ComboFix 09-10-22.01 - SEXY SORCERESS 10/23/2009 23:10.3.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2030.1229 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: AVG Anti-Virus *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
ADS - explorer.exe: deleted 88 bytes in 2 streams.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\drivers\etc\lmhosts
.
((((((((((((((((((((((((( Files Created from 2009-09-24 to 2009-10-24 )))))))))))))))))))))))))))))))
.
2009-10-22 03:05 . 2009-10-22 03:05 ——– d—–w- c:\program files\Ancestry Toolbar
2009-10-20 21:59 . 2009-10-20 21:59 ——– d—–w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-10-20 21:59 . 2009-10-20 21:59 ——– d—–w- c:\program files\SUPERAntiSpyware
2009-10-20 21:59 . 2009-10-20 21:59 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\SUPERAntiSpyware.com
2009-10-20 21:56 . 2009-10-20 21:56 ——– d—–w- c:\program files\Common Files\Wise Installation Wizard
2009-10-20 17:20 . 2009-09-10 19:54 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-20 17:20 . 2009-09-10 19:53 19160 —-a-w- c:\windows\system32\drivers\mbam.sys
2009-10-19 14:42 . 2009-10-21 09:23 ——– d—–w- c:\program files\ABC Amber Image Converter
2009-10-19 14:23 . 2009-10-19 14:23 ——– d—–w- c:\program files\Free RAW Viewer
2009-10-19 11:51 . 2009-10-24 02:58 256 —-a-w- c:\documents and settings\SEXY SORCERESS\pool.bin
2009-10-19 08:54 . 2009-10-21 10:20 ——– d—–w- c:\program files\ABC Amber Text Converter
2009-10-19 08:46 . 2009-10-21 09:23 ——– d—–w- c:\program files\ABC Amber Paradox Converter
2009-10-19 08:13 . 2009-10-21 09:23 ——– d—–w- c:\program files\ABC Amber DAT Converter
2009-10-19 07:24 . 2009-10-21 09:23 ——– d—–w- c:\program files\ABC Amber BlackBerry Converter
2009-10-19 06:59 . 2009-10-19 06:59 0 —-a-w- c:\windows\nsreg.dat
2009-10-19 06:59 . 2009-10-19 06:59 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Local Settings\Application Data\Thunderbird
2009-10-19 06:59 . 2009-10-19 06:59 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\Thunderbird
2009-10-19 06:10 . 2009-10-20 04:41 ——– d—–w- c:\program files\Eudora 8.0 Beta 7
2009-10-19 00:28 . 2009-10-19 00:28 ——– d—–w- c:\program files\Nucleus Kernel Internet Explorer Password Recovery
2009-10-18 23:14 . 2009-10-18 23:14 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\Blackberry Desktop
2009-10-18 23:11 . 2009-10-18 23:11 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\Research In Motion
2009-10-18 23:03 . 2009-10-18 23:03 256 —-a-w- C:\pool.bin
2009-10-18 22:12 . 2009-10-18 22:12 ——– d—–w- c:\documents and settings\All Users\Application Data\Research In Motion
2009-10-18 22:11 . 2009-01-09 21:18 27136 —-a-r- c:\windows\system32\drivers\RimSerial.sys
2009-10-18 22:09 . 2009-10-18 22:09 ——– d—–w- c:\program files\Common Files\Roxio Shared
2009-10-18 22:08 . 2009-10-18 22:09 ——– d—–w- c:\program files\Common Files\Research In Motion
2009-10-18 22:08 . 2009-10-18 22:12 ——– d—–w- c:\program files\Research In Motion
2009-10-18 21:03 . 2009-10-17 04:54 693760 —-a-w- c:\program files\BBSAKv1.6_Installer.msi
2009-10-18 20:56 . 2009-10-18 20:56 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\vlc
2009-10-18 20:51 . 2009-10-18 21:03 ——– d—–w- c:\program files\BBSAK
2009-10-18 19:36 . 2009-10-21 09:23 ——– d—–w- c:\program files\Data Doctor Recovery - SIM Card (Evaluation)
2009-10-18 00:01 . 2009-10-18 00:01 ——– d—–w- c:\program files\tcpIQ
2009-10-17 20:03 . 2009-10-17 20:04 ——– d—–w- c:\program files\ERUNT
2009-10-17 18:49 . 2009-10-17 18:50 ——– d—–w- c:\documents and settings\Guest\Application Data\Apple Computer
2009-10-17 16:12 . 2009-10-17 16:12 ——– d—–w- C:\My Music
2009-10-16 04:51 . 2009-10-16 04:51 ——– d—–w- c:\program files\Windows Mobile Device Handbook
2009-10-16 02:31 . 2009-10-16 02:27 401720 —-a-w- c:\program files\HijackThis.exe
2009-10-16 01:13 . 2009-10-16 01:13 ——– d—–w- c:\documents and settings\All Users\Application Data\IObit
2009-10-15 23:46 . 2009-10-17 23:44 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\IObit
2009-10-15 23:46 . 2009-10-16 01:13 ——– d—–w- c:\program files\IObit
2009-10-15 23:10 . 2009-09-23 12:55 64288 —-a-w- c:\windows\system32\drivers\Lbd.sys
2009-10-15 22:54 . 2009-10-15 22:54 ——– dc-h–w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-10-15 22:53 . 2009-10-15 23:18 ——– d—–w- c:\documents and settings\All Users\Application Data\Lavasoft
2009-10-15 22:53 . 2009-10-15 22:53 ——– d—–w- c:\program files\Lavasoft
2009-10-15 20:15 . 2009-10-15 20:15 ——– d—–w- c:\windows\system32\wbem\Repository
2009-10-15 20:14 . 2009-10-15 20:14 ——– d—–w- c:\program files\Common Files\xing shared
2009-10-15 20:10 . 2009-10-15 20:10 ——– d—–w- c:\program files\Symantec Client Security
2009-10-15 08:55 . 2009-10-15 20:10 ——– d—–w- c:\program files\Symantec
2009-10-15 07:55 . 2009-10-15 20:12 ——– d—–w- C:\RECYCLER(2)
2009-10-15 02:08 . 2009-10-15 20:47 ——– d—–w- C:\$AVG
2009-10-15 02:08 . 2009-10-24 03:25 360584 —-a-w- c:\windows\system32\drivers\avgtdix.sys
2009-10-15 02:08 . 2009-10-24 03:24 161800 —-a-w- c:\windows\system32\drivers\avgrkx86.sys
2009-10-15 02:08 . 2009-10-15 02:08 12464 —-a-w- c:\windows\system32\avgrsstx.dll
2009-10-15 02:08 . 2009-10-15 02:08 333192 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2009-10-15 02:08 . 2009-10-24 03:25 28424 —-a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-10-15 02:08 . 2009-10-24 03:25 ——– d—–w- c:\windows\system32\drivers\Avg
2009-10-15 02:07 . 2009-10-15 20:13 ——– d—–w- c:\documents and settings\All Users\Application Data\AVG Security Toolbar
2009-10-15 02:07 . 2009-10-15 02:07 ——– d—–w- c:\program files\AVG
2009-10-15 02:07 . 2009-10-15 02:07 ——– d—–w- c:\documents and settings\All Users\Application Data\avg9
2009-10-14 23:44 . 2009-10-14 23:44 ——– d—–w- c:\program files\CCleaner
2009-10-14 23:44 . 2009-10-14 23:44 ——– d—–w- c:\program files\DriverTool
2009-10-14 23:44 . 2009-10-14 23:44 ——– d—–w- c:\program files\devshowall
2009-10-14 23:43 . 2009-10-14 23:43 ——– d—–w- c:\program files\RSD_CMDA_General_5_1_6_Installation
2009-10-14 21:42 . 2009-10-14 21:42 ——– d—–w- c:\program files\PhoneModels
2009-10-14 21:42 . 2009-10-14 21:42 ——– d—–w- c:\program files\Pages
2009-10-14 21:40 . 2009-10-21 09:23 ——– d—–w- c:\program files\Motorola Phone Tools
2009-10-14 17:56 . 2009-10-14 17:56 ——– d—–w- c:\program files\newp2k
2009-10-14 17:54 . 2006-07-21 01:25 166 —-a-w- c:\program files\devshowall.zip
2009-10-14 14:43 . 2009-10-14 14:43 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\Malwarebytes
2009-10-14 14:43 . 2009-10-20 17:20 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2009-10-14 14:43 . 2009-10-14 14:43 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-10-14 12:56 . 2009-10-14 12:56 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\SMSServant
2009-10-14 11:48 . 2009-10-14 11:48 ——– d—–w- c:\documents and settings\Owner\Application Data\Windows Search
2009-10-14 09:30 . 2009-10-14 09:30 ——– d—–w- c:\program files\MessagingToolkit
2009-10-14 07:16 . 2009-10-14 07:16 ——– d—–w- c:\program files\LANDesk
2009-10-14 07:16 . 2009-10-14 07:15 10144 ——w- c:\windows\system32\drivers\asicio.sys
2009-10-14 07:16 . 2009-10-14 07:16 ——– d—–w- c:\windows\Drivers
2009-10-14 06:54 . 2009-10-14 06:54 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\Mobile Master
2009-10-14 06:53 . 2009-10-14 09:48 ——– d—–w- C:\PIACCESS
2009-10-14 06:50 . 2009-10-21 09:23 ——– d—–w- c:\program files\Mobile Master
2009-10-14 06:50 . 2009-10-14 06:50 ——– d—–w- c:\program files\Common Files\Jumping Bytes
2009-10-14 06:49 . 2009-10-14 06:49 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\Jumping Bytes
2009-10-14 06:45 . 2009-10-14 06:45 ——– d—–w- c:\program files\MediaInfo
2009-10-14 01:08 . 2009-09-15 19:38 23936 —-a-w- c:\windows\system32\drivers\motport.sys
2009-10-14 01:08 . 2009-09-15 19:38 23936 —-a-w- c:\windows\system32\drivers\motmodem.sys
2009-10-14 01:08 . 2009-06-19 21:59 19712 —-a-w- c:\windows\system32\drivers\motccgp.sys
2009-10-14 01:08 . 2009-05-08 16:56 42752 —-a-w- c:\windows\system32\drivers\motodrv.sys
2009-10-14 01:08 . 2009-01-29 22:18 8320 —-a-w- c:\windows\system32\drivers\motccgpfl.sys
2009-10-14 01:08 . 2008-03-27 22:49 1112288 —-a-w- c:\windows\system32\wdfcoinstaller01007.dll
2009-10-14 01:08 . 2007-11-02 20:51 6400 —-a-w- c:\windows\system32\drivers\motswch.sys
2009-10-11 20:24 . 2009-10-11 20:28 ——– d—–w- c:\program files\iPhone Explorer
2009-10-11 08:02 . 2009-10-11 08:02 ——– d—–w- c:\windows\SQL9_KB960089_ENU
2009-10-10 19:24 . 2009-10-10 19:24 ——– d—–w- c:\documents and settings\Guest\Application Data\Windows Desktop Search
2009-10-10 03:19 . 2009-10-10 03:19 ——– d—–w- c:\program files\iPod
2009-10-10 03:19 . 2009-10-10 03:21 ——– d—–w- c:\program files\iTunes
2009-10-10 03:19 . 2009-10-10 03:21 ——– d—–w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-10-10 03:14 . 2009-10-10 03:14 ——– d—–w- c:\program files\Apple Software Update
2009-10-10 03:13 . 2009-08-29 00:42 40448 —-a-w- c:\windows\system32\drivers\usbaapl.sys
2009-10-10 03:13 . 2009-08-29 00:42 2065696 —-a-w- c:\windows\system32\usbaaplrc.dll
2009-10-10 03:12 . 2009-10-10 03:19 ——– d—–w- c:\program files\Common Files\Apple
2009-10-10 03:02 . 2009-10-10 03:02 ——– d—–w- c:\program files\Microsoft Small Business
2009-10-10 02:48 . 2009-10-14 03:10 ——– d—–w- c:\program files\Microsoft SQL Server
2009-10-10 02:30 . 2009-10-10 02:30 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Local Settings\Application Data\Microsoft Help
2009-10-10 02:03 . 2009-10-10 02:36 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\GetRightToGo
2009-10-08 21:36 . 2009-09-11 14:18 136192 -c—-w- c:\windows\system32\dllcache\msv1_0.dll
2009-10-08 21:36 . 2009-06-25 08:25 54272 -c—-w- c:\windows\system32\dllcache\wdigest.dll
2009-10-08 21:36 . 2009-06-25 08:25 301568 -c—-w- c:\windows\system32\dllcache\kerberos.dll
2009-10-08 21:36 . 2009-06-24 11:18 92928 -c—-w- c:\windows\system32\dllcache\ksecdd.sys
2009-10-07 22:01 . 2009-10-21 09:23 ——– d—–w- c:\program files\Motoconnect
2009-10-06 00:24 . 2009-10-06 00:24 ——– d—–w- c:\program files\LGUsbDriver
2009-10-04 16:05 . 2009-10-04 16:05 ——– d—–w- c:\documents and settings\Owner\Application Data\Windows Desktop Search
2009-10-03 22:28 . 2007-07-02 20:54 4333568 —-a-w- c:\program files\RSD Lite_3.8.msi
2009-10-03 21:15 . 2009-10-03 21:15 ——– d—–w- c:\program files\P2K Programs
2009-10-03 21:13 . 2009-10-03 21:13 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\MobileAction
2009-10-03 19:47 . 2009-10-03 19:48 ——– d—–w- c:\program files\CardRecovery
2009-10-03 19:16 . 2009-10-03 19:37 ——– d—–w- c:\program files\GetData
2009-10-03 15:52 . 2009-10-21 09:23 ——– d—–w- c:\program files\Data Doctor MS Access to MySQL Converter (Demo)
2009-10-03 15:44 . 2009-10-16 11:44 ——– d—–w- c:\program files\Microsoft ActiveSync
2009-10-03 15:36 . 2009-10-21 09:23 ——– d—–w- c:\program files\Data Doctor Forensic Software - Pocket PC (Evaluation)
2009-10-02 22:42 . 2009-10-01 15:29 195440 ——w- c:\windows\system32\MpSigStub.exe
2009-10-02 20:36 . 2009-10-02 20:36 ——– d—–w- c:\documents and settings\BOYS\Application Data\Windows Desktop Search
2009-10-02 13:02 . 2009-10-02 13:45 567529 —-a-w- c:\documents and settings\SEXY SORCERESS\bitpim.dat
2009-10-02 11:54 . 2009-10-02 11:54 ——– d—–w- c:\program files\Motorola Tools
2009-10-02 09:03 . 2009-10-02 09:03 28 —-a-w- c:\program files\MMS_push_info.bin
2009-10-02 09:03 . 2009-10-02 09:03 265 —-a-w- c:\program files\MMS_push_msg0.bin
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-21 09:23 . 2007-03-16 07:39 ——– d—–w- c:\program files\Microsoft Works
2009-10-21 09:23 . 2009-02-18 17:26 ——– d—–w- c:\program files\CIF USB Camera
2009-10-21 09:23 . 2009-02-03 01:26 ——– d—–w- c:\program files\ATTToolbar
2009-10-21 09:23 . 2009-02-03 01:25 ——– d—–w- c:\program files\ATT-SST
2009-10-21 09:23 . 2007-03-27 17:38 ——– d—–w- c:\program files\Avanquest update
2009-10-20 08:37 . 2007-06-12 01:25 ——– d—a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-10-19 08:02 . 2007-03-25 20:40 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-10-17 18:11 . 2009-02-03 01:26 ——– d—–w- c:\documents and settings\All Users\Application Data\ATTToolbar
2009-10-16 18:48 . 2008-11-28 21:31 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\gtk-2.0
2009-10-16 06:15 . 2007-03-25 20:41 ——– d—–w- c:\program files\Microsoft.NET
2009-10-16 02:47 . 2009-10-16 02:47 46046 —-a-w- c:\program files\startuplist.txt
2009-10-16 02:32 . 2009-10-16 02:32 14637 —-a-w- c:\program files\hijackthis.log
2009-10-16 01:42 . 2006-05-07 00:24 1033728 —-a-w- c:\windows\explorer.exe
2009-10-15 20:47 . 2007-04-06 17:10 92464 -c–a-w- c:\documents and settings\SEXY SORCERESS\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-15 20:14 . 2008-01-19 00:45 ——– d—–w- c:\program files\Common Files\Real
2009-10-15 19:22 . 2009-10-02 09:09 7680 –sha-w- c:\program files\Thumbs.db
2009-10-15 18:08 . 2007-03-16 07:44 ——– d—–w- c:\program files\Common Files\Symantec Shared
2009-10-15 17:26 . 2007-03-16 07:39 ——– d—–w- c:\program files\Intel
2009-10-15 08:56 . 2008-10-06 02:07 ——– d—–w- c:\documents and settings\All Users\Application Data\Symantec
2009-10-15 08:43 . 2007-03-16 07:32 ——– d—–w- c:\program files\Google
2009-10-15 03:41 . 2007-03-16 07:38 348160 —-a-w- c:\windows\system32\msvcr71.dll
2009-10-15 00:58 . 2008-08-03 19:52 ——– d—–w- c:\program files\Norton 360
2009-10-14 23:44 . 2007-03-16 07:38 ——– d–h–w- c:\program files\InstallShield Installation Information
2009-10-14 21:53 . 2009-10-14 21:42 23633 —-a-w- c:\program files\Uninstall.ini
2009-10-14 21:38 . 2007-03-27 17:37 24192 -c–a-w- c:\documents and settings\SEXY SORCERESS\usbsermptxp.sys
2009-10-14 21:38 . 2007-03-27 17:37 22768 -c–a-w- c:\documents and settings\SEXY SORCERESS\usbsermpt.sys
2009-10-14 15:17 . 2007-08-28 00:03 ——– d—–w- c:\program files\GamesBar
2009-10-14 11:50 . 2009-10-02 08:37 1681 —-a-w- c:\program files\.config
2009-10-14 11:44 . 2007-04-15 22:28 ——– d—–w- c:\documents and settings\Owner\Application Data\vlc
2009-10-14 07:16 . 2007-03-16 07:48 ——– d—–w- c:\program files\Gateway
2009-10-14 04:26 . 2007-06-21 05:56 ——– d—–w- c:\program files\Common Files\Motorola Shared
2009-10-14 02:42 . 2007-07-13 14:47 ——– d—–w- c:\program files\Windows Defender
2009-10-14 01:16 . 2009-10-14 01:16 756 —-a-w- c:\program files\PHONEC~1.000
2009-10-14 01:16 . 2009-10-14 01:16 4320 —-a-w- c:\program files\_setup.xml
2009-10-14 00:42 . 2009-10-14 00:42 0 —ha-w- c:\program files\0gpslast.002
2009-10-14 00:42 . 2009-10-14 00:42 0 —ha-w- c:\program files\00syssim.007
2009-10-14 00:42 . 2009-10-14 00:42 0 —ha-w- c:\program files\000sslog.006
2009-10-14 00:42 . 2009-10-14 00:42 0 —ha-w- c:\program files\000sclog.005
2009-10-14 00:42 . 2009-10-14 00:42 0 —ha-w- c:\program files\000rslog.004
2009-10-14 00:42 . 2009-10-14 00:42 0 —ha-w- c:\program files\000rclog.003
2009-10-10 19:24 . 2009-03-23 02:10 92464 -c–a-w- c:\documents and settings\Guest\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-10 16:19 . 2007-04-14 03:35 ——– d—–w- c:\documents and settings\Owner\Application Data\uTorrent
2009-10-10 05:45 . 2008-07-22 20:33 ——– d—–w- c:\documents and settings\SEXY SORCERESS\Application Data\Apple Computer
2009-10-10 04:54 . 2009-03-17 19:25 ——– d—–w- c:\documents and settings\All Users\Application Data\Apple
2009-10-10 03:18 . 2007-12-25 04:04 ——– d—–w- c:\program files\QuickTime
2009-10-10 03:17 . 2008-11-26 00:56 ——– d—–w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-10-03 21:21 . 2007-03-27 18:01 79328 -c–a-w- c:\documents and settings\SEXY SORCERESS\mqdmserd.sys
2009-10-03 21:21 . 2007-03-27 18:01 5936 -c–a-w- c:\documents and settings\SEXY SORCERESS\mqdmwhnt.sys
2009-10-03 21:21 . 2007-03-27 18:01 9232 -c–a-w- c:\documents and settings\SEXY SORCERESS\mqdmmdfl.sys
2009-10-03 21:21 . 2007-03-27 18:01 92064 -c–a-w- c:\documents and settings\SEXY SORCERESS\mqdmmdm.sys
2009-10-03 21:21 . 2007-03-27 18:01 4048 -c–a-w- c:\documents and settings\SEXY SORCERESS\mqdmcr.sys
2009-10-03 21:21 . 2007-03-27 18:01 66656 -c–a-w- c:\documents and settings\SEXY SORCERESS\mqdmbus.sys
2009-10-03 21:21 . 2007-03-27 18:01 6208 -c–a-w- c:\documents and settings\SEXY SORCERESS\mqdmcmnt.sys
2009-10-02 20:48 . 2007-07-17 00:40 60784 -c–a-w- c:\documents and settings\BOYS\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-02 15:01 . 2009-10-02 08:37 0 —-a-w- c:\program files\Seem.lst
2009-10-02 14:03 . 2009-10-02 08:52 ——– d—–w- c:\program files\3741829
2009-10-02 12:34 . 2009-10-02 12:20 487 —-a-w- c:\program files\P2kAutostart_daemon.log
2009-10-02 12:27 . 2009-10-02 12:26 1931052 —-a-w- c:\program files\SOURCEFILES
2009-10-02 11:13 . 2009-10-02 09:20 274 —-a-w- c:\program files\TempWebPage.htm
2009-10-02 10:47 . 2009-10-02 10:47 16 —-a-w- c:\program files\007D_0F3C.seem
2009-10-02 09:03 . 2009-10-02 09:03 10320 —-a-w- c:\program files\TmpTneDB.db
2009-10-02 09:02 . 2009-10-02 09:02 0 —-a-w- c:\program files\BREW_iTAP6_User_Dictionary
2009-10-02 09:02 . 2009-10-02 09:02 30680 —-a-w- c:\program files\AmAfsmToneDb.db
2009-10-02 09:02 . 2009-10-02 09:02 30680 —-a-w- c:\program files\AmAfsmTempToneDb.db
2009-10-02 09:02 . 2009-10-02 09:02 10400 —-a-w- c:\program files\AmAfsmDefaultToneDb.db
2009-10-02 09:02 . 2009-10-02 09:02 1019 —-a-w- c:\program files\AmAfsmToneListDb.db
2009-10-02 09:02 . 2009-10-02 09:02 300 —-a-w- c:\program files\ALARMCLOCK
2009-10-02 08:56 . 2009-10-02 08:56 178685 —-a-w- c:\program files\3gp
2009-10-02 08:55 . 2009-10-02 08:55 896 —-a-w- c:\program files\3_roam_idle1.bmp
2009-10-02 08:55 . 2009-10-02 08:55 896 —-a-w- c:\program files\3_nonantenna_idle1.bmp
2009-10-02 08:55 . 2009-10-02 08:55 896 —-a-w- c:\program files\3_idle1.bmp
2009-10-02 08:55 . 2009-10-02 08:49 ——– d—–w- c:\program files\3741848
2009-10-02 08:54 . 2009-10-02 08:54 154257 —-a-w- c:\program files\3_10sec.mp3
2009-10-02 08:54 . 2009-10-02 08:49 ——– d—–w- c:\program files\3741849
2009-10-02 08:54 . 2009-10-02 08:54 ——– d—–w- c:\program files\3741833
2009-10-02 08:54 . 2009-10-02 08:54 7227 —-a-w- c:\program files\3.jpg
2009-10-02 08:53 . 2009-10-02 08:53 9772 —-a-w- c:\program files\359.jpg
2009-10-02 08:53 . 2009-10-02 08:53 8527 —-a-w- c:\program files\32.jpg
2009-10-02 08:53 . 2009-10-02 08:53 10121 —-a-w- c:\program files\398.jpg
2009-10-02 08:53 . 2009-10-02 08:53 7631 —-a-w- c:\program files\31.jpg
2009-10-02 08:53 . 2009-10-02 08:53 ——– d—–w- c:\program files\3741832
2009-10-02 08:53 . 2009-10-02 08:53 ——– d—–w- c:\program files\3741831
2009-10-02 08:53 . 2009-10-02 08:53 ——– d—–w- c:\program files\3741853
2009-10-02 08:53 . 2009-10-02 08:53 23244 —-a-w- c:\program files\3.dat
2009-10-02 08:52 . 2009-10-02 08:52 ——– d—–w- c:\program files\3741847
2009-10-02 08:52 . 2009-10-02 08:52 49724 —-a-w- c:\program files\3.wav
2009-10-02 08:52 . 2009-10-02 08:52 ——– d—–w- c:\program files\3741830
2009-10-02 08:52 . 2009-10-02 08:52 ——– d—–w- c:\program files\3741827
2009-10-02 08:52 . 2009-10-02 08:52 2408 —-a-w- c:\program files\3_idle7.bmp
2009-10-02 08:52 . 2009-10-02 08:52 1008 —-a-w- c:\program files\3_idle6.bmp
2009-10-02 08:52 . 2009-10-02 08:52 ——– d—–w- c:\program files\3741826
2009-10-02 08:52 . 2009-10-02 08:52 ——– d—–w- c:\program files\3741825
2009-10-02 08:50 . 2009-10-02 08:50 67742 —-a-w- c:\program files\354a.jpg
2009-10-02 08:50 . 2009-10-02 08:50 513572 —-a-w- c:\program files\3g2
2009-10-02 08:50 . 2009-10-02 08:50 1922189 —-a-w- c:\program files\35a.3g2
2009-10-02 08:50 . 2009-10-02 08:50 200216 —-a-w- c:\program files\356a.jpg
2009-10-02 08:50 . 2009-10-02 08:50 171552 —-a-w- c:\program files\355a.jpg
2009-10-02 08:50 . 2009-10-02 08:50 59638 —-a-w- c:\program files\3a.jpg
2009-10-02 08:50 . 2009-10-02 08:50 105455 —-a-w- c:\program files\35c.jpg
2009-10-02 08:50 . 2009-10-02 08:50 208341 —-a-w- c:\program files\35b.jpg
.
((((((((((((((((((((((((((((( SnapShot@2009-10-14_15.22.57 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-07-29 13:05 . 2008-07-29 13:05 62976 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 46080 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 64512 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 66048 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 56832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 66560 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 39936 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 38912 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll
+ 2008-07-29 11:07 . 2008-07-29 11:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll
+ 2008-07-29 11:07 . 2008-07-29 11:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll
+ 2008-07-29 11:07 . 2008-07-29 11:07 80896 c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfcm90ud.dll
+ 2008-07-29 11:07 . 2008-07-29 11:07 80896 c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfcm90d.dll
+ 2009-07-12 01:54 . 2009-07-12 01:54 65536 c:\windows\WinSxS\x86_Microsoft.VC80.OpenMP_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e79c4723\vcomp.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-02 05:08 . 2006-12-02 05:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
- 2006-12-02 06:08 . 2006-12-02 06:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80KOR.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80JPN.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ITA.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80FRA.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ESP.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80ENU.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80DEU.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHT.dll
+ 2009-07-12 01:32 . 2009-07-12 01:32 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80CHS.dll
+ 2006-12-02 05:26 . 2006-12-02 05:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
- 2006-12-02 06:26 . 2006-12-02 06:26 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80u.dll
- 2006-12-02 06:25 . 2006-12-02 06:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2006-12-02 05:25 . 2006-12-02 05:25 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfcm80.dll
+ 2009-07-12 06:07 . 2009-07-12 06:07 57856 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80u.dll
+ 2009-07-12 06:19 . 2009-07-12 06:19 69632 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfcm80.dll
- 2006-12-02 04:56 . 2006-12-02 04:56 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2006-12-02 03:56 . 2006-12-02 03:56 96256 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
+ 2009-10-24 02:57 . 2009-10-24 02:57 16384 c:\windows\temp\Perflib_Perfdata_cac.dat
+ 2009-10-24 02:57 . 2009-10-24 02:57 16384 c:\windows\temp\Perflib_Perfdata_98c.dat
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(9).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(8).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(7).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(6).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(5).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(4).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(3).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(2).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(16).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(15).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(14).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(13).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(12).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(11).drv
+ 2004-08-04 07:56 . 2008-04-14 00:12 23552 c:\windows\system32\wdmaud(10).drv
+ 2008-08-19 03:56 . 2008-04-14 00:12 39936 c:\windows\system32\wbem\snmpthrd.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 33280 c:\windows\system32\snmp.exe
+ 2009-10-18 22:11 . 2009-01-09 21:18 27136 c:\windows\system32\ReinstallBackups\0021\DriverFiles\RimSerial.sys
+ 2006-05-07 00:24 . 2009-10-16 06:25 96820 c:\windows\system32\perfc009.dat
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(9).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(8).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(7).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(6).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(5).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(4).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(3).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(2).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(16).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(15).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(14).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(13).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(12).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(11).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 81920 c:\windows\system32\nvwddi(10).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(9).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(8).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(7).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(6).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(5).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(4).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(3).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(2).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(16).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(15).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(14).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(13).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(12).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(11).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 35840 c:\windows\system32\nvcod(10).dll
+ 2009-06-11 17:09 . 2009-10-16 04:53 88589 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
- 2009-06-11 17:09 . 2009-09-27 21:13 88589 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2008-08-19 03:56 . 2008-04-14 00:11 18944 c:\windows\system32\lprmon.dll
+ 2008-08-19 03:56 . 2008-04-14 00:11 22528 c:\windows\system32\lpdsvc.dll
+ 2008-08-19 03:56 . 2008-04-14 00:11 33792 c:\windows\system32\lmmib2.dll
+ 2007-03-16 07:21 . 2005-02-23 22:02 42858 c:\windows\system32\hsfci014(6).dll
+ 2007-03-16 07:21 . 2005-02-23 22:02 42858 c:\windows\system32\hsfci014(5).dll
+ 2007-03-16 07:21 . 2005-02-23 22:02 42858 c:\windows\system32\hsfci014(4).dll
+ 2007-03-16 07:21 . 2005-02-23 22:02 42858 c:\windows\system32\hsfci014(3).dll
+ 2007-03-16 07:21 . 2005-02-23 22:02 42858 c:\windows\system32\hsfci014(2).dll
+ 2008-08-19 03:56 . 2008-04-14 00:11 39936 c:\windows\system32\hostmib.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 92160 c:\windows\system32\evntwin.exe
+ 2008-08-19 03:56 . 2008-04-14 00:12 24064 c:\windows\system32\evntcmd.exe
+ 2009-10-15 23:10 . 2009-09-23 12:55 64288 c:\windows\system32\DRVSTORE\lbd_B425E86B28F27CC7F4A0CAF275F9F2789F3C6909\Lbd.sys
- 2008-04-16 19:51 . 2008-04-16 19:51 22784 c:\windows\system32\drivers\RimUsb.sys
+ 2008-05-20 23:33 . 2008-05-20 23:33 22784 c:\windows\system32\drivers\RimUsb.sys
+ 2008-08-19 03:56 . 2008-04-14 00:12 39936 c:\windows\system32\dllcache\snmpthrd.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 33280 c:\windows\system32\dllcache\snmp.exe
+ 2008-08-19 03:56 . 2008-04-14 00:11 18944 c:\windows\system32\dllcache\lprmon.dll
+ 2008-08-19 03:56 . 2008-04-14 00:11 22528 c:\windows\system32\dllcache\lpdsvc.dll
+ 2008-08-19 03:56 . 2008-04-14 00:11 33792 c:\windows\system32\dllcache\lmmib2.dll
+ 2008-08-19 03:56 . 2008-04-14 00:11 39936 c:\windows\system32\dllcache\hostmib.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 92160 c:\windows\system32\dllcache\evntwin.exe
+ 2008-08-19 03:56 . 2008-04-14 00:12 24064 c:\windows\system32\dllcache\evntcmd.exe
+ 2005-12-23 13:53 . 2005-12-23 13:53 23040 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0C0A\mscorsecr.dll
+ 2005-12-09 15:47 . 2005-12-09 15:47 85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - ESN\install.res.3082.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Web.Services.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Web.Mobile.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Transactions.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.ServiceProcess.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Security.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 11776 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Runtime.Serialization.Formatters.Soap.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Runtime.Remoting.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 61440 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Messaging.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Management.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.EnterpriseServices.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Drawing.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.DirectoryServices.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.DirectoryServices.Protocols.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\system.data.sqlxml.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 49152 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Configuration.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Configuration.Install.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\sysglobl.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 86528 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\ShFusRes.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 11264 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\Regasm.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\MSBuild.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 61440 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\Microsoft.VisualBasic.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 45056 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\Microsoft.JScript.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 10240 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\Microsoft.Build.Utilities.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\Microsoft.Build.Engine.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\caspol.resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\aspnet_regsql.resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 84992 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\aspnet_rc.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 23040 c:\windows\Microsoft.NET\Framework\v2.0.50727\3082\alinkui.dll
+ 2009-10-18 22:10 . 2009-10-18 22:10 49152 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\RedirectorEXE2_770DFD1204C24F4DA163D64FACCB5CBD.exe
+ 2009-10-18 22:09 . 2009-10-18 22:09 49152 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\RedirectorEXE1_770DFD1204C24F4DA163D64FACCB5CBD.exe
+ 2009-10-18 22:09 . 2009-10-18 22:09 49152 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\RedirectorEXE_770DFD1204C24F4DA163D64FACCB5CBD.exe
+ 2009-10-18 22:10 . 2009-10-18 22:10 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\NewShortcut600_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2009-10-18 22:10 . 2009-10-18 22:10 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\NewShortcut60_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2009-10-18 22:10 . 2009-10-18 22:10 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\NewShortcut6_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2009-10-18 22:10 . 2009-10-18 22:10 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\NewShortcut5_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2009-10-18 22:09 . 2009-10-18 22:10 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\NewShortcut4_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2009-10-18 22:09 . 2009-10-18 22:09 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\NewShortcut3_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2009-10-18 22:09 . 2009-10-18 22:09 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\NewShortcut12_C6ABA3677F944B9FBB00F060701B0B5A.exe
+ 2009-10-18 22:09 . 2009-10-18 22:09 69632 c:\windows\Installer\{EE59E3BD-6B7D-4BBB-B9CD-20EA7AEF1E10}\DesktopMgr.exe
+ 2009-10-18 00:01 . 2009-10-18 00:01 29926 c:\windows\Installer\{D40491E3-35AB-4757-B1F0-94C9100C2F4E}\_324405953A38774B92DF01.exe
+ 2009-10-20 21:59 . 2009-10-20 21:59 65024 c:\windows\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
+ 2009-10-20 21:59 . 2009-10-20 21:59 18944 c:\windows\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
+ 2009-10-18 20:23 . 2009-10-18 20:23 81920 c:\windows\assembly\GAC_MSIL\System.Web.Services.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Web.Services.Resources.dll
+ 2009-10-18 20:24 . 2009-10-18 20:24 77824 c:\windows\assembly\GAC_MSIL\System.Web.Mobile.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Web.Mobile.resources.dll
+ 2009-10-18 20:24 . 2009-10-18 20:24 16896 c:\windows\assembly\GAC_MSIL\System.Transactions.resources\2.0.0.0_es_b77a5c561934e089\System.Transactions.resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 40960 c:\windows\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.ServiceProcess.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 28672 c:\windows\assembly\GAC_MSIL\System.Security.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Security.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 11776 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 32768 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_es_b77a5c561934e089\System.Runtime.Remoting.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 61440 c:\windows\assembly\GAC_MSIL\System.Messaging.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Messaging.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 13312 c:\windows\assembly\GAC_MSIL\System.Management.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Management.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 32768 c:\windows\assembly\GAC_MSIL\System.EnterpriseServices.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.EnterpriseServices.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 24576 c:\windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Drawing.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 40960 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.resources\2.0.0.0_es-ES_b03f5f7f11d50a3a\System.DirectoryServices.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 28672 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols.resources\2.0.0.0_es-ES_b03f5f7f11d50a3a\System.DirectoryServices.Protocols.resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 36864 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml.resources\2.0.0.0_es_b77a5c561934e089\system.data.sqlxml.resources.dll
+ 2009-10-18 20:24 . 2009-10-18 20:24 49152 c:\windows\assembly\GAC_MSIL\system.configuration.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Configuration.resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 28672 c:\windows\assembly\GAC_MSIL\System.Configuration.Install.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Configuration.Install.Resources.dll
+ 2009-10-18 20:24 . 2009-10-18 20:24 10752 c:\windows\assembly\GAC_MSIL\sysglobl.resources\2.0.0.0_es_b03f5f7f11d50a3a\sysglobl.resources.dll
+ 2009-10-18 20:24 . 2009-10-18 20:24 61440 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.resources\8.0.0.0_es_b03f5f7f11d50a3a\Microsoft.VisualBasic.resources.dll
+ 2009-10-16 06:16 . 2009-10-16 06:16 64568 c:\windows\assembly\GAC_MSIL\Microsoft.ServiceModel.Channels.Mail\3.5.0.0__31bf3856ad364e35\Microsoft.ServiceModel.Channels.Mail.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 45056 c:\windows\assembly\GAC_MSIL\Microsoft.Jscript.resources\8.0.0.0_es_b03f5f7f11d50a3a\Microsoft.JScript.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 10240 c:\windows\assembly\GAC_MSIL\microsoft.build.utilities.resources\2.0.0.0_es_b03f5f7f11d50a3a\Microsoft.Build.Utilities.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 53248 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine.resources\2.0.0.0_es_b03f5f7f11d50a3a\Microsoft.Build.Engine.resources.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 8704 c:\windows\system32\snmptrap.exe
+ 2008-08-19 03:56 . 2008-04-14 00:12 6144 c:\windows\system32\snmpmib.dll
+ 2009-10-15 03:42 . 2009-10-15 03:42 5632 c:\windows\system32\pndx5032.dll
- 2008-01-19 00:45 . 2008-01-19 00:45 5632 c:\windows\system32\pndx5032.dll
+ 2009-10-15 03:42 . 2009-10-15 03:42 6656 c:\windows\system32\pndx5016.dll
- 2008-01-19 00:45 . 2008-01-19 00:45 6656 c:\windows\system32\pndx5016.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 7168 c:\windows\system32\mui\0C0A\mscorees.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 8704 c:\windows\system32\dllcache\snmptrap.exe
+ 2008-08-19 03:56 . 2008-04-14 00:12 6144 c:\windows\system32\dllcache\snmpmib.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC\es\Microsoft.VisualBasic.Compatibility.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\GAC\es\Microsoft.VisualBasic.Compatibility.Data.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 6144 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Drawing.Design.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\JSC.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 4096 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\InstallUtil.resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\aspnet_regbrowsers.resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 8704 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\aspnet_compiler.resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\3082\CvtResUI.dll
+ 2009-10-18 00:01 . 2009-10-18 00:01 3638 c:\windows\Installer\{D40491E3-35AB-4757-B1F0-94C9100C2F4E}\_D4DE8FFC8D1018F046DED7.exe
+ 2009-10-18 00:01 . 2009-10-18 00:01 5430 c:\windows\Installer\{D40491E3-35AB-4757-B1F0-94C9100C2F4E}\_B9320CB6D43382A470631C.exe
+ 2009-10-18 00:01 . 2009-10-18 00:01 3638 c:\windows\Installer\{D40491E3-35AB-4757-B1F0-94C9100C2F4E}\_6FEFF9B68218417F98F549.exe
+ 2009-10-18 00:01 . 2009-10-18 00:01 5430 c:\windows\Installer\{D40491E3-35AB-4757-B1F0-94C9100C2F4E}\_6FECB8B9CC6EAB57AC1A9A.exe
+ 2009-10-18 00:01 . 2009-10-18 00:01 3638 c:\windows\Installer\{D40491E3-35AB-4757-B1F0-94C9100C2F4E}\_6F04BF382DFC3303FADFA3.exe
+ 2009-10-20 21:59 . 2009-10-20 21:59 5120 c:\windows\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF16.exe
+ 2009-10-18 22:12 . 2009-10-18 22:12 6318 c:\windows\Installer\{689E0AB3-50B2-4E5A-9DCE-6DA9F5BE1314}\ICO_ARPProductIcon.exe
+ 2009-10-15 07:35 . 2009-10-15 07:35 8192 c:\windows\ERDNT\subs(2)\Users(2)\00000004(2)\UsrClass.dat
+ 2009-10-15 07:35 . 2009-10-15 07:35 8192 c:\windows\ERDNT\subs(2)\Users(2)\00000002(2)\UsrClass.dat
+ 2009-10-18 20:23 . 2009-10-18 20:23 6144 c:\windows\assembly\GAC_MSIL\System.Drawing.Design.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Drawing.Design.Resources.dll
+ 2009-10-18 20:24 . 2009-10-18 20:24 9216 c:\windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.resources\8.0.0.0_es_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.resources.dll
+ 2009-10-18 20:24 . 2009-10-18 20:24 9216 c:\windows\assembly\GAC_MSIL\microsoft.visualbasic.compatibility.data.resources\8.0.0.0_es_b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.resources.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 875520 c:\windows\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_f863c71f\msvcp90d.dll
+ 2008-07-29 08:54 . 2008-07-29 08:54 312832 c:\windows\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_f863c71f\msvcm90d.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll
+ 2008-07-29 08:54 . 2008-07-29 08:54 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\atl90.dll
+ 2006-12-02 03:54 . 2006-12-02 03:54 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
- 2006-12-02 04:54 . 2006-12-02 04:54 626688 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
- 2006-12-02 04:54 . 2006-12-02 04:54 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-02 03:54 . 2006-12-02 03:54 548864 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
- 2006-12-02 04:54 . 2006-12-02 04:54 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2006-12-02 03:54 . 2006-12-02 03:54 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2009-07-12 06:12 . 2009-07-12 06:12 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
+ 2009-07-12 06:09 . 2009-07-12 06:09 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
+ 2009-07-12 06:08 . 2009-07-12 06:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 188416 c:\windows\system32\wbem\snmpsmir.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 358400 c:\windows\system32\wbem\snmpincl.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 259072 c:\windows\system32\wbem\snmpcl.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 236544 c:\windows\system32\wbem\snmp\smi2smir.exe
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(9).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(8).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(7).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(6).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(5).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(4).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(3).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(2).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(15).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(14).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(13).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(12).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(11).dll
+ 2008-04-11 02:07 . 2006-06-15 20:25 117248 c:\windows\system32\staco(10).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(9).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(8).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(7).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(6).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(5).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(4).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(3).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(2).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(16).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(15).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(14).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(13).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(12).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(11).dll
+ 2008-04-11 02:08 . 2008-04-11 02:08 372736 c:\windows\system32\stacapi(10).dll
+ 2009-10-15 03:42 . 2009-10-15 03:42 185920 c:\windows\system32\rmoc3260.dll
- 2008-01-19 00:45 . 2008-01-19 00:45 278528 c:\windows\system32\pncrt.dll
+ 2008-01-19 00:45 . 2009-10-15 03:41 278528 c:\windows\system32\pncrt.dll
+ 2006-05-07 00:24 . 2009-10-16 06:25 505346 c:\windows\system32\perfh009.dat
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(9).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(8).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(7).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(6).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(5).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(4).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(3).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(2).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(16).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(15).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(14).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(13).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(12).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(11).exe
+ 2007-03-16 07:58 . 2006-07-12 21:19 155715 c:\windows\system32\nvsvc32(10).exe
+ 2008-08-19 03:56 . 2008-04-14 00:11 101888 c:\windows\system32\evntagnt.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 188416 c:\windows\system32\dllcache\snmpsmir.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 358400 c:\windows\system32\dllcache\snmpincl.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 259072 c:\windows\system32\dllcache\snmpcl.dll
+ 2008-08-19 03:56 . 2008-04-14 00:12 236544 c:\windows\system32\dllcache\smi2smir.exe
+ 2008-08-19 03:56 . 2008-04-14 00:11 101888 c:\windows\system32\dllcache\evntagnt.dll
+ 2009-02-19 22:47 . 2009-02-19 22:47 507904 c:\windows\system32\btwapi.dll
+ 2005-12-09 17:26 . 2005-12-09 17:26 245408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - ESN\unicows.dll
+ 2005-12-09 15:47 . 2005-12-09 15:47 609472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - ESN\install.exe
+ 2005-12-23 13:53 . 2005-12-23 13:53 163840 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.xml.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Windows.Forms.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 606208 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Web.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 208896 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\system.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 540672 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Design.Resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 380928 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Deployment.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 327680 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Data.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\System.Data.OracleClient.resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 400896 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\mscorrc.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\mscorlib.Resources.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 139264 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\Microsoft.Build.Tasks.resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 315392 c:\windows\Microsoft.NET\Framework\v2.0.50727\es\aspnetmmcext.resources.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 244224 c:\windows\Microsoft.NET\Framework\v2.0.50727\3082\Vsavb7rtUI.dll
+ 2005-12-23 13:53 . 2005-12-23 13:53 214016 c:\windows\Microsoft.NET\Framework\v2.0.50727\3082\vbc7ui.dll
+ 2005-12-23 13:52 . 2005-12-23 13:52 158208 c:\windows\Microsoft.NET\Framework\v2.0.50727\3082\cscompui.dll
+ 2009-10-16 06:16 . 2009-10-16 06:16 388608 c:\windows\Installer\ea2849.msi
+ 2009-10-15 02:07 . 2009-10-15 02:07 424448 c:\windows\Installer\ca6bf.msi
+ 2009-05-27 23:07 . 2009-05-27 23:07 585728 c:\windows\Installer\BBMediaSyncUninstall.exe
+ 2009-10-18 22:12 . 2009-10-18 22:12 974848 c:\windows\Installer\b4d28e5.msi
+ 2009-10-18 20:51 . 2009-10-18 20:51 380416 c:\windows\Installer\b067515.msi
+ 2009-10-18 20:24 . 2009-10-18 20:24 692736 c:\windows\Installer\aed539e.msi
+ 2009-10-18 17:23 . 2009-10-18 17:23 368128 c:\windows\Installer\a480deb.msi
+ 2009-10-15 22:53 . 2009-10-15 22:53 236032 c:\windows\Installer\760d07.msi
+ 2009-10-18 00:01 . 2009-10-18 00:01 500224 c:\windows\Installer\68e2dd7.msi
+ 2009-10-22 03:05 . 2009-10-22 03:05 201728 c:\windows\Installer\374b9a2.msi
+ 2009-10-16 11:44 . 2009-10-16 11:44 912384 c:\windows\Installer\2da7b.msi
+ 2009-10-10 03:22 . 2009-10-17 18:49 102400 c:\windows\Installer\{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}\iTunesIco.exe
- 2009-10-10 03:22 . 2009-10-10 03:22 102400 c:\windows\Installer\{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}\iTunesIco.exe
+ 2009-10-15 07:35 . 2009-10-15 07:35 278528 c:\windows\ERDNT\subs(2)\Users(2)\00000006(2)\UsrClass.dat
+ 2009-10-17 20:04 . 2009-10-17 20:04 323584 c:\windows\ERDNT\10-17-2009\Users\00000002\UsrClass.dat
+ 2009-10-17 20:04 . 2005-10-20 17:02 163328 c:\windows\ERDNT\10-17-2009\ERDNT.EXE
+ 2009-10-18 20:23 . 2009-10-18 20:23 163840 c:\windows\assembly\GAC_MSIL\System.XML.resources\2.0.0.0_es_b77a5c561934e089\System.xml.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 425984 c:\windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_es_b77a5c561934e089\System.Windows.Forms.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 606208 c:\windows\assembly\GAC_MSIL\System.Web.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Web.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 208896 c:\windows\assembly\GAC_MSIL\System.resources\2.0.0.0_es_b77a5c561934e089\system.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 540672 c:\windows\assembly\GAC_MSIL\System.Design.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Design.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 380928 c:\windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Deployment.resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 327680 c:\windows\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_es_b77a5c561934e089\System.Data.Resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 110592 c:\windows\assembly\GAC_MSIL\System.Data.OracleClient.resources\2.0.0.0_es_b77a5c561934e089\System.Data.OracleClient.resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 303104 c:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_es_b77a5c561934e089\mscorlib.Resources.dll
+ 2009-10-16 06:16 . 2009-10-16 06:16 140904 c:\windows\assembly\GAC_MSIL\Microsoft.ServiceModel.Channels.Mail.ExchangeWebService\3.5.0.0__31bf3856ad364e35\Microsoft.ServiceModel.Channels.Mail.ExchangeWebService.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 139264 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.resources\2.0.0.0_es_b03f5f7f11d50a3a\Microsoft.Build.Tasks.resources.dll
+ 2009-10-18 20:23 . 2009-10-18 20:23 315392 c:\windows\assembly\GAC_MSIL\AspNetMMCExt.resources\2.0.0.0_es_b03f5f7f11d50a3a\aspnetmmcext.resources.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 3783672 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90u.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 3768312 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 5982720 c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfc90ud.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 5937144 c:\windows\WinSxS\x86_Microsoft.VC90.DebugMFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_c94a3a24\mfc90d.dll
+ 2008-07-29 13:05 . 2008-07-29 13:05 1180672 c:\windows\WinSxS\x86_Microsoft.VC90.DebugCRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_f863c71f\msvcr90d.dll
+ 2006-12-02 05:25 . 2006-12-02 05:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
- 2006-12-02 06:25 . 2006-12-02 06:25 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80u.dll
- 2006-12-02 06:25 . 2006-12-02 06:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2006-12-02 05:25 . 2006-12-02 05:25 1101824 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\mfc80.dll
+ 2009-07-12 01:46 . 2009-07-12 01:46 1093120 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80u.dll
+ 2009-07-12 01:46 . 2009-07-12 01:46 1105920 c:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll
+ 2008-02-07 18:05 . 2009-10-15 20:15 6898156 c:\windows\system32\Restore\rstrlog.dat
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(9).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(8).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(7).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(6).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(5).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(4).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(3).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(2).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(16).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(15).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(14).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(13).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(12).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(11).dll
+ 2007-03-16 07:58 . 2006-07-12 21:19 4493568 c:\windows\system32\nv4_disp(10).dll
+ 2006-02-14 23:20 . 2009-02-06 17:35 1486208 c:\windows\system32\LegitCheckControl.DLL
+ 2006-05-06 17:30 . 2009-10-15 20:18 2195784 c:\windows\system32\FNTCACHE.DAT
- 2006-05-06 17:30 . 2009-10-10 03:29 2195784 c:\windows\system32\FNTCACHE.DAT
+ 2006-05-07 00:24 . 2009-10-16 01:42 1033728 c:\windows\system32\dllcache\explorer.exe
+ 2005-12-23 14:22 . 2005-12-23 14:22 1980416 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - ESN\langpack.msi
+ 2009-10-06 19:23 . 2009-10-06 19:23 4308992 c:\windows\Installer\e77a7b.msi
+ 2009-10-15 22:54 . 2009-10-15 22:54 1861120 c:\windows\Installer\760d11.msi
+ 2009-10-20 21:59 . 2009-10-20 21:59 1583616 c:\windows\Installer\3bef81b.msi
+ 2009-08-05 12:49 . 2009-08-05 12:49 3457024 c:\windows\Installer\25f66.msp
+ 2009-07-27 09:31 . 2009-07-27 09:31 3738624 c:\windows\Installer\25f55.msp
+ 2009-09-17 19:03 . 2009-09-17 19:03 4873216 c:\windows\Installer\25f45.msp
+ 2009-08-18 18:08 . 2009-08-18 18:08 1373696 c:\windows\Installer\25f34.msp
+ 2009-08-05 12:49 . 2009-08-05 12:49 3457024 c:\windows\Installer\226f262.msp
+ 2009-07-27 09:31 . 2009-07-27 09:31 3738624 c:\windows\Installer\226f251.msp
+ 2009-09-17 19:03 . 2009-09-17 19:03 4873216 c:\windows\Installer\226f241.msp
+ 2009-08-18 18:08 . 2009-08-18 18:08 1373696 c:\windows\Installer\226f230.msp
+ 2009-10-15 07:35 . 2009-10-15 07:35 9482240 c:\windows\ERDNT\subs(2)\Users(2)\00000005(2)\ntuser.dat
+ 2009-10-15 07:35 . 2009-10-15 07:35 1372160 c:\windows\ERDNT\subs(2)\Users(2)\00000003(2)\NTUSER.DAT
+ 2009-10-15 07:35 . 2009-10-15 07:35 1368064 c:\windows\ERDNT\subs(2)\Users(2)\00000001(2)\NTUSER.DAT
+ 2009-10-17 20:04 . 2009-10-17 20:04 9785344 c:\windows\ERDNT\10-17-2009\Users\00000001\ntuser.dat
+ 2009-10-16 11:10 . 2009-10-16 11:22 6985728 c:\windows\Downloaded Installations\{5840D406-AE94-4AEB-A7FA-C657865F0B8E}\Microsoft ActiveSync 4.0.msi
+ 2009-10-18 22:09 . 2009-10-18 22:09 16674304 c:\windows\Installer\b4d28dd.msi
+ 2009-08-15 01:32 . 2009-08-15 01:32 11110912 c:\windows\Installer\25f6d.msp
+ 2009-08-15 01:32 . 2009-08-15 01:32 11110912 c:\windows\Installer\226f269.msp
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2005-06-07 04:46 . 2005-06-07 04:46 57344 c:\program files\Adobe\Photoshop Album Starter Edition\3.0\Apps\bak\apdproxy.exe
2007-05-11 08:06 . 2007-10-11 01:51 39792 c:\program files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe
2007-03-25 16:28 . 2002-09-11 03:26 368706 c:\program files\BroadJump\Client Foundation\bak\CFD.exe
2007-03-25 21:33 . 2006-03-28 21:48 622592 c:\program files\Brother\Brmfcmon\bak\BrMfcWnd.exe
2007-03-25 21:33 . 2005-01-27 00:02 49152 c:\program files\Brother\Brmfl06a\bak\BrStDvPt.exe
2007-03-25 21:33 . 2006-04-10 20:58 61440 c:\program files\Brother\ControlCenter3\bak\brctrcen.exe
2007-03-01 15:37 . 2007-03-01 15:37 2321600 c:\program files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe
2007-03-01 20:57 . 2007-03-01 20:57 153136 c:\program files\Common Files\Ahead\Lib\bak\NeroCheck.exe
2007-05-16 14:27 . 2007-05-16 14:27 153136 c:\program files\Common Files\Ahead\Lib\bak\NMBgMonitor.exe
2008-01-19 00:45 . 2008-01-19 00:45 185896 c:\program files\Common Files\Real\Update_OB\bak\realsched.exe
2009-10-15 03:41 . 2009-10-15 03:41 198160 c:\program files\Common Files\Real\Update_OB\realsched.exe
2003-10-14 16:22 . 2003-10-14 16:22 155648 c:\program files\Common Files\ScanSoft Shared\SSBkgdUpdate\bak\SSBkgdupdate.exe
2005-06-02 17:21 . 2005-06-02 17:21 48752 c:\program files\Common Files\Symantec Shared\bak\ccApp.exe
2007-11-25 17:47 . 2007-12-21 15:28 579072 c:\program files\Grisoft\AVG7\bak\avgcc.exe
2007-03-16 07:41 . 2006-07-13 21:34 9134080 c:\program files\Intel Audio Studio\bak\IntelAudioStudio.exe
2007-03-25 20:09 . 2006-12-15 09:23 75520 c:\program files\Java\jre1.5.0_11\bin\bak\jusched.exe
2007-06-29 12:24 . 2007-06-29 12:24 286720 c:\program files\QuickTime\bak\qttask.exe
2009-09-05 06:54 . 2009-09-05 06:54 417792 c:\program files\QuickTime\QTTask.exe
2005-03-17 20:45 . 2005-03-17 20:45 40960 c:\program files\ScanSoft\PaperPort\bak\IndexSearch.exe
2005-03-17 20:25 . 2005-03-17 20:25 57393 c:\program files\ScanSoft\PaperPort\bak\pptd40nt.exe
2006-11-04 00:20 . 2006-11-04 00:20 866584 c:\program files\Windows Defender\bak\MSASCui.exe
2007-11-16 03:51 . 2007-11-16 03:51 166304 c:\program files\Zune\bak\ZuneLauncher.exe
2006-05-07 00:24 . 2004-08-04 19:00 15360 c:\windows\system32\bak\ctfmon.exe
2006-05-07 00:24 . 2008-04-14 00:12 15360 c:\windows\system32\ctfmon.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-09-18 1115392]
[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2009-09-18 17:28 1115392 —-a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-09-18 1115392]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-09-18 1115392]
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-15 39408]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 1289000]
"Advanced SystemCare 3"="c:\program files\IObit\Advanced SystemCare 3\AWC.exe" [2009-06-30 2329224]
"RIMDeviceManager"="c:\program files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" [2009-06-03 1406224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2002-09-14 212992]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-04-11 413696]
"ATT-SST_McciTrayApp"="c:\program files\ATT-SST\McciTrayApp.exe" [2008-09-02 1529856]
"Conime"="c:\windows\system32\conime.exe" [2008-04-14 27648]
"EKIJ5000StatusMonitor"="c:\windows\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe" [2009-04-07 1511424]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
"mumservice"="c:\program files\Motorola\Software Update\mumservice.exe" [2009-08-19 1070336]
"GSM"="c:\program files\Gateway\GSM\bin\usm.exe" [2005-06-01 9216]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-07-12 7626752]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2009-10-15 2007320]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-15 198160]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-07-02 623960]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-08-24 437160]
c:\documents and settings\SEXY SORCERESS\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]
OneNote Table Of Contents.onetoc2 [2008-1-4 3656]
c:\documents and settings\BOYS\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]
c:\documents and settings\Guest\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]
OneNote Table Of Contents.onetoc2 [2009-3-31 3656]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 20:21 548352 —-a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-10-15 02:08 12464 —-a-w- c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\NavLogon]
[BU]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\Wcescomm.exe"
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" /background
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Monitor"=c:\windows\PixArt\PAC207\Monitor.exe
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
"nwiz"=nwiz.exe /installquiet /keeploaded /nodetect
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Documents and Settings\\BOYS\\Application Data\\MySpace\\IM\\bin\\MySpaceIM.exe"=
"c:\\Program Files\\Ares Vista\\AresVista.exe"=
"c:\\Program Files\\Motorola\\RSD Lite\\SDL.exe"=
"c:\\Program Files\\Motorola\\Motoconnect\\SWDL.exe"=
"c:\\Program Files\\Motoconnect\\SWDL.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Adobe\\Adobe Bridge CS4\\Bridge.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\BitPim\\bitpimw.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\MessagingToolkit\\MessagingToolkit.BulkGateway.exe"=
"c:\\Program Files\\Cell Phone Analyzer Demo\\dcpa.exe"=
"c:\\Program Files\\Data Doctor - Mobile Phone Inspector\\MobileDoctor.exe"=
"c:\\Program Files\\Data Doctor Forensic Software - Pocket PC (Evaluation)\\PDAForensic.exe"=
"c:\\Program Files\\FrostWire\\FrostWire.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\QPST\\bin\\MemoryDebugApp.exe"=
"c:\\Program Files\\Mobile Master\\MobileMaster.exe"=
"c:\\Program Files\\MOBILedit! Forensic\\MOBILedit!.exe"=
"c:\\Program Files\\ATT-HSI\\McciBrowser.exe"=
"c:\\Program Files\\Motorola Phone Tools\\mPhonetools.exe"=
"c:\\Program Files\\Motorola\\Software Update\\msu.exe"=
"c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QPST\\bin\\QPSTConfig.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Motorola Tools\\M-Explorer\\mexplorer.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\QPST\\bin\\DMProxyWin.exe"=
"c:\\Program Files\\LANDesk\\Shared Files\\residentagent.exe"=
"c:\\Program Files\\Gateway\\GSM\\BIN\\ssm.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9323:TCP"= 9323:TCP:*:Disabled:EKDiscovery
"9324:TCP"= 9324:TCP:EKDiscovery
"5353:TCP"= 5353:TCP:*:Disabled:Adobe CSI CS4
"9322:TCP"= 9322:TCP:EKDiscovery
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [10/14/2009 9:08 PM 161800]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [10/15/2009 6:10 PM 64288]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [10/14/2009 9:08 PM 333192]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [10/14/2009 9:08 PM 360584]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [10/12/2009 9:24 PM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10/12/2009 9:24 PM 74480]
R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [10/14/2009 9:07 PM 285392]
R2 CBA8;LANDesk® Management Agent;c:\program files\LANDesk\Shared Files\residentAgent.exe [4/28/2005 2:05 PM 122880]
R2 CISMBIOS;CiSMBios Driver;c:\windows\system32\drivers\cismbios.sys [5/31/2005 11:53 PM 13312]
R2 IS360service;IS360service;c:\program files\IObit\IObit Security 360\is360srv.exe [10/15/2009 8:13 PM 309008]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [9/24/2009 6:17 AM 1169232]
R2 LSM_SSM;LANDesk® System Manager System Space Manager;c:\program files\Gateway\GSM\BIN\SSM.exe [6/1/2005 12:04 AM 28672]
R2 ModemView;LANDesk Message Handler Service;c:\program files\Gateway\GSM\BIN\modemview.exe [6/1/2005 12:13 AM 45056]
R2 MotoConnect Service;MotoConnect Service;c:\program files\Motorola\MotoConnectService\MotoConnectService.exe [10/13/2009 11:26 PM 91392]
R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2/7/2008 2:28 PM 24652]
R3 ICFWDM;ICFWDM;c:\windows\system32\drivers\icfwdm.sys [6/20/2002 12:35 PM 12064]
S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service;c:\program files\Kodak\AiO\Center\EKDiscovery.exe [5/4/2009 12:15 PM 279960]
S2 KodakSvc;Kodak AiO Device Service;c:\program files\Kodak\AiO\Center\KodakSvc.exe [4/17/2009 12:08 PM 32768]
S3 CTUPnPSv;Creative Centrale Media Server;c:\program files\Creative\Creative Centrale\CTUPnPSv.exe [5/21/2008 6:42 AM 64000]
S3 DCamUSBVeo532;Veo Stingray/Connect Web Camera;c:\windows\system32\drivers\ubVeo532.sys [7/1/2002 7:30 PM 95232]
S3 el575nd5;3Com Megahertz 10/100 LAN CardBus PC Card Driver;c:\windows\system32\drivers\el575ND5.sys [6/30/2006 11:44 PM 69692]
S3 lgatbus;LG USB Composite Device driver (WDM);c:\windows\system32\drivers\lgatbus.sys [9/28/2009 8:49 PM 43024]
S3 lgatmdm;LG CDMA USB Modem Drivers;c:\windows\system32\drivers\lgatmdm.sys [9/28/2009 8:49 PM 77104]
S3 lgatserd;LG CDMA USB Modem Diagnostic Serial Port Drivers (WDM);c:\windows\system32\drivers\lgatserd.sys [9/28/2009 8:49 PM 60816]
S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [10/13/2009 8:08 PM 19712]
S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [10/13/2009 8:08 PM 8320]
S3 MotDev;Motorola Inc. USB Device;c:\windows\system32\drivers\motodrv.sys [10/13/2009 8:08 PM 42752]
S3 motport;Motorola USB Diagnostic Port;c:\windows\system32\drivers\motport.sys [10/13/2009 8:08 PM 23936]
S3 PAC207;CIF USB Camera;c:\windows\system32\drivers\PFC027.SYS [2/18/2009 12:26 PM 505984]
S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [10/12/2009 9:24 PM 7408]
.
Contents of the 'Scheduled Tasks' folder
2009-10-24 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 13:06]
2009-10-19 c:\windows\Tasks\AiO Home Center Registration Remind Task.job
- c:\documents and settings\All Users\Application Data\Kodak\Installer\Registration.exe [2009-03-17 19:12]
2009-10-22 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]
2009-10-18 c:\windows\Tasks\Driver Robot.job
- c:\program files\Driver Robot\1.1.0.4\DriverRobot.exe [2009-09-30 15:22]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://news.yahoo.com/
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com
IE: E&xport; to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
Trusted Zone: motive.com\patttbc.att
DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} - hxxp://www.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
DPF: {49E67060-2C0D-415E-94C7-52A49F73B2F1}
DPF: {54D53429-945C-4188-B460-C81356541882} - hxxp://eshare.hpphoto.com/Download/HPeServicesLocalPrint.CAB
.
- - - - ORPHANS REMOVED - - - -
Toolbar-Visible - (no file)
Toolbar-Welcome - (no file)
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2009-10-23 23:19
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
- - - - - - - > 'winlogon.exe'(724)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\WININET.dll
.
Completion time: 2009-10-24 23:21
ComboFix-quarantined-files.txt 2009-10-24 04:21
ComboFix2.txt 2009-10-15 07:44
ComboFix3.txt 2009-10-15 00:10
Pre-Run: 68,500,176,896 bytes free
Post-Run: 68,751,753,216 bytes free
- - End Of File - - 16E2B537F32E58E16A91921C3798F1F1
