What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

hjt analysis needed

59 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #31 last edited
ok, went ahead and reset my internet explorer settings like you requested, but was still not able to install microsoft updates. i am always getting that "webpage error" screen i posted earlier. also, tried doing the system file scan you asked for, BUT after the scan started it asked for my xp cd. i put the cd in the drive, scan continued, and then it asked for the xp cd again, even though it was already in the drive. i kept clicking "retry", but it asked for the cd every time, and the cd was in the drive…..hmmm :-( p.s.-being that i reset IE8 today, i just received and installed a security update for IE8, so I AM getting my updates.
Post #32
Hi danszczerba,

Lets give this a go. Delete ComboFix from your desktop using right-click > delete.

Now go ahead and download a new copy of ComboFix from here or here. Run ComboFix and then post the log created into your next reply.
Post #33
ComboFix 11-05-28.01 - Admin 29.May.11 20:41:55.7.2 - x86 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2616 [GMT 2:00] Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7} ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . ——-\Service_Mounnmexwiw ((((((((((((((((((((((((( Files Created from 2011-04-28 to 2011-05-29 ))))))))))))))))))))))))))))))) 2011-05-29 15:42:53 . 2011-05-29 17:30:51 ——– d—–w- C:\WINDOWS\LastGood.Tmp 2011-05-28 01:37:05 . 2010-02-12 10:03:03 293376 ——w- C:\WINDOWS\system32\browserchoice.exe 2011-05-27 02:08:05 . 2011-05-29 18:41:43 ——– d—–w- C:\WINDOWS\system32\CatRoot2 2011-05-25 14:11:55 . 2011-05-25 14:11:55 ——– d—–w- C:\Program Files\Common Files\Java 2011-05-25 14:11:35 . 2011-05-25 14:11:35 ——– d—–w- C:\Program Files\Java 2011-05-25 13:56:02 . 2011-05-25 13:56:02 ——– d—–w- C:\Program Files\VS Revo Group 2011-05-25 03:29:12 . 2011-05-25 03:29:12 ——– d—–w- C:\Program Files\ESET 2011-05-25 03:19:49 . 2011-05-25 03:19:49 ——– d—–w- C:\Documents and Settings\Admin\Application Data\Malwarebytes 2011-05-25 03:19:43 . 2010-12-20 16:09:00 38224 —-a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2011-05-25 03:19:42 . 2011-05-25 03:19:42 ——– d—–w- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2011-05-25 03:19:39 . 2011-05-25 03:19:44 ——– d—–w- C:\Program Files\Malwarebytes' Anti-Malware 2011-05-25 03:19:39 . 2010-12-20 16:08:40 20952 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys 2011-05-24 03:42:05 . 2011-05-24 03:42:32 ——– d—–w- C:\Documents and Settings\Administrator 2011-05-24 03:39:57 . 2011-05-24 03:39:57 ——– d—–w- C:\Documents and Settings\Admin\Application Data\Avira 2011-05-21 10:33:22 . 2011-05-21 10:33:22 388096 —-a-r- C:\Documents and Settings\Admin\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-05-21 06:57:35 . 2011-05-21 06:57:35 ——– d—–w- C:\Program Files\DAEMON Tools Lite 2011-05-21 06:14:14 . 2011-05-21 06:14:14 443448 —-a-w- C:\WINDOWS\system32\drivers\sptd.sys 2011-05-14 13:31:48 . 2011-05-14 13:31:48 404640 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2011-05-25 14:11:37 . 2010-11-08 20:09:44 73728 —-a-w- C:\WINDOWS\system32\javacpl.cpl 2011-05-25 14:11:37 . 2010-05-07 13:58:07 472808 —-a-w- C:\WINDOWS\system32\deployJava1.dll 2011-04-06 14:20:16 . 2011-04-06 14:20:16 91424 —-a-w- C:\WINDOWS\system32\dnssd.dll 2011-04-06 14:20:16 . 2011-04-06 14:20:16 75040 —-a-w- C:\WINDOWS\system32\jdns_sd.dll 2011-04-06 14:20:16 . 2011-04-06 14:20:16 197920 —-a-w- C:\WINDOWS\system32\dnssdX.dll 2011-04-06 14:20:16 . 2011-04-06 14:20:16 107808 —-a-w- C:\WINDOWS\system32\dns-sd.exe 2011-03-21 17:56:22 . 2011-03-21 17:56:22 59904 —-a-w- C:\WINDOWS\system32\OVDecode.dll 2011-03-21 17:56:06 . 2011-03-21 17:56:06 51712 —-a-w- C:\WINDOWS\system32\OpenCL.dll 2011-03-21 17:55:46 . 2011-03-21 17:55:46 12385792 —-a-w- C:\WINDOWS\system32\amdocl.dll 2011-03-17 03:06:46 . 2010-11-08 19:04:31 137656 —-a-w- C:\WINDOWS\system32\drivers\avipbb.sys 2011-03-09 09:13:30 . 2011-04-08 19:41:14 6553088 —-a-w- C:\WINDOWS\system32\drivers\ati2mtag.sys 2011-03-09 05:44:26 . 2011-04-08 19:41:14 17444864 —-a-w- C:\WINDOWS\system32\atioglxx.dll 2011-03-09 05:04:02 . 2010-08-23 19:53:36 57344 —-a-w- C:\WINDOWS\system32\aticalrt.dll 2011-03-09 05:03:56 . 2010-08-23 19:53:32 53248 —-a-w- C:\WINDOWS\system32\aticalcl.dll 2011-03-09 05:02:38 . 2010-08-23 19:53:35 4669440 —-a-w- C:\WINDOWS\system32\aticaldd.dll 2011-03-09 05:00:12 . 2010-08-23 19:53:32 491520 —-a-w- C:\WINDOWS\system32\atiok3x2.dll 2011-03-09 04:51:42 . 2011-04-08 19:41:14 311296 —-a-w- C:\WINDOWS\system32\atiiiexx.dll 2011-03-09 04:48:12 . 2011-04-08 19:41:14 462848 —-a-w- C:\WINDOWS\system32\ATIDEMGX.dll 2011-03-09 04:47:12 . 2011-04-08 19:41:14 302080 —-a-w- C:\WINDOWS\system32\ati2dvag.dll 2011-03-09 04:46:08 . 2011-04-08 19:41:14 4148544 —-a-w- C:\WINDOWS\system32\ati3duag.dll 2011-03-09 04:39:50 . 2011-04-08 19:41:14 1112576 —-a-w- C:\WINDOWS\system32\ativvamv.dll 2011-03-09 04:32:20 . 2011-04-08 19:41:14 2681600 —-a-w- C:\WINDOWS\system32\ativvaxx.dll 2011-03-09 04:29:34 . 2011-04-08 19:41:14 212992 —-a-w- C:\WINDOWS\system32\atipdlxx.dll 2011-03-09 04:29:24 . 2011-04-08 19:41:14 155648 —-a-w- C:\WINDOWS\system32\Oemdspif.dll 2011-03-09 04:29:18 . 2011-04-08 19:41:14 26112 —-a-w- C:\WINDOWS\system32\Ati2mdxx.exe 2011-03-09 04:29:12 . 2011-04-08 19:41:14 43520 —-a-w- C:\WINDOWS\system32\ati2edxx.dll 2011-03-09 04:29:02 . 2010-08-23 19:53:34 188416 —-a-w- C:\WINDOWS\system32\ati2evxx.dll 2011-03-09 04:27:58 . 2011-04-08 19:41:14 643072 —-a-w- C:\WINDOWS\system32\ati2evxx.exe 2011-03-09 04:26:50 . 2011-04-08 19:41:14 53248 —-a-w- C:\WINDOWS\system32\ATIDDC.DLL 2011-03-09 04:26:04 . 2010-08-23 19:53:30 143360 —-a-w- C:\WINDOWS\system32\atiapfxx.exe 2011-03-09 04:22:54 . 2011-04-08 19:41:14 651264 —-a-w- C:\WINDOWS\system32\atikvmag.dll 2011-03-09 04:21:12 . 2010-08-23 19:53:31 200704 —-a-w- C:\WINDOWS\system32\atiadlxx.dll 2011-03-09 04:20:52 . 2011-04-08 19:41:14 17408 —-a-w- C:\WINDOWS\system32\atitvo32.dll 2011-03-09 04:19:40 . 2010-08-23 19:53:35 64512 —-a-w- C:\WINDOWS\system32\atimpc32.dll 2011-03-09 04:19:40 . 2010-08-23 19:53:35 64512 —-a-w- C:\WINDOWS\system32\amdpcom32.dll 2011-03-09 04:17:04 . 2011-04-08 19:41:14 53248 —-a-w- C:\WINDOWS\system32\drivers\ati2erec.dll 2011-03-09 04:16:18 . 2011-04-08 19:41:14 851968 —-a-w- C:\WINDOWS\system32\ati2cqag.dll 2011-03-07 05:33:50 . 2008-09-26 22:24:13 692736 ——w- C:\WINDOWS\system32\inetcomm.dll 2011-03-04 06:37:06 . 2002-08-29 12:00:00 420864 —-a-w- C:\WINDOWS\system32\vbscript.dll 2011-03-03 13:21:11 . 2002-08-29 12:00:00 1857920 ——w- C:\WINDOWS\system32\win32k.sys 2009-07-14 00:16:26 . 2009-07-14 00:16:26 1044480 —-a-w- C:\Program Files\mozilla firefox\plugins\libdivx.dll 2009-07-14 00:16:26 . 2009-07-14 00:16:26 200704 —-a-w- C:\Program Files\mozilla firefox\plugins\ssldivx.dll 2011-05-03 03:03:08 . 2011-03-26 04:27:29 142296 —-a-w- C:\Program Files\mozilla firefox\components\browsercomps.dll ——- Sigcheck ——- Note: Unsigned files aren't necessarily malware. [-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\atapi.sys [-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\atapi.sys [-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\atapi.sys [-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\atapi.sys [-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\system32\DRIVERS\atapi.sys [-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\atapi.sys [-] 2008-04-13 22:10:32 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\i386\atapi.sys [-] 2002-08-29 12:00:00 . 95B858761A00E1D4F81F79A0DA019ACA . 86912 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\atapi.sys [-] 2008-04-13 22:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\asyncmac.sys [-] 2008-04-13 22:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\asyncmac.sys [-] 2008-04-13 22:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\dllcache\asyncmac.sys [-] 2008-04-13 22:27:28 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\asyncmac.sys [-] 2002-08-29 12:00:00 . 03F403B07A884FC2AA54A0916C410931 . 13568 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\asyncmac.sys [-] 2002-08-29 12:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\ERDNT\cache\beep.sys [-] 2002-08-29 12:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\beep.sys [-] 2002-08-29 12:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\beep.sys [-] 2008-09-28 11:02:04 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\kbdclass.sys [-] 2008-09-28 11:02:04 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\dllcache\kbdclass.sys [-] 2008-09-28 11:02:04 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\drivers\kbdclass.sys [-] 2008-09-28 11:02:04 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\ReinstallBackups\0024\DriverFiles\i386\kbdclass.sys [-] 2008-04-13 22:09:48 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\kbdclass.sys [-] 2002-08-29 12:00:00 . 1E7F78C2FC393356CD884C6FDE7966F9 . 23424 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\kbdclass.sys [-] 2008-04-13 22:50:38 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ndis.sys [-] 2008-04-13 22:50:38 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ndis.sys [-] 2008-04-13 22:50:38 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ndis.sys [-] 2002-08-29 12:00:00 . 3B350E5A2A5E951453F3993275A4523A . 167552 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\ndis.sys [-] 2008-04-13 22:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\ntfs.sys [-] 2008-04-13 22:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntfs.sys [-] 2008-04-13 22:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\ntfs.sys [-] 2008-04-13 22:45:54 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\drivers\ntfs.sys [-] 2002-08-29 12:00:00 . E3AE9C79498210A5F39FE5A9AD62BC55 . 561920 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\ntfs.sys [-] 2002-08-29 12:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\ERDNT\cache\null.sys [-] 2002-08-29 12:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\null.sys [-] 2002-08-29 12:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\null.sys [-] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\tcpip.sys [-] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys [-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\ERDNT\cache\tcpip.sys [-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\tcpip.sys [-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\drivers\tcpip.sys [-] 2008-04-13 22:50:18 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\TCPIP.SYS [-] 2002-08-29 12:00:00 . 244A2F9816BC9B593957281EF577D976 . 332928 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys [-] 2008-04-14 03:41:52 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\browser.dll [-] 2008-04-14 03:41:52 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\browser.dll [-] 2008-04-14 03:41:52 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\browser.dll [-] 2002-08-29 12:00:00 . 3671D928554E124A8AC326A1769F2FFB . 49152 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\browser.dll [-] 2008-04-14 03:42:26 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\lsass.exe [-] 2008-04-14 03:42:26 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\lsass.exe [-] 2008-04-14 03:42:26 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\lsass.exe [-] 2002-08-29 12:00:00 . B2B6BA905D0E3F8A32A0EB3B4051807B . 11776 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\lsass.exe [-] 2008-04-14 03:42:02 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\netman.dll [-] 2008-04-14 03:42:02 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\netman.dll [-] 2008-04-14 03:42:02 . 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE . 198144 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\netman.dll [-] 2002-08-29 12:00:00 . E7FF9267BBEB1386975278A27378526F . 154112 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\netman.dll [-] 2008-04-14 03:41:52 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . C:\WINDOWS\ERDNT\cache\comres.dll [-] 2008-04-14 03:41:52 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . C:\WINDOWS\ServicePackFiles\i386\comres.dll [-] 2008-04-14 03:41:52 . 1280A158C722FA95A80FB7AEBE78FA7D . 792064 . . [2001.12.4414.700] . . C:\WINDOWS\system32\comres.dll [-] 2002-08-29 12:00:00 . 1F51839ECCF908FD86558198909262E4 . 792064 . . [2001.12.4414.42] . . C:\WINDOWS\$NtServicePackUninstall$\comres.dll [-] 2008-04-14 03:42:04 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\qmgr.dll [-] 2008-04-14 03:42:04 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\qmgr.dll [-] 2008-04-14 03:42:04 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\qmgr.dll [-] 2008-04-14 03:42:04 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\bits\qmgr.dll [-] 2002-08-29 12:00:00 . 6A1CF14D0E7D0B2241F552223769C8A7 . 221696 . . [6.2.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\qmgr.dll [-] 2009-02-09 12:10:48 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\ERDNT\cache\rpcss.dll [-] 2009-02-09 12:10:48 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\rpcss.dll [-] 2009-02-09 12:10:48 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\rpcss.dll [-] 2009-02-09 10:56:36 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll [-] 2008-04-14 03:42:06 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\rpcss.dll [-] 2002-08-29 12:00:00 . 493FCBED180DCACF0B5D4C8C29949CA9 . 260608 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\rpcss.dll [-] 2009-02-06 11:11:05 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\ERDNT\cache\services.exe [-] 2009-02-06 11:11:05 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\services.exe [-] 2009-02-06 11:11:05 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\system32\dllcache\services.exe [-] 2009-02-06 11:06:24 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe [-] 2008-04-14 03:42:36 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\services.exe [-] 2002-08-29 12:00:00 . E3DF4A0252D287C44606EE55355E1623 . 101376 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\services.exe [-] 2010-08-17 13:19:36 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024 (xpsp_sp3_qfe.100817-1627)] . . C:\WINDOWS\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe [-] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\ERDNT\cache\spoolsv.exe [-] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\system32\spoolsv.exe [-] 2010-08-17 13:17:06 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)] . . C:\WINDOWS\system32\dllcache\spoolsv.exe [-] 2008-04-14 03:42:38 . D8E14A61ACC1D4A6CD0D38AEBAC7FA3B . 57856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\spoolsv.exe [-] 2002-08-29 12:00:00 . 9B4155BA58192D4073082B8FC5D42612 . 51200 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe [-] 2008-04-14 03:42:40 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\winlogon.exe [-] 2008-04-14 03:42:40 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\winlogon.exe [-] 2008-04-14 03:42:40 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\winlogon.exe [-] 2008-04-14 03:42:40 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\winlogon.exe [-] 2002-08-29 12:00:00 . 2246D8D8F4714A2CEDB21AB9B1849ABB . 516608 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe [-] 2010-08-23 16:12:04 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\ERDNT\cache\comctl32.dll [-] 2010-08-23 16:12:04 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\system32\comctl32.dll [-] 2010-08-23 16:12:04 . 93AFB83FBC1F9443CAC722FCA63D73BF . 617472 . . [5.82 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\system32\dllcache\comctl32.dll [-] 2010-08-23 16:12:02 . 736B12B725AEB2B07F0241A9F680CB10 . 1054208 . . [6.0 (xpsp_sp3_qfe.100823-1643)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [-] 2008-04-14 03:42:52 . BD38D1EBE24A46BD3EDA059560AFBA12 . 1054208 . . [6.0 (xpsp.080413-2105)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [-] 2008-04-14 03:41:52 . 06F247492BC786CE5C24A23E178C711A . 617472 . . [5.82 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\comctl32.dll [-] 2002-08-29 12:00:00 . 0B5D337119929505EE72D4E4A41ED1FD . 557056 . . [5.82 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\comctl32.dll [-] 2002-08-29 12:00:00 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll [-] 2002-08-29 12:00:00 . 76B90BD220F1B1CC9E183C6B1AE9FBB4 . 921600 . . [6.0 (xpsp1.020828-1920)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll [-] 2008-04-14 03:41:52 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\cryptsvc.dll [-] 2008-04-14 03:41:52 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll [-] 2008-04-14 03:41:52 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\cryptsvc.dll [-] 2008-04-14 03:41:52 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\cryptsvc.dll [-] 2002-08-29 12:00:00 . 41C70161BFCB17E7E12ED89BADD2AEF4 . 53248 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll [-] 2008-07-07 20:26:58 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\ERDNT\cache\es.dll [-] 2008-07-07 20:26:58 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\es.dll [-] 2008-07-07 20:26:58 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\system32\dllcache\es.dll [-] 2008-07-07 20:23:18 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll [-] 2008-04-14 03:41:54 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . C:\WINDOWS\ServicePackFiles\i386\es.dll [-] 2002-08-29 12:00:00 . C9702DDD814C39DC1254CF757C31C6E4 . 225280 . . [2001.12.4414.46] . . C:\WINDOWS\$NtServicePackUninstall$\es.dll [-] 2008-04-14 03:41:56 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\imm32.dll [-] 2008-04-14 03:41:56 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\imm32.dll [-] 2008-04-14 03:41:56 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\imm32.dll [-] 2002-08-29 12:00:00 . C9F9E3E6B59C6D6CBCE7F14494A4518A . 103936 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\imm32.dll [-] 2009-03-21 14:06:58 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\ERDNT\cache\kernel32.dll [-] 2009-03-21 14:06:58 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\kernel32.dll [-] 2009-03-21 14:06:58 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\system32\dllcache\kernel32.dll [-] 2009-03-21 13:59:23 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)] . . C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll [-] 2008-04-14 03:41:58 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\kernel32.dll [-] 2002-08-29 12:00:00 . 8F162DC91D67D87C1A481BF602A9DAC8 . 930304 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\kernel32.dll [-] 2008-04-14 03:41:58 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\linkinfo.dll [-] 2008-04-14 03:41:58 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\linkinfo.dll [-] 2008-04-14 03:41:58 . 2DC5A8019E2387987905F77C664E4BE2 . 19968 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\linkinfo.dll [-] 2002-08-29 12:00:00 . 7D8C58C0CBB7331E9296A7357827CA8E . 15360 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\linkinfo.dll [-] 2008-04-14 03:41:58 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\lpk.dll [-] 2008-04-14 03:41:58 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\lpk.dll [-] 2008-04-14 03:41:58 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\lpk.dll [-] 2002-08-29 12:00:00 . 55990CA08692E2739A8DDCE0B04352AC . 18944 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\lpk.dll [-] 2011-02-22 23:27:04 . 3422847AA07E37076A87D0B7D5044DC6 . 5964800 . . [8.00.6001.23141 (longhorn_ie8_ldr.110216-1756)] . . C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\mshtml.dll [-] 2011-02-22 23:27:04 . 3422847AA07E37076A87D0B7D5044DC6 . 5964800 . . [8.00.6001.23141 (longhorn_ie8_ldr.110216-1756)] . . C:\WINDOWS\SoftwareDistribution\Download\4a68e5ecf881bfdf9f622e39f79b4af0\SP3QFE\mshtml.dll [-] 2011-02-22 23:06:29 . C2EF2335F1B6C2BE20A67D9098F6C9A1 . 5962240 . . [8.00.6001.19046 (longhorn_ie8_gdr.110216-1700)] . . C:\WINDOWS\ERDNT\cache\mshtml.dll [-] 2011-02-22 23:06:29 . C2EF2335F1B6C2BE20A67D9098F6C9A1 . 5962240 . . [8.00.6001.19046 (longhorn_ie8_gdr.110216-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\4a68e5ecf881bfdf9f622e39f79b4af0\SP3GDR\mshtml.dll [-] 2011-02-22 23:06:29 . C2EF2335F1B6C2BE20A67D9098F6C9A1 . 5962240 . . [8.00.6001.19046 (longhorn_ie8_gdr.110216-1700)] . . C:\WINDOWS\system32\mshtml.dll [-] 2011-02-22 23:06:29 . C2EF2335F1B6C2BE20A67D9098F6C9A1 . 5962240 . . [8.00.6001.19046 (longhorn_ie8_gdr.110216-1700)] . . C:\WINDOWS\system32\dllcache\mshtml.dll [-] 2010-12-20 23:59:20 . 1EDCEC5D649DBAC37ED9FFB5A14CEB0C . 5961216 . . [8.00.6001.19019 (longhorn_ie8_gdr.101217-1700)] . . C:\WINDOWS\ie8updates\KB2497640-IE8\mshtml.dll [-] 2010-12-20 23:58:52 . 2A2C070EC691CE410533A1DA7AA3CD86 . 5962240 . . [8.00.6001.23111 (longhorn_ie8_ldr.101217-1800)] . . C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\mshtml.dll [-] 2010-11-06 00:27:33 . 864E69F32656A7121444BA0193D7B64B . 5960704 . . [8.00.6001.23091 (longhorn_ie8_ldr.101101-1800)] . . C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\mshtml.dll [-] 2010-11-06 00:26:58 . D7CCA87057901C87ED8CC40DDCC7FA1B . 5959168 . . [8.00.6001.18999 (longhorn_ie8_gdr.101101-1700)] . . C:\WINDOWS\ie8updates\KB2482017-IE8\mshtml.dll [-] 2010-09-10 05:58:08 . DE41132DA8E5A3CD57201C6F2175EC05 . 5957120 . . [8.00.6001.18975 (longhorn_ie8_gdr.100907-1700)] . . C:\WINDOWS\ie8updates\KB2416400-IE8\mshtml.dll [-] 2010-09-10 05:57:24 . 8A03CC037E6B7D1796192815231B0C3F . 5958656 . . [8.00.6001.23067 (longhorn_ie8_ldr.100907-1730)] . . C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\mshtml.dll [-] 2010-06-24 12:24:46 . 94DC7E938C57F3C3D1BC4A0F68FC5830 . 5954560 . . [8.00.6001.23037 (longhorn_ie8_ldr.100616-1800)] . . C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\mshtml.dll [-] 2010-06-24 12:22:01 . 4D7EF94795384CD2BBAAB078B7929FEA . 5951488 . . [8.00.6001.18939 (longhorn_ie8_gdr.100616-1700)] . . C:\WINDOWS\ie8updates\KB2360131-IE8\mshtml.dll [-] 2010-05-06 10:41:52 . C7B7A88CC7D7ABA5C395145BF92F46F7 . 5950976 . . [8.00.6001.18928 (longhorn_ie8_gdr.100503-1700)] . . C:\WINDOWS\ie8updates\KB2183461-IE8\mshtml.dll [-] 2010-05-06 10:36:26 . 9BE28F749A7FE7F8F177C6AA2E9DA609 . 5953024 . . [8.00.6001.23019 (longhorn_ie8_ldr.100503-1800)] . . C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll [-] 2010-02-25 06:24:36 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\ie8updates\KB982381-IE8\mshtml.dll [-] 2010-02-25 06:19:43 . 974772C74DA7C7A8E7C813A9908A845F . 5946880 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll [-] 2009-12-21 19:14:04 . BE6EEBEF636773A8E7A82214E81C563A . 5942784 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\mshtml.dll [-] 2009-12-21 19:09:28 . E6B64C6C729BBC38AB7CC92CE33F97A5 . 5945856 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll [-] 2009-10-29 07:45:44 . C0F9AC6FAB2C788FFEE3E69585A0E93F . 5944320 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll [-] 2009-10-29 07:45:37 . CBB1EF54B86EDB78649909DD1699E5CA . 5940736 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\mshtml.dll [-] 2009-10-22 09:19:04 . CDA69BC1C23B0EA033B989F67CB722FF . 5939712 . . [8.00.6001.18852 (longhorn_ie8_gdr.091020-1827)] . . C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll [-] 2009-10-22 09:18:10 . A6CF28C6E0B6D10098AB601D85EE55E8 . 5943296 . . [8.00.6001.22942 (longhorn_ie8_ldr.091021-0230)] . . C:\WINDOWS\$hf_mig$\KB976749-IE8\SP3QFE\mshtml.dll [-] 2009-08-29 08:08:20 . 0E49677EE57A928765FC47FFBACD5326 . 5940224 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ie8updates\KB976749-IE8\mshtml.dll [-] 2009-08-29 08:01:43 . B68F6E6C66D17D9EDABF3D5DA71046DA . 5942272 . . [8.00.6001.22918 (longhorn_ie8_ldr.090827-0100)] . . C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\mshtml.dll [-] 2009-07-19 13:18:59 . 5A32B43A48D6DCA339BF24105D9A028F . 5937152 . . [8.00.6001.18812 (longhorn_ie8_gdr.090717-2100)] . . C:\WINDOWS\ie8updates\KB974455-IE8\mshtml.dll [-] 2009-07-19 13:17:52 . F25D866DD486AD30E05E5596CB363C3E . 5938176 . . [8.00.6001.22902 (longhorn_ie8_ldr.090718-0500)] . . C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\mshtml.dll [-] 2009-05-13 05:15:55 . EEAADAA744B20E68CF5EB4FBB4F8AFA9 . 5936128 . . [8.00.6001.18783 (longhorn_ie8_gdr.090508-1700)] . . C:\WINDOWS\ie8updates\KB972260-IE8\mshtml.dll [-] 2009-05-13 05:10:01 . 1290E417BF806185CC7B2845E78A104E . 5936128 . . [8.00.6001.22873 (longhorn_ie8_ldr.090509-0100)] . . C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\mshtml.dll [-] 2009-03-08 02:41:16 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB969897-IE8\mshtml.dll [-] 2008-12-14 13:27:50 . 2973F5FC57D2755AB57ED14FFF8DDA47 . 5699584 . . [8.00.6001.22342 (longhorn_ie8_beta2ldr.081212-1534)] . . C:\WINDOWS\$hf_mig$\KB960714-IE8\SP3QFE\mshtml.dll [-] 2008-08-27 08:24:32 . 1AD035E04A7068EC2820B055A3131ED8 . 3593216 . . [7.00.6000.16735 (vista_gdr.080820-1506)] . . C:\WINDOWS\ie8\mshtml.dll [-] 2008-08-26 09:08:43 . 25CC085720EE3617FD1F8AB9E2F7CAB2 . 3594752 . . [7.00.6000.20900 (vista_ldr.080820-1506)] . . C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll [-] 2008-06-24 08:57:40 . EC936148284F557F19C333178768109B . 3592192 . . [7.00.6000.16705 (vista_gdr.080618-1506)] . . C:\WINDOWS\ie7updates\KB956390-IE7\mshtml.dll [-] 2008-06-23 16:01:49 . 28B8231CA8D55FC85E027A57C90F5C88 . 3594240 . . [7.00.6000.20861 (vista_ldr.080618-1506)] . . C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll [-] 2008-04-14 03:42:00 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ie7\mshtml.dll [-] 2008-04-14 03:42:00 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\mshtml.dll [-] 2007-08-13 16:54:12 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13 (longhorn(wmbla).070711-1130)] . . C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll [-] 2002-08-29 12:00:00 . 448EE0A3EDFC3339EC70E93C027E28C8 . 2833920 . . [6.00.2800.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\mshtml.dll [-] 2008-04-14 03:42:52 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll [-] 2008-04-14 03:42:02 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\msvcrt.dll [-] 2008-04-14 03:42:02 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll [-] 2008-04-14 03:42:02 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\msvcrt.dll [-] 2008-04-14 03:42:02 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\msvcrt.dll [-] 2002-08-29 12:00:00 . 886A6C3C185AAEDECD00477F72279B07 . 323072 . . [7.0.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\msvcrt.dll [-] 2002-08-29 12:00:00 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll [-] 2002-08-29 12:00:00 . 70630CAD245477F8DB02B79D9A92834C . 323072 . . [7.0.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\msvcrt.dll [-] 2008-06-20 17:43:05 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB2509553\SP3QFE\mswsock.dll [-] 2008-06-20 17:43:05 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll [-] 2008-06-20 16:02:47 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\ERDNT\cache\mswsock.dll [-] 2008-06-20 16:02:47 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\mswsock.dll [-] 2008-06-20 16:02:47 . 943337D786A56729263071623BBB9DE5 . 245248 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\dllcache\mswsock.dll [-] 2008-04-14 03:42:02 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\mswsock.dll [-] 2002-08-29 12:00:00 . 18A8BE5A66B93F9C9615F7D4C148EDE2 . 228352 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\mswsock.dll [-] 2008-04-14 03:42:02 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\netlogon.dll [-] 2008-04-14 03:42:02 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\netlogon.dll [-] 2008-04-14 03:42:02 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\netlogon.dll [-] 2002-08-29 12:00:00 . 3ADD563ED7A1C66E6F5E0F7A661AA96D . 399360 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll [-] 2008-04-14 03:42:04 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\powrprof.dll [-] 2008-04-14 03:42:04 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\powrprof.dll [-] 2008-04-14 03:42:04 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\powrprof.dll [-] 2002-08-29 12:00:00 . 865AD7CCB20856727D5BD994B094DC5E . 14848 . . [6.00.2600.0000 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\powrprof.dll [-] 2008-04-14 03:42:06 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\scecli.dll [-] 2008-04-14 03:42:06 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\scecli.dll [-] 2008-04-14 03:42:06 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\scecli.dll [-] 2002-08-29 12:00:00 . 97418A5C642A5C748A28BD7CF6860B57 . 174592 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\scecli.dll [-] 2008-04-14 03:42:06 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\sfc.dll [-] 2008-04-14 03:42:06 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\sfc.dll [-] 2008-04-14 03:42:06 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfc.dll [-] 2008-04-14 03:42:06 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\sfc.dll [-] 2002-08-29 12:00:00 . 52BB2A508CB3EB8AAA5F6F142F5B73D6 . 4096 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\sfc.dll [-] 2008-04-14 03:42:38 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\svchost.exe [-] 2008-04-14 03:42:38 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\svchost.exe [-] 2008-04-14 03:42:38 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\svchost.exe [-] 2002-08-29 12:00:00 . 0F7D9C87B0CE1FA520473119752C6F79 . 12800 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\svchost.exe [-] 2008-04-14 03:42:08 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\tapisrv.dll [-] 2008-04-14 03:42:08 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\tapisrv.dll [-] 2008-04-14 03:42:08 . 3CB78C17BB664637787C9A1C98F79C38 . 249856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\tapisrv.dll [-] 2002-08-29 12:00:00 . 9B3A213B6591A79EBABBFB4E4EA0A23E . 233984 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll [-] 2008-04-14 03:42:10 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\user32.dll [-] 2008-04-14 03:42:10 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\user32.dll [-] 2008-04-14 03:42:10 . B26B135FF1B9F60C9388B4A7D16F600B . 578560 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\user32.dll [-] 2002-08-29 12:00:00 . DD9269230C21EE8FB7FD3FCCC3B1CFCB . 560128 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\user32.dll [-] 2008-04-14 03:42:40 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\userinit.exe [-] 2008-04-14 03:42:40 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\userinit.exe [-] 2008-04-14 03:42:40 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\userinit.exe [-] 2002-08-29 12:00:00 . E931E0A2B8BF0019DB902E98D03662CB . 22016 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\userinit.exe [-] 2011-02-22 23:27:04 . A9FA95F0D7F511959AC721E4843E5967 . 919552 . . [8.00.6001.23139 (longhorn_ie8_ldr.110211-1800)] . . C:\WINDOWS\$hf_mig$\KB2497640-IE8\SP3QFE\wininet.dll [-] 2011-02-22 23:27:04 . A9FA95F0D7F511959AC721E4843E5967 . 919552 . . [8.00.6001.23139 (longhorn_ie8_ldr.110211-1800)] . . C:\WINDOWS\SoftwareDistribution\Download\4a68e5ecf881bfdf9f622e39f79b4af0\SP3QFE\wininet.dll [-] 2011-02-22 23:06:29 . F192D49EEFE297FA858B2C774BA2291D . 916480 . . [8.00.6001.19044 (longhorn_ie8_gdr.110211-1700)] . . C:\WINDOWS\ERDNT\cache\wininet.dll [-] 2011-02-22 23:06:29 . F192D49EEFE297FA858B2C774BA2291D . 916480 . . [8.00.6001.19044 (longhorn_ie8_gdr.110211-1700)] . . C:\WINDOWS\SoftwareDistribution\Download\4a68e5ecf881bfdf9f622e39f79b4af0\SP3GDR\wininet.dll [-] 2011-02-22 23:06:29 . F192D49EEFE297FA858B2C774BA2291D . 916480 . . [8.00.6001.19044 (longhorn_ie8_gdr.110211-1700)] . . C:\WINDOWS\system32\wininet.dll [-] 2011-02-22 23:06:29 . F192D49EEFE297FA858B2C774BA2291D . 916480 . . [8.00.6001.19044 (longhorn_ie8_gdr.110211-1700)] . . C:\WINDOWS\system32\dllcache\wininet.dll [-] 2010-12-20 23:59:20 . 88014D62B5E3CDB0AC67948D86C926C8 . 916480 . . [8.00.6001.19019 (longhorn_ie8_gdr.101217-1700)] . . C:\WINDOWS\ie8updates\KB2497640-IE8\wininet.dll [-] 2010-12-20 23:58:53 . 5504B4ECCE892EB82CD2C5FA71940AC1 . 919552 . . [8.00.6001.23111 (longhorn_ie8_ldr.101217-1800)] . . C:\WINDOWS\$hf_mig$\KB2482017-IE8\SP3QFE\wininet.dll [-] 2010-11-06 00:27:34 . 9357C4249F4810FB0E49C13387A8A77C . 919552 . . [8.00.6001.23084 (longhorn_ie8_ldr.101015-1800)] . . C:\WINDOWS\$hf_mig$\KB2416400-IE8\SP3QFE\wininet.dll [-] 2010-11-06 00:26:58 . 306A2B05EA9846278113964DC6E2C940 . 916480 . . [8.00.6001.18992 (longhorn_ie8_gdr.101015-1700)] . . C:\WINDOWS\ie8updates\KB2482017-IE8\wininet.dll [-] 2010-09-10 05:58:08 . 36FE8ABC59AAFBE20CBE54BC372F9429 . 916480 . . [8.00.6001.18968 (longhorn_ie8_gdr.100824-1830)] . . C:\WINDOWS\ie8updates\KB2416400-IE8\wininet.dll [-] 2010-09-10 05:57:25 . 0555E190DCD06B8998E6DDCA42DAEB82 . 919552 . . [8.00.6001.23060 (longhorn_ie8_ldr.100824-1900)] . . C:\WINDOWS\$hf_mig$\KB2360131-IE8\SP3QFE\wininet.dll [-] 2010-06-24 12:24:46 . 60237E50D575FBA9BEC9BC043F157149 . 919040 . . [8.00.6001.23037 (longhorn_ie8_ldr.100616-1800)] . . C:\WINDOWS\$hf_mig$\KB2183461-IE8\SP3QFE\wininet.dll [-] 2010-06-24 12:22:03 . D3DEB6B2B424AC93DE3801EAEB21A9A5 . 916480 . . [8.00.6001.18939 (longhorn_ie8_gdr.100616-1700)] . . C:\WINDOWS\ie8updates\KB2360131-IE8\wininet.dll [-] 2010-05-06 10:41:53 . 2D9C7B010409372C34F725DA5CCED083 . 916480 . . [8.00.6001.18923 (longhorn_ie8_gdr.100419-1241)] . . C:\WINDOWS\ie8updates\KB2183461-IE8\wininet.dll [-] 2010-05-06 10:36:27 . C1490F68B44AF8B781F52F12F564625D . 919040 . . [8.00.6001.23014 (longhorn_ie8_ldr.100419-1507)] . . C:\WINDOWS\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll [-] 2010-02-25 06:24:37 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\ie8updates\KB982381-IE8\wininet.dll [-] 2010-02-25 06:19:44 . 4458D59F2B0369F4D3B137541D284041 . 919040 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll [-] 2009-12-21 19:14:05 . FF4241C74E0C0A5AFFFE05F584213ECB . 916480 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\wininet.dll [-] 2009-12-21 19:09:28 . 5E1F666B8955FD77E65D65C4C4D882A3 . 916480 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll [-] 2009-10-29 07:45:45 . 6AF52998B90F72FF2325D84D90EDA1CC . 916480 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll [-] 2009-10-29 07:45:38 . 75240F6EDBCE7B85DF66874407D38A4F . 916480 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\wininet.dll [-] 2009-08-29 08:08:21 . CF0A5FE05BF614C24950D8FAEC1BC309 . 916480 . . [8.00.6001.18828 (longhorn_ie8_gdr.090826-1700)] . . C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll [-] 2009-08-29 08:01:44 . 972B226BDAD71C55F3CC9A72BBF8F1C1 . 916480 . . [8.00.6001.22918 (longhorn_ie8_ldr.090827-0100)] . . C:\WINDOWS\$hf_mig$\KB974455-IE8\SP3QFE\wininet.dll [-] 2009-07-03 17:09:28 . 7E8A47A2E6561274B83E257CE74803FD . 915456 . . [8.00.6001.18806 (longhorn_ie8_gdr.090701-1700)] . . C:\WINDOWS\ie8updates\KB974455-IE8\wininet.dll [-] 2009-07-03 17:06:51 . 38114DAB42FB2EB84D1726C42B8D80C5 . 915456 . . [8.00.6001.22896 (longhorn_ie8_ldr.090702-0100)] . . C:\WINDOWS\$hf_mig$\KB972260-IE8\SP3QFE\wininet.dll [-] 2009-05-13 05:15:55 . 366C72AF6970DB7BB39AB0142BF09DB5 . 915456 . . [8.00.6001.18783 (longhorn_ie8_gdr.090508-1700)] . . C:\WINDOWS\ie8updates\KB972260-IE8\wininet.dll [-] 2009-05-13 05:10:01 . C0EB6850C8A02A154281749DC61FAF22 . 915456 . . [8.00.6001.22873 (longhorn_ie8_ldr.090509-0100)] . . C:\WINDOWS\$hf_mig$\KB969897-IE8\SP3QFE\wininet.dll [-] 2009-03-08 02:34:58 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB969897-IE8\wininet.dll [-] 2008-08-26 09:08:45 . 77C192FE56A70D7FA0247BA0A6201C32 . 827904 . . [7.00.6000.20900 (vista_ldr.080820-1506)] . . C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll [-] 2008-08-26 07:24:31 . EF8EBA98145BFA44E80D17A3B3453300 . 826368 . . [7.00.6000.16735 (vista_gdr.080820-1506)] . . C:\WINDOWS\ie8\wininet.dll [-] 2008-06-23 16:57:41 . 8C13D4A7479FA0A026EDA8ABCE82C0ED . 826368 . . [7.00.6000.16705 (vista_gdr.080618-1506)] . . C:\WINDOWS\ie7updates\KB956390-IE7\wininet.dll [-] 2008-06-23 16:01:51 . C66402A06B83B036C195242C0C8CF83C . 827904 . . [7.00.6000.20861 (vista_ldr.080618-1506)] . . C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll [-] 2008-04-14 03:42:10 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ie7\wininet.dll [-] 2008-04-14 03:42:10 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\wininet.dll [-] 2007-08-13 16:54:10 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13 (longhorn(wmbla).070711-1130)] . . C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll [-] 2002-08-29 12:00:00 . F3587750A7481DCCBEA13D473A0700BE . 599040 . . [6.00.2800.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\wininet.dll [-] 2008-04-14 03:42:12 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ws2_32.dll [-] 2008-04-14 03:42:12 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll [-] 2008-04-14 03:42:12 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2_32.dll [-] 2002-08-29 12:00:00 . 8529C295DF59B564D37A73B5629162B1 . 75264 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll [-] 2008-04-14 03:42:12 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ws2help.dll [-] 2008-04-14 03:42:12 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ws2help.dll [-] 2008-04-14 03:42:12 . 9789E95E1D88EEB4B922BF3EA7779C28 . 19968 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ws2help.dll [-] 2002-08-29 12:00:00 . 235C7EF9AEDDE76801169DC61FA72DEF . 18944 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll [-] 2008-04-14 03:42:20 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\explorer.exe [-] 2008-04-14 03:42:20 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\explorer.exe [-] 2008-04-14 03:42:20 . 12896823FB95BFB3DC9B46BCAEDC9923 . 1033728 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\explorer.exe [-] 2002-08-29 12:00:00 . A82B28BFC2E4455FE43022A498C0EF0A . 1004032 . . [6.00.2800.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\explorer.exe [-] 2008-04-14 03:42:34 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\regedit.exe [-] 2008-04-14 03:42:34 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\regedit.exe [-] 2008-04-14 03:42:34 . 058710B720282CA82B909912D3EF28DB . 146432 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\regedit.exe [-] 2002-08-29 12:00:00 . B28FB518CD2949715CBFCE0E93A7A535 . 134144 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\regedit.exe [-] 2010-07-16 12:05:55 . 7A6A7900B5E322763430BA6FD9A31224 . 1288192 . . [5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)] . . C:\WINDOWS\ERDNT\cache\ole32.dll [-] 2010-07-16 12:05:55 . 7A6A7900B5E322763430BA6FD9A31224 . 1288192 . . [5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)] . . C:\WINDOWS\system32\ole32.dll [-] 2010-07-16 12:05:55 . 7A6A7900B5E322763430BA6FD9A31224 . 1288192 . . [5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)] . . C:\WINDOWS\system32\dllcache\ole32.dll [-] 2010-07-16 12:04:26 . 8D51FB47062F2A1A9EFECCEF338A4C46 . 1289216 . . [5.1.2600.6010 (xpsp_sp3_qfe.100712-1633)] . . C:\WINDOWS\$hf_mig$\KB979687\SP3QFE\ole32.dll [-] 2008-04-14 03:42:04 . ECCE74BC6168375016450A86A164D976 . 1287168 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\ole32.dll [-] 2002-08-29 12:00:00 . CB598C117C6AB02584BB3B3452A04F11 . 1169920 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\ole32.dll [-] 2010-04-16 15:36:56 . 9E03DC5AB51CFD0190541CE2038D819D . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\ERDNT\cache\usp10.dll [-] 2010-04-16 15:36:56 . 9E03DC5AB51CFD0190541CE2038D819D . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\system32\usp10.dll [-] 2010-04-16 15:36:56 . 9E03DC5AB51CFD0190541CE2038D819D . 406016 . . [1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)] . . C:\WINDOWS\system32\dllcache\usp10.dll [-] 2010-04-16 15:29:45 . F8894BCC961D461674002B4BAE7AECC1 . 406016 . . [1.0420.2600.5969 (xpsp_sp3_qfe.100416-1736)] . . C:\WINDOWS\$hf_mig$\KB981322\SP3QFE\usp10.dll [-] 2008-04-14 03:42:10 . 7D7D8501F3CB45D0408CDEFA08CDAEFF . 406016 . . [1.0420.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\usp10.dll [-] 2002-08-29 12:00:00 . 73C90911DD86A10D4004C7D6E655A41B . 339456 . . [1.0409.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\usp10.dll [-] 2008-04-14 03:42:08 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\srsvc.dll [-] 2008-04-14 03:42:08 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\srsvc.dll [-] 2008-04-14 03:42:08 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\srsvc.dll [-] 2002-08-29 12:00:00 . 38E9CFAC7881435764051FD7B1F010FB . 158720 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll [-] 2008-04-14 03:42:42 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\wscntfy.exe [-] 2008-04-14 03:42:38 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\wscntfy.exe [-] 2008-04-14 03:42:38 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\wscntfy.exe [-] 2008-04-14 03:42:38 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\wscntfy.exe [-] 2008-04-14 03:42:12 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\xmlprov.dll [-] 2008-04-14 03:42:12 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\xmlprov.dll [-] 2008-04-14 03:42:12 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\xmlprov.dll [-] 2008-04-14 03:41:54 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\eventlog.dll [-] 2008-04-14 03:41:54 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\eventlog.dll [-] 2008-04-14 03:41:54 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\eventlog.dll [-] 2002-08-29 12:00:00 . BF3C8CF53C77B48206B39910B6D6CBCC . 49152 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll [-] 2008-04-14 03:42:06 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\sfcfiles.dll [-] 2008-04-14 03:42:06 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\sfcfiles.dll [-] 2008-04-14 03:42:06 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\sfcfiles.dll [-] 2008-04-14 03:42:06 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\sfcfiles.dll [-] 2002-08-29 12:00:00 . 2564949DBE5F643F50913BBE45D346E2 . 1157632 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\sfcfiles.dll [-] 2008-04-14 03:42:18 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\ctfmon.exe [-] 2008-04-14 03:42:18 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\ctfmon.exe [-] 2008-04-14 03:42:18 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\ctfmon.exe [-] 2002-08-29 12:00:00 . 414DE7CF9D3F19C3EA902F1BB38EC116 . 13312 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\ctfmon.exe [-] 2009-07-27 23:17:41 . 99BC0B50F511924348BE19C7C7313BBF . 135168 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\ERDNT\cache\shsvcs.dll [-] 2009-07-27 23:17:41 . 99BC0B50F511924348BE19C7C7313BBF . 135168 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\system32\shsvcs.dll [-] 2009-07-27 23:17:41 . 99BC0B50F511924348BE19C7C7313BBF . 135168 . . [6.00.2900.5853 (xpsp_sp3_gdr.090727-1736)] . . C:\WINDOWS\system32\dllcache\shsvcs.dll [-] 2009-07-27 22:13:09 . 888CD7B39C37E13A2419BECFAAF0A28C . 135168 . . [6.00.2900.5853 (xpsp_sp3_qfe.090727-1747)] . . C:\WINDOWS\$hf_mig$\KB971029\SP3QFE\shsvcs.dll [-] 2008-04-14 03:42:06 . 1926899BF9FFE2602B63074971700412 . 135168 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\shsvcs.dll [-] 2002-08-29 12:00:00 . 61684089A54936E40F65DA02D47A28AE . 116224 . . [6.00.2800.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll [-] 2008-04-14 03:42:06 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\regsvc.dll [-] 2008-04-14 03:42:06 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\regsvc.dll [-] 2008-04-14 03:42:06 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\regsvc.dll [-] 2002-08-29 12:00:00 . 9DF4527D53613601D3F79946EAA1DCB1 . 51712 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\regsvc.dll [-] 2008-04-14 03:42:06 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\schedsvc.dll [-] 2008-04-14 03:42:06 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\schedsvc.dll [-] 2008-04-14 03:42:06 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\schedsvc.dll [-] 2002-08-29 12:00:00 . 719B05113003A1934EA25EA1FED68C85 . 159232 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\schedsvc.dll [-] 2008-04-14 03:42:08 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ssdpsrv.dll [-] 2008-04-14 03:42:08 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ssdpsrv.dll [-] 2008-04-14 03:42:08 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\ssdpsrv.dll [-] 2002-08-29 12:00:00 . 75B5821307B2F4491F9ED06732366872 . 43008 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll [-] 2008-04-14 03:42:08 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\termsrv.dll [-] 2008-04-14 03:42:08 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\termsrv.dll [-] 2008-04-14 03:42:08 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\termsrv.dll [-] 2002-08-29 12:00:00 . FE84E045A09A4ABC4DEEF7270448B64E . 200192 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll [-] 2008-04-14 03:41:56 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\hnetcfg.dll [-] 2008-04-14 03:41:56 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\hnetcfg.dll [-] 2008-04-14 03:41:56 . 3CB32D3B8CBE79899D63280BB7A83CD9 . 344064 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\hnetcfg.dll [-] 2002-08-29 12:00:00 . F5FBCABFE303D309DF5163ABFBBB6958 . 240640 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\hnetcfg.dll [-] 2008-04-14 03:41:50 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\appmgmts.dll [-] 2008-04-14 03:41:50 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\appmgmts.dll [-] 2008-04-14 03:41:50 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\appmgmts.dll [-] 2008-04-14 03:41:50 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\dllcache\appmgmts.dll [-] 2002-08-29 12:00:00 . AE0BDD0E65987747988861103B50FA4F . 156672 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\appmgmts.dll [-] 2002-08-29 12:00:00 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\ERDNT\cache\acpiec.sys [-] 2002-08-29 12:00:00 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\system32\dllcache\acpiec.sys [-] 2002-08-29 12:00:00 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\system32\drivers\acpiec.sys [-] 2008-04-13 20:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\ERDNT\cache\aec.sys [-] 2008-04-13 20:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\ServicePackFiles\i386\aec.sys [-] 2008-04-13 20:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\system32\dllcache\aec.sys [-] 2008-04-13 20:09:24 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . C:\WINDOWS\system32\drivers\aec.sys [-] 2002-08-28 21:16:38 . FF773FEDA15E8BD97FD54FE87A0ACDBE . 142208 . . [5.1.2601.1095 built by: xpsp1] . . C:\WINDOWS\$NtServicePackUninstall$\aec.sys [-] 2008-04-13 22:06:40 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\agp440.sys [-] 2008-04-13 22:06:40 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\agp440.sys [-] 2008-04-13 22:06:40 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\dllcache\agp440.sys [-] 2008-04-13 22:06:40 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\drivers\agp440.sys [-] 2008-04-13 22:23:36 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\ip6fw.sys [-] 2008-04-13 22:23:36 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\ip6fw.sys [-] 2008-04-13 22:23:36 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\drivers\ip6fw.sys [-] 2010-09-18 07:18:30 . 842900DEDBC8E3E8DBCCCB298FD88F65 . 953856 . . [4.1.6151] . . C:\WINDOWS\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll [-] 2010-09-18 06:53:25 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . C:\WINDOWS\ERDNT\cache\mfc40u.dll [-] 2010-09-18 06:53:25 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . C:\WINDOWS\system32\mfc40u.dll [-] 2010-09-18 06:53:25 . E76A5C202E68AF5A322D16B5A78F48B9 . 953856 . . [4.1.6151] . . C:\WINDOWS\system32\dllcache\mfc40u.dll [-] 2008-04-14 03:41:58 . CDDD4416B2B4C7295FE3FDB6DDE57E4E . 927504 . . [4.1.0.61] . . C:\WINDOWS\ServicePackFiles\i386\mfc40u.dll [-] 2002-08-29 12:00:00 . DDF8D47ACF8FC3FE5F7F2B95C4D4D136 . 924432 . . [4.1.6140] . . C:\WINDOWS\$NtServicePackUninstall$\mfc40u.dll [-] 2008-04-14 03:42:00 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\msgsvc.dll [-] 2008-04-14 03:42:00 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\msgsvc.dll [-] 2008-04-14 03:42:00 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\msgsvc.dll [-] 2002-08-29 12:00:00 . A81487520F11F65BF270D50EE29887B2 . 34304 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\msgsvc.dll [-] 2008-04-14 03:42:02 . C7E39EA41233E9F5B86C8DA3A9F1E4A8 . 52224 . . [9.0.1.56] . . C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll [-] 2006-10-18 20:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\ERDNT\cache\mspmsnsv.dll [-] 2006-10-18 20:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\mspmsnsv.dll [-] 2006-10-18 20:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\dllcache\mspmsnsv.dll [-] 2005-01-28 11:44:28 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll [-] 2010-12-09 17:39:28 . F67CD97282E0ABFAF91A9A1359B16F2D . 2069376 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe [-] 2010-12-09 13:07:07 . 9ED77E2307F6EC6F174C063C15AA3B8C . 2027008 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\ERDNT\cache\ntkrnlpa.exe [-] 2010-12-09 13:07:07 . 9ED77E2307F6EC6F174C063C15AA3B8C . 2027008 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\ntkrnlpa.exe [-] 2010-12-09 13:07:05 . 84FF488E249DBD2050EB39EA81C6F5C2 . 2069376 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe [-] 2010-12-09 13:07:05 . 84FF488E249DBD2050EB39EA81C6F5C2 . 2069376 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\dllcache\ntkrnlpa.exe [-] 2010-04-28 05:14:16 . 756362706DE8BC92F11E197C98A73844 . 2066944 . . [5.1.2600.5973 (xpsp_sp3_qfe.100427-1650)] . . C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe [-] 2010-02-16 12:12:52 . DED8B5A89B085284634502E9D75AC78C . 2066944 . . [5.1.2600.5938 (xpsp_sp3_qfe.100216-1510)] . . C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe [-] 2009-12-08 22:10:32 . FFDCE1EEA79C678C40237D4E031E5B51 . 2066176 . . [5.1.2600.5913 (xpsp_sp3_qfe.091208-2029)] . . C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe [-] 2009-08-04 16:47:50 . 363B2BBEE0AEDC9E5433616D0AD0236A . 2066176 . . [5.1.2600.5857 (xpsp_sp3_qfe.090804-1456)] . . C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe [-] 2009-02-06 10:30:40 . 607352B9CB3D708C67F6039097801B5A . 2066176 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe [-] 2008-08-14 13:39:46 . A25E9B86EFFB2AF33BF51E676B68BFB0 . 2066048 . . [5.1.2600.5657 (xpsp_sp3_qfe.080814-1300)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe [-] 2008-04-13 22:01:22 . 109F8E3E3C82E337BB71B6BC9B895D61 . 2065792 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe [-] 2002-08-29 12:00:00 . 71FF7EC0EEEA4896DD219C661C90DB29 . 1920512 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe [-] 2008-04-14 03:42:04 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . C:\WINDOWS\ERDNT\cache\ntmssvc.dll [-] 2008-04-14 03:42:04 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . C:\WINDOWS\ServicePackFiles\i386\ntmssvc.dll [-] 2008-04-14 03:42:04 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . C:\WINDOWS\system32\ntmssvc.dll [-] 2002-08-29 12:00:00 . AAC49EF5C84A2EBD7409A51A1B65C542 . 392704 . . [5.1.2400.1106] . . C:\WINDOWS\$NtServicePackUninstall$\ntmssvc.dll [-] 2008-04-14 03:42:10 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\upnphost.dll [-] 2008-04-14 03:42:10 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\upnphost.dll [-] 2008-04-14 03:42:10 . 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 . 185856 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\upnphost.dll [-] 2002-08-29 12:00:00 . 848CE0601B58410FF2DFB6BC8449AFE7 . 164864 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll [-] 2008-04-14 03:41:54 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ERDNT\cache\dsound.dll [-] 2008-04-14 03:41:54 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\dsound.dll [-] 2008-04-14 03:41:54 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\dsound.dll [-] 2004-07-09 02:27:28 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\$NtServicePackUninstall$\dsound.dll [-] 2004-07-09 02:27:28 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll [-] 2008-04-14 03:41:52 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ERDNT\cache\d3d9.dll [-] 2008-04-14 03:41:52 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\d3d9.dll [-] 2008-04-14 03:41:52 . 0607CBC6FA20114CB491EFE4B2F9EFAD . 1689088 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\d3d9.dll [-] 2004-07-09 02:27:28 . 0E51BD586D186F61A9E4453DB8AEC774 . 1703936 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\$NtServicePackUninstall$\d3d9.dll [-] 2008-04-14 03:41:52 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ERDNT\cache\ddraw.dll [-] 2008-04-14 03:41:52 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\ddraw.dll [-] 2008-04-14 03:41:52 . A340CD71EB535A3DD751B5F28723E50C . 279552 . . [5.03.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\ddraw.dll [-] 2004-07-09 02:27:28 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\$NtServicePackUninstall$\ddraw.dll [-] 2004-07-09 02:27:28 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll [-] 2008-04-14 03:42:04 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\ERDNT\cache\olepro32.dll [-] 2008-04-14 03:42:04 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\ServicePackFiles\i386\olepro32.dll [-] 2008-04-14 03:42:04 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\system32\olepro32.dll [-] 2008-04-14 03:42:04 . 5652F6CE1D9E9D8068B9D29BC21B5409 . 84992 . . [5.1.2600.5512] . . C:\WINDOWS\system32\dllcache\olepro32.dll [-] 2002-08-29 12:00:00 . 76E77301A8A73457A5B55E76847DB892 . 106496 . . [5.0.5014] . . C:\WINDOWS\$NtServicePackUninstall$\olepro32.dll [-] 2008-04-14 03:42:04 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ERDNT\cache\perfctrs.dll [-] 2008-04-14 03:42:04 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\perfctrs.dll [-] 2008-04-14 03:42:04 . DBE2B62353660ECCA0D75EA307A717E9 . 39936 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\system32\perfctrs.dll [-] 2002-08-29 12:00:00 . 972EFFC80D9E806539489883D37032F5 . 37376 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\perfctrs.dll [-] 2008-04-14 03:42:10 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ERDNT\cache\version.dll [-] 2008-04-14 03:42:10 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\ServicePackFiles\i386\version.dll [-] 2008-04-14 03:42:10 . C7CE131408739B0B3A318BE2D0032719 . 18944 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\system32\version.dll [-] 2002-08-29 12:00:00 . 90D0D0BEA6FBC19E765E30B7DDF52B9A . 16384 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\version.dll [-] 2010-12-09 13:43:18 . A531BBD3DE13121C1380ED7DC99082DB . 2192768 . . [5.1.2600.6055 (xpsp_sp3_qfe.101209-1646)] . . C:\WINDOWS\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe [-] 2010-12-09 13:42:26 . 60E16152D847D7A7B7D3DA4C4B8E2120 . 2148864 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\ERDNT\cache\ntoskrnl.exe [-] 2010-12-09 13:42:26 . 60E16152D847D7A7B7D3DA4C4B8E2120 . 2148864 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\ntoskrnl.exe [-] 2010-12-09 13:38:47 . 64C1ADF6DF629F340C5A439FE0EF8ED1 . 2192768 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe [-] 2010-12-09 13:38:47 . 64C1ADF6DF629F340C5A439FE0EF8ED1 . 2192768 . . [5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)] . . C:\WINDOWS\system32\dllcache\ntoskrnl.exe [-] 2010-04-27 13:50:44 . A2ABBEC40CDB57454645D06B7EBD22F5 . 2190080 . . [5.1.2600.5973 (xpsp_sp3_qfe.100427-1650)] . . C:\WINDOWS\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe [-] 2010-02-16 12:52:12 . E1F653A542449D54FA2D27463D99B6B6 . 2190080 . . [5.1.2600.5938 (xpsp_sp3_qfe.100216-1510)] . . C:\WINDOWS\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe [-] 2009-12-08 22:52:36 . 05BE3D9A71972223AFF6A3C823BA51B1 . 2189312 . . [5.1.2600.5913 (xpsp_sp3_qfe.091208-2029)] . . C:\WINDOWS\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe [-] 2009-08-04 13:56:10 . FDE779EA1A564EBFE16F4E0F82B61BAD . 2189312 . . [5.1.2600.5857 (xpsp_sp3_qfe.090804-1456)] . . C:\WINDOWS\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe [-] 2009-02-07 17:35:26 . EFE8EACE83EAAD5849A7A548FB75B584 . 2189184 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe [-] 2008-08-14 14:11:10 . 31914172342BFF330063F343AC6958FE . 2189184 . . [5.1.2600.5657 (xpsp_sp3_qfe.080814-1300)] . . C:\WINDOWS\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe [-] 2008-04-13 22:57:54 . 0C89243C7C3EE199B96FCC16990E0679 . 2188928 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe [-] 2002-08-29 12:00:00 . 25A90EB7D1EEE12AB198DC9421BFA353 . 1891840 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe [-] 2008-04-14 03:42:08 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ERDNT\cache\srsvc.dll [-] 2008-04-14 03:42:08 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\ServicePackFiles\i386\srsvc.dll [-] 2008-04-14 03:42:08 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\system32\srsvc.dll [-] 2002-08-29 12:00:00 . 38E9CFAC7881435764051FD7B1F010FB . 158720 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll [-] 2008-04-14 03:42:10 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ERDNT\cache\w32time.dll [-] 2008-04-14 03:42:10 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\ServicePackFiles\i386\w32time.dll [-] 2008-04-14 03:42:10 . 54AF4B1D5459500EF0937F6D33B1914F . 175104 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\system32\w32time.dll [-] 2002-08-29 12:00:00 . A14F6DEDA6E1B5D13A0C225E84988EEA . 165376 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\w32time.dll [-] 2008-04-14 03:42:10 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\wiaservc.dll [-] 2008-04-14 03:42:10 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\wiaservc.dll [-] 2008-04-14 03:42:10 . 8BAD69CBAC032D4BBACFCE0306174C30 . 333824 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\wiaservc.dll [-] 2002-08-29 12:00:00 . 0AC40B75640B550C26347B5F65F6E0EE . 316416 . . [5.1.2600.1106 (xpsp1.020828-1920)] . . C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll [-] 2008-04-14 03:41:58 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ERDNT\cache\midimap.dll [-] 2008-04-14 03:41:58 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\ServicePackFiles\i386\midimap.dll [-] 2008-04-14 03:41:58 . 5C12660A97822F6E61576943B49AAAD6 . 18944 . . [5.1.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\system32\midimap.dll [-] 2002-08-29 12:00:00 . 5A80CD832A19D92CEAED6D5C0316D1B1 . 17920 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\midimap.dll [-] 2008-04-14 03:42:04 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ERDNT\cache\rasadhlp.dll [-] 2008-04-14 03:42:04 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\ServicePackFiles\i386\rasadhlp.dll [-] 2008-04-14 03:42:04 . 6F9BEF24C578D5D6740E080BEDD6A448 . 7680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\system32\rasadhlp.dll [-] 2002-08-29 12:00:00 . C5ABBBD9C7307679B4FBA203213A6FD4 . 6144 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\$NtServicePackUninstall$\rasadhlp.dll ((((((((((((((((((((((((((((( SnapShot@2011-05-24_03.49.30 ))))))))))))))))))))))))))))))))))))))))) + 2011-05-24 13:56:55 . 2011-05-24 13:56:55 16384 C:\WINDOWS\temp\Perflib_Perfdata_754.dat + 2011-05-29 18:45:50 . 2011-05-29 18:45:50 16384 C:\WINDOWS\temp\Perflib_Perfdata_568.dat + 2011-05-29 03:00:44 . 2011-05-29 03:00:44 16384 C:\WINDOWS\temp\Perflib_Perfdata_39c.dat + 2011-05-29 18:45:54 . 2011-05-29 18:45:54 16384 C:\WINDOWS\temp\Perflib_Perfdata_208.dat + 2002-08-29 12:00:00 . 2011-05-29 03:05:01 68796 C:\WINDOWS\system32\perfc009.dat + 2002-08-29 12:00:00 . 2008-04-14 03:42:10 30749 C:\WINDOWS\system32\dllcache\vbajet32.dll + 2007-04-02 20:06:08 . 2007-04-02 20:06:08 16384 C:\WINDOWS\system32\dllcache\tcptsat.dll + 2008-04-14 03:42:38 . 2008-04-14 03:42:38 32827 C:\WINDOWS\system32\dllcache\tcptest.exe + 2002-08-29 12:00:00 . 2008-04-14 03:42:08 25088 C:\WINDOWS\system32\dllcache\slayerxp.dll + 2008-04-14 03:42:36 . 2008-04-14 03:42:36 16437 C:\WINDOWS\system32\dllcache\shtml.exe + 2008-04-14 03:42:06 . 2008-04-14 03:42:06 20536 C:\WINDOWS\system32\dllcache\shtml.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:06 65024 C:\WINDOWS\system32\dllcache\shimeng.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:36 77312 C:\WINDOWS\system32\dllcache\sdbinst.exe + 2002-08-29 12:00:00 . 2008-04-14 03:42:06 64000 C:\WINDOWS\system32\dllcache\samlib.dll + 2011-05-29 15:45:22 . 2010-08-20 03:40:08 66048 C:\WINDOWS\system32\dllcache\s3legacy.dll + 2008-09-26 22:24:29 . 2008-04-14 03:42:04 65536 C:\WINDOWS\system32\dllcache\oledb32r.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 20511 C:\WINDOWS\system32\dllcache\odtext32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 20510 C:\WINDOWS\system32\dllcache\odpdx32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 20510 C:\WINDOWS\system32\dllcache\odfox32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 20510 C:\WINDOWS\system32\dllcache\odexl32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 20511 C:\WINDOWS\system32\dllcache\oddbse32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:40:32 53279 C:\WINDOWS\system32\dllcache\odbcji32.dll + 2002-08-29 12:00:00 . 2008-04-13 20:56:06 94208 C:\WINDOWS\system32\dllcache\odbcint.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 65536 C:\WINDOWS\system32\dllcache\odbccu32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 65536 C:\WINDOWS\system32\dllcache\odbccr32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:32 69632 C:\WINDOWS\system32\dllcache\odbcconf.exe + 2002-08-29 12:00:00 . 2008-04-14 03:42:32 32768 C:\WINDOWS\system32\dllcache\odbcad32.exe + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 16384 C:\WINDOWS\system32\dllcache\odbc32gt.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 67584 C:\WINDOWS\system32\dllcache\ocmanage.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 64000 C:\WINDOWS\system32\dllcache\nwapi32.dll + 2002-08-29 12:00:00 . 2008-04-13 22:50:44 91520 C:\WINDOWS\system32\dllcache\ndiswan.sys + 2008-09-26 22:24:08 . 2008-04-14 03:42:02 24576 C:\WINDOWS\system32\dllcache\msxactps.dll + 2002-08-29 12:00:00 . 2008-04-13 22:00:48 61440 C:\WINDOWS\system32\dllcache\msvcrt40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:19:34 60192 C:\WINDOWS\system32\dllcache\msjter40.dll + 2008-09-26 22:24:07 . 2008-04-14 03:42:00 36864 C:\WINDOWS\system32\dllcache\msdfmap.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 20480 C:\WINDOWS\system32\dllcache\msdatt.dll + 2008-09-26 22:24:29 . 2008-04-13 20:56:08 16384 C:\WINDOWS\system32\dllcache\msdasqlr.dll + 2008-09-26 22:24:28 . 2008-04-13 20:56:00 16384 C:\WINDOWS\system32\dllcache\msdaremr.dll + 2008-09-26 22:24:28 . 2008-04-13 20:56:00 16384 C:\WINDOWS\system32\dllcache\msdaprsr.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 77824 C:\WINDOWS\system32\dllcache\msdaosp.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:00 36864 C:\WINDOWS\system32\dllcache\mscpxl32.dll + 2008-09-26 22:24:07 . 2008-04-14 03:42:00 57344 C:\WINDOWS\system32\dllcache\msadrh15.dll + 2008-09-26 22:24:07 . 2008-04-14 03:42:00 57344 C:\WINDOWS\system32\dllcache\msador15.dll + 2008-09-26 22:24:29 . 2008-04-13 20:56:18 24576 C:\WINDOWS\system32\dllcache\msader15.dll + 2008-09-26 22:24:28 . 2008-04-13 20:56:00 24576 C:\WINDOWS\system32\dllcache\msaddsr.dll + 2008-09-26 22:24:06 . 2008-04-14 03:42:00 53248 C:\WINDOWS\system32\dllcache\msadcs.dll + 2008-09-26 22:24:28 . 2008-04-13 20:55:58 16384 C:\WINDOWS\system32\dllcache\msadcor.dll + 2008-09-26 22:24:28 . 2008-04-13 20:55:58 16384 C:\WINDOWS\system32\dllcache\msadcfr.dll + 2008-09-26 22:24:06 . 2008-04-14 03:42:00 61440 C:\WINDOWS\system32\dllcache\msadcf.dll + 2008-09-26 22:24:28 . 2008-04-13 20:55:58 20480 C:\WINDOWS\system32\dllcache\msadcer.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:58 22528 C:\WINDOWS\system32\dllcache\mfcsubs.dll + 2002-08-29 12:00:00 . 2011-02-22 23:06:29 25600 C:\WINDOWS\system32\dllcache\jsproxy.dll - 2007-08-13 16:54:10 . 2011-02-22 23:06:29 25600 C:\WINDOWS\system32\dllcache\jsproxy.dll + 2008-09-27 08:33:06 . 2008-04-14 03:41:56 68608 C:\WINDOWS\system32\dllcache\isatq.dll + 2002-08-29 12:00:00 . 2008-04-13 22:49:44 75264 C:\WINDOWS\system32\dllcache\ipsec.sys + 2008-09-27 08:33:05 . 2008-04-14 03:41:56 13312 C:\WINDOWS\system32\dllcache\infoadmn.dll - 2008-09-26 22:27:05 . 2002-08-29 12:00:00 19968 C:\WINDOWS\system32\dllcache\inetsloc.dll + 2008-09-26 22:27:05 . 2008-04-14 10:00:00 19968 C:\WINDOWS\system32\dllcache\inetsloc.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:56 36921 C:\WINDOWS\system32\dllcache\imeshare.dll + 2008-09-27 08:33:02 . 2008-04-14 03:42:24 30720 C:\WINDOWS\system32\dllcache\iisrstas.exe + 2008-09-26 22:27:05 . 2008-04-14 10:00:00 14336 C:\WINDOWS\system32\dllcache\iisreset.exe - 2008-09-26 22:27:05 . 2002-08-29 12:00:00 14336 C:\WINDOWS\system32\dllcache\iisreset.exe + 2008-09-27 08:33:02 . 2008-04-14 03:41:56 64512 C:\WINDOWS\system32\dllcache\iismap.dll + 2008-09-27 08:33:10 . 2008-04-14 03:41:56 68608 C:\WINDOWS\system32\dllcache\iisext51.dll + 2008-04-14 03:42:22 . 2008-04-14 03:42:22 20538 C:\WINDOWS\system32\dllcache\fpremadm.exe + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 20541 C:\WINDOWS\system32\dllcache\fpexedll.dll + 2008-04-14 03:42:22 . 2008-04-14 03:42:22 15120 C:\WINDOWS\system32\dllcache\fp98sadm.exe + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 49212 C:\WINDOWS\system32\dllcache\fp4awebs.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 32826 C:\WINDOWS\system32\dllcache\fp4avss.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 41020 C:\WINDOWS\system32\dllcache\fp4avnb.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 49210 C:\WINDOWS\system32\dllcache\fp4areg.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 82035 C:\WINDOWS\system32\dllcache\fp4anscp.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:54 16384 C:\WINDOWS\system32\dllcache\ds32gt.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:54 32768 C:\WINDOWS\system32\dllcache\dispex.dll + 2008-09-27 08:33:24 . 2008-04-14 03:41:54 39936 C:\WINDOWS\system32\dllcache\dimsroam.dll + 2008-09-27 08:33:24 . 2008-04-14 03:41:54 19456 C:\WINDOWS\system32\dllcache\dimsntfy.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 64512 C:\WINDOWS\system32\dllcache\cryptnet.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 53760 C:\WINDOWS\system32\dllcache\cryptext.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 33280 C:\WINDOWS\system32\dllcache\cryptdll.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 74752 C:\WINDOWS\system32\dllcache\cryptdlg.dll + 2008-09-27 08:33:01 . 2008-04-14 03:41:52 46592 C:\WINDOWS\system32\dllcache\coadmin.dll + 2002-08-29 12:00:00 . 2008-04-14 03:39:06 16896 C:\WINDOWS\system32\dllcache\cfgmgr32.dll + 2008-04-14 03:42:14 . 2008-04-14 03:42:14 16439 C:\WINDOWS\system32\dllcache\author.exe + 2008-04-14 03:41:52 . 2008-04-14 03:41:52 20540 C:\WINDOWS\system32\dllcache\author.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 30208 C:\WINDOWS\system32\dllcache\atmlib.dll + 2008-09-27 08:30:21 . 2008-04-13 20:04:20 34735 C:\WINDOWS\system32\dllcache\ati1xsxx.sys + 2008-09-27 08:30:21 . 2008-04-13 20:04:20 29455 C:\WINDOWS\system32\dllcache\ati1xbxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 36463 C:\WINDOWS\system32\dllcache\ati1tuxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 21343 C:\WINDOWS\system32\dllcache\ati1ttxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 26367 C:\WINDOWS\system32\dllcache\ati1snxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 63663 C:\WINDOWS\system32\dllcache\ati1rvxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 30671 C:\WINDOWS\system32\dllcache\ati1raxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 12047 C:\WINDOWS\system32\dllcache\ati1pdxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 11615 C:\WINDOWS\system32\dllcache\ati1mdxx.sys + 2008-09-27 08:30:22 . 2008-04-13 20:04:18 56623 C:\WINDOWS\system32\dllcache\ati1btxx.sys + 2002-08-29 12:00:00 . 2008-04-14 03:42:14 25088 C:\WINDOWS\system32\dllcache\at.exe + 2002-08-29 12:00:00 . 2010-03-05 14:37:40 65536 C:\WINDOWS\system32\dllcache\asycfilt.dll - 2010-03-05 14:37:40 . 2010-03-05 14:37:40 65536 C:\WINDOWS\system32\dllcache\asycfilt.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:14 32768 C:\WINDOWS\system32\dllcache\asr_pfu.exe + 2002-08-29 12:00:00 . 2008-04-14 03:42:14 30208 C:\WINDOWS\system32\dllcache\asr_fmt.exe - 2008-09-26 22:27:11 . 2002-08-29 12:00:00 29184 C:\WINDOWS\system32\dllcache\asptxn.dll + 2008-09-26 22:27:11 . 2008-04-14 10:00:00 29184 C:\WINDOWS\system32\dllcache\asptxn.dll - 2008-09-26 22:27:11 . 2002-08-29 12:00:00 10240 C:\WINDOWS\system32\dllcache\aspperf.dll + 2008-09-26 22:27:11 . 2008-04-14 10:00:00 10240 C:\WINDOWS\system32\dllcache\aspperf.dll + 2011-05-29 15:45:57 . 2010-08-20 03:38:36 97354 C:\WINDOWS\system32\dllcache\aspndis3.sys + 2011-05-29 15:45:56 . 2010-08-20 03:38:36 14848 C:\WINDOWS\system32\dllcache\asc3550.sys + 2011-05-29 15:45:56 . 2010-08-20 03:38:36 22400 C:\WINDOWS\system32\dllcache\asc3350p.sys + 2011-05-29 15:45:56 . 2010-08-20 03:38:36 26496 C:\WINDOWS\system32\dllcache\asc.sys + 2002-08-29 01:33:30 . 2008-04-13 22:21:26 60800 C:\WINDOWS\system32\dllcache\arp1394.sys + 2011-05-29 15:45:52 . 2010-09-07 15:43:16 36224 C:\WINDOWS\system32\dllcache\an983.sys + 2008-09-26 22:33:39 . 2008-04-14 03:41:50 70656 C:\WINDOWS\system32\dllcache\amstream.dll + 2011-05-29 15:45:52 . 2010-08-20 03:38:34 12032 C:\WINDOWS\system32\dllcache\amsint.sys + 2002-08-29 01:05:08 . 2008-04-13 22:01:34 37760 C:\WINDOWS\system32\dllcache\amdk7.sys + 2002-08-29 01:05:06 . 2008-04-13 22:01:34 37376 C:\WINDOWS\system32\dllcache\amdk6.sys + 2008-09-27 08:30:22 . 2008-04-13 22:06:40 43008 C:\WINDOWS\system32\dllcache\amdagp.sys + 2011-05-29 15:45:52 . 2010-08-20 03:38:34 16969 C:\WINDOWS\system32\dllcache\amb8002.sys + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 17408 C:\WINDOWS\system32\dllcache\alrsvc.dll + 2008-09-27 08:30:22 . 2008-04-13 22:06:40 42752 C:\WINDOWS\system32\dllcache\alim1541.sys + 2011-05-29 15:45:52 . 2010-08-20 03:38:34 26624 C:\WINDOWS\system32\dllcache\alifir.sys + 2011-05-29 15:45:52 . 2010-08-20 03:38:34 27678 C:\WINDOWS\system32\dllcache\ali5261.sys + 2002-08-29 12:00:00 . 2008-04-14 03:42:14 44544 C:\WINDOWS\system32\dllcache\alg.exe + 2011-05-29 15:45:51 . 2010-08-20 03:38:34 56960 C:\WINDOWS\system32\dllcache\aic78xx.sys + 2011-05-29 15:45:51 . 2010-08-20 03:38:34 55168 C:\WINDOWS\system32\dllcache\aic78u2.sys + 2002-08-29 12:00:00 . 2008-04-14 03:42:14 98304 C:\WINDOWS\system32\dllcache\ahui.exe + 2011-05-29 15:45:51 . 2010-08-20 03:38:34 12800 C:\WINDOWS\system32\dllcache\aha154x.sys + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 24064 C:\WINDOWS\system32\dllcache\agtintl.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:04 20480 C:\WINDOWS\system32\dllcache\agt0c0a.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:04 20992 C:\WINDOWS\system32\dllcache\agt0816.dll + 2008-09-27 08:32:46 . 2007-04-02 21:56:04 19456 C:\WINDOWS\system32\dllcache\agt0804.dll + 2008-09-27 00:12:02 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt041f.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt041d.dll + 2008-09-27 00:12:00 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt0419.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 20480 C:\WINDOWS\system32\dllcache\agt0416.dll + 2008-09-27 00:11:53 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt0415.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt0414.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 20992 C:\WINDOWS\system32\dllcache\agt0413.dll + 2008-09-27 08:32:29 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt0412.dll + 2008-09-27 08:32:59 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt0411.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 20992 C:\WINDOWS\system32\dllcache\agt0410.dll + 2008-09-27 00:11:53 . 2007-04-02 21:56:02 19968 C:\WINDOWS\system32\dllcache\agt040e.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 21504 C:\WINDOWS\system32\dllcache\agt040c.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 19456 C:\WINDOWS\system32\dllcache\agt040b.dll + 2002-08-29 12:00:00 . 2008-04-13 21:02:30 19968 C:\WINDOWS\system32\dllcache\agt0409.dll + 2008-09-27 00:11:57 . 2007-04-02 21:56:02 22016 C:\WINDOWS\system32\dllcache\agt0408.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:02 21504 C:\WINDOWS\system32\dllcache\agt0407.dll + 2002-08-29 12:00:00 . 2007-04-02 21:56:00 19456 C:\WINDOWS\system32\dllcache\agt0406.dll + 2008-09-27 00:11:53 . 2007-04-02 21:56:00 19456 C:\WINDOWS\system32\dllcache\agt0405.dll + 2008-09-27 08:32:57 . 2007-04-02 21:56:00 19456 C:\WINDOWS\system32\dllcache\agt0404.dll + 2008-09-27 08:30:22 . 2008-04-13 22:06:40 44928 C:\WINDOWS\system32\dllcache\agpcpq.sys + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 44032 C:\WINDOWS\system32\dllcache\agentsr.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 24064 C:\WINDOWS\system32\dllcache\agentpsh.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 49152 C:\WINDOWS\system32\dllcache\agentmpx.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 57344 C:\WINDOWS\system32\dllcache\agentdpv.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 42496 C:\WINDOWS\system32\dllcache\agentdp2.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 24064 C:\WINDOWS\system32\dllcache\agentanm.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 68096 C:\WINDOWS\system32\dllcache\adsmsext.dll + 2008-09-26 22:27:10 . 2008-04-14 10:00:00 49664 C:\WINDOWS\system32\dllcache\adrot.dll - 2008-09-26 22:27:10 . 2002-08-29 12:00:00 49664 C:\WINDOWS\system32\dllcache\adrot.dll + 2011-05-29 15:45:35 . 2010-08-20 03:38:34 46112 C:\WINDOWS\system32\dllcache\adptsf50.sys + 2008-09-27 08:33:03 . 2008-04-14 03:41:50 43520 C:\WINDOWS\system32\dllcache\admwprox.dll - 2007-08-13 16:39:20 . 2009-03-08 02:32:56 72704 C:\WINDOWS\system32\dllcache\admparse.dll + 2002-08-29 12:00:00 . 2009-03-08 02:32:56 72704 C:\WINDOWS\system32\dllcache\admparse.dll + 2011-05-29 15:45:35 . 2010-09-07 15:43:16 10880 C:\WINDOWS\system32\dllcache\admjoy.sys + 2008-04-14 03:42:14 . 2008-04-14 03:42:14 16439 C:\WINDOWS\system32\dllcache\admin.exe + 2008-04-14 03:41:50 . 2008-04-14 03:41:50 20540 C:\WINDOWS\system32\dllcache\admin.dll + 2008-09-27 08:33:04 . 2008-04-14 03:41:50 29696 C:\WINDOWS\system32\dllcache\admexs.dll + 2011-05-29 15:45:34 . 2010-08-20 03:38:34 20160 C:\WINDOWS\system32\dllcache\adm8511.sys + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 98304 C:\WINDOWS\system32\dllcache\actxprxy.dll + 2011-05-29 15:45:33 . 2010-08-20 03:38:34 61440 C:\WINDOWS\system32\dllcache\acerscad.dll + 2011-05-29 15:45:33 . 2010-09-07 15:43:16 84480 C:\WINDOWS\system32\dllcache\ac97via.sys + 2011-05-29 15:45:33 . 2010-08-20 03:38:34 96256 C:\WINDOWS\system32\dllcache\ac97intc.sys + 2011-05-29 15:45:33 . 2010-08-20 03:38:34 23552 C:\WINDOWS\system32\dllcache\abp480n5.sys + 2011-05-29 15:45:32 . 2010-08-20 03:38:34 98304 C:\WINDOWS\system32\dllcache\a3d.dll + 2011-05-29 15:45:32 . 2010-08-20 03:38:34 38400 C:\WINDOWS\system32\dllcache\8514a.dll + 2011-05-29 15:45:32 . 2010-09-07 15:43:16 12288 C:\WINDOWS\system32\dllcache\4mmdat.sys + 2011-05-29 15:45:32 . 2010-08-20 03:38:32 11264 C:\WINDOWS\system32\dllcache\1394vdbg.sys + 2002-08-29 12:00:00 . 2008-04-13 22:16:20 53376 C:\WINDOWS\system32\dllcache\1394bus.sys + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 17304 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\ViewerPS.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 35736 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\reader_sl.exe + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 84896 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\PDFPrevHndlr.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 94608 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\eula.exe + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 49064 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\acrotextextractor.exe + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 17824 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroRd32Info.exe + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 62376 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\acroiehelpershim.dll + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 64928 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroIEHelper.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 63384 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\Acrofx32.dll + 2008-09-26 22:27:08 . 2008-04-14 10:00:00 7168 C:\WINDOWS\system32\dllcache\wamregps.dll - 2008-09-26 22:27:08 . 2002-08-29 12:00:00 7168 C:\WINDOWS\system32\dllcache\wamregps.dll + 2008-09-27 08:33:01 . 2008-04-14 03:42:08 8192 C:\WINDOWS\system32\dllcache\staxmem.dll + 2006-12-31 05:57:08 . 2006-12-31 05:57:08 4569 C:\WINDOWS\system32\dllcache\secupd.dat + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 4096 C:\WINDOWS\system32\dllcache\msdaurl.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 4096 C:\WINDOWS\system32\dllcache\msdasc.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 4096 C:\WINDOWS\system32\dllcache\msdaer.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 4096 C:\WINDOWS\system32\dllcache\msdaenum.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 4096 C:\WINDOWS\system32\dllcache\msdadc.dll + 2008-09-27 08:33:23 . 2008-04-14 03:39:56 6144 C:\WINDOWS\system32\dllcache\kbdiultn.dll + 2008-09-27 08:33:23 . 2008-04-14 03:39:56 6144 C:\WINDOWS\system32\dllcache\kbdbhc.dll - 2008-09-26 22:27:05 . 2002-08-29 12:00:00 7680 C:\WINDOWS\system32\dllcache\inetmgr.exe + 2008-09-26 22:27:05 . 2008-04-14 10:00:00 7680 C:\WINDOWS\system32\dllcache\inetmgr.exe - 2008-09-26 22:27:05 . 2002-08-29 12:00:00 5632 C:\WINDOWS\system32\dllcache\iisrstap.dll + 2008-09-26 22:27:05 . 2008-04-14 10:00:00 5632 C:\WINDOWS\system32\dllcache\iisrstap.dll + 2008-09-26 22:27:04 . 2008-04-14 10:00:00 6144 C:\WINDOWS\system32\dllcache\ftpsapi2.dll - 2008-09-26 22:27:04 . 2002-08-29 12:00:00 6144 C:\WINDOWS\system32\dllcache\ftpsapi2.dll + 2008-09-27 08:33:24 . 2008-04-14 03:41:52 7168 C:\WINDOWS\system32\dllcache\bitsprx4.dll + 2011-05-29 15:45:53 . 2010-08-20 03:38:36 6272 C:\WINDOWS\system32\dllcache\apmbatt.sys + 2011-05-29 15:45:52 . 2010-08-20 03:38:34 5248 C:\WINDOWS\system32\dllcache\aliide.sys + 2008-09-27 08:30:22 . 2008-04-14 03:41:50 3775 C:\WINDOWS\system32\dllcache\adv11nt5.dll + 2008-09-27 08:30:22 . 2008-04-14 03:41:50 3711 C:\WINDOWS\system32\dllcache\adv09nt5.dll + 2008-09-27 08:30:22 . 2008-04-14 03:41:50 3135 C:\WINDOWS\system32\dllcache\adv08nt5.dll + 2008-09-27 08:30:22 . 2008-04-14 03:41:50 3647 C:\WINDOWS\system32\dllcache\adv07nt5.dll + 2008-09-27 08:30:22 . 2008-04-14 03:41:50 3615 C:\WINDOWS\system32\dllcache\adv05nt5.dll + 2008-09-27 08:30:22 . 2008-04-14 03:41:50 3967 C:\WINDOWS\system32\dllcache\adv02nt5.dll + 2008-09-27 08:30:22 . 2008-04-14 03:41:50 4255 C:\WINDOWS\system32\dllcache\adv01nt5.dll + 2008-09-26 22:27:10 . 2008-04-14 10:00:00 6144 C:\WINDOWS\system32\dllcache\admxprox.dll - 2008-09-26 22:27:10 . 2002-08-29 12:00:00 6144 C:\WINDOWS\system32\dllcache\admxprox.dll + 2011-05-29 15:45:34 . 2010-08-20 03:38:34 7424 C:\WINDOWS\system32\dllcache\adicvls.sys + 2002-08-29 12:00:00 . 2008-04-14 03:42:14 4096 C:\WINDOWS\system32\dllcache\actmovie.exe + 2002-08-29 12:00:00 . 2011-05-29 03:05:01 436026 C:\WINDOWS\system32\perfh009.dat - 2011-03-02 16:13:52 . 2011-02-02 20:40:39 157472 C:\WINDOWS\system32\javaws.exe + 2011-03-02 16:13:52 . 2011-05-25 14:11:37 157472 C:\WINDOWS\system32\javaws.exe - 2011-03-02 16:13:52 . 2011-02-02 20:40:38 145184 C:\WINDOWS\system32\javaw.exe + 2011-03-02 16:13:52 . 2011-05-25 14:11:37 145184 C:\WINDOWS\system32\javaw.exe - 2011-03-02 16:13:52 . 2011-02-02 20:40:36 145184 C:\WINDOWS\system32\java.exe + 2011-03-02 16:13:52 . 2011-05-25 14:11:37 145184 C:\WINDOWS\system32\java.exe + 2002-08-29 12:00:00 . 2009-12-24 06:59:40 177664 C:\WINDOWS\system32\dllcache\wintrust.dll - 2009-12-24 06:59:40 . 2009-12-24 06:59:40 177664 C:\WINDOWS\system32\dllcache\wintrust.dll + 2002-08-29 12:00:00 . 2011-03-04 06:37:06 420864 C:\WINDOWS\system32\dllcache\vbscript.dll - 2007-08-13 16:54:10 . 2011-03-04 06:37:06 420864 C:\WINDOWS\system32\dllcache\vbscript.dll + 2002-08-29 12:00:00 . 2009-03-08 02:34:28 105984 C:\WINDOWS\system32\dllcache\url.dll - 2007-08-13 16:44:30 . 2009-03-08 02:34:28 105984 C:\WINDOWS\system32\dllcache\url.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:08 123392 C:\WINDOWS\system32\dllcache\umpnpmgr.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:38 106496 C:\WINDOWS\system32\dllcache\sysocmgr.exe + 2008-09-27 08:33:03 . 2008-04-14 03:42:08 189440 C:\WINDOWS\system32\dllcache\smtpadm.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:06 985088 C:\WINDOWS\system32\dllcache\setupapi.dll + 2002-08-29 12:00:00 . 2008-05-09 10:53:40 172032 C:\WINDOWS\system32\dllcache\scrrun.dll - 2008-05-09 10:53:40 . 2008-05-09 10:53:40 172032 C:\WINDOWS\system32\dllcache\scrrun.dll + 2002-08-29 12:00:00 . 2008-05-09 10:53:39 180224 C:\WINDOWS\system32\dllcache\scrobj.dll - 2008-05-09 10:53:39 . 2008-05-09 10:53:39 180224 C:\WINDOWS\system32\dllcache\scrobj.dll + 2002-08-29 12:00:00 . 2010-06-30 12:31:35 149504 C:\WINDOWS\system32\dllcache\schannel.dll - 2008-12-05 06:54:55 . 2010-06-30 12:31:35 149504 C:\WINDOWS\system32\dllcache\schannel.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:06 415744 C:\WINDOWS\system32\dllcache\samsrv.dll + 2002-08-29 12:00:00 . 2008-04-13 21:07:58 208384 C:\WINDOWS\system32\dllcache\rsaenh.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:06 433664 C:\WINDOWS\system32\dllcache\riched20.dll + 2008-09-26 22:24:09 . 2008-04-14 03:42:04 487424 C:\WINDOWS\system32\dllcache\oledb32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 551936 C:\WINDOWS\system32\dllcache\oleaut32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 147456 C:\WINDOWS\system32\dllcache\odbctrac.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 278559 C:\WINDOWS\system32\dllcache\odbcjt32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 106496 C:\WINDOWS\system32\dllcache\odbccp32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:04 135168 C:\WINDOWS\system32\dllcache\odbcconf.dll - 2010-11-09 14:52:35 . 2010-11-09 14:52:35 249856 C:\WINDOWS\system32\dllcache\odbc32.dll + 2002-08-29 12:00:00 . 2010-11-09 14:52:35 249856 C:\WINDOWS\system32\dllcache\odbc32.dll + 2002-08-29 12:00:00 . 2010-12-09 15:15:09 718336 C:\WINDOWS\system32\dllcache\ntdll.dll - 2009-04-15 03:51:55 . 2010-12-09 15:15:09 718336 C:\WINDOWS\system32\dllcache\ntdll.dll + 2002-08-29 12:00:00 . 2008-10-15 16:34:24 337408 C:\WINDOWS\system32\dllcache\netapi32.dll - 2008-10-24 15:33:48 . 2008-10-15 16:34:24 337408 C:\WINDOWS\system32\dllcache\netapi32.dll + 2002-08-29 12:00:00 . 2007-04-02 16:22:02 355104 C:\WINDOWS\system32\dllcache\msxbde40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:21:54 621344 C:\WINDOWS\system32\dllcache\mswstr10.dll + 2002-08-29 12:00:00 . 2007-04-02 16:21:48 838432 C:\WINDOWS\system32\dllcache\mswdat10.dll + 2002-08-29 12:00:00 . 2007-04-02 16:21:28 264992 C:\WINDOWS\system32\dllcache\mstext40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:21:06 559904 C:\WINDOWS\system32\dllcache\msrepl40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:20:44 322336 C:\WINDOWS\system32\dllcache\msrd3x40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:20:28 432928 C:\WINDOWS\system32\dllcache\msrd2x40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:20:06 355104 C:\WINDOWS\system32\dllcache\mspbde40.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:02 143360 C:\WINDOWS\system32\dllcache\msorcl32.dll + 2002-08-29 12:00:00 . 2007-04-02 16:19:52 219936 C:\WINDOWS\system32\dllcache\msltus40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:19:38 248608 C:\WINDOWS\system32\dllcache\msjtes40.dll + 2008-09-26 22:24:08 . 2010-11-09 14:52:35 102400 C:\WINDOWS\system32\dllcache\msjro.dll - 2010-11-09 14:52:35 . 2010-11-09 14:52:35 102400 C:\WINDOWS\system32\dllcache\msjro.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:02 151583 C:\WINDOWS\system32\dllcache\msjint40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:18:00 326432 C:\WINDOWS\system32\dllcache\msexcl40.dll + 2002-08-29 12:00:00 . 2007-04-02 16:17:44 518944 C:\WINDOWS\system32\dllcache\msexch40.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 315392 C:\WINDOWS\system32\dllcache\msdasql.dll + 2008-09-26 22:24:07 . 2008-04-14 03:42:00 118784 C:\WINDOWS\system32\dllcache\msdarem.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 204800 C:\WINDOWS\system32\dllcache\msdaps.dll + 2008-09-26 22:24:07 . 2008-04-14 03:42:00 200704 C:\WINDOWS\system32\dllcache\msdaprst.dll + 2008-09-26 22:24:08 . 2008-04-14 03:42:00 233472 C:\WINDOWS\system32\dllcache\msdaora.dll - 2010-11-09 14:52:35 . 2010-11-09 14:52:35 200704 C:\WINDOWS\system32\dllcache\msadox.dll + 2008-09-26 22:24:07 . 2010-11-09 14:52:35 200704 C:\WINDOWS\system32\dllcache\msadox.dll - 2010-11-09 14:52:35 . 2010-11-09 14:52:35 180224 C:\WINDOWS\system32\dllcache\msadomd.dll + 2008-09-26 22:24:07 . 2010-11-09 14:52:35 180224 C:\WINDOWS\system32\dllcache\msadomd.dll - 2010-11-09 14:52:35 . 2010-11-09 14:52:35 536576 C:\WINDOWS\system32\dllcache\msado15.dll + 2008-09-26 22:24:07 . 2010-11-09 14:52:35 536576 C:\WINDOWS\system32\dllcache\msado15.dll + 2008-09-26 22:24:07 . 2008-04-14 03:42:00 155648 C:\WINDOWS\system32\dllcache\msadds.dll - 2010-11-09 14:52:35 . 2010-11-09 14:52:35 143360 C:\WINDOWS\system32\dllcache\msadco.dll + 2008-09-26 22:24:06 . 2010-11-09 14:52:35 143360 C:\WINDOWS\system32\dllcache\msadco.dll + 2008-09-26 22:24:06 . 2008-05-01 14:33:02 331776 C:\WINDOWS\system32\dllcache\msadce.dll - 2008-09-27 11:06:48 . 2008-05-01 14:33:02 331776 C:\WINDOWS\system32\dllcache\msadce.dll + 2002-08-29 12:00:00 . 2011-02-08 13:33:55 974848 C:\WINDOWS\system32\dllcache\mfc42u.dll - 2010-09-18 10:23:26 . 2011-02-08 13:33:55 974848 C:\WINDOWS\system32\dllcache\mfc42u.dll + 2002-08-29 12:00:00 . 2011-02-08 13:33:55 978944 C:\WINDOWS\system32\dllcache\mfc42.dll - 2010-10-13 02:37:23 . 2011-02-08 13:33:55 978944 C:\WINDOWS\system32\dllcache\mfc42.dll + 2002-08-29 12:00:00 . 2010-12-20 17:26:00 730112 C:\WINDOWS\system32\dllcache\lsasrv.dll - 2009-04-15 03:51:56 . 2010-12-20 17:26:00 730112 C:\WINDOWS\system32\dllcache\lsasrv.dll + 2002-08-29 12:00:00 . 2011-03-04 06:37:06 726528 C:\WINDOWS\system32\dllcache\jscript.dll - 2007-08-13 16:38:04 . 2011-03-04 06:37:06 726528 C:\WINDOWS\system32\dllcache\jscript.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:56 138240 C:\WINDOWS\system32\dllcache\itss.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:56 155136 C:\WINDOWS\system32\dllcache\itircl.dll + 2008-09-27 08:33:18 . 2008-04-14 03:41:56 829440 C:\WINDOWS\system32\dllcache\inetmgr.dll - 2008-09-26 22:27:05 . 2002-08-29 12:00:00 169984 C:\WINDOWS\system32\dllcache\iisui.dll + 2008-09-26 22:27:05 . 2008-04-14 10:00:00 169984 C:\WINDOWS\system32\dllcache\iisui.dll + 2008-09-27 08:33:01 . 2008-04-14 03:41:56 133632 C:\WINDOWS\system32\dllcache\iisrtl.dll + 2007-04-02 20:06:06 . 2007-04-02 20:06:06 208896 C:\WINDOWS\system32\dllcache\fpmmcsat.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 598071 C:\WINDOWS\system32\dllcache\fpmmc.dll + 2008-04-14 03:42:22 . 2008-04-14 03:42:22 188494 C:\WINDOWS\system32\dllcache\fpcount.exe + 2008-04-14 03:42:22 . 2008-04-14 03:42:22 109840 C:\WINDOWS\system32\dllcache\fp98swin.exe + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 876653 C:\WINDOWS\system32\dllcache\fp4awel.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 102509 C:\WINDOWS\system32\dllcache\fp4atxt.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 147513 C:\WINDOWS\system32\dllcache\fp4apws.dll + 2008-04-14 03:41:54 . 2008-04-14 03:41:54 184435 C:\WINDOWS\system32\dllcache\fp4amsft.dll + 2002-08-29 12:00:00 . 2008-04-13 22:44:30 143744 C:\WINDOWS\system32\dllcache\fastfat.sys + 2002-08-29 12:00:00 . 2008-04-14 03:41:54 380445 C:\WINDOWS\system32\dllcache\expsrv.dll + 2002-08-29 12:00:00 . 2008-04-13 21:07:58 138752 C:\WINDOWS\system32\dllcache\dssenh.dll + 2008-09-26 22:24:29 . 2008-01-19 14:34:50 554008 C:\WINDOWS\system32\dllcache\dao360.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 512512 C:\WINDOWS\system32\dllcache\cryptui.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 599040 C:\WINDOWS\system32\dllcache\crypt32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 252928 C:\WINDOWS\system32\dllcache\compatui.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:52 276992 C:\WINDOWS\system32\dllcache\comdlg32.dll + 2008-04-14 03:42:16 . 2008-04-14 03:42:16 188480 C:\WINDOWS\system32\dllcache\cfgwiz.exe + 2008-09-27 08:33:24 . 2008-04-14 03:41:52 233472 C:\WINDOWS\system32\dllcache\azroles.dll + 2008-09-27 08:33:16 . 2008-04-14 03:41:50 369664 C:\WINDOWS\system32\dllcache\asp51.dll + 2008-09-27 08:32:01 . 2008-04-14 03:41:50 331264 C:\WINDOWS\system32\dllcache\aqueue.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 295936 C:\WINDOWS\system32\dllcache\appmgr.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 125952 C:\WINDOWS\system32\dllcache\apphelp.dll + 2008-09-27 08:33:18 . 2008-04-14 03:41:50 108544 C:\WINDOWS\system32\dllcache\appconf.dll + 2002-08-29 12:00:00 . 2008-04-14 03:42:14 256512 C:\WINDOWS\system32\dllcache\agentsvr.exe + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 214016 C:\WINDOWS\system32\dllcache\agentctl.dll - 2008-06-20 11:40:08 . 2008-10-16 14:43:01 138496 C:\WINDOWS\system32\dllcache\afd.sys + 2002-08-29 12:00:00 . 2008-10-16 14:43:01 138496 C:\WINDOWS\system32\dllcache\afd.sys - 2007-08-13 16:39:00 . 2009-03-08 02:32:48 128512 C:\WINDOWS\system32\dllcache\advpack.dll + 2002-08-29 12:00:00 . 2009-03-08 02:32:48 128512 C:\WINDOWS\system32\dllcache\advpack.dll - 2009-04-15 03:51:56 . 2009-02-09 12:10:48 617472 C:\WINDOWS\system32\dllcache\advapi32.dll + 2002-08-29 12:00:00 . 2009-02-09 12:10:48 617472 C:\WINDOWS\system32\dllcache\advapi32.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 123392 C:\WINDOWS\system32\dllcache\adsnw.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 263680 C:\WINDOWS\system32\dllcache\adsnt.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 143360 C:\WINDOWS\system32\dllcache\adsldpc.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 175616 C:\WINDOWS\system32\dllcache\adsldp.dll + 2008-09-27 08:33:18 . 2008-04-14 03:41:50 290816 C:\WINDOWS\system32\dllcache\adsiis51.dll + 2011-05-29 15:45:35 . 2010-08-20 03:38:34 101888 C:\WINDOWS\system32\dllcache\adpu160m.sys + 2011-05-29 15:45:34 . 2010-08-20 03:38:34 747392 C:\WINDOWS\system32\dllcache\adm8830.sys + 2011-05-29 15:45:34 . 2010-08-20 03:38:34 553984 C:\WINDOWS\system32\dllcache\adm8820.sys + 2011-05-29 15:45:34 . 2010-08-20 03:38:34 584448 C:\WINDOWS\system32\dllcache\adm8810.sys + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 116224 C:\WINDOWS\system32\dllcache\acxtrnal.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 193536 C:\WINDOWS\system32\dllcache\activeds.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 245248 C:\WINDOWS\system32\dllcache\acspecfc.dll + 2002-08-29 12:00:00 . 2008-04-13 22:06:36 187776 C:\WINDOWS\system32\dllcache\acpi.sys + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 115712 C:\WINDOWS\system32\dllcache\aclui.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 141312 C:\WINDOWS\system32\dllcache\aclua.dll + 2002-08-29 12:00:00 . 2009-11-21 15:51:04 471552 C:\WINDOWS\system32\dllcache\aclayers.dll - 2009-12-22 16:08:56 . 2009-11-21 15:51:04 471552 C:\WINDOWS\system32\dllcache\aclayers.dll + 2008-09-26 22:23:30 . 2008-04-14 03:42:12 184320 C:\WINDOWS\system32\dllcache\accwiz.exe + 2011-05-29 15:45:33 . 2010-08-20 03:38:34 297728 C:\WINDOWS\system32\dllcache\ac97sis.sys + 2011-05-29 15:45:33 . 2010-09-07 15:43:16 231552 C:\WINDOWS\system32\dllcache\ac97ali.sys + 2008-09-27 08:33:24 . 2008-04-14 03:41:50 136192 C:\WINDOWS\system32\dllcache\aaclient.dll + 2011-05-29 15:45:33 . 2010-08-20 03:38:34 462848 C:\WINDOWS\system32\dllcache\a3dapi.dll - 2010-02-12 04:33:11 . 2010-02-12 04:33:11 100864 C:\WINDOWS\system32\dllcache\6to4svc.dll + 2002-08-29 12:00:00 . 2010-02-12 04:33:11 100864 C:\WINDOWS\system32\dllcache\6to4svc.dll + 2011-05-29 15:45:32 . 2010-08-20 03:38:34 148352 C:\WINDOWS\system32\dllcache\3dfxvsm.sys + 2011-05-29 15:45:32 . 2010-08-20 03:38:34 689216 C:\WINDOWS\system32\dllcache\3dfxvs.dll + 2011-05-29 15:45:32 . 2010-08-20 03:38:34 762780 C:\WINDOWS\system32\dllcache\3cwmcru.sys + 2011-05-25 14:11:55 . 2011-05-25 14:11:55 180224 C:\WINDOWS\Installer\7b5fb.msi + 2011-05-25 14:11:36 . 2011-05-25 14:11:36 675840 C:\WINDOWS\Installer\7b5e7.msi + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 390552 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\pdfshell.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 101288 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\PDFPrevHndlrShim.exe + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 135568 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\nppdf32.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 681872 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\JP2KLib.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 104344 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AiodLite.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 702352 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroPDF.dll + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 294808 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\acrobroker.exe + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 205720 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\a3dutils.dll - 2007-08-13 16:54:10 . 2011-02-22 23:06:29 1210880 C:\WINDOWS\system32\dllcache\urlmon.dll + 2002-08-29 12:00:00 . 2011-02-22 23:06:29 1210880 C:\WINDOWS\system32\dllcache\urlmon.dll + 2008-09-27 08:33:25 . 2008-04-14 03:42:08 2134528 C:\WINDOWS\system32\dllcache\smtpsnap.dll - 2008-10-15 16:15:33 . 2010-12-09 13:42:26 2148864 C:\WINDOWS\system32\dllcache\ntkrnlmp.exe + 2002-08-29 12:00:00 . 2010-12-09 13:42:26 2148864 C:\WINDOWS\system32\dllcache\ntkrnlmp.exe + 2002-08-29 12:00:00 . 2007-10-22 13:00:52 1516568 C:\WINDOWS\system32\dllcache\msjet40.dll + 2002-08-29 12:00:00 . 2008-04-14 03:41:50 1852928 C:\WINDOWS\system32\dllcache\acgenral.dll + 2011-05-25 02:47:57 . 2011-05-25 02:47:57 2283008 C:\WINDOWS\Installer\39db7c.msi + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 2207632 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\rt3d.dll + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 6222744 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\authplay.dll + 2010-11-10 10:49:34 . 2010-11-10 10:49:34 5503368 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AGM.dll + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 1216416 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AdobeCollabSync.exe + 2010-11-10 10:49:36 . 2010-11-10 10:49:36 1289624 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroRd32.exe + 2011-01-30 20:44:03 . 2011-01-30 20:44:03 12425728 C:\WINDOWS\Installer\39db7d.msp + 2010-11-10 10:49:38 . 2010-11-10 10:49:38 23724952 C:\WINDOWS\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0000000010\10.0.0\AcroRd32.dll – Snapshot reset to current date – ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Fraps"="C:\FRAPS\FRAPS.EXE" [2006-12-19 13:02:58 2842624] "EVEREST AutoStart"="C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2008-09-04 23:00:00 2117216] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MSIAfterburner"="C:\Program Files\MSI Afterburner\MSIAfterburner.exe" [2010-08-31 03:04:16 355640] "AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 10:48:18 58656] "avgnt"="C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-09 03:13:35 281768] "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 22:37:18 98304] "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 10:49:34 932288] "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 11:12:22 253672] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 03:42:18 15360] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "MaxRecentDocs"= 11 (0xb) [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *\0OODBS [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer] 2007-09-21 01:10:12 55824 —-a-w- C:\WINDOWS\KHALMNPR.Exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Steam"=C:\Program Files\Valve\Steam\Steam.exe -silent "PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit "RTHDCPL"=RTHDCPL.EXE "Alcmtr"=ALCMTR.EXE "YMailAdvisor"="C:\Program Files\Yahoo!\Common\YMailAdvisor.exe" "PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray "ContentTransferWMDetector.exe"=C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe "KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k "UpdatePDRShortCut"="C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\8.0" "KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe" "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" "Malwarebytes' Anti-Malware"="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "F:\\Spiele\\F12010\\F1_2010_game.exe"= "C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "C:\\WINDOWS\\system32\\sessmgr.exe"= "C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"= "C:\\Program Files\\Curse\\CurseClient.exe"= "F:\\Spiele\\BStorm\\Binaries\\Win32\\ShippingPC-StormGame.exe"= "F:\\Spiele\\RDG\\GRID.exe"= "C:\\Program Files\\Bonjour\\mDNSResponder.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= R0 mv61xx;mv61xx;C:\WINDOWS\system32\drivers\mv61xx.sys [27.Sep.08 1:26:26 150568] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;C:\Program Files\Avira\AntiVir Desktop\sched.exe [08.Nov.10 21:04:32 136360] R2 dgdersvc;Device Error Recovery Service;C:\WINDOWS\system32\dgdersvc.exe [26.Jul.10 15:17:06 95568] R2 FsUsbExService;FsUsbExService;C:\WINDOWS\system32\FsUsbExService.Exe [25.Sep.10 16:05:33 217088] R2 MBAMService;MBAMService;C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [25.May.11 5:19:43 363344] R3 dgderdrv;dgderdrv;C:\WINDOWS\system32\drivers\dgderdrv.sys [26.Jul.10 15:17:06 18136] R3 EverestDriver;Lavalys EVEREST Kernel Driver;C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [14.Dec.08 0:42:29 23152] R3 FsUsbExDisk;FsUsbExDisk;C:\WINDOWS\system32\FsUsbExDisk.Sys [25.Sep.10 16:05:33 36640] R3 MBAMProtector;MBAMProtector;C:\WINDOWS\system32\drivers\mbam.sys [25.May.11 5:19:39 20952] R3 RTCore32;RTCore32;C:\Program Files\MSI Afterburner\RTCore32.sys [31.Aug.10 5:04:18 12088] S2 gupdate;Google Update Service (gupdate);C:\Program Files\Google\Update\GoogleUpdate.exe [04.Oct.09 20:07:11 133104] S3 gupdatem;Google Update Service (gupdatem);C:\Program Files\Google\Update\GoogleUpdate.exe [04.Oct.09 20:07:11 133104] S3 LgBttPort;LGE Bluetooth TransPort;C:\WINDOWS\system32\DRIVERS\lgbtport.sys –> C:\WINDOWS\system32\DRIVERS\lgbtport.sys [?] S3 lgbusenum;LG Bluetooth Bus Enumerator;C:\WINDOWS\system32\DRIVERS\lgbtbus.sys –> C:\WINDOWS\system32\DRIVERS\lgbtbus.sys [?] S3 LGVMODEM;LGE Virtual Modem;C:\WINDOWS\system32\DRIVERS\lgvmodem.sys –> C:\WINDOWS\system32\DRIVERS\lgvmodem.sys [?] S3 Roxio UPnP Renderer 11;Roxio UPnP Renderer 11;"C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe" –> C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe [?] S3 sscebus;SAMSUNG USB Composite Device V2 driver (WDM);C:\WINDOWS\system32\drivers\sscebus.sys [25.Sep.10 16:05:54 98560] S3 sscemdfl;SAMSUNG Mobile Modem V2 Filter;C:\WINDOWS\system32\drivers\sscemdfl.sys [25.Sep.10 16:05:54 14848] S3 sscemdm;SAMSUNG Mobile Modem V2 Drivers;C:\WINDOWS\system32\drivers\sscemdm.sys [25.Sep.10 16:05:54 123648] S3 ssceserd;SAMSUNG Mobile Modem Diagnostic Serial Port V2 (WDM);C:\WINDOWS\system32\drivers\ssceserd.sys [25.Sep.10 16:05:54 100352] S3 WDC_SAM;WD SCSI Pass Thru driver;C:\WINDOWS\system32\drivers\wdcsam.sys [06.May.08 17:06:00 11520] S4 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys –> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp Contents of the 'Scheduled Tasks' folder 2011-05-27 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50:20 . 2009-10-22 09:50:20] 2011-05-29 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-04 18:07:11 . 2009-10-04 18:07:09] 2011-05-29 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-04 18:07:11 . 2009-10-04 18:07:09] ——- Supplementary Scan ——- uStart Page = hxxp://www.yahoo.com/ Trusted Zone: myspace.com\viewmorepics Trusted Zone: myspace.com\www TCP: DhcpNameServer = 192.168.2.1 DPF: DirectAnimation Java Classes - file://C:\WINDOWS\Java\classes\dajava.cab DPF: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} FF - ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\n50rvq5y.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=17708 FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/ FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=adbartrp&AF=17708&q= FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: content.notify.interval - 600000 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.switch.threshold - 600000 - - - - ORPHANS REMOVED - - - - Toolbar-Locked - (no file)
Post #34
Hi

It is hard to know why all the files failed the signature check, but as a precaution, you probably should uninstall Service Pack 3 then reinstall it from Microsoft. Malware can disrupt a lot of legitimate services when it is removed.

But first I would back up all your data.

Here is a guide on backing up your data;
Although you can use whatever method you prefer.


Then do the following:

Use the hidden $NtServicePackUninstall$ folder
  • Click Start, click Run, type c:\windows\$NtServicePackUninstall$\spuninst\spuninst.exe in the Open box, and then click OK.
  • When the Windows XP Service Pack 3 Removal Wizard starts, click Next.
  • Follow the instructions on the screen to remove Windows XP SP3.

Then go to MS to download and reinstall the service pack:

Download the latest Windows XP service pack from the Microsoft Download Center
You can download the stand-alone update package from the Download Center.
This page will say that this installation package is intended for IT professionals and developers. However, you can safely download this file.

http://www.microsoft.com/downloads/details…08-1E1555D4F3D4
Post #35
more bad news-wanted to uninstall sp3, got to the step "restoring catalogs", and immediately received this message: "the system cannot find the file specified, service pack 3 was not uninstalled". tried 3 times, always the same message in the same place :-(
Post #36
Hi danszczerba,

Try not to get frustrated. Sometimes this can be a lengthy process so stick with me. :thumbup:

I would like for you to forgo uninstalling and then go to MS to download and reinstall Service Pack 3 over your existing service pack:

Download the latest Windows XP service pack from the Microsoft Download Center
You can download the stand-alone update package from the Download Center.
This page will say that this installation package is intended for IT professionals and developers. However, you can safely download this file.

http://www.microsoft.com/downloads/details…08-1E1555D4F3D4

Let me know how that works. :)
Post #37 last edited
ok, that seemed to install properly. also, after restart, i received 4 updates which also installed properly. ALSO, clicked on "windows update" from IE and NO MORE ERROR SCREEN. i was asked whether i wanted express or custom updates, clicked on express(recommended) and there were no updates available for my computer. sounds like we are moving in the right direction :-)
Post #38
Hi danszczerba,

Great Job!! :thumbup: Delete the ComboFix icon from your desktop by right-clicking on the icon and then selecting delete. Now if you will please download a fresh copy of ComboFix from here or here and then run the program. When it is complete please post the log created.

Are there any other outstanding issues with your system that you are experiencing now? If so, what are they?
Post #39
ComboFix 11-05-30.06 - Admin 31.May.11 4:55:29.8.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2788 [GMT 2:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))



((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Service_Mounnmexwiw


((((((((((((((((((((((((( Files Created from 2011-04-28 to 2011-05-31 )))))))))))))))))))))))))))))))


2011-05-30 17:28:31 . 2008-04-14 03:42:08 10752 ——w- C:\WINDOWS\system32\smtpapi.dll
2011-05-30 17:28:31 . 2008-04-14 03:42:06 9728 ——w- C:\WINDOWS\system32\rwnh.dll
2011-05-30 17:28:31 . 2008-04-14 03:41:50 377984 ——w- C:\WINDOWS\system32\ati2dvaa.dll
2011-05-30 17:28:30 . 2008-04-14 03:42:04 4274816 ——w- C:\WINDOWS\system32\nv4_disp.dll
2011-05-30 17:28:30 . 2008-04-14 03:41:56 81920 ——w- C:\WINDOWS\system32\ieencode.dll
2011-05-30 17:28:30 . 2008-04-14 03:41:50 870784 ——w- C:\WINDOWS\system32\ati3d1ag.dll
2011-05-30 17:28:28 . 2008-04-13 20:04:32 1897408 ——w- C:\WINDOWS\system32\drivers\nv4_mini.sys
2011-05-30 17:28:28 . 2008-04-13 20:04:16 327040 ——w- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-05-30 17:27:58 . 2006-12-28 22:31:32 19569 —-a-w- C:\WINDOWS\000001_.tmp
2011-05-28 01:37:05 . 2010-02-12 10:03:03 293376 ——w- C:\WINDOWS\system32\browserchoice.exe
2011-05-27 02:08:05 . 2011-05-31 03:01:28 ——– d—–w- C:\WINDOWS\system32\CatRoot2
2011-05-25 14:11:55 . 2011-05-25 14:11:55 ——– d—–w- C:\Program Files\Common Files\Java
2011-05-25 14:11:35 . 2011-05-25 14:11:35 ——– d—–w- C:\Program Files\Java
2011-05-25 13:56:02 . 2011-05-25 13:56:02 ——– d—–w- C:\Program Files\VS Revo Group
2011-05-25 03:29:12 . 2011-05-25 03:29:12 ——– d—–w- C:\Program Files\ESET
2011-05-25 03:19:49 . 2011-05-25 03:19:49 ——– d—–w- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2011-05-25 03:19:43 . 2010-12-20 16:09:00 38224 —-a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-05-25 03:19:42 . 2011-05-25 03:19:42 ——– d—–w- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2011-05-25 03:19:39 . 2011-05-25 03:19:44 ——– d—–w- C:\Program Files\Malwarebytes' Anti-Malware
2011-05-25 03:19:39 . 2010-12-20 16:08:40 20952 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys
2011-05-24 03:42:05 . 2011-05-24 03:42:32 ——– d—–w- C:\Documents and Settings\Administrator
2011-05-24 03:39:57 . 2011-05-24 03:39:57 ——– d—–w- C:\Documents and Settings\Admin\Application Data\Avira
2011-05-21 10:33:22 . 2011-05-21 10:33:22 388096 —-a-r- C:\Documents and Settings\Admin\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-05-21 06:57:35 . 2011-05-21 06:57:35 ——– d—–w- C:\Program Files\DAEMON Tools Lite
2011-05-21 06:14:14 . 2011-05-21 06:14:14 443448 —-a-w- C:\WINDOWS\system32\drivers\sptd.sys
2011-05-14 13:31:48 . 2011-05-14 13:31:48 404640 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
.


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2011-05-25 14:11:37 . 2010-11-08 20:09:44 73728 —-a-w- C:\WINDOWS\system32\javacpl.cpl
2011-05-25 14:11:37 . 2010-05-07 13:58:07 472808 —-a-w- C:\WINDOWS\system32\deployJava1.dll
2011-04-06 14:20:16 . 2011-04-06 14:20:16 91424 —-a-w- C:\WINDOWS\system32\dnssd.dll
2011-04-06 14:20:16 . 2011-04-06 14:20:16 75040 —-a-w- C:\WINDOWS\system32\jdns_sd.dll
2011-04-06 14:20:16 . 2011-04-06 14:20:16 197920 —-a-w- C:\WINDOWS\system32\dnssdX.dll
2011-04-06 14:20:16 . 2011-04-06 14:20:16 107808 —-a-w- C:\WINDOWS\system32\dns-sd.exe
2011-03-21 17:56:22 . 2011-03-21 17:56:22 59904 —-a-w- C:\WINDOWS\system32\OVDecode.dll
2011-03-21 17:56:06 . 2011-03-21 17:56:06 51712 —-a-w- C:\WINDOWS\system32\OpenCL.dll
2011-03-21 17:55:46 . 2011-03-21 17:55:46 12385792 —-a-w- C:\WINDOWS\system32\amdocl.dll
2011-03-17 03:06:46 . 2010-11-08 19:04:31 137656 —-a-w- C:\WINDOWS\system32\drivers\avipbb.sys
2011-03-09 09:13:30 . 2011-04-08 19:41:14 6553088 —-a-w- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-03-09 05:44:26 . 2011-04-08 19:41:14 17444864 —-a-w- C:\WINDOWS\system32\atioglxx.dll
2011-03-09 05:04:02 . 2010-08-23 19:53:36 57344 —-a-w- C:\WINDOWS\system32\aticalrt.dll
2011-03-09 05:03:56 . 2010-08-23 19:53:32 53248 —-a-w- C:\WINDOWS\system32\aticalcl.dll
2011-03-09 05:02:38 . 2010-08-23 19:53:35 4669440 —-a-w- C:\WINDOWS\system32\aticaldd.dll
2011-03-09 05:00:12 . 2010-08-23 19:53:32 491520 —-a-w- C:\WINDOWS\system32\atiok3x2.dll
2011-03-09 04:51:42 . 2011-04-08 19:41:14 311296 —-a-w- C:\WINDOWS\system32\atiiiexx.dll
2011-03-09 04:48:12 . 2011-04-08 19:41:14 462848 —-a-w- C:\WINDOWS\system32\ATIDEMGX.dll
2011-03-09 04:47:12 . 2011-04-08 19:41:14 302080 —-a-w- C:\WINDOWS\system32\ati2dvag.dll
2011-03-09 04:46:08 . 2011-04-08 19:41:14 4148544 —-a-w- C:\WINDOWS\system32\ati3duag.dll
2011-03-09 04:39:50 . 2011-04-08 19:41:14 1112576 —-a-w- C:\WINDOWS\system32\ativvamv.dll
2011-03-09 04:32:20 . 2011-04-08 19:41:14 2681600 —-a-w- C:\WINDOWS\system32\ativvaxx.dll
2011-03-09 04:29:34 . 2011-04-08 19:41:14 212992 —-a-w- C:\WINDOWS\system32\atipdlxx.dll
2011-03-09 04:29:24 . 2011-04-08 19:41:14 155648 —-a-w- C:\WINDOWS\system32\Oemdspif.dll
2011-03-09 04:29:18 . 2011-04-08 19:41:14 26112 —-a-w- C:\WINDOWS\system32\Ati2mdxx.exe
2011-03-09 04:29:12 . 2011-04-08 19:41:14 43520 —-a-w- C:\WINDOWS\system32\ati2edxx.dll
2011-03-09 04:29:02 . 2010-08-23 19:53:34 188416 —-a-w- C:\WINDOWS\system32\ati2evxx.dll
2011-03-09 04:27:58 . 2011-04-08 19:41:14 643072 —-a-w- C:\WINDOWS\system32\ati2evxx.exe
2011-03-09 04:26:50 . 2011-04-08 19:41:14 53248 —-a-w- C:\WINDOWS\system32\ATIDDC.DLL
2011-03-09 04:26:04 . 2010-08-23 19:53:30 143360 —-a-w- C:\WINDOWS\system32\atiapfxx.exe
2011-03-09 04:22:54 . 2011-04-08 19:41:14 651264 —-a-w- C:\WINDOWS\system32\atikvmag.dll
2011-03-09 04:21:12 . 2010-08-23 19:53:31 200704 —-a-w- C:\WINDOWS\system32\atiadlxx.dll
2011-03-09 04:20:52 . 2011-04-08 19:41:14 17408 —-a-w- C:\WINDOWS\system32\atitvo32.dll
2011-03-09 04:19:40 . 2010-08-23 19:53:35 64512 —-a-w- C:\WINDOWS\system32\atimpc32.dll
2011-03-09 04:19:40 . 2010-08-23 19:53:35 64512 —-a-w- C:\WINDOWS\system32\amdpcom32.dll
2011-03-09 04:17:04 . 2011-04-08 19:41:14 53248 —-a-w- C:\WINDOWS\system32\drivers\ati2erec.dll
2011-03-09 04:16:18 . 2011-04-08 19:41:14 851968 —-a-w- C:\WINDOWS\system32\ati2cqag.dll
2011-03-07 05:33:50 . 2008-09-26 22:24:13 692736 ——w- C:\WINDOWS\system32\inetcomm.dll
2011-03-04 06:37:06 . 2002-08-29 12:00:00 420864 —-a-w- C:\WINDOWS\system32\vbscript.dll
2011-03-03 13:21:11 . 2002-08-29 12:00:00 1857920 ——w- C:\WINDOWS\system32\win32k.sys
2009-07-14 00:16:26 . 2009-07-14 00:16:26 1044480 —-a-w- C:\Program Files\mozilla firefox\plugins\libdivx.dll
2009-07-14 00:16:26 . 2009-07-14 00:16:26 200704 —-a-w- C:\Program Files\mozilla firefox\plugins\ssldivx.dll
2011-05-03 03:03:08 . 2011-03-26 04:27:29 142296 —-a-w- C:\Program Files\mozilla firefox\components\browsercomps.dll


((((((((((((((((((((((((((((( SnapShot_2011-05-29_18.45.44 )))))))))))))))))))))))))))))))))))))))))

+ 2011-05-31 02:48:36 . 2011-05-31 02:48:36 16384 C:\WINDOWS\temp\Perflib_Perfdata_6e0.dat
- 2011-05-29 18:45:54 . 2011-05-29 18:45:54 16384 C:\WINDOWS\temp\Perflib_Perfdata_208.dat
+ 2011-05-31 03:01:09 . 2011-05-31 03:01:09 16384 C:\WINDOWS\temp\Perflib_Perfdata_208.dat
+ 2011-05-31 02:48:33 . 2011-05-31 02:48:33 16384 C:\WINDOWS\temp\Perflib_Perfdata_1f0.dat
+ 2011-05-31 03:01:06 . 2011-05-31 03:01:06 16384 C:\WINDOWS\temp\Perflib_Perfdata_170.dat
+ 2002-08-29 12:00:00 . 2008-04-14 03:42:42 13824 C:\WINDOWS\system32\wscntfy.exe
+ 2011-05-30 17:27:56 . 2008-04-13 22:01:32 35840 C:\WINDOWS\system32\ReinstallBackups\0028\DriverFiles\i386\processr.sys
+ 2011-05-30 17:27:56 . 2008-04-13 22:01:34 36352 C:\WINDOWS\system32\ReinstallBackups\0027\DriverFiles\i386\intelppm.sys
+ 2011-05-30 17:27:56 . 2008-04-13 22:01:34 36352 C:\WINDOWS\system32\ReinstallBackups\0026\DriverFiles\i386\intelppm.sys
+ 2011-05-30 17:27:56 . 2008-04-13 22:01:32 35840 C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\processr.sys
+ 2002-08-29 12:00:00 . 2011-05-31 02:52:51 68796 C:\WINDOWS\system32\perfc009.dat
- 2002-08-29 12:00:00 . 2011-05-29 03:05:01 68796 C:\WINDOWS\system32\perfc009.dat
- 2008-09-26 22:27:59 . 2008-09-27 08:37:43 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-09-26 22:27:59 . 2011-05-30 17:33:24 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2011-05-30 17:33:23 . 2011-05-30 17:33:16 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012011053020110531\index.dat
+ 2008-09-26 22:27:59 . 2011-05-30 17:33:24 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2008-09-26 22:27:59 . 2008-09-27 08:37:43 32768 C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2011-05-30 17:33:20 . 2011-05-30 17:33:24 16384 C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-09-27 08:33:22 . 2008-04-14 03:42:12 121856 C:\WINDOWS\system32\xmllite.dll
- 2008-09-27 08:33:22 . 2009-01-07 16:21:04 121856 C:\WINDOWS\system32\xmllite.dll
+ 2007-03-22 19:24:06 . 2008-04-14 03:42:08 373248 C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll
- 2007-03-22 19:24:06 . 2008-07-06 12:06:10 373248 C:\WINDOWS\system32\spool\drivers\w32x86\3\unidrv.dll
+ 2008-09-27 15:53:16 . 2008-04-14 03:42:04 543232 C:\WINDOWS\system32\spool\drivers\w32x86\3\pscript5.dll
- 2008-09-27 15:53:16 . 2006-11-02 01:46:12 543232 C:\WINDOWS\system32\spool\drivers\w32x86\3\PSCRIPT5.DLL
- 2008-09-27 15:53:16 . 2006-11-02 01:46:12 728576 C:\WINDOWS\system32\spool\drivers\w32x86\3\PS5UI.DLL
+ 2008-09-27 15:53:16 . 2008-04-14 03:42:04 728576 C:\WINDOWS\system32\spool\drivers\w32x86\3\ps5ui.dll
+ 2011-05-30 17:27:57 . 2008-04-13 20:06:06 144384 C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\hdaudbus.sys
- 2002-08-29 12:00:00 . 2011-05-29 03:05:01 436026 C:\WINDOWS\system32\perfh009.dat
+ 2002-08-29 12:00:00 . 2011-05-31 02:52:51 436026 C:\WINDOWS\system32\perfh009.dat
+ 2011-05-30 17:28:31 . 2008-04-14 03:42:08 189440 C:\WINDOWS\system32\inetsrv\smtpadm.dll
+ 2011-05-30 17:28:31 . 2008-04-14 03:42:06 221696 C:\WINDOWS\system32\inetsrv\seo.dll
+ 2011-05-30 17:28:29 . 2008-04-14 03:41:52 516768 C:\WINDOWS\ServicePackFiles\i386\ativvaxx.dll
+ 2011-05-30 17:28:30 . 2008-04-14 03:41:50 870784 C:\WINDOWS\ServicePackFiles\i386\ati3d1ag.dll
+ 2011-05-30 17:28:29 . 2008-04-13 20:04:16 701440 C:\WINDOWS\ServicePackFiles\i386\ati2mtag.sys
+ 2011-05-30 17:28:30 . 2008-04-13 20:04:16 327040 C:\WINDOWS\ServicePackFiles\i386\ati2mtaa.sys
+ 2011-05-30 17:28:30 . 2008-04-14 03:41:50 201728 C:\WINDOWS\ServicePackFiles\i386\ati2dvag.dll
+ 2011-05-30 17:28:30 . 2008-04-14 03:41:50 377984 C:\WINDOWS\ServicePackFiles\i386\ati2dvaa.dll
+ 2011-05-30 17:28:30 . 2008-04-14 03:41:50 229376 C:\WINDOWS\ServicePackFiles\i386\ati2cqag.dll
+ 2008-09-27 08:33:30 . 2009-07-31 08:05:44 1372672 C:\WINDOWS\system32\msxml6.dll
- 2008-09-27 08:33:30 . 2009-07-31 09:05:44 1372672 C:\WINDOWS\system32\msxml6.dll
- 2008-09-27 08:33:30 . 2009-07-31 09:05:44 1372672 C:\WINDOWS\system32\dllcache\msxml6.dll
+ 2008-09-27 08:33:30 . 2009-07-31 08:05:44 1372672 C:\WINDOWS\system32\dllcache\msxml6.dll
+ 2011-05-30 17:28:30 . 2008-04-13 20:04:32 1897408 C:\WINDOWS\ServicePackFiles\i386\nv4_mini.sys
+ 2011-05-30 17:28:30 . 2008-04-14 03:42:04 4274816 C:\WINDOWS\ServicePackFiles\i386\nv4_disp.dll
+ 2011-05-30 17:28:29 . 2008-04-14 03:41:52 1888992 C:\WINDOWS\ServicePackFiles\i386\ati3duag.dll
+ 2011-05-30 17:28:30 . 2008-04-14 03:41:50 1057760 C:\WINDOWS\ServicePackFiles\i386\ati3d2ag.dll

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Fraps"="C:\FRAPS\FRAPS.EXE" [2006-12-19 13:02:58 2842624]
"EVEREST AutoStart"="C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe" [2008-09-04 23:00:00 2117216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSIAfterburner"="C:\Program Files\MSI Afterburner\MSIAfterburner.exe" [2010-08-31 03:04:16 355640]
"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 10:48:18 58656]
"avgnt"="C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-09 03:13:35 281768]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-03-08 22:37:18 98304]
"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 10:49:34 932288]
"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 11:12:22 253672]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 03:42:18 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MaxRecentDocs"= 11 (0xb)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
2007-09-21 01:10:12 55824 —-a-w- C:\WINDOWS\KHALMNPR.Exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Steam"=C:\Program Files\Valve\Steam\Steam.exe -silent
"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
"RTHDCPL"=RTHDCPL.EXE
"Alcmtr"=ALCMTR.EXE
"YMailAdvisor"="C:\Program Files\Yahoo!\Common\YMailAdvisor.exe"
"PCSuiteTrayApplication"=C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
"ContentTransferWMDetector.exe"=C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"UpdatePDRShortCut"="C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\8.0"
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"
"Malwarebytes' Anti-Malware"="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"F:\\Spiele\\F12010\\F1_2010_game.exe"=
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\Program Files\\Curse\\CurseClient.exe"=
"F:\\Spiele\\BStorm\\Binaries\\Win32\\ShippingPC-StormGame.exe"=
"F:\\Spiele\\RDG\\GRID.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=

R0 mv61xx;mv61xx;C:\WINDOWS\system32\drivers\mv61xx.sys [27.Sep.08 1:26:26 150568]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;C:\Program Files\Avira\AntiVir Desktop\sched.exe [08.Nov.10 21:04:32 136360]
R2 dgdersvc;Device Error Recovery Service;C:\WINDOWS\system32\dgdersvc.exe [26.Jul.10 15:17:06 95568]
R2 FsUsbExService;FsUsbExService;C:\WINDOWS\system32\FsUsbExService.Exe [25.Sep.10 16:05:33 217088]
R2 MBAMService;MBAMService;C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [25.May.11 5:19:43 363344]
R3 dgderdrv;dgderdrv;C:\WINDOWS\system32\drivers\dgderdrv.sys [26.Jul.10 15:17:06 18136]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [14.Dec.08 0:42:29 23152]
R3 FsUsbExDisk;FsUsbExDisk;C:\WINDOWS\system32\FsUsbExDisk.Sys [25.Sep.10 16:05:33 36640]
R3 MBAMProtector;MBAMProtector;C:\WINDOWS\system32\drivers\mbam.sys [25.May.11 5:19:39 20952]
R3 RTCore32;RTCore32;C:\Program Files\MSI Afterburner\RTCore32.sys [31.Aug.10 5:04:18 12088]
S2 gupdate;Google Update Service (gupdate);C:\Program Files\Google\Update\GoogleUpdate.exe [04.Oct.09 20:07:11 133104]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files\Google\Update\GoogleUpdate.exe [04.Oct.09 20:07:11 133104]
S3 LgBttPort;LGE Bluetooth TransPort;C:\WINDOWS\system32\DRIVERS\lgbtport.sys –> C:\WINDOWS\system32\DRIVERS\lgbtport.sys [?]
S3 lgbusenum;LG Bluetooth Bus Enumerator;C:\WINDOWS\system32\DRIVERS\lgbtbus.sys –> C:\WINDOWS\system32\DRIVERS\lgbtbus.sys [?]
S3 LGVMODEM;LGE Virtual Modem;C:\WINDOWS\system32\DRIVERS\lgvmodem.sys –> C:\WINDOWS\system32\DRIVERS\lgvmodem.sys [?]
S3 Roxio UPnP Renderer 11;Roxio UPnP Renderer 11;"C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe" –> C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe [?]
S3 sscebus;SAMSUNG USB Composite Device V2 driver (WDM);C:\WINDOWS\system32\drivers\sscebus.sys [25.Sep.10 16:05:54 98560]
S3 sscemdfl;SAMSUNG Mobile Modem V2 Filter;C:\WINDOWS\system32\drivers\sscemdfl.sys [25.Sep.10 16:05:54 14848]
S3 sscemdm;SAMSUNG Mobile Modem V2 Drivers;C:\WINDOWS\system32\drivers\sscemdm.sys [25.Sep.10 16:05:54 123648]
S3 ssceserd;SAMSUNG Mobile Modem Diagnostic Serial Port V2 (WDM);C:\WINDOWS\system32\drivers\ssceserd.sys [25.Sep.10 16:05:54 100352]
S3 WDC_SAM;WD SCSI Pass Thru driver;C:\WINDOWS\system32\drivers\wdcsam.sys [06.May.08 17:06:00 11520]
S4 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys –> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]

— Other Services/Drivers In Memory —

*NewlyCreated* - EVERESTDRIVER
*NewlyCreated* - FSUSBEXDISK

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

Contents of the 'Scheduled Tasks' folder

2011-05-27 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50:20 . 2009-10-22 09:50:20]

2011-05-31 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-04 18:07:11 . 2009-10-04 18:07:09]

2011-05-30 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-04 18:07:11 . 2009-10-04 18:07:09]


——- Supplementary Scan ——-

uStart Page = hxxp://www.yahoo.com/
Trusted Zone: myspace.com\viewmorepics
Trusted Zone: myspace.com\www
TCP: DhcpNameServer = 192.168.2.1
DPF: DirectAnimation Java Classes - file://C:\WINDOWS\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - ProfilePath - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\n50rvq5y.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.babylon.com/web/{searchTerms}?babsrc=browsersearch&AF=17708
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=adbartrp&AF=17708&q=
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000

- - - - ORPHANS REMOVED - - - -

Toolbar-Locked - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-31 05:01:21
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …



Are there any other outstanding issues with your system that you are experiencing now? If so, what are they?

well, you tell me-here is my newest HJT log and it seems rather lengthy if you ask me. is there anything else i can delete from this?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 5:06, on 31.May.11
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dgdersvc.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSI Afterburner\MSIAfterburner.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\FRAPS\FRAPS.EXE
C:\Program Files\MSI Afterburner\Bundle\OSDServer\RTSS.exe
C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [MSIAfterburner] "C:\Program Files\MSI Afterburner\MSIAfterburner.exe" /s
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE
O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://static.pe.meinvz.net/photouploader/…ache=1224233407
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} (Java Plug-in 1.6.0_24) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\WINDOWS\system32\dgdersvc.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Performance Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Roxio UPnP Renderer 11 - Unknown owner - C:\Program Files\Roxio Creator 2009 Ultimate\Digital Home 11\RoxioUPnPRenderer11.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

–
End of file - 8990 bytes
Post #40
Hi danszczerba,

IT APPEARS THAT YOUR LOGS ARE NOW CLEAN :D SO LETS DO A COUPLE OF THINGS TO WRAP THIS UP!! :D

Your HijackThis log looks just fine. The entries that you are seeing in your HijackThis log are legitimate and necessary. :thumbup:

You might try to use this program, Startup Lite, found here from Malwarebytes. It will help to speed up your system by eliminating unnecessary applications from starting on startup. By disabling or removing unnecessary entries, your startup time can drastically shorten.
———-

The following will implement some cleanup procedures as well as reset System Restore points:

Click Start > Run and copy/paste the following bolded text into the Run box and click OK:

ComboFix /Uninstall
———-

This infection appears to have been cleaned, but as the malware could be configured to run any program a remote attacker requires, it's impossible to be 100% sure that any machine is clean.

**All of the remaining tools that we have used, as well as logs you created from these tools, can be deleted by right-clicking them and selecting delete so that they aren't cluttering up your desktop.**

Here are some tips to reduce the potential for spyware infection in the future:

1. Make your Internet Explorer more secure - This can be done by following these simple instructions:
  • From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Next press the Apply button and then the OK to exit the Internet Properties page.
2. Use and Update an Anti-Virus Software - I can not overemphasize the need for you to use and update your Anti-virus application on a regular basis. With the ever increasing number of new variants of malware arriving on the scene daily, you become very susceptible to an attack without updated protection.

3. Firewall
Using a third-party firewall will allow you to give/deny access for applications that want to go online. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. A tutorial on Firewalls and a listing of some available ones can be found here.
**Do not install more than one firewall program because they will conflict with each other**

4. Make sure you keep your Windows OS current by visiting Windows update regularly to download and install any critical updates and service packs. Without these you are leaving the back door open.

5. Filehippo's Update Checker. It is a free utilitiy that scan your computer for installed software, checks the versions and then sends this information to see if there are any newer releases. Available software updates are displayed and you can decide which ones to download and install. Among many other types of programs, they includes a number of the Anti-Spyware, Firewall/Security and Anti-Virus programs that have been recommended (though not all of them). Note: Definition files should be updated from within the programs themselves. The Update Checker look for newer versions of the software program, not definition files.

6. Consider a custom hosts file such as MVPS HOSTS. This custom hosts file effectively blocks a wide range of unwanted ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and many hijackers. For information on how to download and install, please read this tutorial by WinHelp2002
Note: Be sure to follow the instructions to disable the DNS Client service before installing a custom hosts file.

7. WOT , Web of Trust, As 'Googling' is such an integral part of internet life, this free browser add on warns you about risky websites that try to scam visitors, deliver malware or send spam. It is especially helpful when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  • Green to go
  • Yellow for caution
  • Red to stop
WOT has an add-on available for both Firefox and IE.

8. Install Spybot - Search and Destroy - Download and install Spybot - Search and Destroy with its TeaTimer option. This will provide real time spyware and hijacker protection on your computer alongside your virus protection. You should scan your computer with the program on a regular basis just as you would with your anti-virus software. A tutorial on installing and using this product can be found here:
Instructions for - Spybot S & D.

9. Finally, I strongly recommend that you read TonyKlein's good advice So how did I get infected in the first place?

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.
Post #41 last edited
well then jeffce, thank you very much for all your time and knowledge. and thanks for taking the time to help me with my problem. i mean this in the most sincere way when i say i hope we don't have to meet again under these circumstances :-) thanks again!!!! with best regards, dan p.s were you able to pinpoint the malware or infection that was causing my problems? does it have a name? just curious :-)
Post #42
Hi danszczerba, Glad that we could be of help. :) As for the infections with your system you had several trojans and that malware corrupted your catroot. That is the reason that we had to reinstall your Service Pack 3 for Windows. Take care. :wavey:
Post #44
Hi danszczerba,

I agree that the AutoPlay feature is very convenient to have, but it may also compromise your system and allow malware to run on your system. There are many variants of malware that can infect your system via USB drives or other removable drives and these can create considerable security vulnerabilities. I would recommend that you read this link by miekiemoes and it will further explain the benefits of keeping the autorun feature disabled. If, however, you would prefer to have Autoplay enabled please try the following instructions…

To turn on AutoPlay, follow these steps:

1. Click Start, and then click Run.
2. Type regedit, and then click OK.
3. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDRom
4. Double-click Autorun and see whether a zero or a one is displayed in the Value data box.
  • If the value for Autorun is 1, go to step 5.
  • If the value for Autorun is 0, right-click Autorun, and then click Modify. In the Value data box, type 1, and then click OK.
5. Locate and then click the following subkey: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
6. Double-click NoDriveTypeAutoRun to see its value. If the value is 0xb5, the AutoRun feature for CD-ROMs is turned off. To turn on the AutoRun feature, follow these steps:
  • Right-click NoDriveTypeAutoRun.
  • Click Modify.
  • In the Value data box, type 91.
  • Select Hexadecimal, and then click OK.
7. Exit Registry Editor.

Now test out your drives and see how they are running and let me know. :)
Post #45 last edited
hi jeffce, thank you for replying.
i did everything you suggested, still no autoplay.
i understand the security risks, but, for example, when i insert an original game disc/dvd into my drive, i expect to be prompted with install or play options-i get nothing.
i have to go to "My Computer", select the drive, click on explore, and then click on either launch or setup.exe..
it is not alot of work, but it should autoplay when autoplay is turned on-my drives don't autoplay :-(
here is a pic of my registry settings:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDRom
[external image: Posted Image]

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
[external image: Posted Image]

as you can see, everything is set according to your instructions. i should point out that "NoDriveTypeAutoRun" value was set not at 0xb5, but at 143. now changed to 91.
still, no autoplay :-(
just a note-when i stick a usb stick in the usb port, the mouse pointer turns to an hourglass for a split second, but a prompt menu fails to appear. i don't know if that means something or not :-(

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI