What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] I need help removing an infection

54 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #2
:welcome:

How old is your computer ??

Please download RootRepeal from one of these locations and save it to your desktop
Here
Here
Here
  • Open [external image: Posted Image] on your desktop.
  • Click the [external image: Posted Image] tab.
  • Click the [external image: Posted Image] button.
  • Check just these boxes:
  • [external image: Posted Image]
  • Push Ok
  • Check the box for your main system drive (Usually C:, and press Ok.
  • Allow RootRepeal to run a scan of your system. This may take some time.
  • Once the scan completes, push the [external image: Posted Image] button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your post.





  • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open. Please post the contents of both log.txt (<info.txt (<
Post #3
My laptop is one and a half years old. ROOTREPEAL © AD, 2007-2009 ================================================== Scan Start Time: 2009/12/03 01:19 Program Version: Version 1.3.5.0 Windows Version: Windows XP SP2 ================================================== Drivers ——————- Name: 1394BUS.SYS Image Path: C:\WINDOWS\system32\DRIVERS\1394BUS.SYS Address: 0xF768D000 Size: 53248 File Visible: - Signed: - Status: - Name: ABP480N5.SYS Image Path: ABP480N5.SYS Address: 0xF7945000 Size: 23552 File Visible: - Signed: - Status: - Name: ACPI.sys Image Path: ACPI.sys Address: 0xF7436000 Size: 187776 File Visible: - Signed: - Status: - Name: ACPI_HAL Image Path: \Driver\ACPI_HAL Address: 0x804D7000 Size: 2142208 File Visible: - Signed: - Status: - Name: ACPIEC.sys Image Path: ACPIEC.sys Address: 0xF7A99000 Size: 11648 File Visible: - Signed: - Status: - Name: adpu160m.sys Image Path: adpu160m.sys Address: 0xF72CA000 Size: 101888 File Visible: - Signed: - Status: - Name: afd.sys Image Path: C:\WINDOWS\System32\drivers\afd.sys Address: 0x9D41F000 Size: 138368 File Visible: - Signed: - Status: - Name: agp440.sys Image Path: agp440.sys Address: 0xF77CD000 Size: 42368 File Visible: - Signed: - Status: - Name: agpCPQ.sys Image Path: agpCPQ.sys Address: 0xF77DD000 Size: 44928 File Visible: - Signed: - Status: - Name: aha154x.sys Image Path: aha154x.sys Address: 0xF7AA5000 Size: 12800 File Visible: - Signed: - Status: - Name: aic78u2.sys Image Path: aic78u2.sys Address: 0xF76FD000 Size: 55168 File Visible: - Signed: - Status: - Name: aic78xx.sys Image Path: aic78xx.sys Address: 0xF76CD000 Size: 56960 File Visible: - Signed: - Status: - Name: aliide.sys Image Path: aliide.sys Address: 0xF7B81000 Size: 5248 File Visible: - Signed: - Status: - Name: alim1541.sys Image Path: alim1541.sys Address: 0xF77AD000 Size: 42752 File Visible: - Signed: - Status: - Name: alxnaykf.SYS Image Path: C:\WINDOWS\System32\Drivers\alxnaykf.SYS Address: 0xF3BBB000 Size: 413696 File Visible: - Signed: - Status: - Name: amdagp.sys Image Path: amdagp.sys Address: 0xF77BD000 Size: 43008 File Visible: - Signed: - Status: - Name: amsint.sys Image Path: amsint.sys Address: 0xF7AB1000 Size: 12032 File Visible: - Signed: - Status: - Name: asc.sys Image Path: asc.sys Address: 0xF7915000 Size: 26496 File Visible: - Signed: - Status: - Name: asc3350p.sys Image Path: asc3350p.sys Address: 0xF794D000 Size: 22400 File Visible: - Signed: - Status: - Name: asc3550.sys Image Path: asc3550.sys Address: 0xF7AB5000 Size: 14848 File Visible: - Signed: - Status: - Name: asyncmac.sys Image Path: C:\WINDOWS\system32\DRIVERS\asyncmac.sys Address: 0x9BA7B000 Size: 14336 File Visible: - Signed: - Status: - Name: atapi.sys Image Path: atapi.sys Address: 0xF72E3000 Size: 98304 File Visible: - Signed: - Status: - Name: atapi.sys Image Path: atapi.sys Address: 0x00000000 Size: 0 File Visible: - Signed: - Status: - Name: ATMFD.DLL Image Path: C:\WINDOWS\System32\ATMFD.DLL Address: 0xBFFA0000 Size: 286720 File Visible: - Signed: - Status: - Name: audstub.sys Image Path: C:\WINDOWS\system32\DRIVERS\audstub.sys Address: 0xF7CBD000 Size: 3072 File Visible: - Signed: - Status: - Name: b57xp32.sys Image Path: C:\WINDOWS\system32\DRIVERS\b57xp32.sys Address: 0xF40E8000 Size: 176128 File Visible: - Signed: - Status: - Name: BATTC.SYS Image Path: C:\WINDOWS\system32\DRIVERS\BATTC.SYS Address: 0xF7A95000 Size: 16384 File Visible: - Signed: - Status: - Name: bcmwl5.sys Image Path: C:\WINDOWS\system32\DRIVERS\bcmwl5.sys Address: 0xF4054000 Size: 604928 File Visible: - Signed: - Status: - Name: bdfm.sys Image Path: C:\WINDOWS\system32\drivers\bdfm.sys Address: 0x9B7D1000 Size: 104448 File Visible: - Signed: - Status: - Name: bdfndisf.sys Image Path: C:\WINDOWS\system32\DRIVERS\bdfndisf.sys Address: 0xF3B2D000 Size: 97792 File Visible: - Signed: - Status: - Name: bdfsfltr.sys Image Path: C:\WINDOWS\system32\drivers\bdfsfltr.sys Address: 0x9BA9B000 Size: 235520 File Visible: - Signed: - Status: - Name: bdftdif.sys Image Path: C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys Address: 0x9D469000 Size: 130560 File Visible: - Signed: - Status: - Name: bdselfpr.sys Image Path: C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys Address: 0x9BC12000 Size: 8832 File Visible: - Signed: - Status: - Name: BDVEDISK.sys Image Path: C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys Address: 0x9C2FF000 Size: 76032 File Visible: - Signed: - Status: - Name: Beep.SYS Image Path: C:\WINDOWS\System32\Drivers\Beep.SYS Address: 0xA01AA000 Size: 4224 File Visible: - Signed: - Status: - Name: BOOTVID.dll Image Path: C:\WINDOWS\system32\BOOTVID.dll Address: 0xF7A8D000 Size: 12288 File Visible: - Signed: - Status: - Name: cbidf2k.sys Image Path: cbidf2k.sys Address: 0xF7ABD000 Size: 13952 File Visible: - Signed: - Status: - Name: cd20xrnt.sys Image Path: cd20xrnt.sys Address: 0xF7B8D000 Size: 7680 File Visible: - Signed: - Status: - Name: Cdfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Cdfs.SYS Address: 0xA6A95000 Size: 63744 File Visible: - Signed: - Status: - Name: cdrom.sys Image Path: C:\WINDOWS\system32\DRIVERS\cdrom.sys Address: 0xF5601000 Size: 49536 File Visible: - Signed: - Status: - Name: CLASSPNP.SYS Image Path: C:\WINDOWS\system32\DRIVERS\CLASSPNP.SYS Address: 0xF775D000 Size: 53248 File Visible: - Signed: - Status: - Name: CmBatt.sys Image Path: C:\WINDOWS\system32\DRIVERS\CmBatt.sys Address: 0xF70B7000 Size: 14080 File Visible: - Signed: - Status: - Name: cmdide.sys Image Path: cmdide.sys Address: 0xF7B89000 Size: 6656 File Visible: - Signed: - Status: - Name: compbatt.sys Image Path: compbatt.sys Address: 0xF7A91000 Size: 9344 File Visible: - Signed: - Status: - Name: cpqarray.sys Image Path: cpqarray.sys Address: 0xF7AA1000 Size: 14976 File Visible: - Signed: - Status: - Name: dac2w2k.sys Image Path: dac2w2k.sys Address: 0xF729E000 Size: 179584 File Visible: - Signed: - Status: - Name: dac960nt.sys Image Path: dac960nt.sys Address: 0xF7AAD000 Size: 14720 File Visible: - Signed: - Status: - Name: disk.sys Image Path: disk.sys Address: 0xF774D000 Size: 36352 File Visible: - Signed: - Status: - Name: DKbFltr.sys Image Path: C:\WINDOWS\system32\DRIVERS\DKbFltr.sys Address: 0xF585A000 Size: 17408 File Visible: - Signed: - Status: - Name: dmio.sys Image Path: dmio.sys Address: 0xF73C2000 Size: 153344 File Visible: - Signed: - Status: - Name: dmload.sys Image Path: dmload.sys Address: 0xF7B8B000 Size: 5888 File Visible: - Signed: - Status: - Name: dpti2o.sys Image Path: dpti2o.sys Address: 0xF7955000 Size: 20192 File Visible: - Signed: - Status: - Name: drmk.sys Image Path: C:\WINDOWS\system32\drivers\drmk.sys Address: 0x9EE5A000 Size: 61440 File Visible: - Signed: - Status: - Name: dump_iaStor.sys Image Path: C:\WINDOWS\System32\Drivers\dump_iaStor.sys Address: 0x9CAFD000 Size: 815104 File Visible: No Signed: - Status: - Name: Dxapi.sys Image Path: C:\WINDOWS\System32\drivers\Dxapi.sys Address: 0x9CFA9000 Size: 12288 File Visible: - Signed: - Status: - Name: dxg.sys Image Path: C:\WINDOWS\System32\drivers\dxg.sys Address: 0xBF000000 Size: 73728 File Visible: - Signed: - Status: - Name: dxgthk.sys Image Path: C:\WINDOWS\System32\drivers\dxgthk.sys Address: 0xF7CF8000 Size: 4096 File Visible: - Signed: - Status: - Name: Fastfat.SYS Image Path: C:\WINDOWS\System32\Drivers\Fastfat.SYS Address: 0x9CBC4000 Size: 143360 File Visible: - Signed: - Status: - Name: Fips.SYS Image Path: C:\WINDOWS\System32\Drivers\Fips.SYS Address: 0x9E693000 Size: 34944 File Visible: - Signed: - Status: - Name: fltMgr.sys Image Path: fltMgr.sys Address: 0xF727E000 Size: 128896 File Visible: - Signed: - Status: - Name: Fs_Rec.SYS Image Path: C:\WINDOWS\System32\Drivers\Fs_Rec.SYS Address: 0xA01AC000 Size: 7936 File Visible: - Signed: - Status: - Name: fssfltr_tdi.sys Image Path: C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys Address: 0x9D17A000 Size: 48128 File Visible: - Signed: - Status: - Name: ftdisk.sys Image Path: ftdisk.sys Address: 0xF73E8000 Size: 125056 File Visible: - Signed: - Status: - Name: gagp30kx.sys Image Path: gagp30kx.sys Address: 0xF779D000 Size: 46464 File Visible: - Signed: - Status: - Name: GEARAspiWDM.sys Image Path: C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys Address: 0xF7A7D000 Size: 21120 File Visible: - Signed: - Status: - Name: hal.dll Image Path: C:\WINDOWS\system32\hal.dll Address: 0x806E2000 Size: 134272 File Visible: - Signed: - Status: - Name: HDAudBus.sys Image Path: C:\WINDOWS\system32\DRIVERS\HDAudBus.sys Address: 0xF4113000 Size: 151552 File Visible: - Signed: - Status: - Name: HIDCLASS.SYS Image Path: C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS Address: 0x9DF86000 Size: 36864 File Visible: - Signed: - Status: - Name: HIDPARSE.SYS Image Path: C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS Address: 0x9E949000 Size: 28672 File Visible: - Signed: - Status: - Name: hidusb.sys Image Path: C:\WINDOWS\system32\DRIVERS\hidusb.sys Address: 0x9D63C000 Size: 9600 File Visible: - Signed: - Status: - Name: hpn.sys Image Path: hpn.sys Address: 0xF7965000 Size: 25952 File Visible: - Signed: - Status: - Name: HSF_CNXT.sys Image Path: C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys Address: 0x9D640000 Size: 730112 File Visible: - Signed: - Status: - Name: HSF_DPV.sys Image Path: C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys Address: 0x9D6F3000 Size: 988800 File Visible: - Signed: - Status: - Name: HSFHWAZL.sys Image Path: C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys Address: 0x9D7E5000 Size: 209664 File Visible: - Signed: - Status: - Name: HTTP.sys Image Path: C:\WINDOWS\System32\Drivers\HTTP.sys Address: 0x9B790000 Size: 262784 File Visible: - Signed: - Status: - Name: i2omgmt.SYS Image Path: C:\WINDOWS\System32\Drivers\i2omgmt.SYS Address: 0xA01AE000 Size: 8192 File Visible: - Signed: - Status: - Name: i2omp.sys Image Path: i2omp.sys Address: 0xF7925000 Size: 18560 File Visible: - Signed: - Status: - Name: i8042prt.sys Image Path: C:\WINDOWS\system32\DRIVERS\i8042prt.sys Address: 0xF6ADD000 Size: 52736 File Visible: - Signed: - Status: - Name: iaStor.sys Image Path: iaStor.sys Address: 0xF72FB000 Size: 815104 File Visible: - Signed: - Status: - Name: iaStor.sys Image Path: iaStor.sys Address: 0x00000000 Size: 0 File Visible: - Signed: - Status: - Name: igxpdv32.DLL Image Path: C:\WINDOWS\System32\igxpdv32.DLL Address: 0xBF04E000 Size: 1720320 File Visible: - Signed: - Status: - Name: igxpdx32.DLL Image Path: C:\WINDOWS\System32\igxpdx32.DLL Address: 0xBF1F2000 Size: 2732032 File Visible: - Signed: - Status: - Name: igxpgd32.dll Image Path: C:\WINDOWS\System32\igxpgd32.dll Address: 0xBF024000 Size: 172032 File Visible: - Signed: - Status: - Name: igxpmp32.sys Image Path: C:\WINDOWS\system32\DRIVERS\igxpmp32.sys Address: 0xF416F000 Size: 5761728 File Visible: - Signed: - Status: - Name: igxprd32.dll Image Path: C:\WINDOWS\System32\igxprd32.dll Address: 0xBF012000 Size: 73728 File Visible: - Signed: - Status: - Name: imapi.sys Image Path: C:\WINDOWS\system32\DRIVERS\imapi.sys Address: 0xF5611000 Size: 41856 File Visible: - Signed: - Status: - Name: ini910u.sys Image Path: ini910u.sys Address: 0xF7AB9000 Size: 16000 File Visible: - Signed: - Status: - Name: int15.sys Image Path: C:\WINDOWS\system32\drivers\int15.sys Address: 0x9D514000 Size: 28672 File Visible: - Signed: - Status: - Name: intelide.sys Image Path: intelide.sys Address: 0xF7B83000 Size: 5504 File Visible: - Signed: - Status: - Name: intelppm.sys Image Path: C:\WINDOWS\system32\DRIVERS\intelppm.sys Address: 0xF6AED000 Size: 36096 File Visible: - Signed: - Status: - Name: ipnat.sys Image Path: C:\WINDOWS\system32\DRIVERS\ipnat.sys Address: 0x9D332000 Size: 134912 File Visible: - Signed: - Status: - Name: ipsec.sys Image Path: C:\WINDOWS\system32\DRIVERS\ipsec.sys Address: 0x9D4E1000 Size: 74752 File Visible: - Signed: - Status: - Name: irda.sys Image Path: C:\WINDOWS\system32\DRIVERS\irda.sys Address: 0x9CAE7000 Size: 87424 File Visible: - Signed: - Status: - Name: irenum.sys Image Path: C:\WINDOWS\system32\DRIVERS\irenum.sys Address: 0xF70B3000 Size: 11264 File Visible: - Signed: - Status: - Name: isapnp.sys Image Path: isapnp.sys Address: 0xF769D000 Size: 35840 File Visible: - Signed: - Status: - Name: kbdclass.sys Image Path: C:\WINDOWS\system32\DRIVERS\kbdclass.sys Address: 0xF5852000 Size: 24576 File Visible: - Signed: - Status: - Name: KDCOM.DLL Image Path: C:\WINDOWS\system32\KDCOM.DLL Address: 0xF7B7D000 Size: 8192 File Visible: - Signed: - Status: - Name: kmixer.sys Image Path: C:\WINDOWS\system32\drivers\kmixer.sys Address: 0x9B36D000 Size: 172416 File Visible: - Signed: - Status: - Name: ks.sys Image Path: C:\WINDOWS\system32\DRIVERS\ks.sys Address: 0xF3C20000 Size: 143360 File Visible: - Signed: - Status: - Name: KSecDD.sys Image Path: KSecDD.sys Address: 0xF7267000 Size: 92544 File Visible: - Signed: - Status: - Name: mcdbus.sys Image Path: C:\WINDOWS\system32\DRIVERS\mcdbus.sys Address: 0xF3B45000 Size: 116736 File Visible: - Signed: - Status: - Name: mdmxsdk.sys Image Path: C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys Address: 0x9C476000 Size: 12672 File Visible: - Signed: - Status: - Name: mdvrmng.sys Image Path: C:\WINDOWS\system32\drivers\mdvrmng.sys Address: 0x9CAD3000 Size: 81920 File Visible: - Signed: - Status: - Name: mnmdd.SYS Image Path: C:\WINDOWS\System32\Drivers\mnmdd.SYS Address: 0x9F8E0000 Size: 4224 File Visible: - Signed: - Status: - Name: Modem.SYS Image Path: C:\WINDOWS\System32\Drivers\Modem.SYS Address: 0x9EDCE000 Size: 30080 File Visible: - Signed: - Status: - Name: mouclass.sys Image Path: C:\WINDOWS\system32\DRIVERS\mouclass.sys Address: 0xF584A000 Size: 23040 File Visible: - Signed: - Status: - Name: mouhid.sys Image Path: C:\WINDOWS\system32\DRIVERS\mouhid.sys Address: 0x9D624000 Size: 12160 File Visible: - Signed: - Status: - Name: MountMgr.sys Image Path: MountMgr.sys Address: 0xF76AD000 Size: 42240 File Visible: - Signed: - Status: - Name: mraid35x.sys Image Path: mraid35x.sys Address: 0xF791D000 Size: 17280 File Visible: - Signed: - Status: - Name: mrxdav.sys Image Path: C:\WINDOWS\system32\DRIVERS\mrxdav.sys Address: 0x9C33A000 Size: 179584 File Visible: - Signed: - Status: - Name: mrxsmb.sys Image Path: C:\WINDOWS\system32\DRIVERS\mrxsmb.sys Address: 0x9D35D000 Size: 453632 File Visible: - Signed: - Status: - Name: Msfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Msfs.SYS Address: 0x9E939000 Size: 19072 File Visible: - Signed: - Status: - Name: msgpc.sys Image Path: C:\WINDOWS\system32\DRIVERS\msgpc.sys Address: 0xF78AD000 Size: 35072 File Visible: - Signed: - Status: - Name: mssmbios.sys Image Path: C:\WINDOWS\system32\DRIVERS\mssmbios.sys Address: 0xF46F6000 Size: 15488 File Visible: - Signed: - Status: - Name: Mup.sys Image Path: Mup.sys Address: 0xF717F000 Size: 107904 File Visible: - Signed: - Status: - Name: NDIS.sys Image Path: NDIS.sys Address: 0xF719A000 Size: 182912 File Visible: - Signed: - Status: - Name: ndistapi.sys Image Path: C:\WINDOWS\system32\DRIVERS\ndistapi.sys Address: 0xF7042000 Size: 9600 File Visible: - Signed: - Status: - Name: ndisuio.sys Image Path: C:\WINDOWS\system32\DRIVERS\ndisuio.sys Address: 0xF4702000 Size: 12928 File Visible: - Signed: - Status: - Name: ndiswan.sys Image Path: C:\WINDOWS\system32\DRIVERS\ndiswan.sys Address: 0xF3BA4000 Size: 91776 File Visible: - Signed: - Status: - Name: NDProxy.SYS Image Path: C:\WINDOWS\System32\Drivers\NDProxy.SYS Address: 0xF714F000 Size: 38016 File Visible: - Signed: - Status: - Name: netbios.sys Image Path: C:\WINDOWS\system32\DRIVERS\netbios.sys Address: 0x9E6B3000 Size: 34560 File Visible: - Signed: - Status: - Name: netbt.sys Image Path: C:\WINDOWS\system32\DRIVERS\netbt.sys Address: 0x9D441000 Size: 162816 File Visible: - Signed: - Status: - Name: Npfs.SYS Image Path: C:\WINDOWS\System32\Drivers\Npfs.SYS Address: 0x9E931000 Size: 30848 File Visible: - Signed: - Status: - Name: nscirda.sys Image Path: C:\WINDOWS\system32\DRIVERS\nscirda.sys Address: 0xF5842000 Size: 28672 File Visible: - Signed: - Status: - Name: Ntfs.sys Image Path: Ntfs.sys Address: 0xF71C7000 Size: 574464 File Visible: - Signed: - Status: - Name: NTIDrvr.sys Image Path: C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys Address: 0xF7BFB000 Size: 6144 File Visible: - Signed: - Status: - Name: ntkrnlpa.exe Image Path: C:\WINDOWS\system32\ntkrnlpa.exe Address: 0x804D7000 Size: 2142208 File Visible: - Signed: - Status: - Name: Null.SYS Image Path: C:\WINDOWS\System32\Drivers\Null.SYS Address: 0x9E361000 Size: 2944 File Visible: - Signed: - Status: - Name: ohci1394.sys Image Path: ohci1394.sys Address: 0xF767D000 Size: 61056 File Visible: - Signed: - Status: - Name: OPRGHDLR.SYS Image Path: C:\WINDOWS\system32\DRIVERS\OPRGHDLR.SYS Address: 0xF7C46000 Size: 4096 File Visible: - Signed: - Status: - Name: PartMgr.sys Image Path: PartMgr.sys Address: 0xF7905000 Size: 18688 File Visible: - Signed: - Status: - Name: pci.sys Image Path: pci.sys Address: 0xF7425000 Size: 68224 File Visible: - Signed: - Status: - Name: PCI_PNP7678 Image Path: \Driver\PCI_PNP7678 Address: 0x00000000 Size: 0 File Visible: No Signed: - Status: - Name: pciide.sys Image Path: pciide.sys Address: 0xF7C45000 Size: 3328 File Visible: - Signed: - Status: - Name: PCIIDEX.SYS Image Path: C:\WINDOWS\system32\DRIVERS\PCIIDEX.SYS Address: 0xF78FD000 Size: 28672 File Visible: - Signed: - Status: - Name: pcmcia.sys Image Path: pcmcia.sys Address: 0xF7407000 Size: 119936 File Visible: - Signed: - Status: - Name: perc2.sys Image Path: perc2.sys Address: 0xF795D000 Size: 27296 File Visible: - Signed: - Status: - Name: perc2hib.sys Image Path: perc2hib.sys Address: 0xF7B8F000 Size: 5504 File Visible: - Signed: - Status: - Name: PnpManager Image Path: \Driver\PnpManager Address: 0x804D7000 Size: 2142208 File Visible: - Signed: - Status: - Name: portcls.sys Image Path: C:\WINDOWS\system32\drivers\portcls.sys Address: 0x9D819000 Size: 139264 File Visible: - Signed: - Status: - Name: psched.sys Image Path: C:\WINDOWS\system32\DRIVERS\psched.sys Address: 0xF3B93000 Size: 69120 File Visible: - Signed: - Status: - Name: psdfilter.sys Image Path: C:\WINDOWS\system32\Drivers\psdfilter.sys Address: 0xAA63D000 Size: 32768 File Visible: - Signed: - Status: - Name: psdvdisk.sys Image Path: C:\WINDOWS\system32\Drivers\psdvdisk.sys Address: 0x9B755000 Size: 77824 File Visible: - Signed: - Status: - Name: ptilink.sys Image Path: C:\WINDOWS\system32\DRIVERS\ptilink.sys Address: 0xF79D5000 Size: 17792 File Visible: - Signed: - Status: - Name: PxHelp20.sys Image Path: PxHelp20.sys Address: 0xF776D000 Size: 35712 File Visible: - Signed: - Status: - Name: ql1080.sys Image Path: ql1080.sys Address: 0xF771D000 Size: 40320 File Visible: - Signed: - Status: - Name: ql10wnt.sys Image Path: ql10wnt.sys Address: 0xF76DD000 Size: 33152 File Visible: - Signed: - Status: - Name: ql12160.sys Image Path: ql12160.sys Address: 0xF773D000 Size: 45312 File Visible: - Signed: - Status: - Name: ql1240.sys Image Path: ql1240.sys Address: 0xF76ED000 Size: 40448 File Visible: - Signed: - Status: - Name: ql1280.sys Image Path: ql1280.sys Address: 0xF772D000 Size: 49024 File Visible: - Signed: - Status: - Name: rasacd.sys Image Path: C:\WINDOWS\system32\DRIVERS\rasacd.sys Address: 0x9E0D9000 Size: 8832 File Visible: - Signed: - Status: - Name: rasirda.sys Image Path: C:\WINDOWS\system32\DRIVERS\rasirda.sys Address: 0xF79CD000 Size: 19584 File Visible: - Signed: - Status: - Name: rasl2tp.sys Image Path: C:\WINDOWS\system32\DRIVERS\rasl2tp.sys Address: 0xF787D000 Size: 51328 File Visible: - Signed: - Status: - Name: raspppoe.sys Image Path: C:\WINDOWS\system32\DRIVERS\raspppoe.sys Address: 0xF788D000 Size: 41472 File Visible: - Signed: - Status: - Name: raspptp.sys Image Path: C:\WINDOWS\system32\DRIVERS\raspptp.sys Address: 0xF789D000 Size: 48384 File Visible: - Signed: - Status: - Name: raspti.sys Image Path: C:\WINDOWS\system32\DRIVERS\raspti.sys Address: 0xF79DD000 Size: 16512 File Visible: - Signed: - Status: - Name: RAW Image Path: \FileSystem\RAW Address: 0x804D7000 Size: 2142208 File Visible: - Signed: - Status: - Name: rdbss.sys Image Path: C:\WINDOWS\system32\DRIVERS\rdbss.sys Address: 0x9D3F4000 Size: 174592 File Visible: - Signed: - Status: - Name: RDPCDD.sys Image Path: C:\WINDOWS\System32\DRIVERS\RDPCDD.sys Address: 0x9F8DE000 Size: 4224 File Visible: - Signed: - Status: - Name: rdpdr.sys Image Path: C:\WINDOWS\system32\DRIVERS\rdpdr.sys Address: 0xF3B62000 Size: 196864 File Visible: - Signed: - Status: - Name: RDPWD.SYS Image Path: C:\WINDOWS\System32\Drivers\RDPWD.SYS Address: 0x9BB75000 Size: 139392 File Visible: - Signed: - Status: - Name: redbook.sys Image Path: C:\WINDOWS\system32\DRIVERS\redbook.sys Address: 0xF786D000 Size: 57472 File Visible: - Signed: - Status: - Name: rootrepeal.sys Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys Address: 0x9B428000 Size: 49152 File Visible: No Signed: - Status: - Name: RtkHDAud.sys Image Path: C:\WINDOWS\system32\drivers\RtkHDAud.sys Address: 0x9D83B000 Size: 4575232 File Visible: - Signed: - Status: - Name: SCSIPORT.SYS Image Path: C:\WINDOWS\System32\Drivers\SCSIPORT.SYS Address: 0xF7464000 Size: 98304 File Visible: - Signed: - Status: - Name: sdbus.sys Image Path: C:\WINDOWS\system32\DRIVERS\sdbus.sys Address: 0xF3FF7000 Size: 67584 File Visible: - Signed: - Status: - Name: sisagp.sys Image Path: sisagp.sys Address: 0xF777D000 Size: 41088 File Visible: - Signed: - Status: - Name: sparrow.sys Image Path: sparrow.sys Address: 0xF790D000 Size: 19072 File Visible: - Signed: - Status: - Name: sptd Image Path: \Driver\sptd Address: 0x00000000 Size: 0 File Visible: No Signed: - Status: - Name: spvm.sys Image Path: spvm.sys Address: 0xF747C000 Size: 1048576 File Visible: No Signed: - Status: - Name: srv.sys Image Path: C:\WINDOWS\system32\DRIVERS\srv.sys Address: 0x9C18D000 Size: 333184 File Visible: - Signed: - Status: - Name: swenum.sys Image Path: C:\WINDOWS\system32\DRIVERS\swenum.sys Address: 0xF7C0D000 Size: 4352 File Visible: - Signed: - Status: - Name: sym_hi.sys Image Path: sym_hi.sys Address: 0xF7935000 Size: 28384 File Visible: - Signed: - Status: - Name: sym_u3.sys Image Path: sym_u3.sys Address: 0xF793D000 Size: 30688 File Visible: - Signed: - Status: - Name: symc810.sys Image Path: symc810.sys Address: 0xF7AA9000 Size: 16256 File Visible: - Signed: - Status: - Name: symc8xx.sys Image Path: symc8xx.sys Address: 0xF792D000 Size: 32640 File Visible: - Signed: - Status: - Name: SynTP.sys Image Path: C:\WINDOWS\system32\DRIVERS\SynTP.sys Address: 0xF3FC8000 Size: 191936 File Visible: - Signed: - Status: - Name: sysaudio.sys Image Path: C:\WINDOWS\system32\drivers\sysaudio.sys Address: 0xA6252000 Size: 60800 File Visible: - Signed: - Status: - Name: tcpip.sys Image Path: C:\WINDOWS\system32\DRIVERS\tcpip.sys Address: 0x9D489000 Size: 360320 File Visible: - Signed: - Status: - Name: TDI.SYS Image Path: C:\WINDOWS\system32\DRIVERS\TDI.SYS Address: 0xF79BD000 Size: 20480 File Visible: - Signed: - Status: - Name: TDTCP.SYS Image Path: C:\WINDOWS\System32\Drivers\TDTCP.SYS Address: 0xF7A0D000 Size: 21760 File Visible: - Signed: - Status: - Name: termdd.sys Image Path: C:\WINDOWS\system32\DRIVERS\termdd.sys Address: 0xF78CD000 Size: 40704 File Visible: - Signed: - Status: - Name: tifm21.sys Image Path: C:\WINDOWS\system32\drivers\tifm21.sys Address: 0xF4008000 Size: 311296 File Visible: - Signed: - Status: - Name: toside.sys Image Path: toside.sys Address: 0xF7B85000 Size: 4992 File Visible: - Signed: - Status: - Name: tvicport.sys Image Path: C:\WINDOWS\system32\drivers\tvicport.sys Address: 0x9C06D000 Size: 11808 File Visible: - Signed: - Status: - Name: UBHelper.sys Image Path: UBHelper.sys Address: 0xF7A9D000 Size: 13952 File Visible: - Signed: - Status: - Name: ultra.sys Image Path: ultra.sys Address: 0xF770D000 Size: 36736 File Visible: - Signed: - Status: - Name: update.sys Image Path: C:\WINDOWS\system32\DRIVERS\update.sys Address: 0xF3AD4000 Size: 364160 File Visible: - Signed: - Status: - Name: USBD.SYS Image Path: C:\WINDOWS\system32\DRIVERS\USBD.SYS Address: 0xF7BED000 Size: 8192 File Visible: - Signed: - Status: - Name: usbehci.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbehci.sys Address: 0xF7A55000 Size: 30080 File Visible: - Signed: - Status: - Name: usbhub.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbhub.sys Address: 0xA5D53000 Size: 58240 File Visible: - Signed: - Status: - Name: USBPORT.SYS Image Path: C:\WINDOWS\system32\DRIVERS\USBPORT.SYS Address: 0xF4138000 Size: 143360 File Visible: - Signed: - Status: - Name: usbuhci.sys Image Path: C:\WINDOWS\system32\DRIVERS\usbuhci.sys Address: 0xF7A4D000 Size: 20608 File Visible: - Signed: - Status: - Name: vga.sys Image Path: C:\WINDOWS\System32\drivers\vga.sys Address: 0x9E941000 Size: 20992 File Visible: - Signed: - Status: - Name: viaagp.sys Image Path: viaagp.sys Address: 0xF778D000 Size: 42240 File Visible: - Signed: - Status: - Name: viaide.sys Image Path: viaide.sys Address: 0xF7B87000 Size: 5376 File Visible: - Signed: - Status: - Name: VIDEOPRT.SYS Image Path: C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS Address: 0xF415B000 Size: 81920 File Visible: - Signed: - Status: - Name: VolSnap.sys Image Path: VolSnap.sys Address: 0xF76BD000 Size: 52352 File Visible: - Signed: - Status: - Name: wanarp.sys Image Path: C:\WINDOWS\system32\DRIVERS\wanarp.sys Address: 0x9D5D8000 Size: 34560 File Visible: - Signed: - Status: - Name: watchdog.sys Image Path: C:\WINDOWS\System32\watchdog.sys Address: 0x9EDC6000 Size: 20480 File Visible: - Signed: - Status: - Name: wdmaud.sys Image Path: C:\WINDOWS\system32\drivers\wdmaud.sys Address: 0x9C8DE000 Size: 82944 File Visible: - Signed: - Status: - Name: Win32k Image Path: \Driver\Win32k Address: 0xBF800000 Size: 1851392 File Visible: - Signed: - Status: - Name: win32k.sys Image Path: C:\WINDOWS\System32\win32k.sys Address: 0xBF800000 Size: 1851392 File Visible: - Signed: - Status: - Name: wmiacpi.sys Image Path: C:\WINDOWS\system32\DRIVERS\wmiacpi.sys Address: 0xF7B79000 Size: 8832 File Visible: - Signed: - Status: - Name: WMILIB.SYS Image Path: C:\WINDOWS\System32\Drivers\WMILIB.SYS Address: 0xF7B7F000 Size: 8192 File Visible: - Signed: - Status: - Name: WMIxWDM Image Path: \Driver\WMIxWDM Address: 0x804D7000 Size: 2142208 File Visible: - Signed: - Status: - Name: WudfPf.sys Image Path: WudfPf.sys Address: 0xF7254000 Size: 76544 File Visible: - Signed: - Status: - Name: zntport.sys Image Path: C:\WINDOWS\system32\drivers\zntport.sys Address: 0xA5A09000 Size: 3552 File Visible: - Signed: - Status: - ROOTREPEAL © AD, 2007-2009 ================================================== Scan Start Time: 2009/12/03 01:19 Program Version: Version 1.3.5.0 Windows Version: Windows XP SP2 ================================================== Processes ——————- Path: System PID: 4 Status: - Path: C:\WINDOWS\explorer.exe PID: 260 Status: - Path: C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe PID: 388 Status: - Path: C:\WINDOWS\system32\spoolsv.exe PID: 436 Status: - Path: C:\DOCUME~1\THEUSE~1\LOCALS~1\Temp\RtkBtMnt.exe PID: 824 Status: - Path: C:\WINDOWS\system32\smss.exe PID: 1168 Status: - Path: C:\WINDOWS\system32\wbem\wmiprvse.exe PID: 1208 Status: - Path: C:\WINDOWS\system32\csrss.exe PID: 1216 Status: - Path: C:\WINDOWS\system32\winlogon.exe PID: 1244 Status: - Path: C:\WINDOWS\system32\services.exe PID: 1288 Status: - Path: C:\WINDOWS\system32\lsass.exe PID: 1300 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 1448 Status: - Path: C:\WINDOWS\RTHDCPL.exe PID: 1464 Status: - Path: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe PID: 1480 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 1528 Status: - Path: C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe PID: 1564 Status: - Path: C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe PID: 1584 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 1656 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 1732 Status: - Path: C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe PID: 1808 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 1876 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 1920 Status: - Path: C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe PID: 1992 Status: - Path: C:\WINDOWS\system32\igfxtray.exe PID: 2032 Status: - Path: C:\WINDOWS\system32\hkcmd.exe PID: 2060 Status: - Path: C:\WINDOWS\system32\igfxpers.exe PID: 2068 Status: - Path: C:\Acer\Empowering Technology\ePresentation\ePresentation.exe PID: 2076 Status: - Path: C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe PID: 2120 Status: - Path: C:\Acer\Empowering Technology\eRecovery\eRAgent.exe PID: 2128 Status: - Path: C:\Program Files\Launch Manager\LManager.exe PID: 2136 Status: - Path: C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe PID: 2176 Status: - Path: C:\WINDOWS\system32\igfxsrvc.exe PID: 2184 Status: - Path: C:\WINDOWS\system32\wscntfy.exe PID: 2204 Status: - Path: C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe PID: 2256 Status: - Path: C:\WINDOWS\explorer.exe PID: 2292 Status: Hidden from the Windows API! Path: C:\Program Files\iTunes\iTunesHelper.exe PID: 2308 Status: - Path: C:\Program Files\Windows Live\Messenger\msnmsgr.exe PID: 2328 Status: - Path: C:\WINDOWS\system32\ctfmon.exe PID: 2368 Status: - Path: C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe PID: 2416 Status: - Path: C:\Program Files\3\3Connect\AutoUpdateSrv.exe PID: 2428 Status: - Path: C:\WINDOWS\system32\wbem\unsecapp.exe PID: 2784 Status: - Path: C:\WINDOWS\system32\igfxext.exe PID: 2992 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 3120 Status: - Path: C:\Program Files\Common Files\svchost.exe PID: 3140 Status: - Path: C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe PID: 3220 Status: - Path: C:\Program Files\Kontiki\KService.exe PID: 3236 Status: - Path: C:\Program Files\CyberLink\Shared Files\RichVideo.exe PID: 3304 Status: - Path: C:\WINDOWS\system32\alg.exe PID: 3428 Status: - Path: C:\Program Files\Common Files\svchost.exe PID: 3504 Status: - Path: C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe PID: 3584 Status: - Path: C:\Program Files\iPod\bin\iPodService.exe PID: 3724 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 3780 Status: - Path: C:\WINDOWS\system32\wbem\wmiprvse.exe PID: 3928 Status: - Path: C:\WINDOWS\explorer.exe PID: 3940 Status: Hidden from the Windows API! Path: C:\WINDOWS\system32\wuauclt.exe PID: 4028 Status: - Path: C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe PID: 4052 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 4216 Status: - Path: C:\WINDOWS\system32\svchost.exe PID: 4852 Status: - Path: C:\Documents and Settings\The User\Desktop\RootRepeal.exe PID: 5564 Status: - Path: C:\Program Files\Mozilla Firefox\firefox.exe PID: 5868 Status: - Path: C:\WINDOWS\system32\taskmgr.exe PID: 6004 Status: - ROOTREPEAL © AD, 2007-2009 ================================================== Scan Start Time: 2009/12/03 01:19 Program Version: Version 1.3.5.0 Windows Version: Windows XP SP2 ================================================== SSDT ——————- #: 000 Function Name: NtAcceptConnectPort Status: Not hooked #: 001 Function Name: NtAccessCheck Status: Not hooked #: 002 Function Name: NtAccessCheckAndAuditAlarm Status: Not hooked #: 003 Function Name: NtAccessCheckByType Status: Not hooked #: 004 Function Name: NtAccessCheckByTypeAndAuditAlarm Status: Not hooked #: 005 Function Name: NtAccessCheckByTypeResultList Status: Not hooked #: 006 Function Name: NtAccessCheckByTypeResultListAndAuditAlarm Status: Not hooked #: 007 Function Name: NtAccessCheckByTypeResultListAndAuditAlarmByHandle Status: Not hooked #: 008 Function Name: NtAddAtom Status: Not hooked #: 009 Function Name: NtAddBootEntry Status: Not hooked #: 010 Function Name: NtAdjustGroupsToken Status: Not hooked #: 011 Function Name: NtAdjustPrivilegesToken Status: Not hooked #: 012 Function Name: NtAlertResumeThread Status: Not hooked #: 013 Function Name: NtAlertThread Status: Not hooked #: 014 Function Name: NtAllocateLocallyUniqueId Status: Not hooked #: 015 Function Name: NtAllocateUserPhysicalPages Status: Not hooked #: 016 Function Name: NtAllocateUuids Status: Not hooked #: 017 Function Name: NtAllocateVirtualMemory Status: Not hooked #: 018 Function Name: NtAreMappedFilesTheSame Status: Not hooked #: 019 Function Name: NtAssignProcessToJobObject Status: Not hooked #: 020 Function Name: NtCallbackReturn Status: Not hooked #: 021 Function Name: NtCancelDeviceWakeupRequest Status: Not hooked #: 022 Function Name: NtCancelIoFile Status: Not hooked #: 023 Function Name: NtCancelTimer Status: Not hooked #: 024 Function Name: NtClearEvent Status: Not hooked #: 025 Function Name: NtClose Status: Not hooked #: 026 Function Name: NtCloseObjectAuditAlarm Status: Not hooked #: 027 Function Name: NtCompactKeys Status: Not hooked #: 028 Function Name: NtCompareTokens Status: Not hooked #: 029 Function Name: NtCompleteConnectPort Status: Not hooked #: 030 Function Name: NtCompressKey Status: Not hooked #: 031 Function Name: NtConnectPort Status: Not hooked #: 032 Function Name: NtContinue Status: Not hooked #: 033 Function Name: NtCreateDebugObject Status: Not hooked #: 034 Function Name: NtCreateDirectoryObject Status: Not hooked #: 035 Function Name: NtCreateEvent Status: Not hooked #: 036 Function Name: NtCreateEventPair Status: Not hooked #: 037 Function Name: NtCreateFile Status: Not hooked #: 038 Function Name: NtCreateIoCompletion Status: Not hooked #: 039 Function Name: NtCreateJobObject Status: Not hooked #: 040 Function Name: NtCreateJobSet Status: Not hooked #: 041 Function Name: NtCreateKey Status: Hooked by "spvm.sys" at address 0xf747d0e0 #: 042 Function Name: NtCreateMailslotFile Status: Not hooked #: 043 Function Name: NtCreateMutant Status: Not hooked #: 044 Function Name: NtCreateNamedPipeFile Status: Not hooked #: 045 Function Name: NtCreatePagingFile Status: Not hooked #: 046 Function Name: NtCreatePort Status: Not hooked #: 047 Function Name: NtCreateProcess Status: Not hooked #: 048 Function Name: NtCreateProcessEx Status: Not hooked #: 049 Function Name: NtCreateProfile Status: Not hooked #: 050 Function Name: NtCreateSection Status: Not hooked #: 051 Function Name: NtCreateSemaphore Status: Not hooked #: 052 Function Name: NtCreateSymbolicLinkObject Status: Not hooked #: 053 Function Name: NtCreateThread Status: Not hooked #: 054 Function Name: NtCreateTimer Status: Not hooked #: 055 Function Name: NtCreateToken Status: Not hooked #: 056 Function Name: NtCreateWaitablePort Status: Not hooked #: 057 Function Name: NtDebugActiveProcess Status: Not hooked #: 058 Function Name: NtDebugContinue Status: Not hooked #: 059 Function Name: NtDelayExecution Status: Not hooked #: 060 Function Name: NtDeleteAtom Status: Not hooked #: 061 Function Name: NtDeleteBootEntry Status: Not hooked #: 062 Function Name: NtDeleteFile Status: Not hooked #: 063 Function Name: NtDeleteKey Status: Not hooked #: 064 Function Name: NtDeleteObjectAuditAlarm Status: Not hooked #: 065 Function Name: NtDeleteValueKey Status: Not hooked #: 066 Function Name: NtDeviceIoControlFile Status: Not hooked #: 067 Function Name: NtDisplayString Status: Not hooked #: 068 Function Name: NtDuplicateObject Status: Not hooked #: 069 Function Name: NtDuplicateToken Status: Not hooked #: 070 Function Name: NtEnumerateBootEntries Status: Not hooked #: 071 Function Name: NtEnumerateKey Status: Hooked by "spvm.sys" at address 0xf749bca2 #: 072 Function Name: NtEnumerateSystemEnvironmentValuesEx Status: Not hooked #: 073 Function Name: NtEnumerateValueKey Status: Hooked by "spvm.sys" at address 0xf749c030 #: 074 Function Name: NtExtendSection Status: Not hooked #: 075 Function Name: NtFilterToken Status: Not hooked #: 076 Function Name: NtFindAtom Status: Not hooked #: 077 Function Name: NtFlushBuffersFile Status: Not hooked #: 078 Function Name: NtFlushInstructionCache Status: Not hooked #: 079 Function Name: NtFlushKey Status: Not hooked #: 080 Function Name: NtFlushVirtualMemory Status: Not hooked #: 081 Function Name: NtFlushWriteBuffer Status: Not hooked #: 082 Function Name: NtFreeUserPhysicalPages Status: Not hooked #: 083 Function Name: NtFreeVirtualMemory Status: Not hooked #: 084 Function Name: NtFsControlFile Status: Not hooked #: 085 Function Name: NtGetContextThread Status: Not hooked #: 086 Function Name: NtGetDevicePowerState Status: Not hooked #: 087 Function Name: NtGetPlugPlayEvent Status: Not hooked #: 088 Function Name: NtGetWriteWatch Status: Not hooked #: 089 Function Name: NtImpersonateAnonymousToken Status: Not hooked #: 090 Function Name: NtImpersonateClientOfPort Status: Not hooked #: 091 Function Name: NtImpersonateThread Status: Not hooked #: 092 Function Name: NtInitializeRegistry Status: Not hooked #: 093 Function Name: NtInitiatePowerAction Status: Not hooked #: 094 Function Name: NtIsProcessInJob Status: Not hooked #: 095 Function Name: NtIsSystemResumeAutomatic Status: Not hooked #: 096 Function Name: NtListenPort Status: Not hooked #: 097 Function Name: NtLoadDriver Status: Not hooked #: 098 Function Name: NtLoadKey Status: Not hooked #: 099 Function Name: NtLoadKey2 Status: Not hooked #: 100 Function Name: NtLockFile Status: Not hooked #: 101 Function Name: NtLockProductActivationKeys Status: Not hooked #: 102 Function Name: NtLockRegistryKey Status: Not hooked #: 103 Function Name: NtLockVirtualMemory Status: Not hooked #: 104 Function Name: NtMakePermanentObject Status: Not hooked #: 105 Function Name: NtMakeTemporaryObject Status: Not hooked #: 106 Function Name: NtMapUserPhysicalPages Status: Not hooked #: 107 Function Name: NtMapUserPhysicalPagesScatter Status: Not hooked #: 108 Function Name: NtMapViewOfSection Status: Not hooked #: 109 Function Name: NtModifyBootEntry Status: Not hooked #: 110 Function Name: NtNotifyChangeDirectoryFile Status: Not hooked #: 111 Function Name: NtNotifyChangeKey Status: Not hooked #: 112 Function Name: NtNotifyChangeMultipleKeys Status: Not hooked #: 113 Function Name: NtOpenDirectoryObject Status: Not hooked #: 114 Function Name: NtOpenEvent Status: Not hooked #: 115 Function Name: NtOpenEventPair Status: Not hooked #: 116 Function Name: NtOpenFile Status: Not hooked #: 117 Function Name: NtOpenIoCompletion Status: Not hooked #: 118 Function Name: NtOpenJobObject Status: Not hooked #: 119 Function Name: NtOpenKey Status: Hooked by "spvm.sys" at address 0xf747d0c0 #: 120 Function Name: NtOpenMutant Status: Not hooked #: 121 Function Name: NtOpenObjectAuditAlarm Status: Not hooked #: 122 Function Name: NtOpenProcess Status: Hooked by "C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys" at address 0x9bc12c90 #: 123 Function Name: NtOpenProcessToken Status: Not hooked #: 124 Function Name: NtOpenProcessTokenEx Status: Not hooked #: 125 Function Name: NtOpenSection Status: Not hooked #: 126 Function Name: NtOpenSemaphore Status: Not hooked #: 127 Function Name: NtOpenSymbolicLinkObject Status: Not hooked #: 128 Function Name: NtOpenThread Status: Hooked by "C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys" at address 0x9bc12d7e #: 129 Function Name: NtOpenThreadToken Status: Not hooked #: 130 Function Name: NtOpenThreadTokenEx Status: Not hooked #: 131 Function Name: NtOpenTimer Status: Not hooked #: 132 Function Name: NtPlugPlayControl Status: Not hooked #: 133 Function Name: NtPowerInformation Status: Not hooked #: 134 Function Name: NtPrivilegeCheck Status: Not hooked #: 135 Function Name: NtPrivilegeObjectAuditAlarm Status: Not hooked #: 136 Function Name: NtPrivilegedServiceAuditAlarm Status: Not hooked #: 137 Function Name: NtProtectVirtualMemory Status: Not hooked #: 138 Function Name: NtPulseEvent Status: Not hooked #: 139 Function Name: NtQueryAttributesFile Status: Not hooked #: 140 Function Name: NtQueryBootEntryOrder Status: Not hooked #: 141 Function Name: NtQueryBootOptions Status: Not hooked #: 142 Function Name: NtQueryDebugFilterState Status: Not hooked #: 143 Function Name: NtQueryDefaultLocale Status: Not hooked #: 144 Function Name: NtQueryDefaultUILanguage Status: Not hooked #: 145 Function Name: NtQueryDirectoryFile Status: Not hooked #: 146 Function Name: NtQueryDirectoryObject Status: Not hooked #: 147 Function Name: NtQueryEaFile Status: Not hooked #: 148 Function Name: NtQueryEvent Status: Not hooked #: 149 Function Name: NtQueryFullAttributesFile Status: Not hooked #: 150 Function Name: NtQueryInformationAtom Status: Not hooked #: 151 Function Name: NtQueryInformationFile Status: Not hooked #: 152 Function Name: NtQueryInformationJobObject Status: Not hooked #: 153 Function Name: NtQueryInformationPort Status: Not hooked #: 154 Function Name: NtQueryInformationProcess Status: Not hooked #: 155 Function Name: NtQueryInformationThread Status: Not hooked #: 156 Function Name: NtQueryInformationToken Status: Not hooked #: 157 Function Name: NtQueryInstallUILanguage Status: Not hooked #: 158 Function Name: NtQueryIntervalProfile Status: Not hooked #: 159 Function Name: NtQueryIoCompletion Status: Not hooked #: 160 Function Name: NtQueryKey Status: Hooked by "spvm.sys" at address 0xf749c108 #: 161 Function Name: NtQueryMultipleValueKey Status: Not hooked #: 162 Function Name: NtQueryMutant Status: Not hooked #: 163 Function Name: NtQueryObject Status: Not hooked #: 164 Function Name: NtQueryOpenSubKeys Status: Not hooked #: 165 Function Name: NtQueryPerformanceCounter Status: Not hooked #: 166 Function Name: NtQueryQuotaInformationFile Status: Not hooked #: 167 Function Name: NtQuerySection Status: Not hooked #: 168 Function Name: NtQuerySecurityObject Status: Not hooked #: 169 Function Name: NtQuerySemaphore Status: Not hooked #: 170 Function Name: NtQuerySymbolicLinkObject Status: Not hooked #: 171 Function Name: NtQuerySystemEnvironmentValue Status: Not hooked #: 172 Function Name: NtQuerySystemEnvironmentValueEx Status: Not hooked #: 173 Function Name: NtQuerySystemInformation Status: Not hooked #: 174 Function Name: NtQuerySystemTime Status: Not hooked #: 175 Function Name: NtQueryTimer Status: Not hooked #: 176 Function Name: NtQueryTimerResolution Status: Not hooked #: 177 Function Name: NtQueryValueKey Status: Hooked by "spvm.sys" at address 0xf749bf88 #: 178 Function Name: NtQueryVirtualMemory Status: Not hooked #: 179 Function Name: NtQueryVolumeInformationFile Status: Not hooked #: 180 Function Name: NtQueueApcThread Status: Not hooked #: 181 Function Name: NtRaiseException Status: Not hooked #: 182 Function Name: NtRaiseHardError Status: Not hooked #: 183 Function Name: NtReadFile Status: Not hooked #: 184 Function Name: NtReadFileScatter Status: Not hooked #: 185 Function Name: NtReadRequestData Status: Not hooked #: 186 Function Name: NtReadVirtualMemory Status: Not hooked #: 187 Function Name: NtRegisterThreadTerminatePort Status: Not hooked #: 188 Function Name: NtReleaseMutant Status: Not hooked #: 189 Function Name: NtReleaseSemaphore Status: Not hooked #: 190 Function Name: NtRemoveIoCompletion Status: Not hooked #: 191 Function Name: NtRemoveProcessDebug Status: Not hooked #: 192 Function Name: NtRenameKey Status: Not hooked #: 193 Function Name: NtReplaceKey Status: Not hooked #: 194 Function Name: NtReplyPort Status: Not hooked #: 195 Function Name: NtReplyWaitReceivePort Status: Not hooked #: 196 Function Name: NtReplyWaitReceivePortEx Status: Not hooked #: 197 Function Name: NtReplyWaitReplyPort Status: Not hooked #: 198 Function Name: NtRequestDeviceWakeup Status: Not hooked #: 199 Function Name: NtRequestPort Status: Not hooked #: 200 Function Name: NtRequestWaitReplyPort Status: Not hooked #: 201 Function Name: NtRequestWakeupLatency Status: Not hooked #: 202 Function Name: NtResetEvent Status: Not hooked #: 203 Function Name: NtResetWriteWatch Status: Not hooked #: 204 Function Name: NtRestoreKey Status: Not hooked #: 205 Function Name: NtResumeProcess Status: Not hooked #: 206 Function Name: NtResumeThread Status: Not hooked #: 207 Function Name: NtSaveKey Status: Not hooked #: 208 Function Name: NtSaveKeyEx Status: Not hooked #: 209 Function Name: NtSaveMergedKeys Status: Not hooked #: 210 Function Name: NtSecureConnectPort Status: Not hooked #: 211 Function Name: NtSetBootEntryOrder Status: Not hooked #: 212 Function Name: NtSetBootOptions Status: Not hooked #: 213 Function Name: NtSetContextThread Status: Not hooked #: 214 Function Name: NtSetDebugFilterState Status: Not hooked #: 215 Function Name: NtSetDefaultHardErrorPort Status: Not hooked #: 216 Function Name: NtSetDefaultLocale Status: Not hooked #: 217 Function Name: NtSetDefaultUILanguage Status: Not hooked #: 218 Function Name: NtSetEaFile Status: Not hooked #: 219 Function Name: NtSetEvent Status: Not hooked #: 220 Function Name: NtSetEventBoostPriority Status: Not hooked #: 221 Function Name: NtSetHighEventPair Status: Not hooked #: 222 Function Name: NtSetHighWaitLowEventPair Status: Not hooked #: 223 Function Name: NtSetInformationDebugObject Status: Not hooked #: 224 Function Name: NtSetInformationFile Status: Not hooked #: 225 Function Name: NtSetInformationJobObject Status: Not hooked #: 226 Function Name: NtSetInformationKey Status: Not hooked #: 227 Function Name: NtSetInformationObject Status: Not hooked #: 228 Function Name: NtSetInformationProcess Status: Not hooked #: 229 Function Name: NtSetInformationThread Status: Not hooked #: 230 Function Name: NtSetInformationToken Status: Not hooked #: 231 Function Name: NtSetIntervalProfile Status: Not hooked #: 232 Function Name: NtSetIoCompletion Status: Not hooked #: 233 Function Name: NtSetLdtEntries Status: Not hooked #: 234 Function Name: NtSetLowEventPair Status: Not hooked #: 235 Function Name: NtSetLowWaitHighEventPair Status: Not hooked #: 236 Function Name: NtSetQuotaInformationFile Status: Not hooked #: 237 Function Name: NtSetSecurityObject Status: Not hooked #: 238 Function Name: NtSetSystemEnvironmentValue Status: Not hooked #: 239 Function Name: NtSetSystemEnvironmentValueEx Status: Not hooked #: 240 Function Name: NtSetSystemInformation Status: Not hooked #: 241 Function Name: NtSetSystemPowerState Status: Not hooked #: 242 Function Name: NtSetSystemTime Status: Not hooked #: 243 Function Name: NtSetThreadExecutionState Status: Not hooked #: 244 Function Name: NtSetTimer Status: Not hooked #: 245 Function Name: NtSetTimerResolution Status: Not hooked #: 246 Function Name: NtSetUuidSeed Status: Not hooked #: 247 Function Name: NtSetValueKey Status: Hooked by "spvm.sys" at address 0xf749c19a #: 248 Function Name: NtSetVolumeInformationFile Status: Not hooked #: 249 Function Name: NtShutdownSystem Status: Not hooked #: 250 Function Name: NtSignalAndWaitForSingleObject Status: Not hooked #: 251 Function Name: NtStartProfile Status: Not hooked #: 252 Function Name: NtStopProfile Status: Not hooked #: 253 Function Name: NtSuspendProcess Status: Not hooked #: 254 Function Name: NtSuspendThread Status: Not hooked #: 255 Function Name: NtSystemDebugControl Status: Not hooked #: 256 Function Name: NtTerminateJobObject Status: Not hooked #: 257 Function Name: NtTerminateProcess Status: Hooked by "C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys" at address 0x9bc12bf4 #: 258 Function Name: NtTerminateThread Status: Hooked by "C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys" at address 0x9bc12ec4 #: 259 Function Name: NtTestAlert Status: Not hooked #: 260 Function Name: NtTraceEvent Status: Not hooked #: 261 Function Name: NtTranslateFilePath Status: Not hooked #: 262 Function Name: NtUnloadDriver Status: Not hooked #: 263 Function Name: NtUnloadKey Status: Not hooked #: 264 Function Name: NtUnloadKeyEx Status: Not hooked #: 265 Function Name: NtUnlockFile Status: Not hooked #: 266 Function Name: NtUnlockVirtualMemory Status: Not hooked #: 267 Function Name: NtUnmapViewOfSection Status: Not hooked #: 268 Function Name: NtVdmControl Status: Not hooked #: 269 Function Name: NtWaitForDebugEvent Status: Not hooked #: 270 Function Name: NtWaitForMultipleObjects Status: Not hooked #: 271 Function Name: NtWaitForSingleObject Status: Not hooked #: 272 Function Name: NtWaitHighEventPair Status: Not hooked #: 273 Function Name: NtWaitLowEventPair Status: Not hooked #: 274 Function Name: NtWriteFile Status: Not hooked #: 275 Function Name: NtWriteFileGather Status: Not hooked #: 276 Function Name: NtWriteRequestData Status: Not hooked #: 277 Function Name: NtWriteVirtualMemory Status: Not hooked #: 278 Function Name: NtYieldExecution Status: Not hooked #: 279 Function Name: NtCreateKeyedEvent Status: Not hooked #: 280 Function Name: NtOpenKeyedEvent Status: Not hooked #: 281 Function Name: NtReleaseKeyedEvent Status: Not hooked #: 282 Function Name: NtWaitForKeyedEvent Status: Not hooked #: 283 Function Name: NtQueryPortInformationProcess Status: Not hooked Thanks
Post #4
info.txt logfile of random's system information tool 1.06 2009-12-03 01:22:42 ======Uninstall list====== –>C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER –>C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Acer Inc.\Acer English Online Help Creator\Uninst.isu" –>rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf 2007 Microsoft Office Suite Service Pack 1 (SP1)–>msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C} 2007 Microsoft Office Suite Service Pack 1 (SP1)–>msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1} 2007 Microsoft Office system–>"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROHYBRIDR /dll OSETUP.DLL 3 USB Modem–>C:\PROGRA~1\HUAWEI~1\HUAWEI~1\Uninstall.exe 7-Zip 4.65–>"D:\7Zip\7-Zip\Uninstall.exe" Acer eDataSecurity Management 2.0.4088–>C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{4AD13F68-CADA-4C6B-9759-C33753F89908} /l1033 Acer eDataSecurity Management–>C:\Acer\Empowering Technology\eDataSecurity\eDStbmngr.exe UNINSTALL 1 Acer eLock Management–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{116FF17B-1A30-4FC2-9B01-5BC5BD46B0B3}\setup.exe" -l0x9 -removeonly Acer ePower Management–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\setup.exe" -l0x9 -removeonly Acer eSettings Management–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F2C8256-2773-46C7-9ABA-3E39C24ABB51}\setup.exe" -l0x9 -removeonly Acer GridVista–>C:\WINDOWS\UnInst32.exe GridV.UNI Acer ScreenSaver–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}\setup.exe" -l0x9 -removeonly Activation Assistant for the 2007 Microsoft Office suites–>"C:\Documents and Settings\All Users\Application Data\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)–>MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7} Adobe Flash Player 10 ActiveX–>C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player 10 Plugin–>C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Photoshop Elements 7.0–>msiexec /i {CB6075D9-F912-40AE-BEA6-E590DA24F16B} Adobe Shockwave Player–>C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log Apple Application Support–>MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415} Apple Software Update–>MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} BBC iPlayer Download Manager–>MsiExec.exe /I {D466F3D9-510C-4729-B7D4-2E70490E4CDF} BitDefender Total Security 2009–>MsiExec.exe /X{8ACF317C-CA66-4363-AEBF-A073B124AA1A} Bonjour–>MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B} Business Contact Manager for Outlook 2007 SP1–>"C:\Program Files\Microsoft Small Business\Business Contact Manager\SetupBootstrap\Setup.exe" /remove {B32C4059-6E7A-41EF-AD20-56DF1872B923} Camera RAW Plug-In for EPSON Creativity Suite–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}\SETUP.EXE" -l0x9 UNINST Canon EOS Kiss_N REBEL_XT 350D WIA Driver–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{33CF7CDF-9805-4500-9CC7-D19D52AD63C4} Choice Guard–>MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E} Create A Mall .–>C:\Program Files\Merscom\Create A Mall\Uninstall.exe Critical Update for Windows Media Player 11 (KB959772)–>"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe" CV Writer–>MsiExec.exe /x{76E5ADA2-3EC7-44A3-8708-5282ED28A2DC} CX4300_5500_DX4400 manual–>C:\Program Files\EPSON\TPMANUAL\CX4300_5500_DX4400\ENG\USE_G\DOCUNINS.EXE DiscJuggler–>C:\Program Files\Padus\DiscJuggler\Uninstall.exe DivX Codec–>C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Player–>C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER Driver Detective–>C:\Program Files\InstallShield Installation Information\{621C02EA-AAFF-4026-A903-165D59529A16}\setup.exe -runfromtemp -l0x0409 EndNote Web 2.5 –>MsiExec.exe /X{1DFE388B-6FD3-4230-A47B-393AEA68C01D} EPSON Attach To Email–>C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG EPSON Copy Utility 3–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x9 -UnInstall EPSON File Manager–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2EB81825-E9EE-44F4-8F51-1240C3898DC6}\Setup.exe" -l0x9 UNINST EPSON Printer Software–>C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R EPSON Scan Assistant–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x9 -u EPSON Web-To-Page–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x9 -anything FreeHDplay–>"C:\Program Files\FreeHDplay\Uninstall.exe" HDAUDIO Soft Data Fax Modem with SmartCP–>C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV;_2BFAOR2C06_118\UIU32m.exe -U -IAcZUnM5k.inf High Definition Audio Driver Package - KB888111–>"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" Hotfix for Windows Internet Explorer 7 (KB947864)–>"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe" Hotfix for Windows Media Format 11 SDK (KB929399)–>"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Hotfix for Windows Media Player 11 (KB939683)–>"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Hotfix for Windows XP (KB896256)–>"C:\WINDOWS\$NtUninstallKB896256$\spuninst\spuninst.exe" Hotfix for Windows XP (KB909667)–>"C:\WINDOWS\$NtUninstallKB909667$\spuninst\spuninst.exe" Hotfix for Windows XP (KB914440)–>"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe" Hotfix for Windows XP (KB914642)–>"C:\WINDOWS\$NtUninstallKB914642$\spuninst\spuninst.exe" Hotfix for Windows XP (KB915865)–>"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe" Hotfix for Windows XP (KB918005)–>"C:\WINDOWS\$NtUninstallKB918005$\spuninst\spuninst.exe" Hotfix for Windows XP (KB926239)–>"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe" Hotfix for Windows XP (KB935448)–>"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe" Hotfix for Windows XP (KB952287)–>"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" Hotfix for Windows XP (KB954708)–>"C:\WINDOWS\$NtUninstallKB954708$\spuninst\spuninst.exe" Hotfix for Windows XP (KB961118)–>"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe" Hotfix for Windows XP (KB970653-v3)–>"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe" Hotfix for Windows XP (KB976098-v2)–>"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe" Huawei Modems–>C:\WINDOWS\Huawei ModemsUninstall.exe Intel® Graphics Media Accelerator Driver–>C:\WINDOWS\system32\igxpun.exe -uninstall Intel® Matrix Storage Manager–>C:\WINDOWS\System32\Imsmudlg.exe Java™ 6 Update 5–>MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050} Junk Mail filter update–>MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3} Launch Manager–>C:\WINDOWS\UnInst32.exe LManager.UNI LiveUpdate 3.1 (Symantec Corporation)–>"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U Magic ISO Maker v5.5 (build 0276)–>C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG MagicDisc 2.7.106–>C:\PROGRA~1\MAGICD~1\UNWISE.EXE C:\PROGRA~1\MAGICD~1\INSTALL.LOG Map Button (Windows Live Toolbar)–>MsiExec.exe /X{7745B7A9-F323-4BB9-9811-01BF57A028DA} Microsoft .NET Framework 1.1 Security Update (KB953297)–>"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp" Microsoft .NET Framework 1.1–>msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 3.5 SP1–>C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft Compression Client Pack 1.0 for Windows XP–>"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Internationalized Domain Names Mitigation APIs–>"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft Kernel-Mode Driver Framework Feature Pack 1.5–>"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs–>"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office 2003 Web Components–>MsiExec.exe /I{90A40409-6000-11D3-8CFE-0150048383C9} Microsoft Office 2007 Primary Interop Assemblies–>MsiExec.exe /X{50120000-1105-0000-0000-0000000FF1CE} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0015-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0015-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-001A-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-001A-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0044-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-00A1-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-00BA-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0114-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0117-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-0117-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} Microsoft Office 2007 Service Pack 2 (SP2)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B} Microsoft Office Access MUI (English) 2007–>MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE} Microsoft Office Access Setup Metadata MUI (English) 2007–>MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE} Microsoft Office Excel MUI (English) 2007–>MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE} Microsoft Office Groove MUI (English) 2007–>MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE} Microsoft Office Groove Setup Metadata MUI (English) 2007–>MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE} Microsoft Office InfoPath MUI (English) 2007–>MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE} Microsoft Office Live Add-in 1.3–>MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC} Microsoft Office OneNote MUI (English) 2007–>MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE} Microsoft Office Outlook Connector–>MsiExec.exe /I{95120000-0120-0409-0000-0000000FF1CE} Microsoft Office Outlook MUI (English) 2007–>MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (English) 2007–>MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE} Microsoft Office Professional Hybrid 2007–>MsiExec.exe /X{91120000-0031-0000-0000-0000000FF1CE} Microsoft Office Proof (English) 2007–>MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007–>MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (Spanish) 2007–>MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE} Microsoft Office Proofing (English) 2007–>MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)–>msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045} Microsoft Office Publisher MUI (English) 2007–>MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE} Microsoft Office Shared MUI (English) 2007–>MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE} Microsoft Office Shared Setup Metadata MUI (English) 2007–>MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE} Microsoft Office Ultimate 2007–>"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ULTIMATER /dll OSETUP.DLL Microsoft Office Ultimate 2007–>MsiExec.exe /X{91120000-002E-0000-0000-0000000FF1CE} Microsoft Office Word MUI (English) 2007–>MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE} Microsoft Search Enhancement Pack–>MsiExec.exe /X{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7} Microsoft Silverlight–>MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)–>MsiExec.exe /I{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F} Microsoft SQL Server 2005–>"C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove Microsoft SQL Server Setup Support Files (English)–>MsiExec.exe /X{53F5C3EE-05ED-4830-994B-50B2F0D50FCE} Microsoft SQL Server VSS Writer–>MsiExec.exe /I{56B4002F-671C-49F4-984C-C760FE3806B5} Microsoft Sync Framework Runtime Native v1.0 (x86)–>MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5} Microsoft User-Mode Driver Framework Feature Pack 1.5–>"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053–>MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118} Microsoft Visual C++ 2005 Redistributable–>MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} MobileMe Control Panel–>MsiExec.exe /I{3AC54383-31D1-4907-961B-B12CBB1D0AE8} Mozilla Firefox (3.0.15)–>C:\Program Files\Mozilla Firefox\uninstall\helper.exe MSVC80_x86–>MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27} MSVCRT–>MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} MSXML 4.0 SP2 (KB954430)–>MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MSXML 6 Service Pack 2 (KB973686)–>MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA} MySQL Connector/ODBC 3.51–>MsiExec.exe /I{0CB3C535-1171-4A20-B549-E2CB5DEB9723} Nero 9–>C:\Program Files\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER="9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A" neroxml–>MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B} Nokia Connectivity Cable Driver–>MsiExec.exe /X{4F1DCA42-2030-437C-A94E-736692A499C1} Nokia PC Suite–>C:\Documents and Settings\All Users\Application Data\Installations\{0FC76B71-2534-4354-B255-3468578E3F47}\Nokia_PC_Suite_rel_6_86_9_0_eng_web.exe Nokia PC Suite–>MsiExec.exe /I{0FC76B71-2534-4354-B255-3468578E3F47} Nokia Software Updater–>MsiExec.exe /X{5D19E730-D3C6-47F4-AE4B-DCB26EC2D905} NTI Backup NOW! 4.7–>"C:\Program Files\InstallShield Installation Information\{1598034D-7147-432C-8CA8-888E0632D124}\setup.exe" -removeonly NTI Backup NOW! 4.7–>C:\Program Files\InstallShield Installation Information\{1598034D-7147-432C-8CA8-888E0632D124}\setup.exe -runfromtemp -l0x0409 NTI CD & DVD-Maker–>C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1033 CDM7 NTI Shadow–>"C:\Program Files\InstallShield Installation Information\{6F7EA6CA-79F4-44A0-A370-8E82BB16534A}\setup.exe" -removeonly NTI Shadow–>C:\Program Files\InstallShield Installation Information\{6F7EA6CA-79F4-44A0-A370-8E82BB16534A}\setup.exe -runfromtemp -l0x0409 Power CD+G Filter–>"C:\Program Files\DOBLON\Power CD+G Filter\unins000.exe" PowerDVD–>RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall ResearchSoft Direct Export Helper–>C:\PROGRA~1\COMMON~1\Risxtd\_UNINST.EXE ResumeMaker Professional–>C:\PROGRA~1\RESUME~1\UNWISE.EXE C:\PROGRA~1\RESUME~1\INSTALL.LOG Samsung PC Studio 7–>C:\Documents and Settings\All Users\Application Data\Installations\{2958B04A-0905-4689-B8D8-2F511E03AEBA}\Samsung_PC_Studio_7_7.1.34.8.exe Samsung PC Studio 7–>MsiExec.exe /I{2958B04A-0905-4689-B8D8-2F511E03AEBA} SamsungConnectivityCableDriver–>MsiExec.exe /X{7E84FAC8-C518-40F9-9807-7455301D6D25} Security Update for 2007 Microsoft Office System (KB969559)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08} Security Update for 2007 Microsoft Office System (KB969559)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08} Security Update for 2007 Microsoft Office System (KB973704)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F} Security Update for 2007 Microsoft Office System (KB973704)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {E626DC89-A787-4553-9BB3-DC2EC7E1593F} Security Update for CAPICOM (KB931906)–>MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906)–>MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for Microsoft Office Excel 2007 (KB973593)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE} Security Update for Microsoft Office Excel 2007 (KB973593)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {7D6255E3-3423-4D8B-A328-F6F8D28DD5FE} Security Update for Microsoft Office Outlook 2007 (KB972363)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0} Security Update for Microsoft Office Outlook 2007 (KB972363)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0} Security Update for Microsoft Office PowerPoint 2007 (KB957789)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D} Security Update for Microsoft Office PowerPoint 2007 (KB957789)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D} Security Update for Microsoft Office Publisher 2007 (KB969693)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E} Security Update for Microsoft Office Publisher 2007 (KB969693)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {7BE67088-1EB3-4569-8E75-DDAFBF61BC4E} Security Update for Microsoft Office system 2007 (972581)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF} Security Update for Microsoft Office system 2007 (972581)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF} Security Update for Microsoft Office system 2007 (KB969613)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C} Security Update for Microsoft Office system 2007 (KB969613)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C} Security Update for Microsoft Office system 2007 (KB974234)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC} Security Update for Microsoft Office system 2007 (KB974234)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC} Security Update for Microsoft Office Visio Viewer 2007 (KB973709)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D} Security Update for Microsoft Office Visio Viewer 2007 (KB973709)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D} Security Update for Microsoft Office Word 2007 (KB969604)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050} Security Update for Microsoft Office Word 2007 (KB969604)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050} Security Update for Windows Internet Explorer 7 (KB938127)–>"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB942615)–>"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB944533)–>"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB950759)–>"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB953838)–>"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB956390)–>"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB958215)–>"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB960714)–>"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB961260)–>"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB963027)–>"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB969897)–>"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB972260)–>"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe" Security Update for Windows Internet Explorer 7 (KB974455)–>"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe" Security Update for Windows Media Player (KB911564)–>"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB952069)–>"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB954155)–>"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB968816)–>"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe" Security Update for Windows Media Player (KB973540)–>"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe" Security Update for Windows Media Player 11 (KB936782)–>"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Security Update for Windows Media Player 11 (KB954154)–>"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Security Update for Windows Media Player 6.4 (KB925398)–>"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe" Security Update for Windows Media Player 9 (KB936782)–>"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe" Security Update for Windows XP (KB893756)–>"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe" Security Update for Windows XP (KB896358)–>"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe" Security Update for Windows XP (KB896423)–>"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe" Security Update for Windows XP (KB896428)–>"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe" Security Update for Windows XP (KB899587)–>"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe" Security Update for Windows XP (KB899591)–>"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe" Security Update for Windows XP (KB900725)–>"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe" Security Update for Windows XP (KB901017)–>"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe" Security Update for Windows XP (KB901190)–>"C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe" Security Update for Windows XP (KB901214)–>"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe" Security Update for Windows XP (KB902400)–>"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe" Security Update for Windows XP (KB905414)–>"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe" Security Update for Windows XP (KB905749)–>"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe" Security Update for Windows XP (KB908519)–>"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe" Security Update for Windows XP (KB911562)–>"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe" Security Update for Windows XP (KB911927)–>"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe" Security Update for Windows XP (KB913580)–>"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe" Security Update for Windows XP (KB914388)–>"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe" Security Update for Windows XP (KB914389)–>"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe" Security Update for Windows XP (KB918118)–>"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe" Security Update for Windows XP (KB918439)–>"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe" Security Update for Windows XP (KB919007)–>"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe" Security Update for Windows XP (KB920213)–>"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe" Security Update for Windows XP (KB920670)–>"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe" Security Update for Windows XP (KB920683)–>"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe" Security Update for Windows XP (KB920685)–>"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe" Security Update for Windows XP (KB922819)–>"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe" Security Update for Windows XP (KB923191)–>"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe" Security Update for Windows XP (KB923414)–>"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe" Security Update for Windows XP (KB923561)–>"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe" Security Update for Windows XP (KB923689)–>"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe" Security Update for Windows XP (KB923980)–>"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe" Security Update for Windows XP (KB924270)–>"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe" Security Update for Windows XP (KB924667)–>"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe" Security Update for Windows XP (KB925902)–>"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe" Security Update for Windows XP (KB926255)–>"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe" Security Update for Windows XP (KB926436)–>"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe" Security Update for Windows XP (KB927779)–>"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe" Security Update for Windows XP (KB927802)–>"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe" Security Update for Windows XP (KB928255)–>"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe" Security Update for Windows XP (KB929123)–>"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe" Security Update for Windows XP (KB930178)–>"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe" Security Update for Windows XP (KB931261)–>"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe" Security Update for Windows XP (KB931768)–>"C:\WINDOWS\$NtUninstallKB931768$\spuninst\spuninst.exe" Security Update for Windows XP (KB931784)–>"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe" Security Update for Windows XP (KB932168)–>"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe" Security Update for Windows XP (KB933566)–>"C:\WINDOWS\$NtUninstallKB933566$\spuninst\spuninst.exe" Security Update for Windows XP (KB933729)–>"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe" Security Update for Windows XP (KB935839)–>"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe" Security Update for Windows XP (KB935840)–>"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe" Security Update for Windows XP (KB936021)–>"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe" Security Update for Windows XP (KB937894)–>"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe" Security Update for Windows XP (KB938127)–>"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe" Security Update for Windows XP (KB938464)–>"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Security Update for Windows XP (KB941202)–>"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe" Security Update for Windows XP (KB941568)–>"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe" Security Update for Windows XP (KB941569)–>"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Security Update for Windows XP (KB941644)–>"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe" Security Update for Windows XP (KB941693)–>"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe" Security Update for Windows XP (KB943055)–>"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe" Security Update for Windows XP (KB943460)–>"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe" Security Update for Windows XP (KB943485)–>"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe" Security Update for Windows XP (KB944338)–>"C:\WINDOWS\$NtUninstallKB944338$\spuninst\spuninst.exe" Security Update for Windows XP (KB944653)–>"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe" Security Update for Windows XP (KB945553)–>"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe" Security Update for Windows XP (KB946026)–>"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe" Security Update for Windows XP (KB946648)–>"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Security Update for Windows XP (KB947864)–>"C:\WINDOWS\$NtUninstallKB947864$\spuninst\spuninst.exe" Security Update for Windows XP (KB948590)–>"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe" Security Update for Windows XP (KB948881)–>"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe" Security Update for Windows XP (KB950749)–>"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe" Security Update for Windows XP (KB950760)–>"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Security Update for Windows XP (KB950762)–>"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Security Update for Windows XP (KB950974)–>"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Security Update for Windows XP (KB951066)–>"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Security Update for Windows XP (KB951376)–>"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Security Update for Windows XP (KB951376-v2)–>"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Security Update for Windows XP (KB951698)–>"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Security Update for Windows XP (KB951748)–>"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Security Update for Windows XP (KB952004)–>"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe" Security Update for Windows XP (KB952954)–>"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Security Update for Windows XP (KB953839)–>"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Security Update for Windows XP (KB954211)–>"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Security Update for Windows XP (KB954600)–>"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe" Security Update for Windows XP (KB955069)–>"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Security Update for Windows XP (KB956391)–>"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Security Update for Windows XP (KB956572)–>"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe" Security Update for Windows XP (KB956802)–>"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe" Security Update for Windows XP (KB956803)–>"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Security Update for Windows XP (KB956841)–>"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Security Update for Windows XP (KB956844)–>"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe" Security Update for Windows XP (KB957095)–>"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Security Update for Windows XP (KB957097)–>"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Security Update for Windows XP (KB958470)–>"C:\WINDOWS\$NtUninstallKB958470$\spuninst\spuninst.exe" Security Update for Windows XP (KB958644)–>"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Security Update for Windows XP (KB958687)–>"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe" Security Update for Windows XP (KB958690)–>"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe" Security Update for Windows XP (KB958869)–>"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe" Security Update for Windows XP (KB959426)–>"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe" Security Update for Windows XP (KB960225)–>"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe" Security Update for Windows XP (KB960715)–>"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe" Security Update for Windows XP (KB960803)–>"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe" Security Update for Windows XP (KB960859)–>"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe" Security Update for Windows XP (KB961371)–>"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe" Security Update for Windows XP (KB961373)–>"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe" Security Update for Windows XP (KB961501)–>"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe" Security Update for Windows XP (KB968537)–>"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe" Security Update for Windows XP (KB969059)–>"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe" Security Update for Windows XP (KB969898)–>"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe" Security Update for Windows XP (KB969947)–>"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe" Security Update for Windows XP (KB970238)–>"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe" Security Update for Windows XP (KB971032)–>"C:\WINDOWS\$NtUninstallKB971032$\spuninst\spuninst.exe" Security Update for Windows XP (KB971486)–>"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe" Security Update for Windows XP (KB971557)–>"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe" Security Update for Windows XP (KB971633)–>"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe" Security Update for Windows XP (KB971657)–>"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe" Security Update for Windows XP (KB971961)–>"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe" Security Update for Windows XP (KB973346)–>"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe" Security Update for Windows XP (KB973354)–>"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe" Security Update for Windows XP (KB973507)–>"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe" Security Update for Windows XP (KB973525)–>"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe" Security Update for Windows XP (KB973869)–>"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe" Security Update for Windows XP (KB974112)–>"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe" Security Update for Windows XP (KB974571)–>"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe" Security Update for Windows XP (KB975025)–>"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe" Security Update for Windows XP (KB975467)–>"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe" StuffIt Expander 2009–>MsiExec.exe /X{57DC8980-73DA-481E-AFD4-5E2D44B7F1AD} Switch Sound File Converter–>C:\Program Files\NCH Swift Sound\Switch\uninst.exe Synaptics Pointing Device Driver–>rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall Texas Instruments PCIxx21/x515/xx12 drivers.–>C:\Program Files\InstallShield Installation Information\{BE1826A9-7EEE-492A-B3BC-DEF3DFAE37EE}\setup.exe -runfromtemp -l0x0409 The Neverhood–>D:\Program files\setup95.exe /uninstall Unity Web Player–>C:\Program Files\Unity\WebPlayer\Uninstall.exe Unlocker 1.8.6–>C:\Program Files\Unlocker\uninst.exe UoN Help Shortcut–>"C:\WINDOWS\unins000.exe" Update for 2007 Microsoft Office System (KB967642)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for 2007 Microsoft Office System (KB967642)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Outlook 2007 Junk Email Filter (kb975960)–>msiexec /package {91120000-002E-0000-0000-0000000FF1CE} /uninstall {F1AB1BED-7477-4D5A-BD0C-04C2109459A5} Update for Outlook 2007 Junk Email Filter (kb975960)–>msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {F1AB1BED-7477-4D5A-BD0C-04C2109459A5} Update for Windows Internet Explorer 7 (KB976749)–>"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe" Update for Windows XP (KB894391)–>"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe" Update for Windows XP (KB898461)–>"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" Update for Windows XP (KB900485)–>"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe" Update for Windows XP (KB904942)–>"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe" Update for Windows XP (KB908531)–>"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe" Update for Windows XP (KB910437)–>"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe" Update for Windows XP (KB911280)–>"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe" Update for Windows XP (KB912945)–>"C:\WINDOWS\$NtUninstallKB912945$\spuninst\spuninst.exe" Update for Windows XP (KB916595)–>"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe" Update for Windows XP (KB920872)–>"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe" Update for Windows XP (KB922582)–>"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe" Update for Windows XP (KB925720)–>"C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe" Update for Windows XP (KB927891)–>"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe" Update for Windows XP (KB929338)–>"C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe" Update for Windows XP (KB930916)–>"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe" Update for Windows XP (KB932823-v3)–>"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe" Update for Windows XP (KB936357)–>"C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe" Update for Windows XP (KB938828)–>"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe" Update for Windows XP (KB942763)–>"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe" Update for Windows XP (KB951072-v2)–>"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Update for Windows XP (KB955839)–>"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe" Update for Windows XP (KB961503)–>"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe" Update for Windows XP (KB967715)–>"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe" Update for Windows XP (KB968389)–>"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe" Update for Windows XP (KB973687)–>"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe" Update for Windows XP (KB973815)–>"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe" VCRedistSetup–>MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027} Virtual DJ - Atomix Productions–>C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG Virtual Villagers - The Secret City–>"C:\WINDOWS\Virtual Villagers - The Secret City\uninstall.exe" "/U:C:\Program Files\Virtual Villagers - The Secret City\Uninstall\uninstall.xml" Windows Driver Package - Nokia Modem (03/05/2008 3.7)–>C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560\nokia_bluetooth.inf Windows Driver Package - Nokia Modem (03/13/2008 6.86.0.1)–>C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186\nokbtmdm.inf Windows Driver Package - Nokia pccsmcfd (10/12/2007 6.85.4.0)–>C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf Windows Imaging Component–>"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe" Windows Installer 3.1 (KB893803)–>"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe" Windows Internet Explorer 7–>"C:\WINDOWS\ie7\spuninst\spuninst.exe" Windows Live Communications Platform–>MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52} Windows Live Essentials–>C:\Program Files\Windows Live\Installer\wlarp.exe Windows Live Family Safety–>MsiExec.exe /X{76CD2979-09C0-493A-84B3-8FD97EF4BCEA} Windows Live Favorites for Windows Live Toolbar–>MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66} Windows Live Mail–>MsiExec.exe /I{63C1109E-D977-49ED-BCE3-D00D0BF187D6} Windows Live Messenger–>MsiExec.exe /X{0AAA9C97-74D4-47CE-B089-0B147EF3553C} Windows Live Photo Gallery–>MsiExec.exe /X{3C52E7DA-C431-4239-B66B-1BF703D5B194} Windows Live Sign-in Assistant–>MsiExec.exe /I{9422C8EA-B0C6-4197-B8FC-DC797658CA00} Windows Live Toolbar Extension (Windows Live Toolbar)–>MsiExec.exe /X{341201D4-4F61-4ADB-987E-9CCE4D83A58D} Windows Live Upload Tool–>MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238} Windows Live Writer–>MsiExec.exe /X{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2} Windows Media Format 11 runtime–>"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime–>"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11–>"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Windows Media Player 11–>"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows XP Hotfix - KB873339–>C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe Windows XP Hotfix - KB885835–>C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe Windows XP Hotfix - KB885836–>C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe Windows XP Hotfix - KB885855–>C:\WINDOWS\$NtUninstallKB885855$\spuninst\spuninst.exe Windows XP Hotfix - KB885884–>C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe Windows XP Hotfix - KB886185–>C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe Windows XP Hotfix - KB887472–>C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe Windows XP Hotfix - KB888302–>C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe Windows XP Hotfix - KB890859–>"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe" Windows XP Hotfix - KB891781–>C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe WinRAR archiver–>C:\Program Files\WinRAR\uninstall.exe ======System event log====== Computer Name: ACER-47CBE8A5ED Event Code: 4 Message: Broadcom NetLink ™ Gigabit Ethernet: The network link is down. Check to make sure the network cable is properly connected. Record Number: 13195 Source Name: b57w2k Time Written: 20091108225906.000000+000 Event Type: warning User: Computer Name: ACER-47CBE8A5ED Event Code: 7022 Message: The KService service hung on starting. Record Number: 13168 Source Name: Service Control Manager Time Written: 20091108225801.000000+000 Event Type: error User: Computer Name: ACER-47CBE8A5ED Event Code: 7000 Message: The BTWSp50 NDIS Protocol Driver service failed to start due to the following error: The system cannot find the file specified. Record Number: 13165 Source Name: Service Control Manager Time Written: 20091108225640.000000+000 Event Type: error User: Computer Name: ACER-47CBE8A5ED Event Code: 1003 Message: Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 001F3A08E774. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. Record Number: 13160 Source Name: Dhcp Time Written: 20091108210128.000000+000 Event Type: warning User: Computer Name: ACER-47CBE8A5ED Event Code: 1003 Message: Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address 001F3A08E774. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. Record Number: 13159 Source Name: Dhcp Time Written: 20091108210126.000000+000 Event Type: warning User: =====Application event log===== Computer Name: ACER-47CBE8A5ED Event Code: 1804 Message: The Windows Security Center Service was unable to load instances of AntiVirusProduct from WMI. Record Number: 13080 Source Name: SecurityCenter Time Written: 20091017150745.000000+060 Event Type: error User: Computer Name: ACER-47CBE8A5ED Event Code: 1803 Message: The Windows Security Center Service was unable to load instances of FirewallProduct from WMI. Record Number: 13079 Source Name: SecurityCenter Time Written: 20091017150745.000000+060 Event Type: error User: Computer Name: ACER-47CBE8A5ED Event Code: 10 Message: Event filter with query "SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'AntiVirusProduct' OR TargetInstance ISA 'FirewallProduct'" could not be (re)activated in namespace "//./ROOT/SecurityCenter" because of error 0x80041010. Events may not be delivered through this filter until the problem is corrected. Record Number: 13078 Source Name: WinMgmt Time Written: 20091017150744.000000+060 Event Type: error User: Computer Name: ACER-47CBE8A5ED Event Code: 2570 Message: Adobe Active File Monitor Service has Started. Record Number: 13073 Source Name: Adobe Active File Monitor 7.0 Time Written: 20091017150736.000000+060 Event Type: User: Computer Name: ACER-47CBE8A5ED Event Code: 1517 Message: Windows saved user ACER-47CBE8A5ED\The User registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. Record Number: 13069 Source Name: Userenv Time Written: 20091017150546.000000+060 Event Type: warning User: NT AUTHORITY\SYSTEM ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\PC Connectivity Solution;C:\Program Files\Microsoft SQL Server\90\Tools\binn;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\ "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 22 Stepping 1, GenuineIntel "PROCESSOR_REVISION"=1601 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre1.6.0_05\lib\ext\QTJava.zip —————–EOF—————– Logfile of random's system information tool 1.06 (written by random/random) Run by [removed] at 2009-12-03 01:22:20 Microsoft Windows XP Professional Service Pack 2 System drive C: has 2 GB (7%) free of 35 GB Total RAM: 1014 MB (29% free) HijackThis download failed ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job C:\WINDOWS\tasks\User_Feed_Synchronization-{BD01A600-5529-4904-B81B-59F2C534B718}.job C:\WINDOWS\tasks\WGASetup.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82D2E569-25A7-4E4D-9FA3-C5025B4B7912}] EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2009-01-26 299008] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}] EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\WINDOWS\system32\eDStoolbar.dll [2007-05-28 106496] {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-22 368640] {945C8270-A848-11D5-A805-00B0D092F45B} - EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2009-01-26 299008] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows; Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - BitDefender Toolbar - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll [2009-06-24 95536] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Preload"=C:\Windows\RUNXMLPL.exe [2007-04-21 20480] "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-03-21 174872] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2005-12-16 761945] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-05-28 16132608] "AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-06-12 53248] "IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-05 208952] "MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-05 59392] "PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168] "PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-05 455168] "RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2007-01-08 68640] "LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2007-01-08 52256] "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-06-13 142104] "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-06-13 162584] "Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-06-13 138008] "Acer ePresentation HPD"=C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [2007-03-02 208896] "ePower_DMC"=C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2007-07-04 475136] "Boot"=C:\Acer\Empowering Technology\ePower\Boot.exe [2006-03-15 579584] "eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2007-05-28 342528] "eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2007-07-11 421888] "LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2007-10-17 858632] "GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072] "SamsungPCSuiteTrayApplication"=C:\Program Files\Samsung\Samsung PC Studio 7\LaunchApplication.exe [2008-08-07 278016] "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440] "BDAgent"=C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [2009-11-12 782336] "BitDefender Antiphishing Helper"=C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [2009-06-24 69632] "NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [] "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2009-09-05 417792] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-09-21 305440] "nvcpl"=C:\Program Files\Common Files\svchost.exe [2009-03-21 94720] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"=C:\PROGRA~1\WINDOW~4\MESSEN~1\msnmsgr.exe [2009-02-06 3885408] "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe ASO-616B5711-6DAE-4795-A05F-39A1E5104020 [] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-04-01 486856] "AdobeUpdater"=C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe [2008-11-24 2356088] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-04-01 486856] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe [2009-09-21 305440] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe [2008-03-28 1079296] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SamsungPCSuiteTrayApplication] C:\Program Files\Samsung\Samsung PC Studio 7\LaunchApplication.exe [2008-08-07 278016] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The User^Start Menu^Programs^Startup^Microsoft Office Groove.lnk] C:\PROGRA~1\MICROS~2\Office12\GROOVE.EXE [2009-02-14 337264] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^The User^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk] C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2008-10-25 98696] C:\Documents and Settings\All Users\Start Menu\Programs\Startup Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe Update Agent.lnk - C:\Program Files\3\3Connect\AutoUpdateSrv.exe C:\Documents and Settings\The User\Start Menu\Programs\Startup MagicDisc.lnk - C:\Program Files\MagicDisc\MagicDisc.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\WINDOWS\system32\igfxdev.dll [2007-06-05 204800] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 241704] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLUA"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDriveAutoRun"=67108863 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= "NoDriveAutoRun"= "NoDriveTypeAutoRun"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox" "C:\Program Files\Common Files\Nero\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Nero\Nero Web\SetupX.exe:*:Enabled:Nero ControlCenter" "C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 7.0.1.321\English\setup.exe"="C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 7.0.1.321\English\setup.exe:*:Enabled:Kaspersky Anti-Virus 7.0 Setup" "C:\Program Files\Kontiki\KService.exe"="C:\Program Files\Kontiki\KService.exe:*:Enabled:Delivery Manager Service" "C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater" "C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process " "C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero8\Nero Home\NeroHome.exe:*:Enabled:Nero Home" "C:\Program Files\Huawei technologies\Huawei UMTS Data Card\3 USB Modem.exe"="C:\Program Files\Huawei technologies\Huawei UMTS Data Card\3 USB Modem.exe:*:Enabled:3 USB Modem" "C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook" "C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove" "C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Program Files\BT Common Client\SwiApiMux.exe"="C:\Program Files\BT Common Client\SwiApiMux.exe:*:Enabled:SwiApiMux" "C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "%windir%\system32\drivers\svchost.exe"="%windir%\system32\drivers\svchost.exe:*:Enabled:svchost" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1df541a5-0586-11de-9a42-001f3a08e774}] shell\AutoRun\command - F:\AutoRun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7c8eae6a-8382-11de-ad58-001d721c0ad3}] shell\AutoRun\command - F:\xsdelect.com shell\explore\command - F:\xsdelect.com shell\open\command - F:\xsdelect.com [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eafde83c-b827-11de-ada4-001f3a08e774}] shell\Auto\command - udisk.exe shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL udisk.exe ======List of files/folders created in the last 1 months====== 2016-04-12 01:00:52 —-A—- C:\load.exe 2009-12-03 01:22:23 —-D—- C:\Program Files\trend micro 2009-12-03 01:22:20 —-D—- C:\rsit 2009-12-01 20:50:31 —-A—- C:\prx.exe 2009-12-01 20:50:18 —-A—- C:\ejikego.exe 2009-12-01 19:51:02 —-SHD—- C:\WINDOWS\system32\lowsec 2009-12-01 19:50:32 —-D—- C:\Program Files\My Tribe 2009-12-01 15:20:34 —-D—- C:\WINDOWS\Virtual Villagers - The Secret City 2009-12-01 15:20:25 —-A—- C:\WINDOWS\Virtual Villagers - The Secret City Setup Log.txt 2009-12-01 11:35:42 —-A—- C:\WINDOWS\Virtual Villagers - The Secret City Uninstall Log.txt 2009-12-01 02:00:43 —-A—- C:\ijoe.exe 2009-11-30 17:53:20 —-D—- C:\Documents and Settings\All Users\Application Data\Merscom 2009-11-30 17:53:01 —-D—- C:\Program Files\Common Files\SWF Studio 2009-11-30 17:52:40 —-D—- C:\Program Files\Merscom 2009-11-30 17:21:39 —-D—- C:\Program Files\BFG 2009-11-30 17:05:13 —-A—- C:\WINDOWS\Virtual Families Uninstall Log.txt 2009-11-30 16:03:08 —-D—- C:\Documents and Settings\All Users\Application Data\BigFishGamesCache 2009-11-30 15:03:43 —-D—- C:\WINDOWS\Virtual Families 2009-11-30 15:02:54 —-A—- C:\WINDOWS\Virtual Families Setup Log.txt 2009-11-29 23:24:54 —-HDC—- C:\WINDOWS\$NtUninstallKB976098-v2$ 2009-11-29 23:24:37 —-HDC—- C:\WINDOWS\$NtUninstallKB973687$ 2009-11-28 14:51:27 —-D—- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage 2009-11-17 16:19:00 —-A—- C:\bdlog.txt 2009-11-15 21:44:30 —-HD—- C:\WINDOWS\PIF 2009-11-14 16:17:18 —-HDC—- C:\WINDOWS\$NtUninstallKB969947$ ======List of files/folders modified in the last 1 months====== 2016-04-12 00:03:22 —-D—- C:\Documents and Settings\All Users\Application Data\Kontiki 2016-04-12 00:02:21 —-A—- C:\WINDOWS\system32\PerfStringBackup.INI 2016-04-12 00:00:51 —-D—- C:\WINDOWS\system32\CatRoot2 2016-04-12 00:00:45 —-D—- C:\Documents and Settings\The User\Application Data\EndNote 2016-04-12 00:00:42 —-A—- C:\WINDOWS\win.ini 2009-12-03 01:22:23 —-D—- C:\Program Files 2009-12-03 01:22:08 —-D—- C:\WINDOWS\Prefetch 2009-12-03 01:18:43 —-D—- C:\WINDOWS\system32\drivers 2009-12-03 01:18:28 —-D—- C:\WINDOWS\system32 2009-12-03 01:18:22 —-D—- C:\WINDOWS\Temp 2009-12-03 01:12:16 —-D—- C:\Program Files\Mozilla Firefox 2009-12-02 13:05:18 —-A—- C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt 2009-12-02 13:05:16 —-D—- C:\WINDOWS 2009-12-01 22:44:09 —-D—- C:\WINDOWS\system32\FxsTmp 2009-12-01 20:43:36 —-SHD—- C:\System Volume Information 2009-12-01 20:06:40 —-D—- C:\Documents and Settings\The User\Application Data\uTorrent 2009-12-01 19:50:44 —-D—- C:\Program Files\Common Files 2009-12-01 11:41:04 —-AD—- C:\Documents and Settings\All Users\Application Data\TEMP 2009-12-01 11:18:15 —-D—- C:\Documents and Settings 2009-12-01 09:36:42 —-A—- C:\WINDOWS\SchedLgU.Txt 2009-11-29 23:25:11 —-SHD—- C:\WINDOWS\Installer 2009-11-29 23:25:01 —-HD—- C:\WINDOWS\inf 2009-11-29 23:24:52 —-A—- C:\WINDOWS\imsins.BAK 2009-11-29 23:24:40 —-RSHD—- C:\WINDOWS\system32\dllcache 2009-11-29 23:24:18 —-HD—- C:\WINDOWS\$hf_mig$ 2009-11-29 23:23:31 —-D—- C:\Program Files\Microsoft SQL Server 2009-11-29 23:19:38 —-D—- C:\WINDOWS\Registration 2009-11-29 23:15:26 —-D—- C:\WINDOWS\WinSxS 2009-11-28 10:16:24 —-SD—- C:\Documents and Settings\The User\Application Data\Microsoft 2009-11-28 09:04:45 —-A—- C:\WINDOWS\NeroDigital.ini 2009-11-28 08:58:52 —-D—- C:\WINDOWS\network diagnostic 2009-11-23 23:23:49 —-D—- C:\WINDOWS\system32\NtmsData 2009-11-14 16:29:08 —-D—- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2009-11-13 12:42:36 —-D—- C:\Program Files\MediaMonkey 2009-11-13 12:24:33 —-D—- C:\My Music 2009-11-08 23:10:31 —-D—- C:\WINDOWS\ie7updates 2009-11-07 15:41:41 —-RSD—- C:\WINDOWS\assembly 2009-11-07 15:34:55 —-RSD—- C:\WINDOWS\Fonts 2009-11-07 15:34:48 —-D—- C:\Program Files\Common Files\Microsoft Shared 2009-11-07 15:34:21 —-D—- C:\Program Files\Microsoft Works 2009-11-07 15:13:59 —-D—- C:\Program Files\Doblon 2009-11-05 17:36:22 —-A—- C:\WINDOWS\system32\MRT.exe 2009-11-04 08:13:20 —-D—- C:\WINDOWS\Help ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 bdftdif;BitDefender Firewall TDI Filter; \??\C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [] R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-05 36096] R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-04 8832] R2 BDVEDISK;BDVEDISK; \??\C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys [] R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152] R2 int15;int15; \??\C:\WINDOWS\system32\drivers\int15.sys [] R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424] R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672] R2 mdvrmng;Mobile IP Route Manager; \??\C:\WINDOWS\system32\drivers\mdvrmng.sys [] R2 tvicport;tvicport; \??\C:\WINDOWS\system32\drivers\tvicport.sys [] R2 zntport;zntport; \??\C:\WINDOWS\system32\drivers\zntport.sys [] R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-02-16 160256] R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2006-10-12 604928] R3 bdfm;BDFM; C:\WINDOWS\system32\drivers\bdfm.sys [2009-06-24 111112] R3 Bdfndisf;BitDefender Firewall NDIS Filter Service; C:\WINDOWS\system32\DRIVERS\bdfndisf.sys [2009-08-21 104456] R3 bdfsfltr;bdfsfltr; C:\WINDOWS\system32\drivers\bdfsfltr.sys [2009-06-24 242184] R3 BDSelfPr;BDSelfPr; \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys [] R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080] R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2006-01-20 17408] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-08 138752] R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600] R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2006-12-22 988800] R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2006-12-22 209664] R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-06-05 5761728] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-05-31 4424192] R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys [2009-02-24 116736] R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160] R3 NSCIRDA;NSC Infrared Device Driver; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2004-08-04 28672] R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2007-08-07 6144] R3 psdfilter;psdfilter; \??\C:\WINDOWS\system32\Drivers\psdfilter.sys [] R3 psdvdisk;psdvdisk; \??\C:\WINDOWS\system32\Drivers\psdvdisk.sys [] R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584] R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-05 67584] R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-12-16 191936] R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2007-05-02 290816] R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-04-19 30080] R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2006-02-21 58240] R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2006-04-19 20608] R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2006-12-22 730112] S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848] S2 BTWSp50;BTWSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\BTWSp50.sys [] S3 alxnaykf;alxnaykf; C:\WINDOWS\system32\drivers\alxnaykf.sys [] S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-05 60800] S3 catchme;catchme; \??\C:\DOCUME~1\THEUSE~1\LOCALS~1\Temp\catchme.sys [] S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024] S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165] S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2007-08-08 101120] S3 int15.sys;int15.sys; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys [] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376] S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880] S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-05 61824] S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2007-11-29 16896] S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2007-11-29 19328] S3 nmwcdsa;Samsung USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcdsa.sys [2007-05-02 135680] S3 nmwcdsac;Samsung USB Generic; C:\WINDOWS\system32\drivers\nmwcdsac.sys [2007-05-02 8320] S3 nmwcdsacj;Samsung USB Port; C:\WINDOWS\system32\drivers\nmwcdsacj.sys [2007-05-02 12288] S3 nmwcdsacm;Samsung USB Modem; C:\WINDOWS\system32\drivers\nmwcdsacm.sys [2007-05-02 12288] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632] S3 Profos;Profos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys [] S3 rootrepeal;rootrepeal; \??\C:\WINDOWS\system32\drivers\rootrepeal.sys [] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136] S3 StillCam;Still Serial Digital Camera Driver; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-08-17 6784] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360] S3 Trufos;Trufos; \??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys [] S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2007-11-29 8064] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448] S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616] S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856] S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104] S3 usbser;Nokia USB Serial Port; C:\WINDOWS\system32\DRIVERS\usbser.sys [2004-08-03 25600] S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2007-11-29 8064] S3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-05 26496] S3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-04 78464] S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000] S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688] S4 sr;System Restore Filter Driver; C:\WINDOWS\system32\DRIVERS\sr.sys [2004-08-05 73472] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 eLockService;eLock Service; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2007-03-01 24576] R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-03-21 355096] R2 KService;KService; C:\Program Files\Kontiki\KService.exe [2008-02-27 3072184] R2 LIVESRV;BitDefender Desktop Update Service; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [2009-10-07 413696] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 171040] R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904] R2 VSSERV;BitDefender Virus Shield; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [2009-11-12 1638240] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336] R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 545568] S2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon [] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-05 267776] S3 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7; C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312] S3 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712] S3 Arrakis3;BitDefender Arrakis Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [2008-07-17 118784] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2007-04-28 198336] S3 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service; C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-11 30312] S3 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-02-12 651720] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 fsssvc;Windows Live Family Safety; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 Imapi Helper;Imapi Helper; C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe [2006-01-04 163840] S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2007-04-28 2528960] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888] S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2006-04-14 28933976] S3 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-29 935208] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 scan;BitDefender Threat Scanner; C:\WINDOWS\System32\svchost.exe [2004-08-05 14336] S3 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512] S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592] S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408] S4 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2004-08-05 14336] S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440] S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-14 45272] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] S4 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2006-04-14 240416] —————–EOF—————–
Post #5 last edited
Hi,

The reason I asked you about the age of your computer is because there is a battery on the motherboard that holds all configuations including the time , but this battery lasts about 7 years or so.

RSIT installs Hijackthis, but it did not. Where you hooked up to the internet when you ran RSIT ??

It looks like you have some bad things going on in the form of password stealers and backdoor Trojans. I would urge you to stay offline until your clean so as not to keep infecting your system.

These are most likely how you got infected. Malware writers use them to spread there garbage. I need you to uninstall these via Add Remove Programs in the Control Panel
C:\Program Files\uTorrent
C:\Program Files\LimeWire


Download ComboFix from one of these locations

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  • See this Link for programs that need to be disabled and instruction on how to disable them.
  • Remember to re-enable them when we're done.

  • Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply along with a New Hijackthis log.

*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.





Download Trendmicros Hijackthis to your desktop.
  • Double click it to install
  • Follow the prompts and by default it will install in C:\Program Files\Trendmicro\Hijackthis\Highjackthis.exe
  • Open HJT Scan and Save a Log File, it will open in Notepad
  • Go to Format and make sure Wordwrap is Unchecked
  • Go to Edit> Select All…..Edit > Copy and Paste the new log into this thread by using the Submit Reply and not start a New Thread.
DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.
Post #6
Thanks! Combofix would only rin in reduced funtionality becuase it was out of date. I couldn't figure out how to get a newer version. ComboFix 09-06-23.01 - The User 12/04/2016 1:30.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.437 [GMT 1:00] Running from: c:\documents and settings\[removed]\Desktop\Unused\ComboFfffix.exe . - REDUCED FUNCTIONALITY MODE - . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Common Files\svchost.exe c:\windows\system32\lowsec c:\windows\system32\lowsec\local.ds c:\windows\system32\lowsec\user.ds c:\windows\system32\sdra64.exe . ((((((((((((((((((((((((( Files Created from 2016-03-12 to 2016-04-12 ))))))))))))))))))))))))))))))) . 2016-04-12 01:00 . 2009-12-01 02:00 22016 —-a-w- C:\load.exe 2016-04-12 00:12 . 2016-04-12 00:12 ——– d—–w- c:\documents and settings\The User\Local Settings\Application Data\Grubby Games . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2016-04-12 00:40 . 2008-05-03 21:42 ——– d—–w- c:\documents and settings\All Users\Application Data\Kontiki 2016-04-12 00:37 . 2009-02-04 13:00 ——– d—–w- c:\documents and settings\The User\Application Data\EndNote 2009-12-01 09:44 . 2008-08-13 18:02 65536 —-a-w- c:\program files\mozilla firefox\components\FFComm.dll 2008-05-03 06:11 . 2008-05-03 06:11 48 -csha-w- c:\windows\S06D23318.tmp . ((((((((((((((((((((((((((((( SnapShot@2009-06-24_15.22.04 ))))))))))))))))))))))))))))))))))))))))) . + 2009-07-11 18:41 . 2009-07-11 18:41 97280 c:\windows\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.dll + 2016-04-12 00:36 . 2016-04-12 00:36 16384 c:\windows\Temp\Perflib_Perfdata_d60.dat + 2009-08-12 15:31 . 2009-08-12 15:31 16384 c:\windows\Temp\Perflib_Perfdata_d50.dat + 2016-04-12 00:35 . 2016-04-12 00:35 16384 c:\windows\Temp\Perflib_Perfdata_c7c.dat + 2009-07-16 11:26 . 2005-12-05 17:07 61136 c:\windows\system32\xinput9_1_0.dll + 2009-07-16 11:27 . 2007-04-04 17:53 81768 c:\windows\system32\xinput1_3.dll + 2009-07-16 11:26 . 2006-07-28 08:30 62744 c:\windows\system32\xinput1_2.dll + 2009-07-16 11:26 . 2006-03-31 11:39 62672 c:\windows\system32\xinput1_1.dll + 2009-07-16 11:27 . 2007-06-20 19:45 18280 c:\windows\system32\x3daudio1_2.dll + 2009-07-16 11:26 . 2007-03-05 11:42 15128 c:\windows\system32\x3daudio1_1.dll + 2009-07-16 11:26 . 2006-02-03 07:41 14032 c:\windows\system32\x3daudio1_0.dll + 2008-04-14 20:26 . 2009-08-06 19:24 44768 c:\windows\system32\wups2.dll + 2004-08-05 03:00 . 2009-08-06 19:24 35552 c:\windows\system32\wups.dll + 2004-08-05 03:00 . 2009-08-06 19:24 53472 c:\windows\system32\wuauclt.exe + 2004-08-05 03:00 . 2009-06-25 08:17 59392 c:\windows\system32\wdigest.dll + 2009-10-08 14:28 . 1998-06-17 22:00 89360 c:\windows\system32\Vb5db.dll - 2004-08-05 03:00 . 2004-08-05 03:00 50176 c:\windows\system32\utilman.exe + 2004-08-05 03:00 . 2006-10-04 08:48 50176 c:\windows\system32\utilman.exe - 2004-08-05 03:00 . 2004-08-05 03:00 35840 c:\windows\system32\umandlg.dll + 2004-08-05 03:00 . 2006-10-04 13:33 35840 c:\windows\system32\umandlg.dll + 2007-11-13 11:31 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe + 2008-07-29 20:10 . 2008-07-29 20:10 26112 c:\windows\system32\TsWpfWrp.exe + 2004-08-05 03:00 . 2009-06-12 11:50 80896 c:\windows\system32\tlntsess.exe + 2004-08-05 03:00 . 2009-06-12 11:50 76288 c:\windows\system32\telnet.exe + 2004-11-18 17:42 . 2007-11-30 11:18 26488 c:\windows\system32\spupdsvc.exe - 2004-11-18 17:42 . 2008-07-09 07:38 26488 c:\windows\system32\spupdsvc.exe + 2009-08-17 07:57 . 2008-07-06 12:06 89088 c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll + 2009-01-15 10:23 . 2008-11-10 11:41 67472 c:\windows\system32\spool\drivers\w32x86\msonpui.dll + 2009-01-15 10:23 . 2008-11-10 11:41 67472 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll - 2008-05-03 21:41 . 2008-07-09 07:38 17272 c:\windows\system32\spmsg.dll + 2008-05-03 21:41 . 2009-05-26 11:40 17272 c:\windows\system32\spmsg.dll + 2009-11-04 08:13 . 2009-08-06 19:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll + 2009-11-04 08:13 . 2009-08-06 19:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll + 2004-08-05 03:00 . 2009-06-25 08:17 56320 c:\windows\system32\secur32.dll + 2008-07-29 18:59 . 2008-07-29 18:59 43544 c:\windows\system32\PresentationHostProxy.dll + 2007-04-18 12:31 . 2009-08-29 07:36 44544 c:\windows\system32\pngfilt.dll - 2007-04-18 12:31 . 2009-04-29 04:56 44544 c:\windows\system32\pngfilt.dll + 2007-08-07 22:49 . 2016-04-12 00:02 91394 c:\windows\system32\perfc009.dat + 2004-08-05 03:00 . 2006-10-04 08:48 53760 c:\windows\system32\narrator.exe - 2004-08-05 03:00 . 2004-08-05 03:00 53760 c:\windows\system32\narrator.exe + 2005-10-15 13:25 . 2005-10-15 13:25 11776 c:\windows\system32\myodbc3m.exe + 2005-10-15 13:25 . 2005-10-15 13:25 28672 c:\windows\system32\myodbc3i.exe + 2008-07-25 10:17 . 2008-07-25 10:17 15360 c:\windows\system32\mui\0409\mscorees.dll - 2007-10-24 00:47 . 2007-10-24 00:47 15360 c:\windows\system32\mui\0409\mscorees.dll + 2009-01-15 10:23 . 2008-11-10 11:41 32656 c:\windows\system32\msonpmon.dll + 2009-10-08 14:28 . 2001-08-09 20:50 24848 c:\windows\system32\MSJTER35.DLL + 2007-08-13 17:54 . 2009-08-29 07:36 52224 c:\windows\system32\msfeedsbs.dll - 2007-08-13 17:54 . 2009-04-29 04:55 52224 c:\windows\system32\msfeedsbs.dll + 2008-07-25 10:16 . 2008-07-25 10:16 83968 c:\windows\system32\mscories.dll + 2004-08-05 03:00 . 2009-09-04 20:45 58880 c:\windows\system32\msasn1.dll + 2004-08-05 03:00 . 2009-06-25 18:36 48640 c:\windows\system32\mqupgrd.dll - 2004-08-05 03:00 . 2007-07-06 12:46 48640 c:\windows\system32\mqupgrd.dll - 2004-08-05 03:00 . 2007-07-06 12:46 95744 c:\windows\system32\mqsec.dll + 2004-08-05 03:00 . 2009-06-25 18:36 95744 c:\windows\system32\mqsec.dll + 2004-08-05 03:00 . 2009-06-25 18:36 16896 c:\windows\system32\mqise.dll - 2004-08-05 03:00 . 2007-07-06 12:46 16896 c:\windows\system32\mqise.dll + 2004-08-05 03:00 . 2009-06-25 18:36 47104 c:\windows\system32\mqdscli.dll - 2004-08-05 03:00 . 2007-07-06 12:46 47104 c:\windows\system32\mqdscli.dll + 2004-08-05 03:00 . 2009-06-22 11:49 19968 c:\windows\system32\mqbkup.exe - 2004-08-05 03:00 . 2004-08-05 03:00 19968 c:\windows\system32\mqbkup.exe + 2009-11-20 21:25 . 2009-11-20 21:25 77592 c:\windows\system32\mlfcache.dat - 2004-08-05 03:00 . 2004-08-05 03:00 72704 c:\windows\system32\magnify.exe + 2004-08-05 03:00 . 2006-10-04 08:48 72704 c:\windows\system32\magnify.exe + 2009-02-14 20:31 . 2009-08-11 13:24 88589 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe + 2007-04-18 12:31 . 2009-08-29 07:36 27648 c:\windows\system32\jsproxy.dll - 2007-04-18 12:31 . 2009-04-29 04:55 27648 c:\windows\system32\jsproxy.dll + 2008-07-29 18:24 . 2008-07-29 18:24 97800 c:\windows\system32\infocardapi.dll + 2007-08-13 17:39 . 2009-08-28 10:28 13824 c:\windows\system32\ieudinit.exe - 2007-08-13 17:39 . 2009-04-28 09:05 13824 c:\windows\system32\ieudinit.exe - 2004-08-05 03:00 . 2009-04-29 04:55 44544 c:\windows\system32\iernonce.dll + 2004-08-05 03:00 . 2009-08-29 07:36 44544 c:\windows\system32\iernonce.dll - 2004-08-05 03:00 . 2009-04-29 04:55 78336 c:\windows\system32\ieencode.dll + 2004-08-05 03:00 . 2009-08-29 07:36 78336 c:\windows\system32\ieencode.dll - 2004-08-05 03:00 . 2009-04-28 09:05 70656 c:\windows\system32\ie4uinit.exe + 2004-08-05 03:00 . 2009-08-28 10:28 70656 c:\windows\system32\ie4uinit.exe + 2008-07-29 18:24 . 2008-07-29 18:24 11264 c:\windows\system32\icardres.dll - 2007-08-13 17:36 . 2009-04-29 04:55 63488 c:\windows\system32\icardie.dll + 2007-08-13 17:36 . 2009-08-29 07:36 63488 c:\windows\system32\icardie.dll + 2004-08-05 03:00 . 2009-06-16 14:55 82432 c:\windows\system32\fontsub.dll + 2008-07-29 20:10 . 2008-07-29 20:10 73720 c:\windows\system32\dxva2.dll + 2009-09-14 10:06 . 2009-08-28 18:42 40448 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaapl.sys + 2009-09-14 10:35 . 2009-05-18 13:17 26600 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspiWDM.sys + 2008-12-26 21:11 . 2009-08-28 18:42 40448 c:\windows\system32\drivers\usbaapl.sys + 2004-08-05 03:00 . 2009-06-22 11:48 91776 c:\windows\system32\drivers\mqac.sys + 2004-08-05 03:00 . 2009-06-22 11:35 92544 c:\windows\system32\drivers\ksecdd.sys + 2008-12-26 21:16 . 2009-05-18 13:17 26600 c:\windows\system32\drivers\GEARAspiWDM.sys - 2009-02-14 08:51 . 2007-08-08 10:13 24448 c:\windows\system32\drivers\ewdcsc.sys + 2009-08-13 18:01 . 2007-08-08 11:13 24448 c:\windows\system32\drivers\ewdcsc.sys + 2004-08-05 03:00 . 2009-08-06 19:24 35552 c:\windows\system32\dllcache\wups.dll + 2004-08-05 03:00 . 2009-08-06 19:24 53472 c:\windows\system32\dllcache\wuauclt.exe + 2004-08-04 20:00 . 2009-06-25 08:17 59392 c:\windows\system32\dllcache\wdigest.dll - 2004-08-05 03:00 . 2004-08-05 03:00 50176 c:\windows\system32\dllcache\utilman.exe + 2004-08-05 03:00 . 2006-10-04 08:48 50176 c:\windows\system32\dllcache\utilman.exe + 2004-08-05 03:00 . 2006-10-04 13:33 35840 c:\windows\system32\dllcache\umandlg.dll - 2004-08-05 03:00 . 2004-08-05 03:00 35840 c:\windows\system32\dllcache\umandlg.dll + 2004-08-05 03:00 . 2009-06-12 11:50 80896 c:\windows\system32\dllcache\tlntsess.exe + 2004-08-05 03:00 . 2009-06-12 11:50 76288 c:\windows\system32\dllcache\telnet.exe + 2004-08-04 20:00 . 2009-06-25 08:17 56320 c:\windows\system32\dllcache\secur32.dll + 2007-04-18 12:31 . 2009-08-29 07:36 44544 c:\windows\system32\dllcache\pngfilt.dll - 2007-04-18 12:31 . 2009-04-29 04:56 44544 c:\windows\system32\dllcache\pngfilt.dll + 2004-08-05 03:00 . 2006-10-04 08:48 53760 c:\windows\system32\dllcache\narrator.exe - 2004-08-05 03:00 . 2004-08-05 03:00 53760 c:\windows\system32\dllcache\narrator.exe - 2008-04-16 23:03 . 2009-04-29 04:55 52224 c:\windows\system32\dllcache\msfeedsbs.dll + 2008-04-16 23:03 . 2009-08-29 07:36 52224 c:\windows\system32\dllcache\msfeedsbs.dll + 2004-08-04 20:00 . 2009-09-04 20:45 58880 c:\windows\system32\dllcache\msasn1.dll - 2004-08-05 03:00 . 2007-07-06 12:46 48640 c:\windows\system32\dllcache\mqupgrd.dll + 2004-08-05 03:00 . 2009-06-25 18:36 48640 c:\windows\system32\dllcache\mqupgrd.dll - 2004-08-04 20:00 . 2007-07-06 12:46 95744 c:\windows\system32\dllcache\mqsec.dll + 2004-08-04 20:00 . 2009-06-25 18:36 95744 c:\windows\system32\dllcache\mqsec.dll - 2004-08-05 03:00 . 2007-07-06 12:46 16896 c:\windows\system32\dllcache\mqise.dll + 2004-08-05 03:00 . 2009-06-25 18:36 16896 c:\windows\system32\dllcache\mqise.dll + 2004-08-05 03:00 . 2009-06-25 18:36 47104 c:\windows\system32\dllcache\mqdscli.dll - 2004-08-05 03:00 . 2007-07-06 12:46 47104 c:\windows\system32\dllcache\mqdscli.dll + 2004-08-05 03:00 . 2009-06-22 11:49 19968 c:\windows\system32\dllcache\mqbkup.exe - 2004-08-05 03:00 . 2004-08-05 03:00 19968 c:\windows\system32\dllcache\mqbkup.exe + 2004-08-05 03:00 . 2009-06-22 11:48 91776 c:\windows\system32\dllcache\mqac.sys + 2004-08-05 03:00 . 2006-10-04 08:48 72704 c:\windows\system32\dllcache\magnify.exe - 2004-08-05 03:00 . 2004-08-05 03:00 72704 c:\windows\system32\dllcache\magnify.exe + 2004-08-05 03:00 . 2009-06-22 11:35 92544 c:\windows\system32\dllcache\ksecdd.sys + 2007-04-18 12:31 . 2009-08-29 07:36 27648 c:\windows\system32\dllcache\jsproxy.dll - 2007-04-18 12:31 . 2009-04-29 04:55 27648 c:\windows\system32\dllcache\jsproxy.dll - 2008-04-16 23:03 . 2009-04-28 09:05 13824 c:\windows\system32\dllcache\ieudinit.exe + 2008-04-16 23:03 . 2009-08-28 10:28 13824 c:\windows\system32\dllcache\ieudinit.exe + 2004-08-05 03:00 . 2009-08-29 07:36 44544 c:\windows\system32\dllcache\iernonce.dll - 2004-08-05 03:00 . 2009-04-29 04:55 44544 c:\windows\system32\dllcache\iernonce.dll - 2004-08-05 03:00 . 2009-04-29 04:55 78336 c:\windows\system32\dllcache\ieencode.dll + 2004-08-05 03:00 . 2009-08-29 07:36 78336 c:\windows\system32\dllcache\ieencode.dll - 2004-08-05 03:00 . 2009-04-28 09:05 70656 c:\windows\system32\dllcache\ie4uinit.exe + 2004-08-05 03:00 . 2009-08-28 10:28 70656 c:\windows\system32\dllcache\ie4uinit.exe + 2008-04-16 23:03 . 2009-08-29 07:36 63488 c:\windows\system32\dllcache\icardie.dll - 2008-04-16 23:03 . 2009-04-29 04:55 63488 c:\windows\system32\dllcache\icardie.dll + 2004-08-05 03:00 . 2009-06-16 14:55 82432 c:\windows\system32\dllcache\fontsub.dll + 2009-08-17 07:57 . 2008-07-06 12:06 89088 c:\windows\system32\dllcache\filterpipelineprintproc.dll + 2004-08-05 03:00 . 2009-08-29 07:36 17408 c:\windows\system32\dllcache\corpol.dll + 2004-08-05 03:00 . 2009-08-06 19:24 96480 c:\windows\system32\dllcache\cdm.dll + 2004-08-05 03:00 . 2009-06-10 14:21 84992 c:\windows\system32\dllcache\avifil32.dll - 2004-08-05 03:00 . 2004-08-05 03:00 84992 c:\windows\system32\dllcache\avifil32.dll - 2004-08-04 20:00 . 2004-08-04 20:00 58880 c:\windows\system32\dllcache\atl.dll + 2004-08-04 20:00 . 2009-07-17 18:55 58880 c:\windows\system32\dllcache\atl.dll + 2008-07-25 10:16 . 2008-07-25 10:16 96760 c:\windows\system32\dfshim.dll - 2007-10-24 00:47 . 2007-10-24 00:47 96760 c:\windows\system32\dfshim.dll + 2004-08-05 03:00 . 2009-08-29 07:36 17408 c:\windows\system32\corpol.dll - 2008-04-02 06:38 . 2009-06-24 13:10 49152 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2008-04-02 06:38 . 2009-12-01 22:41 49152 c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2008-04-02 06:38 . 2009-12-01 22:41 49152 c:\windows\system32\config\systemprofile\Cookies\index.dat - 2008-04-02 06:38 . 2009-06-24 13:10 49152 c:\windows\system32\config\systemprofile\Cookies\index.dat + 2004-08-05 03:00 . 2009-08-06 19:24 96480 c:\windows\system32\cdm.dll + 2009-06-24 13:08 . 2009-12-01 09:37 81984 c:\windows\system32\bdod.bin - 2009-06-24 13:08 . 2009-06-24 15:03 81984 c:\windows\system32\bdod.bin + 2004-08-05 03:00 . 2009-06-10 14:21 84992 c:\windows\system32\avifil32.dll - 2004-08-05 03:00 . 2004-08-05 03:00 84992 c:\windows\system32\avifil32.dll - 2004-08-05 03:00 . 2004-08-05 03:00 58880 c:\windows\system32\atl.dll + 2004-08-05 03:00 . 2009-07-17 18:55 58880 c:\windows\system32\atl.dll + 2008-07-29 22:40 . 2008-07-29 22:40 70648 c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll + 2008-07-29 22:40 . 2008-07-29 22:40 91136 c:\windows\Microsoft.NET\Framework\v3.5\MSBuild.exe + 2008-07-29 22:40 . 2008-07-29 22:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.VisualC.STLCLR.dll + 2008-07-29 22:40 . 2008-07-29 22:40 40960 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Data.Entity.Build.Tasks.dll + 2008-07-29 17:47 . 2008-07-29 17:47 89080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2052.dll + 2008-07-29 17:47 . 2008-07-29 17:47 92664 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1042.dll + 2008-07-29 17:47 . 2008-07-29 17:47 95224 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1041.dll + 2008-07-29 17:47 . 2008-07-29 17:47 89592 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1028.dll + 2008-07-29 17:47 . 2008-07-29 17:47 84480 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2052.dll + 2008-07-29 17:47 . 2008-07-29 17:47 94720 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1042.dll + 2008-07-29 17:47 . 2008-07-29 17:47 97792 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1041.dll + 2008-07-29 17:47 . 2008-07-29 17:47 84992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1028.dll + 2008-07-29 17:47 . 2008-07-29 17:47 97280 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe + 2008-07-29 22:40 . 2008-07-29 22:40 95224 c:\windows\Microsoft.NET\Framework\v3.5\EdmGen.exe + 2008-07-29 22:40 . 2008-07-29 22:40 78856 c:\windows\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe + 2008-07-29 22:40 . 2008-07-29 22:40 41984 c:\windows\Microsoft.NET\Framework\v3.5\AddInUtil.exe + 2008-07-29 22:40 . 2008-07-29 22:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess32.exe + 2008-07-29 22:40 . 2008-07-29 22:40 41992 c:\windows\Microsoft.NET\Framework\v3.5\AddInProcess.exe + 2008-07-29 20:10 . 2008-07-29 20:10 46104 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe + 2008-07-29 18:59 . 2008-07-29 18:59 32768 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationCFFRasterizer.dll + 2008-07-29 20:10 . 2008-07-29 20:10 71160 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PenIMC.dll + 2008-07-29 18:32 . 2008-07-29 18:32 17448 c:\windows\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe + 2008-07-29 18:16 . 2008-07-29 18:16 32768 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll + 2008-07-29 18:16 . 2008-07-29 18:16 73728 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.Install.dll + 2008-07-29 18:16 . 2008-07-29 18:16 20504 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceMonikerSupport.dll + 2008-07-29 18:16 . 2008-07-29 18:16 11280 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelEvents.dll - 2007-10-24 00:47 . 2007-10-24 00:47 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll + 2008-07-25 10:17 . 2008-07-25 10:17 37896 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll + 2008-07-25 10:17 . 2008-07-25 10:17 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL - 2007-10-24 00:47 . 2007-10-24 00:47 81400 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL + 2008-07-25 10:17 . 2008-07-25 10:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll - 2007-10-24 00:47 . 2007-10-24 00:47 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll + 2008-07-25 10:17 . 2008-07-25 10:17 57392 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll - 2007-10-24 00:47 . 2007-10-24 00:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll + 2008-07-25 10:17 . 2008-07-25 10:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll - 2007-10-24 00:47 . 2007-10-24 00:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll + 2008-07-25 10:17 . 2008-07-25 10:17 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll + 2008-07-25 10:17 . 2008-07-25 10:17 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll - 2007-10-24 00:47 . 2007-10-24 00:47 95232 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll + 2008-07-25 10:17 . 2008-07-25 10:17 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll - 2007-10-24 00:47 . 2007-10-24 00:47 16896 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll + 2008-07-25 10:17 . 2008-07-25 10:17 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe - 2007-10-24 00:47 . 2007-10-24 00:47 61952 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe - 2007-10-24 00:47 . 2007-10-24 00:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe + 2008-07-25 10:17 . 2008-07-25 10:17 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe - 2007-10-24 00:47 . 2007-10-24 00:47 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe + 2008-07-25 10:17 . 2008-07-25 10:17 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe + 2008-07-25 10:17 . 2008-07-25 10:17 88584 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll - 2007-10-24 00:47 . 2007-10-24 00:47 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll + 2008-07-25 10:17 . 2008-07-25 10:17 24584 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll - 2007-10-24 00:47 . 2007-10-24 00:47 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll + 2008-07-25 10:17 . 2008-07-25 10:17 31744 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll - 2007-10-24 00:47 . 2007-10-24 00:47 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll + 2008-07-25 10:17 . 2008-07-25 10:17 19456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll + 2008-07-25 10:17 . 2008-07-25 10:17 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe + 2008-07-25 10:16 . 2008-07-25 10:16 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll - 2007-10-24 00:47 . 2007-10-24 00:47 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll + 2008-07-25 10:17 . 2008-07-25 10:17 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll - 2007-10-24 00:47 . 2007-10-24 00:47 77312 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll + 2008-07-25 10:17 . 2008-07-25 10:17 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll - 2007-10-24 00:47 . 2007-10-24 00:47 94208 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll + 2008-07-25 10:17 . 2008-07-25 10:17 46592 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll + 2008-07-25 10:17 . 2008-07-25 10:17 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll - 2007-10-24 00:47 . 2007-10-24 00:47 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll + 2008-07-25 10:16 . 2008-07-25 10:16 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe - 2007-10-24 00:47 . 2007-10-24 00:47 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe + 2008-07-25 10:16 . 2008-07-25 10:16 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll - 2007-10-24 00:47 . 2007-10-24 00:47 97792 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll + 2008-07-25 10:16 . 2008-07-25 10:16 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2007-10-24 00:47 . 2007-10-24 00:47 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll - 2007-10-24 00:47 . 2007-10-24 00:47 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll + 2008-07-25 10:16 . 2008-07-25 10:16 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll - 2007-10-24 00:47 . 2007-10-24 00:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll + 2008-07-25 10:16 . 2008-07-25 10:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll + 2008-07-25 10:16 . 2008-07-25 10:16 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll - 2007-10-24 00:47 . 2007-10-24 00:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll + 2008-07-25 10:16 . 2008-07-25 10:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll - 2007-10-24 00:47 . 2007-10-24 00:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll + 2008-07-25 10:16 . 2008-07-25 10:16 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe - 2007-10-24 00:47 . 2007-10-24 00:47 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe - 2007-10-24 00:47 . 2007-10-24 00:47 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll + 2008-07-25 10:17 . 2008-07-25 10:17 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll + 2008-07-25 10:17 . 2008-07-25 10:17 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll - 2007-10-24 00:47 . 2007-10-24 00:47 65032 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll - 2007-10-24 00:47 . 2007-10-24 00:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe + 2008-07-25 10:17 . 2008-07-25 10:17 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe - 2007-10-24 00:47 . 2007-10-24 00:47 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll + 2008-07-25 10:17 . 2008-07-25 10:17 77824 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll - 2007-10-24 00:47 . 2007-10-24 00:47 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll + 2008-07-25 10:16 . 2008-07-25 10:16 18936 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll + 2008-07-25 10:16 . 2008-07-25 10:16 62968 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll + 2008-07-25 10:16 . 2008-07-25 10:16 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe - 2007-10-24 00:47 . 2007-10-24 00:47 35320 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe - 2007-10-24 00:47 . 2007-10-24 00:47 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll + 2008-07-25 10:17 . 2008-07-25 10:17 69120 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll - 2007-10-24 00:47 . 2007-10-24 00:47 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll + 2008-07-25 10:17 . 2008-07-25 10:17 27136 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll - 2007-10-24 00:47 . 2007-10-24 00:47 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll + 2008-07-25 10:16 . 2008-07-25 10:16 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll - 2007-10-24 00:47 . 2007-10-24 00:47 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe + 2008-07-25 10:16 . 2008-07-25 10:16 80376 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe + 2008-07-25 10:17 . 2008-07-25 10:17 89608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll + 2008-11-25 03:59 . 2008-11-25 03:59 31560 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe + 2008-07-25 10:16 . 2008-07-25 10:16 34312 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe + 2008-07-25 10:16 . 2008-07-25 10:16 33288 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe - 2007-10-24 00:47 . 2007-10-24 00:47 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe + 2008-07-25 10:16 . 2008-07-25 10:16 24576 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe + 2008-07-25 10:16 . 2008-07-25 10:16 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll - 2007-10-24 00:47 . 2007-10-24 00:47 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll + 2008-07-25 10:16 . 2008-07-25 10:16 33800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll + 2008-07-25 10:16 . 2008-07-25 10:16 17416 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll + 2008-07-25 10:16 . 2008-07-25 10:16 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll - 2007-10-24 00:47 . 2007-10-24 00:47 22024 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll + 2008-07-25 10:16 . 2008-07-25 10:16 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe - 2007-10-24 00:47 . 2007-10-24 00:47 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe + 2008-07-25 10:17 . 2008-07-25 10:17 58880 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe + 2008-07-25 10:16 . 2008-07-25 10:16 98808 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll + 2008-07-25 10:17 . 2008-07-25 10:17 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll - 2007-10-24 00:47 . 2007-10-24 00:47 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll + 2008-07-25 10:16 . 2008-07-25 10:16 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll - 2007-10-24 00:47 . 2007-10-24 00:47 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll - 2007-10-24 00:47 . 2007-10-24 00:47 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2008-07-25 10:16 . 2008-07-25 10:16 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll + 2009-06-24 18:56 . 2009-06-24 18:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe - 2007-04-13 19:58 . 2007-04-13 19:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2008-05-27 23:49 . 2008-05-27 23:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2008-05-27 23:49 . 2008-05-27 23:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2007-04-13 19:57 . 2007-04-13 19:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2008-05-27 23:49 . 2008-05-27 23:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2007-04-13 19:57 . 2007-04-13 19:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2008-05-28 00:30 . 2008-05-28 00:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2007-04-13 20:30 . 2007-04-13 20:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2008-07-25 10:16 . 2008-07-25 10:16 96768 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll + 2008-07-25 10:17 . 2008-07-25 10:17 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll - 2007-10-24 00:47 . 2007-10-24 00:47 16896 c:\windows\Microsoft.NET\Framework\SharedReg12.dll - 2007-10-24 00:47 . 2007-10-24 00:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll + 2008-07-25 10:17 . 2008-07-25 10:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll - 2007-10-24 00:47 . 2007-10-24 00:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2008-07-25 10:17 . 2008-07-25 10:17 16896 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll + 2008-07-25 10:16 . 2008-07-25 10:16 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll - 2007-10-24 00:47 . 2007-10-24 00:47 16896 c:\windows\Microsoft.NET\Framework\sbscmp10.dll + 2008-07-25 10:16 . 2008-07-25 10:16 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe - 2007-10-24 00:47 . 2007-10-24 00:47 82944 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe + 2009-07-16 11:26 . 2005-03-18 16:23 12800 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll + 2009-07-16 11:26 . 2005-03-18 16:23 53248 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll + 2009-11-29 23:15 . 2009-11-29 23:15 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe + 2007-08-07 21:58 . 2009-11-14 16:28 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe - 2007-08-07 21:58 . 2009-06-14 21:10 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe - 2007-08-07 21:58 . 2009-06-14 21:10 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe + 2007-08-07 21:58 . 2009-11-14 16:28 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe - 2007-08-07 21:58 . 2009-06-14 21:10 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe + 2007-08-07 21:58 . 2009-11-14 16:28 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe + 2009-01-15 10:24 . 2009-11-14 16:29 35088 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\oisicon.exe - 2009-01-15 10:24 . 2009-06-14 21:12 35088 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\oisicon.exe + 2009-01-15 10:24 . 2009-11-14 16:29 18704 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\mspicons.exe - 2009-01-15 10:24 . 2009-06-14 21:12 18704 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\mspicons.exe + 2009-01-15 10:24 . 2009-11-14 16:29 20240 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\cagicon.exe - 2009-01-15 10:24 . 2009-06-14 21:12 20240 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\cagicon.exe + 2009-10-22 18:46 . 2009-10-22 18:46 18502 c:\windows\Installer\{76E5ADA2-3EC7-44A3-8708-5282ED28A2DC}\WinresNew.exe + 2006-07-24 17:50 . 2006-07-24 17:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\VBAME.DLL + 2009-04-02 12:02 . 2009-04-02 12:02 14720 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\SMARTTAGINSTALL.EXE + 2009-03-06 05:04 . 2009-03-06 05:04 33152 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\SETLANG.EXE + 2009-03-06 04:04 . 2009-03-06 04:04 39464 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\REFIEBAR.DLL + 2008-11-04 03:29 . 2008-11-04 03:29 39248 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\REFEDIT.DLL + 2009-04-02 12:02 . 2009-04-02 12:02 45968 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OSETUPPS.DLL + 2009-04-02 12:02 . 2009-04-02 12:02 17792 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OPHPROXY.DLL + 2009-04-02 12:02 . 2009-04-02 12:02 15760 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OMUOPTINPS.DLL + 2009-03-06 04:23 . 2009-03-06 04:23 22432 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OISCTRL.DLL + 2008-11-04 02:02 . 2008-11-04 02:02 54744 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OFFRHD.DLL + 2009-03-06 04:04 . 2009-03-06 04:04 64872 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\NAME.DLL + 2009-04-02 12:01 . 2009-04-02 12:01 42864 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSSH.DLL + 2009-04-03 18:46 . 2009-04-03 18:46 34200 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSOSTYLE.DLL + 2008-11-04 03:49 . 2008-11-04 03:49 66424 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSOMSE.DLL + 2008-11-10 10:50 . 2008-11-10 10:50 68472 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSOHTMED.EXE + 2008-11-10 10:50 . 2008-11-10 10:50 76664 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSOHEV.DLL + 2008-11-10 11:38 . 2008-11-10 11:38 27000 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSOEURO.DLL + 2008-11-03 23:39 . 2008-11-03 23:39 14728 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSOCFU.DLL + 2009-04-02 12:01 . 2009-04-02 12:01 18816 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSMH.DLL + 2009-03-06 05:10 . 2009-03-06 05:10 47472 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSE7.EXE + 2008-10-26 06:26 . 2008-10-26 06:26 66944 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSAEXP30.DLL + 2006-07-24 10:50 . 2006-07-24 10:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSADDNDR.DLL + 2008-10-25 06:18 . 2008-10-25 06:18 89464 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\METCONV.DLL + 2009-04-02 12:01 . 2009-04-02 12:01 56680 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\EXP_XPS.DLL + 2009-04-03 18:46 . 2009-04-03 18:46 97640 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\EXP_PDF.DLL + 2008-10-25 06:18 . 2008-10-25 06:18 54152 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\AUTHZAX.DLL + 2009-03-06 02:48 . 2009-03-06 02:48 55152 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACERCLR.DLL + 2008-10-25 05:31 . 2008-10-25 05:31 15224 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEODTXT.DLL + 2008-10-25 05:31 . 2008-10-25 05:31 15224 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEODPDX.DLL + 2008-10-25 05:31 . 2008-10-25 05:31 15224 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEODEXL.DLL + 2008-10-25 05:31 . 2008-10-25 05:31 15224 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEODDBS.DLL + 2009-03-06 02:47 . 2009-03-06 02:47 47008 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEERR.DLL + 2008-11-21 02:02 . 2008-11-21 02:02 94592 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACCOLK.DLL + 2006-10-26 19:56 . 2006-10-26 19:56 67408 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.4518\MSONPUI.DLL + 2006-10-26 19:56 . 2006-10-26 19:56 32592 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.4518\MSONPMON.DLL + 2006-10-26 21:41 . 2006-10-26 21:41 66368 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.4518\INLAUNCH.DLL + 2006-07-24 17:50 . 2006-07-24 17:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\VBAME.DLL + 2006-07-24 10:50 . 2006-07-24 10:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\MSADDNDR.DLL + 2007-08-07 21:57 . 2007-08-07 21:57 12096 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WORDPOL.DLL + 2006-10-27 05:58 . 2006-10-27 05:58 33080 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VPREVIEW.EXE + 2007-08-07 21:57 . 2007-08-07 21:57 12080 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VBIDEPOL.DLL + 2007-08-07 21:57 . 2007-08-07 21:57 64288 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL + 2006-10-26 19:59 . 2006-10-26 19:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE + 2006-10-27 02:49 . 2006-10-27 02:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SETLANG.EXE + 2006-10-27 03:12 . 2006-10-27 03:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\REFIEBAR.DLL + 2006-10-27 03:09 . 2006-10-27 03:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PUBTRAP.DLL + 2007-08-07 21:57 . 2007-08-07 21:57 12112 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PPTPOL.DLL + 2006-10-27 02:59 . 2006-10-27 02:59 46936 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OSETUPPS.DLL + 2006-10-26 19:59 . 2006-10-26 19:59 18760 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OPHPROXY.DLL + 2006-10-26 19:59 . 2006-10-26 19:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL + 2006-10-27 03:00 . 2006-10-27 03:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OISCTRL.DLL + 2006-10-27 15:11 . 2006-10-27 15:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OFFRHD.DLL + 2007-08-07 21:57 . 2007-08-07 21:57 11544 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OFFICEPL.DLL + 2007-08-07 21:57 . 2007-08-07 21:57 12104 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTAGPOL.DLL + 2007-08-07 21:57 . 2007-08-07 21:57 20280 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTAGPIA.DLL + 2006-10-26 19:59 . 2006-10-26 19:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSSH.DLL + 2006-10-27 15:26 . 2006-10-27 15:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL + 2006-10-27 02:52 . 2006-10-27 02:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOMSE.DLL + 2006-10-26 20:12 . 2006-10-26 20:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOHTMED.EXE + 2006-10-27 15:01 . 2006-10-27 15:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSOHEV.DLL + 2006-10-26 19:59 . 2006-10-26 19:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSMH.DLL + 2006-10-27 02:52 . 2006-10-27 02:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSE7.EXE + 2006-10-27 03:12 . 2006-10-27 03:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\METCONV.DLL + 2007-08-07 21:57 . 2007-08-07 21:57 12096 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\GRAPHPOL.DLL + 2007-08-07 21:56 . 2007-08-07 21:56 12096 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EXCELPOL.DLL + 2006-10-26 20:12 . 2006-10-26 20:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\AUTHZAX.DLL + 2006-10-27 04:18 . 2006-10-27 04:18 94016 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ACCOLK.DLL + 2009-10-17 16:16 . 2009-06-29 16:12 44544 c:\windows\ie7updates\KB974455-IE7\pngfilt.dll + 2009-10-17 16:16 . 2009-06-29 16:12 52224 c:\windows\ie7updates\KB974455-IE7\msfeedsbs.dll + 2009-10-17 16:16 . 2009-06-29 16:12 27648 c:\windows\ie7updates\KB974455-IE7\jsproxy.dll + 2009-10-17 16:16 . 2009-06-29 11:07 13824 c:\windows\ie7updates\KB974455-IE7\ieudinit.exe + 2009-10-17 16:16 . 2009-06-29 16:12 44544 c:\windows\ie7updates\KB974455-IE7\iernonce.dll + 2009-10-17 16:16 . 2009-06-29 16:12 78336 c:\windows\ie7updates\KB974455-IE7\ieencode.dll + 2009-10-17 16:16 . 2009-06-29 11:07 70656 c:\windows\ie7updates\KB974455-IE7\ie4uinit.exe + 2009-10-17 16:16 . 2009-06-29 16:12 63488 c:\windows\ie7updates\KB974455-IE7\icardie.dll + 2009-10-17 16:16 . 2009-06-29 16:12 17408 c:\windows\ie7updates\KB974455-IE7\corpol.dll + 2009-08-02 16:37 . 2009-04-29 04:56 44544 c:\windows\ie7updates\KB972260-IE7\pngfilt.dll + 2009-08-02 16:37 . 2009-04-29 04:55 52224 c:\windows\ie7updates\KB972260-IE7\msfeedsbs.dll + 2009-08-02 16:37 . 2009-04-29 04:55 27648 c:\windows\ie7updates\KB972260-IE7\jsproxy.dll + 2009-08-02 16:37 . 2009-04-28 09:05 13824 c:\windows\ie7updates\KB972260-IE7\ieudinit.exe + 2009-08-02 16:37 . 2009-04-29 04:55 44544 c:\windows\ie7updates\KB972260-IE7\iernonce.dll + 2009-08-02 16:37 . 2009-04-29 04:55 78336 c:\windows\ie7updates\KB972260-IE7\ieencode.dll + 2009-08-02 16:37 . 2009-04-28 09:05 70656 c:\windows\ie7updates\KB972260-IE7\ie4uinit.exe + 2009-08-02 16:37 . 2009-04-29 04:55 63488 c:\windows\ie7updates\KB972260-IE7\icardie.dll + 2009-08-02 16:37 . 2004-08-05 03:00 35328 c:\windows\ie7updates\KB972260-IE7\corpol.dll + 2009-08-17 07:57 . 2008-07-06 12:06 89088 c:\windows\Driver Cache\i386\filterpipelineprintproc.dll + 2009-10-17 16:13 . 2009-10-17 16:13 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_4ddc7a3c\System.Drawing.Design.dll + 2009-10-17 16:13 . 2009-10-17 16:13 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_7cacf613\CustomMarshalers.dll + 2009-10-17 19:11 . 2009-10-17 19:11 47616 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveWriter\c1dc6dbdd2c50f2e6672881eadbab19b\WindowsLiveWriter.ni.exe + 2009-10-17 19:12 . 2009-10-17 19:12 99840 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3154239f4e03d51fdc12de103957babc\WindowsLive.Writer.Api.ni.dll + 2009-10-17 17:57 . 2009-10-17 17:57 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\b4a9e413d5cd6d6ec2d50aa05381e293\UIAutomationProvider.ni.dll + 2009-10-17 19:14 . 2009-10-17 19:14 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\8acb476a0d4ee17a12881e17ae74a6af\System.Windows.Presentation.ni.dll + 2009-10-17 19:14 . 2009-10-17 19:14 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\4b87ca3482a3c0ee733e028ecee7de65\System.Web.DynamicData.Design.ni.dll + 2009-10-17 19:12 . 2009-10-17 19:12 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\a0c71055364bd356971791284c3fb910\System.ComponentModel.DataAnnotations.ni.dll + 2009-10-17 19:12 . 2009-10-17 19:12 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\f9a75bbdc2ce7db578b5977766a09b99\System.AddIn.Contract.ni.dll + 2009-10-17 19:08 . 2009-10-17 19:08 44032 c:\windows\assembly\NativeImages_v2.0.50727_32\stdole\d5508d1d8577e42bcff02286c9a182b4\stdole.ni.dll + 2009-10-17 19:08 . 2009-10-17 19:08 14848 c:\windows\assembly\NativeImages_v2.0.50727_32\SBAIUI\50a5885e0c38da8bb485d59c8a6a5531\SBAIUI.ni.dll + 2009-10-17 17:50 . 2009-10-17 17:50 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\3dd0f86c966c75755d62eab8ddf0634c\PresentationFontCache.ni.exe + 2009-10-17 17:50 . 2009-10-17 17:50 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\034d081fe294bab1ee1ecc98c1181424\PresentationCFFRasterizer.ni.dll + 2009-10-17 19:08 . 2009-10-17 19:08 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\f2673aec397c52796aef05bb9d2668df\Microsoft.Vsa.ni.dll + 2009-10-17 19:07 . 2009-10-17 19:07 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\1ded203bd27031c3a5e3441f94b528c0\Microsoft.VisualC.ni.dll + 2009-10-17 19:12 . 2009-10-17 19:12 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\169293bfca24c23e97c23bfc3db0bb67\Microsoft.SqlServer.CustomControls.ni.dll + 2009-10-17 19:10 . 2009-10-17 19:10 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\fe82a030febfe73d6b5d54acab3cb414\Microsoft.Office.Interop.OutlookViewCtl.ni.dll + 2009-10-17 19:10 . 2009-10-17 19:10 62976 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\f468a02a480ee06b80592900bfa914f6\Microsoft.Interop.eCRM.Ole.ni.dll + 2009-10-17 19:11 . 2009-10-17 19:11 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\5e0031a1bd73e55af4c43b66760ddf66\Microsoft.Interop.eCRM.NetFw.ni.dll + 2009-10-17 19:12 . 2009-10-17 19:12 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\d513fe1a81c441e7656a9b062cff4e9f\Microsoft.Build.Framework.ni.dll + 2009-10-17 19:12 . 2009-10-17 19:12 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\c5d504724d7f351b1d034615dbb72a2a\Microsoft.Build.Framework.ni.dll + 2009-10-17 19:11 . 2009-10-17 19:11 21504 c:\windows\assembly\NativeImages_v2.0.50727_32\ILoader\1260f1f4f56cd60e4444e488da819fb0\ILoader.ni.dll + 2009-10-17 19:09 . 2009-10-17 19:09 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\Extensibility\c78bae30a7c9328ef4d9f7dae03a5950\Extensibility.ni.dll + 2009-10-17 19:12 . 2009-10-17 19:12 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\a664ccab020f93f1d533919f57131190\dfsvc.ni.exe + 2009-10-17 19:07 . 2009-10-17 19:07 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\e63d6d26b8a664cfdfbd4ad75e03c14d\Accessibility.ni.dll + 2009-08-17 07:58 . 2009-08-17 07:58 94208 c:\windows\assembly\GAC_MSIL\WindowsFormsIntegration\3.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll + 2009-08-17 07:58 . 2009-08-17 07:58 98304 c:\windows\assembly\GAC_MSIL\UIAutomationTypes\3.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll + 2009-08-17 07:58 . 2009-08-17 07:58 40960 c:\windows\assembly\GAC_MSIL\UIAutomationProvider\3.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll + 2009-08-17 08:01 . 2009-08-17 08:01 12288 c:\windows\assembly\GAC_MSIL\System.Windows.Presentation\3.5.0.0__b77a5c561934e089\System.Windows.Presentation.dll + 2009-08-17 08:01 . 2009-08-17 08:01 61440 c:\windows\assembly\GAC_MSIL\System.Web.Routing\3.5.0.0__31bf3856ad364e35\System.Web.Routing.dll + 2009-10-17 16:23 . 2009-10-17 16:23 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll + 2009-08-17 08:01 . 2009-08-17 08:01 32768 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData.Design\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.Design.dll + 2009-08-17 08:01 . 2009-08-17 08:01 77824 c:\windows\assembly\GAC_MSIL\System.Web.Abstractions\3.5.0.0__31bf3856ad364e35\System.Web.Abstractions.dll + 2009-08-17 07:58 . 2009-08-17 07:58 32768 c:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll + 2009-08-17 07:58 . 2009-08-17 07:58 73728 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Install\3.0.0.0__b77a5c561934e089\System.ServiceModel.Install.dll - 2008-04-15 07:52 . 2008-04-15 07:52 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2009-10-17 16:23 . 2009-10-17 16:23 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll + 2009-08-17 08:01 . 2009-08-17 08:01 53248 c:\windows\assembly\GAC_MSIL\System.Data.DataSetExtensions\3.5.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll + 2009-10-17 16:23 . 2009-10-17 16:23 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll - 2008-04-15 07:52 . 2008-04-15 07:52 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll + 2009-08-17 08:01 . 2009-08-17 08:01 57344 c:\windows\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\3.5.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll + 2009-08-17 08:00 . 2009-08-17 08:00 45056 c:\windows\assembly\GAC_MSIL\System.AddIn.Contract\2.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll + 2009-08-17 07:58 . 2009-08-17 07:58 46104 c:\windows\assembly\GAC_MSIL\PresentationFontCache\3.0.0.0__31bf3856ad364e35\PresentationFontCache.exe + 2009-08-17 07:58 . 2009-08-17 07:58 32768 c:\windows\assembly\GAC_MSIL\PresentationCFFRasterizer\3.0.0.0__31bf3856ad364e35\PresentationCFFRasterizer.dll - 2008-04-15 07:51 . 2008-04-15 07:51 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll + 2009-10-17 16:23 . 2009-10-17 16:23 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll - 2008-04-15 07:52 . 2008-04-15 07:52 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2009-10-17 16:23 . 2009-10-17 16:23 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll + 2009-08-17 08:00 . 2009-08-17 08:00 41984 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC.STLCLR\1.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.STLCLR.dll - 2008-04-15 07:52 . 2008-04-15 07:52 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll + 2009-10-17 16:23 . 2009-10-17 16:23 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll - 2008-04-15 07:52 . 2008-04-15 07:52 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2009-10-17 16:23 . 2009-10-17 16:23 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll + 2009-08-17 08:00 . 2009-08-17 08:00 94208 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.v3.5.dll + 2009-08-17 08:00 . 2009-08-17 08:00 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll - 2008-04-15 07:52 . 2008-04-15 07:52 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2009-10-17 16:23 . 2009-10-17 16:23 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll + 2009-10-17 16:23 . 2009-10-17 16:23 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll - 2008-04-15 07:52 . 2008-04-15 07:52 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll + 2009-10-17 16:23 . 2009-10-17 16:23 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll - 2008-04-15 07:51 . 2008-04-15 07:51 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll + 2009-10-17 16:23 . 2009-10-17 16:23 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll - 2008-04-15 07:51 . 2008-04-15 07:51 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll + 2009-10-17 16:23 . 2009-10-17 16:23 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2008-04-15 07:52 . 2008-04-15 07:52 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll - 2008-04-15 07:51 . 2008-04-15 07:51 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2009-10-17 16:23 . 2009-10-17 16:23 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll + 2009-11-07 15:34 . 2009-11-07 15:34 10576 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll + 2009-11-07 15:34 . 2009-11-07 15:34 11112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll + 2009-11-07 15:35 . 2009-11-07 15:35 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll + 2009-11-07 15:34 . 2009-11-07 15:34 11136 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll + 2009-11-07 15:35 . 2009-11-07 15:35 11152 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll + 2009-11-07 15:34 . 2009-11-07 15:34 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll + 2009-11-07 15:34 . 2009-11-07 15:34 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll + 2009-11-07 15:34 . 2009-11-07 15:34 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll + 2009-11-07 15:34 . 2009-11-07 15:34 19320 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll + 2009-07-23 11:27 . 2009-07-23 11:27 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2009-07-23 11:27 . 2009-07-23 11:27 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2009-11-29 23:24 . 2009-07-14 11:03 46080 c:\windows\$NtUninstallKB976098-v2$\tzchange.exe + 2009-11-29 23:24 . 2009-10-29 02:03 16896 c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll + 2009-10-17 16:16 . 2004-08-05 03:00 57344 c:\windows\$NtUninstallKB974571$\msasn1.dll + 2009-08-14 20:04 . 2004-08-05 03:00 58880 c:\windows\$NtUninstallKB973507$\atl.dll + 2009-08-14 20:06 . 2004-08-05 03:00 84992 c:\windows\$NtUninstallKB971557$\avifil32.dll + 2009-08-14 19:57 . 2007-07-06 12:46 48640 c:\windows\$NtUninstallKB971032$\mqupgrd.dll + 2009-08-14 19:57 . 2007-07-06 12:46 95744 c:\windows\$NtUninstallKB971032$\mqsec.dll + 2009-08-14 19:57 . 2007-07-06 12:46 16896 c:\windows\$NtUninstallKB971032$\mqise.dll + 2009-08-14 19:57 . 2007-07-06 12:46 47104 c:\windows\$NtUninstallKB971032$\mqdscli.dll + 2009-08-14 19:57 . 2004-08-05 03:00 19968 c:\windows\$NtUninstallKB971032$\mqbkup.exe + 2009-08-14 19:57 . 2007-07-06 10:05 72960 c:\windows\$NtUninstallKB971032$\mqac.sys + 2009-08-29 19:35 . 2008-10-22 09:47 62976 c:\windows\$NtUninstallKB970653-v3$\tzchange.exe + 2009-08-29 19:35 . 2009-07-16 04:14 14336 c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll + 2009-08-17 07:39 . 2006-03-24 04:37 49152 c:\windows\$NtUninstallKB968389$\wdigest.dll + 2009-08-17 07:39 . 2009-02-03 20:08 55808 c:\windows\$NtUninstallKB968389$\secur32.dll + 2009-08-17 07:39 . 2004-08-05 03:00 92032 c:\windows\$NtUninstallKB968389$\ksecdd.sys + 2009-07-19 21:04 . 2005-10-17 21:14 80896 c:\windows\$NtUninstallKB961371$\fontsub.dll + 2009-08-14 20:06 . 2004-08-05 03:00 78336 c:\windows\$NtUninstallKB960859$\tlntsess.exe + 2009-08-14 20:06 . 2005-05-10 23:45 75776 c:\windows\$NtUninstallKB960859$\telnet.exe + 2009-08-18 06:33 . 2004-08-05 03:00 50176 c:\windows\$NtUninstallKB925720$\utilman.exe + 2009-08-18 06:33 . 2004-08-05 03:00 35840 c:\windows\$NtUninstallKB925720$\umandlg.dll + 2009-08-18 06:33 . 2004-08-05 03:00 53760 c:\windows\$NtUninstallKB925720$\narrator.exe + 2009-08-18 06:33 . 2004-08-05 03:00 72704 c:\windows\$NtUninstallKB925720$\magnify.exe + 2009-11-08 23:10 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB976749-IE7\update\spcustom.dll + 2009-11-08 23:10 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB976749-IE7\spmsg.dll + 2009-10-17 16:08 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB975467\update\spcustom.dll + 2009-10-17 16:08 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB975467\spmsg.dll + 2009-10-17 16:17 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975025\update\spcustom.dll + 2009-10-17 16:17 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB975025\spmsg.dll + 2009-10-17 16:16 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974571\update\spcustom.dll + 2009-10-17 16:16 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB974571\spmsg.dll + 2009-09-04 20:57 . 2009-09-04 20:57 58880 c:\windows\$hf_mig$\KB974571\SP3QFE\msasn1.dll + 2009-09-04 21:03 . 2009-09-04 21:03 58880 c:\windows\$hf_mig$\KB974571\SP3GDR\msasn1.dll + 2009-09-04 20:36 . 2009-09-04 20:36 58880 c:\windows\$hf_mig$\KB974571\SP2QFE\msasn1.dll + 2009-10-17 16:16 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974455-IE7\update\spcustom.dll + 2009-10-17 16:16 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB974455-IE7\spmsg.dll + 2009-08-29 07:31 . 2009-08-29 07:31 44544 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\pngfilt.dll + 2009-08-29 07:31 . 2009-08-29 07:31 52224 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\msfeedsbs.dll + 2009-08-29 07:31 . 2009-08-29 07:31 27648 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\jsproxy.dll + 2009-08-28 10:01 . 2009-08-28 10:01 13824 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieudinit.exe + 2009-08-29 07:31 . 2009-08-29 07:31 44544 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\iernonce.dll + 2009-08-29 07:31 . 2009-08-29 07:31 78336 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieencode.dll + 2009-08-28 10:01 . 2009-08-28 10:01 70656 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ie4uinit.exe + 2009-08-29 07:31 . 2009-08-29 07:31 63488 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\icardie.dll + 2009-08-29 07:31 . 2009-08-29 07:31 17408 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\corpol.dll + 2009-10-17 16:17 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974112\update\spcustom.dll + 2009-10-17 16:17 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB974112\spmsg.dll + 2009-08-14 20:06 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973869\update\spcustom.dll + 2009-08-14 20:06 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973869\spmsg.dll + 2009-08-14 19:57 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973815\update\spcustom.dll + 2009-08-14 19:57 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973815\spmsg.dll + 2009-11-29 23:24 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973687\update\spcustom.dll + 2009-11-29 23:24 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973687\spmsg.dll + 2009-10-17 16:11 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973525\update\spcustom.dll + 2009-10-17 16:11 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973525\spmsg.dll + 2009-08-14 20:04 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973507\update\spcustom.dll + 2009-08-14 20:04 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973507\spmsg.dll + 2009-07-17 19:25 . 2009-07-17 19:25 58880 c:\windows\$hf_mig$\KB973507\SP3QFE\atl.dll + 2009-07-17 19:01 . 2009-07-17 19:01 58880 c:\windows\$hf_mig$\KB973507\SP3GDR\atl.dll + 2009-07-17 18:43 . 2009-07-17 18:43 58880 c:\windows\$hf_mig$\KB973507\SP2QFE\atl.dll + 2009-08-14 20:01 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973354\update\spcustom.dll + 2009-08-14 20:01 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB973354\spmsg.dll + 2009-07-19 23:11 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB973346\update\spcustom.dll + 2009-07-19 23:11 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB973346\spmsg.dll + 2009-08-02 16:37 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB972260-IE7\update\spcustom.dll + 2009-08-02 16:37 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB972260-IE7\spmsg.dll + 2009-06-29 16:23 . 2009-06-29 16:23 44544 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\pngfilt.dll + 2009-06-29 16:23 . 2009-06-29 16:23 52224 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\msfeedsbs.dll + 2009-06-29 16:23 . 2009-06-29 16:23 27648 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\jsproxy.dll + 2009-06-29 11:25 . 2009-06-29 11:25 13824 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieudinit.exe + 2009-06-29 16:23 . 2009-06-29 16:23 44544 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iernonce.dll + 2009-06-29 16:23 . 2009-06-29 16:23 78336 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieencode.dll + 2009-06-29 11:25 . 2009-06-29 11:25 70656 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ie4uinit.exe + 2009-06-29 16:23 . 2009-06-29 16:23 63488 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\icardie.dll + 2009-06-29 16:23 . 2009-06-29 16:23 17408 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\corpol.dll + 2009-09-12 22:00 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971961\update\spcustom.dll + 2009-09-12 22:00 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB971961\spmsg.dll + 2009-08-14 20:06 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971657\update\spcustom.dll + 2009-08-14 20:06 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971657\spmsg.dll + 2009-07-19 23:05 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971633\update\spcustom.dll + 2009-07-19 23:05 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971633\spmsg.dll + 2009-08-14 20:06 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB971557\update\spcustom.dll + 2009-08-14 20:06 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB971557\spmsg.dll + 2009-06-10 14:01 . 2009-06-10 14:01 84992 c:\windows\$hf_mig$\KB971557\SP3QFE\avifil32.dll + 2009-06-10 14:13 . 2009-06-10 14:13 84992 c:\windows\$hf_mig$\KB971557\SP3GDR\avifil32.dll + 2009-06-10 14:52 . 2009-06-10 14:52 84992 c:\windows\$hf_mig$\KB971557\SP2QFE\avifil32.dll + 2009-10-17 16:11 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971486\update\spcustom.dll + 2009-10-17 16:11 . 2009-05-26 11:40 17272 c:\windows\$hf_mig$\KB971486\spmsg.dll + 2009-08-14 19:57 . 2007-03-06 01:22 22752 c:\windows\$hf_mig$\KB971032\update\spcustom.dll + 2009-08-14 19:57 . 2007-03-06 01:22 14048 c:\windows\$hf_mig$\KB971032\spmsg.dll + 2009-06-25 18:26 . 2009-06-25 18:26 48640 c:\windows\$hf_mig$\KB971032\SP2QFE\mqupgrd.dll + 2009-06-25 18:26 . 2009-06-25 18:26 95744 c:\windows\$hf_mig$\KB971032\SP2QFE\mqsec.dll + 2009-06-25 18:26 . 2009-06-25 18:26 16896 c:\windows\$hf_mig$\KB971032\SP2QFE\mqise.dll + 2009-06-25 18:26 . 2009-06-25 18:26 47104 c:\windows\$hf_mig$\KB971032\SP2QFE\mqdscli.dll + 2009-06-22 11:30 . 2009-06-22 11:30 19968 c:\windows\$hf_mig$\KB971032\SP2QFE\mqbkup.exe + 2009-06-22 11:30 . 2009-06-22 11:30 91776 c:\windows\$hf_mig$\KB971032\SP2QFE\mqac.sys + 2009-11-14 16:17 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB969947\update\spcustom.dll + 2009-11-14 16:17 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB969947\spmsg.dll + 2009-10-17 16:17 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB969059\update\spcustom.dll + 2009-10-17 16:17 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB969059\spmsg.dll + 2009-08-17 07:39 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB968389\update\spcustom.dll + 2009-08-17 07:39 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB968389\spmsg.dll + 2009-06-25 08:41 . 2009-06-25 08:41 54272 c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll + 2009-06-25 08:41 . 2009-06-25 08:41 56832 c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll + 2009-06-24 10:28 . 2009-06-24 10:28 92928 c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys + 2009-06-25 08:25 . 2009-06-25 08:25 54272 c:\windows\$hf_mig$\KB968389\SP3GDR\wdigest.dll + 2009-06-25 08:25 . 2009-06-25 08:25 56832 c:\windows\$hf_mig$\KB968389\SP3GDR\secur32.dll + 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\$hf_mig$\KB968389\SP3GDR\ksecdd.sys + 2009-07-19 21:04 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB961371\update\spcustom.dll + 2009-07-19 21:04 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB961371\spmsg.dll + 2009-06-16 14:43 . 2009-06-16 14:43 81920 c:\windows\$hf_mig$\KB961371\SP3QFE\fontsub.dll + 2009-06-16 14:36 . 2009-06-16 14:36 81920 c:\windows\$hf_mig$\KB961371\SP3GDR\fontsub.dll + 2009-06-16 14:45 . 2009-06-16 14:45 81920 c:\windows\$hf_mig$\KB961371\SP2QFE\fontsub.dll + 2009-08-18 06:33 . 2007-11-30 11:18 26488 c:\windows\$hf_mig$\KB961118\update\spcustom.dll + 2009-08-18 06:33 . 2007-11-30 11:18 17272 c:\windows\$hf_mig$\KB961118\spmsg.dll + 2009-08-14 20:06 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB960859\update\spcustom.dll + 2009-08-14 20:06 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB960859\spmsg.dll + 2009-06-12 12:03 . 2009-06-12 12:03 80896 c:\windows\$hf_mig$\KB960859\SP3QFE\tlntsess.exe + 2009-06-12 12:03 . 2009-06-12 12:03 76288 c:\windows\$hf_mig$\KB960859\SP3QFE\telnet.exe + 2009-06-12 12:31 . 2009-06-12 12:31 80896 c:\windows\$hf_mig$\KB960859\SP3GDR\tlntsess.exe + 2009-06-12 12:31 . 2009-06-12 12:31 76288 c:\windows\$hf_mig$\KB960859\SP3GDR\telnet.exe + 2009-06-12 11:49 . 2009-06-12 11:49 80896 c:\windows\$hf_mig$\KB960859\SP2QFE\tlntsess.exe + 2009-06-12 11:49 . 2009-06-12 11:49 76288 c:\windows\$hf_mig$\KB960859\SP2QFE\telnet.exe + 2009-08-14 19:57 . 2007-03-06 01:22 22752 c:\windows\$hf_mig$\KB958470\update\spcustom.dll + 2009-08-12 08:47 . 2009-06-05 07:42 17408 c:\windows\$hf_mig$\KB958470\update\msrdpcustom.dll + 2009-08-14 19:57 . 2007-03-06 01:22 14048 c:\windows\$hf_mig$\KB958470\spmsg.dll + 2009-09-12 22:11 . 2008-07-08 13:02 26488 c:\windows\$hf_mig$\KB956844\update\spcustom.dll + 2009-09-12 22:11 . 2008-07-08 13:02 17272 c:\windows\$hf_mig$\KB956844\spmsg.dll + 2009-08-18 06:33 . 2005-10-12 23:16 22752 c:\windows\$hf_mig$\KB925720\update\spcustom.dll + 2009-08-18 06:33 . 2005-10-12 23:16 14048 c:\windows\$hf_mig$\KB925720\spmsg.dll + 2006-10-04 10:40 . 2006-10-04 10:40 50176 c:\windows\$hf_mig$\KB925720\SP2QFE\utilman.exe + 2006-10-04 14:05 . 2006-10-04 14:05 35840 c:\windows\$hf_mig$\KB925720\SP2QFE\umandlg.dll + 2006-10-04 10:40 . 2006-10-04 10:40 53760 c:\windows\$hf_mig$\KB925720\SP2QFE\narrator.exe + 2006-10-04 10:40 . 2006-10-04 10:40 72704 c:\windows\$hf_mig$\KB925720\SP2QFE\magnify.exe + 2009-10-17 16:23 . 2009-10-17 16:23 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll - 2008-04-15 07:51 . 2008-04-15 07:51 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll - 2004-08-05 03:00 . 2004-08-05 03:00 4608 c:\windows\system32\mqsvc.exe + 2004-08-05 03:00 . 2009-06-22 11:49 4608 c:\windows\system32\mqsvc.exe + 2008-07-28 11:12 . 2009-11-23 22:19 8224 c:\windows\system32\GDIPFONTCACHEV1.DAT + 2004-08-05 03:00 . 2009-07-16 15:03 4224 c:\windows\system32\drivers\beep.sys - 2004-08-05 03:00 . 2004-08-05 03:00 4224 c:\windows\system32\drivers\beep.sys - 2004-08-05 03:00 . 2004-08-05 03:00 4608 c:\windows\system32\dllcache\mqsvc.exe + 2004-08-05 03:00 . 2009-06-22 11:49 4608 c:\windows\system32\dllcache\mqsvc.exe + 2004-08-05 03:00 . 2009-07-16 15:03 4224 c:\windows\system32\dllcache\beep.sys - 2004-08-05 03:00 . 2004-08-05 03:00 4224 c:\windows\system32\dllcache\beep.sys + 2008-07-29 22:40 . 2008-07-29 22:40 5632 c:\windows\Microsoft.NET\Framework\v3.5\Sentinel.v3.5Client.dll - 2007-10-24 00:47 . 2007-10-24 00:47 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll + 2008-07-25 10:16 . 2008-07-25 10:16 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll + 2008-07-25 10:17 . 2008-07-25 10:17 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll - 2007-10-24 00:47 . 2007-10-24 00:47 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll - 2007-10-24 00:47 . 2007-10-24 00:47 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll + 2008-07-25 10:17 . 2008-07-25 10:17 6656 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll + 2008-07-25 10:17 . 2008-07-25 10:17 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll - 2007-10-24 00:47 . 2007-10-24 00:47 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll + 2008-07-25 10:17 . 2008-07-25 10:17 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe - 2007-10-24 00:47 . 2007-10-24 00:47 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe - 2007-10-24 00:47 . 2007-10-24 00:47 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe + 2008-07-25 10:16 . 2008-07-25 10:16 5120 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe + 2009-08-17 08:00 . 2009-08-17 08:00 5632 c:\windows\assembly\GAC_MSIL\Sentinel.v3.5Client\3.5.0.0__b03f5f7f11d50a3a\Sentinel.v3.5Client.dll - 2008-04-15 07:51 . 2008-04-15 07:51 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2009-10-17 16:23 . 2009-10-17 16:23 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll + 2009-10-17 16:23 . 2009-10-17 16:23 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll - 2008-04-15 07:51 . 2008-04-15 07:51 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll + 2009-10-17 16:23 . 2009-10-17 16:23 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll - 2008-04-15 07:52 . 2008-04-15 07:52 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll + 2009-10-17 16:23 . 2009-10-17 16:23 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll - 2008-04-15 07:51 . 2008-04-15 07:51 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll + 2009-08-14 19:57 . 2004-08-05 03:00 4608 c:\windows\$NtUninstallKB971032$\mqsvc.exe + 2009-06-22 11:30 . 2009-06-22 11:30 4608 c:\windows\$hf_mig$\KB971032\SP2QFE\mqsvc.exe - 2008-04-15 07:52 . 2008-04-15 07:52 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll + 2009-10-17 16:23 . 2009-10-17 16:23 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll - 2008-04-15 07:52 . 2008-04-15 07:52 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2009-10-17 16:23 . 2009-10-17 16:23 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll + 2008-07-25 10:17 . 2008-07-25 10:17 635904 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcr80.dll + 2008-07-25 10:17 . 2008-07-25 10:17 558080 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcp80.dll + 2008-07-25 10:17 . 2008-07-25 10:17 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\msvcm80.dll + 2009-12-01 15:20 . 2009-12-01 15:20 472576 c:\windows\Virtual Villagers - The Secret City\uninstall.exe + 2009-11-30 15:03 . 2009-11-30 15:03 574464 c:\windows\Virtual Families\uninstall.exe + 2009-09-07 14:45 . 2009-09-07 14:45 574464 c:\windows\The Game Of Life by Hasbro\uninstall.exe + 2008-07-29 20:26 . 2008-07-29 20:26 301568 c:\windows\system32\XPSViewer\XPSViewer.exe + 2009-08-17 07:57 . 2008-07-06 12:06 575488 c:\windows\system32\xpsshhdr.dll + 2009-07-16 11:27 . 2007-06-20 19:46 266088 c:\windows\system32\xactengine2_8.dll + 2009-07-16 11:27 . 2007-04-04 17:55 261480 c:\windows\system32\xactengine2_7.dll + 2009-07-16 11:27 . 2007-01-24 14:27 255848 c:\windows\system32\xactengine2_6.dll + 2009-07-16 11:27 . 2006-12-08 11:02 251672 c:\windows\system32\xactengine2_5.dll + 2009-07-16 11:26 . 2006-09-28 15:05 237848 c:\windows\system32\xactengine2_4.dll + 2009-07-16 11:26 . 2006-07-28 08:30 236824 c:\windows\system32\xactengine2_3.dll + 2009-07-16 11:26 . 2006-05-31 06:24 230168 c:\windows\system32\xactengine2_2.dll + 2009-07-16 11:26 . 2006-03-31 11:39 229584 c:\windows\system32\xactengine2_1.dll + 2009-07-16 11:26 . 2006-02-03 07:42 230096 c:\windows\system32\xactengine2_0.dll + 2004-08-05 03:00 . 2009-08-06 19:24 209632 c:\windows\system32\wuweb.dll + 2004-08-05 03:00 . 2009-08-06 19:24 327896 c:\windows\system32\wucltui.dll + 2004-08-05 03:00 . 2009-08-06 19:23 575704 c:\windows\system32\wuapi.dll + 2004-08-05 03:00 . 2009-04-01 22:02 604160 c:\windows\system32\wmspdmod.dll + 2004-08-05 03:00 . 2009-07-13 22:43 286208 c:\windows\system32\wmpdxm.dll - 2004-08-05 03:00 . 2006-08-17 12:28 132096 c:\windows\system32\wkssvc.dll + 2004-08-05 03:00 . 2009-06-10 06:32 132096 c:\windows\system32\wkssvc.dll + 2007-04-18 12:31 . 2009-08-29 07:36 832512 c:\windows\system32\wininet.dll - 2004-08-05 03:00 . 2009-04-29 04:56 233472 c:\windows\system32\webcheck.dll + 2004-08-05 03:00 . 2009-08-29 07:36 233472 c:\windows\system32\webcheck.dll + 2009-10-08 14:28 . 1998-05-17 22:06 368912 c:\windows\system32\vbar332.dll - 2004-08-05 03:00 . 2009-04-29 04:56 105984 c:\windows\system32\url.dll + 2004-08-05 03:00 . 2009-08-29 07:36 105984 c:\windows\system32\url.dll + 2008-07-29 18:59 . 2008-07-29 18:59 161296 c:\windows\system32\UIAutomationCore.dll + 2008-09-29 04:09 . 2008-09-29 04:09 368640 c:\windows\system32\twnlib4.dll - 2006-03-17 13:49 . 2006-03-17 13:49 368640 c:\windows\system32\TwnLib4.dll + 2004-08-05 03:00 . 2004-08-05 03:00 295424 c:\windows\system32\termsrv32.dll + 2004-08-05 03:00 . 2009-06-16 14:55 119808 c:\windows\system32\t2embed.dll + 2004-08-05 03:00 . 2009-08-26 08:16 247326 c:\windows\system32\strmdll.dll - 2004-08-05 03:00 . 2008-10-03 10:15 247326 c:\windows\system32\strmdll.dll + 2009-08-17 07:57 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\mxdwdrv.dll + 2009-08-17 07:57 . 2008-07-06 12:06 765440 c:\windows\system32\spool\XPSEP\i386\i386\mxdwdrv.dll + 2009-08-17 07:57 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\mxdwdrv.dll + 2009-08-17 07:57 . 2008-07-06 12:06 748032 c:\windows\system32\spool\XPSEP\amd64\amd64\mxdwdrv.dll + 2009-08-17 07:57 . 2008-07-06 12:06 147456 c:\windows\system32\spool\prtprocs\x64\filterpipelineprintproc.dll + 2009-08-17 07:57 . 2008-07-06 10:50 597504 c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe + 2009-01-15 10:23 . 2008-11-10 11:41 864144 c:\windows\system32\spool\drivers\w32x86\msonpdrv.dll + 2009-08-17 07:57 . 2008-03-13 04:52 761344 c:\windows\system32\spool\drivers\w32x86\3\unires.dll + 2009-08-17 07:57 . 2008-07-06 12:06 744960 c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll + 2009-08-17 07:57 . 2008-07-06 12:06 373248 c:\windows\system32\spool\drivers\w32x86\3\unidrv.dll + 2009-08-17 07:57 . 2008-07-06 12:06 198656 c:\windows\system32\spool\drivers\w32x86\3\mxdwdui.dll + 2009-08-17 07:57 . 2008-07-06 12:06 765440 c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll + 2009-01-15 10:23 . 2008-11-10 11:41 864144 c:\windows\system32\spool\drivers\w32x86\3\msonpdrv.dll + 2004-08-05 03:00 . 2009-06-25 18:36 169472 c:\windows\system32\Setup\msmqocm.dll + 2007-04-25 14:21 . 2009-06-25 08:17 168448 c:\windows\system32\schannel.dll + 2006-08-24 15:15 . 2006-08-24 15:15 150808 c:\windows\system32\rgb9rast_2.dll + 2009-08-17 07:57 . 2008-07-06 12:06 117760 c:\windows\system32\prntvpt.dll + 2008-07-29 18:59 . 2008-07-29 18:59 781344 c:\windows\system32\PresentationNative_v0300.dll + 2008-07-29 19:35 . 2008-07-29 19:35 326160 c:\windows\system32\PresentationHost.exe + 2008-07-29 18:59 . 2008-07-29 18:59 105016 c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll + 2007-08-07 22:49 . 2016-04-12 00:02 493374 c:\windows\system32\perfh009.dat - 2004-08-05 03:00 . 2004-08-05 03:00 215552 c:\windows\system32\osk.exe + 2004-08-05 03:00 . 2006-10-04 08:48 215552 c:\windows\system32\osk.exe + 2004-08-05 03:00 . 2009-08-29 07:36 102912 c:\windows\system32\occache.dll - 2004-08-05 03:00 . 2009-04-29 04:56 102912 c:\windows\system32\occache.dll + 2004-08-05 03:00 . 2009-02-06 18:46 408064 c:\windows\system32\netlogon.dll + 2008-04-15 07:57 . 2009-08-06 19:23 215920 c:\windows\system32\muweb.dll + 2008-04-15 07:57 . 2009-08-06 19:23 274288 c:\windows\system32\mucltui.dll + 2009-10-08 14:28 . 2001-08-10 00:01 287504 c:\windows\system32\msxbse35.dll + 2004-08-05 03:00 . 2009-08-05 09:11 204800 c:\windows\system32\mswebdvd.dll + 2004-08-05 03:00 . 2009-09-11 14:03 136192 c:\windows\system32\msv1_0.dll + 2004-08-05 03:00 . 2009-06-05 07:42 655872 c:\windows\system32\mstscax.dll + 2007-04-18 12:31 . 2009-08-29 07:36 671232 c:\windows\system32\mstime.dll - 2007-04-18 12:31 . 2009-04-29 04:56 671232 c:\windows\system32\mstime.dll + 2009-10-08 14:28 . 2001-08-10 00:01 165648 c:\windows\system32\mstext35.dll + 2006-07-24 17:50 . 2000-03-14 10:04 118784 c:\windows\system32\MSSTDFMT.DLL + 2009-10-08 14:28 . 2001-08-09 20:54 415504 c:\windows\system32\msrepl35.dll + 2009-10-08 14:28 . 2001-08-09 22:01 252176 c:\windows\system32\Msrd2x35.dll + 2007-04-18 12:31 . 2009-08-29 07:36 193024 c:\windows\system32\msrating.dll - 2007-04-18 12:31 . 2009-04-29 04:56 193024 c:\windows\system32\msrating.dll + 2009-10-08 14:28 . 2001-08-10 00:01 250128 c:\windows\system32\mspdox35.dll + 2009-10-08 14:28 . 1997-01-03 22:00 169984 c:\windows\system32\msltus35.dll + 2009-10-08 14:28 . 1998-04-23 22:00 123664 c:\windows\system32\MSJINT35.DLL + 2007-04-18 12:31 . 2009-08-29 07:36 477696 c:\windows\system32\mshtmled.dll - 2007-04-18 12:31 . 2009-04-29 04:56 477696 c:\windows\system32\mshtmled.dll + 2007-08-13 17:54 . 2009-08-29 07:36 459264 c:\windows\system32\msfeeds.dll - 2007-08-13 17:54 . 2009-04-29 04:55 459264 c:\windows\system32\msfeeds.dll + 2009-10-08 14:28 . 2001-08-10 00:01 250128 c:\windows\system32\msexcl35.dll + 2008-07-25 10:16 . 2008-07-25 10:16 158720 c:\windows\system32\mscorier.dll - 2007-10-24 00:47 . 2007-10-24 00:47 158720 c:\windows\system32\mscorier.dll + 2008-07-25 10:16 . 2008-07-25 10:16 282112 c:\windows\system32\mscoree.dll - 2007-10-24 00:47 . 2007-10-24 00:47 282112 c:\windows\system32\mscoree.dll + 2004-08-05 03:00 . 2009-06-25 18:36 471552 c:\windows\system32\mqutil.dll - 2004-08-05 03:00 . 2007-07-06 12:46 471552 c:\windows\system32\mqutil.dll - 2004-08-05 03:00 . 2004-08-05 03:00 186880 c:\windows\system32\mqtrig.dll + 2004-08-05 03:00 . 2009-06-25 18:36 186880 c:\windows\system32\mqtrig.dll - 2004-08-05 03:00 . 2004-08-05 03:00 117248 c:\windows\system32\mqtgsvc.exe + 2004-08-05 03:00 . 2009-06-22 11:49 117248 c:\windows\system32\mqtgsvc.exe + 2004-08-05 03:00 . 2009-06-25 18:36 517120 c:\windows\system32\mqsnap.dll + 2004-08-05 03:00 . 2009-06-25 18:36 123392 c:\windows\system32\mqrtdep.dll - 2004-08-05 03:00 . 2004-08-05 03:00 123392 c:\windows\system32\mqrtdep.dll - 2004-08-05 03:00 . 2007-07-06 12:46 177152 c:\windows\system32\mqrt.dll + 2004-08-05 03:00 . 2009-06-25 18:36 177152 c:\windows\system32\mqrt.dll + 2004-08-05 03:00 . 2009-06-25 18:36 661504 c:\windows\system32\mqqm.dll - 2004-08-05 03:00 . 2004-08-05 03:00 225280 c:\windows\system32\mqoa.dll + 2004-08-05 03:00 . 2009-06-25 18:36 225280 c:\windows\system32\mqoa.dll - 2004-08-05 03:00 . 2007-07-06 12:46 138240 c:\windows\system32\mqad.dll + 2004-08-05 03:00 . 2009-06-25 18:36 138240 c:\windows\system32\mqad.dll + 2009-07-18 03:12 . 2009-07-18 03:12 257440 c:\windows\system32\Macromed\Flash\FlashUtil10c.exe + 2004-08-05 03:00 . 2009-06-25 08:17 729600 c:\windows\system32\lsasrv.dll + 2004-08-05 03:00 . 2009-06-25 08:17 301568 c:\windows\system32\kerberos.dll + 2004-08-05 03:00 . 2009-08-13 15:16 512000 c:\windows\system32\jscript.dll - 2006-03-17 10:45 . 2006-03-17 10:45 802816 c:\windows\system32\imagXRA7.dll + 2008-09-29 04:09 . 2008-09-29 04:09 802816 c:\windows\system32\imagXRA7.dll + 2008-09-29 04:09 . 2008-09-29 04:09 258048 c:\windows\system32\imagXR7.dll - 2006-03-17 10:45 . 2006-03-17 10:45 258048 c:\windows\system32\imagXR7.dll - 2006-03-17 10:45 . 2006-03-17 10:45 497296 c:\windows\system32\imagXpr7.dll + 2008-09-29 04:09 . 2008-09-29 04:09 497296 c:\windows\system32\imagXpr7.dll + 2007-08-13 17:34 . 2009-08-29 07:36 268288 c:\windows\system32\iertutil.dll - 2007-08-13 17:34 . 2009-04-29 04:55 268288 c:\windows\system32\iertutil.dll + 2004-08-05 03:00 . 2009-08-29 07:36 385024 c:\windows\system32\iedkcs32.dll - 2004-08-05 03:00 . 2009-04-29 04:55 385024 c:\windows\system32\iedkcs32.dll + 2007-07-11 11:27 . 2009-08-29 07:36 380928 c:\windows\system32\ieapfltr.dll - 2004-08-05 03:00 . 2009-04-25 05:26 161792 c:\windows\system32\ieakui.dll + 2004-08-05 03:00 . 2009-08-27 05:18 161792 c:\windows\system32\ieakui.dll - 2004-08-05 03:00 . 2009-04-29 04:55 230400 c:\windows\system32\ieaksie.dll + 2004-08-05 03:00 . 2009-08-29 07:36 230400 c:\windows\system32\ieaksie.dll + 2004-08-05 03:00 . 2009-08-29 07:36 153088 c:\windows\system32\ieakeng.dll - 2004-08-05 03:00 . 2009-04-29 04:55 153088 c:\windows\system32\ieakeng.dll + 2008-07-29 18:24 . 2008-07-29 18:24 622080 c:\windows\system32\icardagt.exe - 2008-12-26 21:16 . 2008-04-17 11:12 107368 c:\windows\system32\GEARAspi.dll + 2008-12-26 21:16 . 2008-04-17 12:12 107368 c:\windows\system32\GEARAspi.dll + 2007-08-07 22:44 . 2009-11-14 17:17 356952 c:\windows\system32\FNTCACHE.DAT - 2007-04-18 12:31 . 2009-04-29 04:55 133120 c:\windows\system32\extmgr.dll + 2007-04-18 12:31 . 2009-08-29 07:36 133120 c:\windows\system32\extmgr.dll + 2008-07-29 20:10 . 2008-07-29 20:10 493048 c:\windows\system32\evr.dll + 2007-04-18 12:31 . 2009-08-29 07:36 214528 c:\windows\system32\dxtrans.dll - 2007-04-18 12:31 . 2009-04-29 04:55 214528 c:\windows\system32\dxtrans.dll - 2007-04-18 12:31 . 2009-04-29 04:55 347136 c:\windows\system32\dxtmsft.dll + 2007-04-18 12:31 . 2009-08-29 07:36 347136 c:\windows\system32\dxtmsft.dll + 2009-09-14 10:35 . 2008-04-17 12:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_3B7AACF0636A2C042EB7AD2AFF76D37B27BDD28C\x86\GEARAspi.dll + 2009-07-20 17:42 . 2009-02-24 17:42 116736 c:\windows\system32\drivers\mcdbus.sys - 2009-02-14 08:51 . 2007-08-08 10:12 101120 c:\windows\system32\drivers\ewusbmdm.sys + 2009-08-13 18:01 . 2007-08-08 11:12 101120 c:\windows\system32\drivers\ewusbmdm.sys + 2008-08-14 17:54 . 2009-08-21 11:29 104456 c:\windows\system32\drivers\bdfndisf.sys + 2009-08-17 07:57 . 2008-07-06 12:06 575488 c:\windows\system32\dllcache\xpsshhdr.dll + 2004-08-05 03:00 . 2009-08-06 19:24 209632 c:\windows\system32\dllcache\wuweb.dll + 2004-08-05 03:00 . 2009-08-06 19:24 327896 c:\windows\system32\dllcache\wucltui.dll + 2004-08-05 03:00 . 2009-08-06 19:23 575704 c:\windows\system32\dllcache\wuapi.dll + 2004-08-05 03:00 . 2009-04-01 22:02 604160 c:\windows\system32\dllcache\wmspdmod.dll + 2004-08-05 03:00 . 2009-07-13 22:43 286208 c:\windows\system32\dllcache\wmpdxm.dll - 2004-08-05 03:00 . 2006-08-17 12:28 132096 c:\windows\system32\dllcache\wkssvc.dll + 2004-08-05 03:00 . 2009-06-10 06:32 132096 c:\windows\system32\dllcache\wkssvc.dll + 2007-04-18 12:31 . 2009-08-29 07:36 832512 c:\windows\system32\dllcache\wininet.dll + 2004-08-05 03:00 . 2009-08-29 07:36 233472 c:\windows\system32\dllcache\webcheck.dll - 2004-08-05 03:00 . 2009-04-29 04:56 233472 c:\windows\system32\dllcache\webcheck.dll + 2004-08-04 20:00 . 2009-08-29 07:36 105984 c:\windows\system32\dllcache\url.dll - 2004-08-04 20:00 . 2009-04-29 04:56 105984 c:\windows\system32\dllcache\url.dll + 2004-08-05 03:00 . 2009-06-21 22:04 153088 c:\windows\system32\dllcache\triedit.dll - 2004-08-05 03:00 . 2004-08-05 03:00 153088 c:\windows\system32\dllcache\triedit.dll + 2004-08-05 03:00 . 2009-06-16 14:55 119808 c:\windows\system32\dllcache\t2embed.dll - 2004-08-05 03:00 . 2008-10-03 10:15 247326 c:\windows\system32\dllcache\strmdll.dll + 2004-08-05 03:00 . 2009-08-26 08:16 247326 c:\windows\system32\dllcache\strmdll.dll + 2007-04-25 14:21 . 2009-06-25 08:17 168448 c:\windows\system32\dllcache\schannel.dll + 2009-08-17 07:57 . 2008-07-06 10:50 597504 c:\windows\system32\dllcache\printfilterpipelinesvc.exe - 2004-08-05 03:00 . 2004-08-05 03:00 215552 c:\windows\system32\dllcache\osk.exe + 2004-08-05 03:00 . 2006-10-04 08:48 215552 c:\windows\system32\dllcache\osk.exe - 2004-08-05 03:00 . 2009-04-29 04:56 102912 c:\windows\system32\dllcache\occache.dll + 2004-08-05 03:00 . 2009-08-29 07:36 102912 c:\windows\system32\dllcache\occache.dll + 2004-08-04 20:00 . 2009-02-06 18:46 408064 c:\windows\system32\dllcache\netlogon.dll + 2004-08-05 03:00 . 2009-08-05 09:11 204800 c:\windows\system32\dllcache\mswebdvd.dll + 2004-08-04 20:00 . 2009-09-11 14:03 136192 c:\windows\system32\dllcache\msv1_0.dll + 2004-08-05 03:00 . 2009-06-05 07:42 655872 c:\windows\system32\dllcache\mstscax.dll - 2007-04-18 12:31 . 2009-04-29 04:56 671232 c:\windows\system32\dllcache\mstime.dll + 2007-04-18 12:31 . 2009-08-29 07:36 671232 c:\windows\system32\dllcache\mstime.dll - 2007-04-18 12:31 . 2009-04-29 04:56 193024 c:\windows\system32\dllcache\msrating.dll + 2007-04-18 12:31 . 2009-08-29 07:36 193024 c:\windows\system32\dllcache\msrating.dll + 2004-08-04 20:00 . 2009-06-25 18:36 169472 c:\windows\system32\dllcache\msmqocm.dll - 2007-04-18 12:31 . 2009-04-29 04:56 477696 c:\windows\system32\dllcache\mshtmled.dll + 2007-04-18 12:31 . 2009-08-29 07:36 477696 c:\windows\system32\dllcache\mshtmled.dll + 2008-04-16 23:03 . 2009-08-29 07:36 459264 c:\windows\system32\dllcache\msfeeds.dll - 2008-04-16 23:03 . 2009-04-29 04:55 459264 c:\windows\system32\dllcache\msfeeds.dll + 2004-08-04 20:00 . 2009-06-25 18:36 471552 c:\windows\system32\dllcache\mqutil.dll - 2004-08-04 20:00 . 2007-07-06 12:46 471552 c:\windows\system32\dllcache\mqutil.dll + 2004-08-05 03:00 . 2009-06-25 18:36 186880 c:\windows\system32\dllcache\mqtrig.dll - 2004-08-05 03:00 . 2004-08-05 03:00 186880 c:\windows\system32\dllcache\mqtrig.dll - 2004-08-05 03:00 . 2004-08-05 03:00 117248 c:\windows\system32\dllcache\mqtgsvc.exe + 2004-08-05 03:00 . 2009-06-22 11:49 117248 c:\windows\system32\dllcache\mqtgsvc.exe + 2004-08-05 03:00 . 2009-06-25 18:36 517120 c:\windows\system32\dllcache\mqsnap.dll - 2004-08-05 03:00 . 2004-08-05 03:00 123392 c:\windows\system32\dllcache\mqrtdep.dll + 2004-08-05 03:00 . 2009-06-25 18:36 123392 c:\windows\system32\dllcache\mqrtdep.dll + 2004-08-05 03:00 . 2009-06-25 18:36 177152 c:\windows\system32\dllcache\mqrt.dll - 2004-08-05 03:00 . 2007-07-06 12:46 177152 c:\windows\system32\dllcache\mqrt.dll + 2004-08-05 03:00 . 2009-06-25 18:36 661504 c:\windows\system32\dllcache\mqqm.dll + 2004-08-05 03:00 . 2009-06-25 18:36 225280 c:\windows\system32\dllcache\mqoa.dll - 2004-08-05 03:00 . 2004-08-05 03:00 225280 c:\windows\system32\dllcache\mqoa.dll + 2004-08-05 03:00 . 2009-06-25 18:36 138240 c:\windows\system32\dllcache\mqad.dll - 2004-08-05 03:00 . 2007-07-06 12:46 138240 c:\windows\system32\dllcache\mqad.dll + 2004-08-04 20:00 . 2009-06-25 08:17 729600 c:\windows\system32\dllcache\lsasrv.dll + 2004-08-04 20:00 . 2009-06-25 08:17 301568 c:\windows\system32\dllcache\kerberos.dll + 2004-08-05 03:00 . 2009-08-13 15:16 512000 c:\windows\system32\dllcache\jscript.dll + 2004-08-05 03:00 . 2009-08-27 05:18 634648 c:\windows\system32\dllcache\iexplore.exe - 2008-04-16 23:03 . 2009-04-29 04:55 268288 c:\windows\system32\dllcache\iertutil.dll + 2008-04-16 23:03 . 2009-08-29 07:36 268288 c:\windows\system32\dllcache\iertutil.dll + 2004-08-05 03:00 . 2009-08-29 07:36 385024 c:\windows\system32\dllcache\iedkcs32.dll - 2004-08-05 03:00 . 2009-04-29 04:55 385024 c:\windows\system32\dllcache\iedkcs32.dll + 2008-04-16 23:03 . 2009-08-29 07:36 380928 c:\windows\system32\dllcache\ieapfltr.dll + 2004-08-05 03:00 . 2009-08-27 05:18 161792 c:\windows\system32\dllcache\ieakui.dll - 2004-08-05 03:00 . 2009-04-25 05:26 161792 c:\windows\system32\dllcache\ieakui.dll + 2004-08-05 03:00 . 2009-08-29 07:36 230400 c:\windows\system32\dllcache\ieaksie.dll - 2004-08-05 03:00 . 2009-04-29 04:55 230400 c:\windows\system32\dllcache\ieaksie.dll + 2004-08-05 03:00 . 2009-08-29 07:36 153088 c:\windows\system32\dllcache\ieakeng.dll - 2004-08-05 03:00 . 2009-04-29 04:55 153088 c:\windows\system32\dllcache\ieakeng.dll - 2007-04-18 12:31 . 2009-04-29 04:55 133120 c:\windows\system32\dllcache\extmgr.dll + 2007-04-18 12:31 . 2009-08-29 07:36 133120 c:\windows\system32\dllcache\extmgr.dll + 2007-04-18 12:31 . 2009-08-29 07:36 214528 c:\windows\system32\dllcache\dxtrans.dll - 2007-04-18 12:31 . 2009-04-29 04:55 214528 c:\windows\system32\dllcache\dxtrans.dll - 2007-04-18 12:31 . 2009-04-29 04:55 347136 c:\windows\system32\dllcache\dxtmsft.dll + 2007-04-18 12:31 . 2009-08-29 07:36 347136 c:\windows\system32\dllcache\dxtmsft.dll - 2004-08-04 20:00 . 2009-04-29 04:55 124928 c:\windows\system32\dllcache\advpack.dll + 2004-08-04 20:00 . 2009-08-29 07:36 124928 c:\windows\system32\dllcache\advpack.dll + 2009-07-16 11:27 . 2007-05-16 15:45 443752 c:\windows\system32\d3dx10_34.dll + 2009-07-16 11:27 . 2007-03-15 15:57 443752 c:\windows\system32\d3dx10_33.dll + 2009-07-16 11:45 . 2009-07-16 11:45 107888 c:\windows\system32\CmdLineExt.dll + 2004-08-05 03:00 . 2009-08-29 07:36 124928 c:\windows\system32\advpack.dll - 2004-08-05 03:00 . 2009-04-29 04:55 124928 c:\windows\system32\advpack.dll + 2009-10-08 14:28 . 1996-01-11 22:00 456464 c:\windows\msapps\DAO\DAO3032.dll + 2008-07-29 22:40 . 2008-07-29 22:40 196104 c:\windows\Microsoft.NET\Framework\v3.5\WFServicesReg.exe + 2008-07-29 22:40 . 2008-07-29 22:40 802816 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft.Build.Tasks.v3.5.dll + 2008-07-29 17:47 . 2008-07-29 17:47 984056 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapUI.dll + 2008-07-29 17:47 . 2008-07-29 17:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.dll + 2008-07-29 17:47 . 2008-07-29 17:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.3082.dll + 2008-07-29 17:47 . 2008-07-29 17:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.2070.dll + 2008-07-29 17:47 . 2008-07-29 17:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1055.dll + 2008-07-29 17:47 . 2008-07-29 17:47 105976 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1053.dll + 2008-07-29 17:47 . 2008-07-29 17:47 107000 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1049.dll + 2008-07-29 17:47 . 2008-07-29 17:47 107512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1046.dll + 2008-07-29 17:47 . 2008-07-29 17:47 109048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll + 2008-07-29 17:47 . 2008-07-29 17:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1044.dll + 2008-07-29 17:47 . 2008-07-29 17:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1043.dll + 2008-07-29 17:47 . 2008-07-29 17:47 110072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1040.dll + 2008-07-29 17:47 . 2008-07-29 17:47 111096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1038.dll + 2008-07-29 17:47 . 2008-07-29 17:47 101368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1037.dll + 2008-07-29 17:47 . 2008-07-29 17:47 112120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1036.dll + 2008-07-29 17:47 . 2008-07-29 17:47 106488 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1035.dll + 2008-07-29 17:47 . 2008-07-29 17:47 113656 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1032.dll + 2008-07-29 17:47 . 2008-07-29 17:47 111608 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1031.dll + 2008-07-29 17:47 . 2008-07-29 17:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1030.dll + 2008-07-29 17:47 . 2008-07-29 17:47 108536 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1029.dll + 2008-07-29 17:47 . 2008-07-29 17:47 102904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1025.dll + 2008-07-29 17:47 . 2008-07-29 17:47 689152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsscenario.dll + 2008-07-29 17:47 . 2008-07-29 17:47 413184 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vsbasereqs.dll + 2008-07-29 17:47 . 2008-07-29 17:47 632320 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs70uimgr.dll + 2008-07-29 17:47 . 2008-07-29 17:47 110080 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.dll + 2008-07-29 17:47 . 2008-07-29 17:47 131584 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.3082.dll + 2008-07-29 17:47 . 2008-07-29 17:47 131072 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.2070.dll + 2008-07-29 17:47 . 2008-07-29 17:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1055.dll + 2008-07-29 17:47 . 2008-07-29 17:47 121344 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1053.dll + 2008-07-29 17:47 . 2008-07-29 17:47 123904 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1049.dll + 2008-07-29 17:47 . 2008-07-29 17:47 122880 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1046.dll + 2008-07-29 17:47 . 2008-07-29 17:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1045.dll + 2008-07-29 17:47 . 2008-07-29 17:47 121856 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1044.dll + 2008-07-29 17:47 . 2008-07-29 17:47 129024 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1043.dll + 2008-07-29 17:47 . 2008-07-29 17:47 128512 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1040.dll + 2008-07-29 17:47 . 2008-07-29 17:47 132096 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1038.dll + 2008-07-29 17:47 . 2008-07-29 17:47 111104 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1037.dll + 2008-07-29 17:47 . 2008-07-29 17:47 133120 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1036.dll + 2008-07-29 17:47 . 2008-07-29 17:47 122368 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1035.dll + 2008-07-29 17:47 . 2008-07-29 17:47 137728 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1032.dll + 2008-07-29 17:47 . 2008-07-29 17:47 130048 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1031.dll + 2008-07-29 17:47 . 2008-07-29 17:47 126464 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1030.dll + 2008-07-29 17:47 . 2008-07-29 17:47 125440 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1029.dll + 2008-07-29 17:47 . 2008-07-29 17:47 113152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setupres.1025.dll + 2008-07-29 17:47 . 2008-07-29 17:47 269304 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe + 2008-07-29 17:47 . 2008-07-29 17:47 177152 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\HtmlLite.dll + 2008-07-29 17:47 . 2008-07-29 17:47 276984 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\dlmgr.dll + 2008-07-29 22:15 . 2008-07-29 22:15 225490 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\baseline.dat + 2008-07-29 22:40 . 2008-07-29 22:40 233976 c:\windows\Microsoft.NET\Framework\v3.5\1033\vbc7ui.dll + 2008-07-29 22:40 . 2008-07-29 22:40 168448 c:\windows\Microsoft.NET\Framework\v3.5\1033\cscompui.dll + 2008-07-29 19:35 . 2008-07-29 19:35 864256 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationUI.dll + 2008-07-29 18:59 . 2008-07-29 18:59 132120 c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll + 2008-07-29 20:10 . 2008-07-29 20:10 806928 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NaturalLanguage6.dll + 2008-07-29 18:16 . 2008-07-29 18:16 152576 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe + 2008-07-29 18:16 . 2008-07-29 18:16 966656 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll + 2008-07-29 18:16 . 2008-07-29 18:16 132096 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe + 2008-07-29 18:16 . 2008-07-29 18:16 110592 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll + 2008-07-29 18:16 . 2008-07-29 18:16 156688 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe + 2008-07-29 18:16 . 2008-07-29 18:16 163840 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.Dtc.dll + 2008-07-29 18:16 . 2008-07-29 18:16 397312 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\Microsoft.Transactions.Bridge.dll + 2008-07-29 18:24 . 2008-07-29 18:24 881664 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe + 2008-07-29 18:16 . 2008-07-29 18:16 168968 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe + 2008-11-25 03:59 . 2008-11-25 03:59 436040 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll + 2008-07-25 10:17 . 2008-07-25 10:17 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll - 2007-10-24 00:47 . 2007-10-24 00:47 839680 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll + 2008-07-25 10:17 . 2008-07-25 10:17 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll + 2008-07-25 10:17 . 2008-07-25 10:17 261632 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll + 2008-07-25 10:17 . 2008-07-25 10:17 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll - 2007-10-24 00:47 . 2007-10-24 00:47 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll + 2008-07-25 10:17 . 2008-07-25 10:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll - 2007-10-24 00:47 . 2007-10-24 00:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll + 2008-07-25 10:17 . 2008-07-25 10:17 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll - 2007-10-24 00:47 . 2007-10-24 00:47 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll + 2008-07-25 10:17 . 2008-07-25 10:17 303104 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll + 2008-07-25 10:17 . 2008-07-25 10:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll - 2007-10-24 00:47 . 2007-10-24 00:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll + 2008-07-25 10:17 . 2008-07-25 10:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll - 2007-10-24 00:47 . 2007-10-24 00:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll - 2007-10-24 00:47 . 2007-10-24 00:47 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll + 2008-07-25 10:17 . 2008-07-25 10:17 113664 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll + 2008-07-25 10:17 . 2008-07-25 10:17 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll - 2007-10-24 00:47 . 2007-10-24 00:47 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll + 2008-07-25 10:17 . 2008-07-25 10:17 626688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll + 2008-07-25 10:17 . 2008-07-25 10:17 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll - 2007-10-24 00:47 . 2007-10-24 00:47 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll - 2007-10-24 00:47 . 2007-10-24 00:47 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll + 2008-07-25 10:17 . 2008-07-25 10:17 401408 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll + 2008-07-25 10:16 . 2008-07-25 10:16 970752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll + 2008-07-25 10:17 . 2008-07-25 10:17 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll + 2008-11-25 03:59 . 2008-11-25 03:59 486400 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll + 2008-07-25 10:17 . 2008-07-25 10:17 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll - 2007-10-24 00:47 . 2007-10-24 00:47 425984 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll - 2007-10-24 00:47 . 2007-10-24 00:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll + 2008-07-25 10:17 . 2008-07-25 10:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll + 2008-07-25 10:17 . 2008-07-25 10:17 392184 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll + 2008-07-25 10:17 . 2008-07-25 10:17 118784 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll + 2008-07-25 10:16 . 2008-07-25 10:16 143360 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll + 2008-07-25 10:17 . 2008-07-25 10:17 100856 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe + 2008-07-25 10:17 . 2008-07-25 10:17 230912 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll + 2008-07-25 10:17 . 2008-07-25 10:17 345600 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll + 2008-07-25 10:17 . 2008-07-25 10:17 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll + 2008-11-25 03:59 . 2008-11-25 03:59 364872 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - 2007-10-24 00:47 . 2007-10-24 00:47 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll + 2008-07-25 10:17 . 2008-07-25 10:17 308224 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll + 2009-08-07 22:51 . 2009-08-07 22:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll + 2008-07-25 10:17 . 2008-07-25 10:17 659456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll - 2007-10-24 00:47 . 2007-10-24 00:47 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll + 2008-07-25 10:17 . 2008-07-25 10:17 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll + 2008-07-25 10:17 . 2008-07-25 10:17 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll - 2007-10-24 00:47 . 2007-10-24 00:47 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll - 2007-10-24 00:47 . 2007-10-24 00:47 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll + 2008-07-25 10:16 . 2008-07-25 10:16 749568 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll + 2008-07-25 10:16 . 2008-07-25 10:16 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll - 2007-10-24 00:47 . 2007-10-24 00:47 655360 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll + 2008-07-25 10:16 . 2008-07-25 10:16 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll - 2007-10-24 00:47 . 2007-10-24 00:47 348160 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll - 2007-10-24 00:47 . 2007-10-24 00:47 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe + 2008-07-25 10:17 . 2008-07-25 10:17 230904 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe + 2008-07-25 10:17 . 2008-07-25 10:17 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll - 2007-10-24 00:47 . 2007-10-24 00:47 798224 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll + 2008-07-25 10:17 . 2008-07-25 10:17 575496 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll + 2008-07-25 10:17 . 2008-07-25 10:17 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe - 2007-10-24 00:47 . 2007-10-24 00:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
Post #7
rk\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-25 10:16 . 2008-07-25 10:16 507904 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2008-07-25 10:16 . 2008-07-25 10:16 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2007-10-24 00:47 . 2007-10-24 00:47 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- 2007-10-24 00:47 . 2007-10-24 00:47 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 10:17 . 2008-07-25 10:17 147968 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2008-07-25 10:16 . 2008-07-25 10:16 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2007-10-24 00:47 . 2007-10-24 00:47 218112 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
- 2007-10-24 00:47 . 2007-10-24 00:47 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 10:17 . 2008-07-25 10:17 193016 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2008-07-25 10:16 . 2008-07-25 10:16 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
- 2007-10-24 00:47 . 2007-10-24 00:47 145408 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2008-05-27 23:49 . 2008-05-27 23:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2007-04-13 19:58 . 2007-04-13 19:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 23:48 . 2008-05-27 23:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2007-04-13 19:56 . 2007-04-13 19:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2007-04-13 20:30 . 2007-04-13 20:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2008-05-28 00:30 . 2008-05-28 00:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2009-07-16 11:26 . 2006-03-31 10:27 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2006-02-03 06:40 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2005-12-05 16:20 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2005-09-28 13:11 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2005-07-22 16:21 577024 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2005-05-26 14:15 576000 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2005-03-18 16:23 567296 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2005-02-05 18:32 563712 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2005-03-18 16:23 223232 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll
+ 2009-07-16 11:26 . 2005-03-18 16:23 178176 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll
+ 2009-07-16 11:26 . 2005-03-18 16:23 364544 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll
+ 2009-07-16 11:26 . 2005-03-18 16:23 159232 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll
+ 2009-07-16 11:26 . 2005-03-18 16:23 145920 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll
+ 2009-07-16 11:26 . 2005-03-18 16:23 473600 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll
+ 2009-10-07 11:32 . 2009-10-07 11:32 102400 c:\windows\Installer\{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}\iTunesIco.exe
+ 2007-08-07 21:58 . 2009-11-14 16:28 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
- 2007-08-07 21:58 . 2009-06-14 21:10 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
- 2007-08-07 21:58 . 2009-06-14 21:10 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
+ 2007-08-07 21:58 . 2009-11-14 16:28 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
- 2007-08-07 21:58 . 2009-06-14 21:10 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
+ 2007-08-07 21:58 . 2009-11-14 16:28 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
+ 2007-08-07 21:58 . 2009-11-14 16:28 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
- 2007-08-07 21:58 . 2009-06-14 21:10 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
+ 2007-08-07 21:58 . 2009-11-14 16:28 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2007-08-07 21:58 . 2009-06-14 21:10 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2009-01-15 10:24 . 2009-06-14 21:12 888080 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-01-15 10:24 . 2009-11-14 16:29 888080 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\wordicon.exe
- 2009-01-15 10:24 . 2009-06-14 21:12 272648 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pubs.exe
+ 2009-01-15 10:24 . 2009-11-14 16:29 272648 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pubs.exe
- 2009-01-15 10:24 . 2009-06-14 21:12 922384 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-01-15 10:24 . 2009-11-14 16:29 922384 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-01-15 10:23 . 2009-11-14 16:29 845584 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\outicon.exe
- 2009-01-15 10:23 . 2009-06-14 21:12 845584 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\outicon.exe
+ 2009-01-15 10:24 . 2009-11-14 16:29 217864 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\misc.exe
- 2009-01-15 10:24 . 2009-06-14 21:12 217864 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\misc.exe
- 2009-01-15 10:23 . 2009-06-14 21:12 184080 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\joticon.exe
+ 2009-01-15 10:23 . 2009-11-14 16:29 184080 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\joticon.exe
+ 2009-01-15 10:23 . 2009-11-14 16:29 159504 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\inficon.exe
- 2009-01-15 10:23 . 2009-06-14 21:12 159504 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-08-14 20:06 . 2009-08-14 20:06 135168 c:\windows\Installer\{90A40409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2008-08-09 07:51 . 2008-08-09 07:51 135168 c:\windows\Installer\{90A40409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2009-01-15 10:28 . 2009-01-15 10:28 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2009-11-07 15:31 . 2009-11-07 15:31 217864 c:\windows\Installer\{90120000-006E-0409-0000-0000000FF1CE}\misc.exe
+ 2009-07-09 17:31 . 2009-07-09 17:31 401536 c:\windows\Installer\{57DC8980-73DA-481E-AFD4-5E2D44B7F1AD}\SitExpander.exe_57DC898073DA481EAFD45E2D44B7F1AD.exe
+ 2009-07-09 17:31 . 2009-07-09 17:31 401536 c:\windows\Installer\{57DC8980-73DA-481E-AFD4-5E2D44B7F1AD}\ARPPRODUCTICON.exe
+ 2005-04-19 22:42 . 2005-04-19 22:42 142528 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8003\ATP.DLL
+ 2009-04-03 17:57 . 2009-04-03 17:57 509256 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\WRD12CVR.DLL
+ 2007-06-07 19:51 . 2007-06-07 19:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\SSGEN.DLL
+ 2009-03-06 02:37 . 2009-03-06 02:37 501640 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\SOA.DLL
+ 2009-04-02 13:06 . 2009-04-02 13:06 439160 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\SETUP.EXE
+ 2008-10-25 06:19 . 2008-10-25 06:19 503688 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\SELFCERT.EXE
+ 2009-04-02 14:35 . 2009-04-02 14:35 368520 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\PPSLAX.DLL
+ 2008-10-26 05:42 . 2008-10-26 05:42 482656 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\PORTCONN.DLL
+ 2007-06-07 19:51 . 2007-06-07 19:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OUTLFLTR.DLL
+ 2008-11-04 01:24 . 2008-11-04 01:24 285576 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OISGRAPH.DLL
+ 2008-11-04 01:24 . 2008-11-04 01:24 998784 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OISAPP.DLL
+ 2008-11-04 01:24 . 2008-11-04 01:24 274808 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OIS.EXE
+ 2008-03-19 06:27 . 2008-03-19 06:27 661536 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OGALEGIT.DLL
+ 2009-04-02 13:06 . 2009-04-02 13:06 231848 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ODEPLOY.EXE
+ 2009-03-06 05:16 . 2009-03-06 05:16 538968 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSTORES.DLL
+ 2009-03-06 05:16 . 2009-03-06 05:16 144728 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSTORE.EXE
+ 2009-03-06 05:16 . 2009-03-06 05:16 832344 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSTORDB.EXE
+ 2008-10-24 22:21 . 2008-10-24 22:21 505192 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSSOAP30.DLL
+ 2009-03-06 05:05 . 2009-03-06 05:05 671072 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSQRY32.EXE
+ 2008-11-20 23:42 . 2008-11-20 23:42 732504 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSPROOF6.DLL
+ 2008-10-24 22:50 . 2008-10-24 22:50 436584 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSORUN.DLL
+ 2009-03-06 04:04 . 2009-03-06 04:04 427848 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSODCW.DLL
+ 2009-03-06 03:31 . 2009-03-06 03:31 160616 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSOCF.DLL
+ 2008-11-04 04:13 . 2008-11-04 04:13 118128 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSCONV97.DLL
+ 2008-10-25 13:39 . 2008-10-25 13:39 290632 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSCDM.DLL
+ 2008-11-04 03:49 . 2008-11-04 03:49 460680 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MODHELP.DLL
+ 2008-11-04 03:49 . 2008-11-04 03:49 829280 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MEDCAT.DLL
+ 2009-04-02 12:01 . 2009-04-02 12:01 177520 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\IETAG.DLL
+ 2008-10-25 06:18 . 2008-10-25 06:18 172880 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\IEAWSDC.DLL
+ 2008-11-24 22:17 . 2008-11-24 22:17 983944 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\FPWEC.DLL
+ 2008-11-04 01:44 . 2008-11-04 01:44 435096 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\DWTRIG20.EXE
+ 2008-11-04 01:44 . 2008-11-04 01:44 439632 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\DWDCW20.DLL
+ 2009-03-06 04:04 . 2009-03-06 04:04 105856 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\DSSM.EXE
+ 2008-11-21 00:02 . 2008-11-21 00:02 189816 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\CONTACTPICKER.DLL
+ 2008-11-04 03:47 . 2008-11-04 03:47 205680 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\CLVIEW.EXE
+ 2008-11-04 04:21 . 2008-11-04 04:21 400208 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\CDLMSO.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 370608 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEXBE.DLL
+ 2008-11-04 04:06 . 2008-11-04 04:06 208816 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEWSS.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 223152 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACETXT.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 550840 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEREP.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 288688 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACER3X.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 255920 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACER2X.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 391096 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEPDE.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 387000 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEOLEDB.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 278912 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEODBC.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 206776 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACELTS.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 628656 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEEXCL.DLL
+ 2009-03-06 02:48 . 2009-03-06 02:48 337832 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEEXCH.DLL
+ 2009-03-06 02:47 . 2009-03-06 02:47 190400 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEES.DLL
+ 2009-03-06 02:47 . 2009-03-06 02:47 575416 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACEDAO.DLL
+ 2008-10-26 06:26 . 2008-10-26 06:26 162680 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACCWIZ.DLL
+ 2009-03-06 02:47 . 2009-03-06 02:47 575416 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACACEDAO.DLL
+ 2006-10-26 19:56 . 2006-10-26 19:56 864080 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.4518\MSONPDRV.DLL
+ 2007-06-07 19:51 . 2007-06-07 19:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\SSGEN.DLL
+ 2007-06-07 19:51 . 2007-06-07 19:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6425\OUTLFLTR.DLL
+ 2006-10-27 03:49 . 2006-10-27 03:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\WRD12CVR.DLL
+ 2006-10-27 04:07 . 2006-10-27 04:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PPSLAX.DLL
+ 2006-10-20 15:37 . 2006-10-20 15:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OGALEGIT.DLL
+ 2007-08-07 21:57 . 2007-08-07 21:57 416544 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OFFICE.DLL
+ 2006-10-27 02:55 . 2006-10-27 02:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSTORE.EXE
+ 2006-10-26 14:47 . 2006-10-26 14:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSPROOF6.DLL
+ 2006-10-26 20:58 . 2006-10-26 20:58 290576 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MSCDM.DLL
+ 2006-10-27 02:52 . 2006-10-27 02:52 460616 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MODHELP.DLL
+ 2006-10-26 20:00 . 2006-10-26 20:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IETAG.DLL
+ 2007-08-07 21:57 . 2007-08-07 21:57 150320 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\GRAPHPIA.DLL
+ 2006-10-27 03:12 . 2006-10-27 03:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\DSSM.EXE
+ 2009-11-08 23:10 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB976749-IE7\spuninst\updspapi.dll
+ 2009-11-08 23:10 . 2009-05-26 11:40 231288 c:\windows\ie7updates\KB976749-IE7\spuninst\spuninst.exe
+ 2009-10-17 16:16 . 2009-06-29 16:12 827392 c:\windows\ie7updates\KB974455-IE7\wininet.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 233472 c:\windows\ie7updates\KB974455-IE7\webcheck.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 105984 c:\windows\ie7updates\KB974455-IE7\url.dll
+ 2009-10-17 16:16 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB974455-IE7\spuninst\updspapi.dll
+ 2009-10-17 16:16 . 2009-05-26 11:40 231288 c:\windows\ie7updates\KB974455-IE7\spuninst\spuninst.exe
+ 2009-10-17 16:16 . 2009-06-29 16:12 102912 c:\windows\ie7updates\KB974455-IE7\occache.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 671232 c:\windows\ie7updates\KB974455-IE7\mstime.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 193024 c:\windows\ie7updates\KB974455-IE7\msrating.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 477696 c:\windows\ie7updates\KB974455-IE7\mshtmled.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 459264 c:\windows\ie7updates\KB974455-IE7\msfeeds.dll
+ 2009-10-17 16:16 . 2009-06-29 08:35 634632 c:\windows\ie7updates\KB974455-IE7\iexplore.exe
+ 2009-10-17 16:16 . 2009-06-29 16:12 268288 c:\windows\ie7updates\KB974455-IE7\iertutil.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 385024 c:\windows\ie7updates\KB974455-IE7\iedkcs32.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 380928 c:\windows\ie7updates\KB974455-IE7\ieapfltr.dll
+ 2009-10-17 16:16 . 2009-06-29 08:33 161792 c:\windows\ie7updates\KB974455-IE7\ieakui.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 230400 c:\windows\ie7updates\KB974455-IE7\ieaksie.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 153088 c:\windows\ie7updates\KB974455-IE7\ieakeng.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 133120 c:\windows\ie7updates\KB974455-IE7\extmgr.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 214528 c:\windows\ie7updates\KB974455-IE7\dxtrans.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 347136 c:\windows\ie7updates\KB974455-IE7\dxtmsft.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 124928 c:\windows\ie7updates\KB974455-IE7\advpack.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 827392 c:\windows\ie7updates\KB972260-IE7\wininet.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 233472 c:\windows\ie7updates\KB972260-IE7\webcheck.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 105984 c:\windows\ie7updates\KB972260-IE7\url.dll
+ 2009-08-02 16:37 . 2009-05-26 11:40 382840 c:\windows\ie7updates\KB972260-IE7\spuninst\updspapi.dll
+ 2009-08-02 16:37 . 2008-07-08 13:02 231288 c:\windows\ie7updates\KB972260-IE7\spuninst\spuninst.exe
+ 2009-08-02 16:37 . 2009-04-29 04:56 102912 c:\windows\ie7updates\KB972260-IE7\occache.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 671232 c:\windows\ie7updates\KB972260-IE7\mstime.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 193024 c:\windows\ie7updates\KB972260-IE7\msrating.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 477696 c:\windows\ie7updates\KB972260-IE7\mshtmled.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 459264 c:\windows\ie7updates\KB972260-IE7\msfeeds.dll
+ 2009-08-02 16:37 . 2009-04-25 05:27 636088 c:\windows\ie7updates\KB972260-IE7\iexplore.exe
+ 2009-08-02 16:37 . 2009-04-29 04:55 268288 c:\windows\ie7updates\KB972260-IE7\iertutil.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 385024 c:\windows\ie7updates\KB972260-IE7\iedkcs32.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 383488 c:\windows\ie7updates\KB972260-IE7\ieapfltr.dll
+ 2009-08-02 16:37 . 2009-04-25 05:26 161792 c:\windows\ie7updates\KB972260-IE7\ieakui.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 230400 c:\windows\ie7updates\KB972260-IE7\ieaksie.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 153088 c:\windows\ie7updates\KB972260-IE7\ieakeng.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 133120 c:\windows\ie7updates\KB972260-IE7\extmgr.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 214528 c:\windows\ie7updates\KB972260-IE7\dxtrans.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 347136 c:\windows\ie7updates\KB972260-IE7\dxtmsft.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 124928 c:\windows\ie7updates\KB972260-IE7\advpack.dll
+ 2009-08-17 07:57 . 2008-03-13 04:52 761344 c:\windows\Driver Cache\i386\unires.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 744960 c:\windows\Driver Cache\i386\unidrvui.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 373248 c:\windows\Driver Cache\i386\unidrv.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 198656 c:\windows\Driver Cache\i386\mxdwdui.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 765440 c:\windows\Driver Cache\i386\mxdwdrv.dll
+ 2009-09-08 16:50 . 2009-09-08 16:50 574464 c:\windows\Build a lot 3 Passport to Europe\uninstall.exe
+ 2009-10-17 16:14 . 2009-10-17 16:14 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_7ee5d5d4\System.Drawing.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_7378d90b\System.Drawing.Design.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_36dbcaf2\CustomMarshalers.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 539136 c:\windows\assembly\NativeImages_v2.0.50727_32\Xceed.Zip\3b13d2c8b76423ed2a6236d660dea671\Xceed.Zip.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 661504 c:\windows\assembly\NativeImages_v2.0.50727_32\Xceed.Grid.UIStyle\63bc13fa79cc8a3a6d7609c5509794cc\Xceed.Grid.UIStyle.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 311808 c:\windows\assembly\NativeImages_v2.0.50727_32\Xceed.FileSystem\64c1b5b82f9c60d2b4f8b5f1f0d65312\Xceed.FileSystem.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 267264 c:\windows\assembly\NativeImages_v2.0.50727_32\Xceed.Compression\274e84974b9f28de2ca0e3451ae062f7\Xceed.Compression.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\e2098e43d115155d6ba91ba3a7e577cf\WsatConfig.ni.exe
+ 2009-10-17 19:12 . 2009-10-17 19:12 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\a9f622a002ec8f497bd1a9d7a15bc3cc\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 428032 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\fe4b83365bea555b61ad18a44c82bc5f\WindowsLive.Writer.Localization.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 118784 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\f91af7a087fa0fd79c6813e89bdca8e2\WindowsLive.Writer.Extensibility.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d3f86b9030219e29458c632c9b3607b6\WindowsLive.Writer.FileDestinations.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 117760 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\a9f89cb4fd6fbbf97ced86cbc4ede684\WindowsLive.Writer.Instrumentation.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\921543e46eaefd342cba979efe010eea\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\72a19b44bac1535f419f588a5d27a120\WindowsLive.Writer.Passport.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\6ef81f4842909219ba4bf7765e1a6945\WindowsLive.Writer.BlogClient.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 319488 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\586aec89f41e693a45782661f56434c7\WindowsLive.Writer.Interop.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 313856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\551d4211cde9574615ad847741667699\WindowsLive.Writer.Interop.SHDocVw.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 334848 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\3cc2fb9f57b84e39eb26207a4b424c3b\WindowsLive.Writer.Interop.Mshtml.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 843776 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\287c1754962c0328b9e4def098e0561b\WindowsLive.Writer.Controls.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1e534e26d4e0252375680a6cb5403809\WindowsLive.Writer.HtmlParser.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 174080 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\1978e7abc502d3514b61823ef1583156\WindowsLive.Writer.BrowserControl.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 322048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0fc99e925062511881d9d6b53810ca4f\WindowsLive.Writer.SpellChecker.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\0167de94f26ba25b7d149efa7fb9a1d0\WindowsLive.Writer.Mshtml.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 145920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Client\2bab3cb51d4d8c18755aa271d7d54403\WindowsLive.Client.ni.dll
+ 2009-10-17 17:58 . 2009-10-17 17:58 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\bf92bc207f927cbbd6dfc9dc0c3eae68\WindowsFormsIntegration.ni.dll
+ 2009-10-17 17:57 . 2009-10-17 17:57 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\6f488b7644dc50a083868e91a4014466\UIAutomationTypes.ni.dll
+ 2009-10-17 17:57 . 2009-10-17 17:57 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\c2fbf25609b704061a93500efa6f241d\UIAutomationClient.ni.dll
+ 2009-08-17 08:52 . 2009-08-17 08:52 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP107.tmp\System.DirectoryServices.AccountManagement.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\eb23b78564687badff1bd1f1d0a0ec97\System.Xml.Linq.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\e7666364bf9f3ba5f4833c9efedd8218\System.Web.Routing.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\b5f1b8791e6c47e5bd5e7018c346c586\System.Web.RegularExpressions.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\884eacddf339b8b342f66aedff5f8ef9\System.Web.Extensions.Design.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\9e199645bd26f1afe58ebe185d1e7f0f\System.Web.Entity.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\652017ebe962ab2eb271c2524f31cd61\System.Web.Entity.Design.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\d0070c1c1a642ae30394e00bc0d82336\System.Web.DynamicData.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\1896753d02d146be1988d32241300f51\System.Web.Abstractions.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\408e637346ef628a3f54fb1b9b83ac9f\System.Transactions.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\1f61bccb700d687775cf778dd77752e9\System.ServiceProcess.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 676352 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\a9e9b885a6601469c4058375cc74d856\System.Security.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\9bc34a79af9c3ed2cf17a0226c769b4c\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\af21e3011fb4e107b13ea5c40c351ec4\System.Runtime.Remoting.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\5f74a84e9d28c2332c51f6e30da0e125\System.Net.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\2c208e4c5521f31057ea7d6e93c6a567\System.Management.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\818b20a7c6f3b2fe97bf008ca24080c1\System.Management.Instrumentation.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\6c273eb9d1ee8b66b5ecb073de4b785d\System.IO.Log.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\7222db518afb4eaaa138824278249bc7\System.IdentityModel.Selectors.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.Wrapper.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\8a7d0bd0057a8ed38291d5662248f7a1\System.EnterpriseServices.ni.dll
+ 2009-10-17 17:55 . 2009-10-17 17:55 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\ca6d7208c0fb72ff97429f2636ced321\System.Drawing.Design.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\c92fc19800e701c90f90ab7a2ab44c47\System.DirectoryServices.AccountManagement.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\a601f47a98ee67df424685c9a66ea449\System.DirectoryServices.Protocols.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\b91b44015859163646f210d284f7166a\System.Data.Services.Client.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1b35297e07b85071daecdb06f96750a1\System.Data.Services.Design.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\cf906bf9146d1f0013451ec63b58e064\System.Data.Entity.Design.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\4ff4134b0d490c090e03d74e104517c4\System.Data.DataSetExtensions.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\7c743462baccf29b3567b0e3ec9ac134\System.Configuration.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\443e3a85c491b2de4a2ac654cb957484\System.Configuration.Install.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\cba35f47925431a54d0e6ae147a292f1\System.AddIn.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6af32fe5cbec0aa54e2efa6910c73651\SMSvcHost.ni.exe
+ 2009-10-17 19:12 . 2009-10-17 19:12 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\7602d7687fb9bd21cd9ae60d2b187c99\SMDiagnostics.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\a23dc25782df04533a13e348203e4dc5\ServiceModelReg.ni.exe
+ 2009-10-17 19:11 . 2009-10-17 19:11 107520 c:\windows\assembly\NativeImages_v2.0.50727_32\SBAIREPORTING\cb6ca5aeb7be1cd72c7bbff161d064d1\SBAIREPORTING.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 636416 c:\windows\assembly\NativeImages_v2.0.50727_32\SBAIAPIV2\f421938a06bf637b4e6f31f34e6c4006\SBAIAPIV2.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 532992 c:\windows\assembly\NativeImages_v2.0.50727_32\SBAIAPI\e258a2ea4a299a30e6a16e420421501c\SBAIAPI.ni.dll
+ 2009-10-17 17:52 . 2009-10-17 17:52 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\96f74da5fc40b92f09069230bc0df4f0\PresentationFramework.Royale.ni.dll
+ 2009-10-17 17:52 . 2009-10-17 17:52 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3bb4d16b042b72c2c85a0f8ac9d48f28\PresentationFramework.Luna.ni.dll
+ 2009-10-17 17:52 . 2009-10-17 17:52 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\30c5c2682d3c5bdaa83bb9a36ee48afa\PresentationFramework.Aero.ni.dll
+ 2009-10-17 17:52 . 2009-10-17 17:52 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\07e952efd70f5608e221a008e6231ace\PresentationFramework.Classic.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 924672 c:\windows\assembly\NativeImages_v2.0.50727_32\office\38824c76c58f3090b1b007486ffb7aa3\office.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\eade8c1c9c1e8e5ffb50e6c9b9af0f6a\MSBuild.ni.exe
+ 2009-10-17 19:08 . 2009-10-17 19:08 119296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vbe.Inter#\cb019e92f63137b9862833e94bf40a67\Microsoft.Vbe.Interop.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fc4d66e0a92b3767006a84f2519d2457\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9ca48f22b6eec29a525948900945d50b\Microsoft.SqlServer.Setup.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 530432 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\9b8d17a1a7b0aac569598305f7f7069d\Microsoft.SqlServer.GridControl.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 989184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\82d552fe0f6ba8bc79487da0fbbd6e1a\Microsoft.SqlServer.WizardFrameworkLite.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 231936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\4fc0b4a92bd80c00cace7a4af61221c5\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 409088 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Iris.Impo#\ea3c8337aa859516d4509ab44933d737\Microsoft.Iris.ImportExportDataAccess.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 393216 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Iris.Impo#\925fbc971d13f673ea21c981842f0733\Microsoft.Iris.ImportExport.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\aaad918ff5df6d6fb668e1228e89e4b4\Microsoft.Interop.Mapi.Interfaces.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 177664 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\697e069b3b0529fd1dd5e3527634fdbb\Microsoft.Interop.Mapi.PropTags.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 595968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\fdd44a34a8884dba5e23a50fc6c8ca20\Microsoft.Interop.eCRM.MSComCtl.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 945152 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\f3d86c5996ae54bafd11d7b428f458ac\Microsoft.Interop.eCRM.msforms.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 472064 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\eaf0eb6eb80891fde9545d2060834868\Microsoft.Interop.eCRM.Publisher.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 318976 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\adcf66dc0aef03877fb7a7b934b6a0c0\Microsoft.Interop.eCRM.SHDocVw.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 493056 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.eCRM.Offi#\b99d2249dcb81d928274de876f20580e\Microsoft.eCRM.Office.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 108544 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.eCRM.AxSH#\f734e49c74b32bf4e1595a631d19cf76\Microsoft.eCRM.AxSHDocVw.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 462336 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\e6fbd5b31b874f184ecccf2cd193d5fe\Microsoft.BusinessSolutions.eCRM.DataSync.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 866816 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\2569e9016ba247c0d213ddb6d31715f6\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.ImportExportUI.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\58ca3ecc52b7246b448c109817198a0b\Microsoft.Build.Utilities.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\4dd43724dd92026577c6f588270137a0\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\8c651f75bb741330370986dcad8e9e5b\Microsoft.Build.Engine.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\a6dcbae619ccd938bfe808c54d6d3ae0\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 424960 c:\windows\assembly\NativeImages_v2.0.50727_32\Iris.Mapi.MessageSt#\1b833c11ef08696bacfc75bf25b73cfd\Iris.Mapi.MessageStore.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\77688ce14f221ed94a9f442ae4736123\CustomMarshalers.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\a17c65f0cffaa4f792dd38d50df9d526\ComSvcConfig.ni.exe
+ 2009-10-17 19:10 . 2009-10-17 19:10 469504 c:\windows\assembly\NativeImages_v2.0.50727_32\BCMMSIDCRL.Managed\b945c11a4d4ed466286044646b4bf16c\BCMMSIDCRL.Managed.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 484352 c:\windows\assembly\NativeImages_v2.0.50727_32\BCMCommon\7904dc02ecd7a26ecec78945403d2a9c\BCMCommon.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\85d7c111956b478766d90625b35d963f\AspNetMMCExt.ni.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 385024 c:\windows\assembly\GAC_MSIL\UIAutomationClientsideProviders\3.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 167936 c:\windows\assembly\GAC_MSIL\UIAutomationClient\3.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 139264 c:\windows\assembly\GAC_MSIL\System.Xml.Linq\3.5.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 507904 c:\windows\assembly\GAC_MSIL\System.WorkflowServices\3.5.0.0__31bf3856ad364e35\System.WorkflowServices.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 540672 c:\windows\assembly\GAC_MSIL\System.Workflow.Runtime\3.0.0.0__31bf3856ad364e35\System.Workflow.Runtime.dll
- 2008-04-15 07:51 . 2008-04-15 07:51 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 335872 c:\windows\assembly\GAC_MSIL\System.Web.Extensions.Design\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.Design.dll
+ 2009-08-17 08:09 . 2009-08-17 08:09 139264 c:\windows\assembly\GAC_MSIL\System.Web.Entity\3.5.0.0__b77a5c561934e089\System.Web.Entity.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 131072 c:\windows\assembly\GAC_MSIL\System.Web.Entity.Design\3.5.0.0__b77a5c561934e089\System.Web.Entity.Design.dll
+ 2009-08-17 08:09 . 2009-08-17 08:09 229376 c:\windows\assembly\GAC_MSIL\System.Web.DynamicData\3.5.0.0__31bf3856ad364e35\System.Web.DynamicData.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 688128 c:\windows\assembly\GAC_MSIL\System.Speech\3.0.0.0__31bf3856ad364e35\System.Speech.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2008-04-15 07:51 . 2008-04-15 07:51 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 569344 c:\windows\assembly\GAC_MSIL\System.ServiceModel.Web\3.5.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2008-04-15 07:51 . 2008-04-15 07:51 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 966656 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 233472 c:\windows\assembly\GAC_MSIL\System.Net\3.5.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 143360 c:\windows\assembly\GAC_MSIL\System.Management.Instrumentation\3.5.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 131072 c:\windows\assembly\GAC_MSIL\System.IO.Log\3.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 430080 c:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 126976 c:\windows\assembly\GAC_MSIL\System.IdentityModel.Selectors\3.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2008-04-15 07:51 . 2008-04-15 07:51 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 286720 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\3.5.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2009-08-17 08:09 . 2009-08-17 08:09 442368 c:\windows\assembly\GAC_MSIL\System.Data.Services\3.5.0.0__b77a5c561934e089\System.Data.Services.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 114688 c:\windows\assembly\GAC_MSIL\System.Data.Services.Design\3.5.0.0__b77a5c561934e089\System.Data.Services.Design.dll
+ 2009-08-17 08:09 . 2009-08-17 08:09 294912 c:\windows\assembly\GAC_MSIL\System.Data.Services.Client\3.5.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 684032 c:\windows\assembly\GAC_MSIL\System.Data.Linq\3.5.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 229376 c:\windows\assembly\GAC_MSIL\System.Data.Entity.Design\3.5.0.0__b77a5c561934e089\System.Data.Entity.Design.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 667648 c:\windows\assembly\GAC_MSIL\System.Core\3.5.0.0__b77a5c561934e089\System.Core.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2008-04-15 07:51 . 2008-04-15 07:51 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 163840 c:\windows\assembly\GAC_MSIL\System.AddIn\3.5.0.0__b77a5c561934e089\System.AddIn.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 110592 c:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 528384 c:\windows\assembly\GAC_MSIL\ReachFramework\3.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 864256 c:\windows\assembly\GAC_MSIL\PresentationUI\3.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 163840 c:\windows\assembly\GAC_MSIL\PresentationFramework.Royale\3.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 397312 c:\windows\assembly\GAC_MSIL\PresentationFramework.Luna\3.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 139264 c:\windows\assembly\GAC_MSIL\PresentationFramework.Classic\3.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 196608 c:\windows\assembly\GAC_MSIL\PresentationFramework.Aero\3.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 598016 c:\windows\assembly\GAC_MSIL\PresentationBuildTasks\3.0.0.0__31bf3856ad364e35\PresentationBuildTasks.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2008-04-15 07:51 . 2008-04-15 07:51 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 397312 c:\windows\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2009-11-07 15:38 . 2009-11-07 15:39 609160 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 802816 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.v3.5.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 733184 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-08-17 08:00 . 2009-08-17 08:00 106496 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Conversion.v3.5\3.5.0.0__b03f5f7f11d50a3a\Microsoft.Build.Conversion.v3.5.dll
- 2008-04-15 07:51 . 2008-04-15 07:51 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-10-17 16:22 . 2009-10-17 16:22 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 368640 c:\windows\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2008-04-15 07:52 . 2008-04-15 07:52 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 163840 c:\windows\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2009-11-07 15:39 . 2009-11-07 15:39 118176 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
+ 2009-11-07 15:34 . 2009-11-07 15:34 423784 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2009-11-07 15:34 . 2009-11-07 15:34 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2009-11-07 15:34 . 2009-11-07 15:34 149352 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2009-11-29 23:24 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB976098-v2$\spuninst\updspapi.dll
+ 2009-11-29 23:24 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB976098-v2$\spuninst\spuninst.exe
+ 2009-10-17 16:08 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB975467$\spuninst\updspapi.dll
+ 2009-10-17 16:08 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB975467$\spuninst\spuninst.exe
+ 2009-10-17 16:08 . 2009-06-25 08:17 136192 c:\windows\$NtUninstallKB975467$\msv1_0.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB975025$\spuninst\updspapi.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB975025$\spuninst\spuninst.exe
+ 2009-10-17 16:16 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB974571$\spuninst\updspapi.dll
+ 2009-10-17 16:16 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB974571$\spuninst\spuninst.exe
+ 2009-10-17 16:17 . 2008-10-03 10:15 247326 c:\windows\$NtUninstallKB974112$\strmdll.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB974112$\spuninst\updspapi.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB974112$\spuninst\spuninst.exe
+ 2009-08-14 20:06 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB973869$\spuninst\updspapi.dll
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB973869$\spuninst\spuninst.exe
+ 2009-08-14 19:57 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB973815$\spuninst\updspapi.dll
+ 2009-08-14 19:57 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB973815$\spuninst\spuninst.exe
+ 2009-08-14 19:57 . 2004-08-05 03:00 204288 c:\windows\$NtUninstallKB973815$\mswebdvd.dll
+ 2009-11-29 23:24 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB973687$\spuninst\updspapi.dll
+ 2009-11-29 23:24 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB973687$\spuninst\spuninst.exe
+ 2009-08-14 20:06 . 2006-10-18 20:47 314880 c:\windows\$NtUninstallKB973540_WM9L$\wmpdxm.dll
+ 2009-08-14 20:06 . 2007-07-27 09:41 382840 c:\windows\$NtUninstallKB973540_WM9L$\spuninst\updspapi.dll
+ 2009-08-14 20:06 . 2007-07-27 09:41 231288 c:\windows\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe
+ 2009-10-17 16:11 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB973525$\spuninst\updspapi.dll
+ 2009-10-17 16:11 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB973525$\spuninst\spuninst.exe
+ 2009-08-14 20:04 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB973507$\spuninst\updspapi.dll
+ 2009-08-14 20:04 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB973507$\spuninst\spuninst.exe
+ 2009-08-14 20:01 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB973354$\spuninst\updspapi.dll
+ 2009-08-14 20:01 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB973354$\spuninst\spuninst.exe
+ 2009-07-19 23:11 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB973346$\spuninst\updspapi.dll
+ 2009-07-19 23:11 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB973346$\spuninst\spuninst.exe
+ 2009-09-12 22:00 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB971961$\spuninst\updspapi.dll
+ 2009-09-12 22:00 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB971961$\spuninst\spuninst.exe
+ 2009-09-12 22:00 . 2007-08-13 17:38 491520 c:\windows\$NtUninstallKB971961$\jscript.dll
+ 2009-08-14 20:06 . 2006-08-17 12:28 132096 c:\windows\$NtUninstallKB971657$\wkssvc.dll
+ 2009-08-14 20:06 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB971657$\spuninst\updspapi.dll
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971657$\spuninst\spuninst.exe
+ 2009-07-19 23:04 . 2008-07-09 07:38 382840 c:\windows\$NtUninstallKB971633$\spuninst\updspapi.dll
+ 2009-07-19 23:04 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971633$\spuninst\spuninst.exe
+ 2009-08-14 20:06 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB971557$\spuninst\updspapi.dll
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB971557$\spuninst\spuninst.exe
+ 2009-10-17 16:11 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB971486$\spuninst\updspapi.dll
+ 2009-10-17 16:11 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB971486$\spuninst\spuninst.exe
+ 2009-08-14 19:57 . 2007-03-06 01:23 371424 c:\windows\$NtUninstallKB971032$\spuninst\updspapi.dll
+ 2009-08-14 19:57 . 2007-03-06 01:22 213216 c:\windows\$NtUninstallKB971032$\spuninst\spuninst.exe
+ 2009-08-14 19:57 . 2004-08-05 03:00 169984 c:\windows\$NtUninstallKB971032$\msmqocm.dll
+ 2009-08-14 19:57 . 2007-07-06 12:46 471552 c:\windows\$NtUninstallKB971032$\mqutil.dll
+ 2009-08-14 19:57 . 2004-08-05 03:00 186880 c:\windows\$NtUninstallKB971032$\mqtrig.dll
+ 2009-08-14 19:57 . 2004-08-05 03:00 117248 c:\windows\$NtUninstallKB971032$\mqtgsvc.exe
+ 2009-08-14 19:57 . 2004-08-05 03:00 517632 c:\windows\$NtUninstallKB971032$\mqsnap.dll
+ 2009-08-14 19:57 . 2004-08-05 03:00 123392 c:\windows\$NtUninstallKB971032$\mqrtdep.dll
+ 2009-08-14 19:57 . 2007-07-06 12:46 177152 c:\windows\$NtUninstallKB971032$\mqrt.dll
+ 2009-08-14 19:57 . 2007-07-06 12:46 660992 c:\windows\$NtUninstallKB971032$\mqqm.dll
+ 2009-08-14 19:57 . 2004-08-05 03:00 225280 c:\windows\$NtUninstallKB971032$\mqoa.dll
+ 2009-08-14 19:57 . 2007-07-06 12:46 138240 c:\windows\$NtUninstallKB971032$\mqad.dll
+ 2009-08-29 19:35 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB970653-v3$\spuninst\updspapi.dll
+ 2009-08-29 19:35 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB970653-v3$\spuninst\spuninst.exe
+ 2009-11-14 16:17 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB969947$\spuninst\updspapi.dll
+ 2009-11-14 16:17 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB969947$\spuninst\spuninst.exe
+ 2009-10-17 16:17 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB969059$\spuninst\updspapi.dll
+ 2009-10-17 16:17 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB969059$\spuninst\spuninst.exe
+ 2009-09-12 22:11 . 2007-07-27 09:41 382840 c:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
+ 2009-09-12 22:11 . 2007-07-27 09:41 231288 c:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
+ 2009-08-17 07:39 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB968389$\spuninst\updspapi.dll
+ 2009-08-17 07:39 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB968389$\spuninst\spuninst.exe
+ 2009-08-17 07:39 . 2008-12-05 07:12 144896 c:\windows\$NtUninstallKB968389$\schannel.dll
+ 2009-08-17 07:39 . 2004-08-05 03:00 407040 c:\windows\$NtUninstallKB968389$\netlogon.dll
+ 2009-08-17 07:39 . 2004-08-05 03:00 129536 c:\windows\$NtUninstallKB968389$\msv1_0.dll
+ 2009-08-17 07:39 . 2009-02-09 10:01 728576 c:\windows\$NtUninstallKB968389$\lsasrv.dll
+ 2009-08-17 07:39 . 2005-06-15 17:49 295936 c:\windows\$NtUninstallKB968389$\kerberos.dll
+ 2009-07-19 21:04 . 2005-10-17 21:14 118272 c:\windows\$NtUninstallKB961371$\t2embed.dll
+ 2009-07-19 21:04 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB961371$\spuninst\updspapi.dll
+ 2009-07-19 21:04 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB961371$\spuninst\spuninst.exe
+ 2009-08-18 06:33 . 2007-11-30 11:18 382840 c:\windows\$NtUninstallKB961118$\spuninst\updspapi.dll
+ 2009-08-18 06:33 . 2007-11-30 11:18 231288 c:\windows\$NtUninstallKB961118$\spuninst\spuninst.exe
+ 2009-08-14 20:06 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB960859$\spuninst\updspapi.dll
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB960859$\spuninst\spuninst.exe
+ 2009-10-17 16:21 . 2009-05-26 11:40 382840 c:\windows\$NtUninstallKB958869$\spuninst\updspapi.dll
+ 2009-10-17 16:21 . 2009-05-26 11:40 231288 c:\windows\$NtUninstallKB958869$\spuninst\spuninst.exe
+ 2009-08-14 19:57 . 2007-03-06 01:23 371424 c:\windows\$NtUninstallKB958470$\spuninst\updspapi.dll
+ 2009-08-14 19:57 . 2007-03-06 01:22 213216 c:\windows\$NtUninstallKB958470$\spuninst\spuninst.exe
+ 2009-08-14 19:57 . 2004-08-05 03:00 655360 c:\windows\$NtUninstallKB958470$\mstscax.dll
+ 2009-09-12 22:11 . 2004-08-05 03:00 153088 c:\windows\$NtUninstallKB956844$\triedit.dll
+ 2009-09-12 22:11 . 2008-07-08 13:02 382840 c:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
+ 2009-09-12 22:11 . 2008-07-08 13:02 231288 c:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
+ 2009-10-17 16:20 . 2006-10-18 20:47 603648 c:\windows\$NtUninstallKB954155_WM9$\wmspdmod.dll
+ 2009-10-17 16:20 . 2007-07-27 09:41 382840 c:\windows\$NtUninstallKB954155_WM9$\spuninst\updspapi.dll
+ 2009-10-17 16:20 . 2007-07-27 09:41 231288 c:\windows\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe
+ 2009-08-18 06:33 . 2005-10-12 23:16 371424 c:\windows\$NtUninstallKB925720$\spuninst\updspapi.dll
+ 2009-08-18 06:33 . 2005-10-12 23:16 213216 c:\windows\$NtUninstallKB925720$\spuninst\spuninst.exe
+ 2009-08-18 06:33 . 2004-08-05 03:00 215552 c:\windows\$NtUninstallKB925720$\osk.exe
+ 2009-11-08 23:10 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB976749-IE7\update\updspapi.dll
+ 2009-11-08 23:10 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB976749-IE7\update\update.exe
+ 2009-11-08 23:10 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB976749-IE7\spuninst.exe
+ 2009-10-17 16:08 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB975467\update\updspapi.dll
+ 2009-10-17 16:08 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB975467\update\update.exe
+ 2009-10-17 16:08 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB975467\spuninst.exe
+ 2009-09-11 14:13 . 2009-09-11 14:13 136704 c:\windows\$hf_mig$\KB975467\SP3QFE\msv1_0.dll
+ 2009-09-11 14:18 . 2009-09-11 14:18 136192 c:\windows\$hf_mig$\KB975467\SP3GDR\msv1_0.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB975025\update\updspapi.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB975025\update\update.exe
+ 2009-10-17 16:17 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB975025\spuninst.exe
+ 2009-10-17 16:16 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB974571\update\updspapi.dll
+ 2009-10-17 16:16 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB974571\update\update.exe
+ 2009-10-17 16:16 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB974571\spuninst.exe
+ 2009-10-17 16:16 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB974455-IE7\update\updspapi.dll
+ 2009-10-17 16:16 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB974455-IE7\update\update.exe
+ 2009-10-17 16:16 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB974455-IE7\spuninst.exe
+ 2009-08-29 07:31 . 2009-08-29 07:31 840704 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\wininet.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 233472 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\webcheck.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 105984 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\url.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 102912 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\occache.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 671232 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mstime.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 193024 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\msrating.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 477696 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtmled.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 459264 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\msfeeds.dll
+ 2009-08-27 05:18 . 2009-08-27 05:18 634648 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\iexplore.exe
+ 2009-08-29 07:31 . 2009-08-29 07:31 268288 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\iertutil.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 388608 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\iedkcs32.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 380928 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieapfltr.dll
+ 2009-08-27 05:18 . 2009-08-27 05:18 161792 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieakui.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 230400 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieaksie.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 153088 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieakeng.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 132608 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\extmgr.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 214528 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\dxtrans.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 347136 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\dxtmsft.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 124928 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\advpack.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB974112\update\updspapi.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB974112\update\update.exe
+ 2009-10-17 16:17 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB974112\spuninst.exe
+ 2009-08-26 08:03 . 2009-08-26 08:03 247326 c:\windows\$hf_mig$\KB974112\SP3QFE\strmdll.dll
+ 2009-08-26 08:00 . 2009-08-26 08:00 247326 c:\windows\$hf_mig$\KB974112\SP3GDR\strmdll.dll
+ 2009-08-26 07:58 . 2009-08-26 07:58 247326 c:\windows\$hf_mig$\KB974112\SP2QFE\strmdll.dll
+ 2009-08-14 20:06 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB973869\update\updspapi.dll
+ 2009-08-14 20:06 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB973869\update\update.exe
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB973869\spuninst.exe
+ 2009-08-14 19:57 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB973815\update\updspapi.dll
+ 2009-08-14 19:57 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB973815\update\update.exe
+ 2009-08-14 19:57 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB973815\spuninst.exe
+ 2009-08-05 08:52 . 2009-08-05 08:52 204800 c:\windows\$hf_mig$\KB973815\SP3QFE\mswebdvd.dll
+ 2009-08-05 09:01 . 2009-08-05 09:01 204800 c:\windows\$hf_mig$\KB973815\SP3GDR\mswebdvd.dll
+ 2009-08-05 08:42 . 2009-08-05 08:42 204800 c:\windows\$hf_mig$\KB973815\SP2QFE\mswebdvd.dll
+ 2009-11-29 23:24 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB973687\update\updspapi.dll
+ 2009-11-29 23:24 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB973687\update\update.exe
+ 2009-11-29 23:24 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB973687\spuninst.exe
+ 2009-10-17 16:11 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB973525\update\updspapi.dll
+ 2009-10-17 16:11 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB973525\update\update.exe
+ 2009-10-17 16:11 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB973525\spuninst.exe
+ 2009-08-14 20:04 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB973507\update\updspapi.dll
+ 2009-08-14 20:04 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB973507\update\update.exe
+ 2009-08-14 20:04 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB973507\spuninst.exe
+ 2009-08-14 20:01 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB973354\update\updspapi.dll
+ 2009-08-14 20:01 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB973354\update\update.exe
+ 2009-08-14 20:01 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB973354\spuninst.exe
+ 2009-07-19 23:11 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB973346\update\updspapi.dll
+ 2009-07-19 23:11 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB973346\update\update.exe
+ 2009-07-19 23:11 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB973346\spuninst.exe
+ 2009-08-02 16:37 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB972260-IE7\update\updspapi.dll
+ 2009-08-02 16:37 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB972260-IE7\update\update.exe
+ 2009-08-02 16:37 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB972260-IE7\spuninst.exe
+ 2009-06-29 16:23 . 2009-06-29 16:23 828928 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 233472 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\webcheck.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 105984 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\url.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 102912 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\occache.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 671232 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mstime.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 193024 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\msrating.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 477696 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtmled.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 459264 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\msfeeds.dll
+ 2009-06-29 07:25 . 2009-06-29 07:25 634632 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iexplore.exe
+ 2009-06-29 16:23 . 2009-06-29 16:23 268288 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iertutil.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 388608 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\iedkcs32.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 380928 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieapfltr.dll
+ 2009-06-29 07:23 . 2009-06-29 07:23 161792 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieakui.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 230400 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieaksie.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 153088 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieakeng.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 132608 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\extmgr.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 214528 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\dxtrans.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 347136 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\dxtmsft.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 124928 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\advpack.dll
+ 2009-09-12 22:00 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971961\update\updspapi.dll
+ 2009-09-12 22:00 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971961\update\update.exe
+ 2009-09-12 22:00 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB971961\spuninst.exe
+ 2009-09-09 08:52 . 2009-08-13 15:02 512000 c:\windows\$hf_mig$\KB971961\SP3QFE\jscript.dll
+ 2009-08-14 20:06 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971657\update\updspapi.dll
+ 2009-08-14 20:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971657\update\update.exe
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971657\spuninst.exe
+ 2009-06-10 06:17 . 2009-06-10 06:17 134144 c:\windows\$hf_mig$\KB971657\SP3QFE\wkssvc.dll
+ 2009-06-10 06:14 . 2009-06-10 06:14 132096 c:\windows\$hf_mig$\KB971657\SP3GDR\wkssvc.dll
+ 2009-06-10 06:26 . 2009-06-10 06:26 134144 c:\windows\$hf_mig$\KB971657\SP2QFE\wkssvc.dll
+ 2009-07-19 23:05 . 2008-07-09 07:38 382840 c:\windows\$hf_mig$\KB971633\update\updspapi.dll
+ 2009-07-19 23:05 . 2008-07-09 07:38 755576 c:\windows\$hf_mig$\KB971633\update\update.exe
+ 2009-07-19 23:05 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971633\spuninst.exe
+ 2009-08-14 20:06 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971557\update\updspapi.dll
+ 2009-08-14 20:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971557\update\update.exe
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB971557\spuninst.exe
+ 2009-10-17 16:11 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB971486\update\updspapi.dll
+ 2009-10-17 16:11 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB971486\update\update.exe
+ 2009-10-17 16:11 . 2009-05-26 11:40 231288 c:\windows\$hf_mig$\KB971486\spuninst.exe
+ 2009-08-14 19:57 . 2007-03-06 01:23 371424 c:\windows\$hf_mig$\KB971032\update\updspapi.dll
+ 2009-08-14 19:57 . 2007-03-06 01:22 716000 c:\windows\$hf_mig$\KB971032\update\update.exe
+ 2009-08-14 19:57 . 2007-03-06 01:22 213216 c:\windows\$hf_mig$\KB971032\spuninst.exe
+ 2009-06-25 18:26 . 2009-06-25 18:26 169472 c:\windows\$hf_mig$\KB971032\SP2QFE\msmqocm.dll
+ 2009-06-25 18:26 . 2009-06-25 18:26 471552 c:\windows\$hf_mig$\KB971032\SP2QFE\mqutil.dll
+ 2009-06-25 18:26 . 2009-06-25 18:26 186880 c:\windows\$hf_mig$\KB971032\SP2QFE\mqtrig.dll
+ 2009-06-22 11:30 . 2009-06-22 11:30 117248 c:\windows\$hf_mig$\KB971032\SP2QFE\mqtgsvc.exe
+ 2009-06-25 18:26 . 2009-06-25 18:26 517120 c:\windows\$hf_mig$\KB971032\SP2QFE\mqsnap.dll
+ 2009-06-25 18:26 . 2009-06-25 18:26 123392 c:\windows\$hf_mig$\KB971032\SP2QFE\mqrtdep.dll
+ 2009-06-25 18:26 . 2009-06-25 18:26 177152 c:\windows\$hf_mig$\KB971032\SP2QFE\mqrt.dll
+ 2009-06-25 18:26 . 2009-06-25 18:26 661504 c:\windows\$hf_mig$\KB971032\SP2QFE\mqqm.dll
+ 2009-06-25 18:26 . 2009-06-25 18:26 225280 c:\windows\$hf_mig$\KB971032\SP2QFE\mqoa.dll
+ 2009-06-25 18:26 . 2009-06-25 18:26 138240 c:\windows\$hf_mig$\KB971032\SP2QFE\mqad.dll
+ 2009-11-14 16:17 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB969947\update\updspapi.dll
+ 2009-11-14 16:17 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB969947\update\update.exe
+ 2009-11-14 16:17 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB969947\spuninst.exe
+ 2009-10-17 16:17 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB969059\update\updspapi.dll
+ 2009-10-17 16:17 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB969059\update\update.exe
+ 2009-10-17 16:17 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB969059\spuninst.exe
+ 2009-08-17 07:39 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB968389\update\updspapi.dll
+ 2009-08-17 07:39 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB968389\update\update.exe
+ 2009-08-17 07:39 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB968389\spuninst.exe
+ 2009-06-25 08:41 . 2009-06-25 08:41 147456 c:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
+ 2009-06-25 08:41 . 2009-06-25 08:41 136704 c:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
+ 2009-06-26 09:41 . 2009-06-26 09:41 730112 c:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
+ 2009-06-25 08:41 . 2009-06-25 08:41 301568 c:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
+ 2009-06-25 08:25 . 2009-06-25 08:25 147456 c:\windows\$hf_mig$\KB968389\SP3GDR\schannel.dll
+ 2009-06-25 08:25 . 2009-06-25 08:25 136192 c:\windows\$hf_mig$\KB968389\SP3GDR\msv1_0.dll
+ 2009-06-25 08:25 . 2009-06-25 08:25 730112 c:\windows\$hf_mig$\KB968389\SP3GDR\lsasrv.dll
+ 2009-06-25 08:25 . 2009-06-25 08:25 301568 c:\windows\$hf_mig$\KB968389\SP3GDR\kerberos.dll
+ 2009-07-19 21:04 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB961371\update\updspapi.dll
+ 2009-07-19 21:04 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB961371\update\update.exe
+ 2009-07-19 21:04 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB961371\spuninst.exe
+ 2009-06-16 14:43 . 2009-06-16 14:43 119808 c:\windows\$hf_mig$\KB961371\SP3QFE\t2embed.dll
+ 2009-06-16 14:36 . 2009-06-16 14:36 119808 c:\windows\$hf_mig$\KB961371\SP3GDR\t2embed.dll
+ 2009-06-16 14:45 . 2009-06-16 14:45 119808 c:\windows\$hf_mig$\KB961371\SP2QFE\t2embed.dll
+ 2009-08-18 06:33 . 2007-11-30 11:18 382840 c:\windows\$hf_mig$\KB961118\update\updspapi.dll
+ 2009-08-18 06:33 . 2007-11-30 11:18 755576 c:\windows\$hf_mig$\KB961118\update\update.exe
+ 2009-08-18 06:33 . 2007-11-30 11:18 231288 c:\windows\$hf_mig$\KB961118\spuninst.exe
+ 2009-08-14 20:06 . 2009-05-26 11:40 382840 c:\windows\$hf_mig$\KB960859\update\updspapi.dll
+ 2009-08-14 20:06 . 2009-05-26 11:40 755576 c:\windows\$hf_mig$\KB960859\update\update.exe
+ 2009-08-14 20:06 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB960859\spuninst.exe
+ 2009-08-14 19:57 . 2007-03-06 01:23 371424 c:\windows\$hf_mig$\KB958470\update\updspapi.dll
+ 2009-08-14 19:57 . 2007-03-06 01:22 716000 c:\windows\$hf_mig$\KB958470\update\update.exe
+ 2009-08-14 19:57 . 2007-03-06 01:22 213216 c:\windows\$hf_mig$\KB958470\spuninst.exe
+ 2009-08-12 08:47 . 2009-06-05 10:26 655872 c:\windows\$hf_mig$\KB958470\SP2QFE\mstscax.dll
+ 2009-09-12 22:11 . 2008-07-08 13:02 382840 c:\windows\$hf_mig$\KB956844\update\updspapi.dll
+ 2009-09-12 22:11 . 2008-07-08 13:02 755576 c:\windows\$hf_mig$\KB956844\update\update.exe
+ 2009-09-12 22:11 . 2008-07-08 13:02 231288 c:\windows\$hf_mig$\KB956844\spuninst.exe
+ 2009-09-09 08:52 . 2009-06-21 21:49 153088 c:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
+ 2009-09-09 08:52 . 2009-06-21 21:44 153088 c:\windows\$hf_mig$\KB956844\SP3GDR\triedit.dll
+ 2009-09-09 08:52 . 2009-06-21 21:55 153088 c:\windows\$hf_mig$\KB956844\SP2QFE\triedit.dll
+ 2009-08-18 06:33 . 2005-10-12 23:16 371424 c:\windows\$hf_mig$\KB925720\update\updspapi.dll
+ 2009-08-18 06:33 . 2005-10-12 23:16 716000 c:\windows\$hf_mig$\KB925720\update\update.exe
+ 2009-08-18 06:33 . 2005-10-12 23:16 213216 c:\windows\$hf_mig$\KB925720\spuninst.exe
+ 2006-10-04 10:40 . 2006-10-04 10:40 215552 c:\windows\$hf_mig$\KB925720\SP2QFE\osk.exe
+ 2009-10-14 16:31 . 2009-08-13 13:55 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
+ 2009-07-21 00:03 . 2009-07-21 00:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 1676288 c:\windows\system32\xpssvcs.dll
+ 2004-08-05 03:00 . 2009-08-06 19:23 1929952 c:\windows\system32\wuaueng.dll
- 2006-12-08 00:02 . 2008-06-18 05:03 2458112 c:\windows\system32\WMVCore.dll
+ 2006-12-08 00:02 . 2009-05-20 03:56 2458112 c:\windows\system32\WMVCore.dll
+ 2007-03-08 13:47 . 2009-08-14 12:19 1850112 c:\windows\system32\win32k.sys
+ 2009-04-30 16:48 . 2009-08-28 18:42 2065696 c:\windows\system32\usbaaplrc.dll
+ 2007-04-18 12:31 . 2009-08-29 07:36 1168384 c:\windows\system32\urlmon.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\xpssvcs.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\XPSEP\i386\i386\xpssvcs.dll
+ 2009-08-17 07:57 . 2008-07-06 16:36 2936832 c:\windows\system32\spool\XPSEP\amd64\xpssvcs.dll
+ 2009-08-17 07:57 . 2008-07-06 16:36 2936832 c:\windows\system32\spool\XPSEP\amd64\amd64\xpssvcs.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 1676288 c:\windows\system32\spool\drivers\w32x86\3\XpsSvcs.dll
+ 2009-08-29 09:57 . 2008-02-28 12:26 1414440 c:\windows\system32\ShellManager310E2D762.dll
- 2004-08-05 03:00 . 2006-06-22 05:06 1435648 c:\windows\system32\query.dll
+ 2004-08-05 03:00 . 2009-07-17 16:27 1435648 c:\windows\system32\query.dll
+ 2004-08-05 03:00 . 2009-06-03 19:27 1290752 c:\windows\system32\quartz.dll
- 2007-02-28 09:53 . 2009-02-06 10:29 2142720 c:\windows\system32\ntoskrnl.exe
+ 2007-02-28 09:53 . 2009-08-04 12:49 2142720 c:\windows\system32\ntoskrnl.exe
- 2007-02-28 09:16 . 2009-02-06 09:49 2020864 c:\windows\system32\ntkrnlpa.exe
+ 2007-02-28 09:16 . 2009-08-04 12:02 2020864 c:\windows\system32\ntkrnlpa.exe
+ 2005-10-15 13:25 . 2005-10-15 13:25 2183168 c:\windows\system32\myodbc3S.dll
+ 2005-10-15 13:25 . 2005-10-15 13:25 1552384 c:\windows\system32\myodbc3.dll
+ 2009-08-19 17:07 . 2009-08-19 17:07 1415000 c:\windows\system32\msxml6.dll
+ 2009-07-21 00:05 . 2009-07-21 00:05 1348432 c:\windows\system32\msxml4.dll
+ 2004-08-05 03:00 . 2009-07-31 04:57 1172480 c:\windows\system32\msxml3.dll
+ 2009-10-08 14:28 . 2000-06-12 22:00 1046288 c:\windows\system32\msjet35.dll
+ 2007-05-04 12:29 . 2009-10-21 04:08 3598336 c:\windows\system32\mshtml.dll
+ 2008-09-29 04:09 . 2008-09-29 04:09 1757184 c:\windows\system32\imagX7.dll
- 2006-03-17 10:45 . 2006-03-17 10:45 1757184 c:\windows\system32\imagX7.dll
+ 2007-08-13 17:54 . 2009-08-29 07:36 6067200 c:\windows\system32\ieframe.dll
+ 2007-02-12 15:10 . 2009-06-29 08:33 2452872 c:\windows\system32\ieapfltr.dat
+ 2009-08-17 22:33 . 2009-08-17 22:33 1193832 c:\windows\system32\FM20.DLL
+ 2009-09-14 10:06 . 2009-08-28 18:42 2065696 c:\windows\system32\DRVSTORE\usbaapl_6DA28B91FF48C57089E4D2436654AFA4ECAD0622\usbaaplrc.dll
+ 2009-08-17 07:57 . 2008-07-06 12:06 1676288 c:\windows\system32\dllcache\xpssvcs.dll
+ 2004-08-05 03:00 . 2009-08-06 19:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
+ 2006-12-08 00:02 . 2009-05-20 03:56 2458112 c:\windows\system32\dllcache\WMVCore.dll
- 2006-12-08 00:02 . 2008-06-18 05:03 2458112 c:\windows\system32\dllcache\WMVCore.dll
+ 2007-03-08 13:47 . 2009-08-14 12:19 1850112 c:\windows\system32\dllcache\win32k.sys
+ 2007-04-18 12:31 . 2009-08-29 07:36 1168384 c:\windows\system32\dllcache\urlmon.dll
+ 2004-08-05 03:00 . 2009-07-17 16:27 1435648 c:\windows\system32\dllcache\query.dll
- 2004-08-05 03:00 . 2006-06-22 05:06 1435648 c:\windows\system32\dllcache\query.dll
+ 2004-08-05 03:00 . 2009-06-03 19:27 1290752 c:\windows\system32\dllcache\quartz.dll
+ 2007-02-28 09:55 . 2009-08-04 12:51 2185984 c:\windows\system32\dllcache\ntoskrnl.exe
- 2007-02-28 09:16 . 2009-02-06 09:49 2020864 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2007-02-28 09:16 . 2009-08-04 12:02 2020864 c:\windows\system32\dllcache\ntkrpamp.exe
- 2007-02-28 08:15 . 2009-02-06 09:49 2062976 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2007-02-28 08:15 . 2009-08-04 12:02 2062976 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2007-02-28 09:53 . 2009-08-04 12:49 2142720 c:\windows\system32\dllcache\ntkrnlmp.exe
- 2007-02-28 09:53 . 2009-02-06 10:29 2142720 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2004-08-05 03:00 . 2009-07-31 04:57 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2007-05-16 15:12 . 2009-07-10 13:42 1315328 c:\windows\system32\dllcache\msoe.dll
+ 2007-05-04 12:29 . 2009-10-21 04:08 3598336 c:\windows\system32\dllcache\mshtml.dll
+ 2008-04-16 23:03 . 2009-08-29 07:36 6067200 c:\windows\system32\dllcache\ieframe.dll
+ 2008-04-16 23:03 . 2009-06-29 08:33 2452872 c:\windows\system32\dllcache\ieapfltr.dat
+ 2009-07-16 11:27 . 2007-05-16 15:45 3497832 c:\windows\system32\d3dx9_34.dll
+ 2009-07-16 11:27 . 2007-03-12 15:42 3495784 c:\windows\system32\d3dx9_33.dll
+ 2009-07-16 11:26 . 2006-09-28 15:05 2414360 c:\windows\system32\d3dx9_31.dll
+ 2009-07-16 11:26 . 2006-02-03 07:43 2332368 c:\windows\system32\d3dx9_29.dll
+ 2009-07-16 11:26 . 2005-07-22 18:59 2319568 c:\windows\system32\d3dx9_27.dll
+ 2009-07-16 11:26 . 2005-05-26 14:34 2297552 c:\windows\system32\d3dx9_26.dll
+ 2009-07-16 11:26 . 2005-03-18 16:19 2337488 c:\windows\system32\d3dx9_25.dll
+ 2009-07-16 11:26 . 2005-02-05 18:45 2222800 c:\windows\system32\d3dx9_24.dll
+ 2009-07-16 11:27 . 2007-05-16 15:45 1124720 c:\windows\system32\D3DCompiler_34.dll
+ 2009-07-16 11:27 . 2007-03-12 15:42 1123696 c:\windows\system32\D3DCompiler_33.dll
- 2008-04-02 06:38 . 2009-06-24 13:10 4079616 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-04-02 06:38 . 2009-12-01 22:41 4079616 c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-07-29 22:40 . 2008-07-29 22:40 1720824 c:\windows\Microsoft.NET\Framework\v3.5\vbc.exe
+ 2008-07-29 17:47 . 2008-07-29 17:47 1054208 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.dll
+ 2008-07-29 17:47 . 2008-07-29 17:47 1364992 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\SITSetup.dll
+ 2008-07-29 17:47 . 2008-07-29 17:47 1064448 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\gencomp.dll
+ 2008-07-29 22:40 . 2008-07-29 22:40 1548280 c:\windows\Microsoft.NET\Framework\v3.5\csc.exe
+ 2008-12-05 18:35 . 2008-12-05 18:35 1736528 c:\windows\Microsoft.NET\Framework\v3.0\WPF\wpfgfx_v0300.dll
+ 2008-07-29 20:10 . 2008-07-29 20:10 2637840 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsLexicons0009.dll
+ 2008-07-29 20:10 . 2008-07-29 20:10 4883464 c:\windows\Microsoft.NET\Framework\v3.0\WPF\NlsData0009.dll
+ 2008-12-05 19:12 . 2008-12-05 19:12 5931008 c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
- 2007-10-24 00:47 . 2007-10-24 00:47 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2008-07-25 10:16 . 2008-07-25 10:16 1344000 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
- 2007-10-24 00:47 . 2007-10-24 00:47 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-07-25 10:17 . 2008-07-25 10:17 1172472 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2008-11-25 03:59 . 2008-11-25 03:59 2048000 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2008-07-25 10:17 . 2008-07-25 10:17 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2008-11-25 03:59 . 2008-11-25 03:59 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2008-07-25 10:17 . 2008-07-25 10:17 3149824 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2008-07-25 10:17 . 2008-07-25 10:17 5062656 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2008-07-25 10:17 . 2008-07-25 10:17 2933248 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2009-08-07 22:51 . 2009-08-07 22:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2009-08-07 22:51 . 2009-08-07 22:51 4546560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2008-07-25 10:16 . 2008-07-25 10:16 1163768 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2008-05-28 00:35 . 2008-05-28 00:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 20:35 . 2007-04-13 20:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 20:35 . 2007-04-13 20:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2008-05-28 00:35 . 2008-05-28 00:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2008-05-27 23:48 . 2008-05-27 23:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2007-04-13 19:57 . 2007-04-13 19:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2007-04-13 19:57 . 2007-04-13 19:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-27 23:48 . 2008-05-27 23:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-27 23:43 . 2008-05-27 23:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2007-04-13 19:50 . 2007-04-13 19:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2009-07-16 11:26 . 2004-12-01 14:53 2846720 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-16 11:26 . 2004-09-29 11:38 2676224 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll
- 2007-08-07 21:58 . 2009-06-14 21:10 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2007-08-07 21:58 . 2009-11-14 16:28 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
- 2007-08-07 21:58 . 2009-06-14 21:10 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
+ 2007-08-07 21:58 . 2009-11-14 16:28 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
- 2009-01-15 10:23 . 2009-06-14 21:12 1172240 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-01-15 10:23 . 2009-11-14 16:29 1172240 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-01-15 10:23 . 2009-11-14 16:29 1165584 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\accicons.exe
- 2009-01-15 10:23 . 2009-06-14 21:12 1165584 c:\windows\Installer\{91120000-002E-0000-0000-0000000FF1CE}\accicons.exe
+ 2007-05-10 12:45 . 2007-05-10 12:45 8069464 c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8173\OWC11.DLL
+ 2008-08-25 22:50 . 2008-08-25 22:50 2585592 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\VBE6.DLL
+ 2009-03-06 03:01 . 2009-03-06 03:01 2335648 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\STSLIST.DLL
+ 2008-11-10 02:41 . 2008-11-10 02:41 2014584 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\PPTVIEW.EXE
+ 2009-04-02 13:07 . 2009-04-02 13:07 6540120 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OSETUP.DLL
+ 2009-03-06 04:55 . 2009-03-06 04:55 7036800 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OFFOWC.DLL
+ 2009-04-03 18:21 . 2009-04-03 18:21 8543096 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OARTCONV.DLL
+ 2008-10-24 23:45 . 2008-10-24 23:45 1518504 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\NLSD0000.DLL
+ 2009-04-02 12:01 . 2009-04-02 12:01 6637936 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSORES.DLL
+ 2009-03-06 04:26 . 2009-03-06 04:26 5291376 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\IPEDITOR.DLL
+ 2009-04-02 21:44 . 2009-04-02 21:44 2532224 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\GRAPH.EXE
+ 2008-10-25 03:38 . 2008-10-25 03:38 1682800 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\FPSRVUTL.DLL
+ 2009-03-06 02:47 . 2009-03-06 02:47 1759136 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\ACECORE.DLL
+ 2006-10-26 14:47 . 2006-10-26 14:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\NLSD0000.DLL
+ 2007-08-07 21:57 . 2007-08-07 21:57 1276720 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EXCELPIA.DLL
+ 2009-11-08 23:10 . 2009-08-29 07:36 3598336 c:\windows\ie7updates\KB976749-IE7\mshtml.dll
+ 2009-10-17 16:16 . 2009-06-29 16:12 1159680 c:\windows\ie7updates\KB974455-IE7\urlmon.dll
+ 2009-10-17 16:16 . 2009-07-19 13:33 3597824 c:\windows\ie7updates\KB974455-IE7\mshtml.dll
+ 2009-10-17 16:16 . 2009-07-19 13:32 6067200 c:\windows\ie7updates\KB974455-IE7\ieframe.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 1159680 c:\windows\ie7updates\KB972260-IE7\urlmon.dll
+ 2009-08-02 16:37 . 2009-04-29 04:56 3596288 c:\windows\ie7updates\KB972260-IE7\mshtml.dll
+ 2009-08-02 16:37 . 2009-04-29 04:55 6066176 c:\windows\ie7updates\KB972260-IE7\ieframe.dll
+ 2009-08-02 16:37 . 2008-07-09 14:25 2455488 c:\windows\ie7updates\KB972260-IE7\ieapfltr.dat
+ 2007-02-28 09:55 . 2009-08-04 12:51 2185984 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2007-02-28 09:16 . 2009-08-04 12:02 2020864 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2007-02-28 09:16 . 2009-02-06 09:49 2020864 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2007-02-28 08:15 . 2009-08-04 12:02 2062976 c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2007-02-28 08:15 . 2009-02-06 09:49 2062976 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2007-02-28 09:53 . 2009-08-04 12:49 2142720 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2007-02-28 09:53 . 2009-02-06 10:29 2142720 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2009-10-17 16:14 . 2009-10-17 16:14 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_5900fcfd\System.dll
+ 2009-10-17 16:13 . 2009-10-17 16:13 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_317312c5\System.dll
+ 2009-10-17 16:13 . 2009-10-17 16:13 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_ec8adecf\System.Xml.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_406b1815\System.Xml.dll
+ 2009-10-17 16:13 . 2009-10-17 16:13 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_10e22e33\System.Windows.Forms.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_01672bc5\System.Windows.Forms.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_ebeb5181\System.Drawing.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_f4d2bca5\System.Design.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_aee88048\System.Design.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_d1d6f9e5\mscorlib.dll
+ 2009-10-17 16:14 . 2009-10-17 16:14 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_62417777\mscorlib.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 2102272 c:\windows\assembly\NativeImages_v2.0.50727_32\Xceed.Grid\eafd1fe2672e600c6a61bbcc237c62f8\Xceed.Grid.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\ae4a3cefdeb4b2fbdb05fd56d01dc8f0\WindowsLive.Writer.PostEditor.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 1105920 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\9825bbe6bf20ebcda60cefe422eede2c\WindowsLive.Writer.ApplicationFramework.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\376ae72881aea66d17b2e2b7ea3e93f3\WindowsLive.Writer.CoreServices.ni.dll
+ 2009-10-17 17:50 . 2009-10-17 17:50 3313664 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\204d6e5b335134f23ca37638b9227ecf\WindowsBase.ni.dll
+ 2009-10-17 17:57 . 2009-10-17 17:57 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\0f2ed6a204eb13841e99b77025464afc\UIAutomationClientsideProviders.ni.dll
+ 2009-10-17 17:49 . 2009-10-17 17:49 7868416 c:\windows\assembly\NativeImages_v2.0.50727_32\System\3de5bd01124463d7862bd173af90bc83\System.ni.dll
+ 2009-10-17 17:57 . 2009-10-17 17:57 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5913d3f81e77194ec833991b1047a532\System.Xml.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\fa48917b13629d8effa80dd4a2f2973d\System.WorkflowServices.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\6fe66ee6f3c81996bc148f1ebe7ec030\System.Workflow.Runtime.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\9d0b61f2f1ebdc300bd970f594c422ef\System.Workflow.ComponentModel.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\65328898148a720d394f802f192fc2a0\System.Workflow.Activities.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\ea07ac791bb5cb9f83679e3dd1a0c0cc\System.Web.Services.ni.dll
+ 2009-10-17 19:14 . 2009-10-17 19:14 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\29e2f8b1fb691ced973acf49fcee6ec1\System.Web.Mobile.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 2403328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\981dea02bc63c0c083e335adf9018788\System.Web.Extensions.ni.dll
+ 2009-10-17 17:56 . 2009-10-17 17:56 1917440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\99594bae1d022502925f5b9dfcdaae9a\System.Speech.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\e182695d05ea57257568bc5f3208aca7\System.ServiceModel.Web.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 2338304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\67ad55827f2542552b576170f0a7dc56\System.Runtime.Serialization.ni.dll
+ 2009-10-17 17:55 . 2009-10-17 17:55 1035264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\e5313735a40c0800f116e27fba4754db\System.Printing.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 1056768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\c3b18fef5c6dc3bcdbe5df699fd21a55\System.IdentityModel.ni.dll
+ 2009-10-17 17:55 . 2009-10-17 17:55 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\abb2ac7e08bee026f857d8fa36f9fe6f\System.Drawing.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\f47ebb9db460874b1bcbfc391dc970b1\System.DirectoryServices.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\c94a427baa7683f4221b91f90c18461b\System.Deployment.ni.dll
+ 2009-10-17 17:53 . 2009-10-17 17:53 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\694c07365e0fd6bba0bc304d4d2404a7\System.Data.ni.dll
+ 2009-10-17 19:07 . 2009-10-17 19:07 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\272152f0cc139490729e215611a4b244\System.Data.SqlXml.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\112a48e34620a0210eb850040da8a31b\System.Data.Services.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\ffa1018e8022964eb51025c2c6d8727a\System.Data.OracleClient.ni.dll
+ 2009-10-17 17:53 . 2009-10-17 17:53 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\32788c58ff9f8324460604cf1fe7681b\System.Data.Linq.ni.dll
+ 2009-10-17 19:13 . 2009-10-17 19:13 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\9012cac7819660f61f1c69cf8e4f2ccf\System.Data.Entity.ni.dll
+ 2009-10-17 17:52 . 2009-10-17 17:52 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\c0a42d2ad8a4078040b334f6770ea11f\System.Core.ni.dll
+ 2009-10-17 17:52 . 2009-10-17 17:52 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\954685c29689d2a6126ceca1fd55e904\ReachFramework.ni.dll
+ 2009-10-17 17:52 . 2009-10-17 17:52 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\a3a6f52ce1d09a7bdccc8e7fc664792d\PresentationUI.ni.dll
+ 2009-10-17 17:49 . 2009-10-17 17:49 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\f906701365083c1473db31519147e263\PresentationBuildTasks.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6eee9b772b6d12d3dbd82f118c2ab2e5\Microsoft.VisualBasic.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\f19e9b439636d0744597fff1331cad04\Microsoft.Transactions.Bridge.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 1749504 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\c2294f558f48dd2bb57c33a069ca7570\Microsoft.Office.Interop.Word.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 2267648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Office.In#\7c52a30b3e0b3ad539d73014cc1aa287\Microsoft.Office.Interop.Outlook.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\5b1af7b5be24c7ace065fe1c81c2b650\Microsoft.JScript.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 1039872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.M#\c95037bd8b2bfd0484e2d8221125e822\Microsoft.Interop.Mapi.Impl.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 1486848 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\fe4adc458a6e257d67055a7c24d0c960\Microsoft.Interop.eCRM.Word.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 2479104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Interop.e#\29b60aa99eca28e3538ff8f3267673f7\Microsoft.Interop.eCRM.Excel.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 2835968 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\e096e6c9fd3e8948dd5a8a799c336bf8\Microsoft.BusinessSolutions.eCRM.Reports2.ni.dll
+ 2009-10-17 19:09 . 2009-10-17 19:09 2358784 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\6a2b75bc0bd8e12fcb5d976719cb2318\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 4545024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.BusinessS#\0624565ab450cf08c39e3e938dabc379\Microsoft.BusinessSolutions.eCRM.OutlookAddIn.CSUtils.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\9eec1cc7ac37e0c7f3205e8156149c5a\Microsoft.Build.Tasks.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\28c0730288453d57d5dcd62903c4d31b\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2009-10-17 19:12 . 2009-10-17 19:12 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5dd4f58999eed37c12aee7ea9f9863ac\Microsoft.Build.Engine.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 3833344 c:\windows\assembly\NativeImages_v2.0.50727_32\BusinessLayer\3c0338dbbfb2eba0977ee6ed8a6052f8\BusinessLayer.ni.dll
+ 2009-10-17 19:10 . 2009-10-17 19:10 1526272 c:\windows\assembly\NativeImages_v2.0.50727_32\BCMRes\4360f10f50a4aebf7e868de284e1a072\BCMRes.ni.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 1245184 c:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 1630208 c:\windows\assembly\GAC_MSIL\System.Workflow.ComponentModel\3.0.0.0__31bf3856ad364e35\System.Workflow.ComponentModel.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 1138688 c:\windows\assembly\GAC_MSIL\System.Workflow.Activities\3.0.0.0__31bf3856ad364e35\System.Workflow.Activities.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2009-08-17 08:09 . 2009-08-17 08:09 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2009-08-17 08:08 . 2009-08-17 08:08 5931008 c:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2009-08-17 08:01 . 2009-08-17 08:01 2879488 c:\windows\assembly\GAC_MSIL\System.Data.Entity\3.5.0.0__b77a5c561934e089\System.Data.Entity.dll
+ 2009-08-17 08:08 . 2009-08-17 08:08 5283840 c:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2009-10-17 16:22 . 2009-10-17 16:22 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2009-08-17 07:58 . 2009-08-17 07:58 4210688 c:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2009-10-17 16:23 . 2009-10-17 16:23 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2009-10-17 16:13 . 2009-10-17 16:13 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2008-04-15 07:41 . 2008-04-15 07:41 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2009-10-17 16:13 . 2009-10-17 16:13 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2008-04-15 07:41 . 2008-04-15 07:41 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-11-07 15:34 . 2009-11-07 15:34 1279848 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-07-23 11:27 . 2009-07-23 11:27 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2009-11-29 23:24 . 2008-09-04 16:42 1106944 c:\windows\$NtUninstallKB973687$\msxml3.dll
+ 2009-08-14 20:01 . 2007-05-16 15:12 1314816 c:\windows\$NtUninstallKB973354$\msoe.dll
+ 2009-07-19 23:04 . 2008-12-20 22:43 1287680 c:\windows\$NtUninstallKB971633$\quartz.dll
+ 2009-10-17 16:11 . 2009-02-06 10:29 2142720 c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
+ 2009-10-17 16:11 . 2009-02-06 09:49 2020864 c:\windows\$NtUninstallKB971486$\ntkrpamp.exe
+ 2009-10-17 16:11 . 2009-02-06 09:49 2020864 c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
+ 2009-10-17 16:11 . 2009-02-06 10:29 2142720 c:\windows\$NtUninstallKB971486$\ntkrnlmp.exe
+ 2009-11-14 16:17 . 2009-04-17 09:58 1846656 c:\windows\$NtUninstallKB969947$\win32k.sys
+ 2009-10-17 16:17 . 2006-06-22 05:06 1435648 c:\windows\$NtUninstallKB969059$\query.dll
+ 2009-09-12 22:11 . 2008-06-18 05:03 2458112 c:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
+ 2009-10-21 03:59 . 2009-10-21 03:59 3602432 c:\windows\$hf_mig$\KB976749-IE7\SP3QFE\mshtml.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 1170944 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\urlmon.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 3600384 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtml.dll
+ 2009-08-29 07:31 . 2009-08-29 07:31 6070784 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieframe.dll
+ 2009-10-14 16:32 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\ieapfltr.dat
+ 2009-11-25 09:04 . 2009-07-31 04:24 1447424 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml6.dll
+ 2009-11-25 09:04 . 2009-07-31 04:24 1172480 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml3.dll
+ 2009-07-31 10:05 . 2009-07-31 10:05 1372672 c:\windows\$hf_mig$\KB973687\SP3GDR\msxml6.dll
+ 2009-11-25 09:04 . 2009-07-31 04:35 1172480 c:\windows\$hf_mig$\KB973687\SP3GDR\msxml3.dll
+ 2009-11-25 09:04 . 2009-07-31 04:36 1172480 c:\windows\$hf_mig$\KB973687\SP2QFE\msxml3.dll
+ 2009-07-10 17:54 . 2009-07-10 17:54 1315328 c:\windows\$hf_mig$\KB973354\SP3QFE\msoe.dll
+ 2009-08-12 08:47 . 2009-07-10 13:27 1315328 c:\windows\$hf_mig$\KB973354\SP3GDR\msoe.dll
+ 2009-08-12 08:47 . 2009-07-10 13:36 1315328 c:\windows\$hf_mig$\KB973354\SP2QFE\msoe.dll
+ 2009-06-29 16:23 . 2009-06-29 16:23 1163264 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\urlmon.dll
+ 2009-07-19 13:31 . 2009-07-19 13:31 3600384 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll
+ 2009-07-19 13:31 . 2009-07-19 13:31 6070784 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieframe.dll
+ 2009-06-29 08:33 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB972260-IE7\SP3QFE\ieapfltr.dat
+ 2009-06-03 19:12 . 2009-06-03 19:12 1291264 c:\windows\$hf_mig$\KB971633\SP3QFE\quartz.dll
+ 2009-06-03 19:09 . 2009-06-03 19:09 1291264 c:\windows\$hf_mig$\KB971633\SP3GDR\quartz.dll
+ 2009-06-03 19:24 . 2009-06-03 19:24 1291264 c:\windows\$hf_mig$\KB971633\SP2QFE\quartz.dll
+ 2009-10-14 16:29 . 2009-08-04 13:56 2189312 c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
+ 2009-10-14 16:29 . 2009-08-04 13:17 2023936 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrpamp.exe
+ 2009-08-04 17:47 . 2009-08-04 17:47 2066176 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
+ 2009-10-14 16:29 . 2009-08-04 13:54 2145280 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlmp.exe
+ 2009-08-04 19:44 . 2009-08-04 19:44 2189184 c:\windows\$hf_mig$\KB971486\SP3GDR\ntoskrnl.exe
+ 2009-10-14 16:29 . 2009-08-04 14:20 2023936 c:\windows\$hf_mig$\KB971486\SP3GDR\ntkrpamp.exe
+ 2009-10-14 16:29 . 2009-08-04 14:20 2066048 c:\windows\$hf_mig$\KB971486\SP3GDR\ntkrnlpa.exe
+ 2009-10-14 16:29 . 2009-08-04 15:13 2145280 c:\windows\$hf_mig$\KB971486\SP3GDR\ntkrnlmp.exe
+ 2009-08-14 12:19 . 2009-08-14 12:19 1859712 c:\windows\$hf_mig$\KB969947\SP3QFE\win32k.sys
+ 2009-08-14 13:21 . 2009-08-14 13:21 1850624 c:\windows\$hf_mig$\KB969947\SP3GDR\win32k.sys
+ 2009-08-14 11:22 . 2009-08-14 11:22 1859328 c:\windows\$hf_mig$\KB969947\SP2QFE\win32k.sys
+ 2009-07-17 16:01 . 2009-07-17 16:01 1435648 c:\windows\$hf_mig$\KB969059\SP3QFE\query.dll
+ 2009-07-17 16:22 . 2009-07-17 16:22 1435648 c:\windows\$hf_mig$\KB969059\SP3GDR\query.dll
+ 2009-07-17 16:10 . 2009-07-17 16:10 1435648 c:\windows\$hf_mig$\KB969059\SP2QFE\query.dll
+ 2004-08-05 03:00 . 2009-07-13 22:43 10841088 c:\windows\system32\wmp.dll
+ 2008-04-16 22:55 . 2009-11-05 17:36 26768832 c:\windows\system32\MRT.exe
+ 2004-08-05 03:00 . 2009-07-13 22:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2009-04-03 18:21 . 2009-04-03 18:21 16037736 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\OART.DLL
+ 2009-04-03 18:46 . 2009-04-03 18:46 17314688 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSO.DLL
+ 2009-03-06 02:37 . 2009-03-06 02:37 10222432 c:\windows\Installer\$PatchCache$\Managed\00002119E20000000000000000F01FEC\12.0.6425\MSACCESS.EXE
+ 2009-10-17 17:56 . 2009-10-17 17:56 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2ea8d76f015817db1607075812b555f\System.Windows.Forms.ni.dll
+ 2009-10-17 19:08 . 2009-10-17 19:08 11796992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\5cea03cfb008f2eac1439a9905467f37\System.Web.ni.dll
+ 2009-10-17 19:11 . 2009-10-17 19:11 17317888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\06d6eab93282d2b136a377bd50b7c5a9\System.ServiceModel.ni.dll
+ 2009-10-17 17:54 . 2009-10-17 17:54 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\8b82e08c008924d51833cb0884bcbfc5\System.Design.ni.dll
+ 2009-10-17 17:51 . 2009-10-17 17:51 14327808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\58c7ac6b6054038dc9346d7ec8e32b4c\PresentationFramework.ni.dll
+ 2009-10-17 17:50 . 2009-10-17 17:50 12216320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\94badbd64df59de7da249f71da38b1c2\PresentationCore.ni.dll
+ 2009-10-17 17:48 . 2009-10-17 17:48 11486720 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7124a40b9998f7b63c86bd1a2125ce26\mscorlib.ni.dll
+ 2009-08-14 20:06 . 2008-11-11 18:34 10838016 c:\windows\$NtUninstallKB973540_WM9L$\wmp.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\progra~1\WINDOW~4\MESSEN~1\msnmsgr.exe" [2009-02-06 3885408]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2008-11-24 2356088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 761945]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-12 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-01-08 68640]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"Acer ePresentation HPD"="c:\acer\Empowering Technology\ePresentation\ePresentation.exe" [2007-03-02 208896]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"SamsungPCSuiteTrayApplication"="c:\program files\Samsung\Samsung PC Studio 7\LaunchApplication.exe" [2008-08-07 278016]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-11-12 782336]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-06-24 69632]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-05-28 16132608]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]
"Samsung.PCSync"="c:\program files\Samsung\Samsung PC Studio 7\PcSync2.exe" [2007-12-04 1241088]

c:\documents and settings\The User\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2009-7-20 576000]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Acer Empowering Technology.lnk - c:\acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2008-4-2 45056]
Update Agent.lnk - c:\program files\3\3Connect\AutoUpdateSrv.exe [2009-2-28 479232]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Shell"="Explorer.exe rundll32.exe vjub.bgo oqviy"
"Userinit"="c:\windows\system32\userinit.exe,c:\program files\Common Files\svchost.exe,"

[HKLM\~\startupfolder\C:^Documents and Settings^The User^Start Menu^Programs^Startup^Microsoft Office Groove.lnk]
path=c:\documents and settings\The User\Start Menu\Programs\Startup\Microsoft Office Groove.lnk
backup=c:\windows\pss\Microsoft Office Groove.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The User^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\documents and settings\The User\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 7.0.1.321\\English\\setup.exe"=
"c:\\Program Files\\Kontiki\\KService.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Huawei technologies\\Huawei UMTS Data Card\\3 USB Modem.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6346:TCP"= 6346:TCP:limewire
"3389:TCP"= 3389:TCP:Remote Desktop

R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [02/07/2008 13:07 82696]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [18/03/2009 01:40 55152]
R2 mdvrmng;Mobile IP Route Manager;c:\windows\system32\drivers\mdvrmng.sys [28/02/2009 12:25 10240]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [12/08/2008 18:40 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [14/08/2008 18:54 104456]
S2 BTWSp50;BTWSp50 NDIS Protocol Driver;c:\windows\system32\Drivers\BTWSp50.sys –> c:\windows\system32\Drivers\BTWSp50.sys [?]
S2 RPCHGM;Remote Procedure Call (HGM); [x]
S3 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [16/09/2008 13:03 169312]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [17/07/2008 13:06 118784]
S3 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service;c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [11/01/2008 17:50 30312]
S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 19:08 533360]
S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [14/04/2006 18:07 28933976]
S3 nmwcdsa;Samsung USB Phone Parent;c:\windows\system32\drivers\nmwcdsa.sys [13/01/2009 14:32 135680]
S3 nmwcdsac;Samsung USB Generic;c:\windows\system32\drivers\nmwcdsac.sys [13/01/2009 14:32 8320]
S3 nmwcdsacj;Samsung USB Port;c:\windows\system32\drivers\nmwcdsacj.sys [13/01/2009 14:32 12288]
S3 nmwcdsacm;Samsung USB Modem;c:\windows\system32\drivers\nmwcdsacm.sys [13/01/2009 14:32 12288]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1df541a5-0586-11de-9a42-001f3a08e774}]
\Shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7c8eae6a-8382-11de-ad58-001d721c0ad3}]
\Shell\AutoRun\command - F:\xsdelect.com
\Shell\explore\Command - F:\xsdelect.com
\Shell\open\Command - F:\xsdelect.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{eafde83c-b827-11de-ada4-001f3a08e774}]
\Shell\Auto\command - udisk.exe
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL udisk.exe

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{W0YMS373-5163-DX3Q-VP05-4G3PIC12Q4GR}]
c:\program files\Common Files\svchost.exe -ac
.
Contents of the 'Scheduled Tasks' folder

2009-11-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2016-04-12 c:\windows\Tasks\User_Feed_Synchronization-{BD01A600-5529-4904-B81B-59F2C534B718}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 17:36]

2016-04-12 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-04-24 21:18]
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
HKLM-Run-NBKeyScan - c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
HKLM-Run-nvcpl - c:\program files\Common Files\svchost.exe


.
——- Supplementary Scan ——-
.
uStart Page = hxxp://search.mywebsearch.com/mywebsearch/default.jhtml?ptnrS=ZUxdm567YYGB&ptb=uG5WZHpD41TBpwebEtyzJQ
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
uInternet Connection Wizard,ShellNext = hxxp://en.uk.acer.yahoo.com/
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride =
IE: &Search - http://edits.mywebsearch.com/toolbaredits/…?p=ZUxdm567YYGB
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
FF - ProfilePath -
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2016-04-12 01:36
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit = c:\windows\system32\userinit.exe,c:\program files\Common Files\svchost.exe,???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
nvcpl = c:\program files\Common Files\svchost.exe??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'Explorer.exe'(5772)
c:\windows\system32\WININET.dll
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\MFC71U.DLL
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\hnetcfg.dll
c:\program files\Nokia\Nokia PC Suite 6\phonebrowser.dll
c:\program files\Nokia\Nokia PC Suite 6\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_eng.nlr
c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
c:\program files\Samsung\Samsung PC Studio 7\PhoneBrowser.dll
c:\program files\Samsung\Samsung PC Studio 7\PCSCM_Samsung.dll
c:\program files\Samsung\Samsung PC Studio 7\Lang\PhoneBrowser_eng.nlr
c:\program files\Samsung\Samsung PC Studio 7\Resource\PhoneBrowser_Samsung.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Bonjour\mdnsNSP.dll
.
———————— Other Running Processes ————————
.
c:\program files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
c:\program files\BitDefender\BitDefender 2009\vsserv.exe
c:\windows\system32\rundll32.exe
c:\program files\Microsoft Office\Office12\WINWORD.EXE
c:\program files\Launch Manager\LManager.exe
c:\program files\Windows Live\Messenger\msnmsgr.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\BitDefender\BitDefender 2009\seccenter.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
c:\program files\Kontiki\KService.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\acer\Empowering Technology\eLock\Service\eLockServ.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\igfxext.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\wbem\unsecapp.exe
c:\docume~1\THEUSE~1\LOCALS~1\Temp\RtkBtMnt.exe
c:\windows\system32\taskmgr.exe
c:\program files\Microsoft Office\Office12\WINWORD.EXE
.
**************************************************************************
.
Completion time: 2016-04-12 1:46 - machine was rebooted
ComboFix-quarantined-files.txt 2016-04-12 00:46
ComboFix2.txt 2009-06-24 15:32

Pre-Run: 2,866,520,064 bytes free
Post-Run: 2,873,270,272 bytes free

2177 — E O F — 2016-04-12 00:00
Post #8
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:49:47, on 12/04/2016
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\WINDOW~4\MESSEN~1\msnmsgr.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\3\3Connect\AutoUpdateSrv.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\THEUSE~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.mywebsearch.com/mywebsearch/…D41TBpwebEtyzJQ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://en.uk.acer.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe rundll32.exe vjub.bgo oqviy
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Program Files\Common Files\svchost.exe,
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: EndNote Web - {82D2E569-25A7-4E4D-9FA3-C5025B4B7912} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EndNote Web - {945C8270-A848-11D5-A805-00B0D092F45B} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\..\Run: [Preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SamsungPCSuiteTrayApplication] C:\Program Files\Samsung\Samsung PC Studio 7\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\PROGRA~1\WINDOW~4\MESSEN~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Samsung.PCSync] C:\Program Files\Samsung\Samsung PC Studio 7\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Update Agent.lnk = ?
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/…?p=ZUxdm567YYGB
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Plant%20Tycoon/Images/stg_drm.ocx
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.6.108.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1208204733746
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Plant%20Tycoon/Images/armhelper.ocx
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Procedure Call (HGM) (RPCHGM) - Unknown owner - (no file)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

–
End of file - 13827 bytes
Post #9
It looks like you ran combofix prior to posting in this forum. The link I provided should have downloaded the latest version.

Before we remove files and entries manually, run this program.


Please download Malwarebytes from Here or Here

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Post the report and also a new HJT log please
Post #10
Cheers! ComboFix 09-12-03.04 - The User 03/12/2009 8:51.4.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.602 [GMT 0:00] Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\The User\Application Data\Desktopicon c:\documents and settings\The User\Application Data\Desktopicon\eBayShortcuts.exe c:\documents and settings\The User\Application Data\Desktopicon\kern.dll c:\windows\system32\logs . ((((((((((((((((((((((((( Files Created from 2009-11-03 to 2009-12-03 ))))))))))))))))))))))))))))))) . 2016-04-12 01:00 . 2009-12-01 02:00 22016 —-a-w- C:\load.exe 2016-04-12 00:29 . 2016-04-12 00:46 ——– d—–w- C:\ComboFfffix 2016-04-12 00:12 . 2016-04-12 00:12 ——– d—–w- c:\documents and settings\The User\Local Settings\Application Data\Grubby Games 2009-12-03 01:22 . 2016-04-12 00:49 ——– d—–w- c:\program files\trend micro 2009-12-03 01:22 . 2009-12-03 01:22 ——– d—–w- C:\rsit 2009-12-01 20:50 . 2009-12-01 02:00 65024 —-a-w- C:\ejikego.exe 2009-12-01 19:52 . 2009-12-01 22:43 ——– d—–w- c:\documents and settings\LocalService\Application Data\EndNote 2009-12-01 19:50 . 2009-12-01 11:35 ——– d—–w- c:\program files\My Tribe 2009-12-01 15:20 . 2009-12-01 15:20 ——– d—–w- c:\windows\Virtual Villagers - The Secret City 2009-12-01 11:39 . 2009-12-01 11:39 ——– d—–w- c:\documents and settings\HelpAssistant\WINSETUP 2009-12-01 11:39 . 2009-12-01 11:39 ——– d—–w- c:\documents and settings\HelpAssistant\WINDOWS 2009-12-01 11:39 . 2009-12-01 11:39 ——– d—–w- c:\documents and settings\HelpAssistant\UserData 2009-12-01 11:39 . 2009-12-01 09:15 ——– d—–w- c:\documents and settings\HelpAssistant\Tracing 2009-12-01 11:39 . 1997-01-29 14:10 26112 —-a-r- c:\documents and settings\HelpAssistant\SETUP.EXE 2009-12-01 11:39 . 2009-12-01 11:39 ——– d—–w- c:\documents and settings\HelpAssistant\REDIST 2009-12-01 11:39 . 2009-12-01 11:39 ——– d—–w- c:\documents and settings\HelpAssistant\Phone Browser 2009-12-01 11:39 . 2009-12-01 11:39 ——– d—–w- c:\documents and settings\HelpAssistant\Patch 2009-12-01 11:39 . 2009-12-01 11:39 ——– d—–w- c:\documents and settings\HelpAssistant\NTI-Shadow 2009-12-01 11:27 . 1997-12-19 12:12 832000 —-a-r- c:\documents and settings\HelpAssistant\Ip.exe 2009-12-01 11:27 . 2009-12-01 11:27 ——– d—–w- c:\documents and settings\HelpAssistant\HOSP 2009-12-01 11:27 . 2009-11-27 19:33 103784 —-a-w- c:\documents and settings\HelpAssistant\GoToAssistDownloadHelper.exe 2009-12-01 11:18 . 2009-12-03 08:49 ——– d—–w- c:\documents and settings\HelpAssistant 2009-12-01 02:00 . 2009-12-01 02:00 19968 —-a-w- C:\ijoe.exe 2009-11-30 17:53 . 2009-11-30 17:53 ——– d—–w- c:\documents and settings\All Users\Application Data\Merscom 2009-11-30 17:53 . 2009-11-30 17:53 ——– d—–w- c:\program files\Common Files\SWF Studio 2009-11-30 17:53 . 2009-12-01 11:41 ——– d-sh–w- c:\documents and settings\The User\Local Settings\Application Data\.# 2009-11-30 17:52 . 2009-11-30 17:52 ——– d—–w- c:\program files\Merscom 2009-11-30 17:21 . 2009-11-30 17:21 ——– d—–w- c:\program files\BFG 2009-11-30 16:03 . 2009-11-30 16:03 ——– d—–w- c:\documents and settings\All Users\Application Data\BigFishGamesCache 2009-11-30 15:03 . 2009-11-30 15:03 ——– d—–w- c:\windows\Virtual Families 2009-11-28 14:51 . 2009-11-28 14:51 ——– d—–w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage 2009-11-25 08:53 . 2009-10-26 10:21 94208 —-a-w- c:\documents and settings\The User\Application Data\Mozilla\Firefox\Profiles\qftgx7ko.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\ebayAccessComponent.dll 2009-11-25 08:53 . 2009-10-26 10:21 50176 —-a-w- c:\documents and settings\The User\Application Data\Mozilla\Firefox\Profiles\qftgx7ko.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\ebayShortcutMaker.dll 2009-11-25 08:53 . 2009-10-20 13:33 545280 —-a-w- c:\documents and settings\The User\Application Data\Mozilla\Firefox\Profiles\qftgx7ko.default\extensions\[removed]\libs\PicLensHelper.exe 2009-11-25 08:53 . 2009-10-20 13:33 4716544 —-a-w- c:\documents and settings\The User\Application Data\Mozilla\Firefox\Profiles\qftgx7ko.default\extensions\[removed]\components\cooliris.dll 2009-11-25 08:53 . 2009-10-20 13:33 344064 —-a-w- c:\documents and settings\The User\Application Data\Mozilla\Firefox\Profiles\qftgx7ko.default\extensions\[removed]\libs\LaunchCooliris.exe 2009-11-25 08:53 . 2009-10-20 13:33 153600 —-a-w- c:\documents and settings\The User\Application Data\Mozilla\Firefox\Profiles\qftgx7ko.default\extensions\[removed]\plugins\npcoolirisplugin.dll 2009-11-25 08:53 . 2009-10-20 13:33 103424 —-a-w- c:\documents and settings\The User\Application Data\Mozilla\Firefox\Profiles\qftgx7ko.default\extensions\[removed]\libs\pixomatic.dll 2009-11-23 17:41 . 2009-11-23 22:49 ——– d—–w- c:\documents and settings\The User\Local Settings\Application Data\rdalaw 2009-11-20 21:25 . 2009-11-20 21:25 77592 —ha-w- c:\windows\system32\mlfcache.dat 2009-11-15 21:44 . 2009-11-15 21:44 ——– d–h–w- c:\windows\PIF . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2016-04-12 00:45 . 2009-02-04 13:00 ——– d—–w- c:\documents and settings\The User\Application Data\EndNote 2009-12-03 09:15 . 2008-05-03 21:42 ——– d—–w- c:\documents and settings\All Users\Application Data\Kontiki 2009-12-03 01:23 . 2008-05-07 14:04 ——– d—–w- c:\documents and settings\The User\Application Data\uTorrent 2009-12-01 11:41 . 2009-03-17 16:26 ——– d—a-w- c:\documents and settings\All Users\Application Data\TEMP 2009-12-01 09:37 . 2009-06-24 13:08 81984 —-a-w- c:\windows\system32\bdod.bin 2009-11-29 23:23 . 2007-08-07 22:02 ——– d—–w- c:\program files\Microsoft SQL Server 2009-11-27 19:33 . 2009-10-17 13:54 103784 —-a-w- c:\documents and settings\The User\GoToAssistDownloadHelper.exe 2009-11-23 22:19 . 2008-07-28 11:12 8224 —-a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT 2009-11-14 16:29 . 2007-08-07 21:58 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help 2009-11-13 12:42 . 2008-04-14 19:07 ——– d—–w- c:\program files\MediaMonkey 2009-11-07 15:45 . 2008-04-02 06:41 96528 —-a-w- c:\documents and settings\The User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-11-07 15:34 . 2007-08-07 21:57 ——– d—–w- c:\program files\Microsoft Works 2009-11-07 15:13 . 2008-05-03 17:49 ——– d—–w- c:\program files\Doblon 2009-11-02 09:46 . 2009-11-02 09:43 3532 —-a-w- C:\drmHeader.bin 2009-10-22 19:02 . 2009-10-08 14:28 ——– d—–w- c:\program files\ResumeMaker 2009-10-22 18:46 . 2009-10-22 18:46 ——– d—–w- c:\program files\CV Writer 2009-10-17 13:54 . 2009-10-17 13:54 ——– d—–w- c:\documents and settings\All Users\Application Data\Citrix 2009-10-17 11:10 . 2009-10-17 11:10 3638 —-a-r- c:\documents and settings\The User\Application Data\Microsoft\Installer\{DFC6573E-124D-4026-BFA4-B433C9D3FF21}\_2cd672ae.exe 2009-10-17 11:10 . 2009-10-17 11:10 ——– d—–w- c:\program files\Alex Feinman 2009-10-17 08:58 . 2009-10-17 08:58 1924440 —-a-w- c:\documents and settings\The User\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe 2009-10-09 10:30 . 2009-10-09 10:30 264776 —-a-w- c:\windows\system32\bda5A9.tmp 2009-10-08 15:05 . 2009-10-08 15:05 ——– d—–w- c:\documents and settings\The User\Application Data\Individual Software 2009-10-08 14:28 . 2009-10-08 14:28 ——– d—–w- c:\documents and settings\All Users\Application Data\Individual Software 2009-10-07 11:31 . 2009-10-07 11:30 ——– d—–w- c:\program files\iTunes 2009-10-07 11:30 . 2009-10-07 11:30 ——– d—–w- c:\program files\iPod 2009-10-07 11:30 . 2008-07-15 21:42 ——– d—–w- c:\program files\Common Files\Apple 2009-10-07 11:19 . 2009-10-07 11:19 79144 —-a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.1.8\SetupAdmin.exe 2009-09-11 18:13 . 2009-09-11 18:13 143736 —-a-w- c:\documents and settings\All Users\Application Data\BigFishGamesCache\Upgrade\stub\plantasia_s1_l1_gF868T1L1_d708080832.exe 2009-09-11 14:03 . 2004-08-05 03:00 136192 —-a-w- c:\windows\system32\msv1_0.dll 2009-09-04 20:45 . 2004-08-05 03:00 58880 —-a-w- c:\windows\system32\msasn1.dll 2009-12-01 09:44 . 2008-08-13 18:02 65536 —-a-w- c:\program files\mozilla firefox\components\FFComm.dll 2008-05-03 06:11 . 2008-05-03 06:11 48 -csha-w- c:\windows\S06D23318.tmp . ((((((((((((((((((((((((((((( SnapShot_2016-04-12_00.37.39 ))))))))))))))))))))))))))))))))))))))))) . + 2009-12-03 08:49 . 2009-12-03 08:49 16384 c:\windows\Temp\Perflib_Perfdata_44c.dat - 2007-08-07 22:49 . 2016-04-12 00:02 91394 c:\windows\system32\perfc009.dat + 2007-08-07 22:49 . 2009-12-03 08:53 91394 c:\windows\system32\perfc009.dat + 2016-04-12 00:42 . 2009-08-06 19:24 53472 c:\windows\system32\dllcache\cache\wuauclt.exe + 2016-04-12 00:41 . 2004-08-05 03:00 82944 c:\windows\system32\dllcache\cache\ws2_32.dll + 2016-04-12 00:42 . 2004-08-05 03:00 24576 c:\windows\system32\dllcache\cache\userinit.exe + 2016-04-12 00:41 . 2004-08-05 03:00 14336 c:\windows\system32\dllcache\cache\svchost.exe + 2016-04-12 00:42 . 2005-06-10 23:53 57856 c:\windows\system32\dllcache\cache\spoolsv.exe + 2016-04-12 00:42 . 2004-08-05 03:00 17408 c:\windows\system32\dllcache\cache\powrprof.dll + 2016-04-12 00:42 . 2004-08-05 03:00 13312 c:\windows\system32\dllcache\cache\lsass.exe + 2016-04-12 00:42 . 2004-08-04 05:58 24576 c:\windows\system32\dllcache\cache\kbdclass.sys + 2016-04-12 00:41 . 2004-08-05 03:00 29056 c:\windows\system32\dllcache\cache\ip6fw.sys + 2016-04-12 00:42 . 2004-08-05 03:00 15360 c:\windows\system32\dllcache\cache\ctfmon.exe + 2009-08-29 10:54 . 2009-08-29 10:54 22016 c:\windows\Installer\ae3c5.msi + 2009-08-29 10:54 . 2009-08-29 10:54 27648 c:\windows\Installer\ae3bf.msi + 2009-08-29 10:53 . 2009-08-29 10:53 38400 c:\windows\Installer\ae3b3.msi + 2009-08-29 10:12 . 2009-08-29 10:12 40960 c:\windows\Installer\aa15f.msi + 2009-08-29 10:12 . 2009-08-29 10:12 32256 c:\windows\Installer\aa155.msi + 2008-04-17 08:00 . 2008-04-17 08:00 54272 c:\windows\Installer\a52e7.msi + 2008-07-29 20:07 . 2008-07-29 20:07 23040 c:\windows\Installer\8027d4b.msp + 2009-08-17 07:52 . 2009-08-17 07:52 88576 c:\windows\Installer\7f80cf9.msi + 2009-03-18 00:37 . 2009-03-18 00:37 23040 c:\windows\Installer\7217db0.msi + 2009-03-18 00:36 . 2009-03-18 00:36 25088 c:\windows\Installer\7217d5e.msi + 2009-03-18 00:35 . 2009-03-18 00:35 28160 c:\windows\Installer\7217d49.msi + 2009-03-18 00:35 . 2009-03-18 00:35 83456 c:\windows\Installer\7217d37.msi + 2009-03-18 00:35 . 2009-03-18 00:35 59904 c:\windows\Installer\7217d31.msi + 2007-08-07 21:55 . 2007-08-07 21:55 48128 c:\windows\Installer\19860.msi - 2007-08-07 22:49 . 2016-04-12 00:02 493374 c:\windows\system32\perfh009.dat + 2007-08-07 22:49 . 2009-12-03 08:53 493374 c:\windows\system32\perfh009.dat + 2016-04-12 00:41 . 2004-08-05 03:00 502272 c:\windows\system32\dllcache\cache\winlogon.exe + 2016-04-12 00:41 . 2009-08-29 07:36 832512 c:\windows\system32\dllcache\cache\wininet.dll + 2016-04-12 00:41 . 2007-03-08 15:36 577536 c:\windows\system32\dllcache\cache\user32.dll + 2016-04-12 00:42 . 2004-08-05 03:00 295424 c:\windows\system32\dllcache\cache\termsrv.dll + 2016-04-12 00:41 . 2008-06-20 10:45 360320 c:\windows\system32\dllcache\cache\tcpip.sys + 2016-04-12 00:42 . 2009-02-06 10:22 110592 c:\windows\system32\dllcache\cache\services.exe + 2016-04-12 00:41 . 2004-08-05 03:00 182912 c:\windows\system32\dllcache\cache\ndis.sys + 2016-04-12 00:42 . 2009-03-21 14:18 986112 c:\windows\system32\dllcache\cache\kernel32.dll + 2016-04-12 00:42 . 2004-08-05 03:00 110080 c:\windows\system32\dllcache\cache\imm32.dll + 2016-04-12 00:42 . 2004-08-05 03:00 167936 c:\windows\system32\dllcache\cache\appmgmts.dll + 2009-08-17 08:00 . 2009-08-17 08:00 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi + 2008-04-15 12:55 . 2008-04-15 12:55 289792 c:\windows\Installer\fa2fd3.msi + 2008-04-16 10:43 . 2008-04-16 10:43 100352 c:\windows\Installer\b4feb7.msi + 2008-04-16 10:27 . 2008-04-16 10:27 269312 c:\windows\Installer\b4feac.msi + 2009-03-06 09:40 . 2009-03-06 09:40 140288 c:\windows\Installer\a263f2f.msi + 2009-03-18 09:25 . 2009-03-18 09:25 813568 c:\windows\Installer\9070c90.msi + 2008-06-15 08:34 . 2008-06-15 08:34 338432 c:\windows\Installer\865f42a.msi + 2008-12-13 08:58 . 2008-12-13 08:58 754688 c:\windows\Installer\8046a63.msp + 2009-08-17 08:01 . 2009-08-17 08:01 648192 c:\windows\Installer\8046a3d.msi + 2008-07-29 20:23 . 2008-07-29 20:23 250880 c:\windows\Installer\8027d54.msp + 2008-07-29 20:28 . 2008-07-29 20:28 278016 c:\windows\Installer\8027d52.msp + 2008-07-29 18:40 . 2008-07-29 18:40 291840 c:\windows\Installer\8027d50.msp + 2009-08-17 07:59 . 2009-08-17 07:59 137728 c:\windows\Installer\8027d4a.msi + 2008-07-29 16:35 . 2008-07-29 16:35 553472 c:\windows\Installer\7f80cfe.msp + 2008-07-29 16:33 . 2008-07-29 16:33 506368 c:\windows\Installer\7f80cfc.msp + 2008-07-29 16:37 . 2008-07-29 16:37 911360 c:\windows\Installer\7f80cfb.msp + 2008-04-16 23:15 . 2008-04-16 23:15 431104 c:\windows\Installer\7eddd.msi + 2009-03-18 00:41 . 2009-03-18 00:41 549888 c:\windows\Installer\7217eb6.msi + 2009-03-18 00:41 . 2009-03-18 00:41 519168 c:\windows\Installer\7217eb0.msi + 2009-03-18 00:40 . 2009-03-18 00:40 968704 c:\windows\Installer\7217eaa.msi + 2009-03-18 00:40 . 2009-03-18 00:40 570368 c:\windows\Installer\7217ea4.msi + 2009-03-18 00:40 . 2009-03-18 00:40 183296 c:\windows\Installer\7217e9e.msi + 2009-03-18 00:40 . 2009-03-18 00:40 727040 c:\windows\Installer\7217ddb.msi + 2009-03-18 00:40 . 2009-03-18 00:40 483328 c:\windows\Installer\7217dd5.msi + 2009-03-18 00:39 . 2009-03-18 00:39 781824 c:\windows\Installer\7217dc8.msi + 2009-03-18 00:39 . 2009-03-18 00:39 464896 c:\windows\Installer\7217dc2.msi + 2009-03-18 00:38 . 2009-03-18 00:38 891904 c:\windows\Installer\7217dbc.msi + 2009-03-18 00:37 . 2009-03-18 00:37 736768 c:\windows\Installer\7217db6.msi + 2009-03-18 00:36 . 2009-03-18 00:36 431104 c:\windows\Installer\7217d7b.msi + 2009-03-18 00:35 . 2009-03-18 00:35 202752 c:\windows\Installer\7217d43.msi + 2009-03-18 00:35 . 2009-03-18 00:35 152576 c:\windows\Installer\7217d3d.msi + 2009-03-18 00:35 . 2009-03-18 00:35 107008 c:\windows\Installer\7217d2b.msi + 2009-03-18 00:35 . 2009-03-18 00:35 301056 c:\windows\Installer\7217d25.msi + 2009-11-29 23:25 . 2009-11-29 23:25 969728 c:\windows\Installer\650e70f.msi + 2009-11-29 23:19 . 2009-11-29 23:19 817152 c:\windows\Installer\650e6f4.msi + 2009-11-29 23:15 . 2009-11-29 23:15 429568 c:\windows\Installer\650e6e9.msi + 2009-10-17 11:10 . 2009-10-17 11:10 133632 c:\windows\Installer\612c1c.msi + 2009-08-02 16:32 . 2009-08-02 16:32 248832 c:\windows\Installer\60e2fbc.msi + 2008-04-14 20:37 . 2008-04-14 20:37 220672 c:\windows\Installer\50d6ae.msi + 2008-04-14 20:37 . 2008-04-14 20:37 224256 c:\windows\Installer\50d6a8.msi + 2008-04-14 20:37 . 2008-04-14 20:37 218624 c:\windows\Installer\50d6a2.msi + 2008-04-14 20:37 . 2008-04-14 20:37 229888 c:\windows\Installer\50d69c.msi + 2008-04-14 20:37 . 2008-04-14 20:37 508928 c:\windows\Installer\50d696.msi + 2009-05-26 17:53 . 2009-05-26 17:53 579072 c:\windows\Installer\33ce159.msp + 2009-09-14 10:12 . 2009-09-14 10:12 694272 c:\windows\Installer\30ddf2.msi + 2009-07-23 09:51 . 2009-07-23 09:51 188928 c:\windows\Installer\2bd6dfd.msi + 2008-04-15 07:42 . 2008-04-15 07:42 470528 c:\windows\Installer\2b728f4.msi + 2009-05-31 21:16 . 2009-05-31 21:16 177664 c:\windows\Installer\1ec84cd.msi + 2004-08-17 20:29 . 2004-08-17 20:29 264704 c:\windows\Installer\1e659.msi + 2009-03-20 10:48 . 2009-03-20 10:48 183808 c:\windows\Installer\1d4e7f3.msp + 2007-08-07 22:03 . 2007-08-07 22:03 643072 c:\windows\Installer\1991a.msi + 2007-08-07 22:03 . 2007-08-07 22:03 966144 c:\windows\Installer\19914.msi + 2007-08-07 22:03 . 2007-08-07 22:03 591872 c:\windows\Installer\1990e.msi + 2007-08-07 21:56 . 2007-08-07 21:56 501248 c:\windows\Installer\19892.msi + 2007-08-07 21:56 . 2007-08-07 21:56 501248 c:\windows\Installer\1987a.msi + 2007-08-07 21:56 . 2007-08-07 21:56 506880 c:\windows\Installer\19874.msi + 2007-08-07 21:55 . 2007-08-07 21:55 516608 c:\windows\Installer\1986d.msi + 2007-08-07 21:55 . 2007-08-07 21:55 513024 c:\windows\Installer\19866.msi + 2007-08-07 21:55 . 2007-08-07 21:55 501248 c:\windows\Installer\19845.msi + 2007-08-07 21:54 . 2007-08-07 21:54 443392 c:\windows\Installer\19838.msi + 2009-01-15 10:18 . 2009-01-15 10:18 501248 c:\windows\Installer\190f2f.msi + 2008-11-16 20:21 . 2008-11-16 20:21 532992 c:\windows\Installer\172a2.msi + 2007-08-07 21:43 . 2007-08-07 21:43 997376 c:\windows\Installer\1581b.msi + 2007-08-07 21:41 . 2007-08-07 21:41 324608 c:\windows\Installer\1580a.msi + 2008-05-03 17:49 . 2008-05-03 17:49 331264 c:\windows\Installer\1561d5.msi + 2009-01-13 13:32 . 2009-01-13 13:32 176128 c:\windows\Installer\13710d6.msi + 2008-04-15 13:51 . 2008-04-15 13:51 487424 c:\windows\Installer\12d554d.msi + 2008-04-15 13:51 . 2008-04-15 13:51 358912 c:\windows\Installer\12d5547.msi + 2008-04-15 13:51 . 2008-04-15 13:51 163840 c:\windows\Installer\12d5541.msi + 2008-11-13 09:57 . 2008-11-13 09:57 432640 c:\windows\Installer\12475294.msi + 2007-10-14 22:44 . 2007-10-14 22:44 324608 c:\windows\Installer\123877c.msp + 2007-10-14 22:46 . 2007-10-14 22:46 324608 c:\windows\Installer\1238775.msp + 2004-08-05 03:00 . 2004-08-05 03:00 1326080 c:\windows\system32\webfldrs.msi + 2007-03-09 03:43 . 2007-03-09 03:43 3551744 c:\windows\system32\oem\AcroRead.msi + 2007-01-17 19:24 . 2007-01-17 19:24 2830336 c:\windows\system32\LS_HSI.msi + 2016-04-12 00:42 . 2004-08-05 03:00 1580544 c:\windows\system32\dllcache\cache\sfcfiles.dll + 2016-04-12 00:42 . 2009-08-04 12:49 2142720 c:\windows\system32\dllcache\cache\ntoskrnl.exe + 2016-04-12 00:41 . 2009-08-04 12:02 2020864 c:\windows\system32\dllcache\cache\ntkrnlpa.exe + 2016-04-12 00:42 . 2007-06-13 10:23 1033216 c:\windows\system32\dllcache\cache\explorer.exe + 2009-10-22 18:46 . 2009-10-22 18:46 2736128 c:\windows\Installer\ff5120b.msi + 2008-05-03 21:44 . 2008-05-03 21:44 1133568 c:\windows\Installer\ea504a.msi + 2008-11-13 02:57 . 2008-11-13 02:57 5099520 c:\windows\Installer\e851131.msp + 2008-10-20 10:18 . 2008-10-20 10:18 6474240 c:\windows\Installer\e85110a.msp + 2008-04-11 17:08 . 2008-04-11 17:08 6302720 c:\windows\Installer\e306efa.msp + 2008-04-25 19:14 . 2008-04-25 19:14 5052928 c:\windows\Installer\e306ee2.msp + 2008-04-18 13:56 . 2008-04-18 13:56 6215680 c:\windows\Installer\e306ea9.msp + 2009-02-04 12:59 . 2009-02-04 12:59 2445824 c:\windows\Installer\daded3c.msi + 2009-08-29 11:18 . 2009-08-29 11:18 3858944 c:\windows\Installer\ae430.msi + 2009-08-29 11:17 . 2009-08-29 11:17 3468800 c:\windows\Installer\ae42a.msi + 2009-08-29 11:16 . 2009-08-29 11:16 3472896 c:\windows\Installer\ae424.msi + 2009-08-29 11:15 . 2009-08-29 11:15 3472896 c:\windows\Installer\ae41e.msi + 2009-08-29 11:14 . 2009-08-29 11:14 3472896 c:\windows\Installer\ae418.msi + 2009-08-29 11:13 . 2009-08-29 11:13 3472896 c:\windows\Installer\ae412.msi + 2009-08-29 11:12 . 2009-08-29 11:12 3472896 c:\windows\Installer\ae40c.msi + 2009-08-29 11:11 . 2009-08-29 11:11 3472896 c:\windows\Installer\ae406.msi + 2009-08-29 11:10 . 2009-08-29 11:10 3472896 c:\windows\Installer\ae400.msi + 2009-08-29 11:08 . 2009-08-29 11:08 3472896 c:\windows\Installer\ae3fa.msi + 2009-08-29 11:05 . 2009-08-29 11:05 3473408 c:\windows\Installer\ae3f4.msi + 2009-08-29 11:04 . 2009-08-29 11:04 3472896 c:\windows\Installer\ae3ee.msi + 2009-08-29 11:03 . 2009-08-29 11:03 3472896 c:\windows\Installer\ae3e8.msi + 2009-08-29 11:02 . 2009-08-29 11:02 3472896 c:\windows\Installer\ae3e2.msi + 2009-08-29 10:58 . 2009-08-29 10:58 3473408 c:\windows\Installer\ae3dc.msi + 2009-08-29 10:57 . 2009-08-29 10:57 3472896 c:\windows\Installer\ae3d6.msi + 2009-08-29 10:56 . 2009-08-29 10:56 3473408 c:\windows\Installer\ae3d0.msi + 2009-08-29 10:54 . 2009-08-29 10:54 3464704 c:\windows\Installer\ae3b9.msi + 2009-08-29 10:53 . 2009-08-29 10:53 3465216 c:\windows\Installer\ae3ad.msi + 2009-08-29 10:52 . 2009-08-29 10:52 3585536 c:\windows\Installer\ae3a7.msi + 2009-08-29 10:50 . 2009-08-29 10:50 3465216 c:\windows\Installer\ae3a1.msi + 2009-08-29 10:49 . 2009-08-29 10:49 3464192 c:\windows\Installer\ae39b.msi + 2009-08-29 10:48 . 2009-08-29 10:48 3464192 c:\windows\Installer\ae395.msi + 2009-08-29 10:47 . 2009-08-29 10:47 3464192 c:\windows\Installer\ae38f.msi + 2009-08-29 10:46 . 2009-08-29 10:46 3514880 c:\windows\Installer\ae389.msi + 2009-08-29 10:43 . 2009-08-29 10:43 3638272 c:\windows\Installer\ae383.msi + 2009-08-29 10:38 . 2009-08-29 10:38 3537408 c:\windows\Installer\ae37d.msi + 2009-08-29 10:36 . 2009-08-29 10:36 3548160 c:\windows\Installer\ae377.msi + 2009-08-29 10:34 . 2009-08-29 10:34 3511296 c:\windows\Installer\ae371.msi + 2009-08-29 10:32 . 2009-08-29 10:32 3513344 c:\windows\Installer\ae36a.msi + 2009-08-29 10:30 . 2009-08-29 10:30 3517440 c:\windows\Installer\ae363.msi + 2009-08-29 10:28 . 2009-08-29 10:28 3484672 c:\windows\Installer\ae35d.msi + 2009-08-29 10:27 . 2009-08-29 10:27 3517440 c:\windows\Installer\ae357.msi + 2008-11-17 03:15 . 2008-11-17 03:15 3520512 c:\windows\Installer\aa160.msi + 2008-10-05 03:12 . 2008-10-05 03:12 4784128 c:\windows\Installer\a6d9bc6.msp + 2008-09-02 10:42 . 2008-09-02 10:42 5104640 c:\windows\Installer\a6d9bbe.msp + 2008-02-27 13:45 . 2008-02-27 13:45 4464640 c:\windows\Installer\a52ee.msp + 2009-03-18 09:28 . 2009-03-18 09:28 1087488 c:\windows\Installer\9070cd1.msi + 2008-11-20 14:48 . 2008-11-20 14:48 5097472 c:\windows\Installer\89f1a.msp + 2008-06-15 08:34 . 2008-06-15 08:34 1479168 c:\windows\Installer\865f424.msi + 2008-12-26 21:12 . 2008-12-26 21:12 1549312 c:\windows\Installer\80fe5.msi + 2008-12-13 08:57 . 2008-12-13 08:57 8397824 c:\windows\Installer\8046a4c.msp + 2008-07-29 18:26 . 2008-07-29 18:26 1043456 c:\windows\Installer\8027d53.msp + 2008-07-29 19:37 . 2008-07-29 19:37 2679808 c:\windows\Installer\8027d51.msp + 2008-07-29 20:15 . 2008-07-29 20:15 3697664 c:\windows\Installer\8027d4f.msp + 2008-07-29 18:34 . 2008-07-29 18:34 1448448 c:\windows\Installer\8027d4e.msp + 2008-07-29 19:22 . 2008-07-29 19:22 4137984 c:\windows\Installer\8027d4d.msp + 2008-07-29 18:18 . 2008-07-29 18:18 3376640 c:\windows\Installer\8027d4c.msp + 2008-07-29 16:45 . 2008-07-29 16:45 2543616 c:\windows\Installer\7f80d02.msp + 2008-07-29 16:29 . 2008-07-29 16:29 2926080 c:\windows\Installer\7f80d01.msp + 2008-07-29 16:41 . 2008-07-29 16:41 6487040 c:\windows\Installer\7f80d00.msp + 2008-07-29 16:39 . 2008-07-29 16:39 3403264 c:\windows\Installer\7f80cff.msp + 2008-07-29 16:43 . 2008-07-29 16:43 1013248 c:\windows\Installer\7f80cfd.msp + 2008-07-29 16:31 . 2008-07-29 16:31 6083072 c:\windows\Installer\7f80cfa.msp + 2007-02-10 13:20 . 2007-02-10 13:20 6646272 c:\windows\Installer\7edc1.msi + 2009-05-26 17:54 . 2009-05-26 17:54 4192768 c:\windows\Installer\7e3ef0.msp + 2009-04-04 17:10 . 2009-04-04 17:10 9926144 c:\windows\Installer\7c602a.msp + 2009-04-04 10:14 . 2009-04-04 10:14 1094656 c:\windows\Installer\7c5dce.msp + 2008-04-11 17:48 . 2008-04-11 17:48 6774272 c:\windows\Installer\7b13201.msp + 2008-07-16 18:01 . 2008-07-16 18:01 5110272 c:\windows\Installer\7b131e6.msp + 2009-08-05 06:49 . 2009-08-05 06:49 3457024 c:\windows\Installer\6f790c.msp + 2009-07-27 03:31 . 2009-07-27 03:31 3738624 c:\windows\Installer\6f78e2.msp + 2009-09-18 08:30 . 2009-09-18 08:30 5016576 c:\windows\Installer\6f78ba.msp + 2009-08-18 12:08 . 2009-08-18 12:08 1373696 c:\windows\Installer\6f787b.msp + 2008-08-20 13:37 . 2008-08-20 13:37 5107712 c:\windows\Installer\6738ed2.msp + 2008-06-30 18:45 . 2008-06-30 18:45 4753408 c:\windows\Installer\6713c11.msp + 2009-01-15 03:35 . 2009-01-15 03:35 4830720 c:\windows\Installer\4f3db8e.msp + 2008-05-21 00:45 . 2008-05-21 00:45 5246976 c:\windows\Installer\4eddc.msp + 2007-06-01 15:54 . 2007-06-01 15:54 9626624 c:\windows\Installer\4edc0.msp + 2008-08-22 09:57 . 2008-08-22 09:57 1129472 c:\windows\Installer\4cf17b.msi + 2009-10-07 11:32 . 2009-10-07 11:32 4405248 c:\windows\Installer\4bf7715.msi + 2009-05-04 06:46 . 2009-05-04 06:46 8299008 c:\windows\Installer\33ce250.msp + 2009-05-04 06:47 . 2009-05-04 06:47 9124864 c:\windows\Installer\33ce227.msp + 2009-04-24 11:30 . 2009-04-24 11:30 2583552 c:\windows\Installer\33ce1fe.msp + 2009-05-07 08:17 . 2009-05-07 08:17 5026816 c:\windows\Installer\33ce1d4.msp + 2009-04-24 11:29 . 2009-04-24 11:29 9013760 c:\windows\Installer\33ce131.msp + 2009-09-14 10:20 . 2009-09-14 10:20 1679872 c:\windows\Installer\30e0ce.msi + 2009-09-14 10:19 . 2009-09-14 10:19 9013760 c:\windows\Installer\30e080.msi + 2009-09-14 10:06 . 2009-09-14 10:06 3310592 c:\windows\Installer\30dde8.msi + 2009-04-24 11:28 . 2009-04-24 11:28 4450816 c:\windows\Installer\3045beaf.msp + 2009-08-18 11:56 . 2009-08-18 11:56 5020672 c:\windows\Installer\2ea3f74.msp + 2007-07-08 10:34 . 2007-07-08 10:34 6648832 c:\windows\Installer\2de845a.msp + 2008-02-15 07:54 . 2008-02-15 07:54 9736192 c:\windows\Installer\2c5fc58.msp + 2008-03-17 16:55 . 2008-03-17 16:55 5049344 c:\windows\Installer\2b729cc.msp + 2008-01-11 16:52 . 2008-01-11 16:52 8517632 c:\windows\Installer\2b729a6.msp + 2009-02-06 23:31 . 2009-02-06 23:31 5047808 c:\windows\Installer\2a0d0cb.msp + 2007-03-30 21:20 . 2007-03-30 21:20 5800960 c:\windows\Installer\299cd47.msp + 2008-06-05 12:56 . 2008-06-05 12:56 5111808 c:\windows\Installer\299cd31.msp + 2008-06-05 12:56 . 2008-06-05 12:56 5111808 c:\windows\Installer\296949d.msp + 2009-07-09 17:31 . 2009-07-09 17:31 3489280 c:\windows\Installer\2272e00.msi + 2008-04-24 10:32 . 2008-04-24 10:32 3620864 c:\windows\Installer\1db601.msi + 2009-07-02 15:23 . 2009-07-02 15:23 5027328 c:\windows\Installer\1c06d0.msp + 2007-08-07 22:04 . 2007-08-07 22:04 1046016 c:\windows\Installer\19927.msi + 2007-08-07 22:04 . 2007-08-07 22:04 1389056 c:\windows\Installer\19921.msi + 2007-08-07 22:03 . 2007-08-07 22:03 6568960 c:\windows\Installer\19908.msi + 2007-03-22 12:46 . 2007-03-22 12:46 2047488 c:\windows\Installer\198c9.msp + 2007-03-22 12:46 . 2007-03-22 12:46 8198656 c:\windows\Installer\198b5.msp + 2007-08-07 21:56 . 2007-08-07 21:56 1652736 c:\windows\Installer\1988c.msi + 2007-08-07 21:56 . 2007-08-07 21:56 1652736 c:\windows\Installer\19886.msi + 2007-08-07 21:56 . 2007-08-07 21:56 1652736 c:\windows\Installer\19880.msi + 2007-08-07 21:55 . 2007-08-07 21:55 1640960 c:\windows\Installer\19857.msi + 2007-08-07 21:55 . 2007-08-07 21:55 2022912 c:\windows\Installer\19851.msi + 2007-08-07 21:55 . 2007-08-07 21:55 1713152 c:\windows\Installer\1984b.msi + 2007-08-07 21:55 . 2007-08-07 21:55 2397184 c:\windows\Installer\1983f.msi + 2009-01-15 10:19 . 2009-01-15 10:19 1640960 c:\windows\Installer\190f5b.msi + 2009-01-15 10:18 . 2009-01-15 10:18 2319872 c:\windows\Installer\190f35.msi + 2009-01-15 10:18 . 2009-01-15 10:18 1647616 c:\windows\Installer\190f29.msi + 2009-02-12 18:48 . 2009-02-12 18:48 1217536 c:\windows\Installer\190b4b8.msi + 2009-05-08 11:55 . 2009-05-08 11:55 1659392 c:\windows\Installer\1884fdc1.msi + 2007-08-07 21:44 . 2007-08-07 21:44 3443712 c:\windows\Installer\15828.msi + 2007-08-07 21:44 . 2007-08-07 21:44 1128960 c:\windows\Installer\15821.msi + 2007-08-07 21:41 . 2007-08-07 21:41 1477632 c:\windows\Installer\15804.msi + 2009-02-12 17:44 . 2009-02-12 17:44 8443904 c:\windows\Installer\15383ac.msi + 2009-10-16 07:03 . 2009-10-16 07:03 5003776 c:\windows\Installer\14e6117.msp + 2009-08-18 12:58 . 2009-08-18 12:58 8301056 c:\windows\Installer\14e60ef.msp + 2009-08-18 12:57 . 2009-08-18 12:57 9122304 c:\windows\Installer\14e60c7.msp + 2009-01-13 13:32 . 2009-01-13 13:32 1671168 c:\windows\Installer\13710de.msi + 2008-04-15 13:52 . 2008-04-15 13:52 2357760 c:\windows\Installer\12d5553.msi + 2008-04-02 06:47 . 2008-04-02 06:47 6428160 c:\windows\Installer\12ce4.msi + 2008-10-20 10:19 . 2008-10-20 10:19 5100032 c:\windows\Installer\124752c6.msp + 2009-01-07 20:25 . 2009-01-07 20:25 5046784 c:\windows\Installer\123b1e7a.msp + 2007-10-14 22:43 . 2007-10-14 22:43 5749760 c:\windows\Installer\1238751.msp + 2009-02-25 18:08 . 2009-02-25 18:08 8311808 c:\windows\Installer\11e15a4e.msp + 2009-03-28 08:50 . 2009-03-28 08:50 5025792 c:\windows\Installer\11e159d4.msp + 2009-07-27 03:32 . 2009-07-27 03:32 5028352 c:\windows\Installer\118481.msp + 2008-05-03 21:43 . 2008-05-03 21:43 5980160 c:\windows\Downloaded Installations\BBC iPlayer Download Manager\bdf548b0-d314-4e50-aaf2-12ab3d568f0f\bbciPlayer_client_live.msi + 2009-08-10 20:08 . 2009-08-10 20:08 11315712 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp
Post #11
+ 2008-10-20 10:22 . 2008-10-20 10:22 11758592 c:\windows\Installer\e851181.msp
+ 2008-10-20 10:21 . 2008-10-20 10:21 11937280 c:\windows\Installer\e85116d.msp
+ 2008-10-20 10:16 . 2008-10-20 10:16 13211648 c:\windows\Installer\e851146.msp
+ 2008-04-11 17:07 . 2008-04-11 17:07 13257728 c:\windows\Installer\e306f10.msp
+ 2008-07-29 22:20 . 2008-07-29 22:20 11767296 c:\windows\Installer\a6d9b85.msp
+ 2008-07-29 22:18 . 2008-07-29 22:18 11933184 c:\windows\Installer\a6d9b71.msp
+ 2007-08-07 21:47 . 2007-08-07 21:47 19204096 c:\windows\Installer\95c8.msp
+ 2008-12-13 09:21 . 2008-12-13 09:21 10473472 c:\windows\Installer\8046a57.msp
+ 2009-04-04 17:09 . 2009-04-04 17:09 15190016 c:\windows\Installer\7c5def.msp
+ 2009-04-04 11:36 . 2009-04-04 11:36 21390848 c:\windows\Installer\7c5dcf.msp
+ 2008-07-03 10:36 . 2008-07-03 10:36 11937792 c:\windows\Installer\7b13276.msp
+ 2008-07-03 10:37 . 2008-07-03 10:37 11759104 c:\windows\Installer\7b1323c.msp
+ 2009-08-14 19:32 . 2009-08-14 19:32 11110912 c:\windows\Installer\6f792a.msp
+ 2009-08-10 13:09 . 2009-08-10 13:09 17254912 c:\windows\Installer\6f78a7.msp
+ 2009-08-18 11:50 . 2009-08-18 11:50 12022272 c:\windows\Installer\6f784b.msp
+ 2008-08-11 10:51 . 2008-08-11 10:51 15916544 c:\windows\Installer\6738ebe.msp
+ 2008-08-11 10:49 . 2008-08-11 10:49 22457344 c:\windows\Installer\6738eaa.msp
+ 2009-08-02 16:36 . 2009-08-02 16:36 15705600 c:\windows\Installer\60e2fe2.msp
+ 2008-11-24 15:15 . 2008-11-24 15:15 34795008 c:\windows\Installer\547be.msi
+ 2009-06-24 12:15 . 2009-06-24 12:15 11672576 c:\windows\Installer\4f6c2.msi
+ 2009-02-25 18:05 . 2009-02-25 18:05 11840000 c:\windows\Installer\3c30a30.msp
+ 2009-02-25 18:07 . 2009-02-25 18:07 11646464 c:\windows\Installer\3c30a08.msp
+ 2009-09-12 22:04 . 2009-09-12 22:04 15709696 c:\windows\Installer\2ea3f91.msp
+ 2008-02-25 14:07 . 2008-02-25 14:07 11772416 c:\windows\Installer\2c5fc45.msp
+ 2008-01-28 17:09 . 2008-01-28 17:09 11896320 c:\windows\Installer\2c5fc31.msp
+ 2008-01-28 17:07 . 2008-01-28 17:07 19034624 c:\windows\Installer\2c5fc1c.msp
+ 2008-01-28 17:10 . 2008-01-28 17:10 14201344 c:\windows\Installer\2b729b8.msp
+ 2008-04-15 07:40 . 2008-04-15 07:40 15256576 c:\windows\Installer\2b728e3.msp
+ 2008-05-21 00:30 . 2008-05-21 00:30 14308864 c:\windows\Installer\26cfd36.msp
+ 2009-05-04 06:49 . 2009-05-04 06:49 10955776 c:\windows\Installer\235d24d.msp
+ 2007-08-07 21:57 . 2007-08-07 21:57 12836864 c:\windows\Installer\198a1.msi
+ 2009-01-15 10:23 . 2009-01-15 10:23 18181632 c:\windows\Installer\190f6c.msi
+ 2007-08-07 21:43 . 2007-08-07 21:43 13892096 c:\windows\Installer\15815.msi
+ 2009-02-12 17:44 . 2009-02-12 17:44 21780992 c:\windows\Installer\15383ad.msi
+ 2008-09-24 12:05 . 2008-09-24 12:05 16381440 c:\windows\Installer\124752a7.msp
+ 2007-10-14 22:43 . 2007-10-14 22:43 12743168 c:\windows\Installer\1238763.msp
+ 2007-10-14 22:43 . 2007-10-14 22:43 21981184 c:\windows\Installer\1238727.msp
+ 2009-07-01 12:19 . 2009-07-01 12:19 10607104 c:\windows\Installer\11849f.msp
+ 2008-04-02 06:46 . 2008-04-02 06:46 45435904 c:\windows\Downloaded Installations\{8CA56884-C189-4497-A0DC-B138B28F08C4}\Acer eDataSecurity Management.msi
+ 2009-04-04 17:08 . 2009-04-04 17:08 343058432 c:\windows\Installer\7c5f44.msp
+ 2007-10-14 22:43 . 2007-10-14 22:43 229852160 c:\windows\Installer\123871f.msp
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\progra~1\WINDOW~4\MESSEN~1\msnmsgr.exe" [2009-02-06 3885408]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-04-01 486856]
"AdobeUpdater"="c:\program files\Common Files\Adobe\Updater5\AdobeUpdater.exe" [2008-11-24 2356088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 761945]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-12 53248]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-01-08 68640]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 142104]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 162584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 138008]
"Acer ePresentation HPD"="c:\acer\Empowering Technology\ePresentation\ePresentation.exe" [2007-03-02 208896]
"ePower_DMC"="c:\acer\Empowering Technology\ePower\ePower_DMC.exe" [2007-07-04 475136]
"Boot"="c:\acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 579584]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-05-28 342528]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2007-07-11 421888]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-10-17 858632]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"SamsungPCSuiteTrayApplication"="c:\program files\Samsung\Samsung PC Studio 7\LaunchApplication.exe" [2008-08-07 278016]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-08-13 177440]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-11-12 782336]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-06-24 69632]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-09-05 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-05-28 16132608]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]
"Samsung.PCSync"="c:\program files\Samsung\Samsung PC Studio 7\PcSync2.exe" [2007-12-04 1241088]

c:\documents and settings\The User\Start Menu\Programs\Startup\
MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2009-7-20 576000]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Acer Empowering Technology.lnk - c:\acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2008-4-2 45056]
Update Agent.lnk - c:\program files\3\3Connect\AutoUpdateSrv.exe [2009-2-28 479232]

[HKLM\~\startupfolder\C:^Documents and Settings^The User^Start Menu^Programs^Startup^Microsoft Office Groove.lnk]
path=c:\documents and settings\The User\Start Menu\Programs\Startup\Microsoft Office Groove.lnk
backup=c:\windows\pss\Microsoft Office Groove.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^The User^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\documents and settings\The User\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 7.0.1.321\\English\\setup.exe"=
"c:\\Program Files\\Kontiki\\KService.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Huawei technologies\\Huawei UMTS Data Card\\3 USB Modem.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"%windir%\\system32\\drivers\\svchost.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"6346:TCP"= 6346:TCP:limewire
"3389:TCP"= 3389:TCP:Remote Desktop

R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [02/07/2008 12:07 82696]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [18/03/2009 00:40 55152]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [12/08/2008 17:40 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [14/08/2008 17:54 104456]
S2 BTWSp50;BTWSp50 NDIS Protocol Driver;c:\windows\system32\Drivers\BTWSp50.sys –> c:\windows\system32\Drivers\BTWSp50.sys [?]
S2 RPCHGM;Remote Procedure Call (HGM); [x]
S3 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [16/09/2008 12:03 169312]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [17/07/2008 12:06 118784]
S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 18:08 533360]
S3 nmwcdsa;Samsung USB Phone Parent;c:\windows\system32\drivers\nmwcdsa.sys [13/01/2009 13:32 135680]
S3 nmwcdsac;Samsung USB Generic;c:\windows\system32\drivers\nmwcdsac.sys [13/01/2009 13:32 8320]
S3 nmwcdsacj;Samsung USB Port;c:\windows\system32\drivers\nmwcdsacj.sys [13/01/2009 13:32 12288]
S3 nmwcdsacm;Samsung USB Modem;c:\windows\system32\drivers\nmwcdsacm.sys [13/01/2009 13:32 12288]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [07/05/2008 15:21 717296]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{W0YMS373-5163-DX3Q-VP05-4G3PIC12Q4GR}]
c:\program files\Common Files\svchost.exe -ac
.
Contents of the 'Scheduled Tasks' folder

2009-11-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2016-04-12 c:\windows\Tasks\User_Feed_Synchronization-{BD01A600-5529-4904-B81B-59F2C534B718}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 17:36]

2009-12-03 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-04-24 21:18]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://search.mywebsearch.com/mywebsearch/default.jhtml?ptnrS=ZUxdm567YYGB&ptb=uG5WZHpD41TBpwebEtyzJQ
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
uInternet Connection Wizard,ShellNext = hxxp://en.uk.acer.yahoo.com/
uInternet Settings,ProxyServer = http=127.0.0.1:5555
uInternet Settings,ProxyOverride =
IE: &Search - http://edits.mywebsearch.com/toolbaredits/…?p=ZUxdm567YYGB
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Lookup on Merriam Webster - file://c:\program files\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\program files\ieSpell\wikipedia.HTM
FF - ProfilePath -
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHANS REMOVED - - - -

AddRemove-Activation Assistant for the 2007 Microsoft Office suites - c:\documents and settings\All Users\Application Data\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe REMOVE=TRUE MODIFY=FALSE
AddRemove-GridVista - c:\windows\UnInst32.exe GridV.UNI
AddRemove-LManager - c:\windows\UnInst32.exe LManager.UNI
AddRemove-{4AD13F68-CADA-4C6B-9759-C33753F89908} - c:\acer\Empowering Technology\eDataSecurity\eDStbmngr.exe UNINSTALL 1
AddRemove-{5edadae2-fb8b-421f-bac7-807464daae48} - c:\program files\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER=9M03-01A1-PCX7-K31A-8A94-98PT-KT2E-522A
AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-03 09:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe catchme.sys CLASSPNP.SYS disk.sys >>UNKNOWN [0x857B1F30]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf7761fc3
\Driver\ACPI -> 0x857b1f30
\Driver\atapi -> atapi.sys @ 0xf73e97b4
\Driver\iaStor -> iaStor.sys @ 0xf7435918
IoDeviceObjectType -> DeleteProcedure -> ntkrnlpa.exe @ 0x80582544
SecurityProcedure -> ntkrnlpa.exe @ 0x80582be6
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntkrnlpa.exe @ 0x80582544
SecurityProcedure -> ntkrnlpa.exe @ 0x80582be6
NDIS: Broadcom NetLink ™ Gigabit Ethernet -> SendCompleteHandler -> 0x857ee480
PacketIndicateHandler -> NDIS.sys @ 0xf728ca0b
SendHandler -> NDIS.sys @ 0xf72a0b31
Warning: possible MBR rootkit infection !
copy of MBR has been found in sector 0x0950E4C1
malicious code @ sector 0x0950E4C4 !
PE file found in sector at 0x0950E4DA !
MBR rootkit infection detected ! Use: "mbr.exe -f" to fix.

**************************************************************************
.
Completion time: 2009-12-03 09:18
ComboFix-quarantined-files.txt 2009-12-03 09:18
ComboFix2.txt 2009-06-24 15:32

Pre-Run: 2,854,891,520 bytes free
Post-Run: 2,792,128,512 bytes free

- - End Of File - - E3BEE4FE2210A603F82F7930427D7855
Post #12
Malwarebytes' Anti-Malware 1.42 Database version: 3291 Windows 5.1.2600 Service Pack 2 Internet Explorer 7.0.5730.13 03/12/2009 09:54:56 mbam-log-2009-12-03 (09-54-56).txt Scan type: Quick Scan Objects scanned: 136407 Time elapsed: 5 minute(s), 48 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 23 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 5 Files Infected: 8 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{w0yms373-5163-dx3q-vp05-4g3pic12q4gr} (Generic.Bot.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SETUP.EXE (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\FreeHDPlay (Trojan.DNSChanger) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FreeHDPlay (Trojan.DNSChanger) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_RPCHGM (Trojan.Keylogger) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RPCHGM (Trojan.Keylogger) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Program Files\FreeHDPlay (Trojan.DNSChanger) -> Quarantined and deleted successfully. C:\Program Files\Live_TV (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\Online_Radio_TB (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\HelpAssistant\Start Menu\Programs\FreeHDPlay (Trojan.DNSChanger) -> Quarantined and deleted successfully. C:\Documents and Settings\The User\Start Menu\Programs\FreeHDPlay (Trojan.DNSChanger) -> Quarantined and deleted successfully. Files Infected: C:\WINDOWS\system32\vjub.bgo (Backdoor.Bot) -> Quarantined and deleted successfully. C:\Program Files\FreeHDPlay\Uninstall.exe (Trojan.DNSChanger) -> Quarantined and deleted successfully. C:\Program Files\Live_TV\INSTALL.LOG (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\Online_Radio_TB\INSTALL.LOG (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\HelpAssistant\Start Menu\Programs\FreeHDPlay\Uninstall.lnk (Trojan.DNSChanger) -> Quarantined and deleted successfully. C:\Documents and Settings\The User\Start Menu\Programs\FreeHDPlay\Uninstall.lnk (Trojan.DNSChanger) -> Quarantined and deleted successfully. C:\Documents and Settings\HelpAssistant\SETUP.EXE (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\The User\SETUP.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
Post #13
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:02:23, on 03/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Kontiki\KService.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\WINDOW~4\MESSEN~1\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\3\3Connect\AutoUpdateSrv.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\DOCUME~1\THEUSE~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\trend micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.mywebsearch.com/mywebsearch/…D41TBpwebEtyzJQ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://en.uk.acer.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: EndNote Web - {82D2E569-25A7-4E4D-9FA3-C5025B4B7912} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EndNote Web - {945C8270-A848-11D5-A805-00B0D092F45B} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\..\Run: [Preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SamsungPCSuiteTrayApplication] C:\Program Files\Samsung\Samsung PC Studio 7\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\PROGRA~1\WINDOW~4\MESSEN~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Samsung.PCSync] C:\Program Files\Samsung\Samsung PC Studio 7\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Update Agent.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Plant%20Tycoon/Images/stg_drm.ocx
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.6.108.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1208204733746
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Plant%20Tycoon/Images/armhelper.ocx
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eLock Service (eLockService) - - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

–
End of file - 13385 bytes
Post #14
Lets run GMER and see whats going on.


[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • Sections
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and post it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Post #15
GMER 1.0.15.15252 - http://www.gmer.net
Rootkit scan 2009-12-03 22:50:46
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:\DOCUME~1\THEUSE~1\LOCALS~1\Temp\awtoraow.sys


—- System - GMER 1.0.15 —-

SSDT \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys (BitDefender Self Protection Driver/BitDefender S.R.L.) ZwOpenProcess [0x98BB6C90]
SSDT \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys (BitDefender Self Protection Driver/BitDefender S.R.L.) ZwOpenThread [0x98BB6D7E]
SSDT \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys (BitDefender Self Protection Driver/BitDefender S.R.L.) ZwTerminateProcess [0x98BB6BF4]
SSDT \??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys (BitDefender Self Protection Driver/BitDefender S.R.L.) ZwTerminateThread [0x98BB6EC4]

—- Devices - GMER 1.0.15 —-

AttachedDevice \FileSystem\Ntfs \Ntfs psdfilter.sys (PSD Filter Driver/HiTRUST)

Device \Driver\ACPI \Device\0000009b 85B4AF30
Device \Driver\ACPI \Device\0000009c 85B4AF30
Device \Driver\ACPI \Device\0000008f 85B4AF30

AttachedDevice \Driver\Tcpip \Device\Ip mdvrmng.sys
AttachedDevice \Driver\Tcpip \Device\Ip bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

Device \Driver\ACPI \Device\0000009f 85B4AF30
Device \Driver\ACPI \Device\000000a0 85B4AF30

AttachedDevice \Driver\Tcpip \Device\Tcp bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)
AttachedDevice \Driver\Tcpip \Device\Tcp mdvrmng.sys

Device \Driver\ACPI \Device\000000a1 85B4AF30
Device \Driver\ACPI \Device\000000c0 85B4AF30
Device \Driver\ACPI \Device\00000081 85B4AF30
Device \Driver\ACPI \Device\000000c1 85B4AF30
Device \Driver\ACPI \Device\000000a8 85B4AF30
Device \Driver\ACPI \Device\00000082 85B4AF30
Device \Driver\ACPI \Device\00000090 85B4AF30
Device \Driver\ACPI \Device\00000091 85B4AF30
Device \Driver\ACPI \Device\00000084 85B4AF30
Device \Driver\ACPI \Device\00000092 85B4AF30
Device \Driver\ACPI \Device\00000085 85B4AF30
Device \Driver\ACPI \Device\00000093 85B4AF30
Device \Driver\ACPI \Device\000000c6 85B4AF30
Device \Driver\ACPI \Device\00000094 85B4AF30
Device \Driver\ACPI \Device\00000087 85B4AF30
Device \Driver\ACPI \Device\00000095 85B4AF30

AttachedDevice \Driver\Tcpip \Device\Udp bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)
AttachedDevice \Driver\Tcpip \Device\Udp mdvrmng.sys

Device \Driver\ACPI \Device\000000c8 85B4AF30

AttachedDevice \Driver\Tcpip \Device\RawIp bdftdif.sys (BitDefender Firewall TDI Filter Driver/BitDefender LLC)
AttachedDevice \Driver\Tcpip \Device\RawIp mdvrmng.sys

Device \Driver\ACPI \Device\00000097 85B4AF30
Device \Driver\ACPI \Device\000000ab 85B4AF30
Device \Driver\ACPI \Device\00000099 85B4AF30
Device \Driver\ACPI \Device\000000ac 85B4AF30
Device \Driver\ACPI \Device\0000008a 85B4AF30
Device \Driver\ACPI \Device\0000008b 85B4AF30
Device \Driver\ACPI \Device\000000be 85B4AF30
Device \Driver\ACPI \Device\000000bf 85B4AF30

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

—- Registry - GMER 1.0.15 —-

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x6C 0xF6 0xCB 0x31 …
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 …
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x74 0xCF 0xFF 0x16 …
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x23 0x02 0x01 0xB1 …
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x58 0xB9 0x11 0x1B …
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x6C 0xF6 0xCB 0x31 …
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 …
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x74 0xCF 0xFF 0x16 …
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x23 0x02 0x01 0xB1 …
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41@khjeh 0x58 0xB9 0x11 0x1B …

—- EOF - GMER 1.0.15 —-

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI