Spyware / Malware / Virus Removal

[Resolved] Spyware Infected - Webhancer & more...

16 min read

Looking for the outcome? Ask AI

morrisjf1

Post #16September 27, 2007, 10:28 PM UTC

did the same thing….

IndiGenus

Post #17September 27, 2007, 10:38 PM UTC

Let's try running it in safe mode. If you're not sure how to get into safe mode… Restart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc (BOOT SCREEN). At this point you should gently tap the F8 key repeatedly until you are presented with a Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode.

morrisjf1

Post #18September 28, 2007, 2:06 AM UTC

tried it in safe mode… the first error (the one that came up multiple times actually) didn't happen this time… but the "regedit is missing" error did occur again. as a heads up, i'm going out of town friday morning til sunday morning… if you dont get to me again tonight just post the next thing you want me to do, and i'll set it up first thing on Sunday. thanks again dave for all your help…

IndiGenus

Post #19September 28, 2007, 2:41 AM UTC

OK one other way we can try running combofix. Run this from Normal Mode. Making sure you have placed ComboFix.exe on your desktop, go to Start -> Run…, and copy/paste the following. Then click OK or hit your enter key. "%userprofile%\desktop\ComboFix.exe" /KillAll This will start ComboFix.

morrisjf1

Post #20September 28, 2007, 3:36 AM UTC

do you need me to turn off the internet/disable mcafee first?

IndiGenus

Post #21September 28, 2007, 11:07 AM UTC

No, it shouldn't be necessary to do that here. And I don't think that has anything to do with the issue we're having here.

morrisjf1

Post #22September 28, 2007, 11:50 AM UTC

Error - Some files cannot be created… reboot windows and try again Here are the files that were extracted… Extracting Boot.bat Extracting CF_anti-viking.bat Extracting Combobatch.bat Extracting ComboFix.bat Extracting Comspec.bat Extracting DelClsid.bat Extracting Disclaimer.bat Extracting FIND3M.bat Extracting FIXLSP.bat Extracting history.bat Extracting Lang.bat Extracting List-C.bat Extracting MoveIt.bat Extracting ND_.bat Extracting NTP.bat Extracting Qoo.bat Extracting SetEnvmt.bat Extracting Sys.bat Extracting upload.bat Extracting nircmd.exe Cannot create nircmd.exe Extracting ntp.exe Extracting NTPBack.exe Extracting swreg.exe Extracting ComboFix.sys Extracting catchme.cfexe Extracting dd.cfexe Extracting dumphive.cfexe Extracting ERUNT.cfexe Extracting grep.cfexe Extracting handle.cfexe Extracting moveex.cfexe Extracting mtee.cfexe Extracting Ntrights.cfexe Extracting RestartIt.cfexe Extracting sed.cfexe Extracting setpath.cfexe Extracting SF.cfexe Extracting swsc.cfexe Extracting swxcacls.cfexe Extracting vfind.cfexe Extracting zip.cfexe Extracting 023.dat Extracting 023v.dat Extracting cfexe.dat Extracting clsid.dat Extracting Creg.dat Extracting erunt.dat Extracting executables.dat Extracting LocalService.dat Extracting LocalServiceNetworkRestricted.dat Extracting LocalSystemNetworkRestricted.dat Extracting Look.dat Extracting ndis_combofix.dat Extracting netsvc.bad.dat Extracting netsvc.dat Extracting netsvc.vista.dat Extracting netsvc.xp.dat Extracting NetworkService.dat Extracting Policies.dat Extracting Purity.dat Extracting region.dat Extracting rogues.dat Extracting safeboot.dat Extracting safeboot.def.dat Extracting safeboot.def.vista.dat Extracting svc_wht.dat Extracting svchost.dat Extracting svchost.vista.dat Extracting system_ini.dat Extracting whitedirB.dat Extracting WhiteLegacy.dat Extracting zhsvc.dat Extracting ERDNT.e_e Extracting ERDNTDOS.LOC Extracting ERDNTWIN.LOC Extracting ERUNT.LOC Extracting FProps.vbs Extracting lnkread.vbs Extracting LocalDrive.vbs Extracting OSid.vbs Extracting restore_pt.vbs Extracting SvcDrv.vbs

IndiGenus

Post #23September 28, 2007, 12:33 PM UTC

I have to apologize here for all the troubles we've run into. I had asked you this earlier but don't remember seeing an answer. Can you access regedit? Click start->Run…-> type in regedit and see if the registry editor opens. Let me know.

morrisjf1

Post #24September 30, 2007, 2:41 PM UTC

Dave, I don't know why you'd apologize to me. You're the one helping me, I'm the one who has the problem…

Anywho… yes regedit works for me. When I go to Run/regedit it pulls up the registry editor.

IndiGenus

Post #25September 30, 2007, 8:28 PM UTC

Please download Deckard's System Scanner (DSS) and save it to your Desktop.

Close all other windows before proceeding.
Double-click on dss.exe and follow the prompts.
When it has finished, dss will open two Notepads main.txt and extra.txt – please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

morrisjf1

Post #26September 30, 2007, 9:42 PM UTC

MAIN.TXT

Deckard's System Scanner v20070905.67
Run by [removed] on 2007-09-30 15:50:34
Computer is in Normal Mode.
——————————————————————————–

– System Restore ————————————————————–

Successfully created a Deckard's System Scanner Restore Point.

– Last 5 Restore Point(s) –
66: 2007-09-30 20:50:54 UTC - RP578 - Deckard's System Scanner Restore Point
65: 2007-09-26 23:45:41 UTC - RP577 - System Checkpoint
64: 2007-09-25 22:21:09 UTC - RP576 - System Checkpoint
63: 2007-09-24 11:57:21 UTC - RP575 - System Checkpoint
62: 2007-09-23 11:40:09 UTC - RP574 - System Checkpoint

– First Restore Point –
1: 2007-07-03 06:15:05 UTC - RP513 - System Checkpoint

Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 504 MiB (512 MiB recommended).

– HijackThis (run as Becca.exe) ———————————————–

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:17:51 PM, on 9/30/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Micro Innovations Internet Access Pro\PS2USBKbdDrv.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Becca\Desktop\dss.exe
C:\DOCUME~1\Becca\Desktop\DOWNLO~1\Becca.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html?p=DS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/mywaybiz
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {22682D28-2318-4179-ABB2-0BABBF2DAD9C} - (no file)
O2 - BHO: (no name) - {255AB745-AD2E-43BD-864F-98DB26193752} - (no file)
O2 - BHO: iebho Class - {296AE49F-E195-4835-895C-91788B938DF8} - C:\WINDOWS\ieiebho.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: Spybot-S&D; IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {933CD95F-A437-4EAA-869C-2ED51241D9EC} - (no file)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {C6039E6C-BDE9-4de5-BB40-768CAA584FDC} - C:\WINDOWS\system32\yfjakxwe.dll
O2 - BHO: (no name) - {D1F867EA-3084-4CE7-82DB-2A2A40B03A2F} - C:\WINDOWS\system32\ddaba.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: 1Click ImageExtractor - {5DE4E98D-DE09-4BC3-8A70-A6D9A24F4EC9} - C:\WINDOWS\1cie.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [WireLessKeyboard] C:\Program Files\Micro Innovations Internet Access Pro\PS2USBKbdDrv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [SystemOptimizer] rundll32.exe "C:\WINDOWS\system32\qvggtjwe.dll",forkonce
O4 - HKLM\..\Run: [SearchIndexer] rundll32.exe "C:\WINDOWS\system32\qfhucfot.dll",sitypnow
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://ca.com/us/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O20 - Winlogon Notify: ddaba - C:\WINDOWS\system32\ddaba.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O24 - Desktop Component 0: (no name) - C:\Program Files\MSN\proprypreg.html

–
End of file - 11407 bytes

– File Associations ———————————————————–

.js - JSFile - DefaultIcon - "C:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe",2
.js - JSFile - shell\open\command - "C:\Program Files\Macromedia\Dreamweaver MX\Dreamweaver.exe" "%1"

– Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ———————

R1 APPDRV - c:\windows\system32\drivers\appdrv.sys

IndiGenus

Post #27September 30, 2007, 10:12 PM UTC

Please download SDFix and save it to your Desktop.

You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Double click on SDFix.exe. It should automatically extract a folder called SDFix to your system drive (usually C:\). Please reboot your computer in Safe Mode by doing the following :

Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.

Open the SDFix folder and double click on RunThis.bat to start the script.
Type Y and press Enter to begin the script.
It will start cleaning your PC and then prompt you to press any key to Reboot.
Press any key to restart the PC.
Your system will take longer than normal to restart as the fixtool will be removing files.
When the desktop loads the Fixtool will complete the removal and display Finished.
Press any key to end the script and to load your desktop icons.
A text file should automatically open, so please copy the contents and post them here. We also need you to post a new HijackThis log

morrisjf1

Post #28September 30, 2007, 11:30 PM UTC

SDFIX LOG:

SDFix: Version 1.107

Run by [removed] on Sun 09/30/2007 at 06:01 PM

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\DOCUME~1\Becca\Desktop\SDFix

Safe Mode:
Checking Services:

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting…

Normal Mode:
Checking Files:

No Trojan Files Found

Folder C:\Program Files\WinPop - Removed
Folder C:\Temp\fse - Removed

Removing Temp Files…

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

Remaining Services:
——————

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"C:\\Program Files\\Trillian\\trillian.exe"="C:\\Program Files\\Trillian\\trillian.exe:*:Enabled:Trillian"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealPlayer"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Ares\\Ares.exe"="C:\\Program Files\\Ares\\Ares.exe:*:Enabled:Ares p2p for windows"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"="C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe:*:Enabled:McAfee Network Agent"
"C:\\WINDOWS\\system32\\bjnihjwi.exe"="C:\\WINDOWS\\system32\\bjn"
"C:\\WINDOWS\\system32\\squcblvi.exe"="C:\\WINDOWS\\system32\\squ"
"C:\\WINDOWS\\system32\\nfhruxdl.exe"="C:\\WINDOWS\\system32\\nfh"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files:
—————

Files with Hidden Attributes:

Fri 19 Sep 2003 139,264 A..H. — "C:\WINDOWS\1cie.dll"
Fri 19 Sep 2003 315,392 A..H. — "C:\WINDOWS\1ClickImageExtractor.exe"
Wed 8 Mar 2000 73,785 …H. — "C:\WINDOWS\ATL.DLL"
Mon 6 Dec 2004 98,358 A..H. — "C:\WINDOWS\dla.exe"
Tue 26 Mar 2002 663,552 A..H. — "C:\WINDOWS\freeimage.dll"
Thu 26 May 2005 10,752 A..H. — "C:\WINDOWS\hh.exe"
Fri 19 Sep 2003 856,064 A..H. — "C:\WINDOWS\ieie.dll"
Fri 19 Sep 2003 126,976 A..H. — "C:\WINDOWS\ieiebho.dll"
Fri 19 Sep 2003 245,760 A..H. — "C:\WINDOWS\ightml.dll"
Sat 4 Aug 2007 1,355 A..H. — "C:\WINDOWS\imsins.BAK"
Thu 29 Oct 1998 306,688 A..H. — "C:\WINDOWS\IsUninst.exe"
Tue 30 May 2006 720,896 A..H. — "C:\WINDOWS\iun6002ev.exe"
Wed 17 Aug 2005 45,056 A..H. — "C:\WINDOWS\NCUNINST.EXE"
Wed 4 Aug 2004 69,120 A..H. — "C:\WINDOWS\NOTEPAD.EXE"
Wed 4 Aug 2004 146,432 A..H. — "C:\WINDOWS\regedit.exe"
Fri 12 Aug 2005 49,152 A..H. — "C:\WINDOWS\setpwrcg.exe"
Sat 10 Sep 2005 30,505 A..H. — "C:\WINDOWS\SSSETUP.EXE"
Wed 4 Aug 2004 15,360 A..H. — "C:\WINDOWS\TASKMAN.EXE"
Wed 4 Aug 2004 94,784 A..H. — "C:\WINDOWS\twain.dll"
Wed 4 Aug 2004 50,688 A..H. — "C:\WINDOWS\twain_32.dll"
Wed 4 Aug 2004 49,680 A..H. — "C:\WINDOWS\twunk_16.exe"
Wed 4 Aug 2004 25,600 A..H. — "C:\WINDOWS\twunk_32.exe"
Sat 10 Sep 2005 69,632 A..H. — "C:\WINDOWS\uinst001.exe"
Tue 7 Mar 2006 244,264 A..H. — "C:\WINDOWS\unicows.dll"
Sun 4 Dec 2005 107,132 A..H. — "C:\WINDOWS\UninstallFirefox.exe"
Thu 2 Mar 2006 757,760 …H. — "C:\WINDOWS\Unnero.exe"
Fri 17 Dec 1999 86,016 A..H. — "C:\WINDOWS\unvise32.exe"
Wed 4 Aug 2004 18,944 A..H. — "C:\WINDOWS\vmmreg32.dll"
Wed 4 Aug 2004 256,192 A..H. — "C:\WINDOWS\winhelp.exe"
Wed 4 Aug 2004 283,648 A..H. — "C:\WINDOWS\winhlp32.exe"
Wed 4 Aug 2004 707 A..H. — "C:\WINDOWS\_default.pif"
Fri 19 Jan 2007 56 ..SHR — "C:\WINDOWS\system32294A46EEA.sys"
Sun 30 Sep 2007 2,112,311 ..SH. — "C:\WINDOWS\system32\abadd.bak2"
Sat 29 Sep 2007 2,113,374 ..SH. — "C:\WINDOWS\system32\abadd.bak1"
Fri 19 Jan 2007 1,890 A.SH. — "C:\WINDOWS\system32\KGyGaAvL.sys"
Wed 22 Feb 2006 20,992 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL0001.tmp"
Wed 25 Jan 2006 561,152 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL0004.tmp"
Tue 27 Jun 2006 21,504 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL0872.tmp"
Mon 4 Dec 2006 26,624 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1028.tmp"
Mon 31 Jul 2006 23,552 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1069.tmp"
Tue 27 Jun 2006 20,992 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1184.tmp"
Thu 26 Jan 2006 22,016 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1247.tmp"
Mon 14 Nov 2005 24,064 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1274.tmp"
Tue 8 Nov 2005 20,480 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1359.tmp"
Wed 1 Feb 2006 561,664 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1398.tmp"
Thu 26 Jan 2006 22,016 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL1553.tmp"
Tue 8 Nov 2005 23,552 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL2263.tmp"
Sun 4 Mar 2007 31,744 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL2365.tmp"
Sun 6 Nov 2005 21,504 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL2586.tmp"
Thu 19 Jan 2006 558,592 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL2591.tmp"
Tue 27 Jun 2006 21,504 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL2624.tmp"
Tue 8 Nov 2005 27,648 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL2864.tmp"
Sun 31 Dec 2006 24,576 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3167.tmp"
Tue 8 Nov 2005 22,016 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3458.tmp"
Sun 4 Mar 2007 27,648 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3508.tmp"
Fri 18 Nov 2005 20,480 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3601.tmp"
Wed 17 Jan 2007 20,480 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3696.tmp"
Sun 6 Nov 2005 22,016 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3764.tmp"
Sat 8 Apr 2006 19,968 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3815.tmp"
Sun 6 Nov 2005 25,600 …H. — "C:\Documents and Settings\Becca\My Documents\~WRL3916.tmp"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB873339\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB873339\spuninst.exe"
Tue 30 Nov 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB885250\spmsg.dll"
Wed 1 Dec 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB885250\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB885835\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB885835\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB885836\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB885836\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB886185\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB886185\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB887472\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB887472\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB887742\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB887742\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB888113\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB888113\spuninst.exe"
Tue 30 Nov 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB888302\spmsg.dll"
Tue 30 Nov 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB888302\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB890046\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB890046\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB890175\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB890175\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe"
Thu 14 Oct 2004 7,168 A..H. — "C:\WINDOWS\$hf_mig$\KB891781\spmsg.dll"
Thu 14 Oct 2004 169,984 A..H. — "C:\WINDOWS\$hf_mig$\KB891781\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB893066\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB893066\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896422\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB896422\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896423\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB896423\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe"
Thu 24 Feb 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB899587\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB899587\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB899591\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB899591\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB900485\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB900485\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB904706\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB904706\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe"
Thu 24 Feb 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll"
Thu 24 Feb 2005 209,632 A..H. — "C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB910437\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB910437\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB911280\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB911280\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB911562\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB911562\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB911927\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB911927\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB912919\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB912919\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB913446\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB913446\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB915865\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB915865\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB916595\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB916595\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB917159\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB917159\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB917344\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB917344\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB917422\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB917422\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB917953\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB917953\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB918118\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB918118\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB918439\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB918439\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB920214\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB920214\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB920683\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB920683\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB920685\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB920685\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB921398\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB921398\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB921503\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB921503\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB921883\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB921883\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB922616\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB922616\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB922819\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB922819\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB923414\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB923414\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB924191\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB924191\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB924496\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB924496\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB925486\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB925486\spuninst.exe"
Thu 19 Jan 2006 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\spmsg.dll"
Thu 19 Jan 2006 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB926255\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB926255\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB926436\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB926436\spuninst.exe"
Thu 19 Jan 2006 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\spmsg.dll"
Thu 19 Jan 2006 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB927802\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB927802\spuninst.exe"
Thu 19 Jan 2006 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB927891\spmsg.dll"
Thu 19 Jan 2006 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB927891\spuninst.exe"
Thu 19 Jan 2006 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\spmsg.dll"
Thu 19 Jan 2006 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\spuninst.exe"
Wed 12 Oct 2005 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB928843\spmsg.dll"
Wed 12 Oct 2005 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB928843\spuninst.exe"
Thu 19 Jan 2006 14,048 A..H. — "C:\WINDOWS\$hf_mig$\KB929123\spmsg.dll"
Thu 19 Jan 2006 213,216 A..H. — "C:\WINDOWS\$hf_mig$\KB929123\spuninst.exe"
Sat 11 Nov 2006 27,648 …H. — "C:\Documents and Settings\Becca\Desktop\westerholm\~WRL0980.tmp"
Mon 19 Feb 2007 36,864 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL0014.tmp"
Mon 5 Feb 2007 27,136 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL0642.tmp"
Fri 20 Jul 2007 44,032 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL0740.tmp"
Sun 4 Mar 2007 25,088 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL1305.tmp"
Mon 5 Feb 2007 26,624 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL1320.tmp"
Mon 27 Aug 2007 28,672 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL1671.tmp"
Fri 20 Jul 2007 29,696 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL1900.tmp"
Sun 4 Mar 2007 26,624 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL2529.tmp"
Sun 4 Mar 2007 27,136 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL2641.tmp"
Fri 20 Jul 2007 35,328 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL2668.tmp"
Sun 21 Jan 2007 20,480 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL2824.tmp"
Sun 21 Jan 2007 27,648 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL3015.tmp"
Sun 21 Jan 2007 20,992 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL3316.tmp"
Mon 5 Feb 2007 24,576 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL3441.tmp"
Sun 4 Mar 2007 37,888 A..H. — "C:\Documents and Settings\Becca\My Documents\Fitness Study\~WRL3459.tmp"
Thu 28 Jun 2007 24,064 A..H. — "C:\Documents and Settings\Becca\My Documents\Memo's 2007\~WRL0001.tmp"
Thu 28 Jun 2007 24,576 A..H. — "C:\Documents and Settings\Becca\My Documents\Memo's 2007\~WRL0003.tmp"
Sun 10 Jun 2007 25,600 A..H. — "C:\Documents and Settings\Becca\My Documents\Memo's 2007\~WRL0798.tmp"
Sun 10 Jun 2007 25,600 A..H. — "C:\Documents and Settings\Becca\My Documents\Memo's 2007\~WRL2022.tmp"
Sun 3 Jun 2007 33,280 A..H. — "C:\Documents and Settings\Becca\My Documents\Training Manual\~WRL1966.tmp"
Wed 17 Nov 2004 347,136 A..H. — "C:\WINDOWS\$hf_mig$\KB873339\SP2QFE\hypertrm.dll"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB873339\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB873339\update\update.exe"
Tue 18 Jan 2005 451,584 A..H. — "C:\WINDOWS\$hf_mig$\KB885250\SP2QFE\mrxsmb.sys"
Wed 1 Dec 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB885250\update\spcustom.dll"
Tue 30 Nov 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB885250\update\update.exe"
Wed 27 Oct 2004 721,920 A..H. — "C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\lsasrv.dll"
Wed 27 Oct 2004 448,128 A..H. — "C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\mrxsmb.sys"
Wed 27 Oct 2004 174,592 A..H. — "C:\WINDOWS\$hf_mig$\KB885835\SP2QFE\rdbss.sys"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB885835\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB885835\update\update.exe"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB885836\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB885836\update\update.exe"
Wed 29 Sep 2004 134,912 A..H. — "C:\WINDOWS\$hf_mig$\KB886185\SP2QFE\ipnat.sys"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB886185\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB886185\update\update.exe"
Wed 13 Oct 2004 1,694,208 A..H. — "C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB887472\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB887472\update\update.exe"
Fri 8 Oct 2004 262,272 A..H. — "C:\WINDOWS\$hf_mig$\KB887742\SP2QFE\http.sys"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB887742\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB887742\update\update.exe"
Tue 16 Nov 2004 68,096 A..H. — "C:\WINDOWS\$hf_mig$\KB888113\SP2QFE\hlink.dll"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB888113\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB888113\update\update.exe"
Tue 7 Dec 2004 96,768 A..H. — "C:\WINDOWS\$hf_mig$\KB888302\SP2QFE\srvsvc.dll"
Tue 30 Nov 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB888302\update\spcustom.dll"
Tue 30 Nov 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB888302\update\update.exe"
Fri 22 Apr 2005 57,344 A..H. — "C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\agentdpv.dll"
Mon 16 May 2005 17,920 A..H. — "C:\WINDOWS\$hf_mig$\KB890046\SP2QFE\xpsp3res.dll"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB890046\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB890046\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB890046\update\updspapi.dll"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB890175\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB890175\update\update.exe"
Wed 2 Mar 2005 62,464 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll"
Tue 1 Mar 2005 2,135,552 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe"
Tue 1 Mar 2005 2,056,832 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe"
Tue 1 Mar 2005 2,015,232 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe"
Tue 1 Mar 2005 2,179,456 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe"
Wed 2 Mar 2005 577,024 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll"
Tue 1 Mar 2005 1,836,160 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys"
Wed 2 Mar 2005 291,328 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll"
Thu 14 Oct 2004 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB891781\update\spcustom.dll"
Thu 14 Oct 2004 654,848 A..H. — "C:\WINDOWS\$hf_mig$\KB891781\update\update.exe"
Wed 25 May 2005 359,936 A..H. — "C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB893066\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB893066\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB893066\update\updspapi.dll"
Fri 8 Jul 2005 249,344 A..H. — "C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll"
Thu 7 Jul 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB893756\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll"
Thu 28 Apr 2005 1,286,144 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\ole32.dll"
Thu 28 Apr 2005 74,752 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecli32.dll"
Thu 28 Apr 2005 37,376 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\olecnv32.dll"
Thu 28 Apr 2005 396,288 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB894391\update\updspapi.dll"
Thu 26 May 2005 10,752 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe"
Thu 26 May 2005 41,472 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll"
Thu 26 May 2005 155,136 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll"
Thu 26 May 2005 137,216 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll"
Mon 9 May 2005 332,544 A..H. — "C:\WINDOWS\$hf_mig$\KB896422\SP2QFE\srv.sys"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB896422\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896422\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB896422\update\updspapi.dll"
Fri 10 Jun 2005 57,856 A..H. — "C:\WINDOWS\$hf_mig$\KB896423\SP2QFE\spoolsv.exe"
Wed 29 Jun 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB896423\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB896423\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896423\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB896423\update\updspapi.dll"
Wed 5 Oct 2005 280,064 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\gdi32.dll"
Wed 5 Oct 2005 1,839,360 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\SP2QFE\win32k.sys"
Wed 5 Oct 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB896424\update\updspapi.dll"
Tue 10 May 2005 75,776 A..H. — "C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB896428\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB898461\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll"
Wed 15 Jun 2005 297,984 A..H. — "C:\WINDOWS\$hf_mig$\KB899587\SP2QFE\kerberos.dll"
Wed 29 Jun 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB899587\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB899587\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB899587\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB899587\update\updspapi.dll"
Thu 9 Jun 2005 139,528 A..H. — "C:\WINDOWS\$hf_mig$\KB899591\SP2QFE\rdpwd.sys"
Wed 29 Jun 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB899591\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB899591\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB899591\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB899591\update\updspapi.dll"
Tue 14 Feb 2006 142,464 A..H. — "C:\WINDOWS\$hf_mig$\KB900485\SP2QFE\aec.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB900485\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB900485\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB900485\update\updspapi.dll"
Wed 31 Aug 2005 19,968 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\linkinfo.dll"
Thu 22 Sep 2005 8,452,608 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shell32.dll"
Fri 2 Sep 2005 474,112 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\shlwapi.dll"
Wed 31 Aug 2005 291,840 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\winsrv.dll"
Mon 26 Sep 2005 21,504 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\SP2QFE\xpsp3res.dll"
Mon 26 Sep 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB900725\update\updspapi.dll"
Fri 9 Sep 2005 2,068,480 A..H. — "C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll"
Fri 9 Sep 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB901017\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll"
Tue 28 Jun 2005 254,976 A..H. — "C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll"
Tue 28 Jun 2005 73,728 A..H. — "C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB901214\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll"
Mon 25 Jul 2005 225,792 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrv.dll"
Mon 25 Jul 2005 625,152 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\catsrvut.dll"
Mon 25 Jul 2005 110,080 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatex.dll"
Mon 25 Jul 2005 498,688 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\clbcatq.dll"
Mon 25 Jul 2005 60,416 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\colbact.dll"
Mon 25 Jul 2005 195,072 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comadmin.dll"
Mon 25 Jul 2005 97,792 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comrepl.dll"
Mon 25 Jul 2005 1,267,200 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comsvcs.dll"
Mon 25 Jul 2005 540,160 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\comuid.dll"
Mon 25 Jul 2005 243,200 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll"
Mon 25 Jul 2005 8,704 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\migregdb.exe"
Mon 25 Jul 2005 425,472 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcprx.dll"
Mon 25 Jul 2005 945,152 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtctm.dll"
Mon 25 Jul 2005 161,280 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\msdtcuiu.dll"
Mon 25 Jul 2005 66,560 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxclu.dll"
Mon 25 Jul 2005 91,136 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\mtxoci.dll"
Mon 25 Jul 2005 1,285,632 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\ole32.dll"
Mon 25 Jul 2005 74,752 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecli32.dll"
Mon 25 Jul 2005 37,376 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\olecnv32.dll"
Mon 25 Jul 2005 398,336 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll"
Mon 25 Jul 2005 101,376 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\txflog.dll"
Mon 25 Jul 2005 11,776 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\xolehlp.dll"
Mon 25 Jul 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB902400\update\updspapi.dll"
Mon 29 Aug 2005 1,287,680 A..H. — "C:\WINDOWS\$hf_mig$\KB904706\SP2QFE\quartz.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB904706\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB904706\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB904706\update\updspapi.dll"
Mon 22 Aug 2005 197,632 A..H. — "C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll"
Fri 19 Aug 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB905414\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll"
Mon 22 Aug 2005 123,392 A..H. — "C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll"
Mon 22 Aug 2005 30,720 A..H. — "C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe"
Thu 24 Feb 2005 22,240 A..H. — "C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll"
Thu 24 Feb 2005 718,048 A..H. — "C:\WINDOWS\$hf_mig$\KB905749\update\update.exe"
Thu 24 Feb 2005 371,936 A..H. — "C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll"
Wed 23 Nov 2005 1,022,464 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\browseui.dll"
Thu 20 Oct 2005 151,040 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\cdfview.dll"
Fri 4 Nov 2005 1,054,208 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\danim.dll"
Thu 20 Oct 2005 205,312 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\dxtrans.dll"
Thu 20 Oct 2005 55,808 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\extmgr.dll"
Thu 20 Oct 2005 18,432 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\iedw.exe"
Thu 20 Oct 2005 251,904 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\iepeers.dll"
Thu 20 Oct 2005 96,256 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\inseng.dll"
Wed 23 Nov 2005 3,018,240 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\mshtml.dll"
Thu 20 Oct 2005 448,512 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\mshtmled.dll"
Thu 20 Oct 2005 146,432 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\msrating.dll"
Thu 20 Oct 2005 530,944 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\mstime.dll"
Thu 20 Oct 2005 39,424 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\pngfilt.dll"
Wed 30 Nov 2005 1,495,040 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\shdocvw.dll"
Thu 20 Oct 2005 474,112 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\shlwapi.dll"
Fri 4 Nov 2005 610,304 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\urlmon.dll"
Thu 20 Oct 2005 661,504 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\SP2QFE\wininet.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB905915\update\updspapi.dll"
Mon 17 Oct 2005 80,896 A..H. — "C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll"
Mon 17 Oct 2005 117,760 A..H. — "C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB908519\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll"
Thu 16 Mar 2006 8,454,656 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\shell32.dll"
Thu 16 Mar 2006 28,672 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\verclsid.exe"
Tue 21 Mar 2006 23,040 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB908531\update\updspapi.dll"
Thu 20 Oct 2005 1,082,368 A..H. — "C:\WINDOWS\$hf_mig$\KB910437\SP2QFE\esent.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB910437\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB910437\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB910437\update\updspapi.dll"
Sun 14 May 2006 180,736 A..H. — "C:\WINDOWS\$hf_mig$\KB911280\SP2QFE\rasmans.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB911280\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB911280\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB911280\update\updspapi.dll"
Thu 23 Mar 2006 143,360 A..H. — "C:\WINDOWS\$hf_mig$\KB911562\SP2QFE\msadco.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB911562\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB911562\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB911562\update\updspapi.dll"
Fri 17 Mar 2006 679,424 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\inetcomm.dll"
Fri 17 Mar 2006 1,311,744 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\msoe.dll"
Fri 17 Mar 2006 510,464 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\wab32.dll"
Fri 17 Mar 2006 85,504 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\SP2QFE\wabimp.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB911567\update\updspapi.dll"
Tue 3 Jan 2006 68,096 A..H. — "C:\WINDOWS\$hf_mig$\KB911927\SP2QFE\webclnt.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB911927\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB911927\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB911927\update\updspapi.dll"
Fri 3 Mar 2006 1,022,976 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\browseui.dll"
Fri 3 Mar 2006 151,040 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\cdfview.dll"
Fri 3 Mar 2006 1,054,208 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\danim.dll"
Fri 3 Mar 2006 205,312 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\dxtrans.dll"
Fri 3 Mar 2006 55,808 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\extmgr.dll"
Fri 3 Mar 2006 18,432 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\iedw.exe"
Fri 3 Mar 2006 251,904 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\iepeers.dll"
Fri 3 Mar 2006 96,256 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\inseng.dll"
Thu 23 Mar 2006 3,055,616 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\mshtml.dll"
Fri 3 Mar 2006 448,512 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\mshtmled.dll"
Fri 3 Mar 2006 146,432 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\msrating.dll"
Fri 3 Mar 2006 532,480 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\mstime.dll"
Fri 3 Mar 2006 39,424 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\pngfilt.dll"
Thu 30 Mar 2006 1,495,040 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\shdocvw.dll"
Fri 3 Mar 2006 474,112 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\shlwapi.dll"
Sat 18 Mar 2006 614,400 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\urlmon.dll"
Fri 3 Mar 2006 663,552 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\wininet.dll"
Wed 29 Mar 2006 23,040 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB912812\update\updspapi.dll"
Wed 28 Dec 2005 280,064 A..H. — "C:\WINDOWS\$hf_mig$\KB912919\SP2QFE\gdi32.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB912919\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB912919\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB912919\update\updspapi.dll"
Fri 13 Jan 2006 360,448 A..H. — "C:\WINDOWS\$hf_mig$\KB913446\SP2QFE\tcpip.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB913446\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB913446\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB913446\update\updspapi.dll"
Wed 1 Mar 2006 426,496 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcprx.dll"
Wed 1 Mar 2006 956,416 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtctm.dll"
Wed 1 Mar 2006 161,280 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\msdtcuiu.dll"
Wed 1 Mar 2006 66,560 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxclu.dll"
Wed 1 Mar 2006 91,136 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\mtxoci.dll"
Wed 1 Mar 2006 11,776 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\SP2QFE\xolehlp.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB913580\update\updspapi.dll"
Fri 19 May 2006 112,128 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dhcpcsvc.dll"
Fri 19 May 2006 147,456 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\dnsapi.dll"
Fri 19 May 2006 94,720 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\SP2QFE\iphlpapi.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB914388\update\updspapi.dll"
Fri 5 May 2006 454,400 A..H. — "C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys"
Fri 5 May 2006 174,592 A..H. — "C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB914389\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll"
Fri 14 Jul 2006 121,856 A..H. — "C:\WINDOWS\$hf_mig$\KB915865\SP2QFE\xmllite.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB915865\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB915865\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB915865\update\updspapi.dll"
Wed 10 May 2006 1,022,976 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\browseui.dll"
Wed 10 May 2006 151,040 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\cdfview.dll"
Wed 10 May 2006 1,054,208 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\danim.dll"
Wed 10 May 2006 357,888 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\dxtmsft.dll"
Wed 10 May 2006 205,312 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\dxtrans.dll"
Wed 10 May 2006 55,808 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\extmgr.dll"
Tue 9 May 2006 18,432 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\iedw.exe"
Wed 10 May 2006 251,904 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\iepeers.dll"
Wed 10 May 2006 96,256 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\inseng.dll"
Wed 10 May 2006 15,872 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\jsproxy.dll"
Fri 19 May 2006 3,055,104 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\mshtml.dll"
Wed 10 May 2006 448,512 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\mshtmled.dll"
Wed 10 May 2006 146,432 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\msrating.dll"
Wed 10 May 2006 532,480 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\mstime.dll"
Wed 10 May 2006 39,424 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\pngfilt.dll"
Mon 29 May 2006 1,496,576 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\shdocvw.dll"
Wed 10 May 2006 474,112 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\shlwapi.dll"
Wed 10 May 2006 615,424 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\urlmon.dll"
Wed 10 May 2006 663,552 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\wininet.dll"
Thu 11 May 2006 90,112 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB916281\update\updspapi.dll"
Thu 16 Mar 2006 262,656 A..H. — "C:\WINDOWS\$hf_mig$\KB916595\SP2QFE\http.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB916595\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB916595\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB916595\update\updspapi.dll"
Fri 21 Apr 2006 332,800 A..H. — "C:\WINDOWS\$hf_mig$\KB917159\SP2QFE\srv.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB917159\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB917159\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB917159\update\updspapi.dll"
Thu 18 May 2006 450,560 A..H. — "C:\WINDOWS\$hf_mig$\KB917344\SP2QFE\jscript.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB917344\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB917344\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB917344\update\updspapi.dll"
Wed 5 Jul 2006 985,088 A..H. — "C:\WINDOWS\$hf_mig$\KB917422\SP2QFE\kernel32.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB917422\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB917422\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB917422\update\updspapi.dll"
Thu 20 Apr 2006 360,576 A..H. — "C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB917953\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB917953\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB917953\update\updspapi.dll"
Mon 27 Nov 2006 539,136 A..H. — "C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\msftedit.dll"
Mon 27 Nov 2006 433,664 A..H. — "C:\WINDOWS\$hf_mig$\KB918118\SP2QFE\riched20.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB918118\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB918118\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB918118\update\updspapi.dll"
Thu 1 Jun 2006 163,840 A..H. — "C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgdw400.dll"
Thu 1 Jun 2006 27,648 A..H. — "C:\WINDOWS\$hf_mig$\KB918439\SP2QFE\jgpl400.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB918439\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB918439\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB918439\update\updspapi.dll"
Fri 23 Jun 2006 1,022,976 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\browseui.dll"
Fri 23 Jun 2006 151,040 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\cdfview.dll"
Fri 23 Jun 2006 1,054,208 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\danim.dll"
Fri 23 Jun 2006 357,888 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\dxtmsft.dll"
Fri 23 Jun 2006 205,312 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\dxtrans.dll"
Fri 23 Jun 2006 55,808 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\extmgr.dll"
Fri 23 Jun 2006 18,432 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\iedw.exe"
Fri 23 Jun 2006 251,904 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\iepeers.dll"
Fri 23 Jun 2006 96,256 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\inseng.dll"
Fri 23 Jun 2006 15,872 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\jsproxy.dll"
Fri 28 Jul 2006 3,058,176 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mshtml.dll"
Fri 23 Jun 2006 448,512 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mshtmled.dll"
Fri 23 Jun 2006 146,432 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\msrating.dll"
Fri 23 Jun 2006 532,480 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\mstime.dll"
Fri 23 Jun 2006 39,424 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\pngfilt.dll"
Fri 23 Jun 2006 1,497,088 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\shdocvw.dll"
Fri 23 Jun 2006 474,112 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\shlwapi.dll"
Tue 25 Jul 2006 615,424 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\urlmon.dll"
Fri 23 Jun 2006 664,576 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\wininet.dll"
Fri 23 Jun 2006 90,624 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB918899\update\updspapi.dll"
Thu 13 Jul 2006 202,496 A..H. — "C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB919007\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll"
Thu 12 Oct 2006 42,496 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdp2.dll"
Thu 12 Oct 2006 57,344 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentdpv.dll"
Thu 12 Oct 2006 256,512 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\agentsvr.exe"
Mon 16 Oct 2006 248,320 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB920213\update\updspapi.dll"
Thu 27 Jul 2006 679,424 A..H. — "C:\WINDOWS\$hf_mig$\KB920214\SP2QFE\inetcomm.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB920214\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB920214\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB920214\update\updspapi.dll"
Fri 21 Jul 2006 72,704 A..H. — "C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB920670\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll"
Mon 26 Jun 2006 147,456 A..H. — "C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\dnsapi.dll"
Mon 26 Jun 2006 7,680 A..H. — "C:\WINDOWS\$hf_mig$\KB920683\SP2QFE\rasadhlp.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB920683\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB920683\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB920683\update\updspapi.dll"
Thu 22 Jun 2006 69,120 A..H. — "C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\ciodm.dll"
Thu 22 Jun 2006 1,435,648 A..H. — "C:\WINDOWS\$hf_mig$\KB920685\SP2QFE\query.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB920685\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB920685\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB920685\update\updspapi.dll"
Wed 14 Jun 2006 172,416 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\kmixer.sys"
Wed 14 Jun 2006 6,272 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\splitter.sys"
Wed 14 Jun 2006 82,944 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\SP2QFE\wdmaud.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB920872\update\updspapi.dll"
Thu 13 Jul 2006 8,457,728 A..H. — "C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\shell32.dll"
Thu 13 Jul 2006 150,016 A..H. — "C:\WINDOWS\$hf_mig$\KB921398\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB921398\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB921398\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB921398\update\updspapi.dll"
Thu 17 May 2007 549,888 A..H. — "C:\WINDOWS\$hf_mig$\KB921503\SP2QFE\oleaut32.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB921503\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB921503\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB921503\update\updspapi.dll"
Fri 14 Jul 2006 336,896 A..H. — "C:\WINDOWS\$hf_mig$\KB921883\SP2QFE\netapi32.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB921883\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB921883\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB921883\update\updspapi.dll"
Mon 21 Aug 2006 16,896 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltlib.dll"
Mon 21 Aug 2006 23,040 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmc.exe"
Mon 21 Aug 2006 128,768 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\SP2QFE\fltmgr.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB922582\update\updspapi.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB922616\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB922616\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB922616\update\updspapi.dll"
Thu 14 Sep 2006 1,022,976 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\browseui.dll"
Thu 14 Sep 2006 151,040 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\cdfview.dll"
Thu 14 Sep 2006 1,054,208 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\danim.dll"
Thu 14 Sep 2006 357,888 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\dxtmsft.dll"
Thu 14 Sep 2006 205,312 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\dxtrans.dll"
Thu 14 Sep 2006 55,808 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\extmgr.dll"
Wed 13 Sep 2006 18,432 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\iedw.exe"
Thu 14 Sep 2006 251,904 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\iepeers.dll"
Thu 14 Sep 2006 96,256 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\inseng.dll"
Thu 14 Sep 2006 15,872 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\jsproxy.dll"
Thu 14 Sep 2006 3,058,688 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mshtml.dll"
Thu 14 Sep 2006 448,512 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mshtmled.dll"
Thu 14 Sep 2006 146,432 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\msrating.dll"
Thu 14 Sep 2006 532,480 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\mstime.dll"
Thu 14 Sep 2006 39,424 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\pngfilt.dll"
Mon 4 Sep 2006 1,497,088 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\shdocvw.dll"
Thu 14 Sep 2006 474,112 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\shlwapi.dll"
Thu 14 Sep 2006 615,936 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\urlmon.dll"
Thu 14 Sep 2006 664,576 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\wininet.dll"
Wed 13 Sep 2006 210,944 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB922760\update\updspapi.dll"
Wed 16 Aug 2006 100,352 A..H. — "C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\6to4svc.dll"
Wed 16 Aug 2006 225,664 A..H. — "C:\WINDOWS\$hf_mig$\KB922819\SP2QFE\tcpip6.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB922819\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB922819\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB922819\update\updspapi.dll"
Mon 14 Aug 2006 332,928 A..H. — "C:\WINDOWS\$hf_mig$\KB923414\SP2QFE\srv.sys"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB923414\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB923414\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB923414\update\updspapi.dll"
Wed 8 Nov 2006 86,528 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\directdb.dll"
Wed 8 Nov 2006 679,424 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\inetcomm.dll"
Wed 8 Nov 2006 1,314,816 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\msoe.dll"
Wed 8 Nov 2006 510,976 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\wab32.dll"
Wed 8 Nov 2006 85,504 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\SP2QFE\wabimp.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB923694\update\updspapi.dll"
Fri 13 Oct 2006 64,000 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwapi32.dll"
Fri 13 Oct 2006 142,336 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwprovau.dll"
Fri 13 Oct 2006 163,456 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwrdr.sys"
Fri 13 Oct 2006 65,536 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\SP2QFE\nwwks.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB923980\update\updspapi.dll"
Wed 13 Sep 2006 1,084,416 A..H. — "C:\WINDOWS\$hf_mig$\KB924191\SP2QFE\msxml3.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB924191\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB924191\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB924191\update\updspapi.dll"
Thu 17 Aug 2006 726,528 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\lsasrv.dll"
Thu 17 Aug 2006 337,408 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\netapi32.dll"
Thu 17 Aug 2006 132,096 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\SP2QFE\wkssvc.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB924270\update\updspapi.dll"
Mon 4 Sep 2006 1,497,088 A..H. — "C:\WINDOWS\$hf_mig$\KB924496\SP2QFE\shdocvw.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB924496\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB924496\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB924496\update\updspapi.dll"
Mon 23 Oct 2006 1,022,976 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\browseui.dll"
Mon 23 Oct 2006 151,040 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\cdfview.dll"
Mon 23 Oct 2006 1,054,208 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\danim.dll"
Mon 23 Oct 2006 357,888 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\dxtmsft.dll"
Mon 23 Oct 2006 205,312 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\dxtrans.dll"
Mon 23 Oct 2006 55,808 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\extmgr.dll"
Mon 23 Oct 2006 18,432 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\iedw.exe"
Mon 23 Oct 2006 251,904 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\iepeers.dll"
Mon 23 Oct 2006 96,256 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\inseng.dll"
Mon 23 Oct 2006 15,872 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\jsproxy.dll"
Mon 23 Oct 2006 3,061,248 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mshtml.dll"
Mon 23 Oct 2006 448,512 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mshtmled.dll"
Mon 23 Oct 2006 146,432 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\msrating.dll"
Mon 23 Oct 2006 532,480 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\mstime.dll"
Mon 23 Oct 2006 39,424 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\pngfilt.dll"
Mon 23 Oct 2006 1,497,600 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\shdocvw.dll"
Mon 23 Oct 2006 474,112 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\shlwapi.dll"
Mon 23 Oct 2006 615,936 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\urlmon.dll"
Mon 23 Oct 2006 664,576 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\wininet.dll"
Mon 23 Oct 2006 248,320 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\SP2QFE\xpsp3res.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB925454\update\updspapi.dll"
Mon 18 Sep 2006 851,968 A..H. — "C:\WINDOWS\$hf_mig$\KB925486\SP2QFE\vgx.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB925486\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB925486\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB925486\update\updspapi.dll"
Thu 8 Mar 2007 282,112 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\gdi32.dll"
Thu 8 Mar 2007 40,960 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\mf3216.dll"
Thu 8 Mar 2007 578,048 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll"
Thu 8 Mar 2007 1,843,968 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\win32k.sys"
Thu 19 Jan 2006 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\update\spcustom.dll"
Thu 19 Jan 2006 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\update\update.exe"
Thu 19 Jan 2006 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB925902\update\updspapi.dll"
Thu 19 Oct 2006 713,216 A..H. — "C:\WINDOWS\$hf_mig$\KB926255\SP2QFE\sxs.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB926255\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB926255\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB926255\update\updspapi.dll"
Mon 16 Oct 2006 122,880 A..H. — "C:\WINDOWS\$hf_mig$\KB926436\SP2QFE\oledlg.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB926436\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB926436\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB926436\update\updspapi.dll"
Tue 26 Dec 2006 536,576 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msado15.dll"
Tue 26 Dec 2006 180,224 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msadomd.dll"
Tue 26 Dec 2006 200,704 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msadox.dll"
Tue 26 Dec 2006 102,400 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\SP2QFE\msjro.dll"
Thu 19 Jan 2006 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\update\spcustom.dll"
Thu 19 Jan 2006 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\update\update.exe"
Thu 19 Jan 2006 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB927779\update\updspapi.dll"
Tue 19 Dec 2006 333,824 A..H. — "C:\WINDOWS\$hf_mig$\KB927802\SP2QFE\wiaservc.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB927802\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB927802\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB927802\update\updspapi.dll"
Wed 18 Apr 2007 2,854,400 A..H. — "C:\WINDOWS\$hf_mig$\KB927891\SP2QFE\msi31.dll"
Thu 19 Jan 2006 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB927891\update\spcustom.dll"
Thu 19 Jan 2006 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB927891\update\update.exe"
Thu 19 Jan 2006 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB927891\update\updspapi.dll"
Tue 19 Dec 2006 8,458,752 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shell32.dll"
Tue 19 Dec 2006 135,168 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\shsvcs.dll"
Tue 19 Dec 2006 248,320 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\SP2QFE\xpsp3res.dll"
Thu 19 Jan 2006 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\update\spcustom.dll"
Thu 19 Jan 2006 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\update\update.exe"
Thu 19 Jan 2006 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB928255\update\updspapi.dll"
Wed 12 Oct 2005 22,752 A..H. — "C:\WINDOWS\$hf_mig$\KB928843\update\spcustom.dll"
Wed 12 Oct 2005 716,000 A..H. — "C:\WINDOWS\$hf_mig$\KB928843\update\update.exe"
Wed 12 Oct 2005 371,424 A..H. — "C:\WINDOWS\$hf_mig$\KB928843\update\updspapi.dll"
Wed 16 May 2007 86,528 A..H. — "C:\WINDOWS\$hf_mig$\KB929123\SP2QFE\directdb.dll"
Sun 8 Apr 2007 616,448 A.SH. — "C:\Deckard\System Scanner\backup\WINDOWS\temp\oy4wotve.TMP"
Fri 13 Jan 2006 616,448 A.SH. — "C:\Deckard\System Scanner\backup\WINDOWS\temp\ycbinxyp.TMP"
Mon 4 Dec 2006 27,136 …H. — "C:\Documents and Settings\Becca\Application Data\Microsoft\Word\~WRL2364.tmp"
Thu 8 Feb 2007 20,480 …H. — "C:\Documents and Settings\Becca\Application Data\Microsoft\Word\~WRL2422.tmp"
Tue 11 Sep 2007 9,205 A.SH. — "C:\Deckard\System Scanner\backup\DOCUME~1\Becca\LOCALS~1\Temp\hrkxcpuy.exe"
Fri 14 Sep 2007 19,719 A.SH. — "C:\Deckard\System Scanner\backup\DOCUME~1\Becca\LOCALS~1\Temp\redgduou.exe"
Fri 16 Jun 2006 20,992 A..H. — "C:\Deckard\System Scanner\backup\DOCUME~1\Becca\LOCALS~1\Temp\~WRL0001.tmp"
Fri 12 Aug 2005 8 A..H. — "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp"
Fri 12 Aug 2005 8 A..H. — "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch2\lock.tmp"
Fri 12 Aug 2005 8 A..H. — "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch3\lock.tmp"
Thu 25 Aug 2005 8 A..H. — "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch4\lock.tmp"

Finished!

HJTHIS LOG:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:22:06 PM, on 9/30/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\WINDOWS\system32\notepad.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Becca\Desktop\Downloads\FindVundo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://bfc.myway.com/search/de_srchlft.html?p=DS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/mywaybiz
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {22682D28-2318-4179-ABB2-0BABBF2DAD9C} - (no file)
O2 - BHO: (no name) - {255AB745-AD2E-43BD-864F-98DB26193752} - (no file)
O2 - BHO: iebho Class - {296AE49F-E195-4835-895C-91788B938DF8} - C:\WINDOWS\ieiebho.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {641142B7-F919-4A4F-9DCA-77089B22C1F0} - C:\WINDOWS\system32\ddaba.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {933CD95F-A437-4EAA-869C-2ED51241D9EC} - (no file)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {C6039E6C-BDE9-4de5-BB40-768CAA584FDC} - C:\WINDOWS\system32\yfjakxwe.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: 1Click ImageExtractor - {5DE4E98D-DE09-4BC3-8A70-A6D9A24F4EC9} - C:\WINDOWS\1cie.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://ca.com/us/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O20 - Winlogon Notify: ddaba - C:\WINDOWS\system32\ddaba.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O24 - Desktop Component 0: (no name) - C:\Program Files\MSN\proprypreg.html

–
End of file - 9251 bytes

IndiGenus

Post #29October 1, 2007, 12:16 AM UTC

Okay, with that done let's see if we can give Combofix at least one more shot here. Once again, remove any current versions and download the latest. :crossing fingers…and toes:

Download and Run ComboFix

Download this file from below:
Here
Disconnect from the Internet, than disable your Anti-virus and any real-time Anti-spyware monitors that are running.
Then double click Combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Post that log in your next reply with a new HijackThis log.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall
Note 2: Remember to re-enable your Anti-virus and Anti-spyware before reconnecting to the Internet.

==========================================================================

If you get the same error and it won't run let's also try Vundofix again. Same thing, delete the one you have and download the latest.

Please download
VundoFix.exe to your desktop.

Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click Yes
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.
Please post the contents of C:\vundofix.txt and a new HiJackThis log.

Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from Click the Scan for Vundo button when VundoFix appears at reboot.

morrisjf1

Post #30October 1, 2007, 1:58 AM UTC

OK Dave… the finger and toe crossing worked… MAYBE… lol i got this error (capped below) a few times throughout the scan… but it actually did do a scan and produce a log, which is well far past what its done in the past…

here's the error…

[external image: Posted Image]

here's the log…

ComboFix 07-10.1.2 - Becca 2007-09-30 20:31:14.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.212 [GMT -5:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\MSN\proprypreg.html
C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\abadd.bak1
C:\WINDOWS\system32\abadd.bak2
C:\WINDOWS\system32\abadd.ini
C:\WINDOWS\system32\atvnkymq.exe
C:\WINDOWS\system32\aylguowi.exe
C:\WINDOWS\system32\bfvhyimc.exe
C:\WINDOWS\system32\cevkbywo.exe
C:\WINDOWS\system32\cfwclgkl.exe
C:\WINDOWS\system32\cigrlmqq.dll
C:\WINDOWS\system32\cquawaym.exe
C:\WINDOWS\system32\ddaba.dll
C:\WINDOWS\system32\dqnhsqdn.exe
C:\WINDOWS\system32\ducvsksw.ini
C:\WINDOWS\system32\dyidweau.exe
C:\WINDOWS\system32\ebrttxsg.exe
C:\WINDOWS\system32\f02WtR
C:\WINDOWS\system32\ftivcnno.exe
C:\WINDOWS\system32\gdddupul.exe
C:\WINDOWS\system32\gjorrvdb.exe
C:\WINDOWS\system32\glxfjwel.exe
C:\WINDOWS\system32\hvcwxutb.exe
C:\WINDOWS\system32\hytdxicu.exe
C:\WINDOWS\system32\jgatsrhp.exe
C:\WINDOWS\system32\jmoedbbd.exe
C:\WINDOWS\system32\jrylbwej.exe
C:\WINDOWS\system32\khqfqsyu.ini
C:\WINDOWS\system32\konsxngt.exe
C:\WINDOWS\system32\lbbbaosi.dll
C:\WINDOWS\system32\lwkmpssn.exe
C:\WINDOWS\system32\mflmsupu.exe
C:\WINDOWS\system32\mplidkeq.exe
C:\WINDOWS\system32\nahtvuro.exe
C:\WINDOWS\system32\nqrdcgtp.exe
C:\WINDOWS\system32\oagpgrim.exe
C:\WINDOWS\system32\odufijut.exe
C:\WINDOWS\system32\ofhlnivo.exe
C:\WINDOWS\system32\oiqrqvlp.exe
C:\WINDOWS\system32\ovjlqunp.exe
C:\WINDOWS\system32\prgtbpek.exe
C:\WINDOWS\system32\qnibalrf.dll
C:\WINDOWS\system32\qqmlrgic.ini
C:\WINDOWS\system32\sfhnrqaf.exe
C:\WINDOWS\system32\sgxhyamt.exe
C:\WINDOWS\system32\smpekhuj.exe
C:\WINDOWS\system32\sxndqahr.exe
C:\WINDOWS\system32\tcfdbqop.exe
C:\WINDOWS\system32\tcrqljoe.exe
C:\WINDOWS\system32\tdtlpphr.exe
C:\WINDOWS\system32\thfvknyl.exe
C:\WINDOWS\system32\tkmixnvw.exe
C:\WINDOWS\system32\tpfscvkn.exe
C:\WINDOWS\system32\tqmismwt.exe
C:\WINDOWS\system32\tyjkkknf.exe
C:\WINDOWS\system32\umsljjan.exe
C:\WINDOWS\system32\uqjgmfgx.exe
C:\WINDOWS\system32\usubgwqy.exe
C:\WINDOWS\system32\uysqfqhk.dll
C:\WINDOWS\system32\veiweqyp.exe
C:\WINDOWS\system32\wgopopgf.exe
C:\WINDOWS\system32\wsksvcud.dll
C:\WINDOWS\system32\xaavfiai.exe
C:\WINDOWS\system32\xcnpegkd.exe
C:\WINDOWS\system32\xetmuchx.exe
C:\WINDOWS\system32\xvfovkpp.exe
C:\WINDOWS\system32\yfjakxwe.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

——-\LEGACY_DOMAINSERVICE

((((((((((((((((((((((((( Files Created from 2007-09-01 to 2007-10-01 )))))))))))))))))))))))))))))))
.

2007-09-30 17:58 d——– C:\WINDOWS\ERUNT
2007-09-30 15:50 d——– C:\Deckard
2007-09-26 20:39 d——– C:\WINDOWS\system32\Kaspersky Lab
2007-09-26 20:39 d——– C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-09-26 17:47 d——– C:\VundoFix Backups
2007-09-25 22:35 51,200 –a—— C:\WINDOWS\NirCmd.exe
2007-09-19 17:56 d——– C:\Program Files\vso
2007-09-18 02:53 d——– C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-09-14 19:55 19,837 –a—— C:\WINDOWS\system32\lnhinlqy.dll
2007-09-01 17:14 d——– C:\Program Files\PokerStars

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-03 00:27 ——— d——– C:\Documents and Settings\Becca\Application Data\DivX
2007-09-01 17:02 ——— d——– C:\Program Files\PartyGaming
2007-08-22 08:35 ——— d——– C:\Program Files\McAfee
2007-08-20 23:37 ——— d——– C:\Program Files\DivX
2007-08-19 16:37 ——— d——– C:\Documents and Settings\All Users\Application Data\McAfee
2007-08-19 16:35 ——— d——– C:\Program Files\Common Files\McAfee
2007-08-19 16:28 ——— d——– C:\Program Files\McAfee.com
2007-08-19 09:49 76560 –a—— C:\WINDOWS\system32\drivers\tmcomm.sys
2007-01-20 03:43:14 56 –sh–r C:\WINDOWS\system32294A46EEA.sys
2007-01-20 03:43:14 1,890 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{22682D28-2318-4179-ABB2-0BABBF2DAD9C}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{255AB745-AD2E-43BD-864F-98DB26193752}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{933CD95F-A437-4EAA-869C-2ED51241D9EC}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 05:00]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2005-08-12 01:15:42]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2005-08-12 01:15:42]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk
backup=C:\WINDOWS\pss\Adobe Acrobat Speed Launcher.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^QuickBooks Update Agent.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk
backup=C:\WINDOWS\pss\QuickBooks Update Agent.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Becca^Start Menu^Programs^Startup^OpenOffice.org 1.1.4.lnk]
path=C:\Documents and Settings\Becca\Start Menu\Programs\Startup\OpenOffice.org 1.1.4.lnk
backup=C:\WINDOWS\pss\OpenOffice.org 1.1.4.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Becca^Start Menu^Programs^Startup^TA_Start.lnk]
path=C:\Documents and Settings\Becca\Start Menu\Programs\Startup\TA_Start.lnk
backup=C:\WINDOWS\pss\TA_Start.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Becca^Start Menu^Programs^Startup^Wireless-G Notebook Adapter with SRX Utility.lnk]
path=C:\Documents and Settings\Becca\Start Menu\Programs\Startup\Wireless-G Notebook Adapter with SRX Utility.lnk
backup=C:\WINDOWS\pss\Wireless-G Notebook Adapter with SRX Utility.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
C:\WINDOWS\system32\dla\tfswctrl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hocywejox]
C:\Program Files\Internet Explorer\hocywejox22011.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxhkcmd]
C:\WINDOWS\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxpers]
C:\WINDOWS\system32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray]
C:\WINDOWS\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
"C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MOD]
C:\Program Files\Microangelo\muamgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SearchIndexer]
rundll32.exe "C:\WINDOWS\system32\ihaoqqqc.dll",sitypnow

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SystemOptimizer]
rundll32.exe "C:\WINDOWS\system32\qvggtjwe.dll",forkonce

S3 Airgo;Wireless-G Notebook Adapter with SRX;C:\WINDOWS\system32\DRIVERS\wnihdd51.sys
S3 PCMCIABKPCMXP;Belkin 11Mbps Wireless Notebook Network Adapter;C:\WINDOWS\system32\DRIVERS\bkpcmxp.sys
S3 WNIPROT5;WNIPROT5 Protocol Driver;\??\C:\WINDOWS\system32\WNIPROT5.SYS

.
Contents of the 'Scheduled Tasks' folder
"2007-09-15 15:21:42 C:\WINDOWS\Tasks\McDefragTask.job"
"2007-08-31 23:24:11 C:\WINDOWS\Tasks\McQcTask.job"
.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-30 20:44:31
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-30 20:46:24 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-09-30 20:46
.
— E O F —

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Spyware Infected - Webhancer & more...

✨ Ask AI

Ask AI