What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

PC Infected / Malware

318 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #76
does Service Pack 3 show up in your Add/Remove Programs?

If it does, then uninstall it from there,

if not, then you won't be able to uninstall it, but you will need to overinstall SP3 over what you already have

so download SP3


Download the latest Windows XP service pack from the Microsoft Download Center
You can download the stand-alone update package from the Download Center.
This page will say that this installation package is intended for IT professionals and developers. However, you can safely download this file.

http://www.microsoft.com/downloads/details…08-1E1555D4F3D4


and install it


Now visit the Windows Update Center and see if you have any updates that need installing. Install all the critical updates.

Once you have completed that, re-run ComboFix (if the "snapshot" section is enormous, you can snip that section out of the log)
Post #77
CatByte

Thanks for your reply.

Did as instructed. Service Pack 3 nowhere to be found, so downloaded Windows XP service pack version you told me to. Then visited Windows Update Centre and carried out updated accordingly. Please note that both after installing SP£ and Windows update, pc restarted and both times the 'Warning' box to reinstall/update drivers and programs appeared.


Then ran ComboFix. Log (without snapshot section) as follows:

ComboFix 11-10-10.04 - Owner 2011-10-11 0:02.9.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.649 [GMT 2:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\d3d9caps.dat
.
.
((((((((((((((((((((((((( Files Created from 2011-09-10 to 2011-10-10 )))))))))))))))))))))))))))))))
.
.
2011-10-10 21:52 . 2011-10-10 21:52 ——– d—–w- c:\windows\LastGood
2011-10-10 21:22 . 2009-07-31 08:05 1372672 -c—-w- c:\windows\system32\dllcache\msxml6.dll
2011-10-10 21:22 . 2008-04-13 20:57 79872 -c—-w- c:\windows\system32\dllcache\msxml6r.dll
2011-10-10 21:22 . 2008-04-14 03:42 380416 ——w- c:\windows\system32\irprops.cpl
2011-10-10 21:18 . 2006-12-28 22:31 19569 —-a-w- c:\windows\000001_.tmp
2011-10-10 03:18 . 2011-10-10 22:01 ——– d—–w- c:\windows\system32\CatRoot2
2011-10-09 10:28 . 2011-10-09 10:29 ——– d—–w- c:\documents and settings\Owner\Local Settings\Application Data\Lime PRO
2011-10-09 09:53 . 2011-02-17 16:26 81920 —-a-w- c:\windows\eSellerateControl350.dll
2011-10-09 09:53 . 2011-02-17 16:26 356352 —-a-w- c:\windows\eSellerateEngine.dll
2011-10-09 09:53 . 2011-10-09 10:25 ——– d—–w- c:\program files\Piolet Removal Tool
2011-10-09 09:07 . 2011-08-03 11:49 146024 —-a-w- c:\windows\system32\nvsvc32.exe
2011-10-09 07:52 . 2011-10-09 07:52 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-04 19:45 . 2011-10-04 19:45 ——– d—–w- c:\program files\ESET
2011-10-04 19:15 . 2011-10-04 19:15 ——– d—–w- c:\documents and settings\Owner\Application Data\Malwarebytes
2011-10-02 21:38 . 2010-09-07 13:39 150392 —-a-w- c:\windows\junction.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-06 20:20 . 2009-02-19 09:26 139264 —-a-w- c:\windows\system32\nvsvc32.exe.vir
2011-10-06 20:20 . 2005-08-23 15:07 47104 —-a-w- c:\windows\system32\wuauclt.exe.old.exe.vir
2011-10-06 20:20 . 2006-12-19 08:30 81920 —-a-w- c:\windows\system32\IoctlSvc.exe.vir
2011-10-06 20:20 . 2005-08-23 16:45 44032 —-a-w- c:\windows\system32\CTSVCCDA.EXE.vir
2011-10-03 20:00 . 2004-08-04 12:00 26112 —-a-w- c:\windows\system32\userinit.exe
2011-09-09 09:12 . 2004-08-04 12:00 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-05 18:06 . 2010-09-29 19:24 101720 —-a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-08-18 13:25 . 2011-09-05 18:04 64512 —-a-w- c:\windows\system32\drivers\Lbd.sys
2011-08-03 11:49 . 2011-08-27 11:24 600680 —-a-w- c:\windows\system32\easyupdatusapiu.dll
2011-08-03 11:49 . 2011-08-27 11:22 61440 —-a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-08-27 11:21 914024 —-a-w- c:\windows\system32\nvdispco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 875112 —-a-w- c:\windows\system32\nvgenco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 2090088 —-a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-08-27 11:21 17186816 —-a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2009-02-19 09:26 5427200 —-a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2009-02-19 09:26 54272 —-a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2404864 —-a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2387560 —-a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2009-02-19 09:26 16191488 —-a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2009-02-19 09:26 145000 —-a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2009-02-19 09:26 13892200 —-a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2009-02-19 09:26 111208 —-a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2005-04-01 14:16 4210816 —-a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2005-04-01 14:16 12542592 —-a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-15 13:29 . 2004-08-04 12:00 456320 —-a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-12 22:55 . 2002-01-01 00:09 2237440 —-a-w- C:\OTLPE.exe
2008-09-01 22:08 . 2008-09-01 22:06 28868320 —-a-w- c:\program files\FileFormatConverters.exe
2009-09-25 16:41 . 2009-09-25 16:41 1044480 —-a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-09-25 16:41 . 2009-09-25 16:41 200704 —-a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
.

.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-02-03 2181672]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-04-22 399736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"P17Helper"="P17.dll" [2005-05-03 64512]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-09-21 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-08-13 273544]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="NvMCTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-05 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-22 39264]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2008-9-21 1545488]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\progra~1\DVDREG~1\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package Menu.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package Menu.lnk
backup=c:\windows\pss\Picture Package Menu.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package VCD Maker.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package VCD Maker.lnk
backup=c:\windows\pss\Picture Package VCD Maker.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2005-01-31 11:11 2752000 —-a-r- c:\windows\ALCWZRD.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 00:12 15360 —-a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 —-a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
2004-08-12 15:45 61952 —-a-w- c:\windows\system32\Hdaudpropshortcut.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotkey]
2004-04-03 16:38 36864 —-a-w- c:\program files\Hotkey\Hotkey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-08-18 23:07 421736 —-a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 —-a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2006-01-24 09:37 7094272 —-a-w- c:\program files\MSN Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 07:31 2221352 —-a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-06-19 07:53 570664 —-a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
2005-03-18 11:18 98304 —-a-r- c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 16:36 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-01-05 07:40 77824 —-a-r- c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2005-05-20 01:11 925696 —-a-w- c:\program files\Analog Devices\Core\smax4pnp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-13 06:23 273544 —-a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead Photo Express Calendar Checker]
2004-01-12 19:40 69632 —-a-w- c:\program files\Ulead Systems\Ulead Photo Express 5 SE\CalCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2009-03-09 15:49 37888 —-a-w- c:\program files\Winamp\winampa.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Real\\RealPlayer\\RecordingManager.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Juniper Networks\\Secure Application Manager\\dsSamProxy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Real\\RealUpgrade\\realupgrade.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AdobeUpdateManager.exe"=
"c:\\Program Files\\Windows Live Toolbar\\msn_sl.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"=
"c:\\Program Files\\Safari\\Safari.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Program Files\\Ad-Aware\\Ad-Aware.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpHost.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\Documents and Settings\\Owner\\Desktop\\aswMBR.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-09-05 64512]
R1 NEOFLTR_530_10641;Juniper Networks TDI Filter Driver (NEOFLTR_530_10641);c:\windows\system32\drivers\NEOFLTR_530_10641.sys [2006-04-27 57063]
R1 NEOFLTR_620_14085;Juniper Networks TDI Filter Driver (NEOFLTR_620_14085);c:\windows\system32\drivers\NEOFLTR_620_14085.sys [2009-03-18 64480]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-27 2255464]
R3 Pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [2008-01-05 47360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1ca59fff6283766;Google Update Service (gupdate1ca59fff6283766);c:\program files\Google\Update\GoogleUpdate.exe /svc –> c:\program files\Google\Update\GoogleUpdate.exe [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe /medsvc –> c:\program files\Google\Update\GoogleUpdate.exe [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-08-18 2151640]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [2011-08-18 15232]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys –> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2008-09-13 717296]
.
— Other Services/Drivers In Memory —
.
*Deregistered* - project
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2011-10-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-08-18 18:06]
.
2011-08-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2011-10-10 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
2011-10-10 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
2011-10-10 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.msn.com
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: google.com\mail
Trusted Zone: google.com\www
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{3E33D33F-CD38-4F1B-8410-6A3DB395DFB1}: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\m225jtwg.default\
FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.mt/
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=3c30ef60&v=6.010.006.004&i=23&tp=ab&iy=b&ychte=us&lng=en-GB&q=
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: FlashGot: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} - %profile%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
FF - Ext: Subtile: {88ce39f5-1e54-477c-809d-93d411720f0c} - %profile%\extensions\{88ce39f5-1e54-477c-809d-93d411720f0c}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-Uniblue RegistryBooster2 - c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe
HKCU-Run-lime pro - c:\program files\Lime PRO\LimePro.exe
MSConfigStartUp-Uniblue RegistryBooster 2 - c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe
MSConfigStartUp-Uniblue RegistryBooster2 - c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe
AddRemove-RAR Password Cracker - c:\program files\RAR Password Cracker\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-11 00:13
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2011-10-11 00:18:07
ComboFix-quarantined-files.txt 2011-10-10 22:18
ComboFix2.txt 2011-10-03 20:32
ComboFix3.txt 2011-10-03 18:16
ComboFix4.txt 2011-10-01 12:00
ComboFix5.txt 2011-10-10 22:01
.
Pre-Run: 17,769,844,736 bytes free
Post-Run: 17,737,060,352 bytes free
.
Current=1 Default=1 Failed=3 LastKnownGood=2 Sets=1,2,3,4
- - End Of File - - A309CB5E045F4DD7278C1EEBBFA98707
Post #78
OK

That took care of the files that were failing sigcheck, which is great:


the popup could be referring to a driver that is still there, but the file is missing, let's show hidden drivers:

  • Click Start > Run and copy and paste this:
    devmgmt.msc
  • Click OK.
  • Click the View menu, and click Show hidden devices
  • Click the + next to Display Adapters
  • uninstall any that you see there, other than the one you are currently using
  • Click OK if you are asked a question
  • go through the rest of the trees > see if there are any with warning triangles beside them
  • Reboot your computer



I'll remove all the drivers that I see in the ComboFix log where the files are missing > you may need to reinstall Malwarebytes?

you should also consider removing your Peer 2 Peer software, it was likely the cause of this mess to begin with.


  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
  • They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Copy/paste the text inside the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')

driver::
gupdate1ca59fff6283766
gupdatem
MBAMSwissArmy
RapportEI
RapportPG

ClearJavaCache::

Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:

1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …

[external image: Posted Image]
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix may request an update; please allow it.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you.
  • Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.



P2P - I see you have P2P software µTorrent installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It likely contributed to your current situation. This page will give you further information.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
Please see this topic for more information:
Perils of P2P File Sharing.
I would strongly recommend that you uninstall this now. You can do so via Control Panel >> Add or Remove Programs.
Post #79
CatByte

Thanks for your latest set of instructions.

Ran "devmgmt.msc" as requested and clicked "Show hidden devices". However, under Display Adapters there was only the Nvidea GeForce file that I use. No warning triangles on any files. Some had a yellow circle with "!" inside, however, I believe these are files I updated.

Rebooted computer, however, warning box to "display/update drivers…." still there.

Thanks for advice on p2p software. I had no idea it was that problematic. Will read info in links you sent. Thanks again.

Then carried out ComboFix procedure you advised and the log is found below.

Thanks again.

Pete

ComboFix 11-10-11.03 - Owner 2011-10-11 22:36:14.10.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.521 [GMT 2:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Owner\Desktop\CFScript.txt
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
.
((((((((((((((((((((((((( Files Created from 2011-09-11 to 2011-10-11 )))))))))))))))))))))))))))))))
.
.
2011-10-10 21:22 . 2009-07-31 08:05 1372672 -c—-w- c:\windows\system32\dllcache\msxml6.dll
2011-10-10 21:22 . 2008-04-13 20:57 79872 -c—-w- c:\windows\system32\dllcache\msxml6r.dll
2011-10-10 21:22 . 2008-04-14 03:42 380416 ——w- c:\windows\system32\irprops.cpl
2011-10-10 21:18 . 2006-12-28 22:31 19569 —-a-w- c:\windows\000001_.tmp
2011-10-10 03:18 . 2011-10-11 20:35 ——– d—–w- c:\windows\system32\CatRoot2
2011-10-09 10:28 . 2011-10-09 10:29 ——– d—–w- c:\documents and settings\Owner\Local Settings\Application Data\Lime PRO
2011-10-09 09:53 . 2011-02-17 16:26 81920 —-a-w- c:\windows\eSellerateControl350.dll
2011-10-09 09:53 . 2011-02-17 16:26 356352 —-a-w- c:\windows\eSellerateEngine.dll
2011-10-09 09:53 . 2011-10-09 10:25 ——– d—–w- c:\program files\Piolet Removal Tool
2011-10-09 09:07 . 2011-08-03 11:49 146024 —-a-w- c:\windows\system32\nvsvc32.exe
2011-10-09 07:52 . 2011-10-09 07:52 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-04 19:45 . 2011-10-04 19:45 ——– d—–w- c:\program files\ESET
2011-10-04 19:15 . 2011-10-04 19:15 ——– d—–w- c:\documents and settings\Owner\Application Data\Malwarebytes
2011-10-02 21:38 . 2010-09-07 13:39 150392 —-a-w- c:\windows\junction.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-06 20:20 . 2009-02-19 09:26 139264 —-a-w- c:\windows\system32\nvsvc32.exe.vir
2011-10-06 20:20 . 2005-08-23 15:07 47104 —-a-w- c:\windows\system32\wuauclt.exe.old.exe.vir
2011-10-06 20:20 . 2006-12-19 08:30 81920 —-a-w- c:\windows\system32\IoctlSvc.exe.vir
2011-10-06 20:20 . 2005-08-23 16:45 44032 —-a-w- c:\windows\system32\CTSVCCDA.EXE.vir
2011-10-03 20:00 . 2004-08-04 12:00 26112 —-a-w- c:\windows\system32\userinit.exe
2011-09-09 09:12 . 2004-08-04 12:00 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-05 18:06 . 2010-09-29 19:24 101720 —-a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-08-18 13:25 . 2011-09-05 18:04 64512 —-a-w- c:\windows\system32\drivers\Lbd.sys
2011-08-03 11:49 . 2011-08-27 11:24 600680 —-a-w- c:\windows\system32\easyupdatusapiu.dll
2011-08-03 11:49 . 2011-08-27 11:22 61440 —-a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-08-27 11:21 914024 —-a-w- c:\windows\system32\nvdispco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 875112 —-a-w- c:\windows\system32\nvgenco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 2090088 —-a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-08-27 11:21 17186816 —-a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2009-02-19 09:26 5427200 —-a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2009-02-19 09:26 54272 —-a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2404864 —-a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2387560 —-a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2009-02-19 09:26 16191488 —-a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2009-02-19 09:26 145000 —-a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2009-02-19 09:26 13892200 —-a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2009-02-19 09:26 111208 —-a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2005-04-01 14:16 4210816 —-a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2005-04-01 14:16 12542592 —-a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-15 13:29 . 2004-08-04 12:00 456320 —-a-w- c:\windows\system32\drivers\mrxsmb.sys
2008-09-01 22:08 . 2008-09-01 22:06 28868320 —-a-w- c:\program files\FileFormatConverters.exe
2009-09-25 16:41 . 2009-09-25 16:41 1044480 —-a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-09-25 16:41 . 2009-09-25 16:41 200704 —-a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-10-10_22.13.50 )))))))))))))))))))))))))))))))))))))))))
.
- 2004-08-04 12:00 . 2011-10-10 21:52 83278 c:\windows\system32\perfc009.dat
+ 2004-08-04 12:00 . 2011-10-11 20:28 83278 c:\windows\system32\perfc009.dat
+ 2004-08-04 12:00 . 2011-10-11 20:28 489196 c:\windows\system32\perfh009.dat
- 2004-08-04 12:00 . 2011-10-10 21:52 489196 c:\windows\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-02-03 2181672]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-04-22 399736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"P17Helper"="P17.dll" [2005-05-03 64512]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-09-21 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-08-13 273544]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="NvMCTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-05 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-22 39264]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2008-9-21 1545488]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\progra~1\DVDREG~1\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package Menu.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package Menu.lnk
backup=c:\windows\pss\Picture Package Menu.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package VCD Maker.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package VCD Maker.lnk
backup=c:\windows\pss\Picture Package VCD Maker.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2005-01-31 11:11 2752000 —-a-r- c:\windows\ALCWZRD.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 00:12 15360 —-a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 —-a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
2004-08-12 15:45 61952 —-a-w- c:\windows\system32\Hdaudpropshortcut.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotkey]
2004-04-03 16:38 36864 —-a-w- c:\program files\Hotkey\Hotkey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-08-18 23:07 421736 —-a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 —-a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2006-01-24 09:37 7094272 —-a-w- c:\program files\MSN Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 07:31 2221352 —-a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-06-19 07:53 570664 —-a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
2005-03-18 11:18 98304 —-a-r- c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 16:36 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-01-05 07:40 77824 —-a-r- c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2005-05-20 01:11 925696 —-a-w- c:\program files\Analog Devices\Core\smax4pnp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-13 06:23 273544 —-a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead Photo Express Calendar Checker]
2004-01-12 19:40 69632 —-a-w- c:\program files\Ulead Systems\Ulead Photo Express 5 SE\CalCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2009-03-09 15:49 37888 —-a-w- c:\program files\Winamp\winampa.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Real\\RealPlayer\\RecordingManager.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Juniper Networks\\Secure Application Manager\\dsSamProxy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Real\\RealUpgrade\\realupgrade.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AdobeUpdateManager.exe"=
"c:\\Program Files\\Windows Live Toolbar\\msn_sl.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"=
"c:\\Program Files\\Safari\\Safari.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Program Files\\Ad-Aware\\Ad-Aware.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpHost.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\Documents and Settings\\Owner\\Desktop\\aswMBR.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-09-05 64512]
R1 NEOFLTR_530_10641;Juniper Networks TDI Filter Driver (NEOFLTR_530_10641);c:\windows\system32\drivers\NEOFLTR_530_10641.sys [2006-04-27 57063]
R1 NEOFLTR_620_14085;Juniper Networks TDI Filter Driver (NEOFLTR_620_14085);c:\windows\system32\drivers\NEOFLTR_620_14085.sys [2009-03-18 64480]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-27 2255464]
R3 Pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [2008-01-05 47360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1ca59fff6283766;Google Update Service (gupdate1ca59fff6283766);c:\program files\Google\Update\GoogleUpdate.exe /svc –> c:\program files\Google\Update\GoogleUpdate.exe [?]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe /medsvc –> c:\program files\Google\Update\GoogleUpdate.exe [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-08-18 2151640]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [2011-08-18 15232]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys –> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2008-09-13 717296]
.
— Other Services/Drivers In Memory —
.
*Deregistered* - project
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2011-10-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-08-18 18:06]
.
2011-08-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2011-10-10 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
2011-10-11 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
2011-10-11 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.msn.com
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: google.com\mail
Trusted Zone: google.com\www
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{3E33D33F-CD38-4F1B-8410-6A3DB395DFB1}: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\m225jtwg.default\
FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.mt/
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=3c30ef60&v=6.010.006.004&i=23&tp=ab&iy=b&ychte=us&lng=en-GB&q=
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: FlashGot: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} - %profile%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
FF - Ext: Subtile: {88ce39f5-1e54-477c-809d-93d411720f0c} - %profile%\extensions\{88ce39f5-1e54-477c-809d-93d411720f0c}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-11 22:47
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(468)
c:\windows\system32\l3codeca.acm
c:\windows\system32\sirenacm.dll
c:\windows\system32\scg726.acm
c:\windows\system32\alf2cd.acm
c:\windows\system32\AC3ACM.acm
.
- - - - - - - > 'explorer.exe'(2372)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2011-10-11 22:52:45
ComboFix-quarantined-files.txt 2011-10-11 20:52
ComboFix2.txt 2011-10-10 22:18
ComboFix3.txt 2011-10-03 20:32
ComboFix4.txt 2011-10-03 18:16
ComboFix5.txt 2011-10-11 20:34
.
Pre-Run: 17,724,719,104 bytes free
Post-Run: 17,701,457,920 bytes free
.
Current=1 Default=1 Failed=3 LastKnownGood=2 Sets=1,2,3,4
- - End Of File - - A5C24577C8065829D76EF38A1FF3E500
Post #80
That didn't seem to work at all for some reason, those drivers are still present on the system

please give it another try:

Driver::
gupdate1ca59fff6283766
gupdatem
MBAMSwissArmy
RapportEI
RapportPG

ClearJavaCache::


open notepad > copy/paste the content of the codebox into the open notepad > save as CFScript.txt

Drag CFScript into the ComboFix icon, allow it to run uninterrupted > make sure your security programs are disabled.


Are there any warning triangles remaining or did you update all that were there?

If there are any more remaining, please list them.

Please give the ESET on-line scanner another run just to make sure there are no left over infected files that may be causing the popup warning.

thanks
Post #81
CatByte

Thanks for your latest set of instructions.

ComboFix procedure done. Log can be found hereunder.

There are no warning triangles. Everything appears to be updated.

Will do another ESET online scan and post results in my next mesage.


Best Regards

Pete

ComboFix 11-10-11.05 - Owner 2011-10-12 6:27.11.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.478 [GMT 2:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Owner\Desktop\CFScript.txt
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_GUPDATE1CA59FFF6283766
——-\Legacy_GUPDATEM
——-\Legacy_MBAMSWISSARMY
——-\Legacy_RAPPORTEI
——-\Legacy_RAPPORTPG
——-\Service_gupdate1ca59fff6283766
——-\Service_gupdatem
——-\Service_MBAMSwissArmy
.
.
((((((((((((((((((((((((( Files Created from 2011-09-12 to 2011-10-12 )))))))))))))))))))))))))))))))
.
.
2011-10-10 21:22 . 2009-07-31 08:05 1372672 -c—-w- c:\windows\system32\dllcache\msxml6.dll
2011-10-10 21:22 . 2008-04-13 20:57 79872 -c—-w- c:\windows\system32\dllcache\msxml6r.dll
2011-10-10 21:22 . 2008-04-14 03:42 380416 ——w- c:\windows\system32\irprops.cpl
2011-10-10 21:18 . 2006-12-28 22:31 19569 —-a-w- c:\windows\000001_.tmp
2011-10-10 03:18 . 2011-10-12 04:26 ——– d—–w- c:\windows\system32\CatRoot2
2011-10-09 10:28 . 2011-10-09 10:29 ——– d—–w- c:\documents and settings\Owner\Local Settings\Application Data\Lime PRO
2011-10-09 09:53 . 2011-02-17 16:26 81920 —-a-w- c:\windows\eSellerateControl350.dll
2011-10-09 09:53 . 2011-02-17 16:26 356352 —-a-w- c:\windows\eSellerateEngine.dll
2011-10-09 09:53 . 2011-10-09 10:25 ——– d—–w- c:\program files\Piolet Removal Tool
2011-10-09 09:07 . 2011-08-03 11:49 146024 —-a-w- c:\windows\system32\nvsvc32.exe
2011-10-09 07:52 . 2011-10-09 07:52 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-04 19:45 . 2011-10-04 19:45 ——– d—–w- c:\program files\ESET
2011-10-04 19:15 . 2011-10-04 19:15 ——– d—–w- c:\documents and settings\Owner\Application Data\Malwarebytes
2011-10-02 21:38 . 2010-09-07 13:39 150392 —-a-w- c:\windows\junction.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-06 20:20 . 2009-02-19 09:26 139264 —-a-w- c:\windows\system32\nvsvc32.exe.vir
2011-10-06 20:20 . 2005-08-23 15:07 47104 —-a-w- c:\windows\system32\wuauclt.exe.old.exe.vir
2011-10-06 20:20 . 2006-12-19 08:30 81920 —-a-w- c:\windows\system32\IoctlSvc.exe.vir
2011-10-06 20:20 . 2005-08-23 16:45 44032 —-a-w- c:\windows\system32\CTSVCCDA.EXE.vir
2011-10-03 20:00 . 2004-08-04 12:00 26112 —-a-w- c:\windows\system32\userinit.exe
2011-09-09 09:12 . 2004-08-04 12:00 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-05 18:06 . 2010-09-29 19:24 101720 —-a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-08-18 13:25 . 2011-09-05 18:04 64512 —-a-w- c:\windows\system32\drivers\Lbd.sys
2011-08-03 11:49 . 2011-08-27 11:24 600680 —-a-w- c:\windows\system32\easyupdatusapiu.dll
2011-08-03 11:49 . 2011-08-27 11:22 61440 —-a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-08-27 11:21 914024 —-a-w- c:\windows\system32\nvdispco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 875112 —-a-w- c:\windows\system32\nvgenco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 2090088 —-a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-08-27 11:21 17186816 —-a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2009-02-19 09:26 5427200 —-a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2009-02-19 09:26 54272 —-a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2404864 —-a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2387560 —-a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2009-02-19 09:26 16191488 —-a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2009-02-19 09:26 145000 —-a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2009-02-19 09:26 13892200 —-a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2009-02-19 09:26 111208 —-a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2005-04-01 14:16 4210816 —-a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2005-04-01 14:16 12542592 —-a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-07-15 13:29 . 2004-08-04 12:00 456320 —-a-w- c:\windows\system32\drivers\mrxsmb.sys
2008-09-01 22:08 . 2008-09-01 22:06 28868320 —-a-w- c:\program files\FileFormatConverters.exe
2009-09-25 16:41 . 2009-09-25 16:41 1044480 —-a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-09-25 16:41 . 2009-09-25 16:41 200704 —-a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-10-10_22.13.50 )))))))))))))))))))))))))))))))))))))))))
.
- 2004-08-04 12:00 . 2011-10-10 21:52 83278 c:\windows\system32\perfc009.dat
+ 2004-08-04 12:00 . 2011-10-12 04:47 83278 c:\windows\system32\perfc009.dat
+ 2004-08-04 12:00 . 2011-10-12 04:47 489196 c:\windows\system32\perfh009.dat
- 2004-08-04 12:00 . 2011-10-10 21:52 489196 c:\windows\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-02-03 2181672]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-04-22 399736]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"P17Helper"="P17.dll" [2005-05-03 64512]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-09-21 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-08-13 273544]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="NvMCTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-05 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-22 39264]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2008-9-21 1545488]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\progra~1\DVDREG~1\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package Menu.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package Menu.lnk
backup=c:\windows\pss\Picture Package Menu.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package VCD Maker.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package VCD Maker.lnk
backup=c:\windows\pss\Picture Package VCD Maker.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2005-01-31 11:11 2752000 —-a-r- c:\windows\ALCWZRD.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 00:12 15360 —-a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 —-a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
2004-08-12 15:45 61952 —-a-w- c:\windows\system32\Hdaudpropshortcut.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotkey]
2004-04-03 16:38 36864 —-a-w- c:\program files\Hotkey\Hotkey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-08-18 23:07 421736 —-a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 —-a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2006-01-24 09:37 7094272 —-a-w- c:\program files\MSN Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 07:31 2221352 —-a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-06-19 07:53 570664 —-a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
2005-03-18 11:18 98304 —-a-r- c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 16:36 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-01-05 07:40 77824 —-a-r- c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2005-05-20 01:11 925696 —-a-w- c:\program files\Analog Devices\Core\smax4pnp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-13 06:23 273544 —-a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead Photo Express Calendar Checker]
2004-01-12 19:40 69632 —-a-w- c:\program files\Ulead Systems\Ulead Photo Express 5 SE\CalCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2009-03-09 15:49 37888 —-a-w- c:\program files\Winamp\winampa.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Real\\RealPlayer\\RecordingManager.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Juniper Networks\\Secure Application Manager\\dsSamProxy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Real\\RealUpgrade\\realupgrade.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AdobeUpdateManager.exe"=
"c:\\Program Files\\Windows Live Toolbar\\msn_sl.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"=
"c:\\Program Files\\Safari\\Safari.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Program Files\\Ad-Aware\\Ad-Aware.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpHost.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\Documents and Settings\\Owner\\Desktop\\aswMBR.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-09-05 64512]
R1 NEOFLTR_530_10641;Juniper Networks TDI Filter Driver (NEOFLTR_530_10641);c:\windows\system32\drivers\NEOFLTR_530_10641.sys [2006-04-27 57063]
R1 NEOFLTR_620_14085;Juniper Networks TDI Filter Driver (NEOFLTR_620_14085);c:\windows\system32\drivers\NEOFLTR_620_14085.sys [2009-03-18 64480]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-27 2255464]
R3 Pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [2008-01-05 47360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-08-18 2151640]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [2011-08-18 15232]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2008-09-13 717296]
.
— Other Services/Drivers In Memory —
.
*Deregistered* - project
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2011-10-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-08-18 18:06]
.
2011-08-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2011-10-11 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
2011-10-12 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
2011-10-11 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.msn.com
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: google.com\mail
Trusted Zone: google.com\www
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{3E33D33F-CD38-4F1B-8410-6A3DB395DFB1}: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\m225jtwg.default\
FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.mt/
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=3c30ef60&v=6.010.006.004&i=23&tp=ab&iy=b&ychte=us&lng=en-GB&q=
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: FlashGot: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} - %profile%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
FF - Ext: Subtile: {88ce39f5-1e54-477c-809d-93d411720f0c} - %profile%\extensions\{88ce39f5-1e54-477c-809d-93d411720f0c}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-12 06:45
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'explorer.exe'(1952)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\Rundll32.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
.
**************************************************************************
.
Completion time: 2011-10-12 06:50:38 - machine was rebooted
ComboFix-quarantined-files.txt 2011-10-12 04:50
ComboFix2.txt 2011-10-11 20:52
ComboFix3.txt 2011-10-10 22:18
ComboFix4.txt 2011-10-03 20:32
ComboFix5.txt 2011-10-12 04:25
.
Pre-Run: 17,614,798,848 bytes free
Post-Run: 17,588,867,072 bytes free
.
Current=1 Default=1 Failed=3 LastKnownGood=2 Sets=1,2,3,4
- - End Of File - - 70F085B7C76BCB2D4C57DD6D6817E292
Post #82
Hi

Please do the following as well as the ESET scan

  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
  • They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Copy/paste the text inside the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')

http://forums.whatthetech.com/index.php?showtopic=120346&st=75

Collect::
c:\windows\system32\nvsvc32.exe.vir
c:\windows\system32\wuauclt.exe.old.exe.vir
c:\windows\system32\IoctlSvc.exe.vir
c:\windows\system32\CTSVCCDA.EXE.vir

ClearJavaCache::

Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:

1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …

[external image: Posted Image]
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix may request an update; please allow it.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you.
  • Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.



NEXT

submit a file to virustotal for analysis
  • Use the browse button on that page to navigate to the location of the file to be scanned.
  • In the right hand panel,
  • click on the file c:\windows\system32\nvsvc32.exe
  • then click the open button.
  • The file will now be displayed in the submit box.
  • Scroll down a bit and click "send file", wait for the results
  • If you get a message saying File has already been analyzed: click Reanalyze file now
  • Once scanned, copy and paste the link to the results page in your next reply.


Please do the same for the following file:
c:\windows\000001_.tmp


NEXT

Please fo back into Device Manager and go to your Display adapter once again, uninstall it > reboot > allow windows to reinstall it again > reboot > advise if you are still getting the message >

Please try and get a screen shot of the message or copy it exactly for me

thanks
Post #83
CatByte

As always thanks for your latest set of instructions, your dedication and expertise.

ComboFix procedure undertaken as instrucred. Log can be found below.

VirusTotal analyses done on both files indicated. Links to results are:

http://www.virustotal.com/file-scan/report…f815-1318522651

http://www.virustotal.com/file-scan/report…42f0-1318523333

Device Manger - uninstalled Display Adapter (checked it was not there) and rebooted. I received a pop up box advising that adapter was being reinstalled and was asked to reboot. Did this but 'Warning' box continues to appear, it goes when you press [OK]. Saved a screenshot but don't know how to paste it in this document so uploaded it as an attachment to this post for you.


With regards ESET scan will send results in a separate post. This takes a good couple of hours and my last attempt was not successful. Will do it soon.

Regards

Pete



ComboFix 11-10-13.03 - Owner 2011-10-13 17:44:09.12.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.528 [GMT 2:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Owner\Desktop\CFScript.txt
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
file zipped: c:\windows\system32\CTSVCCDA.EXE.vir
file zipped: c:\windows\system32\IoctlSvc.exe.vir
file zipped: c:\windows\system32\nvsvc32.exe.vir
file zipped: c:\windows\system32\wuauclt.exe.old.exe.vir
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\CTSVCCDA.EXE.vir
c:\windows\system32\d3d9caps.dat
c:\windows\system32\IoctlSvc.exe.vir
c:\windows\system32\nvsvc32.exe.vir
c:\windows\system32\wuauclt.exe.old.exe.vir
.
.
((((((((((((((((((((((((( Files Created from 2011-09-13 to 2011-10-13 )))))))))))))))))))))))))))))))
.
.
2011-10-10 21:22 . 2009-07-31 08:05 1372672 -c—-w- c:\windows\system32\dllcache\msxml6.dll
2011-10-10 21:22 . 2008-04-13 20:57 79872 -c—-w- c:\windows\system32\dllcache\msxml6r.dll
2011-10-10 21:22 . 2008-04-14 03:42 380416 ——w- c:\windows\system32\irprops.cpl
2011-10-10 21:18 . 2006-12-28 22:31 19569 —-a-w- c:\windows\000001_.tmp
2011-10-10 03:18 . 2011-10-13 15:43 ——– d—–w- c:\windows\system32\CatRoot2
2011-10-09 10:28 . 2011-10-09 10:29 ——– d—–w- c:\documents and settings\Owner\Local Settings\Application Data\Lime PRO
2011-10-09 09:53 . 2011-02-17 16:26 81920 —-a-w- c:\windows\eSellerateControl350.dll
2011-10-09 09:53 . 2011-02-17 16:26 356352 —-a-w- c:\windows\eSellerateEngine.dll
2011-10-09 09:53 . 2011-10-09 10:25 ——– d—–w- c:\program files\Piolet Removal Tool
2011-10-09 09:07 . 2011-08-03 11:49 146024 —-a-w- c:\windows\system32\nvsvc32.exe
2011-10-09 07:52 . 2011-10-09 07:52 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-04 19:45 . 2011-10-04 19:45 ——– d—–w- c:\program files\ESET
2011-10-04 19:15 . 2011-10-04 19:15 ——– d—–w- c:\documents and settings\Owner\Application Data\Malwarebytes
2011-10-02 21:38 . 2010-09-07 13:39 150392 —-a-w- c:\windows\junction.exe
2011-09-26 10:41 . 2011-09-26 10:41 220160 -c—-w- c:\windows\system32\dllcache\oleacc.dll
2011-09-26 10:41 . 2011-09-26 10:41 20480 -c—-w- c:\windows\system32\dllcache\oleaccrc.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-03 20:00 . 2004-08-04 12:00 26112 —-a-w- c:\windows\system32\userinit.exe
2011-09-26 10:41 . 2007-10-09 12:03 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 10:41 . 2004-08-04 12:00 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 10:41 . 2004-08-04 12:00 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2011-09-09 09:12 . 2004-08-04 12:00 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-06 13:20 . 2004-08-04 12:00 1858944 —-a-w- c:\windows\system32\win32k.sys
2011-09-05 18:06 . 2010-09-29 19:24 101720 —-a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-08-18 13:25 . 2011-09-05 18:04 64512 —-a-w- c:\windows\system32\drivers\Lbd.sys
2011-08-17 21:32 . 2004-08-04 12:00 832512 —-a-w- c:\windows\system32\wininet.dll
2011-08-17 21:32 . 2004-08-04 12:00 78336 —-a-w- c:\windows\system32\ieencode.dll
2011-08-17 21:32 . 2004-08-04 12:00 1830912 —-a-w- c:\windows\system32\inetcpl.cpl
2011-08-17 21:32 . 2004-08-04 12:00 17408 —-a-w- c:\windows\system32\corpol.dll
2011-08-17 13:49 . 2004-08-04 12:00 138496 —-a-w- c:\windows\system32\drivers\afd.sys
2011-08-17 12:22 . 2004-08-04 12:00 389120 —-a-w- c:\windows\system32\html.iec
2011-08-12 12:51 . 2005-12-30 16:04 26488 —-a-w- c:\windows\system32\spupdsvc.exe
2011-08-03 11:49 . 2011-08-27 11:24 600680 —-a-w- c:\windows\system32\easyupdatusapiu.dll
2011-08-03 11:49 . 2011-08-27 11:22 61440 —-a-w- c:\windows\system32\OpenCL.dll
2011-08-03 11:49 . 2011-08-27 11:21 914024 —-a-w- c:\windows\system32\nvdispco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 875112 —-a-w- c:\windows\system32\nvgenco32.dll
2011-08-03 11:49 . 2011-08-27 11:21 2090088 —-a-w- c:\windows\system32\nvcuvenc.dll
2011-08-03 11:49 . 2011-08-27 11:21 17186816 —-a-w- c:\windows\system32\nvcompiler.dll
2011-08-03 11:49 . 2009-02-19 09:26 5427200 —-a-w- c:\windows\system32\nvcuda.dll
2011-08-03 11:49 . 2009-02-19 09:26 54272 —-a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2404864 —-a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2009-02-19 09:26 2387560 —-a-w- c:\windows\system32\nvcuvid.dll
2011-08-03 11:49 . 2009-02-19 09:26 16191488 —-a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2009-02-19 09:26 145000 —-a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2009-02-19 09:26 13892200 —-a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2009-02-19 09:26 111208 —-a-w- c:\windows\system32\nvmctray.dll
2011-08-03 11:49 . 2005-04-01 14:16 4210816 —-a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2005-04-01 14:16 12542592 —-a-w- c:\windows\system32\drivers\nv4_mini.sys
2008-09-01 22:08 . 2008-09-01 22:06 28868320 —-a-w- c:\program files\FileFormatConverters.exe
2009-09-25 16:41 . 2009-09-25 16:41 1044480 —-a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-09-25 16:41 . 2009-09-25 16:41 200704 —-a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.
.
((((((((((((((((((((((((((((( SnapShot_2011-10-10_22.13.50 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-08-24 19:51 . 2010-07-05 13:15 17272 c:\windows\system32\spmsg.dll
+ 2008-08-24 19:51 . 2011-08-12 12:51 17272 c:\windows\system32\spmsg.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 44544 c:\windows\system32\pngfilt.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 44544 c:\windows\system32\pngfilt.dll
- 2004-08-04 12:00 . 2011-10-10 21:52 83278 c:\windows\system32\perfc009.dat
+ 2004-08-04 12:00 . 2011-10-19 19:22 83278 c:\windows\system32\perfc009.dat
- 2006-11-07 20:03 . 2011-06-21 18:45 52224 c:\windows\system32\msfeedsbs.dll
+ 2006-11-07 20:03 . 2011-08-17 21:32 52224 c:\windows\system32\msfeedsbs.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 27648 c:\windows\system32\jsproxy.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 27648 c:\windows\system32\jsproxy.dll
- 2006-11-07 02:26 . 2011-06-21 11:46 13824 c:\windows\system32\ieudinit.exe
+ 2006-11-07 02:26 . 2011-08-17 12:21 13824 c:\windows\system32\ieudinit.exe
- 2004-08-04 12:00 . 2011-06-21 18:45 44544 c:\windows\system32\iernonce.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 44544 c:\windows\system32\iernonce.dll
- 2004-08-04 12:00 . 2011-06-21 11:46 70656 c:\windows\system32\ie4uinit.exe
+ 2004-08-04 12:00 . 2011-08-17 12:21 70656 c:\windows\system32\ie4uinit.exe
- 2006-10-17 10:58 . 2011-06-21 18:45 63488 c:\windows\system32\icardie.dll
+ 2006-10-17 10:58 . 2011-08-17 21:32 63488 c:\windows\system32\icardie.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 44544 c:\windows\system32\dllcache\pngfilt.dll
- 2007-05-12 10:48 . 2011-06-21 18:45 52224 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2007-05-12 10:48 . 2011-08-17 21:32 52224 c:\windows\system32\dllcache\msfeedsbs.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 27648 c:\windows\system32\dllcache\jsproxy.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 27648 c:\windows\system32\dllcache\jsproxy.dll
- 2007-05-12 10:48 . 2011-06-21 11:46 13824 c:\windows\system32\dllcache\ieudinit.exe
+ 2007-05-12 10:48 . 2011-08-17 12:21 13824 c:\windows\system32\dllcache\ieudinit.exe
- 2004-08-04 12:00 . 2011-06-21 18:45 44544 c:\windows\system32\dllcache\iernonce.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 44544 c:\windows\system32\dllcache\iernonce.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 78336 c:\windows\system32\dllcache\ieencode.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 78336 c:\windows\system32\dllcache\ieencode.dll
+ 2004-08-04 12:00 . 2011-08-17 12:21 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2004-08-04 12:00 . 2011-06-21 11:46 70656 c:\windows\system32\dllcache\ie4uinit.exe
- 2007-08-20 10:04 . 2011-06-21 18:45 63488 c:\windows\system32\dllcache\icardie.dll
+ 2007-08-20 10:04 . 2011-08-17 21:32 63488 c:\windows\system32\dllcache\icardie.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 17408 c:\windows\system32\dllcache\corpol.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 17408 c:\windows\system32\dllcache\corpol.dll
+ 2011-07-09 07:30 . 2011-07-09 07:30 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
- 2011-04-12 13:11 . 2011-04-12 13:11 56656 c:\windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
- 2010-09-23 13:55 . 2010-09-23 13:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2011-07-08 12:00 . 2011-07-08 12:00 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2010-09-23 00:26 . 2010-09-23 00:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2011-07-07 10:04 . 2011-07-07 10:04 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2011-07-07 10:04 . 2011-07-07 10:04 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2010-09-23 00:26 . 2010-09-23 00:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2010-09-23 00:26 . 2010-09-23 00:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2011-07-07 10:03 . 2011-07-07 10:03 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2010-09-23 01:17 . 2010-09-23 01:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2011-07-07 11:09 . 2011-07-07 11:09 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2011-07-07 11:09 . 2011-07-07 11:09 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2010-09-23 01:17 . 2010-09-23 01:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 87408 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsFormsIntegration\v4.0_4.0.0.0__31bf3856ad364e35\WindowsFormsIntegration.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 93024 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 35688 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 17784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Presentation\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Presentation.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 58240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Input.Manipulations\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Input.Manipulations.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 44920 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.ApplicationServices\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.ApplicationServices.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 37240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Channels\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Channels.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 64352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 51032 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Device\v4.0_4.0.0.0__b77a5c561934e089\System.Device.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 50552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.DataSetExtensions\v4.0_4.0.0.0__b77a5c561934e089\System.Data.DataSetExtensions.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 81784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 81800 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 39784 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn.Contract\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.AddIn.Contract.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 68952 c:\windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 12128 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-09-07 16:23 . 2011-09-07 16:23 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 97680 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 17240 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 78168 c:\windows\Microsoft.NET\assembly\GAC_32\ISymWrapper\v4.0_4.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 81248 c:\windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2005-12-27 13:24 . 2011-10-04 18:50 23040 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 23040 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 61440 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 61440 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 27136 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 27136 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 11264 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 11264 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 12288 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 12288 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2010-06-04 17:44 . 2011-10-19 19:24 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
- 2010-06-04 17:44 . 2011-06-18 07:38 49152 c:\windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ConfigIcon.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 44544 c:\windows\ie7updates\KB2586448-IE7\pngfilt.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 52224 c:\windows\ie7updates\KB2586448-IE7\msfeedsbs.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 27648 c:\windows\ie7updates\KB2586448-IE7\jsproxy.dll
+ 2011-10-19 19:04 . 2011-06-21 11:46 13824 c:\windows\ie7updates\KB2586448-IE7\ieudinit.exe
+ 2011-10-19 19:04 . 2011-06-21 18:45 44544 c:\windows\ie7updates\KB2586448-IE7\iernonce.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 78336 c:\windows\ie7updates\KB2586448-IE7\ieencode.dll
+ 2011-10-19 19:04 . 2011-06-21 11:46 70656 c:\windows\ie7updates\KB2586448-IE7\ie4uinit.exe
+ 2011-10-19 19:04 . 2011-06-21 18:45 63488 c:\windows\ie7updates\KB2586448-IE7\icardie.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 17408 c:\windows\ie7updates\KB2586448-IE7\corpol.dll
+ 2011-10-19 19:00 . 2011-10-19 19:00 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_6e82aed2\System.Drawing.Design.dll
+ 2011-10-19 19:00 . 2011-10-19 19:00 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_37e516d9\CustomMarshalers.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 96768 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\8871f595a88025398e97f1a317d364c3\UIAutomationProvider.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 35328 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Pres#\f71f02f263f3d139bf5ab24790e6b85c\System.Windows.Presentation.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 71680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Applicat#\1427f7c0c042adc192b9ab1056d09768\System.Web.ApplicationServices.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 82432 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\8d441af930cb17d9d881228130dd6cd2\System.ServiceModel.Channels.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 78848 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn.Contra#\0ec1cad50012bd215c9aab99c76881c6\System.AddIn.Contract.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 11776 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualC\3b05815cd5795366e31588d9e3b3da88\Microsoft.VisualC.ni.dll
+ 2011-10-19 19:47 . 2011-10-19 19:47 44544 c:\windows\assembly\NativeImages_v4.0.30319_32\Accessibility\40a7b0f4a5539779c06591802ceb11ca\Accessibility.ni.dll
+ 2011-10-19 19:25 . 2011-10-19 19:25 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\888b745ca99d39692c2e9af222e5eae8\UIAutomationProvider.ni.dll
+ 2011-10-19 19:46 . 2011-10-19 19:46 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\6c334564da041df8fb75415f2d503224\System.Windows.Presentation.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\a54a122f1070ab71931dd9679ddd8e90\System.Web.DynamicData.Design.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 94720 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\805945adb33c6fa7eae84f9d01a195ba\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-10-19 19:41 . 2011-10-19 19:41 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\e6a9cd66d11a21776dbf425e8e28099c\System.AddIn.Contract.ni.dll
+ 2011-10-19 19:26 . 2011-10-19 19:26 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\66873b557d5c7013e4c630361473b0c2\PresentationFontCache.ni.exe
+ 2011-10-19 19:25 . 2011-10-19 19:25 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\5b30652a7b802199984f93b5e414260f\PresentationCFFRasterizer.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\eaa8d72317e5b8047e413939cc71ffba\Microsoft.Vsa.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 15872 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualC\a140509b1342934fc5e58ae22ac9696c\Microsoft.VisualC.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\aefe683674c97a998f4e908c1a7ee7c6\Microsoft.Build.Framework.ni.dll
+ 2011-10-19 19:25 . 2011-10-19 19:25 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\845eef4d09f28da6ee05d99f93c90f6e\Microsoft.Build.Framework.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\ab7ce2d94ca725c3889a4e3c1ee88ece\dfsvc.ni.exe
+ 2011-10-19 19:24 . 2011-10-19 19:24 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-10-02 15:52 . 2010-10-02 15:52 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-19 18:59 . 2011-10-19 18:59 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-19 19:04 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2586448-IE7\update\spcustom.dll
+ 2011-10-19 19:04 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2586448-IE7\spmsg.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 44544 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\pngfilt.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 52224 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\msfeedsbs.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 27648 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\jsproxy.dll
+ 2011-08-17 12:33 . 2011-08-17 12:33 13824 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieudinit.exe
+ 2011-08-17 21:30 . 2011-08-17 21:30 44544 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\iernonce.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 78336 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieencode.dll
+ 2011-08-17 12:33 . 2011-08-17 12:33 70656 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ie4uinit.exe
+ 2011-08-17 21:30 . 2011-08-17 21:30 63488 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\icardie.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 17408 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\corpol.dll
+ 2011-10-19 19:13 . 2010-07-05 13:15 26488 c:\windows\$hf_mig$\KB2567053\update\spcustom.dll
+ 2011-10-19 19:13 . 2010-07-05 13:15 17272 c:\windows\$hf_mig$\KB2567053\spmsg.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2005-12-27 13:24 . 2011-10-19 19:05 4096 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 4096 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2011-10-19 19:47 . 2011-10-19 19:47 9728 c:\windows\assembly\NativeImages_v4.0.30319_32\dfsvc\c04acc6e5ecb2c3de680c1685f6730d4\dfsvc.ni.exe
+ 2011-10-19 19:21 . 2011-10-19 19:21 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-08-13 05:56 . 2011-08-13 05:56 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 109568 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.Wrapper.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 246128 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492\System.EnterpriseServices.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 233472 c:\windows\system32\webcheck.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 233472 c:\windows\system32\webcheck.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 106496 c:\windows\system32\url.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 106496 c:\windows\system32\url.dll
+ 2004-08-04 12:00 . 2011-10-19 19:22 489196 c:\windows\system32\perfh009.dat
- 2004-08-04 12:00 . 2011-10-10 21:52 489196 c:\windows\system32\perfh009.dat
+ 2004-08-04 12:00 . 2011-08-17 21:32 102912 c:\windows\system32\occache.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 102912 c:\windows\system32\occache.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 671232 c:\windows\system32\mstime.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 671232 c:\windows\system32\mstime.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 193024 c:\windows\system32\msrating.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 193024 c:\windows\system32\msrating.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 478720 c:\windows\system32\mshtmled.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 478720 c:\windows\system32\mshtmled.dll
+ 2006-11-07 20:03 . 2011-08-17 21:32 468480 c:\windows\system32\msfeeds.dll
- 2006-11-07 20:03 . 2011-06-21 18:45 468480 c:\windows\system32\msfeeds.dll
- 2006-10-17 10:57 . 2011-06-21 18:45 268288 c:\windows\system32\iertutil.dll
+ 2006-10-17 10:57 . 2011-08-17 21:32 268288 c:\windows\system32\iertutil.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 192512 c:\windows\system32\iepeers.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 192512 c:\windows\system32\iepeers.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 384512 c:\windows\system32\iedkcs32.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 384512 c:\windows\system32\iedkcs32.dll
- 2006-10-17 10:27 . 2011-06-21 18:45 380928 c:\windows\system32\ieapfltr.dll
+ 2006-10-17 10:27 . 2011-08-17 21:32 380928 c:\windows\system32\ieapfltr.dll
+ 2004-08-04 12:00 . 2011-08-17 11:00 161792 c:\windows\system32\ieakui.dll
- 2004-08-04 12:00 . 2011-06-20 11:27 161792 c:\windows\system32\ieakui.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 230400 c:\windows\system32\ieaksie.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 230400 c:\windows\system32\ieaksie.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 153088 c:\windows\system32\ieakeng.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 153088 c:\windows\system32\ieakeng.dll
+ 2005-08-23 16:57 . 2011-10-19 19:51 374464 c:\windows\system32\FNTCACHE.DAT
- 2005-08-23 16:57 . 2001-12-31 22:01 374464 c:\windows\system32\FNTCACHE.DAT
+ 2004-08-04 12:00 . 2011-08-17 21:32 133120 c:\windows\system32\extmgr.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 133120 c:\windows\system32\extmgr.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 214528 c:\windows\system32\dxtrans.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 214528 c:\windows\system32\dxtrans.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 347136 c:\windows\system32\dxtmsft.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 347136 c:\windows\system32\dxtmsft.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 832512 c:\windows\system32\dllcache\wininet.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 832512 c:\windows\system32\dllcache\wininet.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 233472 c:\windows\system32\dllcache\webcheck.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 233472 c:\windows\system32\dllcache\webcheck.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 106496 c:\windows\system32\dllcache\url.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 106496 c:\windows\system32\dllcache\url.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 102912 c:\windows\system32\dllcache\occache.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 102912 c:\windows\system32\dllcache\occache.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 671232 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 671232 c:\windows\system32\dllcache\mstime.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 193024 c:\windows\system32\dllcache\msrating.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 193024 c:\windows\system32\dllcache\msrating.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 478720 c:\windows\system32\dllcache\mshtmled.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 478720 c:\windows\system32\dllcache\mshtmled.dll
- 2007-05-12 10:48 . 2011-06-21 18:45 468480 c:\windows\system32\dllcache\msfeeds.dll
+ 2007-05-12 10:48 . 2011-08-17 21:32 468480 c:\windows\system32\dllcache\msfeeds.dll
+ 2005-08-23 15:07 . 2011-08-17 11:01 634632 c:\windows\system32\dllcache\iexplore.exe
- 2007-05-12 10:48 . 2011-06-21 18:45 268288 c:\windows\system32\dllcache\iertutil.dll
+ 2007-05-12 10:48 . 2011-08-17 21:32 268288 c:\windows\system32\dllcache\iertutil.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 192512 c:\windows\system32\dllcache\iepeers.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 192512 c:\windows\system32\dllcache\iepeers.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 384512 c:\windows\system32\dllcache\iedkcs32.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 384512 c:\windows\system32\dllcache\iedkcs32.dll
+ 2007-05-12 10:48 . 2011-08-17 21:32 380928 c:\windows\system32\dllcache\ieapfltr.dll
- 2007-05-12 10:48 . 2011-06-21 18:45 380928 c:\windows\system32\dllcache\ieapfltr.dll
- 2004-08-04 12:00 . 2011-06-20 11:27 161792 c:\windows\system32\dllcache\ieakui.dll
+ 2004-08-04 12:00 . 2011-08-17 11:00 161792 c:\windows\system32\dllcache\ieakui.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 230400 c:\windows\system32\dllcache\ieaksie.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 230400 c:\windows\system32\dllcache\ieaksie.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 153088 c:\windows\system32\dllcache\ieakeng.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 133120 c:\windows\system32\dllcache\extmgr.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 214528 c:\windows\system32\dllcache\dxtrans.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 214528 c:\windows\system32\dllcache\dxtrans.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 347136 c:\windows\system32\dllcache\dxtmsft.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 347136 c:\windows\system32\dllcache\dxtmsft.dll
+ 2004-08-04 12:00 . 2011-08-17 13:49 138496 c:\windows\system32\dllcache\afd.sys
- 2004-08-04 12:00 . 2011-02-16 13:22 138496 c:\windows\system32\dllcache\afd.sys
- 2004-08-04 12:00 . 2011-06-21 18:45 124928 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 124928 c:\windows\system32\dllcache\advpack.dll
+ 2004-08-04 12:00 . 2011-08-17 21:32 124928 c:\windows\system32\advpack.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 124928 c:\windows\system32\advpack.dll
- 2011-04-12 13:11 . 2011-04-12 13:11 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-07-09 07:30 . 2011-07-09 07:30 517448 c:\windows\Microsoft.NET\Framework\v4.0.30319\SOS.dll
+ 2011-07-09 07:30 . 2011-07-09 07:30 956240 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordbi.dll
+ 2011-07-07 03:18 . 2011-07-07 03:18 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2011-03-25 04:15 . 2011-03-25 04:15 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
- 2011-03-25 04:15 . 2011-03-25 04:15 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2011-07-07 03:18 . 2011-07-07 03:18 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2010-09-23 00:26 . 2010-09-23 00:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2011-07-07 10:04 . 2011-07-07 10:04 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2010-09-23 00:25 . 2010-09-23 00:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2011-07-07 10:01 . 2011-07-07 10:01 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-09-23 01:17 . 2010-09-23 01:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2011-07-07 11:09 . 2011-07-07 11:09 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 350592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClientsideProviders\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClientsideProviders.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 163168 c:\windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationClient\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationClient.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 138592 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 699224 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xaml\v4.0_4.0.0.0__b77a5c561934e089\System.Xaml.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 857960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Services\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 675672 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Speech\v4.0_4.0.0.0__31bf3856ad364e35\System.Speech.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 113512 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 129912 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Routing\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Routing.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 390008 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Discovery\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Discovery.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 505208 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Activities.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 261472 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 122264 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 291184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 349568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Runtime.DurableInstancing.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 231760 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Net\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Net.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 253280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Messaging\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 378720 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 134528 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Instrumentation\v4.0_4.0.0.0__b77a5c561934e089\System.Management.Instrumentation.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 123736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Log\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.IO.Log.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 392552 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 125816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel.Selectors\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.Selectors.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 120152 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 607064 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 395120 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 182144 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.Protocols\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 285072 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices.AccountManagement\v4.0_4.0.0.0__b77a5c561934e089\System.DirectoryServices.AccountManagement.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 829280 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 747360 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.SqlXml\v4.0_4.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 436600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Services.Client\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Services.Client.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 683872 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Linq.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 409448 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 210816 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.Composition\v4.0_4.0.0.0__b77a5c561934e089\System.ComponentModel.Composition.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 149848 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.AddIn\v4.0_4.0.0.0__b77a5c561934e089\System.AddIn.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 122248 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.DurableInstancing\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.DurableInstancing.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 525704 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Core.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Core.Presentation.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 112976 c:\windows\Microsoft.NET\assembly\GAC_MSIL\sysglobl\v4.0_4.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 581464 c:\windows\Microsoft.NET\assembly\GAC_MSIL\ReachFramework\v4.0_4.0.0.0__31bf3856ad364e35\ReachFramework.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 832856 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationUI\v4.0_4.0.0.0__31bf3856ad364e35\PresentationUI.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 194424 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Royale\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Royale.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 478576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Luna\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Luna.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 167288 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Classic\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Classic.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 232304 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework.Aero\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.Aero.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 661352 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 349576 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 387960 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Transactions.Bridge\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 746336 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 505184 c:\windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 269672 c:\windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 334688 c:\windows\Microsoft.NET\assembly\GAC_32\System.Printing\v4.0_4.0.0.0__31bf3856ad364e35\System.Printing.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 109568 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 246128 c:\windows\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 170368 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- 2005-12-27 13:24 . 2011-10-04 18:50 409600 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 409600 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 286720 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 286720 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 249856 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 249856 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 794624 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 794624 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 135168 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 135168 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2005-12-27 13:24 . 2011-10-19 19:05 593920 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2005-12-27 13:24 . 2011-10-04 18:50 593920 c:\windows\Installer\{91110409-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2011-10-19 19:04 . 2011-06-21 18:45 832512 c:\windows\ie7updates\KB2586448-IE7\wininet.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 233472 c:\windows\ie7updates\KB2586448-IE7\webcheck.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 106496 c:\windows\ie7updates\KB2586448-IE7\url.dll
+ 2011-10-19 19:04 . 2010-07-05 13:16 382840 c:\windows\ie7updates\KB2586448-IE7\spuninst\updspapi.dll
+ 2011-10-19 19:04 . 2010-07-05 13:15 231288 c:\windows\ie7updates\KB2586448-IE7\spuninst\spuninst.exe
+ 2011-10-19 19:04 . 2011-06-21 18:45 102912 c:\windows\ie7updates\KB2586448-IE7\occache.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 671232 c:\windows\ie7updates\KB2586448-IE7\mstime.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 193024 c:\windows\ie7updates\KB2586448-IE7\msrating.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 478720 c:\windows\ie7updates\KB2586448-IE7\mshtmled.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 468480 c:\windows\ie7updates\KB2586448-IE7\msfeeds.dll
+ 2011-10-19 19:04 . 2011-06-20 11:29 634648 c:\windows\ie7updates\KB2586448-IE7\iexplore.exe
+ 2011-10-19 19:04 . 2011-06-21 18:45 268288 c:\windows\ie7updates\KB2586448-IE7\iertutil.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 192512 c:\windows\ie7updates\KB2586448-IE7\iepeers.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 384512 c:\windows\ie7updates\KB2586448-IE7\iedkcs32.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 380928 c:\windows\ie7updates\KB2586448-IE7\ieapfltr.dll
+ 2011-10-19 19:04 . 2011-06-20 11:27 161792 c:\windows\ie7updates\KB2586448-IE7\ieakui.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 230400 c:\windows\ie7updates\KB2586448-IE7\ieaksie.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 153088 c:\windows\ie7updates\KB2586448-IE7\ieakeng.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 133120 c:\windows\ie7updates\KB2586448-IE7\extmgr.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 214528 c:\windows\ie7updates\KB2586448-IE7\dxtrans.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 347136 c:\windows\ie7updates\KB2586448-IE7\dxtmsft.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 124928 c:\windows\ie7updates\KB2586448-IE7\advpack.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_c14a882f\System.Drawing.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_20dc34ed\System.Drawing.Design.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_0554cea4\CustomMarshalers.dll
+ 2011-10-19 20:00 . 2011-10-19 20:00 252416 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\3efe7db1d09b78d05c5eb29a4acb54e5\WindowsFormsIntegration.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 196096 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\85de1eb339b5e50838b0f0b087318de2\UIAutomationTypes.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 482816 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClient\a83510fb8171b932c2bd758c2b79496e\UIAutomationClient.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 391680 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\985c8331763ed9d5d723f70fb81a6f4d\System.Xml.Linq.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 188928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Inpu#\b5ccde72bd29e821a5e8964b02f3ccd5\System.Windows.Input.Manipulations.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 646656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\e68234779021ceda82f2c2332f7e284f\System.Transactions.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 221696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\bf3db839a5d3c9aeb59e7de1497f984e\System.ServiceProcess.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 365056 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\888613aefd8c6f1815b3cc244adf3470\System.ServiceModel.Routing.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 729088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Security\7dd24f1d42566b300ca5ebd8e4a88ff5\System.Security.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 311296 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\5299ae6c4305d47128a9e38fd7ce22bf\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 762368 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\f5b758d4c121c2e795adbd8b1245eee6\System.Runtime.Remoting.ni.dll
+ 2011-10-19 19:09 . 2011-10-19 19:09 145408 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\5895655718b926d887cb61de7450aeb4\System.Numerics.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 653312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Net\b15b1af3478ab1037a48941fd46c4cdb\System.Net.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 626176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Messaging\97d0e8fb4a2caf38e43a3978821a8762\System.Messaging.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 395264 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management.I#\8eee1a58f8c2f7d28fae3f0a3de199f6\System.Management.Instrumentation.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 413696 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IO.Log\7086f280c32bd33481a4989449446517\System.IO.Log.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 229376 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityMode#\e0101768a59c2f5a6bcc886208d0329f\System.IdentityModel.Selectors.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 236032 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\a7cc8e949b4ed4f76848e38b70852c71\System.EnterpriseServices.Wrapper.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 786944 c:\windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\a7cc8e949b4ed4f76848e38b70852c71\System.EnterpriseServices.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 377344 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Dynamic\378b7abb6ad4e170fcdcc53868a7362e\System.Dynamic.ni.dll
+ 2011-10-19 19:58 . 2011-10-19 19:58 913920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\4dafb888929ba11220a1611f4b594c79\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-10-19 19:58 . 2011-10-19 19:58 468992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\0afdc3edc603c4e5fbf4b809c27ee45c\System.DirectoryServices.Protocols.ni.dll
+ 2011-10-19 19:58 . 2011-10-19 19:58 112640 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Device\f67dcb95c1fdbd7ea83cbe68121e5f8e\System.Device.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 134656 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.DataSet#\3370b0be8d923b4ce595a7a0cac43617\System.Data.DataSetExtensions.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 980480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\f152cb4a5005917caa6e78ae139cf8c8\System.Configuration.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 148480 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\dabccea99a356b239acb9be27a6a9ac5\System.Configuration.Install.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\43875e2f5fcc46c50609e81d7e5eed7e\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 690176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\3343bd86c1e2330e678288873eb41951\System.ComponentModel.Composition.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 617984 c:\windows\assembly\NativeImages_v4.0.30319_32\System.AddIn\be1e29cc11b53f81b25240767fa8a09c\System.AddIn.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 404992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.D#\598eff20effa0c239ac9d31cbffc02ea\System.Activities.DurableInstancing.ni.dll
+ 2011-10-19 19:47 . 2011-10-19 19:47 317952 c:\windows\assembly\NativeImages_v4.0.30319_32\SMSvcHost\d12b08a784e83659bbee2ca75469c829\SMSvcHost.ni.exe
+ 2011-10-19 19:48 . 2011-10-19 19:48 142848 c:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\e17cb18bda823395f80f1323a554d217\SMDiagnostics.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 327680 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\9390b3b348ed312ffe748840cfeceb21\PresentationFramework.Royale.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 450560 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\88a63343a81de0db6ae71ad378c0d914\PresentationFramework.Aero.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 284160 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\137b036c8631118fe36f7f9ff9cfd4c6\PresentationFramework.Classic.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 656896 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\0bdd3f8a69bc4ad9f67f91fc7b3659db\PresentationFramework.Luna.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 219136 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\ff6e5b5ad579f15aeea03056e8dcec75\Microsoft.VisualBasic.Compatibility.Data.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 418816 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\c6f821a59dc8414526e6913985c6e466\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 194048 c:\windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\147d0bbc074207b2d283374bdbd16854\CustomMarshalers.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\c8627df7adb416722d8e0f05c57fef6b\WsatConfig.ni.exe
+ 2011-10-19 19:36 . 2011-10-19 19:36 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\a2c1bb3c5b1447b398e72c56091ca571\WindowsFormsIntegration.ni.dll
+ 2011-10-19 19:25 . 2011-10-19 19:25 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\f102afdffdbe2565bcedb7fa0626b865\UIAutomationTypes.ni.dll
+ 2011-10-19 19:36 . 2011-10-19 19:36 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\ba55240b7753047f8d1b03ef473bf74e\UIAutomationClient.ni.dll
+ 2011-10-19 19:47 . 2011-10-19 19:47 420864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\df623b1abbd114e6586bf3b148c7d5e9\System.Xml.Linq.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 130560 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\bae248dedb94533fc051b4bb68246afd\System.Web.Routing.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\018b6e48c32d5b5d78086998e3505f1c\System.Web.RegularExpressions.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\d93514a764a83b18f6f3547b59cc8ae9\System.Web.Extensions.Design.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 329216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\8cd5b80c994ed3b31688319b2d3c4845\System.Web.Entity.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 301568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f623d85b074ddbaa0d45f34e888f0153\System.Web.Entity.Design.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 551936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\52f629cc3962fe18786107b59dcc34b8\System.Web.DynamicData.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\734ab0ea87d7dfd5c583eea535c05878\System.Web.Abstractions.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\8efcd633af87989355382b5039f1b7df\System.Transactions.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\36c12de583ee81e9c99acb72b09d77ac\System.Security.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\36bf3d5f05a40c9e3cadca5789c8a469\System.Runtime.Remoting.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\b2a84980f206431821d85d5155d5916f\System.Net.ni.dll
+ 2011-10-19 19:46 . 2011-10-19 19:46 593408 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Messaging\8acd508fd65801747e89bb5ab7e981e4\System.Messaging.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\90b90e700e59d73d6d692cf74e1ba16e\System.Management.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 331264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\f8fc4de67cafbfd9d50b3076a48f5d1e\System.Management.Instrumentation.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\20a77c41ee12362d303fb2574fcd5a24\System.IO.Log.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\41c3a2fcffc58b20023c7d54e57ea956\System.IdentityModel.Selectors.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.Wrapper.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\69792bef8a100a055db88848836a7d88\System.EnterpriseServices.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\896eca06e2d9377b2dc4fad56ce49b07\System.Drawing.Design.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\33e9b0c368c31ef37a2ec7b5a181044b\System.DirectoryServices.Protocols.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\11cdd1c0d65428cd3505d3813d36638c\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-10-19 19:42 . 2011-10-19 19:42 944128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\e39d40e3cd00eccde799fa198664877b\System.Data.Services.Client.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\62dec0ef9bffd4cf0b2c6275b814df0f\System.Data.Services.Design.ni.dll
+ 2011-10-19 19:42 . 2011-10-19 19:42 759296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\5922909b9c8af4dc405e88df63135a3b\System.Data.Entity.Design.ni.dll
+ 2011-10-19 19:41 . 2011-10-19 19:41 136704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\584cabc278f53ec8976235121a187663\System.Data.DataSetExtensions.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\29d7091f6eab0ec61c4eb625ed221b73\System.Configuration.Install.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\3048737e9e3bf5173121a084337256bc\System.AddIn.ni.dll
+ 2011-10-19 19:44 . 2011-10-19 19:44 232448 c:\windows\assembly\NativeImages_v2.0.50727_32\sysglobl\90e4975b3dffcc5ba853ec0fe1d912cb\sysglobl.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\6e45cf503f025c5fe814ea7e52f62a78\SMSvcHost.ni.exe
+ 2011-10-19 19:41 . 2011-10-19 19:41 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\474a341340f687bcbd7777f2820a8c7a\SMDiagnostics.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\f2df1ca28301bfe7e1d52b86c8394217\ServiceModelReg.ni.exe
+ 2011-10-19 19:30 . 2011-10-19 19:30 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c2ebcc8d60422f224b4088f3d7a2ac1f\PresentationFramework.Luna.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94cfc00ad448575bfb0e67c53b514cd5\PresentationFramework.Aero.ni.dll
+ 2011-10-19 19:29 . 2011-10-19 19:29 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\478d57d96f3d8d5fc15c7ac635a4a6a1\PresentationFramework.Classic.ni.dll
+ 2011-10-19 19:32 . 2011-10-19 19:32 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\23c5852ff8ed973ff9b63ce9ba7f91f0\PresentationFramework.Royale.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\04595f414c49cf2a65b349648ba23e62\MSBuild.ni.exe
+ 2011-10-19 19:41 . 2011-10-19 19:41 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\4cbd7ed9fbf9f1b3cbdf23906cc0f5a3\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-10-19 19:25 . 2011-10-19 19:25 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\ff6d4892775fd1f9b137f7c92ea453f2\Microsoft.Build.Utilities.ni.dll
+ 2011-10-19 19:41 . 2011-10-19 19:41 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\47ff0720cb80a0fc0bbd15ddc3d12adc\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\da112c5757e3c68d6369b6aa46cc9682\Microsoft.Build.Engine.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\dc278e1123086ae32fec8f7e9751db14\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\3e6deccf191ab943d3a0812a38ab5c97\CustomMarshalers.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\4e68d5df30b197ff72c75f1c3c24b949\ComSvcConfig.ni.exe
+ 2011-10-19 19:39 . 2011-10-19 19:39 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\e1bcee92f5af50d560d577c0a99ea3bd\AspNetMMCExt.ni.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-10-19 19:04 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2586448-IE7\update\updspapi.dll
+ 2011-10-19 19:04 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2586448-IE7\update\update.exe
+ 2011-10-19 19:04 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2586448-IE7\spuninst.exe
+ 2011-08-17 21:30 . 2011-08-17 21:30 841216 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\wininet.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 233472 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\webcheck.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 106496 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\url.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 102912 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\occache.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 671232 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\mstime.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 193024 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\msrating.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 478720 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\mshtmled.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 468480 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\msfeeds.dll
+ 2011-08-17 10:34 . 2011-08-17 10:34 634632 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\iexplore.exe
+ 2011-08-17 21:30 . 2011-08-17 21:30 268288 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\iertutil.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 193024 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\iepeers.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 388608 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\iedkcs32.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 380928 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieapfltr.dll
+ 2011-08-17 10:33 . 2011-08-17 10:33 161792 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieakui.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 230400 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieaksie.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 153088 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieakeng.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 132608 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\extmgr.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 214528 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\dxtrans.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 347136 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\dxtmsft.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 124928 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\advpack.dll
+ 2011-10-19 19:13 . 2010-07-05 13:16 382840 c:\windows\$hf_mig$\KB2567053\update\updspapi.dll
+ 2011-10-19 19:13 . 2010-07-05 13:15 755576 c:\windows\$hf_mig$\KB2567053\update\update.exe
+ 2011-10-19 19:13 . 2010-07-05 13:15 231288 c:\windows\$hf_mig$\KB2567053\spuninst.exe
+ 2004-08-04 12:00 . 2011-08-17 21:32 1168896 c:\windows\system32\urlmon.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 1168896 c:\windows\system32\urlmon.dll
+ 2004-08-04 12:00 . 2011-09-05 07:48 3615744 c:\windows\system32\mshtml.dll
- 2006-11-07 20:03 . 2011-06-21 18:45 6076416 c:\windows\system32\ieframe.dll
+ 2006-11-07 20:03 . 2011-08-17 21:32 6076416 c:\windows\system32\ieframe.dll
+ 2004-08-04 12:00 . 2011-09-06 13:20 1858944 c:\windows\system32\dllcache\win32k.sys
- 2004-08-04 12:00 . 2011-06-02 14:02 1858944 c:\windows\system32\dllcache\win32k.sys
+ 2004-08-04 12:00 . 2011-08-17 21:32 1168896 c:\windows\system32\dllcache\urlmon.dll
- 2004-08-04 12:00 . 2011-06-21 18:45 1168896 c:\windows\system32\dllcache\urlmon.dll
+ 2004-08-04 12:00 . 2011-09-05 07:48 3615744 c:\windows\system32\dllcache\mshtml.dll
- 2007-05-12 10:48 . 2011-06-21 18:45 6076416 c:\windows\system32\dllcache\ieframe.dll
+ 2007-05-12 10:48 . 2011-08-17 21:32 6076416 c:\windows\system32\dllcache\ieframe.dll
+ 2011-07-09 07:30 . 2011-07-09 07:30 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
- 2011-04-12 13:11 . 2011-04-12 13:11 5197648 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
+ 2011-07-09 07:30 . 2011-07-09 07:30 1142616 c:\windows\Microsoft.NET\Framework\v4.0.30319\mscordacwks.dll
+ 2011-07-09 07:30 . 2011-07-09 07:30 6724424 c:\windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
+ 2011-07-07 03:18 . 2011-07-07 03:18 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2011-03-25 04:15 . 2011-03-25 04:15 5912400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2011-03-25 04:15 . 2011-03-25 04:15 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2011-07-07 03:18 . 2011-07-07 03:18 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2011-07-08 11:59 . 2011-07-08 11:59 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2010-09-23 13:55 . 2010-09-23 13:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2010-09-23 13:55 . 2010-09-23 13:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2011-07-08 11:59 . 2011-07-08 11:59 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2010-09-23 00:26 . 2010-09-23 00:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2011-07-07 10:02 . 2011-07-07 10:02 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2011-07-07 10:02 . 2011-07-07 10:02 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2011-07-08 11:59 . 2011-07-08 11:59 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2010-09-23 13:55 . 2010-09-23 13:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 1303896 c:\windows\Microsoft.NET\assembly\GAC_MSIL\WindowsBase\v4.0_4.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 3510600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 2207568 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 5028200 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 1711496 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms.DataVisualization\v4.0_4.0.0.0__31bf3856ad364e35\System.Windows.Forms.DataVisualization.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 6067048 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 1026936 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 4464480 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Data.Entity\v4.0_4.0.0.0__b77a5c561934e089\System.Data.Entity.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 1339736 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 1199968 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 1462648 c:\windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 6346600 c:\windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework\v4.0_4.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 2970968 c:\windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-10-19 19:08 . 2011-10-19 19:08 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 3545952 c:\windows\Microsoft.NET\assembly\GAC_32\PresentationCore\v4.0_4.0.0.0__31bf3856ad364e35\PresentationCore.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-09-07 16:22 . 2011-09-07 16:22 5197648 c:\windows\Microsoft.NET\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
- 2011-09-07 16:23 . 2011-09-07 16:23 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-10-19 19:07 . 2011-10-19 19:07 2989456 c:\windows\Microsoft.NET\assembly\GAC_32\Microsoft.VisualBasic.Activities.Compiler\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Activities.Compiler.dll
+ 2011-09-20 13:36 . 2011-09-20 13:36 5521408 c:\windows\Installer\3c4e3.msp
+ 2011-10-19 19:04 . 2011-06-21 18:45 1168896 c:\windows\ie7updates\KB2586448-IE7\urlmon.dll
+ 2011-10-19 19:04 . 2011-07-22 16:35 3613696 c:\windows\ie7updates\KB2586448-IE7\mshtml.dll
+ 2011-10-19 19:04 . 2011-06-21 18:45 6076416 c:\windows\ie7updates\KB2586448-IE7\ieframe.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_c0d268e7\System.dll
+ 2011-10-19 19:00 . 2011-10-19 19:00 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_7ec77f79\System.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_a263e709\System.Xml.dll
+ 2011-10-19 19:00 . 2011-10-19 19:00 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_49c3537f\System.Xml.dll
+ 2011-10-19 19:00 . 2011-10-19 19:00 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_370a2da1\System.Windows.Forms.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_182cd8ee\System.Windows.Forms.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_3e4f1ecf\System.Drawing.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_b572d0f6\System.Design.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_6ded92df\System.Design.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7568b255\mscorlib.dll
+ 2011-10-19 19:01 . 2011-10-19 19:01 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_5a056466\mscorlib.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 3798016 c:\windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\9518c02cfd0a333f2236c4c778779763\WindowsBase.ni.dll
+ 2011-10-19 20:00 . 2011-10-19 20:00 1057792 c:\windows\assembly\NativeImages_v4.0.30319_32\UIAutomationClients#\f0056e3207d816bcd4eacdf967172845\UIAutomationClientsideProviders.ni.dll
+ 2011-10-19 19:09 . 2011-10-19 19:09 9085952 c:\windows\assembly\NativeImages_v4.0.30319_32\System\dc22233ad8aaf772e8104d8fbd2bdb0c\System.ni.dll
+ 2011-10-19 19:09 . 2011-10-19 19:09 5618176 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\b876f3b5e272b6db1dfa9336e6bf014f\System.Xml.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 1781760 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\9630b03449dfce2b88dbfc27a7c2fb60\System.Xaml.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 4545024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Form#\51081c1b500fccb250a2eb74e62c6147\System.Windows.Forms.DataVisualization.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 1859584 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\6deef6369fa86d15944b9e5aea3b097b\System.Web.Services.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 2011136 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Speech\8e508bf261ae6838cd4e7a53f94ca2b3\System.Speech.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 1128960 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\ce050a35e66319530c5146101d285572\System.ServiceModel.Discovery.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 1387520 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel#\34f7a71b60d93e94d4bd20b936cffd71\System.ServiceModel.Activities.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 2637312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\7e25cff9a5d9bf832335dfd8426b364c\System.Runtime.Serialization.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 1020928 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\b2a5ece877bf324af887d8cfebf293b2\System.Runtime.DurableInstancing.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 1050112 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Printing\b170d60c0f4ca81bfebafd5a4884cf35\System.Printing.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 1218560 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Management\3662dbf092de316fe727d708da1adb31\System.Management.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 1072128 c:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\594c951067492579183502a4523505d6\System.IdentityModel.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 1652736 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\94a2dc3bc2508f66f27887ad575bda2e\System.Drawing.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 1172992 c:\windows\assembly\NativeImages_v4.0.30319_32\System.DirectorySer#\0863436b7a129d38f51197e13b2458c2\System.DirectoryServices.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 1878016 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\5b291a9bafb9e6b67f4425f134a3616c\System.Deployment.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 6798336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data\8453f15cc11caaa8afa82c1c8bb64423\System.Data.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 2545152 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.SqlXml\c7d99b41737f3ff1e4613c8dc0f467b9\System.Data.SqlXml.ni.dll
+ 2011-10-19 19:58 . 2011-10-19 19:58 1338880 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Service#\a1bc89353e85fa349bf3644c8e3e4e75\System.Data.Services.Client.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 2512384 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Linq\c58ae6063dcdddd95658acdc9e3bdc87\System.Data.Linq.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 7054336 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\f2eff2618dd325e3cff23066d3cb64df\System.Core.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 4121088 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities\90f8547ce9c92d7f8dce8cd24d7bf780\System.Activities.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 3713024 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.P#\630430760356c996de1f795452660b32\System.Activities.Presentation.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 1518080 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Activities.C#\24775899c6f0f9422812797ee648e558\System.Activities.Core.Presentation.ni.dll
+ 2011-10-19 19:49 . 2011-10-19 19:49 2859008 c:\windows\assembly\NativeImages_v4.0.30319_32\ReachFramework\fddb56608d613dc928b8d2c6ca0d765e\ReachFramework.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 1630208 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationUI\a702bd88822c223ede51e33996276c8e\PresentationUI.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 1836544 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\254efb2fa4da717cf16004c10746e1ff\Microsoft.VisualBasic.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 1136128 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\16c6839c405e90ca00fca981b3f3051f\Microsoft.VisualBasic.Compatibility.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 1172480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\15cc79ec5451ab1452044f978442441c\Microsoft.VisualBasic.Activities.Compiler.ni.dll
+ 2011-10-19 19:48 . 2011-10-19 19:48 1082368 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Transacti#\6af525788a952f9381dac02e1857f021\Microsoft.Transactions.Bridge.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 2452480 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.JScript\cffc7a90ce56e59ca85ae987e822ff16\Microsoft.JScript.ni.dll
+ 2011-10-19 19:10 . 2011-10-19 19:10 1616384 c:\windows\assembly\NativeImages_v4.0.30319_32\Microsoft.CSharp\fd1ed54f9399b6b04152127a572499a7\Microsoft.CSharp.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1adc4ae51a5ac63e896a1402749ca495\WindowsBase.ni.dll
+ 2011-10-19 19:36 . 2011-10-19 19:36 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\55d4813580b1e5d268ff0564942cee9c\UIAutomationClientsideProviders.ni.dll
+ 2011-10-19 19:23 . 2011-10-19 19:23 7950848 c:\windows\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll
+ 2011-10-19 19:47 . 2011-10-19 19:47 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\17902fdb0e0d3bc8b49bce693415fe7e\System.WorkflowServices.ni.dll
+ 2011-10-19 19:47 . 2011-10-19 19:47 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\f72c5f649951b0403e62bfab6c453e6f\System.Workflow.Runtime.ni.dll
+ 2011-10-19 19:47 . 2011-10-19 19:47 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\0aa4f4174204c93cc5181df4a6b2fb09\System.Workflow.ComponentModel.ni.dll
+ 2011-10-19 19:46 . 2011-10-19 19:46 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\921629dc69a5a895101097c88ae67897\System.Workflow.Activities.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\6303e256d2ac0843c3e4c24172c90544\System.Web.Services.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\f5dac0448a1dbe2687a5df92904d6274\System.Web.Mobile.ni.dll
+ 2011-10-19 19:45 . 2011-10-19 19:45 2408960 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\16a9f8cb97bba497157e8c487b1a4b4c\System.Web.Extensions.ni.dll
+ 2011-10-19 19:44 . 2011-10-19 19:44 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\10d7daa3d1e62a0e40587cdc707be93f\System.Speech.ni.dll
+ 2011-10-19 19:44 . 2011-10-19 19:44 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\9ec7da53380a754b4ad97709df0dd7e7\System.ServiceModel.Web.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\afd6134c090faf8c29cd64d4835142b2\System.Runtime.Serialization.ni.dll
+ 2011-10-19 19:35 . 2011-10-19 19:35 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\0f8e14bfdb27645fb1a92ce26f9bf521\System.Printing.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d14065ede44df8e9b5d6b60c5ddccc69\System.IdentityModel.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll
+ 2011-10-19 19:27 . 2011-10-19 19:27 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\91cd88a803768151c6262853d3454ba7\System.DirectoryServices.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\cc5ac99e8af2738e85cda5525fdd944f\System.Deployment.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\ec323cf1df697cc0a45f67de685db90c\System.Data.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\ef748704f543a8791e23387652d34dfb\System.Data.SqlXml.ni.dll
+ 2011-10-19 19:42 . 2011-10-19 19:42 1330176 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\52e84a889a8392f3fd04cc9175108299\System.Data.Services.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 1115136 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.OracleC#\5d5aa4b926ae422607ea833d934665c2\System.Data.OracleClient.ni.dll
+ 2011-10-19 19:35 . 2011-10-19 19:35 2526720 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\a4d9528595a7ed58d4e6308c791dbb43\System.Data.Linq.ni.dll
+ 2011-10-19 19:42 . 2011-10-19 19:42 9926144 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\d71409b2235dc5c7ee2d5c768f96af9b\System.Data.Entity.ni.dll
+ 2011-10-19 19:47 . 2011-10-19 19:47 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\d507b9e0e50e453793ee5e01c07a5485\System.Core.ni.dll
+ 2011-10-19 19:36 . 2011-10-19 19:36 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\714e9504255565bd9076fe13628e104a\ReachFramework.ni.dll
+ 2011-10-19 19:33 . 2011-10-19 19:33 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\7dc6ee14234b0686182ced75f7dae990\PresentationUI.ni.dll
+ 2011-10-19 19:25 . 2011-10-19 19:25 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\37fd70ad5f3726031995041b246fe862\PresentationBuildTasks.ni.dll
+ 2011-10-19 19:41 . 2011-10-19 19:41 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c\Microsoft.VisualBasic.ni.dll
+ 2011-10-19 19:41 . 2011-10-19 19:41 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\ce1ecd602ca089eb13a9b428dc7f0449\Microsoft.Transactions.Bridge.ni.dll
+ 2011-10-19 19:43 . 2011-10-19 19:43 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\8ad32b72258899177c07dc5912b5b748\Microsoft.JScript.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\50e7c5eb58c982dba7b21cd10a69b095\Microsoft.Build.Tasks.ni.dll
+ 2011-10-19 19:41 . 2011-10-19 19:41 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\415cef6abab5bb959f200f6c537bc289\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2011-10-19 19:40 . 2011-10-19 19:40 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\eea7bcc8d356e3f2dcb4f36dfc1c6bc0\Microsoft.Build.Engine.ni.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2011-10-19 19:21 . 2011-10-19 19:21 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2011-08-13 05:56 . 2011-08-13 05:56 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-10-19 19:22 . 2011-10-19 19:22 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2010-10-02 15:52 . 2010-10-02 15:52 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2011-10-19 18:59 . 2011-10-19 18:59 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2010-10-02 15:52 . 2010-10-02 15:52 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2011-10-19 18:59 . 2011-10-19 18:59 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 1172992 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\urlmon.dll
+ 2011-08-18 10:00 . 2011-08-18 10:00 3617792 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\mshtml.dll
+ 2011-08-17 21:30 . 2011-08-17 21:30 6080512 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieframe.dll
+ 2001-12-31 22:05 . 2009-06-29 08:33 2452872 c:\windows\$hf_mig$\KB2586448-IE7\SP3QFE\ieapfltr.dat
+ 2011-09-06 13:25 . 2011-09-06 13:25 1867904 c:\windows\$hf_mig$\KB2567053\SP3QFE\win32k.sys
+ 2006-10-10 18:46 . 2011-10-19 19:13 48324552 c:\windows\system32\MRT.exe
+ 2011-07-12 20:49 . 2011-07-12 20:49 11459584 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2572067\M2572067Uninstall.msp
+ 2011-10-19 19:23 . 2011-10-19 19:23 20333568 c:\windows\Installer\3c506.msp
+ 2011-07-11 18:43 . 2011-07-11 18:43 11641344 c:\windows\Installer\3c4fa.msp
+ 2011-07-11 15:19 . 2011-07-11 15:19 10619904 c:\windows\Installer\3c4f0.msp
+ 2011-07-12 13:50 . 2011-07-12 13:50 17555968 c:\windows\Installer\3c4cf.msp
+ 2011-10-19 19:10 . 2011-10-19 19:10 13137920 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\7614407d52db6c57a08c489d694035bd\System.Windows.Forms.ni.dll
+ 2011-10-19 19:59 . 2011-10-19 19:59 17996800 c:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\1171b8bfed38c4417e3dd7a04b209e30\System.ServiceModel.ni.dll
+ 2011-10-19 19:58 . 2011-10-19 19:58 13325312 c:\windows\assembly\NativeImages_v4.0.30319_32\System.Data.Entity\44fa1329287a137a75b45b4865ad44ce\System.Data.Entity.ni.dll
+ 2011-10-19 19:12 . 2011-10-19 19:12 17671168 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\017ab9a85a986fda7829b86f82bdc181\PresentationFramework.ni.dll
+ 2011-10-19 19:11 . 2011-10-19 19:11 11106816 c:\windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\a24043d32474217d55ed86f70583aca4\PresentationCore.ni.dll
+ 2011-10-19 19:09 . 2011-10-19 19:09 14408704 c:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\f3b6f64941ee3b90d6abb16e415ceb3b\mscorlib.ni.dll
+ 2011-10-19 19:24 . 2011-10-19 19:24 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\60df958ca96c9b8945f836759b6abd34\System.Web.ni.dll
+ 2011-10-19 19:44 . 2011-10-19 19:44 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\ceadaf3b3d017c7a1ef10a06f8009f6f\System.ServiceModel.ni.dll
+ 2011-10-19 19:28 . 2011-10-19 19:28 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\c6374d32e4af7b7e3e46b32176f76558\System.Design.ni.dll
+ 2011-10-19 19:37 . 2011-10-19 19:37 14615552 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\003820a5d94cfbe62ed0ee220163d7d5\PresentationFramework.ni.dll
+ 2011-10-19 19:37 . 2011-10-19 19:37 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\b2f0318713eca304eaa9d86fc17edb96\PresentationCore.ni.dll
+ 2011-10-19 19:23 . 2011-10-19 19:23 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 —-a-w- c:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-02-03 2181672]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-04-22 399736]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"P17Helper"="P17.dll" [2005-05-03 64512]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2008-09-21 615696]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-09-19 236016]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2011-08-13 273544]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="NvMCTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-07-05 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-22 39264]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2008-9-21 1545488]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\progra~1\DVDREG~1\DVDShell.dll" [2004-10-09 49152]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package Menu.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package Menu.lnk
backup=c:\windows\pss\Picture Package Menu.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Picture Package VCD Maker.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Picture Package VCD Maker.lnk
backup=c:\windows\pss\Picture Package VCD Maker.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2005-01-31 11:11 2752000 —-a-r- c:\windows\ALCWZRD.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-14 00:12 15360 —-a-w- c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 —-a-w- c:\program files\DAEMON Tools Lite\daemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\High Definition Audio Property Page Shortcut]
2004-08-12 15:45 61952 —-a-w- c:\windows\system32\Hdaudpropshortcut.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotkey]
2004-04-03 16:38 36864 —-a-w- c:\program files\Hotkey\Hotkey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-08-18 23:07 421736 —-a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 00:12 1695232 —-a-w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2006-01-24 09:37 7094272 —-a-w- c:\program files\MSN Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
2008-06-08 07:31 2221352 —-a-w- c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2008-06-19 07:53 570664 —-a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
2005-03-18 11:18 98304 —-a-r- c:\program files\Hewlett-Packard\OrderReminder\OrderReminder.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2011-07-05 16:36 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2005-01-05 07:40 77824 —-a-r- c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP]
2005-05-20 01:11 925696 —-a-w- c:\program files\Analog Devices\Core\smax4pnp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-08-13 06:23 273544 —-a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead Photo Express Calendar Checker]
2004-01-12 19:40 69632 —-a-w- c:\program files\Ulead Systems\Ulead Photo Express 5 SE\CalCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2009-03-09 15:49 37888 —-a-w- c:\program files\Winamp\winampa.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Real\\RealPlayer\\RecordingManager.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Juniper Networks\\Secure Application Manager\\dsSamProxy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Real\\RealUpgrade\\realupgrade.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Acrobat 6.0\\Reader\\AdobeUpdateManager.exe"=
"c:\\Program Files\\Windows Live Toolbar\\msn_sl.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe"=
"c:\\Program Files\\Safari\\Safari.exe"=
"c:\\WINDOWS\\system32\\msiexec.exe"=
"c:\\Program Files\\Ad-Aware\\Ad-Aware.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpHost.exe"=
"c:\\Program Files\\Mozilla Firefox\\plugin-container.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\Documents and Settings\\Owner\\Desktop\\aswMBR.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-09-05 64512]
R1 NEOFLTR_530_10641;Juniper Networks TDI Filter Driver (NEOFLTR_530_10641);c:\windows\system32\drivers\NEOFLTR_530_10641.sys [2006-04-27 57063]
R1 NEOFLTR_620_14085;Juniper Networks TDI Filter Driver (NEOFLTR_620_14085);c:\windows\system32\drivers\NEOFLTR_620_14085.sys [2009-03-18 64480]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-27 2255464]
R3 Pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [2008-01-05 47360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2011-08-18 2151640]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [2011-08-18 15232]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2008-09-13 717296]
.
— Other Services/Drivers In Memory —
.
*Deregistered* - project
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2011-10-06 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-08-18 18:06]
.
2011-08-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2011-10-13 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
2011-10-13 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
2001-12-31 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2675221718-2984062707-343184829-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-03-29 08:47]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.msn.com
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: google.com\mail
Trusted Zone: google.com\www
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{3E33D33F-CD38-4F1B-8410-6A3DB395DFB1}: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\documents and settings\Owner\Application Data\Mozilla\Firefox\Profiles\m225jtwg.default\
FF - prefs.js: browser.search.defaulturl - hxxp://uk.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com.mt/
FF - prefs.js: keyword.URL - hxxp://search.avg.com/route/?d=3c30ef60&v=6.010.006.004&i=23&tp=ab&iy=b&ychte=us&lng=en-GB&q=
FF - Ext: DownloadHelper: {b9db16a4-6edc-47ec-a1f4-b86292ed211d} - %profile%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - Ext: Yahoo! Toolbar: {635abd67-4fe9-1b23-4f01-e679fa7484c1} - %profile%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF - Ext: FlashGot: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} - %profile%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
FF - Ext: Subtile: {88ce39f5-1e54-477c-809d-93d411720f0c} - %profile%\extensions\{88ce39f5-1e54-477c-809d-93d411720f0c}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - Ext: Garmin Communicator: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E} - %profile%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-13 18:10
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'explorer.exe'(3436)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\Rundll32.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
.
**************************************************************************
.
Completion time: 2011-10-13 18:17:03 - machine was rebooted
ComboFix-quarantined-files.txt 2011-10-13 16:16
ComboFix2.txt 2011-10-12 04:50
ComboFix3.txt 2011-10-11 20:52
ComboFix4.txt 2011-10-10 22:18
ComboFix5.txt 2011-10-13 15:43
.
Pre-Run: 15,337,291,776 bytes free
Post-Run: 15,337,644,032 bytes free
.
Current=1 Default=1 Failed=3 LastKnownGood=2 Sets=1,2,3,4
- - End Of File - - 40DAB465DEF4A950D571FEB0FA046C7F
Upload was successful

Attachments:

Post #85
CatByte Tried everything with nvidea driver. Uninstalled and reinstalled. Went to site and downloaded version compatible with pc, etc but Warning box still appears when I start pc. Can't get rid of it. Results of ESETscan: C:\Program Files\Piolet Removal Tool\PioletRemovalTool.exe probably a variant of Win32/SecurityStronghold application NOTE: When you told me about dangers of peer-to-peer programs I removed Piolet. This Piolet removal tool was suggested but I did not buy it. Thanks & Regards Pete
Post #86
That's not a concern anyway > ESET is just remarking on the type of application it is > you are safe to just right click and delete it

I'm sure it's something fairly obvious that is causing that popup but I'm not seeing it at the moment, I'll ask my tech colleagues to stop by and have a look, see if we can figure it out.

before you run this tool > right click delete all the logs and tools I had you download except ComboFix and OTL, there are special routines for them,

Now go into add/remove programs and uninstall all the programs you no longer use:

run Temp File Cleaner:


Download TFC to your desktop
Mirror
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean
It's normal after running TFC cleaner that the PC will be slower to boot the first time.




Now please run the following:

Please download MiniToolBox, save it to your desktop and run it.

Place a checkmark in the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
  • List Minidump Files
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using the "Reset FF Proxy Settings" option, Firefox should be closed.
Post #87
CatByte

As always thanks for your latest set of instructions.

Deleted all logs and deleted/uninstalled programs downloaded and that I know longer use. I did a good clean up. However, there are a few programs I'm not to sure about such as 'Bonjour' and 'Daemon Tools Toolbar'. As these may be related to other programs I did not delete them.

TFC cleaner run was successful. It did reboot automatically (this also happened when I uninstalled some programs referred to above) and did not really take longer than usual to restart.

Mini Toolbox instructions carried out and Report is produced below.

Thanks

Pete




MiniToolBox by Farbar
Ran by [removed] (administrator) on 16-10-2011 at 13:02:35
Microsoft Windows XP Service Pack 3 (X86)

***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

# ———————————-
# Interface IP Configuration
# ———————————-
pushd interface ip


# Interface IP Configuration for "Local Area Connection"

set address name="Local Area Connection" source=dhcp
set dns name="Local Area Connection" source=dhcp register=PRIMARY
set wins name="Local Area Connection" source=dhcp


popd
# End of interface IP configuration




Windows IP Configuration



Host Name . . . . . . . . . . . . : your-oyhmbpeoox

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : Intel® PRO/1000 MT Network Connection

Physical Address. . . . . . . . . : 00-13-D4-EC-67-E4

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : [removed]

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : [removed]

DHCP Server . . . . . . . . . . . : [removed]

DNS Servers . . . . . . . . . . . : [removed]

212.56.128.196

Lease Obtained. . . . . . . . . . : 2011-10-16 12:55:58

Lease Expires . . . . . . . . . . : 2011-10-18 12:55:58

Server: ns.melitacable.com
Address: [removed]

Name: google.com
Addresses: 209.85.148.106, 209.85.148.104, 209.85.148.99, 209.85.148.147
209.85.148.103, 209.85.148.105



Pinging google.com [209.85.148.99] with 32 bytes of data:



Reply from 209.85.148.99: bytes=32 time=52ms TTL=50

Reply from 209.85.148.99: bytes=32 time=54ms TTL=50



Ping statistics for 209.85.148.99:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 52ms, Maximum = 54ms, Average = 53ms

Server: ns.melitacable.com
Address: [removed]

Name: yahoo.com
Addresses: 98.137.149.56, 67.195.160.76, 209.191.122.70, 98.139.180.149
72.30.2.43



Pinging yahoo.com [72.30.2.43] with 32 bytes of data:



Reply from 72.30.2.43: bytes=32 time=236ms TTL=48

Reply from 72.30.2.43: bytes=32 time=242ms TTL=48



Ping statistics for 72.30.2.43:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 236ms, Maximum = 242ms, Average = 239ms



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ……………………… MS TCP Loopback interface
0x10003 …00 13 d4 ec 67 e4 …… Intel® PRO/1000 MT Network Connection
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 [removed] [removed] 20
[removed] 255.255.255.0 [removed] [removed] 20
[removed] 255.255.255.255 127.0.0.1 127.0.0.1 20
[removed] 255.255.255.255 [removed] [removed] 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
169.254.0.0 255.255.0.0 [removed] [removed] 20
224.0.0.0 240.0.0.0 [removed] [removed] 20
255.255.255.255 255.255.255.255 [removed] [removed] 1
Default Gateway: [removed]
===========================================================================
Persistent Routes:
None

========================= Event log errors: ===============================

Application errors:
==================
Error: (10/13/2011 05:49:15 PM) (Source: Application Hang) (User: )
Description: Hanging application firefox.exe, version 1.9.2.4280, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (10/19/2011 09:53:56 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (10/19/2011 09:27:31 PM) (Source: crypt32) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.

Error: (10/10/2011 11:52:39 PM) (Source: Application Hang) (User: )
Description: Hanging application DesktopMgr.exe, version 4.7.0.25, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (10/10/2011 07:03:31 PM) (Source: Application Hang) (User: )
Description: Hanging application iexplore.exe, version 7.0.6000.17099, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (10/10/2011 07:03:28 PM) (Source: Application Hang) (User: )
Description: Hanging application iexplore.exe, version 7.0.6000.17099, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (01/01/2002 00:02:30 AM) (Source: Application Hang) (User: )
Description: Hanging application DesktopMgr.exe, version 4.7.0.25, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (10/09/2011 02:40:43 PM) (Source: Bonjour Service) (User: )
Description: 220: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)

Error: (10/09/2011 02:40:43 PM) (Source: Bonjour Service) (User: )
Description: 204: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)

Error: (10/09/2011 02:40:43 PM) (Source: Bonjour Service) (User: )
Description: 192: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)


System errors:
=============
Error: (10/16/2011 00:58:02 PM) (Source: Service Control Manager) (User: )
Description: The Remote Access Connection Manager service terminated with the following error:
%%126

Error: (10/16/2011 00:58:01 PM) (Source: Rasman) (User: )
Description: Remote Access Connection Manager failed to start because the Point to Point
Protocol failed to initialize. The specified module could not be found.

Error: (10/16/2011 00:58:01 PM) (Source: Service Control Manager) (User: )
Description: The Remote Access Connection Manager service terminated with the following error:
%%126

Error: (10/16/2011 00:58:00 PM) (Source: Rasman) (User: )
Description: Remote Access Connection Manager failed to start because the Point to Point
Protocol failed to initialize. The specified module could not be found.

Error: (10/16/2011 00:58:00 PM) (Source: Service Control Manager) (User: )
Description: The Remote Access Connection Manager service terminated with the following error:
%%126

Error: (10/16/2011 00:57:59 PM) (Source: Rasman) (User: )
Description: Remote Access Connection Manager failed to start because the Point to Point
Protocol failed to initialize. The specified module could not be found.

Error: (10/16/2011 00:57:59 PM) (Source: Service Control Manager) (User: )
Description: The Remote Access Connection Manager service terminated with the following error:
%%126

Error: (10/16/2011 00:57:58 PM) (Source: Rasman) (User: )
Description: Remote Access Connection Manager failed to start because the Point to Point
Protocol failed to initialize. The specified module could not be found.

Error: (10/16/2011 00:57:57 PM) (Source: Service Control Manager) (User: )
Description: The Remote Access Connection Manager service terminated with the following error:
%%126

Error: (10/16/2011 00:57:57 PM) (Source: Rasman) (User: )
Description: Remote Access Connection Manager failed to start because the Point to Point
Protocol failed to initialize. The specified module could not be found.


Microsoft Office Sessions:
=========================
Error: (10/13/2011 05:49:15 PM) (Source: Application Hang)(User: )
Description: firefox.exe1.9.2.4280hungapp0.0.0.000000000

Error: (10/19/2011 09:53:56 PM) (Source: .NET Runtime Optimization Service)(User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (10/19/2011 09:27:31 PM) (Source: crypt32)(User: )
Description: http://www.download.windowsupdate.com/msdo…rootseq.txtThis operation returned because the timeout period expired.

Error: (10/10/2011 11:52:39 PM) (Source: Application Hang)(User: )
Description: DesktopMgr.exe4.7.0.25hungapp0.0.0.000000000

Error: (10/10/2011 07:03:31 PM) (Source: Application Hang)(User: )
Description: iexplore.exe7.0.6000.17099hungapp0.0.0.000000000

Error: (10/10/2011 07:03:28 PM) (Source: Application Hang)(User: )
Description: iexplore.exe7.0.6000.17099hungapp0.0.0.000000000

Error: (01/01/2002 00:02:30 AM) (Source: Application Hang)(User: )
Description: DesktopMgr.exe4.7.0.25hungapp0.0.0.000000000

Error: (10/09/2011 02:40:43 PM) (Source: Bonjour Service)(User: )
Description: 220: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)

Error: (10/09/2011 02:40:43 PM) (Source: Bonjour Service)(User: )
Description: 204: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)

Error: (10/09/2011 02:40:43 PM) (Source: Bonjour Service)(User: )
Description: 192: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)


=========================== Installed Programs ============================

µTorrent (Version: 2.2.1)
001 File Joiner and Splitter (Version: 4.0.5)
32 Bit HP CIO Components Installer (Version: 2.1.5)
AAC Decoder (Version: 7.1.0)
Absolute MP3 Splitter version 2.3.8
Ad-Aware (Version: 9.5.0)
Adobe Download Manager 2.0 (Remove Only) (Version: 2.0)
Adobe Flash Player 10 ActiveX (Version: 10.0.32.18)
Adobe Flash Player 11 Plugin (Version: 11.0.1.152)
AnvSoft Flash to iPod Converter 1.10
Apple Application Support (Version: 2.0.1)
Apple Mobile Device Support (Version: 3.4.1.2)
Apple Software Update (Version: 2.1.3.127)
AutoUpdate (Version: 1.1)
Avi Join 0.1.0.1
AVI Joiner
AVS Video Tools 5.6
BlackBerry Desktop Software 4.7 (Version: 4.7.0.25)
BlackBerry® Media Sync (Version: 3.0.0.39)
Blaze Media Pro
Blaze Media Pro (Version: 8.02)
Bonjour (Version: 3.0.0.2)
BufferChm (Version: 110.0.180.000)
C4400 (Version: 110.0.201.000)
C4400_Help (Version: 110.0.201.000)
Capture-A-ScreenShot
Compatibility Pack for the 2007 Office system (Version: 12.0.6425.1000)
Conduit Engine (Version: )
Creative MediaSource (Version: 3.00)
CustomerResearchQFolder (Version: 1.00.0000)
DAEMON Tools Toolbar (Version: 1.0.7.0088)
Destination Component (Version: 110.0.0.0)
DeviceDiscovery (Version: 110.0.180.000)
DeviceManagementQFolder (Version: 1.00.0000)
DivX Codec (Version: 6.9.1)
DivX Converter (Version: 7.1.0)
DivX Player (Version: 7.2.0)
DivX Plus DirectShow Filters
DivX Version Checker (Version: 7.1.0.9)
DivX Web Player (Version: 1.5.0)
DocProc (Version: 11.0.0.0)
DocProcQFolder (Version: 1.00.0000)
DVD Region+CSS Free [removed]
DVD Shrink 3.2
DVDFab Platinum 2.9.8.1 Beta
eSupportQFolder (Version: 1.00.0000)
EXPERTool 7.2
File Scavenger 3.2 (Version: 3.2)
Form Fill (Windows Live Toolbar) (Version: 03.01.0146)
FrameShots Video Screen Capture
Fx Joiner and Splitter (Version: 5)
Google Chrome (Version: 13.0.782.220)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.1.2003.1856)
Google Update Helper (Version: 1.3.21.65)
GPBaseService (Version: 110.0.180.000)
GPBaseService2 (Version: 130.0.371.000)
H.264 Decoder (Version: 1.1.0)
Hotkey 2.0
HP Customer Participation Program 11.0 (Version: 11.0)
HP Imaging Device Functions 11.0 (Version: 11.0)
HP Photosmart C4400 All-In-One Driver Software 11.0 Rel .3 (Version: 11.0)
HP Photosmart Essential 3.5 (Version: 3.5)
HP Smart Web Printing 4.60 (Version: 4.60)
HP Update (Version: 5.002.005.003)
HPPhotoSmartDiscLabelContent1 (Version: 2.04.0000)
HPPhotosmartEssential (Version: 2.04.0000)
HPPhotoSmartPhotobookWebPack1 (Version: 2.03.0000)
HPProductAssistant (Version: 130.0.371.000)
HPSSupply (Version: 110.0.180.000)
ImageMixer VCD2 (Version: 2.01.002.3)
Intel® 537EP Modem
Intel® PRO Network Connections Drivers
iTunes (Version: 10.4.1.10)
Juniper Networks Secure Application Manager (Version: 6.2.0.14085)
L&H; TTS3000 British English
Map Button (Windows Live Toolbar) (Version: 03.01.0146)
Marvell Miniport Driver (Version: 7.24.2.3)
Mega Manager (Version: 3.3.04)
MetaFrame Presentation Server Web Client for Win32
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2572067)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Encarta Premium Suite 2005 (Version: 2005)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Professional Edition 2003 (Version: 11.0.8173.0)
Microsoft Silverlight (Version: 4.0.60831.0)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft XML Parser (Version: 8.70.1104.04)
MKV Splitter (Version: 1.0.1)
MobileMe Control Panel (Version: 3.1.6.0)
Mozilla Firefox (3.6.23) (Version: 3.6.23 (en-GB))
MSN Messenger 7.5 (Version: 7.5.0324.0)
MSVCSetup (Version: 1.00.0000)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 6.0 Parser (KB933579) (Version: 6.10.1200.0)
MUSIC PLAYER
Nero 8 (Version: 8.3.312)
neroxml (Version: 1.0.0)
Nokia Connectivity Cable Driver (Version: 7.1.16.0)
NVIDIA Control Panel 280.26 (Version: 280.26)
NVIDIA Graphics Driver 280.26 (Version: 280.26)
NVIDIA Install Application (Version: 2.1000.25.170)
NVIDIA nView 135.94 (Version: 135.94)
NVIDIA nView Desktop Manager (Version: 6.14.10.13594)
NVIDIA PhysX (Version: 9.10.0514)
NVIDIA PhysX System Software 9.10.0514 (Version: 9.10.0514)
NVIDIA Update 1.4.28 (Version: 1.4.28)
NVIDIA Update Components (Version: 1.4.28)
OCR Software by I.R.I.S. 11.0 (Version: 11.0)
OneCare Advisor (Windows Live Toolbar) (Version: 03.01.0072)
OpenMG Limited Patch 3.3-03-09-03-01
OpenMG Secure Module 3.3.01
PanoStandAlone (Version: 110.0.180.000)
Passware Kit - 5.0.0
Password Revealer Pro
Picture Package (Version: 1.06.003)
Popup Blocker (Windows Live Toolbar) (Version: 03.01.0146)
PowerDVD
PrimoPDF (Version: 3.1)
PrimoPDF Redistribution Package (Version: 1.0.0.0)
Prism Video Converter
PS_AIO_03_C4400_ProductContext (Version: 110.0.201.000)
PS_AIO_03_C4400_Software (Version: 110.0.201.000)
PS_AIO_03_C4400_Software_Min (Version: 110.0.201.000)
PSSWCORE (Version: 2.03.0000)
Quick AVI Splitter v2.0 (Version: 2.0)
Quick Screen Capture 3.0 (Version: 3.0)
QuickTime (Version: 7.70.80.34)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealPlayer
Realtek High Definition Audio Driver
RealUpgrade 1.1 (Version: 1.1.0)
RON Tool Offersfortoday (Version: )
Roxio Media Manager (Version: 9.4.051)
Safari (Version: 5.34.50.0)
Samsung PC Studio (Version: 3.0.0.60610)
Scan (Version: 11.0.0.0)
Search Settings 1.2
Shop for HP Supplies (Version: 11.0)
Smart Menus (Windows Live Toolbar) (Version: 03.01.0146)
SolutionCenter (Version: 130.0.373.000)
Sony USB Driver
Sound Blaster Live! 24-bit
Status (Version: 110.0.180.000)
Super Screen Capture 4.0
Toolbox (Version: 110.0.180.000)
TrayApp (Version: 110.0.180.000)
TubeHunter Ultra (Version: 1.8.2756)
TubeHunter Ultra (Version: 2.0.2764)
Ulead Photo Explorer 8.0 SE Basic (Version: 8.0)
Ulead Photo Express 5 SE (Version: 5.0)
Ultra RM Converter 4.0.1017
UnloadSupport (Version: 11.0.0)
uTorrentBar Toolbar (Version: 6.2.7.3)
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0)
VCRedistSetup (Version: 1.0.0)
VideoToolkit01 (Version: 110.0.171.000)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (Version: 9.0.30729.01)
VLC media player 1.0.5 (Version: 1.0.5)
WebFldrs XP (Version: 9.50.7523)
WebReg (Version: 110.0.180.000)
Winamp (Version: 5.551 )
Windows Genuine Advantage Notifications (KB905474) (Version: 1.7.0018.5)
Windows Genuine Advantage v1.3.0254.0 (Version: 1.3.0254.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Imaging Component (Version: 3.0.0.0)
Windows Installer Clean Up (Version: 3.00.00.0000)
Windows Internet Explorer 7 (Version: 20061107.210142)
Windows Key 9.0 Demo
Windows Live Favorites for Windows Live Toolbar (Version: 03.01.0146)
Windows Live Outlook Toolbar (Windows Live Toolbar) (Version: 03.01.0146)
Windows Live Toolbar (Version: 03.01.0146)
Windows Live Toolbar Extension (Windows Live Toolbar) (Version: 03.01.0146)
Windows Live Toolbar Feed Detector (Windows Live Toolbar) (Version: 03.01.0146)
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series (Version: 9.00.2980)
Windows Media Format 11 runtime
Windows Media Player 11
Windows Presentation Foundation (Version: 3.0.6920.0)
Windows XP Service Pack 3 (Version: 20080414.031525)
Winferno Registry Power Cleaner (Version: 2007)
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0

========================= Memory info: ===================================

Percentage of memory in use: 36%
Total physical RAM: 1023.23 MB
Available physical RAM: 646.01 MB
Total Pagefile: 2462.7 MB
Available Pagefile: 2250.24 MB
Total Virtual: 2047.88 MB
Available Virtual: 1997.59 MB

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:116.87 GB) (Free:15.12 GB) NTFS
3 Drive d: () (Fixed) (Total:116.01 GB) (Free:15.85 GB) NTFS

========================= Users: ========================================

User accounts for \\

Administrator ASPNET Guest
HelpAssistant Owner Peter
SUPPORT_388945a0 UpdatusUser

========================= Minidump Files ==================================

No minidump file found

**** End of log ****
Post #90
Hi,

I have asked for some assistance from my expert tech colleagues as I am at a loss for this last issue


Please do the following: (credit Doug)


Ran "devmgmt.msc" as requested and clicked "Show hidden devices". However, under Display Adapters there was only the Nvidea GeForce file that I use. No warning triangles on any files. Some had a yellow circle with "!" inside, however, I believe these are files I updated.
Rebooted computer, however, warning box to "display/update drivers…." still there.


A black exclamation mark on a yellow background indicates that the component is not functioning correctly. This may be due to multiple allocation of a system resource (IRQ, DMA, port or memory address). If no resources have been assigned to the device (e.g. if no more IRQ's are free), an exclamation mark will still appear.

Similarly, a module deactivated in the BIOS (e.g. graphic's card vs. on-board graphics) can also appear with an exclamation mark in the Device Manager.
________________________

take a look in the BIOS Setup to determine what/which graphics solution has been activated.
If on-board graphics is selected, see it you can select for your graphics card instead.


To enter the BIOS > tap F2 on boot up to enter setup (it's usually F2, your machine may have another function key such as esc to enter the BIOS - ist should say for a brief second which key to press to enter setup)


It would help to get a hardware overview of your machine.

Please run a Hardware Scan from D_A_L at http://www.d-a-l.com/kb/hardwarescan/ and then post a link to the Results.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI