttask		  .exe
c:\program files\QuickTime\qttask		 .exe
c:\program files\QuickTime\qttask		.exe
c:\program files\QuickTime\qttask	   .exe
c:\program files\QuickTime\qttask	  .exe
c:\program files\QuickTime\qttask	 .exe
c:\program files\QuickTime\qttask	.exe
c:\program files\QuickTime\qttask   .exe
c:\program files\QuickTime\qttask  .exe
c:\program files\QuickTime\qttask .exe
c:\program files\SUPERAntiSpyware\superantispyware .exe
</pre>

((((((((((((((((((((((((((((( SnapShot_2010-01-17_22.41.21 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-09-08 20:56 . 2008-04-14 05:50 361344 c:\windows\system32\drivers\tcpip.sys
+ 2008-09-08 20:56 . 2008-04-14 05:50 361344 c:\windows\system32\dllcache\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe -scheduler" [X]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-01-13 2002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\quicktime\qttask .exe -atboottime" [X]
"RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2008-07-07 167936]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-12 640376]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2008-05-20 737280]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-11-04 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"laim"="c:\program files\AIM Lite\aimlite.exe" [2007-06-07 765952]
"ControlCenter2.0"="c:\program files\Brother\ControlCenter2\brctrcen.exe" [2005-01-07 864256]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2008-09-08 124928]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-10-23 114688]
nero.exe [2008-9-5 194819]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSetActiveDesktop"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonuiX.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 19:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2005-12-21 05:57 176128 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AirPort\\APAgent.exe"=
"c:\\Program Files\\Adobe\\Adobe Dreamweaver CS3\\Dreamweaver.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9000:TCP"= 9000:TCP:SqueezeCenter 9000 tcp (UI)
"9090:TCP"= 9090:TCP:SqueezeCenter 9090 tcp (CLI)
"3483:UDP"= 3483:UDP:SqueezeCenter 3483 udp
"3483:TCP"= 3483:TCP:SqueezeCenter 3483 tcp

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [1/13/2010 12:42 PM 64288]
R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [9/8/2008 4:08 PM 143360]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [1/5/2010 7:56 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [1/5/2010 7:56 AM 74480]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [1/5/2010 7:56 AM 7408]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [12/2/2009 8:19 AM 1181328]
S2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [9/19/2008 3:03 AM 65536]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\androidusb.sys [2/13/2009 11:00 AM 25728]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [1/25/2007 12:31 PM 42000]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
2008-09-08 20:53 124928 ----a-w- c:\windows\system32\advpack.dll
.
Contents of the 'Scheduled Tasks' folder

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 1).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 2).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 3).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-17 c:\windows\Tasks\Ad-Aware Update (Daily 4).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-16 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]
.
.
------- Supplementary Scan -------
.
uStart Page = https://login.quickb...;serviceid=2004
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Translate with &Babylon - c:\program files\Babylon\babylon-pro\Utils\BabylonIEPI.dll/Translate.htm
FF - ProfilePath - c:\documents and settings\Admin\Application Data\Mozilla\Firefox\Profiles\uogv0ls2.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=
FF - plugin: c:\documents and settings\Admin\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
FF - user.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-17 20:36
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
@DACL=(02 0000)
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
@DACL=(02 0000)
"NoChange"="1"
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
@DACL=(02 0000)
"Installed"="1"
@=""
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(828)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
.
Completion time: 2010-01-17 20:37:21
ComboFix-quarantined-files.txt 2010-01-18 01:37
ComboFix2.txt 2010-01-18 01:07
ComboFix3.txt 2010-01-17 22:42
ComboFix4.txt 2010-01-15 04:06
ComboFix5.txt 2010-01-18 01:34

Pre-Run: 412,414,140,416 bytes free
Post-Run: 412,403,089,408 bytes free

- - End Of File - - 92C7D89C068C6D096050284E061A5D63

#24 jpshortstuff

Teacher Emeritus

Authentic Member
5,710 posts

Posted 18 January 2010 - 03:32 AM

OK, good. One more CFScript - this one should sort out your Firefox search problem as well as cleaning up after all the replacing we had to do.

File::
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe
c:\program files\AIM Lite\aimlite .exe
c:\program files\AirPort\apagent .exe
c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt .exe
c:\program files\Babylon\Babylon-Pro\babylon .exe
c:\program files\Brother\ControlCenter2\brctrcen .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm   .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr	.exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr   .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr  .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe
c:\program files\iTunes\ituneshelper .exe
c:\program files\Microsoft Office\Office12\groovemonitor .exe
c:\program files\PowerISO\pwrisovm .exe
c:\program files\QuickTime\qttask		  .exe
c:\program files\QuickTime\qttask		 .exe
c:\program files\QuickTime\qttask		.exe
c:\program files\QuickTime\qttask	   .exe
c:\program files\QuickTime\qttask	  .exe
c:\program files\QuickTime\qttask	 .exe
c:\program files\QuickTime\qttask	.exe
c:\program files\QuickTime\qttask   .exe
c:\program files\QuickTime\qttask  .exe
c:\program files\QuickTime\qttask .exe
c:\program files\SUPERAntiSpyware\superantispyware .exe

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSetActiveDesktop"=-

Firefox::
FF - ProfilePath - c:\documents and settings\Admin\Application Data\Mozilla\Firefox\Profiles\uogv0ls2.default\
FF - prefs.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=
FF - user.js: keyword.URL - hxxp://search.liveinfopro.com/?sid=30101011100&s=.

Eset online scannner

You can use either Internet Explorer or Mozilla FireFox for this scan.

Please go here then click on:

Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
Select the option YES, I accept the Terms of Use then click on:
When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
Now click on Advanced Settings and select the following:
- Scan for potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth Technology
Now click on:
The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
When completed the Online Scan will begin automatically.
Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
Now click on:
Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
Copy and paste that log as a reply to this topic.

Proud Graduate of the TC/WTT Classroom

#25 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 18 January 2010 - 08:13 AM

ESET found a bunch of stuff: The Logs are below. -Ed

Combofix Log:
ComboFix 10-01-17.02 - Admin 01/18/2010 7:48.6.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2300 [GMT -5:00]
Running from: c:\documents and settings\Admin\Desktop\Combo-F.exe
Command switches used :: c:\documents and settings\Admin\Desktop\CFScript.txt
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe"
"c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe"
"c:\program files\AIM Lite\aimlite .exe"
"c:\program files\AirPort\apagent .exe"
"c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe"
"c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt .exe"
"c:\program files\Babylon\Babylon-Pro\babylon .exe"
"c:\program files\Brother\ControlCenter2\brctrcen .exe"
"c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe"
"c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe"
"c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe"
"c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe"
"c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe"
"c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe"
"c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe"
"c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe"
"c:\program files\iTunes\ituneshelper .exe"
"c:\program files\Microsoft Office\Office12\groovemonitor .exe"
"c:\program files\PowerISO\pwrisovm .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\QuickTime\qttask .exe"
"c:\program files\SUPERAntiSpyware\superantispyware .exe"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Admin\rthdcpl .exe
c:\documents and settings\Admin\rthdcpl.exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl .exe
c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray .exe
c:\program files\AIM Lite\aimlite .exe
c:\program files\AirPort\apagent .exe
c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt .exe
c:\program files\Babylon\Babylon-Pro\babylon .exe
c:\program files\Brother\ControlCenter2\brctrcen .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe
c:\program files\Common Files\InstallShield\UpdateService\isuspm .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Nero\Lib\nmindexstoresvr .exe
c:\program files\Common Files\Research In Motion\Auto Update\rimautoupdate .exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\roxwatchtray9 .exe
c:\program files\Internet Explorer\wmpscfgs .exe
c:\program files\Internet Explorer\wmpscfgs.exe
c:\program files\iTunes\ituneshelper .exe
c:\program files\Microsoft Office\Office12\groovemonitor .exe
c:\program files\PowerISO\pwrisovm .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\QuickTime\qttask .exe
c:\program files\SUPERAntiSpyware\superantispyware .exe

.
((((((((((((((((((((((((( Files Created from 2009-12-18 to 2010-01-18 )))))))))))))))))))))))))))))))
.

2010-01-18 12:47 . 2010-01-18 12:47 4 ----a-w- c:\program files\40079234.dat
2010-01-18 12:47 . 2010-01-18 12:47 0 ----a-w- c:\program files\40079125.dat
2010-01-16 18:03 . 2008-04-14 10:41 21183 ------w- c:\windows\system32\drivers\atv01nt5.dll
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\xircom
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\windows\system32\wbem\snmp
2010-01-14 23:43 . 2010-01-14 23:43 -------- d-----w- c:\program files\microsoft frontpage
2010-01-14 14:32 . 2010-01-14 14:32 -------- d-----w- c:\program files\ERUNT
2010-01-14 14:25 . 2010-01-14 14:25 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2010-01-13 19:06 . 2009-12-02 13:19 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-01-13 17:41 . 2010-01-13 17:41 6296864 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Resources.dll
2010-01-13 17:41 . 2010-01-13 17:41 933120 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\CEAPI.dll
2010-01-13 17:41 . 2010-01-13 17:41 816272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
2010-01-13 17:41 . 2010-01-13 17:41 822904 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
2010-01-13 17:41 . 2010-01-13 17:41 1643272 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
2010-01-13 17:41 . 2010-01-13 17:41 788880 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe
2010-01-13 17:41 . 2010-01-13 17:41 1181328 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe
2010-01-13 17:11 . 2010-01-13 17:11 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-01-13 17:11 . 2009-12-07 14:10 2953352 -c--a-w- c:\documents and settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
2010-01-13 17:11 . 2010-01-13 17:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft
2010-01-13 17:11 . 2010-01-13 17:11 -------- d-----w- c:\program files\Lavasoft
2010-01-13 17:11 . 2010-01-13 18:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-01-13 17:11 . 2010-01-13 17:14 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-13 17:08 . 2010-01-13 17:08 -------- d-----w- c:\program files\Trend Micro
2010-01-13 16:46 . 2010-01-13 16:46 -------- d-----w- c:\program files\CCleaner
2010-01-13 16:46 . 2010-01-13 16:46 52224 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-01-13 16:46 . 2010-01-13 16:46 117760 ----a-w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-18 12:51 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\documents and settings\Admin\Application Data\SUPERAntiSpyware.com
2010-01-13 16:45 . 2010-01-13 16:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-11 17:17 . 2010-01-11 17:17 552 ----a-w- c:\windows\system32\d3d8caps.dat
2010-01-11 17:17 . 2010-01-12 16:58 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\Admin\Application Data\Malwarebytes
2009-12-19 16:34 . 2009-12-03 21:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-19 16:34 . 2009-12-19 16:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-19 16:33 . 2009-12-19 16:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-19 16:33 . 2009-12-03 21:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-18 12:51 . 2008-10-13 21:42 -------- d-----w- c:\program files\QuickTime
2010-01-18 12:51 . 2008-10-21 13:59 -------- d-----w- c:\program files\PowerISO
2010-01-18 12:51 . 2008-10-21 14:02 -------- d-----w- c:\program files\iTunes
2010-01-18 12:51 . 2008-12-12 16:12 -------- d-----w- c:\program files\AirPort
2010-01-18 12:51 . 2009-02-18 01:41 -------- d-----w- c:\program files\AIM Lite
2010-01-17 00:19 . 2008-10-01 08:42 611792 ----a-w- c:\documents and settings\Admin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-14 18:07 . 2009-02-17 00:46 -------- d-----w- c:\program files\PokerTracker 3
2010-01-14 18:06 . 2008-10-01 08:25 -------- d-----w- c:\program files\Styler
2010-01-14 18:05 . 2009-02-09 20:08 -------- d-----w- c:\documents and settings\All Users\Application Data\Rosetta Stone
2010-01-13 22:19 . 2008-10-01 08:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Babylon
2010-01-13 16:12 . 2008-10-01 08:36 -------- d-----w- c:\program files\AutoPlay Media Studio 7.0
2009-12-26 23:19 . 2009-10-27 19:00 -------- d-----w- c:\documents and settings\Admin\Application Data\vlc
2009-12-25 03:51 . 2009-11-19 13:42 79488 ----a-w- c:\documents and settings\Admin\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-19 18:46 . 2008-04-14 12:00 96512 ------w- c:\windows\system32\drivers\atapi.sys
2009-12-19 14:57 . 2008-10-10 21:01 -------- d-----w- c:\documents and settings\Admin\Application Data\uTorrent
2009-12-02 13:19 . 2010-01-13 17:42 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
.

<pre>
c:\program files\Common Files\InstallShield\UpdateService\isuspm  .exe
</pre>

((((((((((((((((((((((((((((( SnapShot_2010-01-17_22.41.21 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-01-18 01:39 . 2010-01-18 01:39 16384 c:\windows\Temp\Perflib_Perfdata_254.dat
+ 2008-10-01 08:34 . 2010-01-18 02:25 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2008-10-01 08:34 . 2010-01-17 01:42 32768 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2010-01-15 01:35 . 2010-01-18 02:25 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2010-01-15 01:35 . 2010-01-17 01:42 16384 c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2008-09-08 20:56 . 2008-04-14 05:50 361344 c:\windows\system32\drivers\tcpip.sys
+ 2008-09-08 20:56 . 2008-04-14 05:50 361344 c:\windows\system32\dllcache\tcpip.sys
- 2008-10-01 08:34 . 2010-01-17 01:42 606208 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-10-01 08:34 . 2010-01-18 02:25 606208 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-01-13 2002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-04-10 16861184]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2008-07-07 167936]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-12 640376]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2008-05-20 737280]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-11-04 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"laim"="c:\program files\AIM Lite\aimlite.exe" [2007-06-07 765952]
"ControlCenter2.0"="c:\program files\Brother\ControlCenter2\brctrcen.exe" [2005-01-07 864256]
"Adobe_Reader"="c:\program files\internet explorer\wmpscfgs.exe" [N/A]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2008-09-08 124928]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2008-10-23 114688]
nero.exe [2008-9-5 194819]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonuiX.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 19:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2005-12-21 05:57 176128 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\AirPort\\APAgent.exe"=
"c:\\Program Files\\Adobe\\Adobe Dreamweaver CS3\\Dreamweaver.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9000:TCP"= 9000:TCP:SqueezeCenter 9000 tcp (UI)
"9090:TCP"= 9090:TCP:SqueezeCenter 9090 tcp (CLI)
"3483:UDP"= 3483:UDP:SqueezeCenter 3483 udp
"3483:TCP"= 3483:TCP:SqueezeCenter 3483 tcp

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [1/13/2010 12:42 PM 64288]
R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [9/8/2008 4:08 PM 143360]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [1/5/2010 7:56 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [1/5/2010 7:56 AM 74480]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [1/5/2010 7:56 AM 7408]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [12/2/2009 8:19 AM 1181328]
S2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\PostgreSQL\8.3\bin\pg_ctl.exe [9/19/2008 3:03 AM 65536]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\androidusb.sys [2/13/2009 11:00 AM 25728]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [1/25/2007 12:31 PM 42000]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
2008-09-08 20:53 124928 ----a-w- c:\windows\system32\advpack.dll
.
Contents of the 'Scheduled Tasks' folder

2010-01-18 c:\windows\Tasks\Ad-Aware Update (Daily 1).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-18 c:\windows\Tasks\Ad-Aware Update (Daily 2).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-18 c:\windows\Tasks\Ad-Aware Update (Daily 3).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-18 c:\windows\Tasks\Ad-Aware Update (Daily 4).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]

2010-01-18 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-12-02 17:41]
.
.
------- Supplementary Scan -------
.
uStart Page = https://login.quickb...;serviceid=2004
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Translate with &Babylon - c:\program files\Babylon\babylon-pro\Utils\BabylonIEPI.dll/Translate.htm
FF - ProfilePath - c:\documents and settings\Admin\Application Data\Mozilla\Firefox\Profiles\uogv0ls2.default\
FF - plugin: c:\documents and settings\Admin\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-18 07:52
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
@DACL=(02 0000)
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
@DACL=(02 0000)
"NoChange"="1"
"Installed"="1"
@=""

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
@DACL=(02 0000)
"Installed"="1"
@=""
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(824)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
.
Completion time: 2010-01-18 07:53:22
ComboFix-quarantined-files.txt 2010-01-18 12:53
ComboFix2.txt 2010-01-18 01:37
ComboFix3.txt 2010-01-18 01:07
ComboFix4.txt 2010-01-17 22:42
ComboFix5.txt 2010-01-18 12:47

Pre-Run: 412,398,956,544 bytes free
Post-Run: 412,355,551,232 bytes free

- - End Of File - - 8D83A31A7A24DA9CD5477AEB9FEA6890

ESET Log:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=03706ffe54e9524fb8804e5cbcde2e4e
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2010-01-18 02:10:48
# local_time=2010-01-18 09:10:48 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=512 16777215 100 0 0 0 0 0
# compatibility_mode=1792 16777195 100 0 40061276 40061276 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=102689
# found=17
# cleaned=0
# scan_time=2889
C:\Documents and Settings\Admin\Application Data\Downloaded Installations\{D7F8FF50-EEED-4F79-BE51-ADA945AA17ED}\{8C917D21-34EB-461B-92D2-E5E35A82A164}.msi probably a variant of Win32/Agent trojan 00000000000000000000000000000000 I
C:\Qoobox\Quarantine\[4]-Submit_2010-01-14_23.02.11.zip a variant of Win32/Bamital.H trojan 00000000000000000000000000000000 I
C:\Qoobox\Quarantine\C\WINDOWS\system32\kbdsock.dll.vir Win32/Agent.QPI trojan 00000000000000000000000000000000 I
C:\Qoobox\Quarantine\C\WINDOWS\system32\smss32 .exe.vir Win32/TrojanDownloader.FakeAlert.AED trojan 00000000000000000000000000000000 I
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\atapi.sys.vir Win32/Olmarik.RF virus 00000000000000000000000000000000 I
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\ripyo.sys.vir a variant of Win32/Rootkit.Kryptik.AF trojan 00000000000000000000000000000000 I
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\_ripyo_.sys.zip a variant of Win32/Rootkit.Kryptik.AF trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP1\A0000031.exe multiple threats 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP2\A0000410.exe Win32/TrojanDownloader.FakeAlert.AED trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP2\A0000414.exe Win32/TrojanDownloader.FakeAlert.AED trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP2\A0000447.exe Win32/TrojanDownloader.FakeAlert.AED trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP2\A0000449.exe a variant of Win32/Refpron.ED trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP4\A0001674.dll Win32/Agent.QPI trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP4\A0001678.exe Win32/TrojanDownloader.FakeAlert.AED trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{CBC7C2EE-4E0E-4037-A52E-EBEB666197F4}\RP4\A0001687.sys a variant of Win32/Rootkit.Kryptik.AF trojan 00000000000000000000000000000000 I
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\Desktop.htt Win32/TrojanDownloader.FakeAlert.AED virus 00000000000000000000000000000000 I
C:\WINDOWS\system32\config\systemprofile\Application Data\Sun\Java\Deployment\cache\6.0\7\10455f87-49e3c96a multiple threats 00000000000000000000000000000000 I

Advertisements

Register to Remove

#26 jpshortstuff

Teacher Emeritus

Authentic Member
5,710 posts

Posted 18 January 2010 - 10:40 AM

Most of what ESET found were just backups of what we have already deleted with ComboFix. These will all be cleared when we uninstall ComboFix at the end.

There were a few things though. Please delete these files:
c:\program files\40079234.dat
c:\program files\40079125.dat
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\Desktop.htt
C:\Documents and Settings\Admin\Application Data\Downloaded Installations\{D7F8FF50-EEED-4F79-BE51-ADA945AA17ED}\{8C917D21-34EB-461B-92D2-E5E35A82A164}.msi
(If you can't find any of them, you may need to Show Hidden Files/Folder - which you can do via Folder Options under the Tools menu.)

Open your Control Panel and double-click Java. Click the Settings... button in the Temporary Internet Files box on the General tab. Click Delete Files..., ensure all boxes are selected, then click OK.

Let me know if you are still having any more problems. If not, we can finish up in the next post.

Proud Graduate of the TC/WTT Classroom

#27 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 18 January 2010 - 11:09 AM

Deleted everything except this file: C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\Desktop.htt In C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\ There is no Internet Explorer Folder.... Even with Hidden Files shown. The google search toolbar is still directing searches to liveinfo pro.

#28 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 18 January 2010 - 11:11 AM

Also in c:\program files\ there are a bunch more of those .dat files. such as 2316296.dat - about 15 of them.

#29 jpshortstuff

Teacher Emeritus

Authentic Member
5,710 posts

Posted 18 January 2010 - 02:37 PM

Please run DDS again and post the first log it gives (DDS.txt). We need to find out where these .dat files are coming from, and check out your Firefox settings.

Proud Graduate of the TC/WTT Classroom

#30 brooklynsystems

Authentic Member

Authentic Member
29 posts

Posted 18 January 2010 - 02:49 PM

Here is the DDS log:

DDS (Ver_09-06-26.01) - NTFSx86
Run by Admin at 15:47:59.03 on Mon 01/18/2010
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2495 [GMT -5:00]

AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\AirPort\APAgent.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\ALCFDRTM.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Documents and Settings\Admin\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = https://login.quickb...;serviceid=2004
uInternet Settings,ProxyOverride = *.local
mWinlogon: UIHost=c:\windows\system32\logonuiX.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\nero\lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [avgnt] "c:\program files\avira\antivir personaledition classic\avgnt.exe" /min
mRun: [PWRISOVM.EXE] c:\program files\poweriso\PWRISOVM.EXE
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 9.0\acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 9.0\acrobat\Acrotray.exe"
mRun: [AirPort Base Station Agent] "c:\program files\airport\APAgent.exe"
mRun: [BlackBerryAutoUpdate] c:\program files\common files\research in motion\auto update\RIMAutoUpdate.exe /background
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe"
mRun: [laim] "c:\program files\aim lite\aimlite.exe" -autorun
mRun: [ControlCenter2.0] c:\program files\brother\controlcenter2\brctrcen.exe /autorun
mRun: [Adobe_Reader] c:\program files\internet explorer\wmpscfgs.exe
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\interv~1.lnk - c:\program files\intervideo\common\bin\WinCinemaMgr.exe
StartupFolder: c:\documents and settings\all users\start menu\programs\startup\nero.exe
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office12\EXCEL.EXE/3000
IE: Translate with &Babylon - c:\program files\babylon\babylon-pro\utils\BabylonIEPI.dll/Translate.htm
IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~1\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office12\REFIEBAR.DLL
DPF: {843EE768-3A97-455C-9076-741BA3AD7B62} - hxxps://accounting.quickbooks.com/c16/v22.158/qboax10.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_10-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: WBSrv - c:\progra~1\stardock\object~1\window~1\wbsrv.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\admin\applic~1\mozilla\firefox\profiles\uogv0ls2.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - plugin: c:\documents and settings\admin\local settings\application data\google\update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: browser.search.selectedEngine - Google
FF - user.js: browser.search.order.1 - Google

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2010-1-13 64288]
R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [2008-9-8 143360]
R1 avgio;avgio;c:\program files\avira\antivir personaledition classic\avgio.sys [2008-10-10 11608]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-1-5 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-1-5 74480]
R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler;c:\program files\avira\antivir personaledition classic\sched.exe [2008-10-10 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard;c:\program files\avira\antivir personaledition classic\avguard.exe [2008-10-10 151297]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2009-12-2 1181328]
R2 pgsql-8.3;PostgreSQL Database Server 8.3;c:\program files\postgresql\8.3\bin\pg_ctl.exe [2008-9-19 65536]
R3 avgntflt;avgntflt;c:\program files\avira\antivir personaledition classic\avgntflt.sys [2008-10-10 52056]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-1-5 7408]
S3 androidusb;ADB Interface Driver;c:\windows\system32\drivers\androidusb.sys [2009-2-13 25728]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-1-25 42000]

=============== Created Last 30 ================

2010-01-18 08:03 <DIR> --d----- c:\program files\ESET
2010-01-16 13:03 <DIR> --d----- c:\windows\ServicePackFiles
2010-01-14 18:43 <DIR> --d----- c:\windows\system32\xircom
2010-01-14 18:43 <DIR> --d----- c:\windows\system32\wbem\snmp
2010-01-14 18:30 <DIR> a-dshr-- C:\cmdcons
2010-01-14 18:28 261,632 a------- c:\windows\PEV.exe
2010-01-14 18:28 161,792 a------- c:\windows\SWREG.exe
2010-01-14 18:28 98,816 a------- c:\windows\sed.exe
2010-01-14 18:28 77,312 a------- c:\windows\MBR.exe
2010-01-14 13:05 <DIR> --d----- c:\windows\system32\appmgmt
2010-01-13 14:06 15,880 a------- c:\windows\system32\lsdelete.exe
2010-01-13 12:42 4 a------- c:\program files\2316484.dat
2010-01-13 12:42 4 a------- c:\program files\2316468.dat
2010-01-13 12:42 4 a------- c:\program files\2316453.dat
2010-01-13 12:42 4 a------- c:\program files\2316437.dat
2010-01-13 12:42 4 a------- c:\program files\2316421.dat
2010-01-13 12:42 4 a------- c:\program files\2316406.dat
2010-01-13 12:42 4 a------- c:\program files\2316390.dat
2010-01-13 12:42 4 a------- c:\program files\2316359.dat
2010-01-13 12:42 4 a------- c:\program files\2316343.dat
2010-01-13 12:42 4 a------- c:\program files\2316328.dat
2010-01-13 12:42 4 a------- c:\program files\2316312.dat
2010-01-13 12:42 4 a------- c:\program files\2316296.dat
2010-01-13 12:42 64,288 a------- c:\windows\system32\drivers\Lbd.sys
2010-01-13 12:11 <DIR> -cd-h--- c:\docume~1\alluse~1\applic~1\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-01-13 12:11 <DIR> --d----- c:\program files\Lavasoft
2010-01-13 12:11 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2010-01-13 12:11 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy
2010-01-13 12:08 <DIR> --d----- c:\program files\Trend Micro
2010-01-13 11:46 <DIR> --d----- c:\program files\CCleaner
2010-01-13 11:45 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2010-01-13 11:45 <DIR> --d----- c:\program files\SUPERAntiSpyware
2010-01-13 11:45 <DIR> --d----- c:\docume~1\admin\applic~1\SUPERAntiSpyware.com
2010-01-13 11:45 <DIR> --d----- c:\program files\common files\Wise Installation Wizard
2010-01-11 12:17 552 a------- c:\windows\system32\d3d8caps.dat
2010-01-11 12:17 664 a------- c:\windows\system32\d3d9caps.dat
2009-12-24 11:36 46,203 a------- C:\EasyCheck-in_ Boarding Docu...pdf

==================== Find3M ====================

2009-12-19 13:46 96,512 -------- c:\windows\system32\drivers\atapi.sys
2009-12-03 16:14 38,224 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 16:13 19,160 a------- c:\windows\system32\drivers\mbam.sys
2008-01-07 10:42 1,052 a------- c:\documents and settings\admin\Nero8280.reg

============= FINISH: 15:48:14.01 ===============

Body Background

skin color theme

[Resolved] Google Redirects, gmer wont run Scan, random popups, 100% C

#16 jpshortstuff

Advertisements

Register to Remove

#17 brooklynsystems

#18 jpshortstuff

#19 brooklynsystems

#20 jpshortstuff

#21 brooklynsystems

#22 jpshortstuff

#23 brooklynsystems

#24 jpshortstuff

#25 brooklynsystems

Advertisements

Register to Remove

#26 jpshortstuff

#27 brooklynsystems

#28 brooklynsystems

#29 jpshortstuff

#30 brooklynsystems

Related Topics

4 user(s) are reading this topic

About What the Tech

Follow Us

Body Background

skin color theme

[Resolved] Google Redirects, gmer wont run Scan, random popups, 100% C

#16 jpshortstuff

Advertisements Register to Remove

#17 brooklynsystems

#18 jpshortstuff

#19 brooklynsystems

#20 jpshortstuff

#21 brooklynsystems

#22 jpshortstuff

#23 brooklynsystems

#24 jpshortstuff

#25 brooklynsystems

Advertisements Register to Remove

#26 jpshortstuff

#27 brooklynsystems

#28 brooklynsystems

#29 jpshortstuff

#30 brooklynsystems

Related Topics

4 user(s) are reading this topic

About What the Tech

Follow Us

Sign In

Advertisements

Register to Remove

Advertisements

Register to Remove