Scotty,
ComboFix knocked out my Internet again so I used System Restore to go back before I ran ComboFix so that the Internet would work. I did save the ComboFix file from when I ran it and it was still there when I used System Restore so hopefully it is of value to you.
Here are the scans you wanted. 1st is Kaspersky, 2nd is HJT, and 3rd is ComboFix. I am not seeing anything out of the ordinary on HJT other than O16 - DPF: {1239CC52 ….www.musicnotes.com/download/mnviewer.cab
Is this something I should have HJT fix?
Also, I need to do some online banking, do you think it is safe to do that or do you think the password stealer virus is still present? Thanks, here are the scans
——————————————————————————-
KASPERSKY ONLINE SCANNER REPORT
2008-01-29 18:34
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 29/01/2008
Kaspersky Anti-Virus database records: 536185
——————————————————————————-
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
Scan Statistics:
Total number of scanned objects: 74775
Number of viruses found: 87
Number of infected objects: 416
Number of suspicious objects: 5
Duration of the scan process: 02:08:33
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-01-29_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Mike\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Mike\Desktop\SDFix\backups\catchme.zip/ntos.exe Infected: Trojan-Spy.Win32.Zbot.nm skipped
C:\Documents and Settings\Mike\Desktop\SDFix\backups\catchme.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Mike\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Mike\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Mike\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mike\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mike\ntuser.dat Object is locked skipped
C:\Documents and Settings\Mike\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPPolicy.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPStart.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPStop.log Object is locked skipped
C:\Program Files\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\011D6BFA.tmp Infected: Trojan-Spy.Win32.Goldun.ms skipped
C:\Program Files\Norton AntiVirus\Quarantine\01855E76.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\01920668.exe Infected: not-a-virus:AdWare.Win32.WebRebates.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\01963064.exe Infected: not-a-virus:AdWare.Win32.WebRebates.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\01995A61.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\019C045D.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\01A02E59.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\02156EE0.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\02156EE0.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\02156EE0.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\02156EE0.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\02156EE0.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\02156EE0.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\02156EE0.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\032F3E55.htm Infected: Exploit.HTML.IframeBof skipped
C:\Program Files\Norton AntiVirus\Quarantine\03C173F9.tmp Infected: Trojan.Java.ClassLoader.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\03C41DF5.tmp Infected: Trojan.Java.ClassLoader.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\048A25BB.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\05935E21.dll Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\05A3300F.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\05A65A0B.exe/enhtb.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\05A65A0B.exe CAB: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05A65A0B.exe MimarSinan: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05A65A0B.exe UPX: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05A65A0B.exe CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05AA0408.exe Infected: not-a-virus:AdWare.Win32.NoName.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\05AD2E04.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\05AD5176.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\05B05801.tmp Infected: not-a-virus:AdWare.Win32.SurfSide.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\05B72BF9.ocx Infected: Trojan-Downloader.Win32.VB.ez skipped
C:\Program Files\Norton AntiVirus\Quarantine\05BA55F6.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\05BD7FF2.dll Infected: not-a-virus:AdWare.Win32.ImiBar.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\05BD7FF2.exe/systb.dll Infected: not-a-virus:AdWare.Win32.ImiBar.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\05BD7FF2.exe CAB: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05BD7FF2.exe MimarSinan: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05BD7FF2.exe UPX: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05BD7FF2.exe CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\05C029EF.dll Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\05C453EB.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\05C4681A.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\05F2726E Infected: not-a-virus:AdWare.Win32.DlMax.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\05F84666 Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\05FC7063.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\064B080C.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\06516B27.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\06551523.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\069906D8.tmp Infected: Trojan.Java.ClassLoader.ak skipped
C:\Program Files\Norton AntiVirus\Quarantine\07057061.tmp Infected: Trojan-Downloader.JS.Psyme.ap skipped
C:\Program Files\Norton AntiVirus\Quarantine\07C94789.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\07CF035C.exe Infected: not-a-virus:AdWare.Win32.Gator.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0849352B.tmp Infected: Trojan.Java.ClassLoader.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\0898124E.dll Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\09100DA3.exe Infected: Trojan-Downloader.Win32.Keenval skipped
C:\Program Files\Norton AntiVirus\Quarantine\091D3595.exe Infected: Trojan-Downloader.Win32.Keenval skipped
C:\Program Files\Norton AntiVirus\Quarantine\092972F3.tmp Infected: Trojan.Java.ClassLoader.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\092C1CF0.tmp Infected: Trojan.Java.ClassLoader.u skipped
C:\Program Files\Norton AntiVirus\Quarantine\09475961 Infected: Trojan.Win32.Small.ev skipped
C:\Program Files\Norton AntiVirus\Quarantine\099D1813.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\09AD074D.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\09D548E3.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\09DF46D8.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A063EAD.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A756B25.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A8C110C.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0AF537A7.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\0B901FC5.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BA745AC.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BBE6B93.exe/enhtb.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BBE6B93.exe CAB: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BBE6B93.exe MimarSinan: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BBE6B93.exe UPX: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BBE6B93.exe CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BC1158F.exe Infected: not-a-virus:AdWare.Win32.NoName.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BC76988.exe Infected: Trojan-Downloader.Win32.Dyfuca.du skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BCB1384.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BD1677D.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C1D27BF.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C3E4B9B.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C441F94.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C441F94.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C441F94.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C441F94.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C441F94.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C441F94.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C4E1D89.cla Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C581B7E.cla Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C823D50.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C930F3E.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C930F3E.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C930F3E.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C930F3E.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C930F3E.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C930F3E.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\0D005E36.htm Suspicious: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\0FF865BD.cla Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\0FFB0FB9.cla Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\0FFB0FB9.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\0FFB0FB9.php Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\10404803 Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\110D3423.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\12A900C7.php Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\12FE6621.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\13494E5F.exe Infected: Trojan-Downloader.Win32.Tiny.ed skipped
C:\Program Files\Norton AntiVirus\Quarantine\16D72135.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\18A651E8.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\19B16014.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1ABF2550.tmp Infected: Trojan.Java.ClassLoader.u skipped
C:\Program Files\Norton AntiVirus\Quarantine\1ADA6D7B.htm Infected: Exploit.HTML.IframeBof skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C78496B.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CDC3D29.cla Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CDC3D29.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CDC3D29.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CDC3D29.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CDC3D29.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CDC3D29.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CDC3D29.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D2B4EA5.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D31435C.tmp Infected: Trojan-Dropper.Win32.Small.pd skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D876641.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\1E415C97.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EDA1520.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EE41315.hta Infected: Trojan-Dropper.VBS.Zerolin skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EF86EAA.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EFB18A7.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1508DF.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1508DF.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1508DF.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1508DF.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1508DF.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1508DF.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1832DC.zip/BlackBox.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1832DC.zip/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1832DC.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1832DC.zip/Beyond.class Infected: Trojan-Downloader.Java.OpenStream.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1832DC.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F1832DC.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F622B66.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.cla Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\20316F60.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\2035195C.cla Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\209E4EB1.exe Infected: Trojan-Clicker.Win32.Small.kj skipped
C:\Program Files\Norton AntiVirus\Quarantine\20E65296.exe/data0001 Infected: not-a-virus:AdWare.Win32.WebRebates.g skipped
C:\Program Files\Norton AntiVirus\Quarantine\20E65296.exe NSIS: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\20E65296.exe CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\210F790B.exe Infected: not-a-virus:AdWare.Win32.Gator.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\21122308.fil Infected: not-a-virus:AdWare.Win32.Gator.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\216E2B5F.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\22BD0754.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\22C03150.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\22C35B4C.exe Infected: not-a-virus:AdWare.Win32.WebRebates.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\22C60549.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\22CA2F45.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\22CD5942.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\22D0033E.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\22D75737.dll Infected: not-a-virus:AdWare.Win32.WebSearch.o skipped
C:\Program Files\Norton AntiVirus\Quarantine\22DA0133.dll Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\22E0552C.dll Infected: not-a-virus:AdWare.Win32.Wintol.y skipped
C:\Program Files\Norton AntiVirus\Quarantine\23A572B9.php Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\24992B8B.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\249C03EE.dll Infected: not-a-virus:AdWare.Win32.Altnet.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\24F87C59.htm Infected: Exploit.HTML.IframeBof skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FA701C.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FA701C.zip/BlackBox.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FA701C.zip/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FA701C.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FA701C.zip/Beyond.class Infected: Trojan-Downloader.Java.OpenStream.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FA701C.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\24FA701C.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\25594636.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\25932573.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\26B31437.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\26D44C95.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\26DD3608.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\28DB1531.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\28F257B9.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\2A8A3B56.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\2A9A23C1.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\2A9D4DBD.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\2ACA67AA.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\2AEA0B86.htm Infected: Exploit.HTML.CodeBaseExec skipped
C:\Program Files\Norton AntiVirus\Quarantine\2B2D6EA3.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\2B375E03.htm Infected: Trojan-Downloader.VBS.Small.dn skipped
C:\Program Files\Norton AntiVirus\Quarantine\2B4A6882.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\2B4F0D41.exe Infected: Trojan-Downloader.Win32.Tiny.go skipped
C:\Program Files\Norton AntiVirus\Quarantine\2BF35374.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\2C037A6B.gif Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\2C2B3D81.cla Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\2D4D03F5.exe Infected: Trojan-Clicker.Win32.Small.kj skipped
C:\Program Files\Norton AntiVirus\Quarantine\2FAB395F.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\318F5C7E.htm Infected: Exploit.HTML.IframeBof skipped
C:\Program Files\Norton AntiVirus\Quarantine\331D1265.tmp Infected: Trojan.Java.ClassLoader.i skipped
C:\Program Files\Norton AntiVirus\Quarantine\33203C61.tmp Infected: Trojan.Java.ClassLoader.k skipped
C:\Program Files\Norton AntiVirus\Quarantine\3323665E.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\3327105A.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\339F0158.cla Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\339F0158.htm Suspicious: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\34421E77.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\34EE5BE5.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\34F205E1.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\34FD047B.tmp Suspicious: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\35074A27.exe Infected: Trojan-Downloader.Win32.Dyfuca.dp skipped
C:\Program Files\Norton AntiVirus\Quarantine\350A7424.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\350E1E20.dll Infected: not-a-virus:AdWare.Win32.WebSearch.o skipped
C:\Program Files\Norton AntiVirus\Quarantine\351E700E.exe/data0001 Infected: not-a-virus:AdWare.Win32.WebRebates.g skipped
C:\Program Files\Norton AntiVirus\Quarantine\351E700E.exe NSIS: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\351E700E.exe CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\35244407.dll Infected: not-a-virus:AdWare.Win32.DlMax.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\35286E03.dll Infected: not-a-virus:AdWare.Win32.DlMax.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\352B1800.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\352B1800.exe/enhtb.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\352B1800.exe CAB: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\352B1800.exe MimarSinan: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\352B1800.exe UPX: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\352B1800.exe CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\352E41FC.exe Infected: not-a-virus:AdWare.Win32.NoName.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\35316BF9.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\35383FF1.exe Infected: Trojan-Spy.Win32.VB.eh skipped
C:\Program Files\Norton AntiVirus\Quarantine\353B69EE.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\353E13EA.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\354567E3.exe/InpB/SskBho.dll Infected: not-a-virus:AdWare.Win32.TotalVelocity.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\354567E3.exe/InpB/SskCore.dll Infected: not-a-virus:AdWare.Win32.TotalVelocity.ag skipped
C:\Program Files\Norton AntiVirus\Quarantine\354567E3.exe/InpB/Ssk.exe Infected: not-a-virus:AdWare.Win32.TotalVelocity.ag skipped
C:\Program Files\Norton AntiVirus\Quarantine\354567E3.exe/InpB Infected: not-a-virus:AdWare.Win32.TotalVelocity.ag skipped
C:\Program Files\Norton AntiVirus\Quarantine\354567E3.exe CAB: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\354567E3.exe CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\354C3BDC.exe Infected: not-a-virus:AdWare.Win32.WebSearch.n skipped
C:\Program Files\Norton AntiVirus\Quarantine\354F65D8.exe Infected: not-a-virus:AdWare.Win32.WebSearch.n skipped
C:\Program Files\Norton AntiVirus\Quarantine\35520FD5.exe Infected: not-a-virus:AdWare.Win32.WebSearch.n skipped
C:\Program Files\Norton AntiVirus\Quarantine\355539D1.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\355963CD.dll Infected: Trojan-Downloader.Win32.Dyfuca.dt skipped
C:\Program Files\Norton AntiVirus\Quarantine\35715375.exe Infected: Trojan.Win32.Agent.ay skipped
C:\Program Files\Norton AntiVirus\Quarantine\36264072.zip/BlackBox.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\36264072.zip/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\36264072.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\36264072.zip/Beyond.class Infected: Trojan-Downloader.Java.OpenStream.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\36264072.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\36264072.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\38D55AF3.htm Infected: Exploit.HTML.IframeBof skipped
C:\Program Files\Norton AntiVirus\Quarantine\39501F5A.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\39D07969.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B8A776E.tmp Infected: Trojan.Java.ClassLoader.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B962800.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\3B971F60.dll Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D10222D.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D2F6A8D.exe Infected: Trojan-Downloader.Win32.Small.fgq skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D650F77.cla Infected: Trojan.Java.ClassLoader.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D650F77.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D671201.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\3D960542.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\3F97450D.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\3FA716FB.php Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\40B41FD2.dll Infected: Virus.Win32.Nsag.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\42135F62.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\42667BAE.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/web.exe Infected: Virus.Win32.Bube.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/Counter.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/VerifierBug.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/Worker.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/Xeyond.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/web.exe Infected: Virus.Win32.Bube.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/Counter.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/VerifierBug.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/Worker.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar/Xeyond.class Infected: Trojan.Java.Femad skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar ZIP: infected - 10 skipped
C:\Program Files\Norton AntiVirus\Quarantine\428D7383.jar CryptFF: infected - 10 skipped
C:\Program Files\Norton AntiVirus\Quarantine\43970691.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\44C345F4.ztp Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\460D29BC.exe Infected: not-a-virus:AdWare.Win32.MediaMotor.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\461D7BAA.exe Infected: not-a-virus:AdWare.Win32.MediaMotor.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\46244FA3.exe Infected: Trojan-Downloader.Win32.QDown.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\4627799F.exe Infected: not-a-virus:AdWare.Win32.E2Give.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\462A239C.exe Infected: not-a-virus:AdWare.Win32.E2Give.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\462D4D98.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\46317795.exe/enhtb.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\46317795.exe CAB: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\46317795.exe MimarSinan: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\46317795.exe UPX: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\46317795.exe CryptFF: infected - 1 skipped
C:\Program Files\Norton AntiVirus\Quarantine\463A758A.exe Infected: not-a-virus:AdWare.Win32.NoName.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\4644737F.exe Infected: Trojan-Downloader.Win32.Dyfuca.de skipped
C:\Program Files\Norton AntiVirus\Quarantine\464B4778.exe Infected: Trojan-Downloader.Win32.Dyfuca.de skipped
C:\Program Files\Norton AntiVirus\Quarantine\464E7174.exe Infected: Trojan-Downloader.Win32.Dyfuca.de skipped
C:\Program Files\Norton AntiVirus\Quarantine\4655456D.ocx Infected: Trojan-Downloader.Win32.VB.ez skipped
C:\Program Files\Norton AntiVirus\Quarantine\465B1966.ocx Infected: Trojan-Downloader.Win32.VB.ez skipped
C:\Program Files\Norton AntiVirus\Quarantine\465E4362.dll Infected: Trojan-Downloader.Win32.Dyfuca.gen skipped
C:\Program Files\Norton AntiVirus\Quarantine\46626D5F.dll Infected: Trojan-Downloader.Win32.Dyfuca.gen skipped
C:\Program Files\Norton AntiVirus\Quarantine\466B6B54.exe Infected: Trojan-Dropper.Win32.SurfSide.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\466F1550.dll Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\48122B0F Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\482C3870.cla Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\482C3870.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\483678E7 Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\483922E4 Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\490109A4.exe Infected: not-a-virus:AdWare.Win32.WebRebates.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\4A8849E4.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\4A924676.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\4AEA31F6.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B321767.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\4B56653F.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\4BBC28D6.htm Suspicious: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\4D244C64.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\4DEB4D89.gif Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\4EB903B2.tmp Infected: Trojan-Downloader.Java.OpenStream.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\4EEA1871.tmp Infected: Trojan.Java.ClassLoader.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\4F025083.htm Suspicious: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\4F201C96.tmp Infected: Trojan.Java.ClassLoader.u skipped
C:\Program Files\Norton AntiVirus\Quarantine\4FF34303.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\509B053E.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\509D7FC2.cla Infected: Trojan.Java.ClassLoader.u skipped
C:\Program Files\Norton AntiVirus\Quarantine\52032AB3.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\54081726.zip/BlackBox.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\54081726.zip/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\54081726.zip/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped
C:\Program Files\Norton AntiVirus\Quarantine\54081726.zip ZIP: infected - 3 skipped
C:\Program Files\Norton AntiVirus\Quarantine\54081726.zip CryptFF: infected - 3 skipped
C:\Program Files\Norton AntiVirus\Quarantine\55267154.tmp Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\56A25A13.cla Infected: Trojan.Java.ClassLoader.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\56A5040F.cla Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\56A5040F.zip/a.class Infected: Trojan.Java.ClassLoader.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\56A5040F.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\56A5040F.zip/VerifierBug.class Infected: Trojan.Java.ClassLoader.u skipped
C:\Program Files\Norton AntiVirus\Quarantine\56A5040F.zip ZIP: infected - 3 skipped
C:\Program Files\Norton AntiVirus\Quarantine\56A5040F.zip CryptFF: infected - 3 skipped
C:\Program Files\Norton AntiVirus\Quarantine\59790D6E.cla Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\599E5D29.dll Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\Program Files\Norton AntiVirus\Quarantine\59F54609.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A742B7D.tmp Infected: Trojan.Java.ClassLoader.l skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A857D6B.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\5A882768.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B393C14.dll Infected: not-a-virus:AdWare.Win32.WebSearch.o skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B4D37FE.dll Infected: not-a-virus:AdWare.Win32.NoName.m skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B5061FB.dll Infected: not-a-virus:AdWare.Win32.BHO.l skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B5061FB.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B530BF7.exe Infected: not-a-virus:AdWare.Win32.WebSearch.f skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B5635F4.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B5A5FF0.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B5D09EC.exe Infected: not-a-virus:AdWare.Win32.WebSearch.x skipped
C:\Program Files\Norton AntiVirus\Quarantine\5B6033E9.exe Infected: not-a-virus:AdWare.Win32.WebSearch.n skipped
C:\Program Files\Norton AntiVirus\Quarantine\5E5E52D0.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\622C4987.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\623D0034.so Infected: Trojan-Downloader.Win32.Small.baz skipped
C:\Program Files\Norton AntiVirus\Quarantine\62402A30.tmp Infected: Trojan.Win32.Puper.an skipped
C:\Program Files\Norton AntiVirus\Quarantine\634E6369.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\638753BA.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\639148AF.tmp Infected: Trojan-Downloader.Java.OpenConnection.aj skipped
C:\Program Files\Norton AntiVirus\Quarantine\639472AB.tmp Infected: Trojan-Downloader.Java.OpenConnection.aj skipped
C:\Program Files\Norton AntiVirus\Quarantine\639B46A4.tmp Infected: Trojan.Java.ClassLoader.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\639E70A0.tmp Infected: Trojan.Java.ClassLoader.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\64FB154E.tmp Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\64FF3F4B.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\66483A8D.exe Infected: not-a-virus:AdWare.Win32.WebSearch.x skipped
C:\Program Files\Norton AntiVirus\Quarantine\669F07C3.php Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\66C83A1C.swf Infected: Trojan-Downloader.SWF.Gida.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\697B449E.htm Infected: Exploit.HTML.IframeBof skipped
C:\Program Files\Norton AntiVirus\Quarantine\6C3C3196.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\6C405B92.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CB25337.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CBF593F.exe Infected: Trojan-Spy.Win32.Goldun.ms skipped
C:\Program Files\Norton AntiVirus\Quarantine\6CC52D38.htm Infected: Trojan-Downloader.JS.Psyme.ea skipped
C:\Program Files\Norton AntiVirus\Quarantine\6DB211C7.exe Infected: Trojan-Downloader.Win32.Tibs.if skipped
C:\Program Files\Norton AntiVirus\Quarantine\6DC709E3.htm Infected: Trojan-Downloader.JS.Psyme.ap skipped
C:\Program Files\Norton AntiVirus\Quarantine\6E8F0B07.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\6FA309BD.dll Infected: not-a-virus:Downloader.Win32.PopCap.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\7067008F.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\72D57C54.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\73B7211B.tmp Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\74B41C26.exe Infected: Trojan.Win32.Agent.bxj skipped
C:\Program Files\Norton AntiVirus\Quarantine\751A54B7.exe Infected: Trojan-Downloader.Win32.Stubby.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\761B0A10.tmp Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\7748442D.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\78E966EB.exe Infected: Trojan-Dropper.Win32.SurfSide.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\79524C65.cla Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\79531EBC.dll Infected: Trojan.Win32.Small.ev skipped
C:\Program Files\Norton AntiVirus\Quarantine\795576AB.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\797D6A56.exe Infected: Trojan-PSW.Win32.Zbot.cu skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A516DAA.cla Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A516DAA.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.cla Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.htm Infected: Exploit.VBS.Phel.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7A5417A6.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7ACD2D15.htm Infected: Constructor.Perl.Msdds.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B135872.dll Infected: not-a-virus:AdWare.Win32.Altnet.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B16026E.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B192C6B.dll Infected: not-a-virus:AdWare.Win32.Altnet.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B1D5667.dll Infected: not-a-virus:AdWare.Win32.Altnet.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B200063.dll Infected: not-a-virus:AdWare.Win32.Altnet.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B232A60.tmp Infected: Trojan-Downloader.Win32.Intexp.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B26545C.exe Infected: Trojan-Downloader.Win32.Intexp.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B2A7E59.exe Infected: Trojan-Downloader.Win32.Intexp.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B337C4E.dll Infected: not-a-virus:AdWare.Win32.Perfnav.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B37264A.exe Infected: Trojan-Downloader.Win32.Small.afq skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B3A5047.exe Infected: not-a-virus:AdWare.Win32.180Solutions skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B402440.exe Infected: not-a-virus:AdWare.Win32.BetterInternet skipped
C:\Program Files\Norton AntiVirus\Quarantine\7BDF73E7.htm Infected: Constructor.Perl.Msdds.b skipped
C:\Program Files\Norton AntiVirus\Quarantine\7D416A09.exe Infected: Trojan.Win32.Agent.ep skipped
C:\Program Files\Norton AntiVirus\Quarantine\7DE35981.tmp Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\7EB8573E.htm Infected: Exploit.HTML.IframeBof skipped
C:\Program Files\Norton AntiVirus\Quarantine\7F00685D.exe Infected: Trojan-Downloader.Win32.Tiny.ed skipped
C:\Program Files\Norton AntiVirus\Quarantine\7F031259.exe Infected: Trojan-Downloader.Win32.Tiny.ed skipped
C:\Program Files\Norton AntiVirus\Quarantine\7F243636.exe Infected: Trojan-Downloader.Win32.Tiny.ed skipped
C:\Program Files\Norton AntiVirus\Quarantine\7F2E342B.exe Infected: Trojan-Downloader.Win32.Tiny.ed skipped
C:\Program Files\Norton AntiVirus\Quarantine\7F4272B2.dll Infected: Trojan-Downloader.Win32.Delf.pa skipped
C:\QooBox\Quarantine\C\WINDOWS\SYSTEM32\DRIVERS\bwtpxbkt.dat.vir Object is locked skipped
C:\QooBox\Quarantine\C\winqwyf.exe.vir Infected: Trojan-Spy.Win32.Zbot.nm skipped
C:\QooBox\Quarantine\catchme2008-01-27_ 94954.18.zip/bwtpxbkt.dat Infected: Rootkit.Win32.Agent.ux skipped
C:\QooBox\Quarantine\catchme2008-01-27_ 94954.18.zip ZIP: infected - 1 skipped
C:\System Volume Information\_restore{11B4CBB0-31B0-483C-A4FE-D6E9E8C1A928}\RP121\A0008271.exe Infected: Trojan-Spy.Win32.Zbot.nm skipped
C:\System Volume Information\_restore{11B4CBB0-31B0-483C-A4FE-D6E9E8C1A928}\RP122\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\default Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\sam Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\security Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\software Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\system Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\winqwyf.exe Infected: Trojan-Spy.Win32.Zbot.nm skipped
Scan process completed.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:36, on 2008-01-29
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www6.comcast.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar5.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar5.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) -
http://www.comcastsupport.com/sdcxuser/asp/tgctlsr.cab
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} - http://www.musicnotes.com/download/mnviewer.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -
http://www.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} -
http://a1540.g.akamai.net/7/1540/52/200207…meInstaller.exe
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-48.cab
O16 - DPF: {639658F3-B141-4D6B-B936-226F75A5EAC3} (CPlayFirstDinerDash2Control Object) -
http://zone.msn.com/bingame/dsh2/default/D…h2.1.0.0.55.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/…b?1121526560639
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {64D01C7F-810D-446E-A07E-16C764235644} (AtlAtomadersCtlAttrib Class) -
http://zone.msn.com/bingame/amad/default/atomaders.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/microsoftu…b?1200951397108
O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload Manager Class) -
http://www.kodakgallery.com/downloads/BUM/…_2/axofupld.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) -
http://zone.msn.com/bingame/amun/default/mjolauncher.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) -
http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) -
https://media.pineconeresearch.com/ActiveX/…loadcontrol.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) -
http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) -
http://zone.msn.com/bingame/cnma/default/ct.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/popcaploader_v10.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E6EB803E-DD89-11D3-80C4-0050DA2E09D0} -
http://prints.picturecenter.kodak.com/acti…loadControl.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\System32\ScsiAccess.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
–
End of file - 10242 bytes
ComboFix 08-01-23.1C - Mike 2008-01-29 15:20:24.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.60 [GMT -5:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Mike\Desktop\CFScript.txt
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
FILE
C:\WINDOWS\imsins.BAK
C:\winqwyf.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\imsins.BAK
C:\winqwyf.exe
.
((((((((((((((((((((((((( Files Created from 2007-12-28 to 2008-01-29 )))))))))))))))))))))))))))))))
.
2008-01-28 20:19 . 2008-01-28 20:19 d——– C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-28 20:03 . 2005-10-20 17:33 991,232 –a—— C:\WINDOWS\SYSTEM32\esent.dll
2008-01-28 00:37 . 2005-02-24 13:21 22,752 –a—— C:\WINDOWS\SYSTEM32\spupdsvc.exe
2008-01-27 18:24 . 2006-09-13 00:09 1,110,528 –a—— C:\WINDOWS\SYSTEM32\msxml3.dll
2008-01-27 18:24 . 2006-09-13 00:09 1,110,528 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\msxml3.dll
2008-01-27 18:23 . 2006-07-13 08:46 8,353,280 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\shell32.dll
2008-01-27 18:23 . 2006-06-22 00:19 1,350,144 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\query.dll
2008-01-27 18:23 . 2004-08-20 17:01 700,928 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\sxs.dll
2008-01-27 18:23 . 2005-04-25 20:58 173,312 –a–c— C:\WINDOWS\SYSTEM32\DLLCACHE\mrxdav.sys
2008-01-27 18:23 . 2005-08-22 13:36 154,624 –a—— C:\WINDOWS\SYSTEM32\netman.dll
2008-01-27 18:23 . 2004-08-20 17:01 82,432 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\fldrclnr.dll
2008-01-27 18:23 . 2006-06-22 00:19 64,512 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\ciodm.dll
2008-01-27 18:23 . 2006-01-03 22:37 64,000 –a—— C:\WINDOWS\SYSTEM32\webclnt.dll
2008-01-27 18:22 . 2004-08-20 17:01 700,928 –a—— C:\WINDOWS\SYSTEM32\sxs.dll
2008-01-27 18:22 . 2006-08-25 04:14 595,968 –a—— C:\WINDOWS\SYSTEM32\xpsp2res.dll
2008-01-27 18:22 . 2006-08-25 10:53 561,664 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\comctl32.dll
2008-01-27 18:22 . 2006-05-05 04:31 433,152 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\mrxsmb.sys
2008-01-27 18:22 . 2006-05-05 04:40 166,656 —–c— C:\WINDOWS\SYSTEM32\DLLCACHE\rdbss.sys
2008-01-27 18:22 . 2004-10-27 20:29 92,160 –a–c— C:\WINDOWS\SYSTEM32\DLLCACHE\cscdll.dll
2008-01-27 18:22 . 2004-10-27 20:29 92,160 –a—— C:\WINDOWS\SYSTEM32\cscdll.dll
2008-01-27 18:22 . 2004-08-20 17:01 82,432 –a—— C:\WINDOWS\SYSTEM32\fldrclnr.dll
2008-01-27 17:10 . 2002-08-29 01:05 245,920 –a—— C:\cmldr
2008-01-27 17:10 . 2008-01-25 01:18 194 –a—— C:\Boot.bak
2008-01-26 19:04 . 2000-08-31 08:00 51,200 –a—— C:\WINDOWS\Nircmd.exe
2008-01-26 18:12 . 2008-01-26 18:12 d——– C:\WINDOWS\ERUNT
2008-01-26 11:08 . 2008-01-26 11:08 d——– C:\Program Files\Trend Micro
2008-01-26 10:03 . 2008-01-26 10:03 d——– C:\WINDOWS\ServicePackFiles
2008-01-26 09:57 . 2002-08-29 05:41 1,622,528 –a—— C:\WINDOWS\SYSTEM32\netshell.dll
2008-01-26 09:56 . 2005-05-04 14:45 2,890,240 –a—— C:\WINDOWS\SYSTEM32\msi.dll
2008-01-26 09:55 . 2002-08-29 05:41 1,004,032 –a—— C:\WINDOWS\explorer.exe
2008-01-25 16:11 . 2008-01-25 16:11 d——– C:\Deckard
2008-01-25 16:07 . 2008-01-25 16:07 d——– C:\Intel
2008-01-24 22:29 . 2007-05-30 07:10 10,872 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\AvgAsCln.sys
2008-01-24 17:50 . 2008-01-24 17:50 25,600 –a—— C:\WINDOWS\SYSTEM32\Partizan.exe
2008-01-24 17:50 . 2008-01-24 17:56 97 –a—— C:\WINDOWS\SYSTEM32\Partizan.RRI
2008-01-24 17:43 . C:\WINDOWS\(2) C:\ComboFix\winstart.bat
2008-01-24 17:31 . 2008-01-24 17:31 d——– C:\Program Files\Common Files\Wise Installation Wizard
2008-01-22 18:04 . 2007-07-30 19:19 271,224 –a—— C:\WINDOWS\SYSTEM32\mucltui.dll
2008-01-22 18:04 . 2007-07-30 19:19 30,072 –a—— C:\WINDOWS\SYSTEM32\mucltui.dll.mui
2008-01-22 17:37 . 2008-01-22 17:37 54,156 –ah—– C:\WINDOWS\QTFont.qfn
2008-01-22 17:37 . 2008-01-22 17:37 1,409 –a—— C:\WINDOWS\QTFont.for
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 18:57 ——— d—–w C:\Program Files\Fonts
2008-01-25 22:27 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-01-25 22:27 ——— d—–w C:\Program Files\Common Files\Macromedia
2008-01-25 21:09 ——— d—–w C:\Program Files\Microsoft AntiSpyware
2008-01-24 22:55 ——— d—–w C:\Program Files\LIVEUPDATE
2008-01-24 22:34 ——— d—–w C:\Program Files\Lavasoft
2008-01-23 09:25 ——— d—–w C:\Program Files\Common Files\Symantec Shared
2008-01-06 04:18 ——— d—–w C:\Program Files\Java
2007-12-14 16:32 12,632 —-a-w C:\WINDOWS\SYSTEM32\lsdelete.exe
2007-12-01 22:49 ——— d—–w C:\Program Files\MSN Games
2007-10-31 18:03 245,408 —-a-w C:\WINDOWS\SYSTEM32\unicows.dll
2004-11-22 23:03 25,184,485 —-a-w C:\Program Files\NV11ESD.exe
2004-07-21 21:20 8,192 –sha-w C:\Program Files\Thumbs.db
.
((((((((((((((((((((((((((((( snapshot@2008-01-27_ 9.56.26.81 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-03-02 18:09:29 56,832 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\authz.dll
+ 2005-03-02 00:57:44 2,135,552 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\ntkrnlmp.exe
+ 2005-03-02 00:34:40 2,056,832 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\ntkrnlpa.exe
+ 2005-03-02 00:34:42 2,015,232 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\ntkrpamp.exe
+ 2005-03-02 00:59:53 2,179,328 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\ntoskrnl.exe
+ 2005-03-02 18:09:30 577,024 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\user32.dll
+ 2005-03-02 01:06:57 1,836,288 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\win32k.sys
+ 2005-03-02 18:09:30 291,328 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\winsrv.dll
+ 2005-03-02 18:19:56 62,464 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\authz.dll
+ 2005-03-02 01:02:13 2,135,552 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlmp.exe
+ 2005-03-02 00:36:40 2,056,832 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
+ 2005-03-02 00:36:41 2,015,232 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrpamp.exe
+ 2005-03-02 01:04:22 2,179,456 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
+ 2005-03-02 18:19:56 577,024 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
+ 2005-03-02 01:11:25 1,836,160 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\win32k.sys
+ 2005-03-02 18:19:56 291,328 —-a-w C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\winsrv.dll
+ 2005-02-25 00:35:06 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB890859\spmsg.dll
+ 2005-02-25 00:35:06 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB890859\spuninst.exe
+ 2005-02-25 00:35:06 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB890859\update\spcustom.dll
+ 2005-02-25 00:35:06 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
+ 2005-02-25 00:35:08 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB890859\update\updspapi.dll
+ 2005-07-08 16:27:56 249,344 —-a-w C:\WINDOWS\$hf_mig$\KB893756\SP2GDR\tapisrv.dll
+ 2005-07-08 16:28:58 249,344 —-a-w C:\WINDOWS\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
+ 2005-02-25 01:35:06 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB893756\spmsg.dll
+ 2005-02-25 01:35:06 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB893756\spuninst.exe
+ 2005-07-08 00:27:08 30,720 —-a-w C:\WINDOWS\$hf_mig$\KB893756\update\arpidfix.exe
+ 2005-02-25 01:35:06 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB893756\update\spcustom.dll
+ 2005-02-25 01:35:06 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
+ 2005-02-25 01:35:08 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB893756\update\updspapi.dll
+ 2005-05-26 23:22:01 10,752 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2GDR\hh.exe
+ 2005-05-27 02:04:27 41,472 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2GDR\hhsetup.dll
+ 2005-05-27 02:04:27 155,136 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2GDR\itircl.dll
+ 2005-05-27 02:04:27 137,216 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2GDR\itss.dll
+ 2005-05-26 23:26:50 10,752 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hh.exe
+ 2005-05-27 02:08:59 41,472 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\hhsetup.dll
+ 2005-05-27 02:08:59 155,136 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itircl.dll
+ 2005-05-27 02:08:59 137,216 —-a-w C:\WINDOWS\$hf_mig$\KB896358\SP2QFE\itss.dll
+ 2005-02-25 01:35:06 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB896358\spmsg.dll
+ 2005-02-25 01:35:06 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB896358\spuninst.exe
+ 2005-02-25 01:35:06 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB896358\update\spcustom.dll
+ 2005-02-25 01:35:06 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
+ 2005-02-25 01:35:08 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB896358\update\updspapi.dll
+ 2005-05-10 23:45:48 75,776 —-a-w C:\WINDOWS\$hf_mig$\KB896428\SP2GDR\telnet.exe
+ 2005-05-10 23:51:10 75,776 —-a-w C:\WINDOWS\$hf_mig$\KB896428\SP2QFE\telnet.exe
+ 2005-02-25 01:35:06 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB896428\spmsg.dll
+ 2005-02-25 01:35:06 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB896428\spuninst.exe
+ 2005-02-25 01:35:06 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB896428\update\spcustom.dll
+ 2005-02-25 01:35:06 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
+ 2005-02-25 01:35:08 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB896428\update\updspapi.dll
+ 2005-02-25 03:35:05 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB898461\spmsg.dll
+ 2005-02-25 03:35:05 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB898461\spuninst.exe
+ 2005-02-25 03:35:05 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB898461\spupdsvc.exe
+ 2005-02-25 03:35:05 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB898461\update\spcustom.dll
+ 2005-02-25 03:35:05 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
+ 2005-02-25 03:35:06 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB898461\update\updspapi.dll
+ 2005-09-10 01:53:41 2,067,968 —-a-w C:\WINDOWS\$hf_mig$\KB901017\SP2GDR\cdosys.dll
+ 2005-09-10 01:48:47 2,068,480 —-a-w C:\WINDOWS\$hf_mig$\KB901017\SP2QFE\cdosys.dll
+ 2005-02-25 01:35:06 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB901017\spmsg.dll
+ 2005-02-25 01:35:06 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB901017\spuninst.exe
+ 2005-09-09 21:26:26 30,720 —-a-w C:\WINDOWS\$hf_mig$\KB901017\update\arpidfix.exe
+ 2005-02-25 01:35:06 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB901017\update\spcustom.dll
+ 2005-02-25 01:35:06 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
+ 2005-02-25 01:35:08 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB901017\update\updspapi.dll
+ 2005-06-29 01:46:00 254,976 —-a-w C:\WINDOWS\$hf_mig$\KB901214\SP2GDR\icm32.dll
+ 2005-06-29 01:46:00 74,240 —-a-w C:\WINDOWS\$hf_mig$\KB901214\SP2GDR\mscms.dll
+ 2005-06-29 01:49:55 254,976 —-a-w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\icm32.dll
+ 2005-06-29 01:49:55 73,728 —-a-w C:\WINDOWS\$hf_mig$\KB901214\SP2QFE\mscms.dll
+ 2005-02-25 01:35:06 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB901214\spmsg.dll
+ 2005-02-25 01:35:06 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB901214\spuninst.exe
+ 2005-02-25 01:35:06 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB901214\update\spcustom.dll
+ 2005-02-25 01:35:06 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
+ 2005-02-25 01:35:08 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB901214\update\updspapi.dll
+ 2005-08-22 18:29:46 197,632 —-a-w C:\WINDOWS\$hf_mig$\KB905414\SP2GDR\netman.dll
+ 2005-08-22 18:24:55 197,632 —-a-w C:\WINDOWS\$hf_mig$\KB905414\SP2QFE\netman.dll
+ 2005-02-25 03:35:05 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB905414\spmsg.dll
+ 2005-02-25 03:35:05 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB905414\spuninst.exe
+ 2005-08-19 23:50:31 30,720 —-a-w C:\WINDOWS\$hf_mig$\KB905414\update\arpidfix.exe
+ 2005-02-25 03:35:05 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB905414\update\spcustom.dll
+ 2005-02-25 03:35:05 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
+ 2005-02-25 03:35:06 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB905414\update\updspapi.dll
+ 2005-08-23 03:35:42 123,392 —-a-w C:\WINDOWS\$hf_mig$\KB905749\SP2GDR\umpnpmgr.dll
+ 2005-08-23 03:39:54 123,392 —-a-w C:\WINDOWS\$hf_mig$\KB905749\SP2QFE\umpnpmgr.dll
+ 2005-02-25 01:35:06 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB905749\spmsg.dll
+ 2005-02-25 01:35:06 209,632 —-a-w C:\WINDOWS\$hf_mig$\KB905749\spuninst.exe
+ 2005-08-22 23:01:30 30,720 —-a-w C:\WINDOWS\$hf_mig$\KB905749\update\arpidfix.exe
+ 2005-02-25 01:35:06 22,240 —-a-w C:\WINDOWS\$hf_mig$\KB905749\update\spcustom.dll
+ 2005-02-25 01:35:06 718,048 —-a-w C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
+ 2005-02-25 01:35:08 371,936 —-a-w C:\WINDOWS\$hf_mig$\KB905749\update\updspapi.dll
+ 2005-10-17 21:14:45 80,896 —-a-w C:\WINDOWS\$hf_mig$\KB908519\SP2GDR\fontsub.dll
+ 2005-10-17 21:14:46 118,272 —-a-w C:\WINDOWS\$hf_mig$\KB908519\SP2GDR\t2embed.dll
+ 2005-10-17 21:21:19 80,896 —-a-w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\fontsub.dll
+ 2005-10-17 21:21:19 117,760 —-a-w C:\WINDOWS\$hf_mig$\KB908519\SP2QFE\t2embed.dll
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB908519\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB908519\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB908519\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
+ 2005-10-12 23:12:33 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB908519\update\updspapi.dll
+ 2005-12-29 02:54:35 280,064 —-a-w C:\WINDOWS\$hf_mig$\KB912919\SP2GDR\gdi32.dll
+ 2005-12-29 03:04:05 280,064 —-a-w C:\WINDOWS\$hf_mig$\KB912919\SP2QFE\gdi32.dll
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB912919\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB912919\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB912919\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB912919\update\update.exe
+ 2005-10-12 23:12:33 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB912919\update\updspapi.dll
+ 2006-05-05 09:41:45 453,120 —-a-w C:\WINDOWS\$hf_mig$\KB914389\SP2GDR\mrxsmb.sys
+ 2006-05-05 09:47:57 174,592 —-a-w C:\WINDOWS\$hf_mig$\KB914389\SP2GDR\rdbss.sys
+ 2006-05-05 10:16:39 454,400 —-a-w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\mrxsmb.sys
+ 2006-05-05 10:22:52 174,592 —-a-w C:\WINDOWS\$hf_mig$\KB914389\SP2QFE\rdbss.sys
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB914389\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB914389\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB914389\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
+ 2005-10-12 23:12:33 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB914389\update\updspapi.dll
+ 2006-07-13 08:48:58 202,240 —-a-w C:\WINDOWS\$hf_mig$\KB919007\SP2GDR\rmcast.sys
+ 2006-07-13 11:43:08 202,496 —-a-w C:\WINDOWS\$hf_mig$\KB919007\SP2QFE\rmcast.sys
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB919007\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB919007\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB919007\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
+ 2005-10-12 23:12:33 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB919007\update\updspapi.dll
+ 2006-07-21 08:24:43 72,704 —-a-w C:\WINDOWS\$hf_mig$\KB920670\SP2GDR\hlink.dll
+ 2006-07-21 08:26:49 72,704 —-a-w C:\WINDOWS\$hf_mig$\KB920670\SP2QFE\hlink.dll
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB920670\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB920670\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB920670\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
+ 2005-10-12 23:12:33 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB920670\update\updspapi.dll
+ 2006-08-25 15:45:58 617,472 —-a-w C:\WINDOWS\$hf_mig$\KB923191\SP2QFE\comctl32.dll
+ 2005-10-12 23:12:25 14,048 —-a-w C:\WINDOWS\$hf_mig$\KB923191\spmsg.dll
+ 2005-10-12 23:12:26 213,216 —-a-w C:\WINDOWS\$hf_mig$\KB923191\spuninst.exe
+ 2005-10-12 23:12:25 22,752 —-a-w C:\WINDOWS\$hf_mig$\KB923191\update\spcustom.dll
+ 2005-10-12 23:12:28 716,000 —-a-w C:\WINDOWS\$hf_mig$\KB923191\update\update.exe
+ 2006-01-19 19:29:21 371,424 —-a-w C:\WINDOWS\$hf_mig$\KB923191\update\updspapi.dll
- 2001-08-18 12:00:00 150,272 -c—-w C:\WINDOWS\$NtUninstallKB824105$\netbt.sys
+ 2002-08-29 09:01:58 157,056 -c—-w C:\WINDOWS\$NtUninstallKB824105$\netbt.sys
+ 2004-12-01 01:22:40 21,504 -c—-w C:\WINDOWS\$NtUninstallKB888302$\spcustom.dll
+ 2004-11-30 19:46:38 7,168 -c—-w C:\WINDOWS\$NtUninstallKB888302$\spmsg.dll
+ 2004-12-01 01:22:42 169,984 -c—-w C:\WINDOWS\$NtUninstallKB888302$\spuninst.exe
+ 2004-12-01 01:22:42 169,984 -c—-w C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
+ 2001-08-18 12:00:00 87,040 -c—-w C:\WINDOWS\$NtUninstallKB888302$\srvsvc.dll
+ 2004-11-30 19:46:40 654,848 -c—-w C:\WINDOWS\$NtUninstallKB888302$\update.exe
+ 2001-08-18 12:00:00 51,200 -c—-w C:\WINDOWS\$NtUninstallKB890859$\authz.dll
+ 2004-10-22 07:29:14 1,900,032 -c—-w C:\WINDOWS\$NtUninstallKB890859$\ntkrnlmp.exe
+ 2004-10-22 07:29:40 1,955,840 -c—-w C:\WINDOWS\$NtUninstallKB890859$\ntkrnlpa.exe
+ 2004-10-22 07:29:42 1,928,704 -c—-w C:\WINDOWS\$NtUninstallKB890859$\ntkrpamp.exe
+ 2004-10-22 08:33:31 2,088,448 -c—-w C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe
+ 2005-02-25 00:35:06 209,632 -c—-w C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe
+ 2005-02-25 00:35:08 371,936 -c—-w C:\WINDOWS\$NtUninstallKB890859$\spuninst\updspapi.dll
+ 2002-11-01 20:26:46 528,896 -c—-w C:\WINDOWS\$NtUninstallKB890859$\user32.dll
+ 2002-10-23 13:55:02 1,694,336 -c—-w C:\WINDOWS\$NtUninstallKB890859$\win32k.sys
+ 2002-11-01 20:26:44 272,896 -c—-w C:\WINDOWS\$NtUninstallKB890859$\winsrv.dll
+ 2005-02-25 01:35:06 209,632 -c—-w C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe
+ 2005-02-25 01:35:08 371,936 -c—-w C:\WINDOWS\$NtUninstallKB896428$\spuninst\updspapi.dll
+ 2002-08-29 10:41:28 71,168 -c—-w C:\WINDOWS\$NtUninstallKB896428$\telnet.exe
+ 2001-07-16 20:57:00 1,069,056 -c—-w C:\WINDOWS\$NtUninstallKB898458$\orun32.exe
+ 2005-02-24 18:23:26 209,632 -c—-w C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe
+ 2005-02-24 18:24:48 371,936 -c—-w C:\WINDOWS\$NtUninstallKB898458$\spuninst\updspapi.dll
+ 2002-08-29 10:40:56 236,032 -c—-w C:\WINDOWS\$NtUninstallKB901214$\icm32.dll
+ 2002-08-29 10:41:02 68,096 -c—-w C:\WINDOWS\$NtUninstallKB901214$\mscms.dll
+ 2005-02-25 01:35:06 209,632 -c—-w C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe
+ 2005-02-25 01:35:08 371,936 -c—-w C:\WINDOWS\$NtUninstallKB901214$\spuninst\updspapi.dll
+ 2003-05-30 13:00:02 1,246,208 -c—-w C:\WINDOWS\$NtUninstallKB904706$\quartz.dll
+ 2005-02-24 18:23:26 209,632 -c—-w C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe
+ 2005-02-24 18:24:48 371,936 -c—-w C:\WINDOWS\$NtUninstallKB904706$\spuninst\updspapi.dll
+ 2002-08-29 10:41:08 154,112 -c—-w C:\WINDOWS\$NtUninstallKB905414$\netman.dll
+ 2005-02-25 03:35:05 209,632 -c—-w C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe
+ 2005-02-25 03:35:06 371,936 -c—-w C:\WINDOWS\$NtUninstallKB905414$\spuninst\updspapi.dll
+ 2005-02-25 01:35:06 209,632 -c—-w C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe
+ 2005-02-25 01:35:08 371,936 -c—-w C:\WINDOWS\$NtUninstallKB905749$\spuninst\updspapi.dll
+ 2002-08-29 10:41:18 107,008 -c—-w C:\WINDOWS\$NtUninstallKB905749$\umpnpmgr.dll
+ 2001-08-18 12:00:00 79,360 -c—-w C:\WINDOWS\$NtUninstallKB908519$\fontsub.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c—-w C:\WINDOWS\$NtUninstallKB908519$\spuninst\updspapi.dll
+ 2001-08-18 12:00:00 198,656 -c—-w C:\WINDOWS\$NtUninstallKB908519$\t2embed.dll
+ 2005-10-06 03:19:32 260,608 -c—-w C:\WINDOWS\$NtUninstallKB912919$\gdi32.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c—-w C:\WINDOWS\$NtUninstallKB912919$\spuninst\updspapi.dll
+ 2004-10-28 01:29:54 92,160 -c—-w C:\WINDOWS\$NtUninstallKB914389$\cscdll.dll
+ 2004-10-12 16:22:52 436,608 -c—-w C:\WINDOWS\$NtUninstallKB914389$\mrxsmb.sys
+ 2004-10-12 16:22:24 170,112 -c—-w C:\WINDOWS\$NtUninstallKB914389$\rdbss.sys
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c—-w C:\WINDOWS\$NtUninstallKB914389$\spuninst\updspapi.dll
+ 2001-08-18 12:00:00 200,064 -c—-w C:\WINDOWS\$NtUninstallKB919007$\rmcast.sys
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c—-w C:\WINDOWS\$NtUninstallKB919007$\spuninst\updspapi.dll
+ 2001-08-18 12:00:00 77,850 -c—-w C:\WINDOWS\$NtUninstallKB920670$\hlink.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe
+ 2005-10-12 23:12:33 371,424 -c—-w C:\WINDOWS\$NtUninstallKB920670$\spuninst\updspapi.dll
+ 2002-08-29 10:40:50 557,056 -c—-w C:\WINDOWS\$NtUninstallKB923191$\comctl32.dll
+ 2004-08-20 22:01:15 82,432 -c—-w C:\WINDOWS\$NtUninstallKB923191$\fldrclnr.dll
+ 2006-07-13 13:46:56 8,353,280 -c—-w C:\WINDOWS\$NtUninstallKB923191$\shell32.dll
+ 2005-10-12 23:12:26 213,216 -c—-w C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe
+ 2006-01-19 19:29:21 371,424 -c—-w C:\WINDOWS\$NtUninstallKB923191$\spuninst\updspapi.dll
+ 2004-08-20 22:01:15 700,928 -c—-w C:\WINDOWS\$NtUninstallKB923191$\sxs.dll
+ 2006-07-13 08:50:38 595,968 -c—-w C:\WINDOWS\$NtUninstallKB923191$\xpsp2res.dll
+ 2006-05-05 09:31:04 433,152 —-a-w C:\WINDOWS\Driver Cache\i386\mrxsmb.sys
+ 2005-03-02 00:36:43 1,900,032 ——w C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe
+ 2005-03-02 00:36:42 1,955,840 ——w C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
+ 2005-03-02 00:36:43 1,928,704 ——w C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe
+ 2005-03-02 01:33:36 2,040,832 ——w C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
+ 2006-08-16 09:27:12 11,776 —-a-w C:\WINDOWS\Driver Cache\i386\tunmp.sys
- 2008-01-27 00:05:00 1,429,504 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000001\NTUSER.DAT
+ 2008-01-29 20:19:42 1,429,504 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000001\NTUSER.DAT
- 2008-01-27 00:05:01 1,196,032 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000002\UsrClass.dat
+ 2008-01-29 20:19:43 1,196,032 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000002\UsrClass.dat
- 2008-01-27 00:05:01 1,429,504 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000003\NTUSER.DAT
+ 2008-01-29 20:19:43 1,429,504 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000003\NTUSER.DAT
- 2008-01-27 00:05:01 1,196,032 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000004\UsrClass.dat
+ 2008-01-29 20:19:43 1,196,032 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000004\UsrClass.dat
- 2008-01-27 00:05:02 5,042,176 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000005\NTUSER.DAT
+ 2008-01-29 20:19:44 5,042,176 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000005\ntuser.dat
- 2008-01-27 00:05:02 1,343,488 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000006\UsrClass.dat
+ 2008-01-29 20:19:44 1,343,488 —-a-w C:\WINDOWS\ERDNT\Hiv-backup\Users\
00000006\UsrClass.dat
- 2001-07-16 20:57:00 1,069,056 —-a-w C:\WINDOWS\Help\SBSI\Training\orun32.exe
+ 2005-05-04 20:33:52 1,077,312 —-a-w C:\WINDOWS\Help\SBSI\Training\orun32.exe
- 2002-12-17 22:43:00 10,752 —-a-w C:\WINDOWS\hh.exe
+ 2005-05-25 22:44:31 10,752 —-a-w C:\WINDOWS\hh.exe
- 2001-08-18 12:00:00 50,688 —-a-w C:\WINDOWS\MSAGENT\agentdpv.dll
+ 2005-04-22 05:20:24 51,712 —-a-w C:\WINDOWS\MSAGENT\agentdpv.dll
- 2002-08-29 10:40:48 59,392 —-a-w C:\WINDOWS\SYSTEM32\6to4svc.dll
+ 2006-08-16 12:14:23 95,232 —-a-w C:\WINDOWS\SYSTEM32\6to4svc.dll
+ 2001-08-18 12:00:00 51,200 —-a-w C:\WINDOWS\SYSTEM32\authz(3).dll
- 2001-08-18 12:00:00 51,200 —-a-w C:\WINDOWS\SYSTEM32\authz.dll
+ 2005-03-02 18:20:03 53,760 —-a-w C:\WINDOWS\SYSTEM32\authz.dll
- 2002-08-29 10:40:50 44,032 —-a-w C:\WINDOWS\SYSTEM32\basesrv.dll
+ 2004-06-17 17:58:35 47,616 —-a-w C:\WINDOWS\SYSTEM32\basesrv.dll
- 2002-08-29 10:40:50 1,021,952 —-a-w C:\WINDOWS\SYSTEM32\browseui.dll
+ 2006-09-04 06:23:53 1,027,072 —-a-w C:\WINDOWS\SYSTEM32\browseui.dll
- 2004-03-06 02:16:10 225,280 —-a-w C:\WINDOWS\SYSTEM32\catsrv.dll
+ 2005-07-26 04:30:34 220,672 —-a-w C:\WINDOWS\SYSTEM32\catsrv.dll
- 2004-03-06 02:16:10 594,944 —-a-w C:\WINDOWS\SYSTEM32\catsrvut.dll
+ 2005-07-26 04:30:38 581,632 —-a-w C:\WINDOWS\SYSTEM32\catsrvut.dll
- 2001-08-18 12:00:00 142,336 —-a-w C:\WINDOWS\SYSTEM32\cdfview.dll
+ 2004-12-07 23:43:02 143,360 —-a-w C:\WINDOWS\SYSTEM32\CDFVIEW.DLL
- 2001-08-18 12:00:00 2,028,032 —-a-w C:\WINDOWS\SYSTEM32\cdosys.dll
+ 2005-09-10 02:04:32 2,025,984 —-a-w C:\WINDOWS\SYSTEM32\cdosys.dll
- 2002-08-29 10:40:50 64,512 —-a-w C:\WINDOWS\SYSTEM32\ciodm.dll
+ 2006-06-22 05:19:48 64,512 —-a-w C:\WINDOWS\SYSTEM32\ciodm.dll
- 2004-03-06 02:16:10 110,080 —-a-w C:\WINDOWS\SYSTEM32\clbcatex.dll
+ 2005-07-26 04:30:38 110,080 —-a-w C:\WINDOWS\SYSTEM32\clbcatex.dll
- 2004-03-06 02:16:11 499,712 —-a-w C:\WINDOWS\SYSTEM32\clbcatq.dll
+ 2005-07-26 04:30:41 497,152 —-a-w C:\WINDOWS\SYSTEM32\clbcatq.dll
- 2004-03-06 02:16:10 64,512 —-a-w C:\WINDOWS\SYSTEM32\colbact.dll
+ 2005-07-26 04:30:41 62,464 —-a-w C:\WINDOWS\SYSTEM32\colbact.dll
- 2004-03-06 02:16:10 187,904 —-a-w C:\WINDOWS\SYSTEM32\Com\comadmin.dll
+ 2005-07-26 04:30:42 187,392 —-a-w C:\WINDOWS\SYSTEM32\Com\comadmin.dll
- 2002-08-29 10:40:50 557,056 —-a-w C:\WINDOWS\SYSTEM32\comctl32.dll
+ 2006-08-25 15:53:55 561,664 —-a-w C:\WINDOWS\SYSTEM32\comctl32.dll
- 2001-08-18 12:00:00 82,432 —-a-w C:\WINDOWS\SYSTEM32\COMREPL.DLL
+ 2005-07-26 04:30:42 89,600 —-a-w C:\WINDOWS\SYSTEM32\comrepl.dll
- 2004-03-06 02:16:11 1,194,496 —-a-w C:\WINDOWS\SYSTEM32\comsvcs.dll
+ 2005-07-26 04:30:49 1,179,136 —-a-w C:\WINDOWS\SYSTEM32\comsvcs.dll
- 2004-03-06 02:16:10 499,200 —-a-w C:\WINDOWS\SYSTEM32\comuid.dll
+ 2005-07-26 04:31:11 499,200 —-a-w C:\WINDOWS\SYSTEM32\comuid.dll
- 2002-08-29 10:40:50 53,248 —-a-w C:\WINDOWS\SYSTEM32\cryptsvc.dll
+ 2003-03-26 00:40:14 53,760 —-a-w C:\WINDOWS\SYSTEM32\cryptsvc.dll
- 2002-08-29 10:40:50 986,112 —-a-w C:\WINDOWS\SYSTEM32\danim.dll
+ 2005-10-21 01:08:44 986,112 —-a-w C:\WINDOWS\SYSTEM32\DANIM.DLL
- 2002-08-29 10:40:50 99,840 —-a-w C:\WINDOWS\SYSTEM32\dhcpcsvc.dll
+ 2006-05-19 12:15:32 103,936 —-a-w C:\WINDOWS\SYSTEM32\dhcpcsvc.dll
+ 2006-08-16 12:14:23 95,232 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\6to4svc.dll
- 2001-08-18 12:00:00 50,688 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\agentdpv.dll
+ 2005-04-22 05:20:24 51,712 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\agentdpv.dll
- 2001-08-18 12:00:00 51,200 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\authz.dll
+ 2005-03-02 18:20:03 53,760 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\authz.dll
+ 2006-09-04 06:23:53 1,027,072 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\browseui.dll
- 2004-03-06 02:16:10 225,280 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\catsrv.dll
+ 2005-07-26 04:30:34 220,672 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\catsrv.dll
- 2004-03-06 02:16:10 594,944 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\catsrvut.dll
+ 2005-07-26 04:30:38 581,632 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\catsrvut.dll
- 2001-08-18 12:00:00 142,336 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\cdfview.dll
+ 2004-12-07 23:43:02 143,360 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\CDFVIEW.DLL
- 2001-08-18 12:00:00 2,028,032 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\cdosys.dll
+ 2005-09-10 02:04:32 2,025,984 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\cdosys.dll
- 2004-03-06 02:16:10 110,080 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\clbcatex.dll
+ 2005-07-26 04:30:38 110,080 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\clbcatex.dll
- 2004-03-06 02:16:11 499,712 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\clbcatq.dll
+ 2005-07-26 04:30:41 497,152 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\clbcatq.dll
- 2004-03-06 02:16:10 64,512 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\colbact.dll
+ 2005-07-26 04:30:41 62,464 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\colbact.dll
- 2004-03-06 02:16:10 187,904 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comadmin.dll
+ 2005-07-26 04:30:42 187,392 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comadmin.dll
- 2001-08-18 12:00:00 82,432 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comrepl.dll
+ 2005-07-26 04:30:42 89,600 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comrepl.dll
- 2004-03-06 02:16:11 1,194,496 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comsvcs.dll
+ 2005-07-26 04:30:49 1,179,136 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comsvcs.dll
- 2004-03-06 02:16:10 499,200 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comuid.dll
+ 2005-07-26 04:31:11 499,200 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\comuid.dll
+ 2006-05-19 12:15:32 103,936 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\dhcpcsvc.dll
+ 2006-06-26 17:47:50 140,288 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\dnsapi.dll
- 2004-03-06 02:16:11 226,816 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\es.dll
+ 2005-07-26 04:31:12 227,328 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\es.dll
- 2001-08-18 12:00:00 1,018,368 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\esent.dll
+ 2005-10-20 22:33:08 991,232 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\esent.dll
- 2001-08-18 12:00:00 79,360 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\fontsub.dll
+ 2005-10-17 21:29:53 77,824 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\fontsub.dll
- 2001-08-18 12:00:00 77,850 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\hlink.dll
+ 2006-07-21 08:30:50 72,704 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\hlink.dll
- 2001-08-18 12:00:00 31,232 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\inetmib1.dll
+ 2006-08-16 12:14:23 31,232 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\inetmib1.dll
+ 2006-08-16 12:14:23 83,456 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\iphlpapi.dll
+ 2006-05-13 10:13:31 74,368 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipsec.sys
- 2001-08-18 12:00:00 332,800 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipsecsnp.dll
+ 2006-05-14 09:13:41 334,848 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipsecsnp.dll
+ 2006-05-14 09:13:41 159,744 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipsecsvc.dll
- 2001-08-18 12:00:00 364,032 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipsmsnap.dll
+ 2006-05-14 09:13:41 364,544 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipsmsnap.dll
+ 2006-08-16 09:28:55 48,640 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipv6.exe
+ 2006-08-16 12:14:23 54,272 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ipv6mon.dll
- 2003-08-28 14:57:04 143,872 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\itircl.dll
+ 2005-05-27 01:59:52 143,872 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\itircl.dll
- 2004-06-23 00:43:42 123,392 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\itss.dll
+ 2005-05-27 01:59:52 128,000 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\itss.dll
- 2001-08-18 12:00:00 144,896 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jgdw400.dll
+ 2006-05-27 03:19:50 163,840 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\JGDW400.DLL
- 2001-08-18 12:00:00 42,496 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jgpl400.dll
+ 2006-04-06 21:15:48 27,648 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\JGPL400.DLL
- 2003-01-13 18:57:58 589,881 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jscript.dll
+ 2006-05-18 05:58:56 458,752 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jscript.dll
- 2001-08-18 12:00:00 12,288 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jsproxy.dll
+ 2006-04-28 15:58:48 12,288 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\JSPROXY.DLL
+ 2006-07-05 10:46:36 928,768 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\kernel32.dll
- 2001-08-18 12:00:00 92,160 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\krnl386.exe
+ 2004-05-17 22:48:03 92,224 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\krnl386.exe
- 2001-08-18 12:00:00 15,360 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\linkinfo.dll
+ 2005-09-01 01:49:29 16,384 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\linkinfo.dll
- 2002-12-03 22:55:20 68,608 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\locator.exe
+ 2002-12-04 01:50:10 68,608 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\locator.exe
- 2001-08-18 12:00:00 67,584 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\magnify.exe
+ 2002-11-20 18:50:52 67,584 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\magnify.exe
- 2004-02-17 18:50:10 6,656 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\migregdb.exe
+ 2005-07-22 23:03:37 7,680 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\migregdb.exe
- 2004-03-06 02:16:10 367,616 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msdtcprx.dll
+ 2006-03-01 19:44:39 368,640 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msdtcprx.dll
- 2004-03-06 02:16:11 977,920 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msdtctm.dll
+ 2006-03-01 19:44:39 974,336 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msdtctm.dll
- 2004-03-06 02:16:10 150,528 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msdtcuiu.dll
+ 2006-03-01 19:44:39 150,528 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msdtcuiu.dll
- 2001-08-18 12:00:00 847,872 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msimsg.dll
+ 2005-05-04 19:45:36 884,736 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msimsg.dll
- 2001-08-18 12:00:00 39,936 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msisip.dll
+ 2005-05-04 19:45:36 15,360 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msisip.dll
- 2004-03-06 02:16:10 64,512 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mtxclu.dll
+ 2006-03-01 19:44:39 64,512 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mtxclu.dll
- 2004-03-06 02:16:10 82,432 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mtxoci.dll
+ 2006-03-01 19:44:39 83,456 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mtxoci.dll
- 2001-08-18 12:00:00 51,200 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\narrator.exe
+ 2002-11-20 18:50:52 51,200 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\narrator.exe
+ 2006-07-14 15:53:28 307,200 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\netapi32.dll
- 2001-08-18 12:00:00 82,944 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\netsh.exe
+ 2006-08-16 09:27:50 83,456 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\netsh.exe
- 2001-08-18 12:00:00 34,528 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio404.sys
+ 2004-05-17 22:43:07 34,560 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio404.sys
- 2001-08-18 12:00:00 35,632 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio411.sys
+ 2004-05-17 22:43:04 35,648 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio411.sys
- 2001-08-18 12:00:00 35,392 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio412.sys
+ 2004-05-17 22:43:09 35,424 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio412.sys
- 2001-08-18 12:00:00 34,528 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio804.sys
+ 2004-05-17 22:43:06 34,560 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntio804.sys
- 2001-08-18 12:00:00 13,312 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntvdmd.dll
+ 2004-06-17 17:58:35 13,312 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ntvdmd.dll
+ 2006-05-14 09:13:41 257,536 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\oakley.dll
- 2001-08-18 12:00:00 68,608 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\olecli32.dll
+ 2005-07-26 04:31:13 68,608 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\olecli32.dll
- 2001-08-18 12:00:00 34,304 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\olecnv32.dll
+ 2005-07-26 04:31:13 35,328 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\olecnv32.dll
- 2001-08-18 12:00:00 87,552 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\polstore.dll
+ 2006-05-14 09:13:41 98,304 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\polstore.dll
- 2003-05-30 13:00:02 1,246,208 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\quartz.dll
+ 2005-08-30 14:14:00 1,227,776 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\quartz.dll
- 2001-08-18 12:00:00 6,144 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\rasadhlp.dll
+ 2006-06-26 17:47:50 6,144 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\rasadhlp.dll
+ 2006-06-22 10:59:17 169,984 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\rasmans.dll
- 2001-08-18 12:00:00 200,064 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\rmcast.sys
+ 2006-07-13 08:41:42 199,936 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\rmcast.sys
+ 2006-09-04 06:23:53 1,351,680 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\shdocvw.dll
- 2002-09-19 16:27:40 126,464 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\shmedia.dll
+ 2002-09-30 17:58:10 125,440 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\shmedia.dll
- 2001-08-18 12:00:00 51,200 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\spoolsv.exe
+ 2005-06-10 23:55:46 53,248 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\spoolsv.exe
- 2002-11-14 17:50:42 226,816 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\srrstr.dll
+ 2005-10-27 19:06:37 226,816 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\srrstr.dll
- 2002-12-20 17:36:00 322,048 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\srv.sys
+ 2006-08-14 08:59:20 321,536 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\srv.sys
- 2001-08-18 12:00:00 87,040 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\srvsvc.dll
+ 2004-12-07 19:34:37 79,872 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\srvsvc.dll
- 2001-08-18 12:00:00 198,656 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\t2embed.dll
+ 2005-10-17 21:29:54 111,616 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\t2embed.dll
+ 2006-04-20 11:38:44 340,480 -c—-w C:\WINDOWS\SYSTEM32\DLLCACHE\tcpip.sys
+ 2006-08-16 09:28:57 205,120 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\tcpip6.sys
+ 2006-08-16 09:27:12 11,776 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\tunmp.sys
- 2004-03-06 02:16:10 97,280 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\txflog.dll
+ 2005-07-26 04:31:13 97,280 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\txflog.dll
- 2001-08-18 12:00:00 24,064 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\vdmdbg.dll
+ 2004-06-17 17:58:35 23,040 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\vdmdbg.dll
- 2001-08-18 12:00:00 25,600 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\winipsec.dll
+ 2006-05-14 09:13:41 29,184 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\winipsec.dll
- 2001-08-18 12:00:00 75,264 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ws2_32.dll
+ 2006-08-16 12:14:23 70,656 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\ws2_32.dll
+ 2006-08-16 12:14:23 13,312 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\wship6.dll
- 2001-08-18 12:00:00 9,728 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\xolehlp.dll
+ 2006-03-01 19:44:39 11,776 -c–a-w C:\WINDOWS\SYSTEM32\DLLCACHE\xolehlp.dll
- 2002-08-29 10:40:50 139,264 —-a-w C:\WINDOWS\SYSTEM32\dnsapi.dll
+ 2006-06-26 17:47:50 140,288 —-a-w C:\WINDOWS\SYSTEM32\dnsapi.dll
- 2002-08-29 09:07:22 57,984 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\ipsec.sys
+ 2006-05-13 10:13:31 74,368 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\ipsec.sys
- 2001-08-18 12:00:00 172,672 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\mrxdav.sys
+ 2005-04-26 01:58:03 173,312 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\mrxdav.sys
- 2002-08-29 08:59:54 407,552 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb.sys
+ 2006-05-05 09:31:04 433,152 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb.sys
- 2002-08-29 09:01:58 157,056 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\netbt.sys
+ 2003-07-08 21:48:54 149,248 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\netbt.sys
- 2002-08-29 08:58:50 163,328 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\rdbss.sys
+ 2006-05-05 09:40:31 166,656 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\rdbss.sys
- 2002-08-29 10:46:44 115,976 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\rdpwd.sys
+ 2005-06-10 04:30:15 116,104 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\rdpwd.sys
- 2001-08-18 12:00:00 200,064 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\RMCast.sys
+ 2006-07-13 08:41:42 199,936 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\rmcast.sys
- 2002-12-20 17:36:00 322,048 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\srv.sys
+ 2006-08-14 08:59:20 321,536 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\srv.sys
- 2002-08-29 08:58:12 332,928 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys
+ 2006-04-20 11:38:44 340,480 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys
- 2002-08-29 08:37:54 196,288 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\tcpip6.sys
+ 2006-08-16 09:28:57 205,120 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\tcpip6.sys
- 2002-08-29 08:35:44 9,856 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\tunmp.sys
+ 2006-08-16 09:27:12 11,776 —-a-w C:\WINDOWS\SYSTEM32\DRIVERS\tunmp.sys
- 2002-08-29 10:40:52 337,920 —-a-w C:\WINDOWS\SYSTEM32\dxtmsft.dll
+ 2006-06-09 19:35:50 351,744 —-a-w C:\WINDOWS\SYSTEM32\DXTMSFT.DLL
- 2002-08-29 10:40:52 194,560 —-a-w C:\WINDOWS\SYSTEM32\dxtrans.dll
+ 2006-06-09 19:35:30 192,512 —-a-w C:\WINDOWS\SYSTEM32\DXTRANS.DLL
- 2004-03-06 02:16:11 226,816 —-a-w C:\WINDOWS\SYSTEM32\es.dll
+ 2005-07-26 04:31:12 227,328 —-a-w C:\WINDOWS\SYSTEM32\es.dll
- 2008-01-26 15:55:36 378,448 —-a-w C:\WINDOWS\SYSTEM32\FNTCACHE.DAT
+ 2008-01-28 22:12:50 378,448 —-a-w C:\WINDOWS\SYSTEM32\FNTCACHE.DAT
- 2001-08-18 12:00:00 79,360 —-a-w C:\WINDOWS\SYSTEM32\fontsub.dll
+ 2005-10-17 21:29:53 77,824 —-a-w C:\WINDOWS\SYSTEM32\fontsub.dll
- 2004-03-30 01:48:36 257,536 —-a-w C:\WINDOWS\SYSTEM32\gdi32.dll
+ 2006-01-02 22:38:03 260,608 —-a-w C:\WINDOWS\SYSTEM32\gdi32.dll
- 2003-01-10 19:43:46 37,888 —-a-w C:\WINDOWS\SYSTEM32\hhsetup.dll
+ 2005-05-27 01:59:52 38,912 —-a-w C:\WINDOWS\SYSTEM32\hhsetup.dll
- 2001-08-18 12:00:00 77,850 —-a-w C:\WINDOWS\SYSTEM32\hlink.dll
+ 2006-07-21 08:30:50 72,704 —-a-w C:\WINDOWS\SYSTEM32\hlink.dll
- 2002-08-29 10:40:56 236,032 —-a-w C:\WINDOWS\SYSTEM32\icm32.dll
+ 2005-06-29 01:54:58 237,056 —-a-w C:\WINDOWS\SYSTEM32\icm32.dll
- 2002-08-29 10:40:56 231,424 —-a-w C:\WINDOWS\SYSTEM32\iepeers.dll
+ 2006-02-24 20:24:42 236,032 —-a-w C:\WINDOWS\SYSTEM32\IEPEERS.DLL
- 2001-08-18 12:00:00 31,232 —-a-w C:\WINDOWS\SYSTEM32\inetmib1.dll
+ 2006-08-16 12:14:23 31,232 —-a-w C:\WINDOWS\SYSTEM32\inetmib1.dll
- 2002-08-29 10:40:58 69,632 —-a-w C:\WINDOWS\SYSTEM32\inseng.dll
+ 2004-08-26 15:53:48 69,632 —-a-w C:\WINDOWS\SYSTEM32\INSENG.DLL
- 2002-08-29 10:40:58 82,944 —-a-w C:\WINDOWS\SYSTEM32\iphlpapi.dll
+ 2006-08-16 12:14:23 83,456 —-a-w C:\WINDOWS\SYSTEM32\iphlpapi.dll
- 2001-08-18 12:00:00 332,800 —-a-w C:\WINDOWS\SYSTEM32\ipsecsnp.dll
+ 2006-05-14 09:13:41 334,848 —-a-w C:\WINDOWS\SYSTEM32\ipsecsnp.dll
- 2002-08-29 10:40:58 155,648 —-a-w C:\WINDOWS\SYSTEM32\ipsecsvc.dll
+ 2006-05-14 09:13:41 159,744 —-a-w C:\WINDOWS\SYSTEM32\ipsecsvc.dll
- 2001-08-18 12:00:00 364,032 —-a-w C:\WINDOWS\SYSTEM32\ipsmsnap.dll
+ 2006-05-14 09:13:41 364,544 —-a-w C:\WINDOWS\SYSTEM32\ipsmsnap.dll
- 2002-08-29 10:41:26 60,928 —-a-w C:\WINDOWS\SYSTEM32\ipv6.exe
+ 2006-08-16 09:28:55 48,640 —-a-w C:\WINDOWS\SYSTEM32\ipv6.exe
- 2002-08-29 10:40:58 134,144 —-a-w C:\WINDOWS\SYSTEM32\ipv6mon.dll
+ 2006-08-16 12:14:23 54,272 —-a-w C:\WINDOWS\SYSTEM32\ipv6mon.dll
- 2003-08-28 14:57:04 143,872 —-a-w C:\WINDOWS\SYSTEM32\itircl.dll
+ 2005-05-27 01:59:52 143,872 —-a-w C:\WINDOWS\SYSTEM32\itircl.dll
- 2004-06-23 00:43:42 123,392 —-a-w C:\WINDOWS\SYSTEM32\itss.dll
+ 2005-05-27 01:59:52 128,000 —-a-w C:\WINDOWS\SYSTEM32\itss.dll
- 2001-08-18 12:00:00 144,896 —-a-w C:\WINDOWS\SYSTEM32\jgdw400.dll
+ 2006-05-27 03:19:50 163,840 —-a-w C:\WINDOWS\SYSTEM32\JGDW400.DLL
- 2001-08-18 12:00:00 42,496 —-a-w C:\WINDOWS\SYSTEM32\jgpl400.dll
+ 2006-04-06 21:15:48 27,648 —-a-w C:\WINDOWS\SYSTEM32\JGPL400.DLL
- 2003-01-13 19:57:58 589,881 —-a-w C:\WINDOWS\SYSTEM32\jscript.dll
+ 2006-05-18 05:58:56 458,752 —-a-w C:\WINDOWS\SYSTEM32\jscript.dll
- 2001-08-18 12:00:00 12,288 —-a-w C:\WINDOWS\SYSTEM32\jsproxy.dll
+ 2006-04-28 15:58:48 12,288 —-a-w C:\WINDOWS\SYSTEM32\JSPROXY.DLL
- 2002-08-29 10:41:00 272,896 —-a-w C:\WINDOWS\SYSTEM32\kerberos.dll
+ 2005-06-15 17:50:24 285,184 —-a-w C:\WINDOWS\SYSTEM32\kerberos.dll
- 2002-08-29 10:41:00 930,304 —-a-w C:\WINDOWS\SYSTEM32\kernel32.dll
+ 2006-07-05 10:46:36 928,768 —-a-w C:\WINDOWS\SYSTEM32\kernel32.dll
- 2001-08-18 12:00:00 92,160 —-a-w C:\WINDOWS\SYSTEM32\krnl386.exe
+ 2004-05-17 22:48:03 92,224 —-a-w C:\WINDOWS\SYSTEM32\krnl386.exe
- 2006-06-19 20:19:42 571,184 —-a-w C:\WINDOWS\SYSTEM32\LegitCheckControl.dll
+ 2007-10-11 19:12:48 1,468,968 —-a-w C:\WINDOWS\SYSTEM32\LegitCheckControl.dll
- 2001-08-18 12:00:00 15,360 —-a-w C:\WINDOWS\SYSTEM32\linkinfo.dll
+ 2005-09-01 01:49:29 16,384 —-a-w C:\WINDOWS\SYSTEM32\linkinfo.dll
- 2002-12-03 22:55:20 68,608 —-a-w C:\WINDOWS\SYSTEM32\locator.exe
+ 2002-12-04 01:50:10 68,608 —-a-w C:\WINDOWS\SYSTEM32\locator.exe
- 2004-03-30 01:48:36 667,648 —-a-w C:\WINDOWS\SYSTEM32\lsasrv.dll
+ 2004-10-28 01:29:54 681,984 —-a-w C:\WINDOWS\SYSTEM32\lsasrv.dll
- 2001-08-18 12:00:00 67,584 —-a-w C:\WINDOWS\SYSTEM32\magnify.exe
+ 2002-11-20 18:50:52 67,584 —-a-w C:\WINDOWS\SYSTEM32\magnify.exe
+ 2002-08-29 10:41:02 68,096 —-a-w C:\WINDOWS\SYSTEM32\mscms(2).dll
- 2002-08-29 10:41:02 68,096 —-a-w C:\WINDOWS\SYSTEM32\mscms.dll
+ 2005-06-29 01:54:58 68,608 —-a-w C:\WINDOWS\SYSTEM32\mscms.dll
- 2004-03-06 02:16:10 367,616 —-a-w C:\WINDOWS\SYSTEM32\msdtcprx.dll
+ 2006-03-01 19:44:39 368,640 —-a-w C:\WINDOWS\SYSTEM32\msdtcprx.dll
- 2004-03-06 02:16:11 977,920 —-a-w C:\WINDOWS\SYSTEM32\msdtctm.dll
+ 2006-03-01 19:44:39 974,336 —-a-w C:\WINDOWS\SYSTEM32\msdtctm.dll
- 2004-03-06 02:16:10 150,528 —-a-w C:\WINDOWS\SYSTEM32\msdtcuiu.dll
+ 2006-03-01 19:44:39 150,528 —-a-w C:\WINDOWS\SYSTEM32\msdtcuiu.dll
- 2002-08-29 10:41:04 2,833,920 —-a-w C:\WINDOWS\SYSTEM32\mshtml.dll
+ 2006-06-30 15:28:26 2,703,872 —-a-w C:\WINDOWS\SYSTEM32\MSHTML.DLL
- 2002-08-29 10:41:04 229,888 —-a-w C:\WINDOWS\SYSTEM32\msieftp.dll
+ 2005-08-05 17:23:27 230,400 —-a-w C:\WINDOWS\SYSTEM32\msieftp.dll
- 2002-08-29 10:41:26 64,512 —-a-w C:\WINDOWS\SYSTEM32\msiexec.exe
+ 2005-05-04 19:45:36 78,848 —-a-w C:\WINDOWS\SYSTEM32\msiexec.exe
- 2002-08-29 10:41:04 305,664 —-a-w C:\WINDOWS\SYSTEM32\msihnd.dll
+ 2005-05-04 19:45:36 271,360 —-a-w C:\WINDOWS\SYSTEM32\msihnd.dll
- 2001-08-18 12:00:00 847,872 —-a-w C:\WINDOWS\SYSTEM32\msimsg.dll
+ 2005-05-04 19:45:36 884,736 —-a-w C:\WINDOWS\SYSTEM32\msimsg.dll
- 2001-08-18 12:00:00 39,936 —-a-w C:\WINDOWS\SYSTEM32\msisip.dll
+ 2005-05-04 19:45:36 15,360 —-a-w C:\WINDOWS\SYSTEM32\msisip.dll
- 2002-08-29 10:41:06 132,096 —-a-w C:\WINDOWS\SYSTEM32\msrating.dll
+ 2005-02-24 17:54:42 132,096 —-a-w C:\WINDOWS\SYSTEM32\MSRATING.DLL
- 2002-08-29 10:41:08 496,128 —-a-w C:\WINDOWS\SYSTEM32\mstime.dll
+ 2006-03-03 21:13:30 498,176 —-a-w C:\WINDOWS\SYSTEM32\MSTIME.DLL
- 2004-03-06 02:16:10 64,512 —-a-w C:\WINDOWS\SYSTEM32\mtxclu.dll
+ 2006-03-01 19:44:39 64,512 —-a-w C:\WINDOWS\SYSTEM32\mtxclu.dll
- 2004-03-06 02:16:10 82,432 —-a-w C:\WINDOWS\SYSTEM32\mtxoci.dll
+ 2006-03-01 19:44:39 83,456 —-a-w C:\WINDOWS\SYSTEM32\mtxoci.dll
- 2001-08-18 12:00:00 51,200 —-a-w C:\WINDOWS\SYSTEM32\narrator.exe
+ 2002-11-20 18:50:52 51,200 —-a-w C:\WINDOWS\SYSTEM32\narrator.exe
- 2004-06-08 22:02:21 306,688 —-a-w C:\WINDOWS\SYSTEM32\netapi32.dll
+ 2006-07-14 15:53:28 307,200 —-a-w C:\WINDOWS\SYSTEM32\netapi32.dll
+ 2002-08-29 10:41:08 154,112 —-a-w C:\WINDOWS\SYSTEM32\netman(3).dll
- 2001-08-18 12:00:00 82,944 —-a-w C:\WINDOWS\SYSTEM32\netsh.exe
+ 2006-08-16 09:27:50 83,456 —-a-w C:\WINDOWS\SYSTEM32\netsh.exe
- 2002-08-29 10:41:08 238,080 —-a-w C:\WINDOWS\SYSTEM32\newdev.dll
+ 2003-01-31 23:46:24 238,080 —-a-w C:\WINDOWS\SYSTEM32\newdev.dll
- 2002-08-29 04:22:26 33,808 —-a-w C:\WINDOWS\SYSTEM32\ntio.sys
+ 2004-05-17 22:43:02 33,840 —-a-w C:\WINDOWS\SYSTEM32\ntio.sys
- 2001-08-18 12:00:00 34,528 —-a-w C:\WINDOWS\SYSTEM32\ntio404.sys
+ 2004-05-17 22:43:07 34,560 —-a-w C:\WINDOWS\SYSTEM32\ntio404.sys
- 2001-08-18 12:00:00 35,632 —-a-w C:\WINDOWS\SYSTEM32\ntio411.sys
+ 2004-05-17 22:43:04 35,648 —-a-w C:\WINDOWS\SYSTEM32\ntio411.sys
- 2001-08-18 12:00:00 35,392 —-a-w C:\WINDOWS\SYSTEM32\ntio412.sys
+ 2004-05-17 22:43:09 35,424 —-a-w C:\WINDOWS\SYSTEM32\ntio412.sys
- 2001-08-18 12:00:00 34,528 —-a-w C:\WINDOWS\SYSTEM32\ntio804.sys
+ 2004-05-17 22:43:06 34,560 —-a-w C:\WINDOWS\SYSTEM32\ntio804.sys
- 2002-08-29 08:04:56 1,947,904 —-a-w C:\WINDOWS\SYSTEM32\ntkrnlpa.exe
+ 2005-03-02 00:36:42 1,955,840 —-a-w C:\WINDOWS\SYSTEM32\ntkrnlpa.exe
- 2002-08-29 09:03:30 2,042,240 —-a-w C:\WINDOWS\SYSTEM32\ntoskrnl.exe
+ 2005-03-02 01:33:36 2,040,832 —-a-w C:\WINDOWS\SYSTEM32\ntoskrnl.exe
- 2002-08-29 10:41:28 395,776 —-a-w C:\WINDOWS\SYSTEM32\ntvdm.exe
+ 2004-06-12 01:14:34 396,288 —-a-w C:\WINDOWS\SYSTEM32\ntvdm.exe
- 2001-08-18 12:00:00 13,312 —-a-w C:\WINDOWS\SYSTEM32\ntvdmd.dll
+ 2004-06-17 17:58:35 13,312 —-a-w C:\WINDOWS\SYSTEM32\ntvdmd.dll
- 2002-08-29 10:41:10 328,704 —-a-w C:\WINDOWS\SYSTEM32\oakley.dll
+ 2006-05-14 09:13:41 257,536 —-a-w C:\WINDOWS\SYSTEM32\oakley.dll
- 2004-03-06 02:16:11 1,183,744 —-a-w C:\WINDOWS\SYSTEM32\ole32.dll
+ 2005-07-26 04:31:13 1,190,400 —-a-w C:\WINDOWS\SYSTEM32\ole32.dll
- 2001-08-18 12:00:00 68,608 —-a-w C:\WINDOWS\SYSTEM32\olecli32.dll
+ 2005-07-26 04:31:13 68,608 —-a-w C:\WINDOWS\SYSTEM32\olecli32.dll
- 2001-08-18 12:00:00 34,304 —-a-w C:\WINDOWS\SYSTEM32\olecnv32.dll
+ 2005-07-26 04:31:13 35,328 —-a-w C:\WINDOWS\SYSTEM32\olecnv32.dll
- 2002-08-29 10:41:28 212,480 —-a-w C:\WINDOWS\SYSTEM32\osk.exe
+ 2002-11-20 18:50:52 212,480 —-a-w C:\WINDOWS\SYSTEM32\osk.exe
- 2002-08-29 10:41:10 34,304 —-a-w C:\WINDOWS\SYSTEM32\pngfilt.dll
+ 2005-04-27 15:53:06 34,816 —-a-w C:\WINDOWS\SYSTEM32\PNGFILT.DLL
- 2001-08-18 12:00:00 87,552 —-a-w C:\WINDOWS\SYSTEM32\polstore.dll
+ 2006-05-14 09:13:41 98,304 —-a-w C:\WINDOWS\SYSTEM32\polstore.dll
- 2003-05-30 13:00:02 1,246,208 —-a-w C:\WINDOWS\SYSTEM32\quartz.dll
+ 2005-08-30 14:14:00 1,227,776 —-a-w C:\WINDOWS\SYSTEM32\quartz.dll
- 2002-08-29 10:41:10 1,349,120 —-a-w C:\WINDOWS\SYSTEM32\query.dll
+ 2006-06-22 05:19:49 1,350,144 —-a-w C:\WINDOWS\SYSTEM32\query.dll
- 2001-08-18 12:00:00 6,144 —-a-w C:\WINDOWS\SYSTEM32\rasadhlp.dll
+ 2006-06-26 17:47:50 6,144 —-a-w C:\WINDOWS\SYSTEM32\rasadhlp.dll
- 2002-08-29 10:41:10 158,720 —-a-w C:\WINDOWS\SYSTEM32\rasmans.dll
+ 2006-06-22 10:59:17 169,984 —-a-w C:\WINDOWS\SYSTEM32\rasmans.dll
+ 2008-01-28 05:06:07 815,616 —-a-w C:\WINDOWS\SYSTEM32\Restore\rstrlog.dat
- 2004-03-06 02:16:11 263,680 —-a-w C:\WINDOWS\SYSTEM32\rpcss.dll
+ 2005-07-26 04:31:13 276,992 —-a-w C:\WINDOWS\SYSTEM32\rpcss.dll
- 2002-08-29 10:41:12 1,341,440 —-a-w C:\WINDOWS\SYSTEM32\shdocvw.dll
+ 2006-09-04 06:23:53 1,351,680 —-a-w C:\WINDOWS\SYSTEM32\shdocvw.dll
- 2004-06-10 19:51:27 8,350,720 —-a-w C:\WINDOWS\SYSTEM32\shell32.dll
+ 2006-07-13 13:46:56 8,353,280 —-a-w C:\WINDOWS\SYSTEM32\shell32.dll
- 2004-04-08 17:12:20 406,528 —-a-w C:\WINDOWS\SYSTEM32\shlwapi.dll
+ 2005-08-31 23:49:30 409,088 —-a-w C:\WINDOWS\SYSTEM32\SHLWAPI.DLL
- 2002-09-19 16:27:40 126,464 —-a-w C:\WINDOWS\SYSTEM32\shmedia.dll
+ 2002-09-30 17:58:10 125,440 —-a-w C:\WINDOWS\SYSTEM32\shmedia.dll
- 2002-08-29 10:41:12 116,224 —-a-w C:\WINDOWS\SYSTEM32\shsvcs.dll
+ 2004-10-28 01:29:54 116,736 —-a-w C:\WINDOWS\SYSTEM32\shsvcs.dll
- 2006-04-03 15:40:10 14,048 ——w C:\WINDOWS\SYSTEM32\spmsg.dll
+ 2007-10-08 19:46:18 14,640 ——w C:\WINDOWS\SYSTEM32\spmsg.dll
- 2001-08-18 12:00:00 51,200 —-a-w C:\WINDOWS\SYSTEM32\spoolsv.exe
+ 2005-06-10 23:55:46 53,248 —-a-w C:\WINDOWS\SYSTEM32\spoolsv.exe
- 2002-11-14 17:50:42 226,816 —-a-w C:\WINDOWS\SYSTEM32\srrstr.dll
+ 2005-10-27 19:06:37 226,816 —-a-w C:\WINDOWS\SYSTEM32\srrstr.dll
- 2001-08-18 12:00:00 87,040 —-a-w C:\WINDOWS\SYSTEM32\srvsvc.dll
+ 2004-12-07 19:34:37 79,872 —-a-w C:\WINDOWS\SYSTEM32\srvsvc.dll
- 2001-08-18 12:00:00 198,656 —-a-w C:\WINDOWS\SYSTEM32\t2embed.dll
+ 2005-10-17 21:29:54 111,616 —-a-w C:\WINDOWS\SYSTEM32\t2embed.dll
- 2002-08-29 10:41:18 233,984 —-a-w C:\WINDOWS\SYSTEM32\tapisrv.dll
+ 2005-07-08 16:09:48 238,592 —-a-w C:\WINDOWS\SYSTEM32\tapisrv.dll
- 2002-08-29 10:41:28 71,168 —-a-w C:\WINDOWS\SYSTEM32\telnet.exe
+ 2005-05-11 00:09:48 72,192 —-a-w C:\WINDOWS\SYSTEM32\telnet.exe
- 2004-03-06 02:16:10 97,280 —-a-w C:\WINDOWS\SYSTEM32\txflog.dll
+ 2005-07-26 04:31:13 97,280 —-a-w C:\WINDOWS\SYSTEM32\txflog.dll
+ 2002-08-29 10:41:18 107,008 —-a-w C:\WINDOWS\SYSTEM32\umpnpmgr(3).dll
- 2002-08-29 10:41:18 107,008 —-a-w C:\WINDOWS\SYSTEM32\umpnpmgr.dll
+ 2005-08-23 03:51:10 111,104 —-a-w C:\WINDOWS\SYSTEM32\umpnpmgr.dll
- 2002-08-29 10:41:18 455,680 —-a-w C:\WINDOWS\SYSTEM32\urlmon.dll
+ 2006-08-31 01:42:56 461,824 —-a-w C:\WINDOWS\SYSTEM32\URLMON.DLL
- 2002-11-01 20:26:46 528,896 —-a-w C:\WINDOWS\SYSTEM32\user32.dll
+ 2005-03-02 18:20:03 561,152 —-a-w C:\WINDOWS\SYSTEM32\user32.dll
- 2002-08-29 10:41:26 230,400 —-a-w C:\WINDOWS\SYSTEM32\USMT\migwiz.exe
+ 2002-11-20 19:22:36 230,400 —-a-w C:\WINDOWS\SYSTEM32\USMT\migwiz.exe
- 2001-08-18 12:00:00 24,064 —-a-w C:\WINDOWS\SYSTEM32\vdmdbg.dll
+ 2004-06-17 17:58:35 23,040 —-a-w C:\WINDOWS\SYSTEM32\vdmdbg.dll
+ 2006-03-17 00:49:30 25,600 ——w C:\WINDOWS\SYSTEM32\verclsid.exe
- 2002-10-23 13:55:02 1,694,336 —-a-w C:\WINDOWS\SYSTEM32\win32k.sys
+ 2005-10-04 01:38:18 1,799,552 —-a-w C:\WINDOWS\SYSTEM32\win32k.sys
- 2002-08-29 10:41:18 99,328 —-a-w C:\WINDOWS\SYSTEM32\win32spl.dll
+ 2005-06-11 02:41:12 102,400 —-a-w C:\WINDOWS\SYSTEM32\win32spl.dll
- 2002-08-29 10:41:18 599,040 —-a-w C:\WINDOWS\SYSTEM32\wininet.dll
+ 2006-06-23 16:33:58 575,488 —-a-w C:\WINDOWS\SYSTEM32\WININET.DLL
- 2001-08-18 12:00:00 25,600 —-a-w C:\WINDOWS\SYSTEM32\winipsec.dll
+ 2006-05-14 09:13:41 29,184 —-a-w C:\WINDOWS\SYSTEM32\winipsec.dll
- 2002-11-01 20:26:44 272,896 —-a-w C:\WINDOWS\SYSTEM32\winsrv.dll
+ 2005-09-01 01:49:31 278,016 —-a-w C:\WINDOWS\SYSTEM32\winsrv.dll
- 2002-08-29 10:41:20 247,808 —-a-w C:\WINDOWS\SYSTEM32\wow32.dll
+ 2004-06-04 00:43:01 245,760 —-a-w C:\WINDOWS\SYSTEM32\wow32.dll
- 2001-08-18 12:00:00 75,264 —-a-w C:\WINDOWS\SYSTEM32\ws2_32.dll
+ 2006-08-16 12:14:23 70,656 —-a-w C:\WINDOWS\SYSTEM32\ws2_32.dll
- 2002-08-29 10:41:20 13,312 —-a-w C:\WINDOWS\SYSTEM32\wship6.dll
+ 2006-08-16 12:14:23 13,312 —-a-w C:\WINDOWS\SYSTEM32\wship6.dll
- 2001-08-18 12:00:00 9,728 —-a-w C:\WINDOWS\SYSTEM32\XOLEHLP.DLL
+ 2006-03-01 19:44:39 11,776 —-a-w C:\WINDOWS\SYSTEM32\xolehlp.dll
- 2004-06-30 23:59:25 158,720 —-a-w C:\WINDOWS\SYSTEM32\xpob2res.dll
+ 2006-08-16 09:42:14 159,232 —-a-w C:\WINDOWS\SYSTEM32\xpob2res.dll
+ 2005-05-17 00:43:39 7,168 ——w C:\WINDOWS\SYSTEM32\xpsp3res.dll
+ 2005-08-31 23:49:28 925,184 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1740_x-ww_7cb8ab44\comctl32.dll
+ 2006-03-17 05:04:12 925,184 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1816_x-ww_7d33ba0e\comctl32.dll
+ 2006-07-13 13:46:53 925,184 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1873_x-ww_7d39bb85\comctl32.dll
+ 2006-08-25 15:53:52 925,184 —-a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.1891_x-ww_7d3bbc01\comctl32.dll
.
– Snapshot reset to current date –
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-28 07:54 68856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-04-13 12:20 59040]
"SSC_UserPrompt"="C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-11-02 16:59 218240]
"Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2005-08-13 09:45 100056]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 02:43 83608]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [2000-01-21 03:15:54 65588]
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Digital Line Detect.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk
backup=C:\WINDOWS\pss\Digital Line Detect.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
–a—— 2007-06-11 04:25 6731312 C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdaptecDirectCD]
–a—— 2002-04-10 16:44 679936 C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gcasServ]
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
–a—— 2006-02-23 14:45 278528 C:\Program Files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MimBoot]
C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask]
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
–a—— 2006-07-21 18:41 155648 C:\Program Files\QuickTime\qttask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealPlayer]
–a—— 2006-05-26 15:59 1003520 C:\Program Files\Real\RealPlayer\realplay.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
–a—— 2003-11-17 00:32 151597 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
R0 YPN30F;YPN30F;C:\WINDOWS\System32\drivers\YPN30F.sys [2002-12-09 11:10]
S3 ypn30s;ypn30s;C:\WINDOWS\System32\DRIVERS\ypn30s.sys [2002-12-09 11:11]
S3 ypn30u;Samsung YP-N30 Audio Player Control Driver;C:\WINDOWS\System32\Drivers\ypn30u.sys [2002-12-09 07:11]
S4 hpt3xx;hpt3xx;C:\WINDOWS\System32\DRIVERS\hpt3xx.sys [2001-08-18 07:00]
.
Contents of the 'Scheduled Tasks' folder
"2008-01-29 19:42:06 C:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer - Mike.job"
- C:\PROGRA~1\NORTON~1\Navw32.exeh/task:
"2008-01-26 14:21:40 C:\WINDOWS\Tasks\Norton AntiVirus - Weekly Scan - Mike.job"
- C:\PROGRA~1\NORTON~1\NAVW32.EXE`/task:
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-01-29 15:27:11
Windows 5.1.2600 Service Pack 1 NTFS
scanning hidden processes …
scanning hidden autostart entries …
scanning hidden files …
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-01-29 15:31:14
ComboFix-quarantined-files.txt 2008-01-29 20:31:09
ComboFix2.txt 2008-01-27 14:58:43
.
2008-01-28 12:39:24 — E O F —
